last executing test programs: 7.001262017s ago: executing program 4 (id=2569): syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x20e000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}]}, 0x34}}, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000040)={0x0, 0x0, 0x0, {0x0, 0xa}, {}, @const={0x0, {0x0, 0x8, 0x4, 0x81}}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4808000010001fff3a4ee9bfd5c3a3696c40af0b", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e"], 0x3}}, 0x0) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_trie\x00') preadv(r2, &(0x7f00000010c0)=[{&(0x7f0000000040)=""/84, 0x54}, {&(0x7f00000000c0)=""/4096, 0x1000}], 0x2, 0x1, 0x0) 6.156362456s ago: executing program 4 (id=2588): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000980)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x32) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000980)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x32) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), 0xffffffffffffffff) r6 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="230900000000000000000100000005000700076de3759200090000000000060002000000000008000a001100000008001700", @ANYRES32=r6, @ANYBLOB], 0x3c}}, 0x0) r7 = socket(0x1e, 0x2, 0x0) recvmsg$can_bcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f00000000c0)=""/211, 0xd3}], 0x1, &(0x7f00000002c0)=""/73, 0x49, 0x7000000}, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r7, 0x10f, 0x81, &(0x7f0000000480), 0x4) sendmsg$tipc(r7, &(0x7f0000000500)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10, &(0x7f00000008c0)=[{&(0x7f0000000540)="8f", 0x1}], 0x1}, 0x0) 6.089515551s ago: executing program 4 (id=2589): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d00000007000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) bind$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x4e22, @multicast2}, 0x10) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0xe0e, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x4}, @TCA_RATE={0x6}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x4}]}, 0x48}}, 0x0) 6.089121391s ago: executing program 4 (id=2590): mknod(0x0, 0x8000, 0x0) r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000940)=@raw={'raw\x00', 0x9, 0x3, 0x2e8, 0x0, 0xffffffff, 0xffffffff, 0x110, 0xffffffff, 0x218, 0xffffffff, 0xffffffff, 0x218, 0xffffffff, 0x3, &(0x7f0000000900), {[{{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x10, 0x4, 0x80, 0xffffff0a, 'pptp\x00', 'syz0\x00', {0x380000000000000}}}}, {{@ipv6={@local, @remote, [0x0, 0xff000000, 0x0, 0xffffffff], [0x0, 0xffffff00, 0xff000000], 'tunl0\x00', 'ip6gretap0\x00', {}, {}, 0x33, 0x1, 0x1, 0x4}, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@mcast2, [0xffffff00, 0xffffff00, 0xff0000ff, 0xffffffff], 0x4e20, 0x4e24, 0x4e23, 0x4e20, 0x52, 0x65, 0x8, 0x5, 0x40}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x348) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={0xffffffffffffffff, 0x3, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, 0x0, &(0x7f0000000140)='GPL\x00'}, 0x90) bpf$LINK_GET_NEXT_ID(0x1f, 0x0, 0x0) bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) r2 = openat$cgroup_int(r1, &(0x7f0000000080)='pids.max\x00', 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000300)={0x0, @in={{0x2, 0x4e20, @remote}}}, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKMODE={0x5}, @IFLA_VFINFO_LIST={0x8, 0x16, 0x0, 0x1, [{0x4}]}]}, 0x30}}, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[@ANYBLOB='-0'], 0x9) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x19, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x403, &(0x7f0000000100)={[{@noblock_validity}, {@errors_continue}, {@errors_remount}, {@minixdf}, {@jqfmt_vfsv0}, {@usrjquota, 0x2e}], [{@smackfsfloor={'smackfsfloor', 0x3d, 'ext4\x00'}}, {@fowner_lt}], 0x2c}, 0x0, 0x45a, &(0x7f0000000480)="$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") 5.975561151s ago: executing program 4 (id=2592): r0 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000003c0)='cdg\x00', 0x4) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x3}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={0x1}, 0x4) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000140)=@generic={&(0x7f0000000100)='./file0\x00'}, 0x18) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000200), 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000580)=@bpf_tracing={0x1a, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000f5efffffff000000a80c81000000000000000000f884785209853dc40f516a4051f2eae5f5f0d50a9c6f73b9ec2a07fd323600fec17111695fa62847e9cb4ee2695118aa56696949691e638f332b20f00f2c8d9e5dff06107084034eb8dd80d21f3eaf4ce5588ad272"], &(0x7f00000001c0)='syzkaller\x00', 0x8001, 0x64, &(0x7f00000002c0)=""/100, 0x41000, 0x4, '\x00', 0x0, 0x17, r2, 0x8, &(0x7f0000000340)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000000380)={0x5, 0xa, 0x6, 0xc9}, 0x10, 0xccd1, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000540)=[{0x0, 0x5, 0xc, 0x9}, {0x1, 0x3, 0x6, 0xc}, {0x5, 0x5}], 0x10, 0x4}, 0x90) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) connect$inet(r1, &(0x7f0000000180)={0x2, 0x0, @local}, 0x10) 5.422372866s ago: executing program 4 (id=2620): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011000100000000000000002eeed88696", @ANYRES32=r3], 0x20}}, 0x0) 4.949072925s ago: executing program 0 (id=2624): perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x1, &(0x7f0000000380)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_aout(r0, &(0x7f00000002c0)=ANY=[], 0xc1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000005, 0x13, r0, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x2, 0x410000) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x0, 0x8}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x0, 0xc55}}}]}, 0x3c}}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'geneve0\x00', 0x0}) sendto$packet(r2, &(0x7f0000000180)="0b051000e0ff020002004788aa96a13bb1000000000088641100", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x0, r7}, 0x14) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000080)={0xa, 0x1, 0x9, 0xb, 0x13, "ab3fc4262d889b78"}) r8 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x1}, 0x62) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7020000f3ffffb0150000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) shmdt(0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r10) symlinkat(0x0, 0xffffffffffffffff, 0x0) setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f0000000000)={r7, 0x1, 0x6, @local}, 0x10) getsockopt$inet_int(r1, 0x10d, 0x93, 0x0, &(0x7f00000000c0)) ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, &(0x7f00000003c0)=ANY=[@ANYBLOB="000000000000000006000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000001010000e004080000000000ffffff7f000000000000000000000000010000000000000000000000000000000000000000000010000000000000000000000000e03c00000d000000000000000900000000000000090000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000022df00"/575]) 4.948596515s ago: executing program 3 (id=2625): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x8}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev}, 0x1c) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="9feb01001800000000000000ab000000ab0000000a0000000f00000000000001000000001b0078000f0000000000000a02000000080000000000000700000000060000000400000f0300000004000000040000000400000001000000ffff000008000000010000000000000008000000010000008000000006000000954148000000000000000300000000030000000400000002000000100000000000000e04000000000080000c0000000000000b050000000c000000000000010000000011003a00000000302e5f6161003000"], &(0x7f0000000800)=""/234, 0xce, 0xea, 0x1, 0x7}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, r1, 0x8000002, 0x3, 0x4}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRESOCT, @ANYBLOB="00020000000000000800000000000000000000f8882dfb4e3375000000000000"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) io_setup(0x3ff, &(0x7f0000000500)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_type(r4, &(0x7f00000000c0), 0x2, 0x0) rmdir(&(0x7f0000000700)='./cgroup/../file0\x00') close_range(r3, 0xffffffffffffffff, 0x0) socket$igmp(0x2, 0x3, 0x2) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r5 = socket$inet6(0xa, 0x3, 0x1) setsockopt$inet6_int(r5, 0x29, 0x19, &(0x7f0000000380)=0x7, 0x4) r6 = socket(0x10, 0x3, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413ec50000000f"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, 0x2}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x9, 0xb75, 0xd9b0, 0x0, 0xffffffffffffffff, 0x80000000, '\x00', 0x0, r3, 0x1, 0x1, 0x3, 0xd}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r7}, 0x10) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000040)={0x7fffffff}, 0x10) sendmsg$kcm(r6, &(0x7f00000016c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x800) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x36, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x10, 0x1f}, 0x90) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000000040), 0x55af) 4.3964532s ago: executing program 0 (id=2626): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000001000010400002b2e640a7f3f70e8c3ef", @ANYRES32=0x0, @ANYBLOB="00000000000000001400128009000100766574680000000004000280080029000000000008001b0000000000"], 0x44}}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000ac0)={0x1b, 0x0, 0x0, 0x10d, 0x0, 0xffffffffffffffff, 0x2f8f3f81, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x3}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0xe, 0x200005, 0xffffffff, 0x4f63, 0x800}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000380)={r1, &(0x7f0000000040), &(0x7f0000000040)=""/25, 0x2}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000b40)=@bloom_filter={0x1e, 0x5, 0x0, 0x0, 0x419, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4, 0x3, 0x2000000000000e}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff9ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00010000850000000d000000b7000000000000009500000000000000496cf2827fb43a431ca711fcd0cdfa146ec56175037958e271f60d25b7937f02c8695e5a1b24df41dc10d1e8bf076d83923dd29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b318e2ec0e1a00897a74a0091ff110026e6d2ef831ab7ea0c34f17efd36ef3bb622003b538dfd8e012e79578e51bc53099e90fbdb2ca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e060e3670ef0e789f93781965f1328d6704902cbe7bc0cb82d2789cb132b8667c21476619f28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fbce841f8a97be6148ba532e6ea09c346dfebd31a08b32808b80200000000009dd27080e71113610e1019c12a73748b049604fa72c64ed858e8327ef01fb6c86adac12233f9a1fb9c2aec61ce63a3462fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2ed8576a3f7f3deadd7130856f756436303767d2e24f29e5dad9796edb697a6e97180aabc18cae2ed4b4390af9a9ceafd07ed00b0000002cab154ad029a119ca3c972780870014601c3c975d5aec84222fff0d7216fdb0d3a0ec4be3e563112f4b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a2a71bc85018e5ff2c910496f19afc91b47683db01a469398685211bbae0e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bde792c88c5b8dcdcc22ee17476d738992533ac2a9f5a699593f084419cae0b4183fb01c73f99857399537f5dc2acb72c7eae993fc9eb22d130665b6341da114f08cd0509d380578673fffffffd7917f23837a6b24db0e067345560942fa629fbef2461c96a08707671315c302fae29187d4f5c06a960fd37c10223fdae7ed04935c3c90d3add8eebc8619d73415e6adcda2130f5011e48455b588b90dfae158b94f50adab988dd8e12baf5cc9398c88607a08009c2977aab37d9a44cfc1c7b4000000000000fa47742f6c5b9c4b11e7d7262a1457c39495c826b956ba859ac8e3c177b91bd7d5ca1664fe2f3ced8468911806e8916dc15e21644db60c2498d5d16d7d915836ab26c169482008ef069dc42749289f854797f2f900c2a12d8c38a967c1bbe09315c29877a331bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d4a3e1a9e90d76c1993e0799d4894ee7f8249dc1e342892129369ee1b85afa1a5be5f6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1038debd64cbe359454a3f2239cfe35f81b7aded448859968ff0e90500d0b07c0dd00490f167e6d5c1109681739dc33f75b20428d6474a0a91ee90b8de802c6b538622e6bbcb80f87b415263c401e64ed69a2f75409000000000000001d695c4559b82cabac3cccadc1e1c19af4e03020abf5ff0433d660f20898d2a045d009a0ffb20a77c9af2b80c05184a66d30bbea2ca45a4d6d6d1e6e79aef42355b17402a500587b603306a5af8d867d80a07f10b854b1c8c768c001496fa99ce5b5040be9194123e918914a71ad5a8521fb956dbc60f7d9719b55b3abb6bba3d113a680a8d46fe074c83fbe378a3889e8145b2eaceab05ef932c6e4f8ef0ed0d818a7b76d839cf3c6775e19f0b7e70803000000b168c38fa32e49563cfee3a7f0fc18bfa32c418cef875fb49e2989172a1bcd1e30280bc586e79a5dd8076c248e7d6e97b3ce267dd4e27b6ef206660090bb2164474cef378f97ca33fccf363361dcdba10c1547053453d0c9aec91a24079b21d52fb5516bf0c28ef37aa76442f6083dc99cd61afaf6be45d7b00d3639f2f10ac2d5c759c3e5468f5874c24411d415b6b085fb73a2d7c3852e0e658ffeb4e863428a792bee94f6cd895424360e0464f9d7ea425f2fa6aa0000000000000000532ff181c985f54b7ae20aa5e63055b4d6a36fa98a44e379d2bccf977c3e88538f406b598307c9912fb097601f3f88a2ea6fd1f9320cfe7f09aed4d1e72d26e5c7a93854c8e9f7f15f02e177ce23f43a154b42e26f037e8a01377cbd3f509e6e540c9ba9c2a589ac5d8ad67a65e9a44c576dc24452eaa9d819e2b04bdd1c000000070000000000000000000000005333c6199c12dcd92689192727a7267c47cf897853d160100b39b613faefe16bd91fc105dddd77ab929b95032d3717fa9fbdc2bdc0e98ae2c3f23a6131e2879f0484ee3bfe30b92dd493be66c2242f8184733b80ba28e824910844df31f3d4bb2f89049c5f6d63956995747639964217aacfe548fc869098aa8e07e51dbc9e2d4db3c5f79fd355222ec2a00cf7f2ccd6dd6d2dc2a815d8314221a5472f1318a9dfbec5a759579caf3262129b14e99040b5d91398e17df85c25ccae973eecc7d187168d5c9cd848d566cc1758763f0000009c927da38d83314480b15e23138c5b877a72bd4cf74a299df4fbfc8e6ea96939f15d254d9033c5a45706bda78ab602000000000000000000113a3065a478d1de98be3a66f6fbf68f2f5693050fa56db62e2f99cf916059ee364dad078fc88d17cbde37a2270f90a60afe8548f4c579b09c333382c6e7a316ac03aa23d379836b96173a5541fa96c27e7fb6d2585d828aa330f3438d8487912bb7742be1502e706644f7a937451beb7a5f6ca3ef21e8cb8f841af6d54334d82a8b816b6daccf0c66162f897623ee325d714f9f10636a7573582ff31c7f9c6f767c806ef4af486cc19a5355bdc814cb5557c6fa6404179c865980b0815b907a7f268e97828c196f5ac033d395a217b4e1e45663023a0292003c36a3b7461fc2c8566e0f3f693bfacae26aa2b7d17962989ccb943633c080aacc9b7d311c251686fc66aa80bf41a5bf6cd72d5aa995820fb318fad61a79a61d0a969fd6018ac9f131fe02fe31d565723cbf9b63841e21417fc29a3e7a03886d80566ae001861799a4aad91c72139e681ced8625b675dfbd6d458d4b2d9e6d565430248172ad942cdb41639f4113896827c8806e049218cd1eef89d6b9b14dd707da40705c07f878263ff9b71ccf28ec50178c7aac83bef7bd1045a5e4bcb6cfe05e2ac3e17c1f8f12ddf5b6770ce0da8cb3aba3a935a6b737b6d3ebf2c715dcc11c5759bd0acdecf333f2b77c52fb2251336bbd92f73ad1a30bb9162bd9d699c49d824b827f3e7c1096354946e09922db25904c83262c6dcb87457e4abefa0e9dcb17d79c173895b74aae2ed4419662690a16494e7b27d0d2688c69b4be3d21b783195f6a5e5dc5c07c73f0d0f0670db10ac9ef5b8295ff88df734e3c6ab8555c0390f962cbf559bce9c42e1034dba78997b2877b485d9d4ae2fcd3e757b84319879d0337785773c940af6e57d162f4606d101def01199325c8676a32e26303560271b720216d95e0013265a45b02bd2414bebda89b7b5e71e70e0000000000000000"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0x34, 0x10000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x6}, 0x2c) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000bc0)='blkio.bfq.io_service_bytes\x00', 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r3}, &(0x7f0000000e80), &(0x7f00000000c0)=r2}, 0x20) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x5, 0x4, 0x8, 0x1, 0x0, r3}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r4, &(0x7f0000000040), 0x0}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={0xffffffffffffffff, 0x58, &(0x7f0000000300)}, 0x10) ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f0000000500)) socket$inet(0x2, 0x3, 0x4) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000ec0)=@newqdisc={0xac, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@TCA_STAB={0x88, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x1, 0x3, 0x0, 0x7, 0x1, 0x7f, 0x9, 0x3}}, {0xa, 0x2, [0x4, 0x8ce, 0xffff]}}, {{0x1c, 0x1, {0x10, 0x7, 0x5, 0xfffffffe, 0x2, 0x6, 0x0, 0xa}}, {0x18, 0x2, [0x3c30, 0x17c, 0x9, 0x0, 0x1000, 0xb, 0x7, 0x7ffd, 0x3f, 0x10]}}, {{0x1c, 0x1, {0x7, 0x5, 0x7, 0x92, 0x1, 0x6, 0x6255, 0x4}}, {0xc, 0x2, [0x5cb, 0xc82, 0x9, 0x7]}}]}]}, 0xac}}, 0x0) r6 = creat(&(0x7f0000000040)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)) fcntl$setstatus(r6, 0x4, 0x6000) socket$nl_xfrm(0x10, 0x3, 0x6) r7 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'dummy0\x00'}) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x8c, 0x1, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x6, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080005000000e8fe55a1190015000600142603600e1209000d0000000401a80016000a00014006000000036010fab94dcf5c0461c1d67f6f94007134cf6ee18000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}, {&(0x7f00000003c0)="e6dabf4921046095b83ae03fce4958294662295fd34332859ce7856bfcdd71b5e944549f04a7c590669ccbd744b835a4793ab682bff9067a2b8b785241a8bfee1df3a6da63b4cac79c9192fef819313d17791f46d392112a43598e53ea9c7f482f0923367244", 0x66}, {&(0x7f00000005c0)="ca19ef0485c097797907be4d26f5b6ac39bdd0f3ceadc01a840ac1fc9005a203f577932e7948ed783dce9fb2e4e2e67ad7ecbe6ba5ccb27d8e9149fc8690d9cfaf0562e9cf30ec0def365d3623b579ff400d5d21b3190b9003b70cede75790d4e638a455edaefcb47e5f1f6a031f7fdebbb89012632805", 0x77}, {&(0x7f0000000700)="7f5efe79bde60c000d9f29662cc0457a8bfd32717b2ee26ae1b7ea4aeaaf09151c5b48f902b92838e2bccac61da263aa2935c7a7ae3a2c698248cb7b7a89b87a512603d16b", 0x45}], 0x4}, 0x0) r9 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r9, 0x40505330, &(0x7f0000000680)={{}, {0xe}, 0x0, 0x2}) 4.39425469s ago: executing program 1 (id=2627): bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000005c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000200000000000000000000f27a0a00ff0000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0x2000000, 0x0, 0xfffffffffffffdb7, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 4.39358577s ago: executing program 2 (id=2628): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000010c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000940)=0x707987cd) sendmsg$inet(r1, &(0x7f0000000500)={0x0, 0xc00, 0x0}, 0x0) 4.345308104s ago: executing program 3 (id=2629): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x4000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtfilter={0x540, 0x2c, 0xd27, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, r1, {}, {}, {0xb}}, [@TCA_RATE={0x6, 0x5, {0x1}}, @TCA_RATE={0x6, 0x5, {0x68, 0xc}}, @filter_kind_options=@f_matchall={{0xd}, {0x4f4, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0xd, 0xfff3}}, @TCA_MATCHALL_ACT={0x4e0, 0x2, [@m_nat={0x160, 0x17, 0x0, 0x0, {{0x8}, {0x54, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x2f3, 0x2, 0x4, 0x6, 0x2}, @multicast2, @rand_addr=0x64010102, 0xff000000, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xc3, 0x3, 0xffffffffffffffff, 0x7, 0xff}, @dev={0xac, 0x14, 0x14, 0x24}, @remote, 0xffffff00}}]}, {0xe6, 0x6, "dc227e8bd2430b240bcb9541e81f7f20f5711f6f07403169263fa1e912313b82f546bc79d48634ccf2a980f913635b81ee4fa2de149f85c35baa661ca1216440d0ef8356e7c2a91c3cd940ca90a5572145fdf517e11ed86c2a7fc9635a3e278a503503eb5eaa7be3eaaf72e9c2aa37599708d258f55646f0a947bb2d7ea4efd56a5c3c5d7200ed364508a79c895e1d099772dacd409e337db487ba3bde56e47f209d694fc729893639f8b9cf9a492ea9f2cc4b320f77925149225c41f899b97ff1979e55112b996e86961b6c42fe1281efd195279517b6e0fdfa73879e104a5d750f"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_gact={0x6c, 0x7, 0x0, 0x0, {{0x9}, {0x40, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x1, 0x2064, 0x8}}, @TCA_GACT_PARMS={0x18, 0x2, {0x3, 0x9, 0x3, 0xf, 0x6}}, @TCA_GACT_PARMS={0x18, 0x2, {0x2, 0x4, 0x20000000, 0x1, 0x6}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_simple={0x170, 0x8, 0x0, 0x0, {{0xb}, {0x54, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0xb436, 0x4, 0x3, 0xe, 0x7}}, @TCA_DEF_DATA={0x8, 0x3, 'GPL\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x8, 0x0, 0x20000000, 0x3}}, @TCA_DEF_PARMS={0x18, 0x2, {0xd3, 0x1f8a1666, 0x20000000, 0xb5}}]}, {0xf3, 0x6, "e7f7568b59889020388d3bb51ad08d8d88b16c6affaf196c4046ac4a2a9fd803f84a4d9c576c97c487a5a04ff64ec05364eb91ef03a3e0a5cf93ac53e79a9c1352e8dbac20b163ff37fe518adfe1a313a84513a77eb0820dc5a8975aebcbccfaac3584aa18681ef53c2b54a79aa394d4c274cbe8e27e837975f33445eeb7f075b1e80948ef2272142706e9b4101c508d18eae0dd6b27503ce8554ecb43c1f34eed6212144923dcf3bb7b9f4b5d117161fa8989084d3d42e4bafa901a7f0bb490e74b21c669057898a74162fee6654a3a1c761f1b13a3c23bdc29f9475afd12f397bfdb89ba59d00046f1a62e58d58a"}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_connmark={0x130, 0x18, 0x0, 0x0, {{0xd}, {0x90, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0xb25, 0x7, 0x5, 0x9}, 0x89c}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1, 0xfffffff7, 0x20000000, 0x4, 0x2}, 0x4}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x4d, 0x10, 0x1, 0x8}, 0x4}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1, 0xfffffffa, 0x0, 0x0, 0x2}, 0xa}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x4, 0x7, 0x6, 0x6eef, 0x3ff}, 0x1}}]}, {0x72, 0x6, "6d6c937b6f18451de5660a094fcbf6733368cfee3c5f91ec64289f71b8eacf28acd84b4e7c58fd940e29536ff66b26fac5b9fe4ecfeda4fcb83958ddaeecd519644e255237b56edda27de3b15efc3d94d7fdc841f8ccb8ca2f5509fd1de340ebf4aa1fc872b2d57e1f924ca70655"}, {0xc, 0x7, {0x2b99d97435e649c7}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_connmark={0x70, 0x11, 0x0, 0x0, {{0xd}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x39df, 0xb, 0x10000000, 0x3, 0x7}, 0x4e44}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x20000000, 0x0, 0xffff}, 0x3}}]}, {0x5, 0x6, 'X'}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}]}}, @TCA_RATE={0x6, 0x5, {0x5, 0x71}}]}, 0x540}}, 0x8b5) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 3.737163864s ago: executing program 0 (id=2630): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000d80), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) syz_clone(0x1000, 0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0) (fail_nth: 13) 3.736846954s ago: