last executing test programs: 2.164684121s ago: executing program 3 (id=272): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000080)) ioctl$PPPIOCSMAXCID(r1, 0x40047451, &(0x7f0000000100)=0xffff0000) ioctl$PPPIOCSMAXCID(r1, 0x40047451, &(0x7f0000002540)=0x1) 2.038755082s ago: executing program 3 (id=276): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) writev(r0, &(0x7f0000000d00)=[{0x0}, {&(0x7f0000000000)="2303942fe0dfd8f8c04e6ae35e91", 0xe}], 0x2) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180500000000c800000000004b6affec850000007d0000"], &(0x7f0000000800)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="00000000000000000000000014000000b7030000000000008500000083000000bf0900000000000055090100030000070000000000000000bf71000000000000b7020000000000008500000000000000b7000000000000009700000000"], &(0x7f0000000200)='syzkaller\x00', 0x8, 0xffd, &(0x7f0000001e40)=""/4093, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sched_setscheduler(0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') acct(&(0x7f0000000200)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) chroot(&(0x7f0000000180)='./file0\x00') perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r2, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SET_IO_FLUSHER(0x39, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 1.420476495s ago: executing program 1 (id=293): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x1, 0x7fff0000}]}) flistxattr(r0, 0x0, 0x0) 1.381063665s ago: executing program 1 (id=294): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x7, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_DELETE_BATCH(0x1b, 0x0, 0x0) 1.340860174s ago: executing program 1 (id=295): epoll_create1(0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) perf_event_open(0x0, 0x0, 0xc, 0xffffffffffffffff, 0x2) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000001200)=@nat={'nat\x00', 0x1b, 0x5, 0x408, 0x2f8, 0x1d0, 0xffffffff, 0x1d0, 0x2f8, 0x3c8, 0x3c8, 0xffffffff, 0x3c8, 0x3c8, 0x5, &(0x7f00000001c0), {[{{@ip={@remote, @empty, 0xff, 0xff000000, 'ip6_vti0\x00', 'geneve1\x00', {0xff}, {0xff}, 0xe7, 0x0, 0x20}, 0x0, 0x98, 0xd8, 0x0, {}, [@common=@icmp={{0x28}, {0x3, "fa7c"}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x1, 0x6, {0x4a}}}}, {{@uncond, 0x0, 0xc0, 0xf8, 0x0, {}, [@common=@icmp={{0x28}, {0x2b7391f786e993fa, "99f6", 0x1}}, @common=@unspec=@connlabel={{0x28}, {0x1000, 0x2}}]}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x1, @dev={0xac, 0x14, 0x14, 0x12}, @private=0xa010102, @port=0x4e22, @port=0x4e22}}}}, {{@ip={@multicast1, @loopback, 0xff, 0xffffffff, 'rose0\x00', 'veth1_to_batadv\x00', {0xff}, {0xff}, 0x5, 0x6, 0x2}, 0x0, 0xc0, 0xf8, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00', 0x0, 0x1, 0x0, 0x1}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x19, @loopback, @empty, @gre_key=0x9017, @port=0x4e21}}}}, {{@ip={@empty, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xff, 0xff, 'nr0\x00', 'pimreg1\x00', {}, {}, 0x89, 0x3, 0xf43ab658282afd63}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x5, @rand_addr=0x64010101, @local, @port=0x4e23, @port=0x4e21}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x468) r1 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r1, 0xffffffffffffffff}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r3}, 0xc) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r4 = syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x1808002, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0xcd0}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") creat(&(0x7f0000000240)='./bus\x00', 0x0) sigaltstack(0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r6, &(0x7f0000004200)='t', 0x1) sendfile(r6, r5, 0x0, 0x3ffff) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x800000000003}, 0x100000, 0x5dd8, 0x3, 0x2, 0x0, 0x8, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_RESET_LINK_STATS(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYRESOCT=r0, @ANYRES32=r4, @ANYBLOB="01000000000000000000010000"], 0x30}}, 0x4004080) sendfile(r6, r5, 0x0, 0x7ffff000) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000300)='./file0\x00', 0x13, &(0x7f0000000400), 0xfe, 0x649, &(0x7f0000001f80)="$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") bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000006c0f00000a"], 0x48) 1.299753875s ago: executing program 4 (id=297): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1900000004000000080000000c"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xd, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r1}, 0x18) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @multicast2}, 0x2}}, 0x2e) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}, 0x2, 0x2}}, 0x26) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r5, 0xffffffffffffffff, 0x0) 1.299084105s ago: executing program 4 (id=298): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x808003, &(0x7f0000000000), 0x3, 0x4ed, &(0x7f00000005c0)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x3e000000, 0xc3072, 0xffffffffffffffff, 0x0) 1.144745515s ago: executing program 4 (id=300): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000080)) ioctl$PPPIOCSMAXCID(r1, 0x40047451, &(0x7f0000000100)=0xffff0000) ioctl$PPPIOCSMAXCID(r1, 0x40047451, &(0x7f0000002540)=0x1) 1.056934986s ago: executing program 4 (id=306): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01a83100000000000200010000000000000001410000001c0017"], 0x38}}, 0x0) (fail_nth: 2) 774.915137ms ago: executing program 4 (id=308): r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000001440), 0x0, 0x0) ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000080)=0x14) ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f00000000c0)=0x32) close(r0) 774.739267ms ago: executing program 0 (id=309): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000009007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10) sched_getattr(0x0, &(0x7f0000000600)={0x38}, 0x38, 0x0) 773.364417ms ago: executing program 3 (id=310): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000070000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000000085000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)={0x1b, 0x0, 0x0, 0xfffffff8, 0x0, 0xffffffffffffffff, 0xfffffff9, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4, 0x1, 0x0, @void, @value, @void, @value}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYRES8=0x0, @ANYRES8=r1, @ANYRES8=r1], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000ffffffff000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000800)={0xffffffffffffffff, 0x20, &(0x7f00000007c0)={&(0x7f00000006c0)=""/53, 0x35, 0x0, &(0x7f0000000700)=""/158, 0x9e}}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000008c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000840), &(0x7f0000000880)='%pB \x00'}, 0x20) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000980)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0xb5, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x3, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x1b, 0x19, &(0x7f0000000bc0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r2}}], {{}, {}, {0x85, 0x0, 0x0, 0x1}}}, &(0x7f0000000500)='syzkaller\x00', 0x5, 0xcf, &(0x7f0000000540)=""/207, 0x41000, 0x1, '\x00', 0x0, @fallback=0x1f, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000680)={0x0, 0xb, 0x4, 0x5}, 0x10, r4, r0, 0x3, &(0x7f0000000a00)=[r5, 0xffffffffffffffff, r6], &(0x7f0000000a40)=[{0x5, 0x5, 0x6, 0x6}, {0x0, 0x1, 0x8, 0x5}, {0x4, 0x3, 0xf, 0x8}], 0x10, 0x5, @void, @value}, 0x94) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = signalfd4(r7, &(0x7f0000000000)={[0x8]}, 0x8, 0x0) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r9, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, 0x0, 0x0, 0x70bd29, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x5}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x8080) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) move_mount(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000400)='./file0/file0\x00', 0x0) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0xffff, 0x0, 0x1c42}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0x2}]}}}, @IFLA_IFNAME={0x14, 0x3, 'xfrm0\x00'}]}, 0x50}}, 0x0) 751.201047ms ago: executing program 4 (id=311): epoll_create1(0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) perf_event_open(0x0, 0x0, 0xc, 0xffffffffffffffff, 0x2) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000001200)=@nat={'nat\x00', 0x1b, 0x5, 0x408, 0x2f8, 0x1d0, 0xffffffff, 0x1d0, 0x2f8, 0x3c8, 0x3c8, 0xffffffff, 0x3c8, 0x3c8, 0x5, &(0x7f00000001c0), {[{{@ip={@remote, @empty, 0xff, 0xff000000, 'ip6_vti0\x00', 'geneve1\x00', {0xff}, {0xff}, 0xe7, 0x0, 0x20}, 0x0, 0x98, 0xd8, 0x0, {}, [@common=@icmp={{0x28}, {0x3, "fa7c"}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x1, 0x6, {0x4a}}}}, {{@uncond, 0x0, 0xc0, 0xf8, 0x0, {}, [@common=@icmp={{0x28}, {0x2b7391f786e993fa, "99f6", 0x1}}, @common=@unspec=@connlabel={{0x28}, {0x1000, 0x2}}]}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x1, @dev={0xac, 0x14, 0x14, 0x12}, @private=0xa010102, @port=0x4e22, @port=0x4e22}}}}, {{@ip={@multicast1, @loopback, 0xff, 0xffffffff, 'rose0\x00', 'veth1_to_batadv\x00', {0xff}, {0xff}, 0x5, 0x6, 0x2}, 0x0, 0xc0, 0xf8, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00', 0x0, 0x1, 0x0, 0x1}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x19, @loopback, @empty, @gre_key=0x9017, @port=0x4e21}}}}, {{@ip={@empty, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xff, 0xff, 'nr0\x00', 'pimreg1\x00', {}, {}, 0x89, 0x3, 0xf43ab658282afd63}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x5, @rand_addr=0x64010101, @local, @port=0x4e23, @port=0x4e21}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x468) r1 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r1, 0xffffffffffffffff}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r3}, 0xc) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r4 = syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x1808002, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0xcd0}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") creat(&(0x7f0000000240)='./bus\x00', 0x0) sigaltstack(0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r6, &(0x7f0000004200)='t', 0x1) sendfile(r6, r5, 0x0, 0x3ffff) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x800000000003}, 0x100000, 0x5dd8, 0x3, 0x2, 0x0, 0x8, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_RESET_LINK_STATS(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYRESOCT=r0, @ANYRES32=r4, @ANYBLOB="0100000000000000000001000000000000000b00"], 0x30}}, 0x4004080) sendfile(r6, r5, 0x0, 0x7ffff000) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000300)='./file0\x00', 0x13, &(0x7f0000000400), 0xfe, 0x649, &(0x7f0000001f80)="$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") bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000006c0f00000a"], 0x48) 750.576937ms ago: executing program 3 (id=312): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x3e, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r6}, 0x18) (async) r7 = socket$igmp6(0xa, 0x3, 0x2) bind$inet6(r7, &(0x7f0000000180)={0xa, 0x4e23, 0x1, @ipv4={'\x00', '\xff\xff', @empty}, 0x6}, 0x1c) (async) syz_mount_image$ext4(&(0x7f0000000480)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x3000006, &(0x7f0000000040)={[{@discard}, {@abort}, {@block_validity}, {@init_itable_val={'init_itable', 0x3d, 0x6}}, {@usrjquota}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1ff}}, {@nobh}, {}, {@orlov}, {@user_xattr}, {@init_itable_val={'init_itable', 0x3d, 0x400}}]}, 0x1, 0x556, &(0x7f0000001100)="$eJzs3d1rW+UfAPDvSdu9/37rYAwVkcIunMyltvVlghfzUnQ40PsZ2rMymi6jScdaB24X7sYbGYKIA/Fe770c/gP+FQMtDBlFL7ypnPSky9akybL0ZebzgbM9zzknfc4353yfPCdPQgIYWGPZP4WIFyPi6yTiaNO24cg3jq3vt/rwxnS2JLG29smfSST5usb+Sf7/4bzyQkT8+mXE6cLmdqtLy3OlcjldyOvjtfmr49Wl5TOX50uz6Wx6ZXJq6uxbU5PvvvN232J97cLf331874OzX51c/fbnlWN3kjgXR/JtzXE8g5vNlbEYy5+TkTj3xI4TfWhsL0l2+wDoyVCe5yOR9QFHYyjPeuC/74uIWAMGVCL/YUA1xgGNe/s+3Qc/Nx68v34DtDn+4fX3RuJA/d7o0Gry2J1Rdr872of2szZ++ePunWyJ/r0PAdDRzVsRK0PDw5v7vyTv/3r3Rhf7PNmG/g92zr1s/PN6q/FPYWP8Ey3GP4db5G4vOud/YaUPzbSVjf/eazn+3Zi0Gh3Ka/+rj/lGkkuXy2nWt/0/Ik7FyP6svtV8ztnV+2vttjWP/7Ila78xFsyPY2V4/+OPmSnVSs8Sc7MHtyJeajn+TTbOf9Li/GfPx4Uu2ziR3n2l3bbO8W+vtR8jXm15/h/NaCVbz0+O16+H8cZVsdlft0/81q793Y4/O/+Hto5/NGmer60+fRs/HPgnbbet1+t/X/JpvbwvX3e9VKstTETsSz7avH7y0WMb9cb+WfynTm7d/7W6/g9GxGddxn/7+E8v9x7/9srin3mq8//0hfsffv59u/a7O/9v1kun8jXd9H/dHuCzPHcAAAAAAACw1xQi4kgkheJGuVAoFtc/33E8DhXKlWrt9KXK4pWZqH9XdjRGCo2Z7qNNn4eYyD8P26hPPlGfiohjEfHN0MF6vThdKc/sdvAAAAAAAAAAAAAAAAAAAACwRxxu8/3/zO9Du310wLbzk98wuDrmfz9+6QnYk7z+w+CS/zC45D8MLvkPg0v+w+DqkP/JTh0HsPO8/sPgkv8AAAAAAAAAAAAAAAAAAAAAAAAAAADQVxfOn8+WtdWHN6az+sy1pcW5yrUzM2l1rji/OF2crixcLc5WKrPltDhdme/098qVytWJyVi8Pl5Lq7Xx6tLyxfnK4pXaxcvzpdn0YjqyI1EBAAAAAAAAAAAAAAAAAADA86W6tDxXKpfTBQWFngrDe+MwFPpc2O2eCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAe+TcAAP//Z7w5Vw==") (async) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) (async) r8 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r8, &(0x7f0000000240)=[{0x0}], 0x1, 0x1200, 0x0, 0x3) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010200000000000000020000000900010073797a300000000040000000030a01010000000000000000020000000900010073797a30000000000900030073797a320000000014000480080001400000000008000240000000002c000000030a03000000000000000000020000000900010073797a30000000000900030073797a32"], 0xb4}}, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)={0x14, r1, 0xe23, 0x70bd27, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x810}, 0x80) (async) syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8801, &(0x7f00000000c0)={[{@grpjquota}, {@init_itable_val={'init_itable', 0x3d, 0x7}}, {@dioread_nolock}]}, 0x3, 0x4de, &(0x7f0000000740)="$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") r9 = openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) (async) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) (async) open_by_handle_at(r9, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) 690.970997ms ago: executing program 0 (id=313): clock_adjtime(0x0, &(0x7f0000000340)={0x2925, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x1000407, &(0x7f0000000040)={[{@grpjquota}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x7f}}, {@journal_path={'journal_path', 0x2c, './file1'}}, {@i_version}]}, 0x4, 0x5ca, &(0x7f0000001400)="$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") r0 = socket$inet(0x2, 0x800, 0x3c) clock_adjtime(0x4, &(0x7f0000000140)={0x7, 0x7, 0x69f, 0x3, 0x4, 0x6, 0x1e, 0x9, 0x7, 0x5b9, 0x3, 0x7, 0x8, 0xc6a7, 0x5, 0x1e4, 0x8, 0x1, 0x7fffffff, 0x8, 0x5ac, 0x400, 0x9503, 0x52, 0xe0cf, 0x5}) setsockopt$IP_VS_SO_SET_DELDEST(r0, 0x0, 0x488, &(0x7f0000000300)={{0x6, @loopback, 0x4e21, 0x0, 'nq\x00', 0x4, 0x7f, 0x18}, {@dev={0xac, 0x14, 0x14, 0xe}, 0x4e21, 0x2, 0x453c, 0x9, 0x6}}, 0x44) socket$kcm(0x10, 0x2, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x38, r2, 0x1, 0x70bd26, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x14, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5, 0x3, 0x6}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}]}, 0x38}}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$inet6(0xa, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r3}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) eventfd(0x0) 680.768667ms ago: executing program 3 (id=315): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0x20, &(0x7f0000000080)={&(0x7f0000000280)=""/74, 0x4a, 0x0, &(0x7f0000000380)=""/102, 0x66}}, 0x10) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000740)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x90, 0x90, 0xa, [@struct={0x5, 0x1, 0x0, 0x4, 0x0, 0x7, [{0x2, 0x4, 0x1ff}]}, @enum64={0x9, 0x4, 0x0, 0x13, 0x1, 0x6, [{0x9, 0x6, 0x7}, {0x1, 0x3, 0x81}, {0xf, 0x3, 0x1}, {0xe, 0x8, 0x2}]}, @enum={0xc, 0x4, 0x0, 0x6, 0x4, [{0x4, 0x1}, {0x0, 0x5}, {0xb, 0xffffffff}, {0x6, 0xe}]}, @int={0x10, 0x0, 0x0, 0x1, 0x0, 0x5f, 0x0, 0x65, 0x4}]}, {0x0, [0x0, 0x2e, 0x30, 0x2e, 0x0, 0x5f, 0x61, 0x61]}}, &(0x7f0000000200)=""/104, 0xb2, 0x68, 0x1, 0x9, 0x10000, @value}, 0x28) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) syz_usb_connect(0x3, 