executing program 1 (id=2631): r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r1) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0xffffffffffffffff, r2}}, './file0\x00'}) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x8000, &(0x7f0000000100)={[{@mode={'mode', 0x3d, 0x9}}, {@mpol={'mpol', 0x3d, {'prefer', '', @val={0x3a, [0x2f, 0x32]}}}}, {@gid={'gid', 0x3d, r3}}, {@huge_always}, {@huge_always}, {@nr_inodes={'nr_inodes', 0x3d, [0x31, 0x37, 0x2d, 0x2d, 0x33]}}], [{@obj_user={'obj_user', 0x3d, ')(\\:\\}$$'}}]}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adbacc32}) (async) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adbacc32}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r4, &(0x7f0000000500)=ANY=[@ANYBLOB="0400001c03040600020009000300ffffffffffffaaaaaaaaaaaa86dd"], 0x21b) (async) write$tun(r4, &(0x7f0000000500)=ANY=[@ANYBLOB="0400001c03040600020009000300ffffffffffffaaaaaaaaaaaa86dd"], 0x21b) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="b4050000000000006110a400000000001f010000000000009500000000000000704fff7649b0983f42d01eccd13e9ec8a0a0ba6f00720c38fb17c6973e6361f5710065aaf625b96d173daf810865508ce8e9e1fa28e8bc8620294d24b6e609fa8a42156ea7394b8e0f09362f9e2576fd38cecff65abf747c96f88c9e0d54c135a1666ac39044329aaff9afb6"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0x7, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 3.736482094s ago: executing program 2 (id=2632): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000001180)='./file0\x00', 0x480, &(0x7f0000000040)={[{@mblk_io_submit}, {@usrjquota}]}, 0x3, 0x77d, &(0x7f0000001940)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) getdents(r0, 0xfffffffffffffffd, 0x58) 3.736257864s ago: executing program 3 (id=2633): perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x3d) 2.965351297s ago: executing program 0 (id=2634): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00') r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000240)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) socket$qrtr(0x2a, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000440)=[{0x6}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000340), r0) fchmod(r3, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0008}]}) sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0)="1c00000012", 0x5, 0x0, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000108500000075000000a50000002300000095"], 0x0}, 0x90) process_madvise(0xffffffffffffffff, &(0x7f00000003c0)=[{0xffffffffffffffff}, {0x0}], 0x2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000140)='mmap_lock_acquire_returned\x00', r4}, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000140), 0xfecc) bpf$BPF_LINK_UPDATE(0x21, &(0x7f0000000080), 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="380000c2fbf8d7716f8b2dbe001200", @ANYRES32=0x0, @ANYBLOB="008000000002000005001000cc000000080004000700000008001b0005000000"], 0x38}, 0x1, 0x0, 0x0, 0x4004080}, 0x8000) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2c0000001400210100000000000000000a000000", @ANYRES32, @ANYBLOB="14000000ff010000000000000000008000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000300010000004500000025000000190011000600ad000200000000000006040000000000000000", 0x39}], 0x1) 2.965058907s ago: executing program 1 (id=2635): perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$bt_hci(r0, 0x84, 0x83, &(0x7f00000017c0)=""/4130, &(0x7f0000000000)=0x1022) 2.963775317s ago: executing program 2 (id=2636): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000040000000000000000c00000095"], &(0x7f0000000240)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000140)={'wg2\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=@ipv6_newnexthop={0x50, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x5}, @NHA_OIF={0x8, 0x5, r2}, @NHA_ENCAP={0x28, 0x8, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x24, 0x1, {{}, [@loopback]}}}]}, 0x50}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x4000000) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000800)=@deltaction={0x14c, 0x31, 0x10, 0x70bd28, 0x25dfdbfc, {}, [@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xf93c}}, {0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}]}, @TCA_ACT_TAB={0x80, 0x1, [{0x10, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0x10, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xcc2db33}}, {0x10, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x200}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0x10, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}]}, @TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x190000}}]}, @TCA_ACT_TAB={0x50, 0x1, [{0xc, 0x10, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0x10, 0x3, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}]}, @TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x1a, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xd}}]}, @TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}]}, @TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}]}, 0x14c}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000040000000000000000c00000095"], &(0x7f0000000240)='GPL\x00'}, 0x90) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) socket(0x2a, 0x2, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000140)={'wg2\x00'}) (async) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=@ipv6_newnexthop={0x50, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x5}, @NHA_OIF={0x8, 0x5, r2}, @NHA_ENCAP={0x28, 0x8, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x24, 0x1, {{}, [@loopback]}}}]}, 0x50}}, 0x0) (async) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x4000000) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000800)=@deltaction={0x14c, 0x31, 0x10, 0x70bd28, 0x25dfdbfc, {}, [@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xf93c}}, {0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}]}, @TCA_ACT_TAB={0x80, 0x1, [{0x10, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0x10, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xcc2db33}}, {0x10, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x200}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0x10, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}]}, @TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x190000}}]}, @TCA_ACT_TAB={0x50, 0x1, [{0xc, 0x10, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0x10, 0x3, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}]}, @TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x1a, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xd}}]}, @TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}]}, @TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}]}, 0x14c}}, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) 2.963478907s ago: executing program 3 (id=2637): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000600)=ANY=[@ANYRES8=r0, @ANYRES16=r0, @ANYRES64=r1, @ANYRESDEC=r1, @ANYRES8=r1, @ANYRES8=r0, @ANYRES32=r1], 0x30}, 0x1, 0x0, 0x0, 0xc0}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, &(0x7f0000000000)) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000000)=ANY=[], 0xfd, 0x357, &(0x7f0000000180)="$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") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mq_open(&(0x7f0000000740)=')(\x012\vc\x18\xa8]J\xd2\b\xc1\xc0l\xba<\xb8\xd4\x99H\x10\xac\xff\xf2m\xd0\x0fM\xd4`\x1a\xcd\xedE\x9c\xe6\x9a\x9b\xe8\xb3\x1a\x1e\xb4\xe3\x00\\[j-\xc7\x1d\xe6\xc2U\x85Z\xe6\x04\x9a+\xc2\xfc\xdc\xf8r\x84\x12\x12[\x85\x9b', 0x80, 0x0, &(0x7f0000000100)={0x6, 0x405, 0x40000000000007, 0x6}) r2 = socket(0x10, 0x3, 0x0) recvfrom$inet_nvme(r2, 0x0, 0x0, 0x0, 0x0, 0x0) shmat(0x0, &(0x7f0000ffc000/0x3000)=nil, 0x0) syz_open_dev$usbfs(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, 0x0) syz_genetlink_get_family_id$tipc2(0x0, r3) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x10d, 0x15, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0xe501, 0x3, 0x208, 0xb8, 0xa, 0x1000000, 0x0, 0x0, 0x170, 0x230, 0x230, 0x170, 0x223, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x3b9, 'syz1\x00'}}}, {{@ip={@local, @loopback, 0x0, 0x0, 'netdevsim0\x00', 'pimreg\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x3c0, 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x268) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0x5, 0x0, &(0x7f0000000180)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x57, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000800)={r6, 0x0, 0xe, 0x0, &(0x7f00000007c0)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x5b, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.037480483s ago: executing program 1 (id=2638): socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='hugetlb.2MB.rsvd.limit_in_bytes\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000180)=ANY=[@ANYBLOB='-1'], 0x27) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x492492492492846, 0x0) fcntl$setstatus(r3, 0x4, 0x2400) ppoll(&(0x7f0000000040)=[{r3, 0x314}], 0x1, 0x0, 0x0, 0x0) bpf$ENABLE_STATS(0x20, &(0x7f0000000080), 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x20000005, 0x0, 0x0, 0x8000, 0x4b, &(0x7f00000001c0)=""/75, 0x0, 0x0, '\x00', 0x0, 0x34, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5d, 0xffffffffffffffff}, 0x90) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000140), r5) sendmsg$NLBL_CALIPSO_C_REMOVE(r4, 0x0, 0x0) connect$unix(r2, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$KDGETKEYCODE(0xffffffffffffffff, 0x4b4c, 0x0) 2.036884713s ago: executing program 2 (id=2639): socket$netlink(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$l2tp(0x2, 0x2, 0x73) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000e40)=ANY=[@ANYBLOB="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"/3576], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) socket$inet_udplite(0x2, 0x2, 0x88) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$inet(0x2, 0x80001, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)) socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f0000000100)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0xe00, &(0x7f0000000140)={&(0x7f0000001ac0)=@newlink={0x44, 0x10, 0x609, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x44}}, 0x0) 1.09538081s ago: executing program 0 (id=2640): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x0, 0x4, 0x8, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x0, 0xc, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = fsopen(&(0x7f0000000100)='gadgetfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) (fail_nth: 1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = fsmount(r4, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000200)={r3, r5, 0x1, 0x0, @val=@iter={0x0}}, 0x40) socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) fcntl$F_GET_RW_HINT(r6, 0x40b, 0xfffffffffffffffd) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @local}, 0x1c) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x2, &(0x7f0000000180)=[{0x4c, 0x4}, {0x0, 0x0, 0x3f, 0xfffffffc}]}) bpf$PROG_LOAD(0x5, 0x0, 0x0) 1.09301918s ago: executing program 1 (id=2641): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mq_open(&(0x7f0000001140)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\xe0\x9d\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xdf\x15\f]\x15\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb', 0x42, 0x0, 0x0) r4 = mq_open(&(0x7f0000000000)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\bLTrw\x88\x9e \t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\x01\x00\x00\x00a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\x00\x17\xc0\xa3\xd5\xf9\xaa\x98/\xa4v\xe4)I\xf3+[e\x95\x89\x99\xca\x8e\xc5\xd3\\T\xf0\x1a|5\xfff\xff\x99\xa4\xbb\x9e#oR\xa4\xf1\xba\x04c\xb3-\xf7R\xb85\xb5\xdb\xe9?\xfa/\xdf\xb4R\xbfx=\v_j\x8e\xb0\'\xf4\xe5\xff!\xe1\xbf\x82e\xb1\x9b\x8d\xf3L\t\xd21\x9cbwV\xc8\xcc\xe4\x96M_w\xbc\xdf9\b\r\xf6\x95\xae\xb5,\x92\x8c\xc0DQm\x80\xd1w\xa2\x1a\x12Z\xe5\xf4H\xf7D\n\x96J\x93\xfb\xf0$\x9f\xf7\xa2\xae$O\xa3\xb6\xf5\x98\xd3\v\x00\x86\xa5\x8b\x81\x04\xaf\x03s\xe5\x86>\x0e\xa6\xe6\x1aV\x17\x8b\xed\xa7\'\xd0\r_\xe8,XVR\x13\xe5%\xb9\x88\xb8W@D\'\x17A\xc8\x80\x02J\xd4V\x00wH(\xc5v\f\xc9\xb6\xdf..$\xe6P(_\xf1\'\xc1:\xa3\xcb\xd9\xd1\xc7\x13\x99Md\x1dc\xf1\'j\x03!\x13\xd1\xb8\xbf\xe6\xb2M\b/\rp\xa5\x00\x00\x00\x00\x13\xb7i\xf4\f\xb0uF\x88r\x89\xc4\xb5\x86\\\x8a\xdd\xf8\xae\xd8\xfe\xed\xca\xe0\xb9C\xd8\x19\xec\xd4\xd4\x9e\xf2\xd1\xac\xfa', 0x0, 0x0, 0x0) fcntl$setlease(r4, 0x400, 0x0) mq_unlink(&(0x7f0000000340)='eth0\x00') r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7020000f3ffffb0150000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r6) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'macvtap0\x00', 0x0}) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(r9, 0x8933, &(0x7f0000000240)={'wg2\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r8}, @IFLA_HSR_SLAVE2={0x8, 0x2, r10}]}}}]}, 0x40}}, 0x0) r11 = dup(r1) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r11, 0x84, 0x6, 0x0, 0x0) syz_emit_ethernet(0x6a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa08004600005c00000020880b0000000000000800000086dd080088be0000000010000000010000000000000008"], 0x0) r12 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r12, 0x84, 0x22, &(0x7f00000000c0)={0x0, 0x2, 0x8}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x0, 0x0}, &(0x7f0000000280)=0x10) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r13 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r13, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r14 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r14, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r14, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x0, 0x0, 0xffffffff}, 0x1c) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000386dd0a00100000004000000060ec97000fc82f00fe8000400000000000000000000000aaff020000000000000000000000000001"], 0xffe) 1.09251707s ago: executing program 2 (id=2642): bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000005c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000200000000000000000000f27a0a00ff0000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0x2000000, 0x0, 0xfffffffffffffdb7, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.09196898s ago: executing program 3 (id=2643): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x0, 0x4, 0x8, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x0, 0xc, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000bf080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000580)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="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"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000500)='itimer_state\x00', r5}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='itimer_state\x00', r6}, 0x10) setitimer(0x0, 0x0, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r8 = fsopen(&(0x7f0000000100)='gadgetfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r9 = fsmount(r8, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000200)={r7, r9, 0x1, 0x0, @val=@iter={0x0}}, 0x40) socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) fcntl$F_GET_RW_HINT(r10, 0x40b, 0xfffffffffffffffd) 3.70184ms ago: executing program 0 (id=2644): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r1, &(0x7f0000000080)='hugetlb.2MB.rsvd.limit_in_bytes\x00', 0x2, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYRES64=r1], 0x27) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x492492492492846, 0x0) fcntl$setstatus(r3, 0x4, 0x2400) ppoll(&(0x7f0000000040)=[{r3, 0x4714}, {r0, 0x82a}, {r1, 0x40}, {r3, 0x4000}, {r0, 0x2020}], 0x5, 0x0, 0x0, 0x0) bpf$ENABLE_STATS(0x20, &(0x7f0000000080), 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x20000005, 0x0, 0x0, 0x8000, 0x4b, &(0x7f00000001c0)=""/75, 0x0, 0x0, '\x00', 0x0, 0x34, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5d, 0xffffffffffffffff}, 0x90) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000140), r5) sendmsg$NLBL_CALIPSO_C_REMOVE(r4, 0x0, 0x0) connect$unix(r2, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_int(r6, &(0x7f0000001180)='hugetlb.2MB.rsvd.limit_in_bytes\x00', 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000000040)=ANY=[@ANYBLOB='P'], 0x27) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$KDGETKEYCODE(0xffffffffffffffff, 0x4b4c, 0x0) 1.02368ms ago: executing program 1 (id=2645): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000100)={0x18, 0x0, {0x11ff, @dev, 'bond_slave_1\x00'}}, 0x1e) (async) ioctl$PPPOEIOCSFWD(r0, 0x4008b100, &(0x7f0000000140)={0x18, 0x0, {0x3, @multicast, 'caif0\x00'}}) (async, rerun: 32) r1 = socket$kcm(0x10, 0x2, 0x0) (async, rerun: 32) r2 = socket$pppoe(0x18, 0x1, 0x0) getsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f00000001c0), &(0x7f0000000200)=0x4) (async, rerun: 64) sendmsg$kcm(r1, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001980)=[{&(0x7f0000000040)="2e00000010008108040f80ecdb4cb92e0a480e000f000000e8bd6efb250314000e000100240248ff050005001200", 0x2e}, {&(0x7f00000018c0)="38086f9640c9c62f5c8674332349437236a57d1066a71d0546c10bffe3e70c54bc06b669f5c58f5c", 0x28}, {&(0x7f0000001900)="4c3a20e134f819bcca3273d758765c97f7fe43bbdd561207ae6bb4f8d5ae3a65c7d55d80801df047962fa50efafd28e6a2d3ee43887c06c71d7da46d6e2249caa68d64ea2224baa5fe82dc51022650d1117cd8c14e4cda2f820348de05c32d244c21dd54", 0x64}], 0x3}, 0x10) (async, rerun: 64) connect$pppoe(r0, &(0x7f00000000c0)={0x18, 0x0, {0x4, @remote, 'erspan0\x00'}}, 0x1e) (async) connect$pppoe(r2, &(0x7f0000000240)={0x18, 0x0, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}, 'macsec0\x00'}}, 0x1e) connect$pppoe(r0, &(0x7f0000000180)={0x18, 0x0, {0x0, @broadcast, 'ip6tnl0\x00'}}, 0x32) (async, rerun: 32) sendmsg$inet(0xffffffffffffffff, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000005c0)="eaa66c89dba92e637c839402518985c3356382f770f428c379d85afb3c0ed2fed1e9e1271907ba6f42aef09c401489c1cc34f3b10ffb422b38dbc23797a8335d022a933bdab9d288dd2aef7f0b42bc221e77c7b92b793e55c178b6679302521153cf51c4b5ed17c587683e656651adf2b6d850e74c9850503492a2e207d1aff3b8111d8c8b88d59d69cca32331d658be8047a68aa1984f2b4e4357330e5b31397ebe49d5ac0671ba5b75cc990662c171160d0fab87b55d72d786488ba5fe0a391e37cf33be4dfa8fa07c6b73ddcea7c2479d692ef0ef6b9091816f4c660d10f86772b7887a5d1158ec355ac3841247874ef1d1c8ce3c9ec066bc14cb845360ba16fbe2d384241b0ebde428aa22ad31e8b078c6fa425a66585984580f55e753835ab7aae06d692353fb1d393c02ed863ecde84f35904db89492cc5ed704e56a28071d86d036b120b2184019bed399b764a64d9fa6bdcc609d57e0c752fae9a3bc4e2da3ca96f2f16f4fbdfc82a2ba6d553346039c98947ab4978fc3185ef12aeea3dd948459d320c3feb405bacf4d2bdabb7908f4b89cbf0d9d2e78f5fad9d39f0c17b0011616cb7a3e1349a6e0542f5f5f668606df99eca82e9c6e3163122d722b084d8d5de8eececa24895ca6db6652a40d6de4fd5997b29d18037b92daa8e335ce30a485c5f0cefeb04c64cdf60be07d241320590bec81c63909f140ec4a72f0d67c7214b6692fe0b5f0f0c819cf67249c51024dd90ea4a62ac99d2627dd74377fbcdb40344c7a0c3a45468383f9de93523d8e662d29a85cab2a1292a4c55f2c3a916841fbeaa4a84902a97b7aaf5275b3580abfe9625414970e2cab16f9a10b13d77a4fec2fdd20ece318db80acd81fd02513bfbfb66b47aab8389174b83e3e156e1ca45204bc62882b032ce7b3f723968ea3809bfe599ec1ec9c6202aa2d044fb5e2ad8a249c388dae8438b6fcf117d4d1db7b546c8df2f57adca83266832fb12b3cf4f65f73116c01d4821104e44b7bf09925ad3922616d06902d56cf1f64c19af86dd3f6007e403b3451eb99292bdb59d13dd5f03e1156e45bc0ff308a9ec6fac027cbc647f692d31053025e6080ff810427722840b6294196efd252ed9ef4d010504768af21129da76bcde92512a0aeaccbabc5ddfb7b86ab53947b60514adbb8ec788616ddb76fae25d92c1450fe025fa4e0bb5061bc1487fcdc35c54e5887dd2fdbf820393c4231d9dcfeaa19d10d19d5b544886279fb39002e030790cab1937de312b28981e7bb2518b386268e4bfe6a5ce79689c05f30e99610bb14aa67c555a14e1799b880bf361a67517ba4f672ae0e287c7d00dfa86edc724b1fba9f67ce6dc3bb4aef771d9715889aca324dc3d16eabf703d48460c6ad00a8c1df00496d457038d66627d5de58308a986db652952de1932ff736360e258aa641dbdd6fe808502e525afcc4b0f05f90f125cdd95a1373f4e364c4362281748969cd8ddfec1540f2653f85e8715525f7fb0bd9cd69e7fa05c7248d308114b11ef442453371bb79c38e48e054a25f74f985656b34c3d8f94d4fe6a9af9b6f4c1deacd7017150d109c0651addda0cc4359629f5ad4b63e7f9e4a03da6858b751352ad6ad4d4d223050c2a8c07fbcf90d965ace5817c0a78b6f5db3937960eb77e0c0b7f68df9540190df8c69dbab99e9866e6db427afb7f563afa8e42bd530bc7264521f455eddec49696119bb291bb5921b44ce5f2684d80b65032708925053c7b0384ff116d52b0d7f2fd8b0487aa4233f508380e56b9f0ffac2038ad8888635da4d5064ddbac91920dd7b6fed0a17a17a12b658c454964323cd37a4f717738f411c62c2d0b9878460e53946482665bf055967b28d2637a2606bcfb33e40748ab9960446a060e778460359df1b1b3ddcfa4d14820962fa8b1972a4a054d3e913c0802592ff8920f0df22f7fcb2f9d0cc1d6cd197893d4ec6c548e79cb0f3b9e24d32afaa1b1eeda0b1e8aa463642dc63d6d88278f912ff2ccc49531414385a5ee13586449047be6927cc62b8538cffc8dec3169a6eb4a5624df41366b7e15e37def54ae402a7d72fa0f1d9bd08d4dad544726cf5fba3664fc3659a1aea2c23455cccd74c423936618c4cbf4d2046d67a55fb36b94efe6bb4cdde60c2475935b9cda615d821348339c77a823aa440da01d9d0c0fe730636471a0086ea4b6055365c1a7985c58710e1329beaceb97fb13ec28fe033317bb18b59e54500f348cf279f06a3d4f8fe5e0e098741ae0c6ecb0df870e99a7381f317707c3a6704a6c17eb8d7bcfc8b59914ce515365490b464da398d5a7fa6737e0455a359197d26833a9aaa4bbeacca30b3054b3059f1d6eab5ed270019911624b5c53e192c5ae761d0a61b0cf43373d68d74ac9df6738931e0c34c69491c8a940d50d07cfd279faaea954fda2ba87e50acb4fad1b332fa3ac1d738c90022814622327a5a3274590a04acf1c0ba172cf429f783e55614f7c37d14b4e498f4cea894151fc61f39982697324c882f0d4f8e4a4137b90b5b30dfa32682cdc490179733e1aba5586b60b33e54f9161edc5f4fa0a833bbaf0500f2717b2b79a0099e9376e45aa37c1e0d4761761181f6095c8930ba32968e7a986b0e7722868840970d58d10c121a3692a3a65a48d4c6543d9b14f5ebeb27721b483c906f308150229cb5191cba2e6b0443a6f79c4f2a392ef8dfe98feaa140e3e68893015cd9e4e46c901fd5ff6e996660a34bf26da179798e6ab81e1e354797c45c1eba9e15562dfef000194df1c95d9df161e9df69d33c7a733047cd2ef6f86cc75767e66469f64416f49c9681a6ecdc88f487e3e51f0f22f70bdcc0907551bde0dd2e69b9cc1758c0724a97f98f6e55a5b39af974e0b237cf6177d819ac3860055a49e6f7e4b3b2db3f549d71ecba68be997066cf6c67463824bb69ae2d4536f7b1c1ee12c243ae1205424ea5dc28464f3e5378bcd940001fc2a3a7c4c2f4889c5dadcad0f57411560f1af4dde7af5139b48cfba8bcc4d0d5d35447b65a11947d771b4748cd8b84b5147bd53688c852a4560af4f6086103cf5004ea74ae1d420535d7d080a6eab951c42f8fdee90f0a868e37d655d743f2751760830bdd65735914348de1226d90fee7f38522db09167c33dbb6296fe77ae406376ddea52d38d67fbb6885dc5241d01789604a5579320671a225932e99aa4a6224f5875791a1caaff4a174fb43c4e73624091b78d62163fbe9229d2da3a5cd6d10400b83c14f19f11ce416fe74c087a0dd7400b95623f65435748e75345f66d51008d06b277b40f762718951b38a78b27fedde07374ae2e9717b053eb66ca696ea99629ca0a65a0423ec6c8a82d5153f89c3e05ce98bbae8e6ddd82083bf528ec926500ec75378bb82518bbf54f7b28178acb2170d50e9768d3a23a81c2b2ce9cf2bdb377b3aced0cfaafe949cd7e729f4810981f57fb917b7ced9dd2f1a74845abd0977551d81a815bf17ece59cc4822a7bba9d810bcea1e8fbe11ebe8185ead31bf83e2345a6ec645c074b0c9d9400c065d9e2e9d32f73cee5a1b3d4312a5f022aa02e3b02c608ce7c0a779b29c91f61938feeb835edbd1d951aed8aae7d05545951b33c33401e9aff78cb2b93a5e6ba010a6820b2b002d086b85379e8f0cf6d0c6bf8251d7a5e3b99de85ba4b54036b92afbc48b06fc8da48909874aa9555730f632fc5172811532b481d9777dff02ee428d1f24559f4fd98cc1fc251368c17a36f19bdefe603cfddc18cd25efea62c3a130b7685ede82251bef2068c1c6dea26daf84e0501aa65a0fc67562f306f377408047dca7921488b843e94bb998bd1b844fd0a91dc67e187c34eee86298e7938a4b9c98fd20ea3bd7bdbbdba6f18cae1d5cb32fe82e9e831c86ca3749501c009a3c091c89bb1e05a64684edbed98eb3413f625ee0907434f8c8c6d26f659efe114af38c291fdde23534d6911412aa36c70f5611149214affb8877e8995718b77345ac9b9671bd5c36f60451099dc5498a737a1f7316b6b56620a944a00792fb861e52a2c8f1d84cec8772f04ad79f8f3ea405e126064694f43d45d5be0ba5f8f883a5129131133f058ebc264e4ef313967e9200b3776d8139740df4af21301185cc53db4431b785e52f6eb39340faefca63b86b77c4f5aaba3717d7f3f9b5bc82e114331ee72256bdfb3d4fcc61b089a11a8aad7ce9c0db5160613a9fb234eb2152d89c47ac244baa7460e4015f3b5c9466c0d414b54602e7dd0d26f3be7c57cf8e31b1b7510230cd9e597d05d652c9c401efa5f996b5bdeee01403605e219f4b60976df05c0d51d2cbca6e1aa5117f9586acdba6aa6bdf50f38e92d936ba55d0af1002fb3321d2b1e76080474698c83b658a06fa5cb77dd0f7cfed9105a422d7b900bd06a00510c0a373cbeaa02a4d0e69de7f1345d998e4564a1f8240e0c88e1a3754bd07ef9833dce82db613513b042c56d9147ad11acbb847e684b9ff13ba2879cd10e08fc91661029d0195f206d1082e3b7127fb456e30c41403c9fa25db9eeecf67f5797ea44171c13d4b2aabef8f3296b42419e6d88762ab3edf4ff316b03ee03cccc34dad5d8574a3613c6bdccd21c70c74a9f064679a50de6412dc8d4bdf1fa2a6da61e21845ceedd260e9f7547e81dc5dab120732f15c83f95d934a0bee97380e1f6df1d82bcdac1d69a5df2c09a5246e747996b1a43d0702389bcb321f99fc90e6438d1cdf358465d4c7b293cf083189b63e698c1ea9e053572304347213b218625dc465e57eb71fc8e5624a07f14d7ad50de99775d331899e4b9801f5f79ee1380eddcaf75e322c77b7d7d43b5bf6d1b7db20bbb57184decac480b0b7ed4ac1d71810c019418459f379973437ece3d795e5f9bfb5b2949481781523baf73d5964d7dce1311efb935938c9e18014c5ae8a6dbbea273fccd334233f8491d3d7d7532f6584bdb0fa31f2d661b8c0f2579a5e0cb1ab4224a5e382b23830986608b40a8f2fc32b3d91c953ed3045b746e4a841949909f039b8939ee3db1b878d790eb4590d3472cdbe34830ebdd4a95b8108e970ce5312cb8fd0f89af8b7c8515148ba2eedf795b58c325edd028c06344f3293de209a43d2e400bda455e445765943ca73ccc3091480332d1b34f3ea7baa77c6514dd86945dcd8bf0455f9a8085d4adcb7d9a3f5908842f923c234dd9ca1fab099025c5dd094ec824856f7e7268f18b469b2814c0cc81d97063a1ab7b249f23fa81fd0adaa57287ccb3297e14e9cf8e866896d8b9052cee19fe1f3a2ce3d06e2493e1700b35fec5bd75301464d1ca546ce3a9417ed432e1e484f866db64eb8f21ee7bd7b326ae945ad0eeb85d1d2d763647dc43843ba97ea53ba567c199e040968cff3d73ef79bff3f8c1f052f3c6e26f5d61acb3d84e34f7e731da23bb182e58ce07fefb1acfe37a9befcb4d628444686ce53d7b63cbc3cd5582a8ec4d5fb491e96884864199f1eec28d19bb8eb29a485f6665921a554faa4f8c47621d40455c1b6ce1f8d1dedd67717238b1289c9d5c82979a60563368e9e306faecc76c1c463698dd10c92c0eec455e1deca2d984e4da5e181e23669b434dc25f028b045471df5c13b3c501f409b3abc2e79cabc5ff40df55f64ca101ddf154a993eb971f6d1fe0f40bd29f10a7991d7eb31bf6515b014256532efc79433ab9e5d3d2ec4806779f015acbc1df29ef8f773a87825c102eef0feff8c5e62dce136c869b978cd5d242386dce84c100f77755da962f", 0x1017}], 0x1, &(0x7f00000003c0)=[@ip_ttl={{0x14, 0x0, 0x2, 0x1}}], 0x18}, 0x4000) (async, rerun: 32) r3 = memfd_create(&(0x7f0000000400)='\xa3\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xce\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\x8e\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5 \xc8\x10>\xc9\\\x85\x17L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xacl\x1d3\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0)\xccm\xacz\xc1\xadd\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\xd0\xd4\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xa8w\xbe\xd0\xd0-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\xd1x4]PZ\x9e\xd5Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\x97\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\x10D\x7f!\xca\x0ev\x15h$\x01\xdd\xe5\xce\xf8*\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8\xd00\x88y\xebX\x92\xd5\xbb\xa1h7\xf3\xe0\x0f\xbd\x02\xe4%\xf9\xb1\x87\x8aM\xfeG\xb2L\xbd\x92-\xcd\x1f\xf4\xe1,\xb7G|\xec\"\xa2\xab\xf6\x84\xe0\xcf1\x9a', 0x0) r4 = memfd_create(&(0x7f0000000400)='\xa3\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xce\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\x8e\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5 \xc8\x10>\xc9\\\x85\x17L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xacl\x1d3\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0)\xccm\xacz\xc1\xadd\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\xd0\xd4\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xa8w\xbe\xd0\xd0-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\xd1x4]PZ\x9e\xd5Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\x97\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\x10D\x7f!\xca\x0ev\x15h$\x01\xdd\xe5\xce\xf8*\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8\xd00\x88y\xebX\x92\xd5\xbb\xa1h7\xf3\xe0\x0f\xbd\x02\xe4%\xf9\xb1\x87\x8aM\xfeG\xb2L\xbd\x92-\xcd\x1f\xf4\xe1,\xb7G|\xec\"\xa2\xab\xf6\x84\xe0\xcf1\x9a', 0x0) write$binfmt_elf32(r4, &(0x7f0000000140)=ANY=[@ANYBLOB="7f454c466000002ed8e4f97765ce27b90300060000000000000000b738000000000035f4c38422a3bc8220000500000004020300b300000000002a002400b3d7c52ebf31a8d5c8c3c6cb00000009e500d5ffffff05ffffff03000000110000000d60390170f74f9ef4"], 0xd8) (async) write$binfmt_elf64(r4, &(0x7f00000005c0)=ANY=[], 0x6ce) (async) execveat(r4, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) write$binfmt_elf64(r4, &(0x7f0000000280)=ANY=[@ANYRESHEX=r2], 0x6ce) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r6 = socket$inet(0x2, 0x3, 0x8) (async) r7 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000001780), 0x109000, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f00000017c0)={{0x1, 0x1, 0x18, r7}, './file0\x00'}) (async) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x338, 0x0, 0xe138, 0x198, 0x1c0, 0x198, 0x2a0, 0x358, 0x358, 0x2a0, 0x358, 0x3, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, 'pimreg\x00', 'veth0_to_bond\x00'}, 0x0, 0x158, 0x1c0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "0d0004000000050000000404fff0cf81dfd28c89544e14cd3e01dd24289831867846c88621039b284c3ff45c42995560a99952bed40cf5a8c1df6cdbdb7e2378d5afd35f4c16827f55b3af494e39e8fb330200000000000032b6a99a8d87298e88a94cb519f5c17631af916a0002000000000000000000000000000000000049", 0x8}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x398) vmsplice(r6, &(0x7f00000016c0)=[{&(0x7f0000000300)="fe572ab5f72e51ca67f96b2d1697257d3e9a2e640717ab06fe7cb76c2539fc1e906b8bcc46f78739443f4819514b6161603c228c21f219c1716bbe87b974edd3fb94359a0ab23e43500060cac085539712f9c3baad6c9d24885230a634349cf2ff6f20c82f643628bde373bf389a75dcb8d56a5001e618ed54d45b16664834", 0x7f}, {&(0x7f0000001600)="e38c5a2b8c530605abcef37c7427898a72e7c8823703c6932a6f60b8869897c5a731feafb9e6e738c2eb85f867f808411a0a96f1da2c23fd85385efac4000b378183502b08be0c0798493717f422ec6c20312d5fbcfb2eff4d7f566c37758945ec4cf378b5fc203004b8a3a67a380f481e456065e33bfd4b504637266f677ea41b", 0x81}], 0x2, 0x1) (async) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r8, 0xc018937d, &(0x7f0000001800)={{0x1, 0x1, 0x18, r2, {0x400}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r9, 0xc0189375, &(0x7f0000001700)={{0x1, 0x1, 0x18, r7}, '.\x00'}) ioctl$PPPOEIOCSFWD(r10, 0x4008b100, &(0x7f0000001740)={0x18, 0x0, {0x3, @local, 'wg2\x00'}}) sendmsg$NFNL_MSG_ACCT_NEW(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001840)={&(0x7f0000000040)=ANY=[@ANYBLOB="078000dd15c625080000000000000097d3"], 0x18}}, 0x0) ioctl$sock_SIOCGIFCONF(r5, 0x8912, &(0x7f00000002c0)=@buf) (async) execveat(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) (async) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r3, 0x6612) 579.45µs ago: executing program 2 (id=2646): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000001180)='./file0\x00', 0x480, &(0x7f0000000040)={[{@mblk_io_submit}, {@usrjquota}]}, 0x3, 0x77d, &(0x7f0000001940)="$eJzs3d9rW1UcAPDvzdJ2dtNVEHS+WBC0MJa6WTcFHyY+iOBgoM9uIc3KbNqMJh1rKegQwRdBxQdBX/bsj/nmqz9e9b/wQTamdsOJD1K5abKla9Kma9Ns5POB256Te2/O+ebcHye5h3sD6Fuj6Z9MxMGI+DiJOFB/PYmIgVoqG3Fidblby0uFdEpiZeXNP5PaMjeXlwrRtE5qXz3zRET89EHEocz6cisLi9P5Uqk4V8+PV2fOj1cWFg+fm8lPFaeKs8eOTEwcPf7C8WM7F+vfvy7uv/bJa89+e+Lf9x+/8tHPSZyI/fV5zXHslNEYrX8mA+lHuMar8e5OF9dTSa8rwD1Jd809q3t5HEzSdLbXVQIAuiztha4AAH0mcf4HgD7T+B3g5vJSoTH19heJ3XX9lYjYuxp/4/rm6pxs/Zrd3tp10OGbyZorI0lEjOxA+aMR8eX3b3+dTtGl65AArbx3KSLOjIyuP/4na8YstBjCsannmtKDbZYZvSvv+Ae754e0//Niq/5f5nb/J1r0f4Za7Lv3YvP9P3N1g9W3Pewo7f+93DS27VZT/HUje+q5h2t9voHk7LlSMT22PRIRYzEwlOaPbFDG2I3/brSb19z/++vTd75Ky0//31kiczU7tHadyXw1v52Ym12/FPFktlX8ye32T9r0f091WMbrL334Rbt5afxpvI1pffzdtXI54pmW7X9n00o2HJ84XtscxhsbRQvf/fb5cLvym9s/ndLyG98FdkPa/sMbxz+SNI/XrGy9jF8uH/ix3bzN42+9/Q8mb9XSjX7FxXy1OnckYjB5Y/3rR++s28g3lk/jH3u69f6/0faffic802H82Wt/fHPv8XdXGv/kltp/64krt6b3tCu/s/afqKXG6q90cvzrtILb+ewAAAAAAAAAAAAAAAAAAAAAAAAAoFOZiNgfSSZ3O53J5HKrz/B+LIYzpXKleuhseX52MmrPyh6JgUzjVpcHVm8Dm6rd/3Sk6f6oR+/KPx8Rj0bEZ0MP1fK5Qrk02ePYAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKBhX5vn/6d+H+p17QCArtnb6woAALvO+R8A+o/zPwD0H+d/AOg/zv8A0H+c/wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOiyUydPptPKP8tLhTQ/eWFhfrp84fBksTKdm5kv5ArlufO5qXJ5qlTMFcozm71fqVw+PxGz8xfHq8VKdbyysHh6pjw/Wz19biY/VTxdHNiVqAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgayoLi9P5Uqk413EiYgsLS+xoIltvtfulPg9GYvD+qEa3E0/t7Bv2+MAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8ID4PwAA///AkiRP") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) getdents(r0, 0xfffffffffffffffd, 0x58) 0s ago: executing program 3 (id=2647): r0 = socket(0x10, 0x803, 0x0) write(r0, &(0x7f0000000040)="2600000022004701050007108980e8ff06006d20002b1f00c0e90101c7bb0000b00000000000", 0x26) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000d9bffc), 0x4) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0x84, 0x30, 0xffff, 0x0, 0x0, {}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x84}}, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2008002, &(0x7f0000000300)={[], [{@appraise_type}, {@permit_directio}]}, 0x1, 0x53d, &(0x7f0000000a80)="$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") syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000080)='./file0\x00', 0x3808008, &(0x7f0000000540)=ANY=[@ANYBLOB="73686f72746e616d653d77696e6e742c756e695f786c6174653d312c756e695f786c6174653d302c6e6f6e756d7461696c3d302c73686f72746e616d653d77696e39352c73686f72746e616d653d77696e39352c757466383d312c757466383d302c636865636b3d7374726963742c73686f72746e616d653d6c6f7765722c756e695f786c6174653d312c696f636861727365743d6d616363726f617469616e2c636f6465706167653d3836362c73686f72746e616d653d6c6f7765722c73686f72746e616d653d6d697865642c646d61736b3d30303030303030303030303030303030303030303130302c757466383d312c757466383d312c757466383d302c756e695f786c6174653d312c6e6e6f6e756d7461696c3d312c73686f72746e616d653d77696e39352c726f6469722c73686f72746e616d653d6d697865642c73686f72746e616d653d77696e6e742c756e695f786c6174653d312c757466383d302c726f6f74636f6e746578743d73797374656d5f752c00e0035aa2cd29c600891cd4d693993d07e9df4154c218b442a453"], 0x0, 0x2df, &(0x7f0000003740)="$eJzs3b1rJGUcB/DfbGZ3R5tNYSXCDWhhdVyutUmQOxBTeaQ4LTR4OZBMEC4Q8QXXq8TOxtK/QBAE/w0bO0vBVrDzhIORectk98Y1OdyI5vMpkiczv+88z7wkWRbyyzsvHB3ey+P+w09+jixLYrQ9jXiUxGaMovNZLNj+MgCA/7JHZRm/lY2B3T99sSKbrXFdAMD69L//xyuq0vrj3eoVwneXtjQAYE3u3H3z9Z3d3Vtv5HkWt48+P9lLIqL63OzfuR/vRREHcSNm8TiifalQv1tQDW+XZTlP8+/zPN+Ml47mJ3tV8ujtH9rj7/waUee3Yhab9abTdxvq/Gu7t7byxpn8vFrHs+3821X+ZsziudPwQv7mQD72JvHyi2fWfz1m8eO78X4Uca9eRJ//dCvPXy2/+v3jt6rlVflkfrI3ret65UY3+fyS7xEAAAAAAAAAAAAAAAAAAAAAAP8/19veOdOo+/dUm9r+OxuPqy/GkXc2F/vzNPmkO1DfHyhGZVnOy/i6669zI8/zsi3s82k8n7aNBQEAAAAAAAAAAAAAAAAAAOCKO/7wo8P9ojh48I8Mum4AaUT8cSfiaY+zfWbLtVhdPG3n3C+KUTtcrEnPbomNriaJWLmM6iSe8mpcu2DqmSfW3A6++XYwVZ3RcRpDu7K/n3Q8PNcFBx+Mm+s4WNM9XYf7yfA1nJ4uPqtuXCzfuEkMzz6OpS2T7n4uF3eP4vlOZzK4a3ahy9I1wyiKg/mK4qrqr4/zyi8Lp5PEUvGknmQwPm4HQ1ejeTb6e5ENfqc08ayJP/mzItGtAwAAAAAAAAAAAAAAAAAA1qr/69+BnQ9XRkfldG3LAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBL1f////MM0sXwOVKTeHD8b50bAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAV8efAQAA///bPknz") r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=@framed={{}, [@printk={@llx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x2d}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x51) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x1, 0x0, 0x0) r5 = socket$inet(0x2, 0x6, 0x40) setsockopt$inet_int(r5, 0x0, 0x14, &(0x7f0000000080)=0xa0e, 0x4) syz_emit_ethernet(0x6e, &(0x7f00000002c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaa0086dd60828bf700383a00fc0200000000000000000000000060fd906300002b00fc010000000000000000000000000000200100000000000000000000000000001e520b4c951ee12e"], 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000000)={'team0\x00', @random="7df21983bd8d"}) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='tracefs\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x2200c3a, &(0x7f0000000140)=ANY=[@ANYBLOB="00b52b317142b73030303030303000"/30]) openat$sndseq(0xffffffffffffff9c, &(0x7f00000001c0), 0x0) socket(0x2, 0x80805, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='io.stat\x00', 0x275a, 0x0) kernel console output (not intermixed with test programs): 141.513118][T10623] veth1_macvtap: entered promiscuous mode [ 141.525583][T10623] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 141.530040][T10730] loop2: detected capacity change from 0 to 2048 [ 141.536119][T10623] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.548113][T10730] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, [ 141.552353][T10623] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 141.552368][T10623] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.552381][T10623] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 141.561214][T10730] block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 141.571097][T10623] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.587519][T10730] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 7711 with max blocks 1 with error 28 [ 141.591444][T10623] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 141.600249][T10730] EXT4-fs (loop2): This should not happen!! Data will be lost [ 141.600249][T10730] [ 141.610017][T10623] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.623005][T10730] EXT4-fs (loop2): Total free blocks count 0 [ 141.632803][T10623] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 141.642430][T10730] EXT4-fs (loop2): Free/Dirty block details [ 141.642443][T10730] EXT4-fs (loop2): free_blocks=2415919104 [ 141.652222][T10623] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.652239][T10623] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 141.652252][T10623] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.676768][T10623] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 141.681443][T10730] EXT4-fs (loop2): dirty_blocks=32 [ 141.692013][T10623] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 141.701051][T10730] EXT4-fs (loop2): Block reservation details [ 141.701064][T10730] EXT4-fs (loop2): i_reserved_data_blocks=2 [ 141.710871][T10623] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.710883][T10623] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 141.710896][T10623] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.710907][T10623] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 141.710918][T10623] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.710928][T10623] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 141.710941][T10623] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.710951][T10623] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 141.710964][T10623] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.711006][T10623] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 141.711018][T10623] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.713200][T10623] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 141.880167][T10623] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.889037][T10623] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.897811][T10623] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.906533][T10623] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.917300][T10734] syzkaller1: entered promiscuous mode [ 141.922801][T10734] syzkaller1: entered allmulticast mode [ 141.982400][ T1514] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 141.994724][ T1514] EXT4-fs (loop2): This should not happen!! Data will be lost [ 141.994724][ T1514] [ 142.038587][T10753] netlink: 'syz.3.1878': attribute type 3 has an invalid length. [ 142.060812][T10755] loop2: detected capacity change from 0 to 512 [ 142.077938][T10755] ext4 filesystem being mounted at /110/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 142.092320][T10755] can0: slcan on ttyS3. [ 142.114510][T10773] loop3: detected capacity change from 0 to 512 [ 142.121509][T10773] EXT4-fs: Ignoring removed i_version option [ 142.127676][T10773] ext4: Unknown parameter 'nouser_xattr' [ 142.137626][T10773] loop3: detected capacity change from 0 to 256 [ 142.144059][T10773] vfat: Bad value for 'fmask' [ 142.205414][T10754] can0 (unregistered): slcan off ttyS3. [ 142.346093][T10795] loop2: detected capacity change from 0 to 512 [ 142.352770][T10795] EXT4-fs: Ignoring removed oldalloc option [ 142.359940][T10795] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 142.368287][T10795] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=84fc01c, mo2=0002] [ 142.376316][T10795] EXT4-fs (loop2): couldn't mount RDWR because of unsupported optional features (80) [ 142.386112][T10795] EXT4-fs (loop2): Skipping orphan cleanup due to unknown ROCOMPAT features [ 142.396774][T10795] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 142.407261][T10796] EXT4-fs (loop2): couldn't mount RDWR because of unsupported optional features (80) [ 142.462519][T10799] netlink: 'syz.2.1894': attribute type 3 has an invalid length. [ 142.554758][T10806] (unnamed net_device) (uninitialized): option miimon: invalid value (18446744073709551614) [ 142.565024][T10806] (unnamed net_device) (uninitialized): option miimon: allowed values 0 - 2147483647 [ 142.887964][T10813] loop0: detected capacity change from 0 to 512 [ 142.926038][T10813] ext4 filesystem being mounted at /4/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 142.950890][T10813] can0: slcan on ttyS3. [ 142.980810][T10828] netlink: 'syz.4.1906': attribute type 3 has an invalid length. [ 143.005501][T10812] can0 (unregistered): slcan off ttyS3. [ 143.126203][T10849] loop4: detected capacity change from 0 to 512 [ 143.132736][T10849] EXT4-fs: Ignoring removed i_version option [ 143.138908][T10849] ext4: Unknown parameter 'nouser_xattr' [ 143.170320][T10854] loop4: detected capacity change from 0 to 512 [ 143.179554][T10854] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2234: inode #12: comm syz.4.1917: corrupted in-inode xattr: invalid ea_ino [ 143.193379][T10854] EXT4-fs error (device loop4): ext4_orphan_get:1399: comm syz.4.1917: couldn't read orphan inode 12 (err -117) [ 143.238794][T10858] netlink: 'syz.4.1918': attribute type 3 has an invalid length. [ 143.270223][T10860] netlink: 'syz.4.1919': attribute type 8 has an invalid length. [ 143.346328][T10869] loop2: detected capacity change from 0 to 512 [ 143.356296][T10869] ext4 filesystem being mounted at /119/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 143.372921][T10869] can0: slcan on ttyS3. [ 143.455580][T10868] can0 (unregistered): slcan off ttyS3. [ 143.482923][T10880] x_tables: duplicate underflow at hook 3 [ 143.544083][T10887] 9pnet_fd: Insufficient options for proto=fd [ 143.636694][T10895] (unnamed net_device) (uninitialized): option miimon: invalid value (18446744073709551614) [ 143.646883][T10895] (unnamed net_device) (uninitialized): option miimon: allowed values 0 - 2147483647 [ 143.882334][T10900] loop1: detected capacity change from 0 to 512 [ 143.896689][T10900] can0: slcan on ttyS3. [ 143.901947][T10904] __nla_validate_parse: 20 callbacks suppressed [ 143.901962][T10904] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1936'. [ 143.955495][T10899] can0 (unregistered): slcan off ttyS3. [ 143.972064][ T29] kauditd_printk_skb: 57 callbacks suppressed [ 143.972077][ T29] audit: type=1400 audit(2000000049.690:9090): avc: denied { ioctl } for pid=10908 comm="syz.1.1938" path="socket:[30952]" dev="sockfs" ino=30952 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 144.028348][T10913] loop1: detected capacity change from 0 to 164 [ 144.035523][T10913] Unable to read rock-ridge attributes [ 144.041008][T10913] isofs_fill_super: root inode is not a directory. Corrupted media? [ 144.067166][T10915] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1941'. [ 144.137277][T10921] loop1: detected capacity change from 0 to 512 [ 144.161903][T10925] 9pnet_fd: Insufficient options for proto=fd [ 144.180365][T10926] Process accounting resumed [ 144.180763][ T29] audit: type=1400 audit(2000000049.900:9091): avc: denied { write } for pid=10927 comm="syz.1.1947" path="socket:[31016]" dev="sockfs" ino=31016 