0xb, &(0x7f0000000040)=ANY=[], 0x0) add_key$fscrypt_v1(&(0x7f0000000680), &(0x7f00000006c0)={'fscrypt:', @desc2}, &(0x7f0000000700)={0x0, "4175a913038143e453b6a3753cd19c3181499f92aa06dc198cfc3807b2b19d6e5607a5de72f30c9f4901b013cfa0adba23c93731a0379e36d5661050658ba37d", 0x2a}, 0x48, 0xfffffffffffffffe) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$BTRFS_IOC_ADD_DEV(r4, 0x40095505, &(0x7f00000000c0)={{r4}, "c4005a51cf48a456fe399e96793568de827d6e3af15928143f77a2c2bf19506fac2c94a8808e7365569e94b6012f452ddbdb4acaadf3199a4fa57eab4549a87e05bb9a155f3d08704dc753cff79d5128dc113e58ecd5a19e0bc7bef139e74acaed4f126be4cc57e22d44a734c7f2c44b2b2dc3ecfb59318827549e5b2679b3cc4f9e5df2bc30b674fb5f8e181e7dab6cc37989c9911a3d5b32ac444ebf78c76d68c313ed1bcaa4bfcdddc200878c72704b48f4cda8c86a41c703694c1e57aaf73751f45d5ed54010c14c30ea8ca2f620ab57b6ad6bdf3263aeab2de44576b10a1040c6cc84fcf2cb5037e025b227baf26e0c5bda231531365c778ef42bc49fd603b98b7b5173f2f1669834e8cd5167092f5d56e6c2623165710ec863179f143dba38551641ea77676773f3a18e97ada500fe448f172e6e714e16079d8233626d4c5c08c9117c5872c5d815ae0d481c25f2cfd2c76c6723e5ee78d5941b7d49e3d123294dd4c04c2691c5d086393047e3fd027daebf2114d1e9da89a36a49f7a411638060e87593ed8e45fb4292ff888e2eb7b776c9428623a34454eb2f11a47b43707e4b161faa8b8dc0d9cb2a0ac253ab41d0172190749ae06af564cabff5a0ba5df004c44138b49d2e17944f6588839fdedcf6ddef583df85490fa3a956e416e02943d56f734c3d3aa8b4898544e8f417c79bb5532b4ab2393c6723488c627a285686a0dac4cd6df370ab806b80f251256cfc058f8c2c2b46dca533048a18315caca12ad5915f077285ffbe1a4b5f46f2af4e45695348200e1f5a57a698acae6b4f6124fc076af5f40c3461e91b2639a84be51abe62d27cde1642731d31ae1264d20a21011bd221f8d0e4fc9835ccb61405e1ba6fcd48b9d3487909f89a0f40f91abfd3d33876b707d908bd2b076d37f5b2e2d530210e3930cf0418c3a7d8d4ac8cd16b4d2b2d4ebf6134c88813a808d82c86a20b7beb6534bb112b374d5b00e000000e37872a2df879ebd568f0b20ce7d4aeb5ef6c960093b8a3d0e0332d821fdd099269364539d876caf78e60232baf7cc26589453666f17f94ac05fc2b752546a9586f9f18288e5944effa6f912709652113377ee14d949842910b0af467706b42d969908840fe55857f526694cdacb7735f2e0bdc49ca50ca57193aec63535f679e1486185bae007a7cd345bf8d7428e1a2881f6d327ee34ef0bbd67b51d25000fc59ed894c001ca327898dc4a3e7c33e20542772f31e7f125eedec11604b6569f051e643bff91d616284d2ea0f25320c22caba4d681781a13bf341dc22f882540aaab75d5bba9bbfe8aa960705d1d903a7ed8b7a14cc18b2ec9d1640ba3b6cf9c2a6cde4f7b23d1eb42fa57d2b2206c6cd6f84a5b7d682a09064e341c844edd3361f2e457a5057e1c3d97916190d9749adbadb70797f1729cc01c6146a23942e245021fe02748e2235582b36df8236c8b25fa94d1ed7e495f0df447b36f609b17526b2c8c43f1ded38f99344f2553fd911deed701d89fdf92ed6368d74f6f09ce2d26a3916f28eda4fac022f043aff14bab96f3841980533b2f935cfe7e40ad9cc77557d50a32a73aa71ae37a0cece6580887608d028b55fa7a1a1cf214098fe13c1a32ee5890e3d2c9a4d23041f89bac353aa1641df4375080b2181555e9667082a35b041645be39a47298b747eed9d127d8d342b620d0ecd2a48a86bd7dbfa04bf5fad62f5b1055b2259dc64b02d27599fff87c8303b47174e3ee66645d1eaaa05d63bad90ef4fdb97d21b478b37c313571d5776495460b57ba25dc2a5def286c8e81a3fdaa3dfb1dfb9deec86aa3629a03b9722bd95a96972a32552ba5d74f03989c73598b3ba0ef19151631ba4cf90d1bcc35c7cd2fecd6c271564df5ed060081417488454f5878f09523ce1b966162808d13a86872ad04bc777544ae4477459d197c6aaecf52e229a6cc94d151e014b589311f8e5bb7eb57605a80c11a7df2110b70735ae34a21e467f7bd8c3f81c1f9dfcf9464365566786b086637717df597c05b45249b04faa2269ca5a3fca2f1797682f24a34c9f70c27b6dd47fe9f6f006c934481524985afeec903f160c4e2c36c2bbe2081ff33733ca17ca2a2d794fd3af80d5a1adcbfa384e1ba851f4a554433e532f321b332d640513c9df326ddaa4691201f94d1b4b82b82f9bb986e00242fce6588d906cd820640a59707cecf78533496fdc49d90effde5769812ae474ef31adb849542ef23359a640eeeadecf273713a46e96c836823012fc190c8d1dd88d965fbe11074da36375c11fedc648160b55b8b8bc830b72a6f98b1396a72d96f06fab40ddd4729dc162d30e8a34c4041cc22fd62eb501fa685ae7d53376cca12e40f53edd0ae8abbb666c75a6ca8658b4ef8810931158868afb757831d14e81cdadc995fcb98e2da29300480ca03494f81b59985dbe3da8634a3c4a00626d08d6f1f997ccd63a1a103d292d29cdf15b2c4bca2f34ba406a47d9a184ed712356257ec45aa9a8ed8b8daca20f6a2edb1494a2af100000000000000006f1bfeb0edfdb1f10b66753f3fe900b95be3aafbfb5e2976de8b2c6b485243770da0cdc8f4d7384b6f39817f5661429442b20cab08cc28cf814ebf10d7ad4de140241ec169d70781524127a9454e5f1ee9fd5652818683a2f7ff0b11c8fea2ff7398e01df48c8eb62123f2630d561470003d020f4cc8923654fcf65d400ed0792af6bf1876099951e938adc275f47b9ba178b8ae3e9b295fab66c144ad8ad2fd29bced367833b76b2f0ded8dfead5dfccfc9ba2d658688abeb41f53eaf6efa82e5947f8d7a6e1010517032443507f5bd419317324000ca02e49db1cb985f8f11149496bfe54629f3f759c3100e0ab50c95446fd390a87b884930763ac810bdcdaee81b64343b955eba24d34d816bcf3eb5df1b6b44317e033a9015640942da607e3ea61727b97eab7511ff680dc5f4e54fa19e07c0023152272edc066010e661de98f73f913bc04983b325ff62134b41081dce65528af69b5206f9522b3e09f78dea218621e60f5ca9c58212526d96aace431133528b8a5354b213ef4883ef271e488bf629284c277843202bf7a41dbe2616e8338ab14f83bd6da1d1c4a4b50b6372564187a497036f2040f77c099bd0d98d3e4eebd4bf433360c518fc965e966642a22a335f3a9688336bd254dc9fe32632d4c1599c6b72fca290d9cae38548f4ad5d2a165053b7d392276d81ff26e97ebcfa210eddc832240de22bbfc6623929aa2d8bad6c41db54e2125063f9153e98b2316ae5e9d51a3a9efe5a81242f7045dbafa8db63cafad19e32b767dcd5adfd5e5459dce45c71f61a18a3e6a7de43bd61d6015fac48dcecb60795e02b30dc04cc4a408abc2dee10a97fb387a229ba5c07cebc63037c0102c846393b2bf865db38e51ce44b5cede8d530cb6496e5a34b9b0b060b8bd6f98cd53169518a1732d92af494c351f8ce753754f7d944865de345d8520a9232a1c5e516e61f23c39e09bac5d7c70a478e0b7a3208f61f090f69b9ab33da7a8ae16626c3d26f11065fd46851eff2c5968f937e90abe02555cad9e54b4bcaf3ee55aba96406cd457e27c1ad5b9cc640afff1d94d7d5f854fd50a66bf37355c548f840129ae0d81dc23202e4d7921236172d1c4920c1bf5e7bfad21740acd8f5fa278b6de2336276e271045d0ef0a9a566ae988269cb16f7eee941941d3a9f05d754cbb92a27ad9cb374872c3566a9db35920d63f0cfa69ef8dfc41f307f7c1f1ae712e3f6001e57e1de99777212ede107b692182c507b168c77a3824f0cd663f6d2ffe73e3d90587b3444e9a3cb093ddefd2869db927938ecf6cbd16a85d0849b7c829a37b70b24868e7ab1aa2adc012d85a8bf374225281b50882a40e6bed667f0538d8c85768cc9d8537bedfebe64cddf937a150c565e3824a75f5e7a173fed0ed3b3aa8750fde47ce1c219d5fc1977abc24c7a28aa8251e29a17eee3405d4c1f1f5e8b53df9425d6dde4b9de4715097c580500000037b42974a40f0bf24dcca060871b759e5f42a12da7d89a494468f6c91c47ac17e7bfd61e62872541fd5d3941c0f0ebca3de06ca63cb52b186737fc61ade4eaed0fd5dd1eb4b8e2d2ebb689741fb354c8bbdc9092f68a156952395585113d78254ec826ba49204d76b8dcd854c4cf942c50c38ad5f8db2bf032d5eced178b25e56f9b39961aea03785119cab42fffbbbeaa15f0c21511f441fd72ab25014dbe5a35dfe295486e0d2e5803304deff8736e1d8df7886e4725321bc450c68459f01b5b3014735e81f989945e59b4c5e367976e90124e9cf422cc0f0d624627ab83ccd65ac7c1b91424672ebb3d91d932994c6e215a9d60efb6ed87eb579951668273e9a38f9089179459d2f670a21bd999a97c968891c59402d188dc601ef033fb9af3291b8778f2a38d379913a02d2215f2960f80847afe4d65f1fc7bcd1995e83fc88d87d799af0bf16060780efc8dbd08b041d8c2f646ca18ea18d3d295e172b344b6aea8d2a2620b6379c5c368459fee07bfcc83c83acaf3dc67755bbe8fe58b1a39051ef2327b30c886a0a5183e38c199e32365cb8194deade3262ea5ffa559b789da10f2948e135ce5858e1b016c153b14795a085b5bef350f95487a3f748afa943179d87a1e8828edc33804c2ea49979074fe162a8a36689286c390585d9f83645be3b921c4a6678b8ffd7edfb7a85265d5796ce4f12595b364fcc81b58c267beaa85dd47ad8c55783fe526d6dd0e3cc1f70a7e88d6f826b18aeab8282ff8e2a13ee8f03fab41be97af13c87883f87e6f0bdda04deebc05e35b601a55cc984478a997725d3faab2101cd9596c757c659e6b6c9178f620fbdcb87e399404f4bcd9b57dd1013818e58a785bed0a7fd1f5e5e355816ceba6745a42e10a145c87aedede2e0bed7bc75015a8354ba95a226c87df41d41e4ae368c4e84e8a032c48977601d71eae547f95375746e1f9c86135481bd09a08fee04db26b96cc9327bbde61cec27a56d114cc0e6459170e6cc44d846a2a55046b505e14dbdac32aa759e5d0268fe819a3dc503247b6c24c1607b4742671f5ad63c21812b1904b3c39ec8734fb1ee77a124a29c50154f53c89754f5e4719cc0279c851a63fc33e16f2393e5134568b78126b5680664fcd1fbf9d88f4efdadc120bbb4f21ddd7bf4c445a534631c5f2c4b51d7842743493b4a13bb99f160987284bc7960aaa6d40dbe05e20f42ff48425d1c8166b7fd457d33d808b456b7b11d3d3c1f445a9698ee8a473fb116c5c4824fa224088fa6f031f07f2972e62592d59536dc4cbe3c1cb33e922b0f35f79f1df10ab43e1d3e5dc480bdd8a7039f71ee9c73f976809ec2853ad0c18e4f0ee73fd1361591375d3db6c822e7baae597fc454aae7b426922e9fd9a87fe52a25d5cd03434d7ffb9f319fbeb403c0836f2117cf851bf7660ecb567a6cd918e85190683c1c0a79da1cd92b8527400008f047a436a4859be0e7b9469c6830a81d81f93ea8ba1b614de4386296089c9b34f4b8116ae7afedd43f6a82abf4302e4d8a9fba0b87347df1f5bb676f496bf29bf9ea9e3ea4bd1dd3f3d4feb7609f96424f35035b5a13fd6efd0441dea1c1f17feae7d5a1ef77aa05537fc87cc2021c92d5cbbbd159258a45972e112e123e306ef0daa36e1ff069be815c5d0b74b6b41c6d5b76c04057de0a43c2e40b04fc11b60f0f1e7ff0b88fb600d79e03cc8b73fed0af95601acca"}) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa10000000000006691bdabf8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYBLOB="f4841bb2aee2d2072ee17bbb8cb76a57278c7a7c4e7fae64ba4a604cce3b153bdb66c5945e21a7c0fae4ed4082", @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000200)) 615.204178ms ago: executing program 0 (id=317): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1900000004000000080000000c"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xd, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, 0x0, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}, 0x2, 0x2}}, 0x26) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) 614.955588ms ago: executing program 2 (id=318): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x7, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0xfffffffd, r0}, 0x38) 589.436598ms ago: executing program 2 (id=319): r0 = getpid() r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x4164, 0x0, 0x400000, 0x8}, r0, 0x0, 0xffffffffffffffff, 0x0) r2 = getpid() r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x8}, 0x4164, 0x0, 0x400000, 0x8}, r2, 0x0, r1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) close(r3) (fail_nth: 1) 588.793877ms ago: executing program 0 (id=320): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) fallocate(r2, 0x3, 0x81, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) close(r4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@delchain={0x24, 0x5f, 0xf31, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r5, {}, {0x5, 0x6}, {0xa}}}, 0x24}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\r\x00\x00\x00\a'], 0x50) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700000001000010400"/20, @ANYRES32=0x0, @ANYRESDEC=r6, @ANYRES32=0x0, @ANYBLOB="4800128009000100626f6e64000000003800028004000880080007"], 0x70}}, 0x0) 348.889579ms ago: executing program 0 (id=321): r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000001440), 0x0, 0x0) ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000080)=0x14) ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f00000000c0)=0x32) close(r0) 348.566369ms ago: executing program 0 (id=322): r0 = getpid() r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x955, 0x1, @perf_config_ext={0x4000000000004}, 0x4164, 0x0, 0x400000, 0x5}, r0, 0x7, 0xffffffffffffffff, 0x0) r2 = getpid() r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x8}, 0x4164, 0x0, 0x400000, 0x8}, r2, 0x0, r1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) close(r3) 294.458208ms ago: executing program 2 (id=323): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x7fffffffffff}, 0x100000, 0x5dd8, 0x3, 0x0, 0x0, 0x8, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000001580)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendmmsg$inet(r0, &(0x7f0000004540)=[{{&(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="15b26f226e2966667482d50703b0a8d92ccd9e69d5cc4cb3d467a670b237a9225fb56c0f7ea725dee27c4bb43bb50c6748c83b71d59f0537405dfab648c096607340fac939a2efd31cbe2f8ca29c409e87ea0974b7bceff9afef5dffd691575f5115f2f961ad488e3386036913e98181a6034febaab853a3e928b9035b0e3a8e1cb393c70f6d0448970e0af2476f8b923ee09c19deca55d58f70e8eeff55dda6381cb96afe97196c0af0a8fd450a1447a1a521e2c211fb84cbcf4aebd31298972ec6be", 0xc3}, {&(0x7f0000000d80)="7d68e6de85f9b0cbc9d710267f321ec64eab043ecad9af7e01e9463218ec45924a99867163e425e685d75559a87139e02fae7271be8f55671cfd32a09896278d1941370174720838039d0989bc3394b8a4c4f4a30f0496be313d6d60fe47966c634a3ee1f659e8ef310647725bda0130d5de5028220a4cf5fc808a75694738ee26cb21302b4bba4265b845a5d5dce706d9820c6936b122f9658446d74a9016b94424971dd443a6907eb5c73b6b200e92b23f2c36a214729b0bc231511e4c00"/200, 0xc8}, {&(0x7f0000000380)="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", 0x9fd}], 0x3}}, {{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000001700)="c9", 0x1}], 0x1}}], 0x3, 0x240080e4) bpf$MAP_CREATE(0x0, 0x0, 0x50) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$PROG_LOAD(0x5, 0x0, 0x0) kexec_load(0x0, 0x0, 0x0, 0x0) 278.105059ms ago: executing program 1 (id=324): socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) write$UHID_DESTROY(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_create_resource$binfmt(&(0x7f00000002c0)='./file0\x00') ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000500)={0x6, 0x57a1, 0x5, 0x6, 0x8, 0x0, [{0x651a, 0xd, 0xa3bf}, {0x3ff, 0xffffffffffffc42f, 0x1, '\x00', 0x102}, {0x1, 0x6, 0x5, '\x00', 0x106}, {0x2, 0x8, 0x1, '\x00', 0xa05}, {0x744, 0x4, 0x2, '\x00', 0x400}, {0x80000001, 0x3, 0x3fc00000000000, '\x00', 0x1800}, {0x314, 0x100, 0x651d, '\x00', 0x400}, {0x81, 0x8, 0x5, '\x00', 0xc80}]}) socket$netlink(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00'}, 0x10) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f0000000c00), 0x1, 0xb80, &(0x7f0000000c40)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xa3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000000)) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) faccessat(0xffffffffffffffff, 0x0, 0x5) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000001040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xe, &(0x7f0000000440), 0x3, 0x44e, &(0x7f0000001140)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) pwritev2(r3, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r4, 0x40305829, &(0x7f00000000c0)={0x17c04, r4, 0xe, 0xfff, 0x800000000, 0x5}) 210.931399ms ago: executing program 2 (id=325): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000000000001812", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sys_enter\x00', r1, 0x0, 0xc58}, 0x18) mq_timedsend(0xffffffffffffffff, &(0x7f00000003c0)="67584bc69999b77209b12dc098d995cbd671e7486beebaeeee73da0cad66e3c706bf817cf2a09333e5df5011a7e10ea2c47ca119b8f21a48a4f3535a2e55bc9f4c3f5cf80f2f11d689af1e7cfb303f59ec7392e9510b57117c1f62a84c960ba548361ba260fa5361426a95d4f26e56b5", 0x70, 0x7, &(0x7f0000000500)) 142.87971ms ago: executing program 2 (id=326): clock_adjtime(0x0, &(0x7f0000000340)={0x2925, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x1000407, &(0x7f0000000040)={[{@grpjquota}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x7f}}, {@journal_path={'journal_path', 0x2c, './file1'}}, {@i_version}]}, 0x4, 0x5ca, &(0x7f0000001400)="$eJzs3b9vG1UcAPDv2U7SJEBChQRlQBEIWgmaNGmLyo+h3auq/NhYCE1albpt1ARBChKpVBiQEAtDJSYGyn8BFaxMSAwMLEyoUkGoCwgho3Nsx3HsxEnjXMl9PurJ9+6d/d41/vrevXvPDiDfChH7ImIuiRhp2lyqZ45V/8XdPz84ky5JVCqv/ZHEM7Vt9f2T2uNw7cn/jkT8+F0Se4tri5xfvHphulyevVJLTyxcnJuYX7x68PzF6XOz52YvTT0/dezokaPHJg/d66E1nLz+9rsjn5x646sv/kkmv/7lVBLH4/ezy3nNx7FdxmIs/qpUPmzdnv6/HtvuwjJSbLxPViStG7h/Jcsx0hcRj8ZIFJv+miPx0SuZ1g3oqUoSUQFyKhH/kFP1dkD92r676+BCj1slwE64cyKqV/9r479U7fOLGK32DQzdTVb187Tp0tuStIwfvj91PV2iR/1wQHtL1wZqa63xn1RjczT2VFNDdwur4j9tAZyuPabbX91i+WMtafEPO2fpWkQ81q79v3H8v9kU/29tsXzxDwAAAAAAANvn1omIeK7d/b9C7d7cnniyefzPTyszBI9vQ/kb3/8r3N6GYoA27pyIeHn1+N+kZZfRYu0+/4PLowGTs+fLs4ci4qGIOBB9A2l6cp0yDn6690anvObxf+mS1qE+FnBZ4XZpYPVzZqYXprd6vMCKO9ciHi91Hv8Tc6XqvP7W8b/p58Fcl2Xsffrm6U55G8c/0CuVLyP2t53/s9IMSNb/fo6Jantgot4qWOuJ9z/7plP54h+yk57/h9aP/9Gk+ft65jf3+v0RcXixVOmU3zH+G42N9u3//uT1Yv31U+9NLyxcmYzoT06u3T61uTrDblWPh3q8pPF/4Kn1+/8a7f+mOByMiKUuyxyM4V875Tn/Q3bS+J/Z1Pl/8ytTN0e/7VR+d/1/R6rn9AO1Lfr/YH3dBmjW9QQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/6NCRDwQSWG8sV4ojI9HDEfEIzFUKF+eX3j27OV3Ls2kedXf/y/Uf+l3ZDmd1H//f7QpPdWSPhwRD0fE58XBanr8zOXyTNYHDwAAAAAAAAAAAAAAAAAAAPeJ4Q7z/1O/FbOuHdBzpdqjeIf8KWVdASAz4h/yS/xDfol/yC/xD/m1xfh3uwB2Aed/yKu+7nbb0+t6AFno9vw/2ON6AAAAAAAA2+LWSy/cSCJi6cXB6pLqr+U1bgzq94ddqZB1BYDMGMML+WXoL+RXl4N/gV0saaz9XWmX33n0f9KbCgEAAAAAAAAAAAAAa+zfd+vnDef/A7uS+f+QX6vm/w9kVw9g55n/D/nlGh/YaBa/+f8AAAAAAAAAAAAAkL35xasXpsvl2Ss5WanPd7xf6mNlnZW+iOi0T/0NfO9lHf64XVaSaYD0Zx+eO/9ZBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAtPdfAAAA///brhp/") r0 = socket$inet(0x2, 0x800, 0x3c) clock_adjtime(0x4, &(0x7f0000000140)={0x7, 0x7, 0x69f, 0x3, 0x4, 0x6, 0x1e, 0x9, 0x7, 0x5b9, 0x3, 0x7, 0x8, 0xc6a7, 0x5, 0x1e4, 0x8, 0x1, 0x7fffffff, 0x8, 0x5ac, 0x400, 0x9503, 0x52, 0xe0cf, 0x5}) setsockopt$IP_VS_SO_SET_DELDEST(r0, 0x0, 0x488, &(0x7f0000000300)={{0x6, @loopback, 0x4e21, 0x0, 'nq\x00', 0x4, 0x7f, 0x18}, {@dev={0xac, 0x14, 0x14, 0xe}, 0x4e21, 0x2, 0x453c, 0x9, 0x6}}, 0x44) socket$kcm(0x10, 0x2, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x30, r2, 0x1, 0x70bd26, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x14, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5, 0x3, 0x6}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}]}, 0x30}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) socket$inet6(0xa, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r3}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) eventfd(0x0) 128.28403ms ago: executing program 1 (id=327): syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="09000000070000000300000048"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{r0}, &(0x7f0000000500), &(0x7f00000006c0)}, 0x20) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) 116.63917ms ago: executing program 2 (id=328): r0 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000b40)={0xffffffffffffffff, 0xe0, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000800)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0xa, &(0x7f0000000840)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000880)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x27, &(0x7f00000008c0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000940), &(0x7f0000000980), 0x8, 0xe8, 0x8, 0x8, &(0x7f0000000a00)}}, 0x10) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000b80)={r1, 0x1, 0x6, @remote}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e24}, 0x1c) listen(r2, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000080)={@in6={{0xa, 0x4e20, 0x3, @mcast1, 0x7}}, 0x0, 0x0, 0x3, 0x0, "9ecf3315567f14d56a87d1b2cc409e2a652dbbf6c50480937c6fa85af81bc6fc54b71f034d5ac33e31d612d976920300000000000000503621ec6679995d916cb4361795dd7dbae51d07384b7c2e6949"}, 0xd8) ioctl$BTRFS_IOC_SEND(r2, 0x40489426, &(0x7f0000000100)={{r0}, 0x0, &(0x7f0000000000), 0x6189b0b1, 0xe, 0x1}) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_GETMOUSEREPORTING(r3, 0x5412, &(0x7f00000000c0)=0x13) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000180)={'team0\x00', 0x0}) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0), 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x6, 0x11, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xf}, [@map_idx={0x18, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0x5}, @ldst={0x1, 0x3, 0x4, 0x4, 0x7, 0xfffffffffffffff4, 0x8}, @ldst={0x0, 0x0, 0x1, 0x1, 0x0, 0x18, 0xffffffffffffffff}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000000)='GPL\x00', 0x9, 0xe1, &(0x7f0000000540)=""/225, 0x41100, 0x32, '\x00', r4, 0x25, r5, 0x8, &(0x7f0000000300)={0x4, 0x5}, 0x8, 0x10, &(0x7f0000000640)={0x0, 0x8, 0x7f, 0x8}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000680)=[r0, r0], &(0x7f0000000700)=[{0x3, 0x1, 0x2}, {0x1, 0x4, 0x10}], 0x10, 0x8, @void, @value}, 0x94) poll(&(0x7f0000000400)=[{r3, 0x99095e1bfd24102a}], 0x1, 0xe7f1) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r6}, 0x4) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r7}, 0x10) prctl$PR_SET_IO_FLUSHER(0x39, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a00000001010000ff7f0000cc"], 0x48) ioctl$TIOCL_GETMOUSEREPORTING(r3, 0x5412, &(0x7f00000006c0)=0x1a) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000080b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r8}, 0x10) r9 = perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x3, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r9, 0x40082406, &(0x7f00000001c0)='cpu~-0\t\t\t') 80.87301ms ago: executing program 1 (id=329): r0 = socket$inet6(0xa, 0x6, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x18, 0x7ffc1fff}]}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000031c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) r4 = syz_open_procfs(0x0, &(0x7f0000000240)='pagemap\x00') r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip_tables_names\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r4}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r6 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r6, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x2, &(0x7f00000000c0)=@raw=[@call={0x85, 0x0, 0x0, 0x5}, @exit={0x95, 0x0, 0x9fff}], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000003c0)='virtio_transport_alloc_pkt\x00', r7}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r6, 0x28, 0x1, &(0x7f0000000100)=0xfffffffffffffffe, 0x112) memfd_secret(0x80000) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000007f1600850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x10) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e24, 0x8, @remote, 0x3}, 0x1c) 0s ago: executing program 3 (id=330): r0 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000080)) ioctl$PPPIOCSMAXCID(r2, 0x40047451, &(0x7f0000000100)=0xffff0000) ioctl$PPPIOCSMAXCID(r2, 0x40047451, &(0x7f0000002540)=0x1) kernel console output (not intermixed with test programs): [ 21.104030][ T29] audit: type=1400 audit(1733589310.045:81): avc: denied { read } for pid=2982 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 Warning: Permanently added '10.128.0.78' (ED25519) to the list of known hosts. [ 26.385439][ T29] audit: type=1400 audit(1733589315.325:82): avc: denied { mounton } for pid=3288 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 26.386731][ T3288] cgroup: Unknown subsys name 'net' [ 26.408183][ T29] audit: type=1400 audit(1733589315.325:83): avc: denied { mount } for pid=3288 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 26.435596][ T29] audit: type=1400 audit(1733589315.365:84): avc: denied { unmount } for pid=3288 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 26.597100][ T3288] cgroup: Unknown subsys name 'cpuset' [ 26.603323][ T3288] cgroup: Unknown subsys name 'rlimit' [ 26.713307][ T29] audit: type=1400 audit(1733589315.655:85): avc: denied { setattr } for pid=3288 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 26.738665][ T29] audit: type=1400 audit(1733589315.655:86): avc: denied { create } for pid=3288 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 26.759158][ T29] audit: type=1400 audit(1733589315.655:87): avc: denied { write } for pid=3288 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 26.771356][ T3291] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 26.779553][ T29] audit: type=1400 audit(1733589315.655:88): avc: denied { read } for pid=3288 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 26.808639][ T29] audit: type=1400 audit(1733589315.665:89): avc: denied { mounton } for pid=3288 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 26.833511][ T29] audit: type=1400 audit(1733589315.665:90): avc: denied { mount } for pid=3288 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 26.842556][ T3288] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 26.856809][ T29] audit: type=1400 audit(1733589315.745:91): avc: denied { relabelto } for pid=3291 comm="mkswap" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 28.671400][ T3298] chnl_net:caif_netlink_parms(): no params data found [ 28.686285][ T3301] chnl_net:caif_netlink_parms(): no params data found [ 28.780252][ T3298] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.787445][ T3298] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.794593][ T3298] bridge_slave_0: entered allmulticast mode [ 28.801063][ T3298] bridge_slave_0: entered promiscuous mode [ 28.809504][ T3298] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.816595][ T3298] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.823817][ T3298] bridge_slave_1: entered allmulticast mode [ 28.830281][ T3298] bridge_slave_1: entered promiscuous mode [ 28.871557][ T3312] chnl_net:caif_netlink_parms(): no params data found [ 28.881108][ T3298] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.897905][ T3301] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.904979][ T3301] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.912309][ T3301] bridge_slave_0: entered allmulticast mode [ 28.918781][ T3301] bridge_slave_0: entered promiscuous mode [ 28.929185][ T3301] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.936433][ T3301] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.943578][ T3301] bridge_slave_1: entered allmulticast mode [ 28.949972][ T3301] bridge_slave_1: entered promiscuous mode [ 28.959014][ T3298] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.981775][ T3298] team0: Port device team_slave_0 added [ 29.004737][ T3298] team0: Port device team_slave_1 added [ 29.018255][ T3301] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.030702][ T3301] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.041545][ T3309] chnl_net:caif_netlink_parms(): no params data found [ 29.050615][ T3299] chnl_net:caif_netlink_parms(): no params data found [ 29.085741][ T3298] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.092948][ T3298] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.119070][ T3298] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.142712][ T3301] team0: Port device team_slave_0 added [ 29.151932][ T3301] team0: Port device team_slave_1 added [ 29.157887][ T3298] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.164845][ T3298] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.190821][ T3298] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.207077][ T3312] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.214160][ T3312] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.221327][ T3312] bridge_slave_0: entered allmulticast mode [ 29.227808][ T3312] bridge_slave_0: entered promiscuous mode [ 29.257106][ T3312] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.264211][ T3312] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.271439][ T3312] bridge_slave_1: entered allmulticast mode [ 29.277940][ T3312] bridge_slave_1: entered promiscuous mode [ 29.293278][ T3301] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.300271][ T3301] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.326353][ T3301] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.353825][ T3301] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.361021][ T3301] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.386983][ T3301] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.411568][ T3309] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.418801][ T3309] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.426082][ T3309] bridge_slave_0: entered allmulticast mode [ 29.432525][ T3309] bridge_slave_0: entered promiscuous mode [ 29.441523][ T3309] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.448672][ T3309] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.455786][ T3309] bridge_slave_1: entered allmulticast mode [ 29.462309][ T3309] bridge_slave_1: entered promiscuous mode [ 29.469527][ T3312] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.490068][ T3298] hsr_slave_0: entered promiscuous mode [ 29.496146][ T3298] hsr_slave_1: entered promiscuous mode [ 29.507791][ T3312] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.521666][ T3299] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.528873][ T3299] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.536129][ T3299] bridge_slave_0: entered allmulticast mode [ 29.542717][ T3299] bridge_slave_0: entered promiscuous mode [ 29.549947][ T3299] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.557109][ T3299] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.564223][ T3299] bridge_slave_1: entered allmulticast mode [ 29.571683][ T3299] bridge_slave_1: entered promiscuous mode [ 29.584219][ T3309] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.613219][ T3309] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.623135][ T3312] team0: Port device team_slave_0 added [ 29.639437][ T3299] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.654181][ T3312] team0: Port device team_slave_1 added [ 29.662017][ T3301] hsr_slave_0: entered promiscuous mode [ 29.668179][ T3301] hsr_slave_1: entered promiscuous mode [ 29.674048][ T3301] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 29.681652][ T3301] Cannot create hsr debugfs directory [ 29.698135][ T3299] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.724035][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.731026][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.757020][ T3312] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.773085][ T3309] team0: Port device team_slave_0 added [ 29.782171][ T3309] team0: Port device team_slave_1 added [ 29.788362][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.795315][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.821289][ T3312] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.839510][ T3299] team0: Port device team_slave_0 added [ 29.864937][ T3299] team0: Port device team_slave_1 added [ 29.878610][ T3309] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.885570][ T3309] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.911543][ T3309] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.923279][ T3309] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.930275][ T3309] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.956270][ T3309] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.974470][ T3299] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.981475][ T3299] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.007419][ T3299] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.035621][ T3299] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.042889][ T3299] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.068941][ T3299] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.105830][ T3312] hsr_slave_0: entered promiscuous mode [ 30.112094][ T3312] hsr_slave_1: entered promiscuous mode [ 30.118097][ T3312] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 30.125826][ T3312] Cannot create hsr debugfs directory [ 30.151259][ T3309] hsr_slave_0: entered promiscuous mode [ 30.157410][ T3309] hsr_slave_1: entered promiscuous mode [ 30.163299][ T3309] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 30.170905][ T3309] Cannot create hsr debugfs directory [ 30.212879][ T3299] hsr_slave_0: entered promiscuous mode [ 30.219073][ T3299] hsr_slave_1: entered promiscuous mode [ 30.225023][ T3299] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 30.232734][ T3299] Cannot create hsr debugfs directory [ 30.290131][ T3298] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 30.309131][ T3298] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 30.323433][ T3298] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 30.341651][ T3298] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 30.388080][ T3301] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 30.401501][ T3301] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 30.418736][ T3301] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 30.437778][ T3301] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 30.446595][ T3312] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 30.455174][ T3312] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 30.464589][ T3312] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 30.473562][ T3312] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 30.509019][ T3309] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 30.518783][ T3309] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 30.527855][ T3309] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 30.538749][ T3309] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 30.560947][ T3299] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 30.574600][ T3299] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 30.584431][ T3299] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 30.593380][ T3299] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 