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 144.209017][T10928] loop1: detected capacity change from 0 to 2048 [ 144.209273][T10928] EXT4-fs: Ignoring removed bh option [ 144.209292][T10928] EXT4-fs: Ignoring removed nomblk_io_submit option [ 144.209446][T10928] EXT4-fs: Ignoring removed nobh option [ 144.238686][ T29] audit: type=1400 audit(2000000049.960:9092): avc: denied { map } for pid=10927 comm="syz.1.1947" path="socket:[31018]" dev="sockfs" ino=31018 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 144.262602][ T29] audit: type=1400 audit(2000000049.960:9093): avc: denied { read } for pid=10927 comm="syz.1.1947" path="socket:[31018]" dev="sockfs" ino=31018 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 144.306613][T10932] loop1: detected capacity change from 0 to 512 [ 144.319041][T10932] can0: slcan on ttyS3. [ 144.332638][T10936] futex_wake_op: syz.2.1949 tries to shift op by -1; fix this program [ 144.349095][T10940] FAULT_INJECTION: forcing a failure. [ 144.349095][T10940] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 144.362293][T10940] CPU: 0 PID: 10940 Comm: syz.2.1950 Not tainted 6.10.0-syzkaller-01155-gd67978318827 #0 [ 144.372244][T10940] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 144.382332][T10940] Call Trace: [ 144.385597][T10940] [ 144.388556][T10940] dump_stack_lvl+0xf2/0x150 [ 144.393192][T10940] dump_stack+0x15/0x20 [ 144.397402][T10940] should_fail_ex+0x229/0x230 [ 144.402148][T10940] should_fail+0xb/0x10 [ 144.406362][T10940] should_fail_usercopy+0x1a/0x20 [ 144.411495][T10940] _copy_from_iter+0xd3/0xb00 [ 144.416211][T10940] ? kmalloc_reserve+0x16e/0x190 [ 144.421144][T10940] ? __build_skb_around+0x196/0x1f0 [ 144.426343][T10940] ? __alloc_skb+0x217/0x300 [ 144.430930][T10940] ? __virt_addr_valid+0x1ed/0x250 [ 144.436019][T10940] ? __check_object_size+0x35b/0x510 [ 144.441301][T10940] netlink_sendmsg+0x460/0x6e0 [ 144.446074][T10940] ? __pfx_netlink_sendmsg+0x10/0x10 [ 144.451380][T10940] __sock_sendmsg+0x140/0x180 [ 144.456069][T10940] ____sys_sendmsg+0x312/0x410 [ 144.460827][T10940] __sys_sendmsg+0x1e9/0x280 [ 144.465414][T10940] __x64_sys_sendmsg+0x46/0x50 [ 144.470167][T10940] x64_sys_call+0x2689/0x2d60 [ 144.474844][T10940] do_syscall_64+0xc9/0x1c0 [ 144.479400][T10940] ? clear_bhb_loop+0x55/0xb0 [ 144.484104][T10940] ? clear_bhb_loop+0x55/0xb0 [ 144.488758][T10940] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.494656][T10940] RIP: 0033:0x7f6b14670bd9 [ 144.499088][T10940] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 144.518681][T10940] RSP: 002b:00007f6b138f2048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 144.527123][T10940] RAX: ffffffffffffffda RBX: 00007f6b147fef60 RCX: 00007f6b14670bd9 [ 144.535078][T10940] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000003 [ 144.543119][T10940] RBP: 00007f6b138f20a0 R08: 0000000000000000 R09: 0000000000000000 [ 144.551071][T10940] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 144.559052][T10940] R13: 000000000000000b R14: 00007f6b147fef60 R15: 00007ffc7d39aff8 [ 144.567018][T10940] [ 144.583729][ T29] audit: type=1400 audit(2000000050.300:9094): avc: denied { sqpoll } for pid=10941 comm="syz.2.1951" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 144.603445][T10931] can0 (unregistered): slcan off ttyS3. [ 144.604868][T10949] loop2: detected capacity change from 0 to 128 [ 144.715083][ T29] audit: type=1326 audit(2000000050.430:9095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10943 comm="syz.4.1952" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7faf3321ebd9 code=0x0 [ 144.790710][ T29] audit: type=1400 audit(2000000050.510:9096): avc: denied { append } for pid=10951 comm="syz.1.1954" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 144.814170][ T29] audit: type=1400 audit(2000000050.510:9097): avc: denied { ioctl } for pid=10951 comm="syz.1.1954" path="/dev/autofs" dev="devtmpfs" ino=91 ioctlcmd=0x9418 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 144.850835][T10962] loop1: detected capacity change from 0 to 512 [ 144.877128][T10966] 9pnet_fd: Insufficient options for proto=fd [ 144.892296][T10968] sg_write: data in/out 768/17 bytes for SCSI command 0x15-- guessing data in; [ 144.892296][T10968] program syz.1.1958 not setting count and/or reply_len properly [ 144.912379][T10968] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 144.973140][T10972] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 144.982610][T10972] loop3: detected capacity change from 0 to 512 [ 144.998059][T10972] ext4 filesystem being mounted at /78/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 145.187745][T10980] loop3: detected capacity change from 0 to 512 [ 145.277276][T10984] syzkaller0: entered promiscuous mode [ 145.282807][T10984] syzkaller0: entered allmulticast mode [ 145.454156][T10988] loop4: detected capacity change from 0 to 512 [ 145.466713][T10988] ext4 filesystem being mounted at /77/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 145.483620][T10988] can0: slcan on ttyS3. [ 145.507593][T10993] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1965'. [ 145.517499][T10993] netlink: 'syz.2.1965': attribute type 3 has an invalid length. [ 145.525346][T10993] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1965'. [ 145.575391][T10987] can0 (unregistered): slcan off ttyS3. [ 145.581798][T11000] netlink: 'syz.2.1968': attribute type 5 has an invalid length. [ 145.658841][T11006] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 145.669469][T11006] loop4: detected capacity change from 0 to 512 [ 145.679108][T11010] loop2: detected capacity change from 0 to 512 [ 145.696558][T11006] ext4 filesystem being mounted at /79/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 145.792570][T11023] loop1: detected capacity change from 0 to 128 [ 145.800130][T11023] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 145.811607][ T29] audit: type=1326 audit(2000000051.530:9098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11014 comm="syz.2.1973" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6b14670bd9 code=0x0 [ 145.888157][T11026] loop4: detected capacity change from 0 to 512 [ 145.894932][T11026] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 145.906985][T11026] EXT4-fs (loop4): 1 truncate cleaned up [ 145.972962][T11036] loop4: detected capacity change from 0 to 256 [ 146.006412][T11038] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=528 sclass=netlink_route_socket pid=11038 comm=syz.4.1980 [ 146.030339][T11043] loop4: detected capacity change from 0 to 512 [ 146.037116][T11043] EXT4-fs: Ignoring removed i_version option [ 146.043364][T11043] ext4: Unknown parameter 'nouser_xattr' [ 146.062030][T11045] loop4: detected capacity change from 0 to 256 [ 146.073468][ T29] audit: type=1400 audit(2000000051.790:9099): avc: denied { mounton } for pid=11044 comm="syz.4.1982" path="/85/file0/file0" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:devpts_t tclass=dir permissive=1 [ 146.076034][T11047] netlink: 'syz.3.1983': attribute type 5 has an invalid length. [ 146.103932][T11047] netlink: 'syz.3.1983': attribute type 11 has an invalid length. [ 146.460339][ T40] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.530166][ T40] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.547533][T11061] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1988'. [ 146.562342][ T40] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.602758][T11066] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1990'. [ 146.622806][ T40] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.652002][T11052] chnl_net:caif_netlink_parms(): no params data found [ 146.690459][T11052] bridge0: port 1(bridge_slave_0) entered blocking state [ 146.696633][T11077] 9pnet_fd: Insufficient options for proto=fd [ 146.697615][T11052] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.711585][T11052] bridge_slave_0: entered allmulticast mode [ 146.717315][T11079] loop2: detected capacity change from 0 to 512 [ 146.718218][T11052] bridge_slave_0: entered promiscuous mode [ 146.724339][T11079] EXT4-fs: Ignoring removed i_version option [ 146.730735][T11052] bridge0: port 2(bridge_slave_1) entered blocking state [ 146.743302][T11052] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.748978][T11079] ext4: Unknown parameter 'nouser_xattr' [ 146.750664][T11052] bridge_slave_1: entered allmulticast mode [ 146.766374][T11052] bridge_slave_1: entered promiscuous mode [ 146.795159][T11084] 9pnet_fd: Insufficient options for proto=fd [ 146.803693][T11052] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 146.825721][T11052] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 146.831383][T11092] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1998'. [ 146.848270][ T40] bridge_slave_1: left allmulticast mode [ 146.853943][ T40] bridge_slave_1: left promiscuous mode [ 146.859825][ T40] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.869475][ T40] bridge_slave_0: left allmulticast mode [ 146.875141][ T40] bridge_slave_0: left promiscuous mode [ 146.880985][ T40] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.990239][T11107] loop3: detected capacity change from 0 to 1024 [ 147.027471][T11107] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2234: inode #15: comm syz.3.2002: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 147.137778][ T40] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 147.148355][ T40] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 147.159031][ T40] bond0 (unregistering): Released all slaves [ 147.168362][ T40] bond1 (unregistering): Released all slaves [ 147.184220][T11052] team0: Port device team_slave_0 added [ 147.203505][T11052] team0: Port device team_slave_1 added [ 147.224186][T11052] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 147.231157][T11052] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 147.257263][T11052] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 147.268974][T11052] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 147.276631][T11052] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 147.302598][T11052] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 147.327956][ T40] team0: left promiscuous mode [ 147.332878][ T40] team_slave_0: left promiscuous mode [ 147.339022][ T40] team_slave_1: left promiscuous mode [ 147.369408][T11132] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2010'. [ 147.382993][ T40] dummy0: left promiscuous mode [ 147.390072][ T40] hsr_slave_0: left promiscuous mode [ 147.410170][ T40] hsr_slave_1: left promiscuous mode [ 147.417502][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 147.424970][ T40] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 147.432851][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 147.440358][ T40] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 147.449783][ T40] veth1_macvtap: left promiscuous mode [ 147.455426][ T40] veth0_macvtap: left promiscuous mode [ 147.461126][ T40] veth1_vlan: left promiscuous mode [ 147.466419][ T40] veth0_vlan: left promiscuous mode [ 147.711065][ T40] team0 (unregistering): Port device team_slave_1 removed [ 147.751622][ T40] team0 (unregistering): Port device team_slave_0 removed [ 147.779437][T11142] loop1: detected capacity change from 0 to 2048 [ 147.824256][T11145] loop1: detected capacity change from 0 to 256 [ 147.837456][T11145] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=66 sclass=netlink_tcpdiag_socket pid=11145 comm=syz.1.2014 [ 147.852236][T11052] hsr_slave_0: entered promiscuous mode [ 147.861533][T11052] hsr_slave_1: entered promiscuous mode [ 147.868659][T11052] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 147.877206][T11052] Cannot create hsr debugfs directory [ 148.034942][T11160] xt_connbytes: Forcing CT accounting to be enabled [ 148.042987][T11160] Cannot find add_set index 0 as target [ 148.063772][T11162] loop1: detected capacity change from 0 to 256 [ 148.139439][T11173] loop1: detected capacity change from 0 to 512 [ 148.146768][T11173] EXT4-fs: Ignoring removed i_version option [ 148.152863][T11173] ext4: Unknown parameter 'nouser_xattr' [ 148.212378][T11181] netlink: 388 bytes leftover after parsing attributes in process `syz.0.2026'. [ 148.225382][T11180] loop0: detected capacity change from 0 to 512 [ 148.254422][T11180] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 148.274494][T11180] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 511 with error 28 [ 148.278576][T11186] loop1: detected capacity change from 0 to 1024 [ 148.286914][T11180] EXT4-fs (loop0): This should not happen!! Data will be lost [ 148.286914][T11180] [ 148.286933][T11180] EXT4-fs (loop0): Total free blocks count 0 [ 148.286944][T11180] EXT4-fs (loop0): Free/Dirty block details [ 148.311872][T11186] EXT4-fs: quotafile must be on filesystem root [ 148.315422][T11180] EXT4-fs (loop0): free_blocks=65280 [ 148.315517][T11180] EXT4-fs (loop0): dirty_blocks=511 [ 148.332853][T11180] EXT4-fs (loop0): Block reservation details [ 148.338907][T11180] EXT4-fs (loop0): i_reserved_data_blocks=511 [ 148.346345][T11052] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 148.358839][T11052] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 148.369188][T11052] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 148.379227][T11052] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 148.431492][T11052] 8021q: adding VLAN 0 to HW filter on device bond0 [ 148.448462][T11052] 8021q: adding VLAN 0 to HW filter on device team0 [ 148.459898][ T3156] bridge0: port 1(bridge_slave_0) entered blocking state [ 148.467107][ T3156] bridge0: port 1(bridge_slave_0) entered forwarding state [ 148.523976][ T3158] bridge0: port 2(bridge_slave_1) entered blocking state [ 148.531186][ T3158] bridge0: port 2(bridge_slave_1) entered forwarding state [ 148.629562][T11052] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 148.661340][T11204] loop1: detected capacity change from 0 to 512 [ 148.661955][T11201] loop2: detected capacity change from 0 to 2048 [ 148.676223][T11204] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 148.698580][T11204] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e01c, mo2=0002] [ 148.701745][T11201] netlink: 'syz.2.2031': attribute type 5 has an invalid length. [ 148.715403][T11204] System zones: 1-12 [ 148.721665][T11204] EXT4-fs (loop1): write access unavailable, skipping orphan cleanup [ 148.736628][T11201] smc: net device lo applied user defined pnetid SYZ2 [ 148.752592][T11201] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 148.770863][T11201] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 32 with error 28 [ 148.783821][T11201] EXT4-fs (loop2): This should not happen!! Data will be lost [ 148.783821][T11201] [ 148.793620][T11201] EXT4-fs (loop2): Total free blocks count 0 [ 148.799756][T11201] EXT4-fs (loop2): Free/Dirty block details [ 148.806536][T11201] EXT4-fs (loop2): free_blocks=2415919104 [ 148.812367][T11201] EXT4-fs (loop2): dirty_blocks=32 [ 148.817578][T11201] EXT4-fs (loop2): Block reservation details [ 148.823554][T11201] EXT4-fs (loop2): i_reserved_data_blocks=2 [ 148.853839][T11052] veth0_vlan: entered promiscuous mode [ 148.863410][T11052] veth1_vlan: entered promiscuous mode [ 148.882676][T11052] veth0_macvtap: entered promiscuous mode [ 148.892101][T11052] veth1_macvtap: entered promiscuous mode [ 148.904758][T11224] FAULT_INJECTION: forcing a failure. [ 148.904758][T11224] name failslab, interval 1, probability 0, space 0, times 0 [ 148.907039][T11052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 148.917546][T11224] CPU: 0 PID: 11224 Comm: syz.2.2035 Not tainted 6.10.0-syzkaller-01155-gd67978318827 #0 [ 148.928643][T11052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.937666][T11224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 148.937681][T11224] Call Trace: [ 148.937688][T11224] [ 148.937695][T11224] dump_stack_lvl+0xf2/0x150 [ 148.937721][T11224] dump_stack+0x15/0x20 [ 148.947525][T11052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 148.957519][T11224] should_fail_ex+0x229/0x230 [ 148.957547][T11224] ? __alloc_skb+0x10b/0x300 [ 148.957598][T11224] __should_failslab+0x92/0xa0 [ 148.957621][T11224] should_failslab+0x9/0x20 [ 148.957647][T11224] kmem_cache_alloc_node_noprof+0x51/0x2b0 [ 148.957680][T11224] __alloc_skb+0x10b/0x300 [ 148.957745][T11224] netlink_alloc_large_skb+0xad/0xe0 [ 148.957767][T11224] netlink_sendmsg+0x3b4/0x6e0 [ 148.957827][T11224] ? __pfx_netlink_sendmsg+0x10/0x10 [ 148.957919][T11224] __sock_sendmsg+0x140/0x180 [ 148.957939][T11224] ____sys_sendmsg+0x312/0x410 [ 148.957971][T11224] __sys_sendmsg+0x1e9/0x280 [ 148.958012][T11224] __x64_sys_sendmsg+0x46/0x50 [ 148.958030][T11224] x64_sys_call+0x2689/0x2d60 [ 148.958088][T11224] do_syscall_64+0xc9/0x1c0 [ 148.958109][T11224] ? clear_bhb_loop+0x55/0xb0 [ 148.961415][T11052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.964329][T11224] ? clear_bhb_loop+0x55/0xb0 [ 148.968993][T11052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 148.973026][T11224] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.983435][T11052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.988064][T11224] RIP: 0033:0x7f6b14670bd9 [ 148.988081][T11224] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 148.988156][T11224] RSP: 002b:00007f6b138f2048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 148.988175][T11224] RAX: ffffffffffffffda RBX: 00007f6b147fef60 RCX: 00007f6b14670bd9 [ 148.988188][T11224] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000007 [ 148.988255][T11224] RBP: 00007f6b138f20a0 R08: 0000000000000000 R09: 0000000000000000 [ 148.988266][T11224] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 148.988278][T11224] R13: 000000000000000b R14: 00007f6b147fef60 R15: 00007ffc7d39aff8 [ 148.988294][T11224] [ 149.181094][T11052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 149.181108][T11052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.181122][T11052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 149.181133][T11052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.181146][T11052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 149.181166][T11052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.189523][T11052] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 149.202043][T11233] loop0: detected capacity change from 0 to 1024 [ 149.209481][T11052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 149.268784][T11052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.268812][T11052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 149.268825][T11052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.268839][T11052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 149.268850][T11052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.268880][T11052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 149.268891][T11052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.268913][T11052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 149.268926][T11052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.268940][T11052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 149.268950][T11052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.271268][T11052] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 149.394088][T11052] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.403195][T11052] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.412405][T11052] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.421222][T11052] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.460050][T11241] loop4: detected capacity change from 0 to 128 [ 149.488798][T11243] netlink: 2028 bytes leftover after parsing attributes in process `syz.0.2039'. [ 149.498006][T11243] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2039'. [ 149.511106][T11243] (unnamed net_device) (uninitialized): option miimon: invalid value (18446744073709551614) [ 149.521345][T11243] (unnamed net_device) (uninitialized): option miimon: allowed values 0 - 2147483647 [ 149.530969][T11245] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2040'. [ 149.622297][T11250] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2042'. [ 149.638811][T11254] loop1: detected capacity change from 0 to 512 [ 149.764139][ T29] kauditd_printk_skb: 7 callbacks suppressed [ 149.764152][ T29] audit: type=1326 audit(513.880:9107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11255 comm="syz.1.2045" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f257e452bd9 code=0x0 [ 149.917265][T11273] netlink: 'syz.3.2049': attribute type 10 has an invalid length. [ 149.933545][T11273] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 149.960637][T11277] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2051'. [ 149.986330][T11279] loop3: detected capacity change from 0 to 128 [ 149.994524][T11279] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 150.016215][T11282] ip_vti0: Master is either lo or non-ether device [ 150.036806][T11284] loop2: detected capacity change from 0 to 1024 [ 150.048804][T11284] EXT4-fs error (device loop2): ext4_xattr_ibody_get:653: inode #2: comm syz.2.2054: corrupted in-inode xattr: bad e_name length [ 150.062630][T11284] EXT4-fs (loop2): Remounting filesystem read-only [ 150.080324][ T29] audit: type=1400 audit(514.200:9108): avc: denied { create } for pid=11287 comm="syz.3.2055" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 150.105871][ T9421] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=11 [ 150.114719][ T9421] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=11 [ 150.123779][ T9421] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=11 [ 150.132982][ T9421] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=11 [ 150.141853][ T9421] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=11 [ 150.150848][ T9421] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=11 [ 150.159905][ T9421] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=11 [ 150.169076][ T9421] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=13 [ 