30.636653][ T3298] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.674259][ T3301] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.689649][ T3298] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.701678][ T3301] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.717489][ T1877] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.724587][ T1877] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.735879][ T3312] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.749408][ T54] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.756567][ T54] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.765158][ T54] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.772359][ T54] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.781313][ T54] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.788449][ T54] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.800663][ T3312] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.833155][ T3299] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.850433][ T28] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.857640][ T28] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.869009][ T3309] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.880679][ T28] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.887821][ T28] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.910593][ T3299] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.937308][ T3309] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.955657][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.963041][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.973295][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.980400][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.998874][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.005938][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.040826][ T54] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.048007][ T54] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.074520][ T3312] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.083730][ T3301] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.149817][ T3298] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.243424][ T3301] veth0_vlan: entered promiscuous mode [ 31.268028][ T3299] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.276802][ T3312] veth0_vlan: entered promiscuous mode [ 31.285614][ T3312] veth1_vlan: entered promiscuous mode [ 31.293686][ T3301] veth1_vlan: entered promiscuous mode [ 31.301468][ T3309] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.332350][ T3298] veth0_vlan: entered promiscuous mode [ 31.342607][ T3301] veth0_macvtap: entered promiscuous mode [ 31.354190][ T3298] veth1_vlan: entered promiscuous mode [ 31.367371][ T3301] veth1_macvtap: entered promiscuous mode [ 31.374806][ T3312] veth0_macvtap: entered promiscuous mode [ 31.383674][ T3312] veth1_macvtap: entered promiscuous mode [ 31.405858][ T3298] veth0_macvtap: entered promiscuous mode [ 31.418599][ T3301] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.429166][ T3312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.439754][ T3312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.450418][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.459782][ T3298] veth1_macvtap: entered promiscuous mode [ 31.469650][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.479980][ T3301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.490497][ T3301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.511036][ T3301] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.519355][ T3312] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.528171][ T3312] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.537002][ T3312] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.545791][ T3312] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.560465][ T3301] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.569342][ T3301] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.578120][ T3301] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.587197][ T3301] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.610411][ T3298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.620949][ T3298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.630869][ T3298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.641434][ T3298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.652128][ T3298] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.670052][ T3298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.670840][ T29] kauditd_printk_skb: 18 callbacks suppressed [ 31.670858][ T29] audit: type=1400 audit(1733589320.615:110): avc: denied { mounton } for pid=3312 comm="syz-executor" path="/root/syzkaller.S7lg4C/syz-tmp" dev="sda1" ino=1944 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 31.680551][ T3298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.680569][ T3298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.692343][ T29] audit: type=1400 audit(1733589320.635:111): avc: denied { mount } for pid=3312 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 31.711041][ T3298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.713179][ T3298] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.721133][ T29] audit: type=1400 audit(1733589320.635:112): avc: denied { mounton } for pid=3312 comm="syz-executor" path="/root/syzkaller.S7lg4C/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 31.721169][ T29] audit: type=1400 audit(1733589320.635:113): avc: denied { mount } for pid=3312 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 31.818054][ T29] audit: type=1400 audit(1733589320.635:114): avc: denied { mounton } for pid=3312 comm="syz-executor" path="/root/syzkaller.S7lg4C/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 31.844728][ T29] audit: type=1400 audit(1733589320.635:115): avc: denied { mounton } for pid=3312 comm="syz-executor" path="/root/syzkaller.S7lg4C/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=4243 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 31.872208][ T29] audit: type=1400 audit(1733589320.635:116): avc: denied { unmount } for pid=3312 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 31.892985][ T29] audit: type=1400 audit(1733589320.685:117): avc: denied { mounton } for pid=3312 comm="syz-executor" path="/dev/binderfs" dev="devtmpfs" ino=502 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 31.919966][ T3312] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 31.935095][ T3309] veth0_vlan: entered promiscuous mode [ 31.942766][ T3309] veth1_vlan: entered promiscuous mode [ 31.957154][ T3309] veth0_macvtap: entered promiscuous mode [ 31.971544][ T3309] veth1_macvtap: entered promiscuous mode [ 31.982212][ T3298] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.991039][ T3298] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.999803][ T3298] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.008592][ T3298] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.021163][ T29] audit: type=1400 audit(1733589320.925:118): avc: denied { read write } for pid=3301 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 32.045596][ T29] audit: type=1400 audit(1733589320.925:119): avc: denied { open } for pid=3301 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 32.079012][ T3309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.089514][ T3309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.099346][ T3309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.109890][ T3309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.119740][ T3309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.130396][ T3309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.141839][ T3309] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.150547][ T3309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.152643][ T3446] syz.3.6[3446] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 32.161068][ T3309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.161538][ T3446] syz.3.6[3446] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 32.172158][ T3309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.182231][ T3446] syz.3.6[3446] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 32.193033][ T3309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.224744][ T3309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.235314][ T3309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.246749][ T3309] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.254235][ T3299] veth0_vlan: entered promiscuous mode [ 32.262345][ T3299] veth1_vlan: entered promiscuous mode [ 32.276544][ T3309] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.285714][ T3309] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.294595][ T3309] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.303351][ T3309] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.340664][ T3299] veth0_macvtap: entered promiscuous mode [ 32.358801][ T3299] veth1_macvtap: entered promiscuous mode [ 32.396796][ T3459] bridge_slave_0: left allmulticast mode [ 32.402599][ T3459] bridge_slave_0: left promiscuous mode [ 32.408387][ T3459] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.421750][ T3459] bridge_slave_1: left allmulticast mode [ 32.427492][ T3459] bridge_slave_1: left promiscuous mode [ 32.433154][ T3459] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.460233][ T3459] bond0: (slave bond_slave_0): Releasing backup interface [ 32.476533][ T3459] bond0: (slave bond_slave_1): Releasing backup interface [ 32.489383][ T3459] team0: Port device team_slave_0 removed [ 32.499212][ T3459] team0: Port device team_slave_1 removed [ 32.513371][ T3459] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 32.520984][ T3459] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 32.529780][ T3459] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 32.537546][ T3459] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 32.574913][ T3299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.585565][ T3299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.598186][ T3299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.608687][ T3299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.618583][ T3299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.629156][ T3299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.647449][ T3299] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.685108][ T3467] gretap1: entered allmulticast mode [ 32.696377][ T3467] bridge0: port 3(gretap1) entered blocking state [ 32.703043][ T3467] bridge0: port 3(gretap1) entered disabled state [ 32.711636][ T3482] loop0: detected capacity change from 0 to 1024 [ 32.715558][ T3480] loop1: detected capacity change from 0 to 1024 [ 32.721006][ T3482] EXT4-fs (loop0): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 32.730654][ T3467] gretap1: entered promiscuous mode [ 32.741020][ T3467] bridge0: port 3(gretap1) entered blocking state [ 32.747542][ T3467] bridge0: port 3(gretap1) entered forwarding state [ 32.754809][ T3480] EXT4-fs: Ignoring removed orlov option [ 32.765951][ T3482] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 32.770142][ C1] bridge0: received packet on gretap1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 32.789960][ C1] bridge0: received packet on gretap1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 32.795225][ T3480] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 32.814664][ T3299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.825347][ T3299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.835062][ T3482] EXT4-fs error (device loop0): ext4_expand_extra_isize_ea:2793: inode #15: comm syz.0.13: corrupted in-inode xattr: bad magic number in in-inode xattr [ 32.835746][ T3482] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2863: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 32.850532][ T3299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.850555][ T3299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.877330][ C1] bridge0: received packet on gretap1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 32.883958][ T3299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.906066][ T3299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.918179][ T3299] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.926765][ T3299] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.935950][ T3299] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.944774][ T3299] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.953614][ T3299] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.001518][ T3298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.027208][ C0] bridge0: received packet on gretap1 with own address as source address (addr:ea:71:27:f5:35:18, vlan:0) [ 33.075579][ T3497] syz.2.16[3497] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 33.075699][ T3497] syz.2.16[3497] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 33.089642][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.111651][ T3497] syz.2.16[3497] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 33.118672][ T3497] loop2: detected capacity change from 0 to 128 [ 33.123735][ T3499] loop4: detected capacity change from 0 to 1024 [ 33.162836][ T3497] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 33.166520][ T3499] ext4: Unknown parameter 'measure' [ 33.170800][ T3497] FAT-fs (loop2): Filesystem has been set read-only [ 33.201392][ T3497] syz.2.16: attempt to access beyond end of device [ 33.201392][ T3497] loop2: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 33.222273][ T3497] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 33.230326][ T3497] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 33.240120][ T3497] syz.2.16: attempt to access beyond end of device [ 33.240120][ T3497] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 33.263522][ T3497] syz.2.16: attempt to access beyond end of device [ 33.263522][ T3497] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 33.303120][ T3497] syz.2.16: attempt to access beyond end of device [ 33.303120][ T3497] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 33.312520][ T3510] netlink: 12 bytes leftover after parsing attributes in process `syz.1.21'. [ 33.333018][ T3497] syz.2.16: attempt to access beyond end of device [ 33.333018][ T3497] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 33.346603][ T3499] vhci_hcd: invalid port number 255 [ 33.351915][ T3499] vhci_hcd: default hub control req: 801a v087e i00ff l0 [ 33.378400][ T3497] syz.2.16: attempt to access beyond end of device [ 33.378400][ T3497] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 33.416133][ T3497] syz.2.16: attempt to access beyond end of device [ 33.416133][ T3497] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 33.458021][ T3497] syz.2.16: attempt to access beyond end of device [ 33.458021][ T3497] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 33.458660][ T3512] all: renamed from bridge_slave_0 (while UP) [ 33.497578][ T3497] syz.2.16: attempt to access beyond end of device [ 33.497578][ T3497] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 33.542878][ T3497] syz.2.16: attempt to access beyond end of device [ 33.542878][ T3497] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 33.752501][ T3526] hsr0: entered promiscuous mode [ 33.785568][ T3526] netlink: 12 bytes leftover after parsing attributes in process `syz.3.26'. [ 33.855445][ T3533] loop1: detected capacity change from 0 to 1024 [ 33.885558][ T3533] journal_path: not usable as path [ 33.890827][ T3533] EXT4-fs: error: could not find journal device path [ 33.931364][ T3536] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 34.011754][ T3542] loop0: detected capacity change from 0 to 128 [ 34.029650][ T3546] FAULT_INJECTION: forcing a failure. [ 34.029650][ T3546] name failslab, interval 1, probability 0, space 0, times 1 [ 34.042539][ T3546] CPU: 1 UID: 0 PID: 3546 Comm: syz.1.32 Not tainted 6.13.0-rc1-syzkaller-00316-gb5f217084ab3 #0 [ 34.046633][ C0] bridge0: received packet on gretap1 with own address as source address (addr:ea:71:27:f5:35:18, vlan:0) [ 34.053126][ T3546] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 