150.178027][ T9421] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=13 [ 150.187017][ T9421] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=14 [ 150.196499][ T9421] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=14 [ 150.221232][T11297] loop3: detected capacity change from 0 to 2048 [ 150.278805][T11305] syz.0.2062[11305] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 150.293792][ T29] audit: type=1400 audit(514.410:9109): avc: denied { connect } for pid=11304 comm="syz.0.2062" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 150.300012][T11307] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2063'. [ 150.366150][T11311] loop0: detected capacity change from 0 to 128 [ 150.414573][ T29] audit: type=1400 audit(514.530:9110): avc: denied { setopt } for pid=11313 comm="syz.4.2066" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 150.466500][ T11] Quota error (device loop2): dquot_write_dquot: Can't write quota structure (error -5). Quota may get out of sync! [ 150.471618][T11316] loop0: detected capacity change from 0 to 512 [ 150.479547][ T11] Quota error (device loop2): dquot_write_dquot: Can't write quota structure (error -5). Quota may get out of sync! [ 150.501319][T11316] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 150.510436][T11316] EXT4-fs (loop0): Couldn't mount because of unsupported optional features (800) [ 150.529206][ T1514] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.539658][ T29] audit: type=1400 audit(514.650:9111): avc: denied { connect } for pid=11315 comm="syz.0.2067" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 150.565792][ T29] audit: type=1400 audit(514.680:9112): avc: denied { bind } for pid=11317 comm="syz.1.2068" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 150.597537][ T1514] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.631150][T11331] loop4: detected capacity change from 0 to 512 [ 150.647762][T11335] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2074'. [ 150.667623][ T1514] bond0: (slave netdevsim1): Releasing backup interface [ 150.677539][ T1514] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.716844][T11348] 9pnet_fd: Insufficient options for proto=fd [ 150.723831][T11349] netlink: 2028 bytes leftover after parsing attributes in process `syz.1.2075'. [ 150.733044][T11349] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2075'. [ 150.754192][T11353] netlink: 'syz.4.2077': attribute type 3 has an invalid length. [ 150.762001][T11353] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2077'. [ 150.773787][ T1514] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.789147][T11349] (unnamed net_device) (uninitialized): option miimon: invalid value (18446744073709551614) [ 150.799981][T11349] (unnamed net_device) (uninitialized): option miimon: allowed values 0 - 2147483647 [ 150.800446][ T29] audit: type=1400 audit(514.920:9113): avc: denied { write } for pid=11358 comm="syz.4.2080" laddr=127.0.0.1 lport=41764 faddr=127.0.0.1 fport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 150.869378][T11362] syzkaller1: entered promiscuous mode [ 150.874863][T11362] syzkaller1: entered allmulticast mode [ 150.886105][ T1514] bridge_slave_1: left allmulticast mode [ 150.891810][ T1514] bridge_slave_1: left promiscuous mode [ 150.897738][ T1514] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.898796][ T1514] bridge_slave_0: left allmulticast mode [ 150.898811][ T1514] bridge_slave_0: left promiscuous mode [ 150.898908][ T1514] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.058381][ T1514] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 151.068550][ T1514] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 151.078894][ T1514] bond0 (unregistering): Released all slaves [ 151.130035][T11324] chnl_net:caif_netlink_parms(): no params data found [ 151.163472][T11324] bridge0: port 1(bridge_slave_0) entered blocking state [ 151.170651][T11324] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.178851][T11324] bridge_slave_0: entered allmulticast mode [ 151.185255][T11324] bridge_slave_0: entered promiscuous mode [ 151.192298][T11324] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.199371][T11324] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.206578][T11324] bridge_slave_1: entered allmulticast mode [ 151.213175][T11324] bridge_slave_1: entered promiscuous mode [ 151.229772][T11324] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 151.243437][ T1514] hsr_slave_0: left promiscuous mode [ 151.249620][ T1514] hsr_slave_1: left promiscuous mode [ 151.255556][ T1514] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 151.263180][ T1514] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 151.271817][ T29] audit: type=1400 audit(515.380:9114): avc: denied { getopt } for pid=11370 comm="syz.3.2082" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 151.293249][ T1514] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 151.300840][ T1514] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 151.311662][ T1514] veth1_macvtap: left promiscuous mode [ 151.317555][ T1514] veth0_macvtap: left promiscuous mode [ 151.323248][ T1514] veth1_vlan: left promiscuous mode [ 151.328508][ T1514] veth0_vlan: left promiscuous mode [ 151.420337][ T1514] team0 (unregistering): Port device team_slave_1 removed [ 151.431570][ T1514] team0 (unregistering): Port device team_slave_0 removed [ 151.448712][T11376] loop3: detected capacity change from 0 to 1024 [ 151.456139][T11376] EXT4-fs: Ignoring removed orlov option [ 151.469000][ T1514] smc: removing net device lo with user defined pnetid SYZ2 [ 151.479340][T11324] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 151.503123][T11324] team0: Port device team_slave_0 added [ 151.519524][T11324] team0: Port device team_slave_1 added [ 151.542992][T11324] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 151.547904][T11384] loop3: detected capacity change from 0 to 512 [ 151.550937][T11324] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 151.582904][T11324] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 151.594949][T11324] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 151.601967][T11324] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 151.605985][T11390] 9pnet_fd: Insufficient options for proto=fd [ 151.627983][T11324] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 151.660330][T11395] netlink: 'syz.1.2089': attribute type 3 has an invalid length. [ 151.671141][T11324] hsr_slave_0: entered promiscuous mode [ 151.677780][T11324] hsr_slave_1: entered promiscuous mode [ 151.684382][T11324] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 151.692860][T11324] Cannot create hsr debugfs directory [ 151.826483][T11424] (unnamed net_device) (uninitialized): option miimon: invalid value (18446744073709551614) [ 151.837053][T11424] (unnamed net_device) (uninitialized): option miimon: allowed values 0 - 2147483647 [ 152.018761][T11324] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 152.027373][T11324] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 152.036095][T11324] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 152.044569][T11324] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 152.080376][T11324] 8021q: adding VLAN 0 to HW filter on device bond0 [ 152.092769][T11324] 8021q: adding VLAN 0 to HW filter on device team0 [ 152.105236][ T3156] bridge0: port 1(bridge_slave_0) entered blocking state [ 152.112394][ T3156] bridge0: port 1(bridge_slave_0) entered forwarding state [ 152.127142][ T3158] bridge0: port 2(bridge_slave_1) entered blocking state [ 152.134284][ T3158] bridge0: port 2(bridge_slave_1) entered forwarding state [ 152.154544][T11324] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 152.165110][T11324] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 152.213489][T11324] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 152.276964][T11324] veth0_vlan: entered promiscuous mode [ 152.285202][T11324] veth1_vlan: entered promiscuous mode [ 152.302592][T11324] veth0_macvtap: entered promiscuous mode [ 152.310050][T11324] veth1_macvtap: entered promiscuous mode [ 152.320302][T11324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 152.331251][T11324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.341131][T11324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 152.351591][T11324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.361816][T11324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 152.372258][T11324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.382066][T11324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 152.393017][T11324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.402869][T11324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 152.413375][T11324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.423585][T11324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 152.433989][T11324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.444983][T11324] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 152.457131][T11324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 152.467808][T11324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.478086][T11324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 152.488574][T11324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.498473][T11324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 152.509422][T11324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.519291][T11324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 152.529782][T11324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.539947][T11324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 152.550365][T11324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.560173][T11324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 152.571219][T11324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.576882][T11438] 9pnet_fd: Insufficient options for proto=fd [ 152.583088][T11324] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 152.598955][T11324] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.607840][T11324] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.616806][T11324] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.626168][T11324] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.665647][T11448] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 152.708205][T11454] loop3: detected capacity change from 0 to 512 [ 152.708892][T11448] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 152.767470][T11454] EXT4-fs error (device loop3): ext4_acquire_dquot:6844: comm syz.3.2105: Failed to acquire dquot type 1 [ 152.796781][T11472] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 152.813563][T11475] 9pnet_fd: Insufficient options for proto=fd [ 152.831513][T11478] loop0: detected capacity change from 0 to 512 [ 152.850404][T11478] Unsupported ieee802154 address type: 0 [ 152.864182][T11481] loop3: detected capacity change from 0 to 512 [ 152.874224][T11481] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 152.887653][T11481] EXT4-fs (loop3): 1 truncate cleaned up [ 153.157531][T11500] (unnamed net_device) (uninitialized): option miimon: invalid value (18446744073709551614) [ 153.168069][T11500] (unnamed net_device) (uninitialized): option miimon: allowed values 0 - 2147483647 [ 153.526214][T11446] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 153.595215][T11508] 9pnet_fd: Insufficient options for proto=fd [ 153.651119][T11517] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 153.714516][T11520] loop2: detected capacity change from 0 to 512 [ 153.721631][T11520] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 153.734089][T11520] EXT4-fs (loop2): 1 truncate cleaned up [ 153.826132][T11529] loop0: detected capacity change from 0 to 512 [ 153.958541][T11543] loop0: detected capacity change from 0 to 512 [ 153.968100][T11543] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2842e028, mo2=0002] [ 153.993363][T11543] System zones: 1-12 [ 153.994245][T11547] IPVS: Unknown mcast interface: [ 154.002668][T11543] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.2131: invalid indirect mapped block 8 (level 2) [ 154.021260][T11543] EXT4-fs (loop0): Remounting filesystem read-only [ 154.029192][T11543] EXT4-fs (loop0): 1 truncate cleaned up [ 154.036358][T11543] SELinux: (dev loop0, type ext4) getxattr errno 5 [ 154.049838][T11550] netlink: 'syz.2.2133': attribute type 11 has an invalid length. [ 154.158045][T11559] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 154.171070][T11559] loop2: detected capacity change from 0 to 512 [ 154.520855][T11590] __nla_validate_parse: 10 callbacks suppressed [ 154.520870][T11590] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2147'. [ 154.650603][T11600] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 154.660747][T11600] loop1: detected capacity change from 0 to 512 [ 154.856491][T11606] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 154.919243][T11607] loop0: detected capacity change from 0 to 512 [ 154.926196][T11607] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 154.938836][T11607] EXT4-fs (loop0): 1 truncate cleaned up [ 155.182124][T11625] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2160'. [ 155.192495][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 155.192508][ T29] audit: type=1400 audit(519.310:9122): avc: denied { read } for pid=11624 comm="syz.1.2160" path="socket:[33787]" dev="sockfs" ino=33787 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 155.318800][ T29] audit: type=1326 audit(519.440:9123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11638 comm="syz.2.2165" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f15e7060bd9 code=0x0 [ 155.420540][T11646] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 155.430255][T11646] loop4: detected capacity change from 0 to 512 [ 155.642840][T11652] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 155.705727][T11653] loop4: detected capacity change from 0 to 512 [ 155.712586][T11653] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 155.725210][T11653] EXT4-fs (loop4): 1 truncate cleaned up [ 156.027331][T11671] netlink: 'syz.1.2175': attribute type 4 has an invalid length. [ 156.040997][ T29] audit: type=1326 audit(520.160:9124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11670 comm="syz.1.2175" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f257e452bd9 code=0x0 [ 156.152129][T11674] netlink: 'syz.1.2175': attribute type 17 has an invalid length. [ 156.249485][T11683] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 156.312441][T11686] loop2: detected capacity change from 0 to 512 [ 156.319310][T11686] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 156.331580][T11686] EXT4-fs (loop2): 1 truncate cleaned up [ 156.563552][T11700] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2185'. [ 156.816434][T11708] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 156.834051][T11708] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 156.893991][ T29] audit: type=1326 audit(521.010:9125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11707 comm="syz.3.2187" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3e46341bd9 code=0x0 [ 157.190530][T11729] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 157.426780][T11740] netlink: 'syz.0.2200': attribute type 4 has an invalid length. [ 157.448292][ T29] audit: type=1326 audit(521.570:9126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11739 comm="syz.0.2200" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f81484cdbd9 code=0x0 [ 157.487347][T11742] loop2: detected capacity change from 0 to 512 [ 157.506866][T11743] netlink: 'syz.0.2200': attribute type 17 has an invalid length. [ 157.508044][T11742] EXT4-fs mount: 89 callbacks suppressed [ 157.508058][T11742] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 157.552873][T11324] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.692845][T11748] chnl_net:caif_netlink_parms(): no params data found [ 157.710560][T11707] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 157.739159][T11748] bridge0: port 1(bridge_slave_0) entered blocking state [ 157.746319][T11748] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.752496][T11770] loop3: detected capacity change from 0 to 2048 [ 157.753639][T11748] bridge_slave_0: entered allmulticast mode [ 157.760673][T11770] EXT4-fs: Ignoring removed mblk_io_submit option [ 157.768424][T11748] bridge_slave_0: entered promiscuous mode [ 157.779181][T11748] bridge0: port 2(bridge_slave_1) entered blocking state [ 157.787157][T11748] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.788386][T11770] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 157.794659][T11748] bridge_slave_1: entered allmulticast mode [ 157.813054][T11748] bridge_slave_1: entered promiscuous mode [ 157.831462][T11748] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 157.841966][T11748] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 157.861297][T11748] team0: Port device team_slave_0 added [ 157.867757][T11748] team0: Port device team_slave_1 added [ 157.883223][T11748] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 157.884090][ T29] audit: type=1400 audit(522.000:9127): avc: denied { mount } for pid=11769 comm="syz.3.2206" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 157.890195][T11748] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 157.890219][T11748] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 157.911979][ T29] audit: type=1400 audit(522.000:9128): avc: denied { search } for pid=11769 comm="syz.3.2206" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 157.912002][ T29] audit: type=1400 audit(522.000:9129): avc: denied { write } for pid=11769 comm="syz.3.2206" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 157.993732][T11748] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 158.000842][T11748] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 158.027236][T11748] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 158.052715][T11748] hsr_slave_0: entered promiscuous mode [ 158.059788][T11748] hsr_slave_1: entered promiscuous mode [ 158.065981][T11748] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 158.073608][T11748] Cannot create hsr debugfs directory [ 158.100632][T11781] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 158.142888][T11748] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.179687][T11748] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.228836][T11748] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.276314][T11783] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2210'. [ 158.288851][T11748] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.337146][T11785] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 158.348962][ T40] bridge_slave_1: left allmulticast mode [ 158.354712][ T40] bridge_slave_1: left promiscuous mode [ 158.360889][ T40] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.368718][ T40] bridge_slave_0: left allmulticast mode [ 158.374353][ T40] bridge_slave_0: left promiscuous mode [ 158.380008][ T40] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.453105][T11789] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 158.488054][ T40] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 158.498712][ T40] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 158.510600][ T40] bond0 (unregistering): Released all slaves [ 158.517788][ T29] audit: type=1326 audit(522.640:9130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11784 comm="syz.1.2211" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f257e452bd9 code=0x0 [ 158.559532][T11748] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 158.568243][T11748] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 158.579225][T11748] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 158.579420][ C1] hrtimer: interrupt took 27799 ns [ 158.593729][T11748] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 158.607127][ T9777] EXT4-fs error (device loop3): ext4_readdir:260: inode #2: block 16: comm syz-executor: path /127/file0: bad entry in directory: rec_len is smaller than minimal - offset=60, inode=117440527, rec_len=0, size=2048 fake=0 [ 158.628766][ T29] audit: type=1326 audit(522.750:9131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11798 comm="syz.4.2214" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f13f26f4bd9 code=0x0 [ 158.653025][ T9777] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 158.678873][ T40] hsr_slave_0: left promiscuous mode [ 158.684667][ T40] hsr_slave_1: left promiscuous mode [ 158.684910][ T9777] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.699211][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 158.707115][ T40] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 158.714837][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 158.722486][ T40] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 158.735056][ T40] veth1_macvtap: left promiscuous mode [ 158.740604][ T40] veth0_macvtap: left promiscuous mode [ 158.746193][ T40] veth1_vlan: left promiscuous mode [ 158.751444][ T40] veth0_vlan: left promiscuous mode [ 158.832260][ T40] team0 (unregistering): Port device team_slave_1 removed [ 158.842785][ T40] team0 (unregistering): Port device team_slave_0 removed [ 158.911474][T11748] 8021q: adding VLAN 0 to HW filter on device bond0 [ 158.924180][T11748] 8021q: adding VLAN 0 to HW filter on device team0 [ 158.936624][ T3157] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.944030][ T3157] bridge0: port 1(bridge_slave_0) entered forwarding state [ 158.952756][ T3157] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.959807][ T3157] bridge0: port 2(bridge_slave_1) entered forwarding state [ 158.969387][T11784] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 158.998430][T11812] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2218'. [ 159.012128][T11815] loop3: detected capacity change from 0 to 128 [ 159.021483][T11815] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 159.050939][T11748] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 159.180435][T11856] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 159.185106][T11858] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2229'. [ 159.210838][T11748] veth0_vlan: entered promiscuous mode [ 159.219907][T11856] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 159.234432][T11748] veth1_vlan: entered promiscuous mode [ 159.245727][T11862] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 159.253264][T11748] veth0_macvtap: entered promiscuous mode [ 159.260973][T11748] veth1_macvtap: entered promiscuous mode [ 159.271862][T11748] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 159.282589][T11748] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.292451][T11748] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 159.303642][T11748] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.313557][T11748] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 159.324181][T11748] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.334369][T11748] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 159.344881][T11748] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.354725][T11748] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 159.365798][T11748] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.375982][T11748] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 159.386407][T11748] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.399677][T11748] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 159.411387][T11748] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 159.421960][T11748] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.431957][T11748] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 159.442886][T11748] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.452844][T11748] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 159.463334][T11748] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.473569][T11748] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 159.484132][T11748] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.494037][T11748] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 159.504904][T11748] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.514722][T11748] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 159.525201][T11748] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.538397][T11748] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 159.546985][T11866] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 159.556452][T11748] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.565268][T11748] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.574593][T11748] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.583394][T11748] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.612088][T11870] loop1: detected capacity change from 0 to 128 [ 159.621819][T11870] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 159.639435][T11866] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 159.702258][T11884] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2237'. [ 159.713244][T11884] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2237'. [ 159.715245][T11887] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2239'. [ 159.760002][T11896] loop3: detected capacity change from 0 to 128 [ 159.773393][T11900] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2243'. [ 159.783949][T11896] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 159.818606][ T9777] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 159.831868][T11908] loop1: detected capacity change from 0 to 128 [ 159.840072][T11908] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 159.913192][T11925] loop3: detected capacity change from 0 to 1024 [ 159.920549][T11925] EXT4-fs: Ignoring removed orlov option [ 159.927615][T11925] ext4: Unknown parameter 'smackfshat' [ 159.936038][T11925] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2254'. [ 159.940120][T11927] loop1: detected capacity change from 0 to 2048 [ 159.951980][ T3157] kernel read not supported for file /input/event0 (pid: 3157 comm: kworker/0:4) [ 159.968445][T11927] loop1: detected capacity change from 0 to 1024 [ 159.975025][T11927] EXT4-fs: Ignoring removed orlov option [ 159.990328][T11927] xt_connbytes: Forcing CT accounting to be enabled [ 159.997645][T11930] loop3: detected capacity change from 0 to 2048 [ 160.017104][T11932] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2256'. [ 160.036315][T11930] loop3: p1 p2 p4 [ 160.043219][T11930] loop3: p4 start 4294967040 is beyond EOD, truncated [ 160.085969][T11854] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 160.126686][T11952] netlink: 2028 bytes leftover after parsing attributes in process `syz.3.2260'. [ 160.136323][T11952] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2260'. [ 160.170543][T11955] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 160.181019][T11955] loop0: detected capacity change from 0 to 512 [ 160.200558][T11955] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 160.215801][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 160.215814][ T29] audit: type=1326 audit(524.340:9137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11960 comm="syz.1.2267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f257e452bd9 code=0x7ffc0000 [ 160.245272][ T29] audit: type=1326 audit(524.340:9138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11960 comm="syz.1.2267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f257e452bd9 code=0x7ffc0000 [ 160.268870][ T29] audit: type=1326 audit(524.340:9139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11960 comm="syz.1.2267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=276 compat=0 ip=0x7f257e452bd9 code=0x7ffc0000 [ 160.292634][ T29] audit: type=1326 audit(524.340:9140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11960 comm="syz.1.2267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f257e452bd9 code=0x7ffc0000 [ 160.315655][ T29] audit: type=1326 audit(524.340:9141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11960 comm="syz.1.2267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f257e452bd9 code=0x7ffc0000 [ 160.360095][T11965] loop1: detected capacity change from 0 to 512 [ 160.369815][T11965] loop1: detected capacity change from 0 to 512 [ 160.379369][T11965] loop1: detected capacity change from 0 to 512 [ 160.388664][T11965] loop1: detected capacity change from 0 to 512 [ 160.395720][T11864] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 160.399263][T11965] loop1: detected capacity change from 0 to 512 [ 160.412591][T11965] loop1: detected capacity change from 0 to 512 [ 160.469768][T11977] veth9: entered promiscuous mode [ 160.474916][T11977] veth9: entered allmulticast mode [ 160.491760][T10623] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.522491][T11982] loop0: detected capacity change from 0 to 2048 [ 160.530235][T11982] EXT4-fs: Ignoring removed mblk_io_submit option [ 160.549450][T11982] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 160.585971][T10623] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.625787][ T29] audit: type=1400 audit(524.750:9142): avc: denied { create } for pid=11981 comm="syz.4.2274" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 160.693342][ T29] audit: type=1326 audit(524.810:9143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11994 comm="syz.1.2278" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f257e452bd9 code=0x0 [ 160.746628][T12005] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 160.777624][T12005] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 160.852401][ T29] audit: type=1326 audit(524.970:9144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12004 comm="syz.0.2281" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f81484cdbd9 code=0x0 [ 160.951014][T12025] loop4: detected capacity change from 0 to 2048 [ 160.957908][T12025] EXT4-fs: Ignoring removed mblk_io_submit option [ 160.996547][T12025] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 161.041080][T11052] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.109988][T12044] 9pnet: Could not find request transport: fd0x0000000000000003 [ 161.280750][T12053] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 161.280750][T12053] The task syz.4.2296 (12053) triggered the difference, watch for misbehavior. [ 161.299219][ T29] audit: type=1400 audit(525.420:9145): avc: denied { append } for pid=12051 comm="syz.4.2296" name="event3" dev="devtmpfs" ino=234 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 161.382641][T12057] netlink: 2028 bytes leftover after parsing attributes in process `syz.3.2297'. [ 161.392118][T12057] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2297'. [ 161.487840][ T29] audit: type=1400 audit(525.610:9146): avc: denied { mount } for pid=12062 comm="syz.1.2300" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 161.521542][T12070] loop1: detected capacity change from 0 to 2048 [ 161.528275][T12070] EXT4-fs: Ignoring removed mblk_io_submit option [ 161.539686][T12070] No source specified [ 161.555230][T12072] 9pnet: Could not find request transport: fd0x0000000000000003 [ 161.615642][T12004] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 162.203323][T12113] FAULT_INJECTION: forcing a failure. [ 162.203323][T12113] name failslab, interval 1, probability 0, space 0, times 0 [ 162.213559][T12111] loop3: detected capacity change from 0 to 2048 [ 162.217427][T12113] CPU: 1 PID: 12113 Comm: syz.4.2316 Not tainted 6.10.0-syzkaller-01155-gd67978318827 #0 [ 162.222758][T12111] EXT4-fs: Ignoring removed mblk_io_submit option [ 162.232085][T12113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 162.232099][T12113] Call Trace: [ 162.232106][T12113] [ 162.232113][T12113] dump_stack_lvl+0xf2/0x150 [ 162.232137][T12113] dump_stack+0x15/0x20 [ 162.232153][T12113] should_fail_ex+0x229/0x230 [ 162.268604][T12113] ? nf_tables_newrule+0xd09/0x1620 [ 162.273799][T12113] __should_failslab+0x92/0xa0 [ 162.278574][T12113] should_failslab+0x9/0x20 [ 162.283118][T12113] __kmalloc_noprof+0xa5/0x370 [ 162.287883][T12113] nf_tables_newrule+0xd09/0x1620 [ 162.292923][T12113] nfnetlink_rcv+0xb1d/0x15b0 [ 162.297649][T12113] netlink_unicast+0x58d/0x660 [ 162.302403][T12113] netlink_sendmsg+0x5ca/0x6e0 [ 162.307234][T12113] ? __pfx_netlink_sendmsg+0x10/0x10 [ 162.312575][T12113] __sock_sendmsg+0x140/0x180 [ 162.317314][T12113] ____sys_sendmsg+0x312/0x410 [ 162.322107][T12113] __sys_sendmsg+0x1e9/0x280 [ 162.326704][T12113] __x64_sys_sendmsg+0x46/0x50 [ 162.331452][T12113] x64_sys_call+0x2689/0x2d60 [ 162.336144][T12113] do_syscall_64+0xc9/0x1c0 [ 162.340646][T12113] ? clear_bhb_loop+0x55/0xb0 [ 162.345308][T12113] ? clear_bhb_loop+0x55/0xb0 [ 162.349968][T12113] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.355861][T12113] RIP: 0033:0x7f13f26f4bd9 [ 162.360391][T12113] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 162.380097][T12113] RSP: 002b:00007f13f1976048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 162.388565][T12113] RAX: ffffffffffffffda RBX: 00007f13f2882f60 RCX: 00007f13f26f4bd9 [ 162.396522][T12113] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000003 [ 162.404540][T12113] RBP: 00007f13f19760a0 R08: 0000000000000000 R09: 0000000000000000 [ 162.412502][T12113] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 162.420459][T12113] R13: 000000000000000b R14: 00007f13f2882f60 R15: 00007ffd5bcc69e8 [ 162.428457][T12113] [ 162.460829][T12119] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 162.461177][T12115] 9pnet: Could not find request transport: fd0x0000000000000003 [ 162.477885][T12111] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 162.488025][T12119] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 162.516862][T12125] loop4: detected capacity change from 0 to 512 [ 162.518089][ T9777] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.567849][T12125] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 162.589643][T12125] can0: slcan on ttyS3. [ 162.617470][T12137] loop0: detected capacity change from 0 to 512 [ 162.675484][T12124] can0 (unregistered): slcan off ttyS3. [ 162.699653][T11052] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.724610][T12162] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 162.744487][T12162] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 162.791647][T12166] loop4: detected capacity change from 0 to 2048 [ 162.798293][T12166] EXT4-fs: Ignoring removed mblk_io_submit option [ 162.817994][T12166] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 162.838452][T11052] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.345678][T12118] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 163.625542][T12160] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 163.928892][T12206] loop0: detected capacity change from 0 to 512 [ 163.969321][T12206] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 163.991420][T12203] can0: slcan on ttyS3. [ 164.068662][T12211] loop4: detected capacity change from 0 to 2048 [ 164.075453][T12211] EXT4-fs: Ignoring removed mblk_io_submit option [ 164.087150][T12211] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 164.105466][T12197] can0 (unregistered): slcan off ttyS3. [ 164.117628][T11052] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.151776][T10623] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.167146][T12215] loop4: detected capacity change from 0 to 2048 [ 164.196461][T12215] loop4: p1 < > p4 [ 164.202075][T12215] loop4: p4 size 8388608 extends beyond EOD, truncated [ 164.287739][T12232] FAULT_INJECTION: forcing a failure. [ 164.287739][T12232] name failslab, interval 1, probability 0, space 0, times 0 [ 164.300589][T12232] CPU: 1 PID: 12232 Comm: syz.3.2348 Not tainted 6.10.0-syzkaller-01155-gd67978318827 #0 [ 164.310441][T12232] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 164.320509][T12232] Call Trace: [ 164.323820][T12232] [ 164.326729][T12232] dump_stack_lvl+0xf2/0x150 [ 164.331300][T12232] dump_stack+0x15/0x20 [ 164.335476][T12232] should_fail_ex+0x229/0x230 [ 164.340227][T12232] ? security_file_alloc+0x32/0xe0 [ 164.345335][T12232] __should_failslab+0x92/0xa0 [ 164.350198][T12232] should_failslab+0x9/0x20 [ 164.354728][T12232] kmem_cache_alloc_noprof+0x4c/0x290 [ 164.360161][T12232] security_file_alloc+0x32/0xe0 [ 164.365115][T12232] alloc_empty_file+0x121/0x310 [ 164.369971][T12232] path_openat+0x6a/0x1f10 [ 164.374491][T12232] ? _parse_integer_limit+0x167/0x180 [ 164.379866][T12232] ? _parse_integer+0x27/0x30 [ 164.384568][T12232] ? kstrtoull+0x110/0x140 [ 164.389084][T12232] ? kstrtouint+0x77/0xc0 [ 164.393463][T12232] do_filp_open+0xf7/0x200 [ 164.397922][T12232] do_sys_openat2+0xab/0x120 [ 164.402590][T12232] __x64_sys_openat+0xf3/0x120 [ 164.407523][T12232] x64_sys_call+0x1025/0x2d60 [ 164.412226][T12232] do_syscall_64+0xc9/0x1c0 [ 164.416744][T12232] ? clear_bhb_loop+0x55/0xb0 [ 164.421411][T12232] ? clear_bhb_loop+0x55/0xb0 [ 164.426071][T12232] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.431961][T12232] RIP: 0033:0x7f3e46341bd9 [ 164.436367][T12232] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 164.456039][T12232] RSP: 002b:00007f3e455c3048 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 164.464478][T12232] RAX: ffffffffffffffda RBX: 00007f3e464cff60 RCX: 00007f3e46341bd9 [ 164.472435][T12232] RDX: 00000000000c0600 RSI: 0000000020000040 RDI: ffffffffffffff9c [ 164.480417][T12232] RBP: 00007f3e455c30a0 R08: 0000000000000000 R09: 0000000000000000 [ 164.488378][T12232] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 164.496386][T12232] R13: 000000000000004d R14: 00007f3e464cff60 R15: 00007fff0aa6d328 [ 164.504397][T12232] [ 164.538196][T12237] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 164.560137][T12237] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 165.045103][T12249] loop0: detected capacity change from 0 to 2048 [ 165.053020][T12249] EXT4-fs: Ignoring removed mblk_io_submit option [ 165.068137][T12249] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 165.088114][T12258] loop4: detected capacity change from 0 to 512 [ 165.096047][T10623] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.108102][T12258] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 165.126461][T12258] can0: slcan on ttyS3. [ 165.183609][T12271] loop0: detected capacity change from 0 to 512 [ 165.195971][T12255] can0 (unregistered): slcan off ttyS3. [ 165.236215][T11052] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.263048][T12279] loop4: detected capacity change from 0 to 128 [ 165.286574][T12283] loop4: detected capacity change from 0 to 256 [ 165.304666][T12285] __nla_validate_parse: 4 callbacks suppressed [ 165.304711][T12285] netlink: 2028 bytes leftover after parsing attributes in process `syz.0.2360'. [ 165.320084][T12285] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2360'. [ 165.436567][T12236] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 165.463723][T12293] loop4: detected capacity change from 0 to 128 [ 165.497428][T12297] loop3: detected capacity change from 0 to 2048 [ 165.503991][T12297] EXT4-fs: Ignoring removed mblk_io_submit option [ 165.517117][T12297] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 165.537369][ T9777] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.156547][T12313] loop0: detected capacity change from 0 to 512 [ 166.168152][T12313] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 166.185084][T12313] can0: slcan on ttyS3. [ 166.235453][T12312] can0 (unregistered): slcan off ttyS3. [ 166.253111][T12324] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2373'. [ 166.277582][T10623] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.302735][T12326] syz.0.2374 (12326): /proc/12325/oom_adj is deprecated, please use /proc/12325/oom_score_adj instead. [ 166.314900][ T29] kauditd_printk_skb: 26 callbacks suppressed [ 166.314912][ T29] audit: type=1400 audit(530.430:9173): avc: denied { write } for pid=12325 comm="syz.0.2374" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 166.351698][T12327] af_packet: tpacket_rcv: packet too big, clamped from 65526 to 3966. macoff=82 [ 166.429263][ T29] audit: type=1326 audit(530.550:9174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12328 comm="syz.0.2375" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f81484cdbd9 code=0x0 [ 166.454882][T12339] loop4: detected capacity change from 0 to 2048 [ 166.462182][T12339] EXT4-fs: Ignoring removed mblk_io_submit option [ 166.471971][T12345] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2381'. [ 166.484869][T12339] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 166.530883][T11052] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.591632][T12358] loop4: detected capacity change from 0 to 512 [ 166.617690][T12358] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 166.635570][T12358] can0: slcan on ttyS3. [ 166.685401][T12357] can0 (unregistered): slcan off ttyS3. [ 166.696143][T11052] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.756726][T12376] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 166.963806][T12379] loop4: detected capacity change from 0 to 128 [ 166.970897][T12379] FAT-fs (loop4): bogus number of FAT structure [ 166.977230][T12379] FAT-fs (loop4): Can't find a valid FAT filesystem [ 166.993248][ T29] audit: type=1400 audit(531.110:9175): avc: denied { execute } for pid=12378 comm="syz.4.2392" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=38058 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 167.085253][T12384] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2394'. [ 167.115573][T12386] loop4: detected capacity change from 0 to 2048 [ 167.122247][T12386] EXT4-fs: Ignoring removed mblk_io_submit option [ 167.137806][T12386] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 167.157628][T11052] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.186222][T12392] loop4: detected capacity change from 0 to 256 [ 167.194734][T12392] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2397'. [ 167.208515][T12392] loop4: detected capacity change from 0 to 512 [ 167.215521][T12392] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 167.226988][T12394] loop0: detected capacity change from 0 to 512 [ 167.227649][T12392] EXT4-fs (loop4): 1 orphan inode deleted [ 167.239070][T12392] EXT4-fs (loop4): 1 truncate cleaned up [ 167.244988][T12392] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 167.258636][T12392] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.272126][T12394] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 167.301033][T12403] loop4: detected capacity change from 0 to 128 [ 167.303536][T12394] can0: slcan on ttyS3. [ 167.310143][T12403] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 167.328346][T12403] EXT4-fs warning (device loop4): ext4_dirblock_csum_verify:405: inode #2: comm syz.4.2400: No space for directory leaf checksum. Please run e2fsck -D. [ 167.343894][T12403] EXT4-fs error (device loop4): __ext4_find_entry:1651: inode #2: comm syz.4.2400: checksumming directory block 0 [ 167.372573][T12407] loop1: detected capacity change from 0 to 128 [ 167.382382][ T29] audit: type=1400 audit(531.500:9176): avc: denied { mount } for pid=12406 comm="syz.1.2401" name="/" dev="configfs" ino=1336 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 167.406233][T12393] can0 (unregistered): slcan off ttyS3. [ 167.435190][T10623] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.483682][T12411] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 167.498075][ T29] audit: type=1400 audit(531.620:9177): avc: denied { unmount } for pid=10026 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 167.545808][T12415] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2405'. [ 167.586579][T12428] loop3: detected capacity change from 0 to 128 [ 167.600363][T12430] loop0: detected capacity change from 0 to 128 [ 167.612240][T12430] EXT4-fs: Ignoring removed nobh option [ 167.625235][T12430] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 