34.053207][ T3546] Call Trace: [ 34.077803][ T3546] [ 34.080754][ T3546] dump_stack_lvl+0xf2/0x150 [ 34.085448][ T3546] dump_stack+0x15/0x1a [ 34.089729][ T3546] should_fail_ex+0x223/0x230 [ 34.094498][ T3546] should_failslab+0x8f/0xb0 [ 34.099227][ T3546] kmem_cache_alloc_noprof+0x52/0x320 [ 34.104622][ T3546] ? audit_log_start+0x34c/0x6b0 [ 34.109653][ T3546] audit_log_start+0x34c/0x6b0 [ 34.112863][ C0] bridge0: received packet on gretap1 with own address as source address (addr:ea:71:27:f5:35:18, vlan:0) [ 34.114451][ T3546] audit_seccomp+0x4b/0x130 [ 34.114484][ T3546] __seccomp_filter+0x6fa/0x1180 [ 34.135404][ T3546] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 34.141076][ T3546] ? vfs_write+0x596/0x920 [ 34.145614][ T3546] ? __schedule+0x6fa/0x930 [ 34.150155][ T3546] __secure_computing+0x9f/0x1c0 [ 34.155311][ T3546] syscall_trace_enter+0xd1/0x1f0 [ 34.160421][ T3546] do_syscall_64+0xaa/0x1c0 [ 34.165089][ T3546] ? clear_bhb_loop+0x55/0xb0 [ 34.169959][ T3546] ? clear_bhb_loop+0x55/0xb0 [ 34.174701][ T3546] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 34.180719][ T3546] RIP: 0033:0x7f97adf2fed9 [ 34.185195][ T3546] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 34.204904][ T3546] RSP: 002b:00007f97ac5a7058 EFLAGS: 00000246 ORIG_RAX: 000000000000012e [ 34.213371][ T3546] RAX: ffffffffffffffda RBX: 00007f97ae0f5fa0 RCX: 00007f97adf2fed9 [ 34.221408][ T3546] RDX: 0000000000000000 RSI: 000000000000000e RDI: 0000000000000000 [ 34.229390][ T3546] RBP: 00007f97ac5a70a0 R08: 0000000000000000 R09: 0000000000000000 [ 34.237856][ T3546] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 34.245860][ T3546] R13: 0000000000000000 R14: 00007f97ae0f5fa0 R15: 00007ffc30d0dba8 [ 34.253858][ T3546] [ 34.262381][ T3542] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 34.289035][ T3542] ext4 filesystem being mounted at /8/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 34.330121][ T3552] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 34.344646][ T3552] hsr_slave_1 (unregistering): left promiscuous mode [ 34.353371][ T3542] EXT4-fs error (device loop0): ext4_validate_block_bitmap:423: comm syz.0.30: bg 0: bad block bitmap checksum [ 34.380793][ T3298] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 34.401017][ T3557] mmap: syz.4.37 (3557) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 34.441235][ T3561] syz.4.38 (3561) used greatest stack depth: 9840 bytes left [ 34.514963][ T3571] loop4: detected capacity change from 0 to 512 [ 34.526950][ T3571] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 34.561924][ T3571] SELinux: Context system_u:object_r:systemd_logger_exec_t:s0 is not valid (left unmapped). [ 34.578663][ T3576] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 34.592322][ T3576] netlink: 8 bytes leftover after parsing attributes in process `syz.2.45'. [ 34.628217][ T3585] syz.0.47[3585] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 34.628378][ T3585] syz.0.47[3585] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 34.641744][ T3585] syz.0.47[3585] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 34.665388][ T3592] loop2: detected capacity change from 0 to 128 [ 34.755418][ T3603] FAULT_INJECTION: forcing a failure. [ 34.755418][ T3603] name failslab, interval 1, probability 0, space 0, times 0 [ 34.768124][ T3603] CPU: 1 UID: 0 PID: 3603 Comm: syz.3.51 Not tainted 6.13.0-rc1-syzkaller-00316-gb5f217084ab3 #0 [ 34.778780][ T3603] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 34.788846][ T3603] Call Trace: [ 34.792131][ T3603] [ 34.795065][ T3603] dump_stack_lvl+0xf2/0x150 [ 34.799684][ T3603] dump_stack+0x15/0x1a [ 34.803952][ T3603] should_fail_ex+0x223/0x230 [ 34.808663][ T3603] ? rtnl_newlink+0x5d/0x1220 [ 34.813379][ T3603] should_failslab+0x8f/0xb0 [ 34.818050][ T3603] __kmalloc_cache_noprof+0x4e/0x320 [ 34.823350][ T3603] ? __pfx_rtnl_newlink+0x10/0x10 [ 34.828387][ T3603] rtnl_newlink+0x5d/0x1220 [ 34.832924][ T3603] ? xas_load+0x3ae/0x3d0 [ 34.837274][ T3603] ? sized_strscpy+0x134/0x1c0 [ 34.842048][ T3603] ? htab_percpu_map_lookup_percpu_elem+0x168/0x1d0 [ 34.848686][ T3603] ? xas_load+0x3ae/0x3d0 [ 34.853104][ T3603] ? bpf_get_current_comm+0x8e/0xc0 [ 34.858395][ T3603] ? __rcu_read_unlock+0x34/0x70 [ 34.863532][ T3603] ? bpf_trace_run3+0x12b/0x1d0 [ 34.868412][ T3603] ? __kfree_skb+0x102/0x150 [ 34.873011][ T3603] ? sock_def_readable+0xae/0x1b0 [ 34.878125][ T3603] ? __kfree_skb+0x102/0x150 [ 34.882757][ T3603] ? __rcu_read_unlock+0x4e/0x70 [ 34.887714][ T3603] ? avc_has_perm_noaudit+0x1cc/0x210 [ 34.893299][ T3603] ? selinux_capable+0x1f2/0x260 [ 34.898321][ T3603] ? security_capable+0x81/0x90 [ 34.903195][ T3603] ? ns_capable+0x7d/0xb0 [ 34.907631][ T3603] ? __pfx_rtnl_newlink+0x10/0x10 [ 34.912722][ T3603] rtnetlink_rcv_msg+0x651/0x710 [ 34.917735][ T3603] ? ref_tracker_free+0x3a5/0x410 [ 34.922931][ T3603] ? __dev_queue_xmit+0x186/0x2090 [ 34.928069][ T3603] netlink_rcv_skb+0x12c/0x230 [ 34.932858][ T3603] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 34.938423][ T3603] rtnetlink_rcv+0x1c/0x30 [ 34.942922][ T3603] netlink_unicast+0x599/0x670 [ 34.947739][ T3603] netlink_sendmsg+0x5cc/0x6e0 [ 34.952589][ T3603] ? __pfx_netlink_sendmsg+0x10/0x10 [ 34.957990][ T3603] __sock_sendmsg+0x140/0x180 [ 34.962686][ T3603] ____sys_sendmsg+0x312/0x410 [ 34.967546][ T3603] __sys_sendmsg+0x19d/0x230 [ 34.972173][ T3603] __x64_sys_sendmsg+0x46/0x50 [ 34.976956][ T3603] x64_sys_call+0x2734/0x2dc0 [ 34.981692][ T3603] do_syscall_64+0xc9/0x1c0 [ 34.986267][ T3603] ? clear_bhb_loop+0x55/0xb0 [ 34.991003][ T3603] ? clear_bhb_loop+0x55/0xb0 [ 34.995704][ T3603] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 35.001629][ T3603] RIP: 0033:0x7f915a9dfed9 [ 35.006063][ T3603] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 35.025692][ T3603] RSP: 002b:00007f9159057058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 35.034204][ T3603] RAX: ffffffffffffffda RBX: 00007f915aba5fa0 RCX: 00007f915a9dfed9 [ 35.042519][ T3603] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000003 [ 35.050519][ T3603] RBP: 00007f91590570a0 R08: 0000000000000000 R09: 0000000000000000 [ 35.058680][ T3603] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 35.066806][ T3603] R13: 0000000000000000 R14: 00007f915aba5fa0 R15: 00007fff839c83a8 [ 35.074913][ T3603] [ 35.130607][ T3610] block device autoloading is deprecated and will be removed. [ 35.156396][ C0] bridge0: received packet on gretap1 with own address as source address (addr:ea:71:27:f5:35:18, vlan:0) [ 35.168362][ C0] bridge0: received packet on gretap1 with own address as source address (addr:ea:71:27:f5:35:18, vlan:0) [ 35.191739][ T3620] FAULT_INJECTION: forcing a failure. [ 35.191739][ T3620] name failslab, interval 1, probability 0, space 0, times 0 [ 35.204455][ T3620] CPU: 1 UID: 0 PID: 3620 Comm: syz.2.56 Not tainted 6.13.0-rc1-syzkaller-00316-gb5f217084ab3 #0 [ 35.215106][ T3620] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 35.225356][ T3620] Call Trace: [ 35.228655][ T3620] [ 35.231610][ T3620] dump_stack_lvl+0xf2/0x150 [ 35.236330][ T3620] dump_stack+0x15/0x1a [ 35.240596][ T3620] should_fail_ex+0x223/0x230 [ 35.245300][ T3620] should_failslab+0x8f/0xb0 [ 35.250019][ T3620] kmem_cache_alloc_node_noprof+0x59/0x320 [ 35.255916][ T3620] ? __alloc_skb+0x10b/0x310 [ 35.260792][ T3620] ? __rtnl_unlock+0x99/0xb0 [ 35.265424][ T3620] __alloc_skb+0x10b/0x310 [ 35.270339][ T3620] netlink_ack+0xef/0x4f0 [ 35.274691][ T3620] ? __dev_queue_xmit+0x186/0x2090 [ 35.279902][ T3620] netlink_rcv_skb+0x19c/0x230 [ 35.284708][ T3620] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 35.290202][ T3620] rtnetlink_rcv+0x1c/0x30 [ 35.294712][ T3620] netlink_unicast+0x599/0x670 [ 35.299495][ T3620] netlink_sendmsg+0x5cc/0x6e0 [ 35.304438][ T3620] ? __pfx_netlink_sendmsg+0x10/0x10 [ 35.309772][ T3620] __sock_sendmsg+0x140/0x180 [ 35.314492][ T3620] ____sys_sendmsg+0x312/0x410 [ 35.319319][ T3620] __sys_sendmsg+0x19d/0x230 [ 35.323951][ T3620] __x64_sys_sendmsg+0x46/0x50 [ 35.328770][ T3620] x64_sys_call+0x2734/0x2dc0 [ 35.333493][ T3620] do_syscall_64+0xc9/0x1c0 [ 35.338003][ T3620] ? clear_bhb_loop+0x55/0xb0 [ 35.342861][ T3620] ? clear_bhb_loop+0x55/0xb0 [ 35.347547][ T3620] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 35.353508][ T3620] RIP: 0033:0x7f3651d1fed9 [ 35.357955][ T3620] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 35.377693][ T3620] RSP: 002b:00007f3650397058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 35.386205][ T3620] RAX: ffffffffffffffda RBX: 00007f3651ee5fa0 RCX: 00007f3651d1fed9 [ 35.394286][ T3620] RDX: 0000000000000000 RSI: 0000000020000380 RDI: 0000000000000003 [ 35.402647][ T3620] RBP: 00007f36503970a0 R08: 0000000000000000 R09: 0000000000000000 [ 35.410673][ T3620] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 35.418772][ T3620] R13: 0000000000000000 R14: 00007f3651ee5fa0 R15: 00007ffd2c2981e8 [ 35.426941][ T3620] [ 35.432145][ T3622] wireguard0: entered promiscuous mode [ 35.437292][ T3628] FAULT_INJECTION: forcing a failure. [ 35.437292][ T3628] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 35.437811][ T3622] wireguard0: entered allmulticast mode [ 35.450770][ T3628] CPU: 1 UID: 0 PID: 3628 Comm: syz.0.58 Not tainted 6.13.0-rc1-syzkaller-00316-gb5f217084ab3 #0 [ 35.461820][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.466777][ T3628] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 35.466795][ T3628] Call Trace: [ 35.466803][ T3628] [ 35.466813][ T3628] dump_stack_lvl+0xf2/0x150 [ 35.496857][ T3628] dump_stack+0x15/0x1a [ 35.501056][ T3628] should_fail_ex+0x223/0x230 [ 35.505757][ T3628] should_fail+0xb/0x10 [ 35.510004][ T3628] should_fail_usercopy+0x1a/0x20 [ 35.515085][ T3628] _copy_to_user+0x20/0xa0 [ 35.519522][ T3628] simple_read_from_buffer+0xa0/0x110 [ 35.524971][ T3628] proc_fail_nth_read+0xf9/0x140 [ 35.529928][ T3628] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 35.535602][ T3628] vfs_read+0x1a2/0x700 [ 35.539875][ T3628] ? __rcu_read_unlock+0x4e/0x70 [ 35.544920][ T3628] ? __fget_files+0x17c/0x1c0 [ 35.549694][ T3628] ksys_read+0xe8/0x1b0 [ 35.553918][ T3628] __x64_sys_read+0x42/0x50 [ 35.558576][ T3628] x64_sys_call+0x2874/0x2dc0 [ 35.563304][ T3628] do_syscall_64+0xc9/0x1c0 [ 35.567824][ T3628] ? clear_bhb_loop+0x55/0xb0 [ 35.572568][ T3628] ? clear_bhb_loop+0x55/0xb0 [ 35.577408][ T3628] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 35.583347][ T3628] RIP: 0033:0x7f21661ce8ec [ 35.587801][ T3628] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 35.607437][ T3628] RSP: 002b:00007f2164847050 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 35.615971][ T3628] RAX: ffffffffffffffda RBX: 00007f2166395fa0 RCX: 00007f21661ce8ec [ 35.623992][ T3628] RDX: 000000000000000f RSI: 00007f21648470b0 RDI: 0000000000000003 [ 35.631985][ T3628] RBP: 00007f21648470a0 R08: 0000000000000000 R09: 0000000000000000 [ 35.639962][ T3628] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 35.647958][ T3628] R13: 0000000000000000 R14: 00007f2166395fa0 R15: 00007ffe515ea158 [ 35.656001][ T3628] [ 35.920371][ T3652] loop1: detected capacity change from 0 to 1024 [ 35.928761][ T3651] netlink: 16 bytes leftover after parsing attributes in process `syz.3.68'. [ 35.933625][ T3656] loop4: detected capacity change from 0 to 512 [ 35.945960][ T3652] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.960795][ T3633] FAULT_INJECTION: forcing a failure. [ 35.960795][ T3633] name fail_futex, interval 1, probability 0, space 0, times 1 [ 35.966279][ C0] bridge0: received packet on gretap1 with own address as source address (addr:ea:71:27:f5:35:18, vlan:0) [ 35.973637][ T3633] CPU: 1 UID: 0 PID: 3633 Comm: syz.2.61 Not tainted 6.13.0-rc1-syzkaller-00316-gb5f217084ab3 #0 [ 35.995476][ T3633] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 35.998683][ T3656] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 36.005540][ T3633] Call Trace: [ 36.005552][ T3633] [ 36.005562][ T3633] dump_stack_lvl+0xf2/0x150 [ 36.016123][ T3656] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 36.016899][ T3633] dump_stack+0x15/0x1a [ 36.024177][ T3656] EXT4-fs (loop4): 1 truncate cleaned up [ 36.024401][ T3633] should_fail_ex+0x223/0x230 [ 36.039945][ T3656] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.042159][ T3633] should_fail+0xb/0x10 [ 36.059833][ T3656] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, [ 36.063496][ T3633] get_futex_key+0x135/0x740 [ 36.071792][ T3656] block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 36.076322][ T3633] ? __list_del_entry_valid_or_report+0x5f/0xf0 [ 36.085142][ T3656] EXT4-fs (loop4): Remounting filesystem read-only [ 36.090912][ T3633] futex_wake_op+0xb2/0xb50 [ 36.090950][ T3633] ? audit_seccomp+0x107/0x130 [ 36.106972][ T3633] do_futex+0x32c/0x370 [ 36.111285][ T3633] __se_sys_futex+0x25d/0x3a0 [ 36.114564][ T3666] syz.3.72[3666] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 36.116015][ T3633] __x64_sys_futex+0x78/0x90 [ 36.131811][ T3633] x64_sys_call+0x2d6a/0x2dc0 [ 36.136597][ T3633] do_syscall_64+0xc9/0x1c0 [ 36.141168][ T3633] ? clear_bhb_loop+0x55/0xb0 [ 36.145871][ T3633] ? clear_bhb_loop+0x55/0xb0 [ 36.150586][ T3633] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 36.156796][ T3633] RIP: 0033:0x7f3651d1fed9 [ 36.161323][ T3633] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 36.181110][ T3633] RSP: 002b:00007f3650397058 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 36.189684][ T3633] RAX: ffffffffffffffda RBX: 00007f3651ee5fa0 RCX: 00007f3651d1fed9 [ 36.197692][ T3633] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000020000000 [ 36.206124][ T3633] RBP: 00007f36503970a0 R08: 0000000020000140 R09: 00000000c4fffffe [ 36.214130][ T3633] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 36.222255][ T3633] R13: 0000000000000000 R14: 00007f3651ee5fa0 R15: 00007ffd2c2981e8 [ 36.230305][ T3633] [ 36.241644][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.251735][ T3666] FAULT_INJECTION: forcing a failure. [ 36.251735][ T3666] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 36.264832][ T3666] CPU: 0 UID: 0 PID: 3666 Comm: syz.3.72 Not tainted 6.13.0-rc1-syzkaller-00316-gb5f217084ab3 #0 [ 36.264866][ T3666] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 36.264943][ T3666] Call Trace: [ 36.264950][ T3666] [ 36.264960][ T3666] dump_stack_lvl+0xf2/0x150 [ 36.265007][ T3666] dump_stack+0x15/0x1a [ 36.275596][ T3660] usb usb5: usbfs: process 3660 (syz.0.71) did not claim interface 4 before use [ 36.285593][ T3666] should_fail_ex+0x223/0x230 [ 36.285633][ T3666] should_fail+0xb/0x10 [ 36.318788][ T3666] should_fail_usercopy+0x1a/0x20 [ 36.323848][ T3666] _copy_from_user+0x1e/0xb0 [ 36.328490][ T3666] get_itimerspec64+0x4d/0x230 [ 36.333393][ T3666] __x64_sys_timer_settime+0x99/0x160 [ 36.338822][ T3666] x64_sys_call+0xd76/0x2dc0 [ 36.343455][ T3666] do_syscall_64+0xc9/0x1c0 [ 36.348081][ T3666] ? clear_bhb_loop+0x55/0xb0 [ 36.352795][ T3666] ? clear_bhb_loop+0x55/0xb0 [ 36.357532][ T3666] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 36.363493][ T3666] RIP: 0033:0x7f915a9dfed9 [ 36.367940][ T3666] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 36.387655][ T3666] RSP: 002b:00007f9159057058 EFLAGS: 00000246 ORIG_RAX: 00000000000000df [ 36.396111][ T3666] RAX: ffffffffffffffda RBX: 00007f915aba5fa0 RCX: 00007f915a9dfed9 [ 36.404104][ T3666] RDX: 0000000020000340 RSI: 0000000000000001 RDI: 0000000000000000 [ 36.412096][ T3666] RBP: 00007f91590570a0 R08: 0000000000000000 R09: 0000000000000000 [ 36.420159][ T3666] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 36.428229][ T3666] R13: 0000000000000000 R14: 00007f915aba5fa0 R15: 00007fff839c83a8 [ 36.436225][ T3666] [ 36.522981][ T3681] loop0: detected capacity change from 0 to 1024 [ 36.530886][ T3683] Zero length message leads to an empty skb [ 36.537483][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 36.548383][ T3681] EXT4-fs: Ignoring removed mblk_io_submit option [ 36.563342][ T3685] loop2: detected capacity change from 0 to 1024 [ 36.570224][ T3685] EXT4-fs: Ignoring removed mblk_io_submit option [ 36.587761][ T3685] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.602361][ T3685] process 'syz.2.80' launched './file0/file0' with