167.652220][T10623] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 167.679154][T12403] netlink: 'syz.4.2400': attribute type 1 has an invalid length. [ 167.686944][T12403] netlink: 'syz.4.2400': attribute type 2 has an invalid length. [ 167.717047][T12452] FAULT_INJECTION: forcing a failure. [ 167.717047][T12452] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 167.730815][T12452] CPU: 1 PID: 12452 Comm: syz.0.2415 Not tainted 6.10.0-syzkaller-01155-gd67978318827 #0 [ 167.740620][T12452] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 167.750728][T12452] Call Trace: [ 167.754001][T12452] [ 167.756927][T12452] dump_stack_lvl+0xf2/0x150 [ 167.761613][T12452] dump_stack+0x15/0x20 [ 167.765929][T12452] should_fail_ex+0x229/0x230 [ 167.769113][T12438] loop3: detected capacity change from 0 to 512 [ 167.770594][T12452] should_fail+0xb/0x10 [ 167.780951][T12452] should_fail_usercopy+0x1a/0x20 [ 167.786035][T12452] _copy_to_user+0x1e/0xa0 [ 167.790530][T12452] simple_read_from_buffer+0xa0/0x110 [ 167.795900][T12452] proc_fail_nth_read+0xfc/0x140 [ 167.800837][T12452] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 167.806417][T12452] vfs_read+0x1a2/0x6e0 [ 167.810566][T12452] ? __rcu_read_unlock+0x4e/0x70 [ 167.815596][T12452] ? __fget_files+0x1da/0x210 [ 167.820265][T12452] ksys_read+0xeb/0x1b0 [ 167.824491][T12452] __x64_sys_read+0x42/0x50 [ 167.829009][T12452] x64_sys_call+0x27d3/0x2d60 [ 167.833675][T12452] do_syscall_64+0xc9/0x1c0 [ 167.838268][T12452] ? clear_bhb_loop+0x55/0xb0 [ 167.842963][T12452] ? clear_bhb_loop+0x55/0xb0 [ 167.847637][T12452] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.853558][T12452] RIP: 0033:0x7f81484cc6bc [ 167.857959][T12452] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8c 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 1f 8d 02 00 48 [ 167.877554][T12452] RSP: 002b:00007f814774f040 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 167.885950][T12452] RAX: ffffffffffffffda RBX: 00007f814865bf60 RCX: 00007f81484cc6bc [ 167.893904][T12452] RDX: 000000000000000f RSI: 00007f814774f0b0 RDI: 0000000000000003 [ 167.901926][T12452] RBP: 00007f814774f0a0 R08: 0000000000000000 R09: 0000000000000000 [ 167.909892][T12452] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000001 [ 167.917967][T12452] R13: 000000000000004d R14: 00007f814865bf60 R15: 00007fff0f21c9d8 [ 167.925996][T12452] [ 167.937876][T12438] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 167.960038][T12438] can0: slcan on ttyS3. [ 167.997790][T12462] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 168.005855][T12437] can0 (unregistered): slcan off ttyS3. [ 168.021275][ T9777] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.025547][T12443] EXT4-fs warning (device loop4): ext4_dirblock_csum_verify:405: inode #2: comm syz.4.2400: No space for directory leaf checksum. Please run e2fsck -D. [ 168.046295][T12443] EXT4-fs error (device loop4): __ext4_find_entry:1651: inode #2: comm syz.4.2400: checksumming directory block 0 [ 168.080239][T12464] geneve2: entered promiscuous mode [ 168.085512][T12464] geneve2: entered allmulticast mode [ 168.126238][T12468] loop0: detected capacity change from 0 to 2048 [ 168.186030][T12468] loop0: p1 < > p4 [ 168.190538][T12468] loop0: p4 size 8388608 extends beyond EOD, truncated [ 168.220684][ T29] audit: type=1326 audit(532.340:9178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12474 comm="syz.2.2424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7ce00dbd9 code=0x7ffc0000 [ 168.246021][ T29] audit: type=1326 audit(532.370:9179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12474 comm="syz.2.2424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc7ce00dbd9 code=0x7ffc0000 [ 168.269170][ T29] audit: type=1326 audit(532.370:9180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12474 comm="syz.2.2424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7ce00dbd9 code=0x7ffc0000 [ 168.292865][ T29] audit: type=1326 audit(532.370:9181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12474 comm="syz.2.2424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7ce00dbd9 code=0x7ffc0000 [ 168.316660][ T29] audit: type=1326 audit(532.370:9182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12474 comm="syz.2.2424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc7ce00dbd9 code=0x7ffc0000 [ 168.393652][T12481] loop0: detected capacity change from 0 to 2048 [ 168.420402][T12481] EXT4-fs: Ignoring removed mblk_io_submit option [ 168.448650][T12481] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 168.481383][T10623] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.517261][T11052] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 168.534647][T12490] FAULT_INJECTION: forcing a failure. [ 168.534647][T12490] name failslab, interval 1, probability 0, space 0, times 0 [ 168.547319][T12490] CPU: 0 PID: 12490 Comm: syz.0.2427 Not tainted 6.10.0-syzkaller-01155-gd67978318827 #0 [ 168.557125][T12490] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 168.567181][T12490] Call Trace: [ 168.570539][T12490] [ 168.573462][T12490] dump_stack_lvl+0xf2/0x150 [ 168.578071][T12490] dump_stack+0x15/0x20 [ 168.582258][T12490] should_fail_ex+0x229/0x230 [ 168.586977][T12490] ? shmem_alloc_inode+0x34/0x50 [ 168.591910][T12490] __should_failslab+0x92/0xa0 [ 168.596665][T12490] should_failslab+0x9/0x20 [ 168.601292][T12490] kmem_cache_alloc_lru_noprof+0x51/0x2a0 [ 168.607015][T12490] shmem_alloc_inode+0x34/0x50 [ 168.611779][T12490] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 168.617235][T12490] alloc_inode+0x3c/0x160 [ 168.621596][T12490] new_inode+0x1e/0x100 [ 168.625739][T12490] shmem_get_inode+0x258/0x740 [ 168.630539][T12490] __shmem_file_setup+0x127/0x1f0 [ 168.635593][T12490] shmem_file_setup+0x3b/0x50 [ 168.640287][T12490] __se_sys_memfd_create+0x31d/0x600 [ 168.645564][T12490] __x64_sys_memfd_create+0x31/0x40 [ 168.650787][T12490] x64_sys_call+0x2891/0x2d60 [ 168.655508][T12490] do_syscall_64+0xc9/0x1c0 [ 168.660007][T12490] ? clear_bhb_loop+0x55/0xb0 [ 168.664669][T12490] ? clear_bhb_loop+0x55/0xb0 [ 168.669335][T12490] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.675223][T12490] RIP: 0033:0x7f81484cdbd9 [ 168.679629][T12490] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 168.699346][T12490] RSP: 002b:00007f814774ee28 EFLAGS: 00000206 ORIG_RAX: 000000000000013f [ 168.707835][T12490] RAX: ffffffffffffffda RBX: 000000000000051a RCX: 00007f81484cdbd9 [ 168.715878][T12490] RDX: 00007f814774ef00 RSI: 0000000000000000 RDI: 00007f814853bd24 [ 168.723836][T12490] RBP: 0000000020001200 R08: 00007f814774ebc7 R09: 00007f814774ee50 [ 168.731792][T12490] R10: 000000000000000a R11: 0000000000000206 R12: 0000000020000240 [ 168.739757][T12490] R13: 00007f814774ef00 R14: 00007f814774eec0 R15: 0000000020000000 [ 168.747915][T12490] [ 168.770858][T12489] can0: slcan on ttyS3. [ 168.835619][T12488] can0 (unregistered): slcan off ttyS3. [ 168.971485][T12532] can0: slcan on ttyS3. [ 169.016458][T12531] can0 (unregistered): slcan off ttyS3. [ 169.058424][T12536] can0: slcan on ttyS3. [ 169.095830][T12535] can0 (unregistered): slcan off ttyS3. [ 171.081559][T12697] FAULT_INJECTION: forcing a failure. [ 171.081559][T12697] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 171.094671][T12697] CPU: 0 PID: 12697 Comm: syz.2.2514 Not tainted 6.10.0-syzkaller-01155-gd67978318827 #0 [ 171.104483][T12697] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 171.114543][T12697] Call Trace: [ 171.117825][T12697] [ 171.120775][T12697] dump_stack_lvl+0xf2/0x150 [ 171.125387][T12697] dump_stack+0x15/0x20 [ 171.129560][T12697] should_fail_ex+0x229/0x230 [ 171.134261][T12697] should_fail+0xb/0x10 [ 171.138428][T12697] should_fail_usercopy+0x1a/0x20 [ 171.143539][T12697] _copy_from_user+0x1e/0xd0 [ 171.148227][T12697] kstrtouint_from_user+0x76/0xe0 [ 171.153374][T12697] proc_fail_nth_write+0x4f/0x160 [ 171.158424][T12697] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 171.164212][T12697] vfs_write+0x28b/0x900 [ 171.168472][T12697] ? __fget_files+0x1da/0x210 [ 171.173169][T12697] ksys_write+0xeb/0x1b0 [ 171.177431][T12697] __x64_sys_write+0x42/0x50 [ 171.182430][T12697] x64_sys_call+0x27dd/0x2d60 [ 171.187116][T12697] do_syscall_64+0xc9/0x1c0 [ 171.191662][T12697] ? clear_bhb_loop+0x55/0xb0 [ 171.196409][T12697] ? clear_bhb_loop+0x55/0xb0 [ 171.201096][T12697] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.207027][T12697] RIP: 0033:0x7fc7ce00c75f [ 171.211443][T12697] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 29 8c 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 7c 8c 02 00 48 [ 171.231249][T12697] RSP: 002b:00007fc7cd28f040 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 171.239660][T12697] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fc7ce00c75f [ 171.247682][T12697] RDX: 0000000000000001 RSI: 00007fc7cd28f0b0 RDI: 0000000000000003 [ 171.255658][T12697] RBP: 00007fc7cd28f0a0 R08: 0000000000000000 R09: 0000000000000000 [ 171.263639][T12697] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 171.271742][T12697] R13: 000000000000000b R14: 00007fc7ce19bf60 R15: 00007ffee606c408 [ 171.279764][T12697] [ 171.280753][T12723] futex_wake_op: syz.1.2527 tries to shift op by -1; fix this program [ 171.320218][ T29] kauditd_printk_skb: 656 callbacks suppressed [ 171.320230][ T29] audit: type=1400 audit(535.440:9839): avc: denied { read write } for pid=11748 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 171.360466][ T29] audit: type=1400 audit(535.440:9840): avc: denied { open } for pid=12731 comm="syz.2.2532" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 171.379302][ T29] audit: type=1400 audit(535.450:9841): avc: denied { read write } for pid=11748 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 171.403611][ T29] audit: type=1400 audit(535.450:9842): avc: denied { read write } for pid=10026 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 171.428081][ T29] audit: type=1400 audit(535.480:9843): avc: denied { read } for pid=12733 comm="syz.2.2533" dev="nsfs" ino=4026532779 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=0 [ 171.448968][ T29] audit: type=1400 audit(535.480:9844): avc: denied { read write } for pid=10623 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 171.473042][ T29] audit: type=1400 audit(535.480:9845): avc: denied { create } for pid=12733 comm="syz.2.2533" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=0 [ 171.487649][T12748] syzkaller0: left promiscuous mode [ 171.492778][ T29] audit: type=1400 audit(535.480:9846): avc: denied { create } for pid=12733 comm="syz.2.2533" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=0 [ 171.497171][T12748] syzkaller0: left allmulticast mode [ 171.516522][ T29] audit: type=1400 audit(535.480:9847): avc: denied { prog_load } for pid=12733 comm="syz.2.2533" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 171.543026][ T29] audit: type=1400 audit(535.480:9848): avc: denied { create } for pid=12735 comm="syz.1.2531" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=0 [ 171.627745][T12760] futex_wake_op: syz.0.2541 tries to shift op by -1; fix this program [ 171.872210][T12776] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 171.902048][T12780] FAULT_INJECTION: forcing a failure. [ 171.902048][T12780] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 171.915156][T12780] CPU: 0 PID: 12780 Comm: syz.4.2549 Not tainted 6.10.0-syzkaller-01155-gd67978318827 #0 [ 171.924975][T12780] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 171.935028][T12780] Call Trace: [ 171.938346][T12780] [ 171.941335][T12780] dump_stack_lvl+0xf2/0x150 [ 171.945932][T12780] dump_stack+0x15/0x20 [ 171.950137][T12780] should_fail_ex+0x229/0x230 [ 171.954851][T12780] should_fail+0xb/0x10 [ 171.959102][T12780] should_fail_usercopy+0x1a/0x20 [ 171.964123][T12780] _copy_from_user+0x1e/0xd0 [ 171.968766][T12780] memdup_user+0x64/0xc0 [ 171.973037][T12780] strndup_user+0x68/0xa0 [ 171.977366][T12780] __se_sys_mount+0x4e/0x2d0 [ 171.982102][T12780] ? fput+0x13b/0x180 [ 171.986127][T12780] ? ksys_write+0x178/0x1b0 [ 171.990669][T12780] __x64_sys_mount+0x67/0x80 [ 171.995258][T12780] x64_sys_call+0x203e/0x2d60 [ 171.999978][T12780] do_syscall_64+0xc9/0x1c0 [ 172.004491][T12780] ? clear_bhb_loop+0x55/0xb0 [ 172.009225][T12780] ? clear_bhb_loop+0x55/0xb0 [ 172.013908][T12780] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.019886][T12780] RIP: 0033:0x7f13f26f4bd9 [ 172.024347][T12780] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 172.043966][T12780] RSP: 002b:00007f13f1976048 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 172.052423][T12780] RAX: ffffffffffffffda RBX: 00007f13f2882f60 RCX: 00007f13f26f4bd9 [ 172.060398][T12780] RDX: 00000000200000c0 RSI: 0000000020000080 RDI: 0000000000000000 [ 172.068802][T12780] RBP: 00007f13f19760a0 R08: 0000000020000440 R09: 0000000000000000 [ 172.076821][T12780] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 172.084790][T12780] R13: 000000000000000b R14: 00007f13f2882f60 R15: 00007ffd5bcc69e8 [ 172.092768][T12780] [ 172.129081][T12792] FAULT_INJECTION: forcing a failure. [ 172.129081][T12792] name failslab, interval 1, probability 0, space 0, times 0 [ 172.141718][T12792] CPU: 0 PID: 12792 Comm: syz.4.2553 Not tainted 6.10.0-syzkaller-01155-gd67978318827 #0 [ 172.151607][T12792] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 172.161714][T12792] Call Trace: [ 172.165002][T12792] [ 172.167913][T12792] dump_stack_lvl+0xf2/0x150 [ 172.172484][T12792] dump_stack+0x15/0x20 [ 172.176695][T12792] should_fail_ex+0x229/0x230 [ 172.181441][T12792] ? __vmalloc_node_range_noprof+0x44b/0xef0 [ 172.187500][T12792] __should_failslab+0x92/0xa0 [ 172.192256][T12792] should_failslab+0x9/0x20 [ 172.196809][T12792] __kmalloc_node_noprof+0xa8/0x380 [ 172.202014][T12792] __vmalloc_node_range_noprof+0x44b/0xef0 [ 172.207958][T12792] ? avc_has_perm+0xd4/0x160 [ 172.212649][T12792] ? avc_has_perm_noaudit+0x1cc/0x210 [ 172.218116][T12792] ? do_replace+0x19c/0x2d0 [ 172.222623][T12792] __vmalloc_noprof+0x5e/0x70 [ 172.227404][T12792] ? do_replace+0x19c/0x2d0 [ 172.231894][T12792] do_replace+0x19c/0x2d0 [ 172.236260][T12792] do_ebt_set_ctl+0x1bd/0xb80 [ 172.240998][T12792] ? _parse_integer_limit+0x167/0x180 [ 172.246361][T12792] ? __rcu_read_unlock+0x4e/0x70 [ 172.251301][T12792] ? ip4_datagram_release_cb+0x3f9/0x430 [ 172.256984][T12792] ? _parse_integer+0x27/0x30 [ 172.261693][T12792] ? _raw_spin_unlock_bh+0x36/0x40 [ 172.266782][T12792] ? release_sock+0x117/0x150 [ 172.271529][T12792] ? sockopt_release_sock+0x42/0x50 [ 172.276769][T12792] ? do_ip_setsockopt+0x1fcf/0x2340 [ 172.281969][T12792] nf_setsockopt+0x195/0x1b0 [ 172.286607][T12792] ip_setsockopt+0xea/0x100 [ 172.291162][T12792] udp_setsockopt+0x95/0xb0 [ 172.295653][T12792] sock_common_setsockopt+0x64/0x80 [ 172.300851][T12792] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 172.306747][T12792] __sys_setsockopt+0x1d8/0x250 [ 172.311601][T12792] __x64_sys_setsockopt+0x66/0x80 [ 172.316684][T12792] x64_sys_call+0x278d/0x2d60 [ 172.321395][T12792] do_syscall_64+0xc9/0x1c0 [ 172.325937][T12792] ? clear_bhb_loop+0x55/0xb0 [ 172.330590][T12792] ? clear_bhb_loop+0x55/0xb0 [ 172.335264][T12792] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.341224][T12792] RIP: 0033:0x7f13f26f4bd9 [ 172.345689][T12792] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 172.365370][T12792] RSP: 002b:00007f13f1976048 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 172.373788][T12792] RAX: ffffffffffffffda RBX: 00007f13f2882f60 RCX: 00007f13f26f4bd9 [ 172.381837][T12792] RDX: 0000000000000080 RSI: 0000000000000000 RDI: 0000000000000004 [ 172.389897][T12792] RBP: 00007f13f19760a0 R08: 00000000000002c8 R09: 0000000000000000 [ 172.397878][T12792] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000001 [ 172.405851][T12792] R13: 000000000000000b R14: 00007f13f2882f60 R15: 00007ffd5bcc69e8 [ 172.413814][T12792] [ 172.416878][T12792] syz.4.2553: vmalloc error: size 4096, failed to allocated page array size 8, mode:0x400cc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM), nodemask=(null),cpuset=syz4,mems_allowed=0 [ 172.433980][T12792] CPU: 0 PID: 12792 Comm: syz.4.2553 Not tainted 6.10.0-syzkaller-01155-gd67978318827 #0 [ 172.443799][T12792] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 172.453837][T12792] Call Trace: [ 172.457158][T12792] [ 172.460080][T12792] dump_stack_lvl+0xf2/0x150 [ 172.464666][T12792] dump_stack+0x15/0x20 [ 172.468811][T12792] warn_alloc+0x145/0x1b0 [ 172.473179][T12792] ? dump_stack+0x15/0x20 [ 172.477491][T12792] ? should_fail_ex+0x198/0x230 [ 172.482422][T12792] __vmalloc_node_range_noprof+0x4df/0xef0 [ 172.488373][T12792] ? avc_has_perm+0xd4/0x160 [ 172.492977][T12792] ? avc_has_perm_noaudit+0x1cc/0x210 [ 172.498458][T12792] ? do_replace+0x19c/0x2d0 [ 172.502978][T12792] __vmalloc_noprof+0x5e/0x70 [ 172.507802][T12792] ? do_replace+0x19c/0x2d0 [ 172.512296][T12792] do_replace+0x19c/0x2d0 [ 172.516674][T12792] do_ebt_set_ctl+0x1bd/0xb80 [ 172.521384][T12792] ? _parse_integer_limit+0x167/0x180 [ 172.526858][T12792] ? __rcu_read_unlock+0x4e/0x70 [ 172.531815][T12792] ? ip4_datagram_release_cb+0x3f9/0x430 [ 172.537488][T12792] ? _parse_integer+0x27/0x30 [ 172.542170][T12792] ? _raw_spin_unlock_bh+0x36/0x40 [ 172.547289][T12792] ? release_sock+0x117/0x150 [ 172.552111][T12792] ? sockopt_release_sock+0x42/0x50 [ 172.557386][T12792] ? do_ip_setsockopt+0x1fcf/0x2340 [ 172.562566][T12792] nf_setsockopt+0x195/0x1b0 [ 172.567203][T12792] ip_setsockopt+0xea/0x100 [ 172.571690][T12792] udp_setsockopt+0x95/0xb0 [ 172.576181][T12792] sock_common_setsockopt+0x64/0x80 [ 172.581418][T12792] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 172.587382][T12792] __sys_setsockopt+0x1d8/0x250 [ 172.592248][T12792] __x64_sys_setsockopt+0x66/0x80 [ 172.597276][T12792] x64_sys_call+0x278d/0x2d60 [ 172.601968][T12792] do_syscall_64+0xc9/0x1c0 [ 172.606523][T12792] ? clear_bhb_loop+0x55/0xb0 [ 172.611218][T12792] ? clear_bhb_loop+0x55/0xb0 [ 172.615939][T12792] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.621923][T12792] RIP: 0033:0x7f13f26f4bd9 [ 172.626406][T12792] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 172.646280][T12792] RSP: 002b:00007f13f1976048 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 172.654677][T12792] RAX: ffffffffffffffda RBX: 00007f13f2882f60 RCX: 00007f13f26f4bd9 [ 172.662723][T12792] RDX: 0000000000000080 RSI: 0000000000000000 RDI: 0000000000000004 [ 172.670677][T12792] RBP: 00007f13f19760a0 R08: 00000000000002c8 R09: 0000000000000000 [ 172.678709][T12792] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000001 [ 172.686780][T12792] R13: 000000000000000b R14: 00007f13f2882f60 R15: 00007ffd5bcc69e8 [ 172.694823][T12792] [ 172.698723][T12792] Mem-Info: [ 172.701858][T12792] active_anon:2350 inactive_anon:1 isolated_anon:0 [ 172.701858][T12792] active_file:10502 inactive_file:14320 isolated_file:0 [ 172.701858][T12792] unevictable:20465 dirty:220 writeback:0 [ 172.701858][T12792] slab_reclaimable:2677 slab_unreclaimable:17133 [ 172.701858][T12792] mapped:13174 shmem:220 pagetables:633 [ 172.701858][T12792] sec_pagetables:0 bounce:0 [ 172.701858][T12792] kernel_misc_reclaimable:0 [ 172.701858][T12792] free:1876638 free_pcp:19513 free_cma:0 [ 172.747954][T12792] Node 0 active_anon:9400kB inactive_anon:4kB active_file:42008kB inactive_file:57280kB unevictable:81860kB isolated(anon):0kB isolated(file):0kB mapped:52696kB dirty:880kB writeback:0kB shmem:880kB writeback_tmp:0kB kernel_stack:2848kB pagetables:2532kB sec_pagetables:0kB all_unreclaimable? no [ 172.776452][T12792] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 172.803283][T12792] lowmem_reserve[]: 0 2874 7852 0 [ 172.808337][T12792] Node 0 DMA32 free:2957172kB boost:0kB min:4144kB low:7084kB high:10024kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2960712kB mlocked:0kB bounce:0kB free_pcp:3540kB local_pcp:3540kB free_cma:0kB [ 172.837041][T12792] lowmem_reserve[]: 0 0 4978 0 [ 172.841951][T12792] Node 0 Normal free:4534020kB boost:0kB min:7180kB low:12276kB high:17372kB reserved_highatomic:0KB active_anon:9400kB inactive_anon:4kB active_file:42008kB inactive_file:57280kB unevictable:81860kB writepending:880kB present:5242880kB managed:5098208kB mlocked:81860kB bounce:0kB free_pcp:74512kB local_pcp:72156kB free_cma:0kB [ 172.872957][T12792] lowmem_reserve[]: 0 0 0 0 [ 172.877472][T12792] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 172.890098][T12792] Node 0 DMA32: 5*4kB (M) 2*8kB (M) 3*16kB (M) 5*32kB (M) 2*64kB (M) 2*128kB (M) 3*256kB (M) 3*512kB (M) 3*1024kB (M) 1*2048kB (M) 720*4096kB (M) = 2957172kB [ 172.906133][T12792] Node 0 Normal: 201*4kB (UME) 62*8kB (UME) 51*16kB (UME) 20*32kB (UE) 13*64kB (UME) 20*128kB (UME) 9*256kB (UM) 19*512kB (UME) 18*1024kB (UM) 20*2048kB (UM) 1088*4096kB (UM) = 4534020kB [ 172.924649][T12792] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 172.934002][T12792] 25045 total pagecache pages [ 172.938679][T12792] 4 pages in swap cache [ 172.942820][T12792] Free swap = 124580kB [ 172.947050][T12792] Total swap = 124996kB [ 172.951192][T12792] 2097051 pages RAM [ 172.955082][T12792] 0 pages HighMem/MovableOnly [ 172.959771][T12792] 78481 pages reserved [ 173.218311][T12845] FAULT_INJECTION: forcing a failure. [ 173.218311][T12845] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 173.232013][T12845] CPU: 1 PID: 12845 Comm: syz.1.2576 Not tainted 6.10.0-syzkaller-01155-gd67978318827 #0 [ 173.241904][T12845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 173.252018][T12845] Call Trace: [ 173.255283][T12845] [ 173.258202][T12845] dump_stack_lvl+0xf2/0x150 [ 173.262870][T12845] dump_stack+0x15/0x20 [ 173.267030][T12845] should_fail_ex+0x229/0x230 [ 173.271836][T12845] should_fail+0xb/0x10 [ 173.275996][T12845] should_fail_usercopy+0x1a/0x20 [ 173.281107][T12845] _copy_from_user+0x1e/0xd0 [ 173.285717][T12845] memdup_user+0x64/0xc0 [ 173.290005][T12845] strndup_user+0x68/0xa0 [ 173.294368][T12845] __se_sys_mount+0x4e/0x2d0 [ 173.298981][T12845] ? fput+0x13b/0x180 [ 173.303074][T12845] ? ksys_write+0x178/0x1b0 [ 173.307641][T12845] __x64_sys_mount+0x67/0x80 [ 173.312250][T12845] x64_sys_call+0x203e/0x2d60 [ 173.316953][T12845] do_syscall_64+0xc9/0x1c0 [ 173.321456][T12845] ? clear_bhb_loop+0x55/0xb0 [ 173.326135][T12845] ? clear_bhb_loop+0x55/0xb0 [ 173.330816][T12845] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.336793][T12845] RIP: 0033:0x7f257e452bd9 [ 173.341200][T12845] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 173.360802][T12845] RSP: 002b:00007f257d6d4048 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 173.369212][T12845] RAX: ffffffffffffffda RBX: 00007f257e5e0f60 RCX: 00007f257e452bd9 [ 173.377238][T12845] RDX: 00000000200000c0 RSI: 0000000020000080 RDI: 0000000000000000 [ 173.385224][T12845] RBP: 00007f257d6d40a0 R08: 0000000020000440 R09: 0000000000000000 [ 173.393196][T12845] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 173.401161][T12845] R13: 000000000000004d R14: 00007f257e5e0f60 R15: 00007ffe5704a078 [ 173.409179][T12845] [ 173.945839][T12827] FAULT_INJECTION: forcing a failure. [ 173.945839][T12827] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 173.959063][T12827] CPU: 0 PID: 12827 Comm: syz.2.2567 Not tainted 6.10.0-syzkaller-01155-gd67978318827 #0 [ 173.968867][T12827] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 173.976356][T12881] cgroup: fork rejected by pids controller in [ 173.978908][T12827] Call Trace: [ 173.978918][T12827] [ 173.978925][T12827] dump_stack_lvl+0xf2/0x150 [ 173.985075][T12881] /syz4 [ 173.988317][T12827] dump_stack+0x15/0x20 [ 173.991255][T12881] [ 173.995791][T12827] should_fail_ex+0x229/0x230 [ 174.009769][T12827] should_fail+0xb/0x10 [ 174.013980][T12827] should_fail_usercopy+0x1a/0x20 [ 174.019010][T12827] _copy_to_user+0x1e/0xa0 [ 174.023525][T12827] simple_read_from_buffer+0xa0/0x110 [ 174.028939][T12827] proc_fail_nth_read+0xfc/0x140 [ 174.034378][T12827] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 174.040032][T12827] vfs_read+0x1a2/0x6e0 [ 174.044216][T12827] ? __rcu_read_unlock+0x4e/0x70 [ 174.049182][T12827] ? __fget_files+0x1da/0x210 [ 174.053868][T12827] ksys_read+0xeb/0x1b0 [ 174.058042][T12827] __x64_sys_read+0x42/0x50 [ 174.062634][T12827] x64_sys_call+0x27d3/0x2d60 [ 174.067327][T12827] do_syscall_64+0xc9/0x1c0 [ 174.071865][T12827] ? clear_bhb_loop+0x55/0xb0 [ 174.076560][T12827] ? clear_bhb_loop+0x55/0xb0 [ 174.081249][T12827] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.087241][T12827] RIP: 0033:0x7fc7ce00c6bc [ 174.091748][T12827] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8c 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 1f 8d 02 00 48 [ 174.111356][T12827] RSP: 002b:00007fc7cd28f040 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 174.119912][T12827] RAX: ffffffffffffffda RBX: 00007fc7ce19bf60 RCX: 00007fc7ce00c6bc [ 174.127917][T12827] RDX: 000000000000000f RSI: 00007fc7cd28f0b0 RDI: 0000000000000003 [ 174.135977][T12827] RBP: 00007fc7cd28f0a0 R08: 0000000000000000 R09: 0000000000000000 [ 174.143974][T12827] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 174.151946][T12827] R13: 000000000000000b R14: 00007fc7ce19bf60 R15: 00007ffee606c408 [ 174.159928][T12827] [ 174.247964][T12994] FAULT_INJECTION: forcing a failure. [ 174.247964][T12994] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 174.262094][T12994] CPU: 1 PID: 12994 Comm: syz.3.2597 Not tainted 6.10.0-syzkaller-01155-gd67978318827 #0 [ 174.271962][T12994] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 174.282446][T12994] Call Trace: [ 174.285716][T12994] [ 174.288724][T12994] dump_stack_lvl+0xf2/0x150 [ 174.293456][T12994] dump_stack+0x15/0x20 [ 174.297672][T12994] should_fail_ex+0x229/0x230 [ 174.302453][T12994] should_fail+0xb/0x10 [ 174.306638][T12994] should_fail_usercopy+0x1a/0x20 [ 174.311740][T12994] strncpy_from_user+0x25/0x270 [ 174.316597][T12994] ? should_failslab+0x9/0x20 [ 174.321431][T12994] ? kmem_cache_alloc_noprof+0x10c/0x290 [ 174.327158][T12994] getname_flags+0xb0/0x3b0 [ 174.331698][T12994] getname+0x17/0x20 [ 174.335693][T12994] do_sys_openat2+0x67/0x120 [ 174.340337][T12994] __x64_sys_openat+0xf3/0x120 [ 174.345112][T12994] x64_sys_call+0x1025/0x2d60 [ 174.349865][T12994] do_syscall_64+0xc9/0x1c0 [ 174.354385][T12994] ? clear_bhb_loop+0x55/0xb0 [ 174.359116][T12994] ? clear_bhb_loop+0x55/0xb0 [ 174.363878][T12994] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.369793][T12994] RIP: 0033:0x7f3e46341bd9 [ 174.374205][T12994] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 174.393812][T12994] RSP: 002b:00007f3e455c3048 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 174.402248][T12994] RAX: ffffffffffffffda RBX: 00007f3e464cff60 RCX: 00007f3e46341bd9 [ 174.408645][T13001] ipt_rpfilter: unknown options [ 174.410215][T12994] RDX: 0000000000000000 RSI: 0000000020000140 RDI: ffffffffffffff9c [ 174.410236][T12994] RBP: 00007f3e455c30a0 R08: 0000000000000000 R09: 0000000000000000 [ 174.431012][T12994] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 174.438994][T12994] R13: 000000000000004d R14: 00007f3e464cff60 R15: 00007fff0aa6d328 [ 174.446975][T12994] [ 174.616754][ T1514] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.634078][T13055] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65040 sclass=netlink_route_socket pid=13055 comm=syz.0.2622 [ 174.669108][ T1514] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.723342][ T1514] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.776128][ T1514] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.838431][ T1514] bridge_slave_1: left allmulticast mode [ 174.844084][ T1514] bridge_slave_1: left promiscuous mode [ 174.849836][ T1514] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.857529][ T1514] bridge_slave_0: left allmulticast mode [ 174.863251][ T1514] bridge_slave_0: left promiscuous mode [ 174.868834][ T1514] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.981782][ T1514] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 174.992032][ T1514] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 175.002438][ T1514] bond0 (unregistering): Released all slaves [ 175.111141][ T1514] hsr_slave_0: left promiscuous mode [ 175.116906][ T1514] hsr_slave_1: left promiscuous mode [ 175.123128][ T1514] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 175.130603][ T1514] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 175.138234][ T1514] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 175.145781][ T1514] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 175.155115][ T1514] veth1_macvtap: left promiscuous mode [ 175.160658][ T1514] veth0_macvtap: left promiscuous mode [ 175.166152][ T1514] veth1_vlan: left promiscuous mode [ 175.171456][ T1514] veth0_vlan: left promiscuous mode [ 175.252826][ T1514] team0 (unregistering): Port device team_slave_1 removed [ 175.263450][ T1514] team0 (unregistering): Port device team_slave_0 removed [ 176.392423][T13088] FAULT_INJECTION: forcing a failure. [ 176.392423][T13088] name failslab, interval 1, probability 0, space 0, times 0 [ 176.405142][T13088] CPU: 0 PID: 13088 Comm: syz.0.2630 Not tainted 6.10.0-syzkaller-01155-gd67978318827 #0 [ 176.414962][T13088] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 176.425032][T13088] Call Trace: [ 176.428290][T13088] [ 176.431204][T13088] dump_stack_lvl+0xf2/0x150 [ 176.435817][T13088] dump_stack+0x15/0x20 [ 176.439953][T13088] should_fail_ex+0x229/0x230 [ 176.444672][T13088] ? mas_dup_build+0x1e8/0xd10 [ 176.449437][T13088] __should_failslab+0x92/0xa0 [ 176.454195][T13088] should_failslab+0x9/0x20 [ 176.458694][T13088] kmem_cache_alloc_noprof+0x4c/0x290 [ 176.464206][T13088] mas_dup_build+0x1e8/0xd10 [ 176.468851][T13088] ? osq_lock+0x62/0x220 [ 176.473173][T13088] ? rwsem_spin_on_owner+0x19/0x140 [ 176.478451][T13088] __mt_dup+0xa4/0x160 [ 176.482517][T13088] copy_mm+0x332/0x10e0 [ 176.486843][T13088] copy_process+0xee1/0x1f90 [ 176.491425][T13088] kernel_clone+0x167/0x5e0 [ 176.495923][T13088] ? vfs_write+0x5a5/0x900 [ 176.500401][T13088] __x64_sys_clone+0xe8/0x120 [ 176.505136][T13088] x64_sys_call+0x2d23/0x2d60 [ 176.509814][T13088] do_syscall_64+0xc9/0x1c0 [ 176.514307][T13088] ? clear_bhb_loop+0x55/0xb0 [ 176.518996][T13088] ? clear_bhb_loop+0x55/0xb0 [ 176.523726][T13088] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.529627][T13088] RIP: 0033:0x7f81484cdbd9 [ 176.534031][T13088] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 176.553722][T13088] RSP: 002b:00007f814772dff8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 176.562265][T13088] RAX: ffffffffffffffda RBX: 00007f814865c038 RCX: 00007f81484cdbd9 [ 176.570237][T13088] RDX: 00000000200000c0 RSI: 0000000000000000 RDI: 0000000000001000 [ 176.578192][T13088] RBP: 00007f814772e0a0 R08: 0000000000000000 R09: 0000000000000000 [ 176.586184][T13088] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 176.594139][T13088] R13: 000000000000006e R14: 00007f814865c038 R15: 00007fff0f21c9d8 [ 176.602118][T13088] [ 176.626617][ T29] kauditd_printk_skb: 547 callbacks suppressed [ 176.626630][ T29] audit: type=1400 audit(540.576:10396): avc: denied { read write } for pid=10623 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 177.084388][ T29] audit: type=1400 audit(541.000:10397): avc: denied { execmem } for pid=13089 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 177.104699][ T29] audit: type=1400 audit(541.000:10398): avc: denied { open } for pid=13092 comm="syz.1.2635" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 177.123531][ T29] audit: type=1400 audit(541.000:10399): avc: denied { read } for pid=13096 comm="syz.3.2637" dev="nsfs" ino=4026532842 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=0 [ 177.144312][ T29] audit: type=1400 audit(541.000:10400): avc: denied { create } for pid=13096 comm="syz.3.2637" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 177.164315][ T29] audit: type=1400 audit(541.000:10401): avc: denied { create } for pid=13096 comm="syz.3.2637" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=0 [ 177.183496][ T29] audit: type=1400 audit(541.010:10402): avc: denied { read write } for pid=13096 comm="syz.3.2637" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 177.207150][ T29] audit: type=1400 audit(541.010:10403): avc: denied { prog_load } for pid=13096 comm="syz.3.2637" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 177.225774][ T29] audit: type=1400 audit(541.010:10404): avc: denied { create } for pid=13090 comm="syz.0.2634" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=0 [ 177.245159][ T29] audit: type=1400 audit(541.010:10405): avc: denied { create } for pid=13090 comm="syz.0.2634" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=0 [ 178.960396][T13125] FAULT_INJECTION: forcing a failure. [ 178.960396][T13125] name failslab, interval 1, probability 0, space 0, times 0 [ 178.973496][T13125] CPU: 1 PID: 13125 Comm: syz.0.2640 Not tainted 6.10.0-syzkaller-01155-gd67978318827 #0 [ 178.983284][T13125] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 178.993385][T13125] Call Trace: [ 178.996663][T13125] [ 178.999591][T13125] dump_stack_lvl+0xf2/0x150 [ 179.004567][T13125] dump_stack+0x15/0x20 [ 179.008708][T13125] should_fail_ex+0x229/0x230 [ 179.013454][T13125] ? alloc_super+0x3a/0x5b0 [ 179.017953][T13125] __should_failslab+0x92/0xa0 [ 179.022744][T13125] should_failslab+0x9/0x20 [ 179.027275][T13125] kmalloc_trace_noprof+0x4b/0x2a0 [ 179.032477][T13125] ? avc_has_perm_noaudit+0x1cc/0x210 [ 179.037908][T13125] alloc_super+0x3a/0x5b0 [ 179.042236][T13125] ? __pfx_test_single_super+0x10/0x10 [ 179.047713][T13125] sget_fc+0x1c1/0x5d0 [ 179.051847][T13125] ? __pfx_set_anon_super_fc+0x10/0x10 [ 179.057327][T13125] ? __pfx_gadgetfs_fill_super+0x10/0x10 [ 179.063006][T13125] get_tree_single+0x2d/0x100 [ 179.067675][T13125] gadgetfs_get_tree+0x1c/0x30 [ 179.072438][T13125] vfs_get_tree+0x56/0x1d0 [ 179.076864][T13125] vfs_cmd_create+0x83/0x130 [ 179.081527][T13125] __se_sys_fsconfig+0x6bd/0x9c0 [ 179.086625][T13125] __x64_sys_fsconfig+0x67/0x80 [ 179.091546][T13125] x64_sys_call+0x10fe/0x2d60 [ 179.096250][T13125] do_syscall_64+0xc9/0x1c0 [ 179.100791][T13125] ? clear_bhb_loop+0x55/0xb0 [ 179.105530][T13125] ? clear_bhb_loop+0x55/0xb0 [ 179.110196][T13125] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.116158][T13125] RIP: 0033:0x7f81484cdbd9 [ 179.120560][T13125] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 179.140369][T13125] RSP: 002b:00007f814774f048 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 179.148869][T13125] RAX: ffffffffffffffda RBX: 00007f814865bf60 RCX: 00007f81484cdbd9 [ 179.156830][T13125] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 179.164890][T13125] RBP: 00007f814774f0a0 R08: 0000000000000000 R09: 0000000000000000 [ 179.172851][T13125] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 179.180930][T13125] R13: 000000000000004d R14: 00007f814865bf60 R15: 00007fff0f21c9d8 [ 179.188895][T13125] [ 179.195234][T13123] syz.3.2643 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 180.953151][T13130] ================================================================== [ 180.961407][T13130] BUG: KCSAN: data-race in fasync_remove_entry / sock_wake_async [ 180.969128][T13130] [ 180.971441][T13130] write to 0xffff8881068ff118 of 8 bytes by task 13136 on cpu 0: [ 180.979144][T13130] fasync_remove_entry+0xd2/0x130 [ 180.984340][T13130] fasync_helper+0x96/0xc0 [ 180.988739][T13130] sock_fasync+0x60/0xd0 [ 180.992977][T13130] __fput+0x68e/0x6f0 [ 180.996957][T13130] ____fput+0x15/0x20 [ 181.000920][T13130] task_work_run+0x13a/0x1a0 [ 181.005512][T13130] syscall_exit_to_user_mode+0xbe/0x130 [ 181.011044][T13130] do_syscall_64+0xd6/0x1c0 [ 181.015576][T13130] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.021471][T13130] [ 181.023777][T13130] read to 0xffff8881068ff118 of 8 bytes by task 13130 on cpu 1: [ 181.031390][T13130] sock_wake_async+0x2a/0x120 [ 181.036053][T13130] unix_write_space+0x135/0x140 [ 181.040984][T13130] sock_wfree+0x11e/0x330 [ 181.045293][T13130] unix_destruct_scm+0xc5/0xf0 [ 181.050044][T13130] skb_release_head_state+0xbb/0x1a0 [ 181.055331][T13130] __kfree_skb+0x16/0x150 [ 181.059667][T13130] kfree_skb_reason+0xb0/0x2b0 [ 181.064413][T13130] unix_release_sock+0x642/0x790 [ 181.069418][T13130] unix_release+0x57/0x80 [ 181.073793][T13130] sock_close+0x68/0x150 [ 181.078019][T13130] __fput+0x192/0x6f0 [ 181.082003][T13130] ____fput+0x15/0x20 [ 181.085981][T13130] task_work_run+0x13a/0x1a0 [ 181.090591][T13130] syscall_exit_to_user_mode+0xbe/0x130 [ 181.096126][T13130] do_syscall_64+0xd6/0x1c0 [ 181.100622][T13130] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.106503][T13130] [ 181.108805][T13130] value changed: 0xffff8881196f66f0 -> 0x0000000000000000 [ 181.115940][T13130] [ 181.118238][T13130] Reported by Kernel Concurrency Sanitizer on: [ 181.124367][T13130] CPU: 1 PID: 13130 Comm: syz.0.2644 Not tainted 6.10.0-syzkaller-01155-gd67978318827 #0 [ 181.134148][T13130] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 181.144182][T13130] ================================================================== Jan 1 00:09:04 syzkaller auth.info sshd[3066]: Received disconnect from 10.128.0.163 port 44276:11: disconnected by user Jan 1 00:09:04 syzkaller auth.info sshd[3066]: Disconnected from user root 10.128.0.163 port 44276 [ 181.314925][ T1471] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.352519][ T1471] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.428036][ T1471] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.472380][ T1471] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.533969][ T1471] bridge_slave_1: left allmulticast mode [ 181.539621][ T1471] bridge_slave_1: left promiscuous mode [ 181.545590][ T1471] bridge0: port 2(bridge_slave_1) entered disabled state [ 181.553939][ T1471] bridge_slave_0: left allmulticast mode [ 181.559603][ T1471] bridge_slave_0: left promiscuous mode [ 181.565352][ T1471] bridge0: port 1(bridge_slave_0) entered disabled state [ 181.687093][ T1471] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 181.697822][ T1471] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 181.708032][ T1471] bond0 (unregistering): Released all slaves [ 181.838941][ T1471] hsr_slave_0: left promiscuous mode [ 181.844482][ T1471] hsr_slave_1: left promiscuous mode [ 181.850155][ T1471] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 181.857569][ T1471] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 181.865455][ T1471] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 181.872914][ T1471] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 181.882019][ T1471] veth1_macvtap: left promiscuous mode [ 181.887615][ T1471] veth0_macvtap: left promiscuous mode [ 181.893193][ T1471] veth1_vlan: left promiscuous mode [ 181.898452][ T1471] veth0_vlan: left promiscuous mode [ 181.969933][ T1471] team0 (unregistering): Port device team_slave_1 removed [ 181.979649][ T1471] team0 (unregistering): Port device team_slave_0 removed [ 182.394063][ T1471] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.479996][ T1471] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.512206][ T1471] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.565336][ T1471] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.629272][ T1471] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.717125][ T1471] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.772015][ T1471] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.824995][ T1471] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.890766][ T1471] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.966390][ T1471] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.009640][ T1471] bond0: (slave netdevsim1): Releasing backup interface [ 183.017994][ T1471] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.085594][ T1471] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.181324][ T1471] bridge_slave_1: left allmulticast mode [ 183.187069][ T1471] bridge_slave_1: left promiscuous mode [ 183.192819][ T1471] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.200576][ T1471] bridge_slave_0: left allmulticast mode [ 183.206636][ T1471] bridge_slave_0: left promiscuous mode [ 183.212480][ T1471] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.220705][ T1471] bridge_slave_1: left allmulticast mode [ 183.226472][ T1471] bridge_slave_1: left promiscuous mode [ 183.232199][ T1471] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.240291][ T1471] bridge_slave_0: left allmulticast mode [ 183.245967][ T1471] bridge_slave_0: left promiscuous mode [ 183.251568][ T1471] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.260002][ T1471] bridge_slave_1: left allmulticast mode [ 183.265639][ T1471] bridge_slave_1: left promiscuous mode [ 183.271493][ T1471] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.279284][ T1471] bridge_slave_0: left allmulticast mode [ 183.284915][ T1471] bridge_slave_0: left promiscuous mode [ 183.290581][ T1471] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.734718][ T1471] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 183.744779][ T1471] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 183.755238][ T1471] bond0 (unregistering): Released all slaves [ 183.764981][ T1471] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 183.774658][ T1471] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 183.784948][ T1471] bond0 (unregistering): Released all slaves [ 183.793759][ T1471] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 183.803794][ T1471] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 183.813523][ T1471] bond0 (unregistering): Released all slaves [ 183.930259][ T1471] hsr_slave_0: left promiscuous mode [ 183.935966][ T1471] hsr_slave_1: left promiscuous mode [ 183.941620][ T1471] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 183.949049][ T1471] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 183.956899][ T1471] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 183.964286][ T1471] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 183.973259][ T1471] hsr_slave_0: left promiscuous mode [ 183.978830][ T1471] hsr_slave_1: left promiscuous mode [ 183.984812][ T1471] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 183.992177][ T1471] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 183.999747][ T1471] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 184.007173][ T1471] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 184.016405][ T1471] hsr_slave_0: left promiscuous mode [ 184.021958][ T1471] hsr_slave_1: left promiscuous mode [ 184.027599][ T1471] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 184.034974][ T1471] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 184.042442][ T1471] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 184.049831][ T1471] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 184.060889][ T1471] veth1_macvtap: left promiscuous mode [ 184.066402][ T1471] veth0_macvtap: left promiscuous mode [ 184.071985][ T1471] veth1_vlan: left promiscuous mode [ 184.077223][ T1471] veth0_vlan: left promiscuous mode [ 184.082963][ T1471] veth1_macvtap: left promiscuous mode [ 184.088425][ T1471] veth0_macvtap: left promiscuous mode [ 184.093912][ T1471] veth1_vlan: left promiscuous mode [ 184.099102][ T1471] veth0_vlan: left promiscuous mode [ 184.104994][ T1471] veth1_macvtap: left promiscuous mode [ 184.110546][ T1471] veth0_macvtap: left promiscuous mode [ 184.116078][ T1471] veth1_vlan: left promiscuous mode [ 184.121297][ T1471] veth0_vlan: left promiscuous mode [ 184.268723][ T1471] team0 (unregistering): Port device team_slave_1 removed [ 184.278558][ T1471] team0 (unregistering): Port device team_slave_0 removed [ 184.340420][ T1471] team0 (unregistering): Port device team_slave_1 removed [ 184.350082][ T1471] team0 (unregistering): Port device team_slave_0 removed [ 184.417208][ T1471] team0 (unregistering): Port device team_slave_1 removed [ 184.426712][ T1471] team0 (unregistering): Port device team_slave_0 removed