NULL argv: empty string added [ 36.627846][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.665088][ T3681] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.690667][ T3692] loop2: detected capacity change from 0 to 1024 [ 36.698343][ T29] kauditd_printk_skb: 1246 callbacks suppressed [ 36.698358][ T29] audit: type=1326 audit(1733589325.645:1364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3674 comm="syz.4.73" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f7f1e6b6ea7 code=0x7ffc0000 [ 36.740483][ T3692] EXT4-fs: Ignoring removed mblk_io_submit option [ 36.780429][ T29] audit: type=1326 audit(1733589325.675:1365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3674 comm="syz.4.73" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7f1e65c0e9 code=0x7ffc0000 [ 36.803762][ T29] audit: type=1326 audit(1733589325.675:1366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3674 comm="syz.4.73" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f7f1e6b6ea7 code=0x7ffc0000 [ 36.826920][ T29] audit: type=1326 audit(1733589325.675:1367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3674 comm="syz.4.73" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7f1e65c0e9 code=0x7ffc0000 [ 36.850366][ T29] audit: type=1326 audit(1733589325.675:1368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3674 comm="syz.4.73" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f7f1e6b6ea7 code=0x7ffc0000 [ 36.873784][ T29] audit: type=1326 audit(1733589325.675:1369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3674 comm="syz.4.73" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7f1e65c0e9 code=0x7ffc0000 [ 36.897070][ T29] audit: type=1326 audit(1733589325.675:1370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3674 comm="syz.4.73" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f7f1e6b6ea7 code=0x7ffc0000 [ 36.920614][ T29] audit: type=1326 audit(1733589325.675:1371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3674 comm="syz.4.73" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7f1e65c0e9 code=0x7ffc0000 [ 36.943990][ T29] audit: type=1326 audit(1733589325.675:1372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3674 comm="syz.4.73" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f7f1e6b6ea7 code=0x7ffc0000 [ 36.967191][ T29] audit: type=1326 audit(1733589325.675:1373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3674 comm="syz.4.73" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7f1e65c0e9 code=0x7ffc0000 [ 36.993304][ T3298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.005261][ T3692] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.027265][ T3692] FAULT_INJECTION: forcing a failure. [ 37.027265][ T3692] name failslab, interval 1, probability 0, space 0, times 0 [ 37.040019][ T3692] CPU: 0 UID: 0 PID: 3692 Comm: syz.2.81 Not tainted 6.13.0-rc1-syzkaller-00316-gb5f217084ab3 #0 [ 37.050541][ T3692] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 37.060792][ T3692] Call Trace: [ 37.064094][ T3692] [ 37.067143][ T3692] dump_stack_lvl+0xf2/0x150 [ 37.071848][ T3692] dump_stack+0x15/0x1a [ 37.076156][ T3692] should_fail_ex+0x223/0x230 [ 37.080874][ T3692] should_failslab+0x8f/0xb0 [ 37.085513][ T3692] __kmalloc_node_noprof+0xad/0x410 [ 37.090768][ T3692] ? vmemdup_user+0x42/0x1b0 [ 37.095403][ T3692] vmemdup_user+0x42/0x1b0 [ 37.099854][ T3692] path_setxattrat+0x1c9/0x310 [ 37.104664][ T3692] __x64_sys_setxattr+0x6e/0x90 [ 37.109562][ T3692] x64_sys_call+0x2247/0x2dc0 [ 37.114271][ T3692] do_syscall_64+0xc9/0x1c0 [ 37.118803][ T3692] ? clear_bhb_loop+0x55/0xb0 [ 37.123577][ T3692] ? clear_bhb_loop+0x55/0xb0 [ 37.128328][ T3692] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 37.134315][ T3692] RIP: 0033:0x7f3651d1fed9 [ 37.138742][ T3692] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 37.158632][ T3692] RSP: 002b:00007f3650397058 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc [ 37.167083][ T3692] RAX: ffffffffffffffda RBX: 00007f3651ee5fa0 RCX: 00007f3651d1fed9 [ 37.175081][ T3692] RDX: 0000000020000280 RSI: 00000000200000c0 RDI: 00000000200003c0 [ 37.183407][ T3692] RBP: 00007f36503970a0 R08: 0000000000000000 R09: 0000000000000000 [ 37.191564][ T3692] R10: 0000000000000835 R11: 0000000000000246 R12: 0000000000000001 [ 37.199559][ T3692] R13: 0000000000000000 R14: 00007f3651ee5fa0 R15: 00007ffd2c2981e8 [ 37.207790][ T3692] [ 37.216737][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.268222][ T3696] loop3: detected capacity change from 0 to 1024 [ 37.274899][ T3696] journal_path: not usable as path [ 37.280085][ T3696] EXT4-fs: error: could not find journal device path [ 37.314839][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.591896][ T3713] loop3: detected capacity change from 0 to 512 [ 37.619418][ T3713] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 37.632622][ T3713] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 37.722153][ T3713] EXT4-fs (loop3): 1 truncate cleaned up [ 37.747588][ T3713] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.854070][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.993595][ T3730] netlink: 8 bytes leftover after parsing attributes in process `syz.2.93'. [ 38.057228][ T3733] usb usb5: usbfs: process 3733 (syz.3.94) did not claim interface 4 before use [ 38.350911][ T3749] usb usb5: usbfs: process 3749 (syz.2.101) did not claim interface 4 before use [ 38.734522][ T3773] FAULT_INJECTION: forcing a failure. [ 38.734522][ T3773] name failslab, interval 1, probability 0, space 0, times 0 [ 38.747290][ T3773] CPU: 0 UID: 0 PID: 3773 Comm: syz.1.111 Not tainted 6.13.0-rc1-syzkaller-00316-gb5f217084ab3 #0 [ 38.758001][ T3773] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 38.768222][ T3773] Call Trace: [ 38.771550][ T3773] [ 38.774500][ T3773] dump_stack_lvl+0xf2/0x150 [ 38.779139][ T3773] dump_stack+0x15/0x1a [ 38.783352][ T3773] should_fail_ex+0x223/0x230 [ 38.788118][ T3773] should_failslab+0x8f/0xb0 [ 38.792744][ T3773] kmem_cache_alloc_lru_noprof+0x57/0x320 [ 38.798527][ T3773] ? shmem_alloc_inode+0x34/0x50 [ 38.803574][ T3773] shmem_alloc_inode+0x34/0x50 [ 38.808438][ T3773] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 38.813934][ T3773] alloc_inode+0x3c/0x160 [ 38.818330][ T3773] new_inode+0x1e/0x100 [ 38.822510][ T3773] shmem_get_inode+0x24e/0x730 [ 38.827314][ T3773] __shmem_file_setup+0x127/0x1f0 [ 38.832379][ T3773] shmem_file_setup+0x3b/0x50 [ 38.837234][ T3773] __se_sys_memfd_create+0x31d/0x5c0 [ 38.842586][ T3773] __x64_sys_memfd_create+0x31/0x40 [ 38.847820][ T3773] x64_sys_call+0x2d4c/0x2dc0 [ 38.852622][ T3773] do_syscall_64+0xc9/0x1c0 [ 38.857211][ T3773] ? clear_bhb_loop+0x55/0xb0 [ 38.861968][ T3773] ? clear_bhb_loop+0x55/0xb0 [ 38.866738][ T3773] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 38.872672][ T3773] RIP: 0033:0x7f97adf2fed9 [ 38.877172][ T3773] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 38.896861][ T3773] RSP: 002b:00007f97ac5a6e38 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 38.905511][ T3773] RAX: ffffffffffffffda RBX: 000000000000058a RCX: 00007f97adf2fed9 [ 38.913516][ T3773] RDX: 00007f97ac5a6f10 RSI: 0000000000000000 RDI: 00007f97adfa461b [ 38.921600][ T3773] RBP: 0000000020000b40 R08: 00007f97ac5a6bd7 R09: 00007f97ac5a6e60 [ 38.929598][ T3773] R10: 000000000000000a R11: 0000000000000202 R12: 00000000200005c0 [ 38.937608][ T3773] R13: 00007f97ac5a6f10 R14: 00007f97ac5a6ed0 R15: 0000000020000000 [ 38.945638][ T3773] [ 38.996510][ C0] net_ratelimit: 1 callbacks suppressed [ 38.996524][ C0] bridge0: received packet on gretap1 with own address as source address (addr:ea:71:27:f5:35:18, vlan:0) [ 39.105119][ T3785] loop1: detected capacity change from 0 to 1024 [ 39.116362][ T3785] journal_path: not usable as path [ 39.121593][ T3785] EXT4-fs: error: could not find journal device path [ 39.255155][ T3798] netlink: 16 bytes leftover after parsing attributes in process `syz.1.122'. [ 39.416473][ T3808] netlink: 8 bytes leftover after parsing attributes in process `syz.4.125'. [ 39.722871][ T3826] loop2: detected capacity change from 0 to 1024 [ 39.749049][ T3826] journal_path: not usable as path [ 39.754293][ T3826] EXT4-fs: error: could not find journal device path [ 39.761301][ T3828] FAULT_INJECTION: forcing a failure. [ 39.761301][ T3828] name failslab, interval 1, probability 0, space 0, times 0 [ 39.774164][ T3828] CPU: 1 UID: 0 PID: 3828 Comm: syz.1.133 Not tainted 6.13.0-rc1-syzkaller-00316-gb5f217084ab3 #0 [ 39.784810][ T3828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 39.794895][ T3828] Call Trace: [ 39.798188][ T3828] [ 39.801139][ T3828] dump_stack_lvl+0xf2/0x150 [ 39.805961][ T3828] dump_stack+0x15/0x1a [ 39.810162][ T3828] should_fail_ex+0x223/0x230 [ 39.814889][ T3828] should_failslab+0x8f/0xb0 [ 39.819552][ T3828] kmem_cache_alloc_node_noprof+0x59/0x320 [ 39.825396][ T3828] ? __alloc_skb+0x10b/0x310 [ 39.830134][ T3828] __alloc_skb+0x10b/0x310 [ 39.834663][ T3828] netlink_alloc_large_skb+0xad/0xe0 [ 39.839981][ T3828] netlink_sendmsg+0x3b4/0x6e0 [ 39.844775][ T3828] ? __pfx_netlink_sendmsg+0x10/0x10 [ 39.850150][ T3828] __sock_sendmsg+0x140/0x180 [ 39.854915][ T3828] ____sys_sendmsg+0x312/0x410 [ 39.859754][ T3828] __sys_sendmsg+0x19d/0x230 [ 39.864401][ T3828] __x64_sys_sendmsg+0x46/0x50 [ 39.869243][ T3828] x64_sys_call+0x2734/0x2dc0 [ 39.873947][ T3828] do_syscall_64+0xc9/0x1c0 [ 39.878515][ T3828] ? clear_bhb_loop+0x55/0xb0 [ 39.883259][ T3828] ? clear_bhb_loop+0x55/0xb0 [ 39.888014][ T3828] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 39.893951][ T3828] RIP: 0033:0x7f97adf2fed9 [ 39.898386][ T3828] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 39.918084][ T3828] RSP: 002b:00007f97ac5a7058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 39.926594][ T3828] RAX: ffffffffffffffda RBX: 00007f97ae0f5fa0 RCX: 00007f97adf2fed9 [ 39.934627][ T3828] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000003 [ 39.942622][ T3828] RBP: 00007f97ac5a70a0 R08: 0000000000000000 R09: 0000000000000000 [ 39.950906][ T3828] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 39.958975][ T3828] R13: 0000000000000000 R14: 00007f97ae0f5fa0 R15: 00007ffc30d0dba8 [ 39.966998][ T3828] [ 40.192760][ T3840] FAULT_INJECTION: forcing a failure. [ 40.192760][ T3840] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 40.205893][ T3840] CPU: 1 UID: 0 PID: 3840 Comm: syz.2.137 Not tainted 6.13.0-rc1-syzkaller-00316-gb5f217084ab3 #0 [ 40.216643][ T3840] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 40.226812][ T3840] Call Trace: [ 40.230097][ T3840] [ 40.233045][ T3840] dump_stack_lvl+0xf2/0x150 [ 40.237665][ T3840] dump_stack+0x15/0x1a [ 40.241871][ T3840] should_fail_ex+0x223/0x230 [ 40.246595][ T3840] should_fail+0xb/0x10 [ 40.250845][ T3840] should_fail_usercopy+0x1a/0x20 [ 40.255971][ T3840] _copy_from_user+0x1e/0xb0 [ 40.260676][ T3840] move_addr_to_kernel+0x82/0x120 [ 40.265781][ T3840] copy_msghdr_from_user+0x271/0x2a0 [ 40.271138][ T3840] __sys_sendmmsg+0x1e8/0x4b0 [ 40.275872][ T3840] __x64_sys_sendmmsg+0x57/0x70 [ 40.280756][ T3840] x64_sys_call+0x29aa/0x2dc0 [ 40.285473][ T3840] do_syscall_64+0xc9/0x1c0 [ 40.290001][ T3840] ? clear_bhb_loop+0x55/0xb0 [ 40.294693][ T3840] ? clear_bhb_loop+0x55/0xb0 [ 40.299424][ T3840] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 40.305371][ T3840] RIP: 0033:0x7f3651d1fed9 [ 40.309834][ T3840] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 40.329468][ T3840] RSP: 002b:00007f3650397058 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 40.337893][ T3840] RAX: ffffffffffffffda RBX: 00007f3651ee5fa0 RCX: 00007f3651d1fed9 [ 40.345947][ T3840] RDX: 0000000000000001 RSI: 0000000020000440 RDI: 0000000000000003 [ 40.353933][ T3840] RBP: 00007f36503970a0 R08: 0000000000000000 R09: 0000000000000000 [ 40.361910][ T3840] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 40.369963][ T3840] R13: 0000000000000000 R14: 00007f3651ee5fa0 R15: 00007ffd2c2981e8 [ 40.377949][ T3840] [ 40.448649][ T3847] loop2: detected capacity change from 0 to 512 [ 40.506652][ T3847] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2240: inode #15: comm syz.2.140: corrupted in-inode xattr: invalid ea_ino [ 40.526089][ T3847] EXT4-fs error (device loop2): ext4_orphan_get:1394: comm syz.2.140: couldn't read orphan inode 15 (err -117) [ 40.542017][ T3847] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.586701][ T3860] FAULT_INJECTION: forcing a failure. [ 40.586701][ T3860] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 40.601001][ T3860] CPU: 0 UID: 0 PID: 3860 Comm: syz.3.145 Not tainted 6.13.0-rc1-syzkaller-00316-gb5f217084ab3 #0 [ 40.611677][ T3860] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 40.621916][ T3860] Call Trace: [ 40.625214][ T3860] [ 40.628213][ T3860] dump_stack_lvl+0xf2/0x150 [ 40.632845][ T3860] dump_stack+0x15/0x1a [ 40.637048][ T3860] should_fail_ex+0x223/0x230 [ 40.641760][ T3860] should_fail+0xb/0x10 [ 40.645974][ T3860] should_fail_usercopy+0x1a/0x20 [ 40.651048][ T3860] _copy_from_user+0x1e/0xb0 [ 40.655683][ T3860] snd_seq_write+0x1ce/0x500 [ 40.660425][ T3860] vfs_writev+0x3fb/0x880 [ 40.664786][ T3860] ? __pfx_snd_seq_write+0x10/0x10 [ 40.670017][ T3860] do_writev+0xf4/0x220 [ 40.674214][ T3860] __x64_sys_writev+0x45/0x50 [ 40.679019][ T3860] x64_sys_call+0x1fab/0x2dc0 [ 40.683731][ T3860] do_syscall_64+0xc9/0x1c0 [ 40.688261][ T3860] ? clear_bhb_loop+0x55/0xb0 [ 40.692961][ T3860] ? clear_bhb_loop+0x55/0xb0 [ 40.697666][ T3860] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 40.703847][ T3860] RIP: 0033:0x7f915a9dfed9 [ 40.708356][ T3860] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 40.728005][ T3860] RSP: 002b:00007f9159057058 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 40.736460][ T3860] RAX: ffffffffffffffda RBX: 00007f915aba5fa0 RCX: 00007f915a9dfed9 [ 40.744503][ T3860] RDX: 0000000000000001 RSI: 0000000020000580 RDI: 0000000000000004 [ 40.752506][ T3860] RBP: 00007f91590570a0 R08: 0000000000000000 R09: 0000000000000000 [ 40.760506][ T3860] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 40.768534][ T3860] R13: 0000000000000000 R14: 00007f915aba5fa0 R15: 00007fff839c83a8 [ 40.776572][ T3860] [ 40.803605][ T3866] loop0: detected capacity change from 0 to 1024 [ 40.830722][ T3866] journal_path: not usable as path [ 40.835912][ T3866] EXT4-fs: error: could not find journal device path [ 40.869107][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.901376][ T3878] FAULT_INJECTION: forcing a failure. [ 40.901376][ T3878] name failslab, interval 1, probability 0, space 0, times 0 [ 40.914185][ T3878] CPU: 0 UID: 0 PID: 3878 Comm: syz.2.150 Not tainted 6.13.0-rc1-syzkaller-00316-gb5f217084ab3 #0 [ 40.924821][ T3878] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 40.934902][ T3878] Call Trace: [ 40.938204][ T3878] [ 40.941204][ T3878] dump_stack_lvl+0xf2/0x150 [ 40.945934][ T3878] dump_stack+0x15/0x1a [ 40.950209][ T3878] should_fail_ex+0x223/0x230 [ 40.955009][ T3878] should_failslab+0x8f/0xb0 [ 40.959700][ T3878] kmem_cache_alloc_noprof+0x52/0x320 [ 40.965100][ T3878] ? dup_fd+0x3a/0x6a0 [ 40.969349][ T3878] dup_fd+0x3a/0x6a0 [ 40.973365][ T3878] __se_sys_close_range+0x111/0x2f0 [ 40.978746][ T3878] __x64_sys_close_range+0x43/0x50 [ 40.984045][ T3878] x64_sys_call+0x2411/0x2dc0 [ 40.988807][ T3878] do_syscall_64+0xc9/0x1c0 [ 40.993378][ T3878] ? clear_bhb_loop+0x55/0xb0 [ 40.998090][ T3878] ? clear_bhb_loop+0x55/0xb0 [ 41.002792][ T3878] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 41.008750][ T3878] RIP: 0033:0x7f3651d1fed9 [ 41.013217][ T3878] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 41.033016][ T3878] RSP: 002b:00007f3650397058 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 41.041522][ T3878] RAX: ffffffffffffffda RBX: 00007f3651ee5fa0 RCX: 00007f3651d1fed9 [ 41.049530][ T3878] RDX: 0000000000000002 RSI: ffffffffffffffff RDI: ffffffffffffffff [ 41.057543][ T3878] RBP: 00007f36503970a0 R08: 0000000000000000 R09: 0000000000000000 [ 41.065537][ T3878] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 41.073586][ T3878] R13: 0000000000000000 R14: 00007f3651ee5fa0 R15: 00007ffd2c2981e8 [ 41.081650][ T3878] [ 41.160051][ T3885] loop2: detected capacity change from 0 to 2048 [ 41.189373][ T3885] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.623219][ T3885] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 41.648430][ T3885] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 41.660971][ T3885] EXT4-fs (loop2): This should not happen!! Data will be lost [ 41.660971][ T3885] [ 41.670651][ T3885] EXT4-fs (loop2): Total free blocks count 0 [ 41.676743][ T3885] EXT4-fs (loop2): Free/Dirty block details [ 41.682742][ T3885] EXT4-fs (loop2): free_blocks=2415919104 [ 41.688819][ T3885] EXT4-fs (loop2): dirty_blocks=8192 [ 41.694379][ T3885] EXT4-fs (loop2): Block reservation details [ 41.700429][ T3885] EXT4-fs (loop2): i_reserved_data_blocks=512 [ 41.733018][ T3904] loop1: detected capacity change from 0 to 512 [ 41.749552][ T3894] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 41.837156][ T3904] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.938135][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.015445][ T29] kauditd_printk_skb: 7610 callbacks suppressed [ 42.015459][ T29] audit: type=1326 audit(1733589330.957:8978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3913 comm="syz.1.164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97adf2fed9 code=0x7ffc0000 [ 42.045241][ T29] audit: type=1326 audit(1733589330.957:8979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3913 comm="syz.1.164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97adf2fed9 code=0x7ffc0000 [ 42.158585][ T29] audit: type=1326 audit(1733589331.017:8980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3913 comm="syz.1.164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f97adf2fed9 code=0x7ffc0000 [ 42.182012][ T29] audit: type=1326 audit(1733589331.017:8981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3913 comm="syz.1.164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97adf2fed9 code=0x7ffc0000 [ 42.196679][ T3926] loop2: detected capacity change from 0 to 1024 [ 42.205499][ T29] audit: type=1326 audit(1733589331.017:8982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3913 comm="syz.1.164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97adf2fed9 code=0x7ffc0000 [ 42.234180][ T3926] journal_path: not usable as path [ 42.235073][ T29] audit: type=1326 audit(1733589331.017:8983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3913 comm="syz.1.164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f97adf2fed9 code=0x7ffc0000 [ 42.240320][ T3926] EXT4-fs: error: could not find journal device path [ 42.263582][ T29] audit: type=1326 audit(1733589331.017:8984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3913 comm="syz.1.164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97adf2fed9 code=0x7ffc0000 [ 42.293720][ T29] audit: type=1326 audit(1733589331.017:8985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3913 comm="syz.1.164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97adf2fed9 code=0x7ffc0000 [ 42.317058][ T29] audit: type=1326 audit(1733589331.017:8986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3913 comm="syz.1.164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=270 compat=0 ip=0x7f97adf2fed9 code=0x7ffc0000 [ 42.340495][ T29] audit: type=1326 audit(1733589331.017:8987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3913 comm="syz.1.164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97adf2fed9 code=0x7ffc0000 [ 42.443575][ T3936] loop2: detected capacity change from 0 to 512 [ 42.459485][ T3936] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.472126][ T3936] ext4 filesystem being mounted at /36/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 42.483656][ T3936] netlink: 'syz.2.174': attribute type 1 has an invalid length. [ 42.491348][ T3936] netlink: 224 bytes leftover after parsing attributes in process `syz.2.174'. [ 42.528313][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.588806][ T3947] xt_hashlimit: max too large, truncated to 1048576 [ 42.602225][ T3947] loop4: detected capacity change from 0 to 256 [ 42.664503][ T3952] netlink: 4 bytes leftover after parsing attributes in process `syz.4.178'. [ 42.734695][ T3958] loop4: detected capacity change from 0 to 4096 [ 42.748063][ T3960] loop2: detected capacity change from 0 to 4096 [ 42.753061][ T3958] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.768907][ T3960] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.810486][ T3960] FAULT_INJECTION: forcing a failure. [ 42.810486][ T3960] name failslab, interval 1, probability 0, space 0, times 0 [ 42.823231][ T3960] CPU: 1 UID: 0 PID: 3960 Comm: syz.2.184 Not tainted 6.13.0-rc1-syzkaller-00316-gb5f217084ab3 #0 [ 42.833913][ T3960] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 42.844000][ T3960] Call Trace: [ 42.847346][ T3960] [ 42.850299][ T3960] dump_stack_lvl+0xf2/0x150 [ 42.855124][ T3960] dump_stack+0x15/0x1a [ 42.859349][ T3960] should_fail_ex+0x223/0x230 [ 42.864062][ T3960] should_failslab+0x8f/0xb0 [ 42.868883][ T3960] __kmalloc_noprof+0xab/0x3f0 [ 42.873724][ T3960] ? alloc_pipe_info+0x1cb/0x360 [ 42.878691][ T3960] alloc_pipe_info+0x1cb/0x360 [ 42.883528][ T3960] splice_direct_to_actor+0x60f/0x670 [ 42.888978][ T3960] ? __pfx_direct_splice_actor+0x10/0x10 [ 42.894669][ T3960] ? 0xffffffff81000000 [ 42.898825][ T3960] ? selinux_file_permission+0x22a/0x360 [ 42.904491][ T3960] ? __rcu_read_unlock+0x4e/0x70 [ 42.909772][ T3960] ? avc_policy_seqno+0x15/0x20 [ 42.914729][ T3960] ? selinux_file_permission+0x22a/0x360 [ 42.920443][ T3960] do_splice_direct+0xd7/0x150 [ 42.925296][ T3960] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 42.931213][ T3960] do_sendfile+0x398/0x660 [ 42.935803][ T3960] __x64_sys_sendfile64+0x110/0x150 [ 42.941057][ T3960] x64_sys_call+0xfbd/0x2dc0 [ 42.945725][ T3960] do_syscall_64+0xc9/0x1c0 [ 42.950235][ T3960] ? clear_bhb_loop+0x55/0xb0 [ 42.954976][ T3960] ? clear_bhb_loop+0x55/0xb0 [ 42.959664][ T3960] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 42.965669][ T3960] RIP: 0033:0x7f3651d1fed9 [ 42.970101][ T3960] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 42.989977][ T3960] RSP: 002b:00007f3650397058 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 42.998436][ T3960] RAX: ffffffffffffffda RBX: 00007f3651ee5fa0 RCX: 00007f3651d1fed9 [ 43.006487][ T3960] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 0000000000000009 [ 43.014507][ T3960] RBP: 00007f36503970a0 R08: 0000000000000000 R09: 0000000000000000 [ 43.022597][ T3960] R10: 0000000080000000 R11: 0000000000000246 R12: 0000000000000001 [ 43.030576][ T3960] R13: 0000000000000000 R14: 00007f3651ee5fa0 R15: 00007ffd2c2981e8 [ 43.038562][ T3960] [ 43.092179][ T3969] netlink: 16 bytes leftover after parsing attributes in process `syz.0.187'. [ 43.095378][ T3966] netlink: 'syz.1.186': attribute type 12 has an invalid length. [ 43.138392][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.141465][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.173414][ T3974] loop1: detected capacity change from 0 to 512 [ 43.203000][ T3974] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.204866][ T3975] FAULT_INJECTION: forcing a failure. [ 43.204866][ T3975] name failslab, interval 1, probability 0, space 0, times 0 [ 43.227841][ T3975] CPU: 1 UID: 0 PID: 3975 Comm: syz.3.190 Not tainted 6.13.0-rc1-syzkaller-00316-gb5f217084ab3 #0 [ 43.238224][ T3983] netlink: 16 bytes leftover after parsing attributes in process `syz.2.188'. [ 43.238455][ T3975] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 43.257502][ T3975] Call Trace: [ 43.260827][ T3975] [ 43.263766][ T3975] dump_stack_lvl+0xf2/0x150 [ 43.268621][ T3975] dump_stack+0x15/0x1a [ 43.272800][ T3975] should_fail_ex+0x223/0x230 [ 43.277540][ T3975] should_failslab+0x8f/0xb0 [ 43.282159][ T3975] kmem_cache_alloc_node_noprof+0x59/0x320 [ 43.288012][ T3975] ? __alloc_skb+0x10b/0x310 [ 43.292691][ T3975] __alloc_skb+0x10b/0x310 [ 43.297137][ T3975] netlink_alloc_large_skb+0xad/0xe0 [ 43.302482][ T3975] netlink_sendmsg+0x3b4/0x6e0 [ 43.307364][ T3975] ? __pfx_netlink_sendmsg+0x10/0x10 [ 43.312690][ T3975] __sock_sendmsg+0x140/0x180 [ 43.317421][ T3975] ____sys_sendmsg+0x312/0x410 [ 43.322267][ T3975] __sys_sendmsg+0x19d/0x230 [ 43.326960][ T3975] __x64_sys_sendmsg+0x46/0x50 [ 43.331737][ T3975] x64_sys_call+0x2734/0x2dc0 [ 43.336435][ T3975] do_syscall_64+0xc9/0x1c0 [ 43.340952][ T3975] ? clear_bhb_loop+0x55/0xb0 [ 43.345683][ T3975] ? clear_bhb_loop+0x55/0xb0 [ 43.350377][ T3975] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 43.356456][ T3975] RIP: 0033:0x7f915a9dfed9 [ 43.360879][ T3975] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 43.380574][ T3975] RSP: 002b:00007f9159057058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 43.389088][ T3975] RAX: ffffffffffffffda RBX: 00007f915aba5fa0 RCX: 00007f915a9dfed9 [ 43.397083][ T3975] RDX: 0000000004000054 RSI: 0000000020000480 RDI: 000000000000000b [ 43.405104][ T3975] RBP: 00007f91590570a0 R08: 0000000000000000 R09: 0000000000000000 [ 43.413086][ T3975] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 43.421184][ T3975] R13: 0000000000000000 R14: 00007f915aba5fa0 R15: 00007fff839c83a8 [ 43.429176][ T3975] [ 43.453907][ T3975] netlink: 4 bytes leftover after parsing attributes in process `syz.3.190'. [ 43.475197][ T3975] gretap1: left promiscuous mode [ 43.480415][ T3975] bridge0: port 3(gretap1) entered disabled state [ 43.520998][ T3975] bridge_slave_1: left allmulticast mode [ 43.526937][ T3975] bridge_slave_1: left promiscuous mode [ 43.532683][ T3975] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.542108][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.553108][ T3975] bridge_slave_0: left allmulticast mode [ 43.559002][ T3975] bridge_slave_0: left promiscuous mode [ 43.564759][ T3975] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.608102][ T3998] loop2: detected capacity change from 0 to 512 [ 43.632247][ T4005] xt_cluster: node mask cannot exceed total number of nodes [ 43.640670][ T3998] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2240: inode #15: comm syz.2.199: corrupted in-inode xattr: invalid ea_ino [ 43.663371][ T3998] EXT4-fs error (device loop2): ext4_orphan_get:1394: comm syz.2.199: couldn't read orphan inode 15 (err -117) [ 43.681038][ T4005] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 43.699032][ T3998] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.711897][ T4005] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 43.733589][ T4005] FAULT_INJECTION: forcing a failure. [ 43.733589][ T4005] name failslab, interval 1, probability 0, space 0, times 0 [ 43.746354][ T4005] CPU: 1 UID: 0 PID: 4005 Comm: Uˆ¢¸Ã‰OA\Y1 Not tainted 6.13.0-rc1-syzkaller-00316-gb5f217084ab3 #0 [ 43.757277][ T4005] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 43.767358][ T4005] Call Trace: [ 43.770712][ T4005] [ 43.773666][ T4005] dump_stack_lvl+0xf2/0x150 [ 43.778312][ T4005] dump_stack+0x15/0x1a [ 43.782509][ T4005] should_fail_ex+0x223/0x230 [ 43.787213][ T4005] should_failslab+0x8f/0xb0 [ 43.791932][ T4005] kmem_cache_alloc_noprof+0x52/0x320 [ 43.797356][ T4005] ? audit_log_start+0x34c/0x6b0 [ 43.802336][ T4005] audit_log_start+0x34c/0x6b0 [ 43.807148][ T4005] audit_seccomp+0x4b/0x130 [ 43.811679][ T4005] __seccomp_filter+0x6fa/0x1180 [ 43.816721][ T4005] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 43.822451][ T4005] ? vfs_write+0x596/0x920 [ 43.826965][ T4005] ? putname+0xcf/0xf0 [ 43.831102][ T4005] __secure_computing+0x9f/0x1c0 [ 43.836119][ T4005] syscall_trace_enter+0xd1/0x1f0 [ 43.841336][ T4005] ? fpregs_assert_state_consistent+0x83/0xa0 [ 43.847448][ T4005] do_syscall_64+0xaa/0x1c0 [ 43.851983][ T4005] ? clear_bhb_loop+0x55/0xb0 [ 43.856720][ T4005] ? clear_bhb_loop+0x55/0xb0 [ 43.861422][ T4005] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 43.867358][ T4005] RIP: 0033:0x7f97adf2fed9 [ 43.871798][ T4005] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 43.891506][ T4005] RSP: 002b:00007f97ac5a7058 EFLAGS: 00000246 ORIG_RAX: 00000000000001cb [ 43.899948][ T4005] RAX: ffffffffffffffda RBX: 00007f97ae0f5fa0 RCX: 00007f97adf2fed9 [ 43.907947][ T4005] RDX: 0000000020000300 RSI: 0000000020002540 RDI: 0000000000000067 [ 43.915943][ T4005] RBP: 00007f97ac5a70a0 R08: 0000000000000000 R09: 0000000000000000 [ 43.924018][ T4005] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 43.932053][ T4005] R13: 0000000000000000 R14: 00007f97ae0f5fa0 R15: 00007ffc30d0dba8 [ 43.940126][ T4005] [ 43.972503][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.985031][ T4011] loop3: detected capacity change from 0 to 8192 [ 44.044408][ T4011] loop3: p2 p3 p4 [ 44.048731][ T4011] loop3: p3 start 1048607 is beyond EOD, truncated [ 44.055277][ T4011] loop3: p4 size 65536 extends beyond EOD, truncated [ 44.282606][ T4021] Cannot find del_set index 0 as target [ 44.390078][ T4029] loop3: detected capacity change from 0 to 512 [ 44.435078][ T4029] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 44.479741][ T4029] EXT4-fs (loop3): 1 truncate cleaned up [ 44.497829][ T4029] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.529303][ T4040] loop4: detected capacity change from 0 to 512 [ 44.558204][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.607712][ T4040] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2240: inode #15: comm syz.4.212: corrupted in-inode xattr: invalid ea_ino [ 44.624479][ T4040] EXT4-fs error (device loop4): ext4_orphan_get:1394: comm syz.4.212: couldn't read orphan inode 15 (err -117) [ 44.643826][ T4040] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.713336][ T4056] loop0: detected capacity change from 0 to 512 [ 44.732723][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.776313][ T4056] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.986254][ T3298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.216328][ T3397] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0xfd [ 45.234488][ T4084] netlink: 28 bytes leftover after parsing attributes in process `syz.2.226'. [ 45.599761][ T4090] FAULT_INJECTION: forcing a failure. [ 45.599761][ T4090] name failslab, interval 1, probability 0, space 0, times 0 [ 45.612460][ T4090] CPU: 1 UID: 0 PID: 4090 Comm: syz.1.230 Not tainted 6.13.0-rc1-syzkaller-00316-gb5f217084ab3 #0 [ 45.623103][ T4090] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 45.633253][ T4090] Call Trace: [ 45.636559][ T4090] [ 45.639510][ T4090] dump_stack_lvl+0xf2/0x150 [ 45.644144][ T4090] dump_stack+0x15/0x1a [ 45.648350][ T4090] should_fail_ex+0x223/0x230 [ 45.653065][ T4090] should_failslab+0x8f/0xb0 [ 45.657786][ T4090] kmem_cache_alloc_noprof+0x52/0x320 [ 45.663183][ T4090] ? audit_log_start+0x34c/0x6b0 [ 45.668219][ T4090] audit_log_start+0x34c/0x6b0 [ 45.673132][ T4090] ? kmem_cache_free+0xdc/0x2d0 [ 45.678067][ T4090] audit_seccomp+0x4b/0x130 [ 45.682595][ T4090] __seccomp_filter+0x6fa/0x1180 [ 45.687572][ T4090] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 45.693294][ T4090] ? vfs_write+0x596/0x920 [ 45.697846][ T4090] __secure_computing+0x9f/0x1c0 [ 45.702810][ T4090] syscall_trace_enter+0xd1/0x1f0 [ 45.707870][ T4090] ? fpregs_assert_state_consistent+0x83/0xa0 [ 45.713963][ T4090] do_syscall_64+0xaa/0x1c0 [ 45.718483][ T4090] ? clear_bhb_loop+0x55/0xb0 [ 45.723178][ T4090] ? clear_bhb_loop+0x55/0xb0 [ 45.727991][ T4090] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 45.733910][ T4090] RIP: 0033:0x7f97adf2e8ec [ 45.738343][ T4090] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 45.758035][ T4090] RSP: 002b:00007f97ac5a7050 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 45.766593][ T4090] RAX: ffffffffffffffda RBX: 00007f97ae0f5fa0 RCX: 00007f97adf2e8ec [ 45.774579][ T4090] RDX: 000000000000000f RSI: 00007f97ac5a70b0 RDI: 0000000000000006 [ 45.782650][ T4090] RBP: 00007f97ac5a70a0 R08: 0000000000000000 R09: 0000000000000000 [ 45.790635][ T4090] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 45.798706][ T4090] R13: 0000000000000000 R14: 00007f97ae0f5fa0 R15: 00007ffc30d0dba8 [ 45.806725][ T4090] [ 45.816111][ T4096] loop3: detected capacity change from 0 to 512 [ 45.824522][ T4096] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.878985][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.040399][ T4114] loop4: detected capacity change from 0 to 1024 [ 46.060435][ T4114] EXT4-fs: Ignoring removed orlov option [ 46.083623][ T4118] loop0: detected capacity change from 0 to 1024 [ 46.089391][ T4114] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.096365][ T4119] SELinux: Context system_u:object_r:system_dbusd_var_run_t:s0 is not valid (left unmapped). [ 46.106216][ T4118] journal_path: not usable as path [ 46.118054][ T4118] EXT4-fs: error: could not find journal device path [ 46.348583][ T4139] loop3: detected capacity change from 0 to 1024 [ 46.364734][ T4139] journal_path: not usable as path [ 46.369947][ T4139] EXT4-fs: error: could not find journal device path [ 47.299060][ T29] kauditd_printk_skb: 625 callbacks suppressed [ 47.299079][ T29] audit: type=1326 audit(1733589336.250:9609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4154 comm="syz.1.252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97adf2fed9 code=0x7ffc0000 [ 47.430696][ T4152] loop2: detected capacity change from 0 to 1024 [ 47.456063][ T29] audit: type=1326 audit(1733589336.390:9610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4154 comm="syz.1.252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97adf2fed9 code=0x7ffc0000 [ 47.479601][ T29] audit: type=1326 audit(1733589336.390:9611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4154 comm="syz.1.252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f97adf2fed9 code=0x7ffc0000 [ 47.503089][ T29] audit: type=1326 audit(1733589336.390:9612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4154 comm="syz.1.252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97adf2fed9 code=0x7ffc0000 [ 47.526515][ T29] audit: type=1326 audit(1733589336.390:9613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4154 comm="syz.1.252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97adf2fed9 code=0x7ffc0000 [ 47.549844][ T29] audit: type=1326 audit(1733589336.390:9614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4154 comm="syz.1.252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f97adf2fed9 code=0x7ffc0000 [ 47.573265][ T29] audit: type=1326 audit(1733589336.390:9615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4154 comm="syz.1.252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97adf2fed9 code=0x7ffc0000 [ 47.596664][ T29] audit: type=1326 audit(1733589336.390:9616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4154 comm="syz.1.252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f97adf2fed9 code=0x7ffc0000 [ 47.609164][ T4155] netlink: 'syz.0.253': attribute type 153 has an invalid length. [ 47.620053][ T29] audit: type=1326 audit(1733589336.390:9617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4154 comm="syz.1.252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97adf2fed9 code=0x7ffc0000 [ 47.620087][ T29] audit: type=1326 audit(1733589336.390:9618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4154 comm="syz.1.252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f97adf2fed9 code=0x7ffc0000 [ 47.664331][ T4160] loop3: detected capacity change from 0 to 512 [ 47.693404][ T4152] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.731170][ T4160] EXT4-fs: Ignoring removed mblk_io_submit option [ 47.747495][ T4160] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b856c118, mo2=0002] [ 47.755619][ T4160] System zones: 1-12 [ 47.760477][ T4160] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2240: inode #15: comm syz.3.254: corrupted in-inode xattr: e_value size too large [ 47.767953][ T4163] bpf_get_probe_write_proto: 2 callbacks suppressed [ 47.767975][ T4163] syz.0.255[4163] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 47.775156][ T4160] EXT4-fs error (device loop3): ext4_orphan_get:1394: comm syz.3.254: couldn't read orphan inode 15 (err -117) [ 47.785327][ T4163] syz.0.255[4163] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 47.810308][ T4160] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.842284][ T4163] syz.0.255[4163] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 47.873090][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.909514][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.932484][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.995236][ T4170] loop3: detected capacity change from 0 to 1024 [ 48.012587][ T4170] journal_path: not usable as path [ 48.017921][ T4170] EXT4-fs: error: could not find journal device path [ 48.088643][ T4173] pimreg4: entered allmulticast mode [ 48.099555][ T4180] loop3: detected capacity change from 0 to 1024 [ 48.134901][ T4186] dccp_invalid_packet: P.Data Offset(100) too large [ 48.142913][ T4186] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 48.163931][ T4180] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.195672][ T4180] FAULT_INJECTION: forcing a failure. [ 48.195672][ T4180] name failslab, interval 1, probability 0, space 0, times 0 [ 48.208469][ T4180] CPU: 1 UID: 0 PID: 4180 Comm: syz.3.260 Not tainted 6.13.0-rc1-syzkaller-00316-gb5f217084ab3 #0 [ 48.219128][ T4180] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 48.229202][ T4180] Call Trace: [ 48.232497][ T4180] [ 48.235440][ T4180] dump_stack_lvl+0xf2/0x150 [ 48.240074][ T4180] dump_stack+0x15/0x1a [ 48.244335][ T4180] should_fail_ex+0x223/0x230 [ 48.249136][ T4180] should_failslab+0x8f/0xb0 [ 48.253826][ T4180] __kmalloc_noprof+0xab/0x3f0 [ 48.258724][ T4180] ? unix_bind+0x171/0x870 [ 48.263255][ T4180] unix_bind+0x171/0x870 [ 48.267666][ T4180] __sys_bind+0x10c/0x190 [ 48.272031][ T4180] __x64_sys_bind+0x41/0x50 [ 48.276579][ T4180] x64_sys_call+0x20ab/0x2dc0 [ 48.281316][ T4180] do_syscall_64+0xc9/0x1c0 [ 48.285829][ T4180] ? clear_bhb_loop+0x55/0xb0 [ 48.290584][ T4180] ? clear_bhb_loop+0x55/0xb0 [ 48.295365][ T4180] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 48.301376][ T4180] RIP: 0033:0x7f915a9dfed9 [ 48.305828][ T4180] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 48.325445][ T4180] RSP: 002b:00007f9159057058 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 48.333868][ T4180] RAX: ffffffffffffffda RBX: 00007f915aba5fa0 RCX: 00007f915a9dfed9 [ 48.341896][ T4180] RDX: 000000000000006e RSI: 00000000200001c0 RDI: 0000000000000007 [ 48.349873][ T4180] RBP: 00007f91590570a0 R08: 0000000000000000 R09: 0000000000000000 [ 48.357883][ T4180] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 48.365876][ T4180] R13: 0000000000000000 R14: 00007f915aba5fa0 R15: 00007fff839c83a8 [ 48.373863][ T4180] [ 48.378661][ T4171] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 48.387797][ T4171] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 48.418449][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.571351][ T4207] syz.1.270[4207] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 48.571418][ T4207] syz.1.270[4207] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 48.583096][ T4207] syz.1.270[4207] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 48.602792][ T4207] loop1: detected capacity change from 0 to 128 [ 48.605537][ T4209] netlink: 16 bytes leftover after parsing attributes in process `syz.2.271'. [ 48.643415][ T4207] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 48.651378][ T4207] FAT-fs (loop1): Filesystem has been set read-only [ 48.663144][ T4207] bio_check_eod: 3 callbacks suppressed [ 48.663160][ T4207] syz.1.270: attempt to access beyond end of device [ 48.663160][ T4207] loop1: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 48.683039][ T4207] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 48.691105][ T4207] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 48.700413][ T4207] syz.1.270: attempt to access beyond end of device [ 48.700413][ T4207] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 48.721196][ T4207] syz.1.270: attempt to access beyond end of device [ 48.721196][ T4207] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 48.735167][ T4207] syz.1.270: attempt to access beyond end of device [ 48.735167][ T4207] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 48.748874][ T4207] syz.1.270: attempt to access beyond end of device [ 48.748874][ T4207] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 48.762249][ T4207] syz.1.270: attempt to access beyond end of device [ 48.762249][ T4207] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 48.769361][ T4219] netlink: 20 bytes leftover after parsing attributes in process `syz.2.275'. [ 48.782321][ T4207] syz.1.270: attempt to access beyond end of device [ 48.782321][ T4207] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 48.807360][ T4219] vlan2: entered allmulticast mode [ 48.994998][ T4240] netlink: 8 bytes leftover after parsing attributes in process `syz.2.284'. [ 49.024159][ T4243] netlink: 16 bytes leftover after parsing attributes in process `syz.0.286'. [ 49.317524][ T4255] syz.4.291[4255] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 49.317601][ T4255] syz.4.291[4255] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 49.329029][ T4255] syz.4.291[4255] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 49.346102][ T4255] loop4: detected capacity change from 0 to 128 [ 49.369071][ T4255] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 49.377021][ T4255] FAT-fs (loop4): Filesystem has been set read-only [ 49.385685][ T4255] syz.4.291: attempt to access beyond end of device [ 49.385685][ T4255] loop4: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 49.403445][ T4255] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 49.411412][ T4255] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 49.420970][ T4255] syz.4.291: attempt to access beyond end of device [ 49.420970][ T4255] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 49.446618][ T4257] loop0: detected capacity change from 0 to 512 [ 49.453702][ T4255] syz.4.291: attempt to access beyond end of device [ 49.453702][ T4255] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 49.506585][ T4257] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.535302][ T4271] loop4: detected capacity change from 0 to 512 [ 49.551279][ T4267] loop1: detected capacity change from 0 to 1024 [ 49.558328][ T4267] EXT4-fs: Ignoring removed orlov option [ 49.579692][ T4267] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.593181][ T3298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.610908][ T4271] EXT4-fs (loop4): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 49.657183][ T3299] EXT4-fs (loop4): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 49.757466][ T4284] loop0: detected capacity change from 0 to 512 [ 49.788059][ T4293] FAULT_INJECTION: forcing a failure. [ 49.788059][ T4293] name failslab, interval 1, probability 0, space 0, times 0 [ 49.800811][ T4293] CPU: 1 UID: 0 PID: 4293 Comm: syz.4.306 Not tainted 6.13.0-rc1-syzkaller-00316-gb5f217084ab3 #0 [ 49.811503][ T4293] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 49.821672][ T4293] Call Trace: [ 49.824958][ T4293] [ 49.827955][ T4293] dump_stack_lvl+0xf2/0x150 [ 49.832579][ T4293] dump_stack+0x15/0x1a [ 49.836770][ T4293] should_fail_ex+0x223/0x230 [ 49.841460][ T4293] should_failslab+0x8f/0xb0 [ 49.846145][ T4293] kmem_cache_alloc_node_noprof+0x59/0x320 [ 49.851963][ T4293] ? __alloc_skb+0x10b/0x310 [ 49.856577][ T4293] __alloc_skb+0x10b/0x310 [ 49.861019][ T4293] netlink_alloc_large_skb+0xad/0xe0 [ 49.866318][ T4293] netlink_sendmsg+0x3b4/0x6e0 [ 49.871118][ T4293] ? __pfx_netlink_sendmsg+0x10/0x10 [ 49.876465][ T4293] __sock_sendmsg+0x140/0x180 [ 49.881311][ T4293] ____sys_sendmsg+0x312/0x410 [ 49.886093][ T4293] __sys_sendmsg+0x19d/0x230 [ 49.890752][ T4293] __x64_sys_sendmsg+0x46/0x50 [ 49.895569][ T4293] x64_sys_call+0x2734/0x2dc0 [ 49.900298][ T4293] do_syscall_64+0xc9/0x1c0 [ 49.904808][ T4293] ? clear_bhb_loop+0x55/0xb0 [ 49.909495][ T4293] ? clear_bhb_loop+0x55/0xb0 [ 49.914179][ T4293] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 49.920210][ T4293] RIP: 0033:0x7f7f1e6bfed9 [ 49.924631][ T4293] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 49.944352][ T4293] RSP: 002b:00007f7f1cd37058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 49.952799][ T4293] RAX: ffffffffffffffda RBX: 00007f7f1e885fa0 RCX: 00007f7f1e6bfed9 [ 49.960865][ T4293] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000005 [ 49.968844][ T4293] RBP: 00007f7f1cd370a0 R08: 0000000000000000 R09: 0000000000000000 [ 49.976826][ T4293] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 49.984810][ T4293] R13: 0000000000000000 R14: 00007f7f1e885fa0 R15: 00007ffffac982e8 [ 49.992819][ T4293] [ 50.110772][ T4304] loop4: detected capacity change from 0 to 1024 [ 50.121459][ T4304] EXT4-fs: Ignoring removed orlov option [ 50.125603][ T4311] loop0: detected capacity change from 0 to 1024 [ 50.129691][ T4304] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.148538][ T4311] journal_path: not usable as path [ 50.153880][ T4311] EXT4-fs: error: could not find journal device path [ 50.244654][ T4329] netlink: 80 bytes leftover after parsing attributes in process `syz.0.320'. [ 50.297729][ T4334] FAULT_INJECTION: forcing a failure. [ 50.297729][ T4334] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 50.310857][ T4334] CPU: 0 UID: 0 PID: 4334 Comm: syz.2.319 Not tainted 6.13.0-rc1-syzkaller-00316-gb5f217084ab3 #0 [ 50.321576][ T4334] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 50.331711][ T4334] Call Trace: [ 50.335018][ T4334] [ 50.337968][ T4334] dump_stack_lvl+0xf2/0x150 [ 50.342711][ T4334] dump_stack+0x15/0x1a [ 50.346924][ T4334] should_fail_ex+0x223/0x230 [ 50.351734][ T4334] should_fail+0xb/0x10 [ 50.355919][ T4334] should_fail_usercopy+0x1a/0x20 [ 50.361057][ T4334] _copy_to_user+0x20/0xa0 [ 50.365573][ T4334] simple_read_from_buffer+0xa0/0x110 [ 50.370988][ T4334] proc_fail_nth_read+0xf9/0x140 [ 50.375966][ T4334] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 50.381571][ T4334] vfs_read+0x1a2/0x700 [ 50.385762][ T4334] ? __rcu_read_unlock+0x4e/0x70 [ 50.390736][ T4334] ? __fget_files+0x17c/0x1c0 [ 50.395539][ T4334] ksys_read+0xe8/0x1b0 [ 50.399850][ T4334] __x64_sys_read+0x42/0x50 [ 50.404477][ T4334] x64_sys_call+0x2874/0x2dc0 [ 50.409222][ T4334] do_syscall_64+0xc9/0x1c0 [ 50.413765][ T4334] ? clear_bhb_loop+0x55/0xb0 [ 50.418475][ T4334] ? clear_bhb_loop+0x55/0xb0 [ 50.423301][ T4334] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.429252][ T4334] RIP: 0033:0x7f3651d1e8ec [ 50.433885][ T4334] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 50.453532][ T4334] RSP: 002b:00007f3650376050 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 50.462043][ T4334] RAX: ffffffffffffffda RBX: 00007f3651ee6080 RCX: 00007f3651d1e8ec [ 50.470113][ T4334] RDX: 000000000000000f RSI: 00007f36503760b0 RDI: 0000000000000007 [ 50.478144][ T4334] RBP: 00007f36503760a0 R08: 0000000000000000 R09: 0000000000000000 [ 50.486147][ T4334] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 50.494158][ T4334] R13: 0000000000000001 R14: 00007f3651ee6080 R15: 00007ffd2c2981e8 [ 50.502163][ T4334] [ 50.551066][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.589272][ T4340] loop1: detected capacity change from 0 to 4096 [ 50.600603][ T4340] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.651332][ T4345] loop2: detected capacity change from 0 to 1024 [ 50.658134][ T4345] journal_path: not usable as path [ 50.663322][ T4345] EXT4-fs: error: could not find journal device path [ 50.698800][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.818627][ T4304] ================================================================== [ 50.826764][ T4304] BUG: KCSAN: data-race in generic_buffers_fsync_noflush / inode_cgwb_move_to_attached [ 50.836446][ T4304] [ 50.838793][ T4304] write to 0xffff888106223c38 of 4 bytes by task 4323 on cpu 0: [ 50.846453][ T4304] inode_cgwb_move_to_attached+0x9a/0x300 [ 50.852214][ T4304] writeback_single_inode+0x2b5/0x3f0 [ 50.857611][ T4304] sync_inode_metadata+0x5c/0x90 [ 50.862660][ T4304] generic_buffers_fsync_noflush+0xd8/0x120 [ 50.868592][ T4304] ext4_sync_file+0x1ff/0x6c0 [ 50.873330][ T4304] vfs_fsync_range+0x116/0x130 [ 50.878139][ T4304] ext4_buffered_write_iter+0x326/0x370 [ 50.883722][ T4304] ext4_file_write_iter+0x383/0xf20 [ 50.888964][ T4304] iter_file_splice_write+0x5f1/0x980 [ 50.894376][ T4304] direct_splice_actor+0x160/0x2c0 [ 50.899524][ T4304] splice_direct_to_actor+0x302/0x670 [ 50.904942][ T4304] do_splice_direct+0xd7/0x150 [ 50.909755][ T4304] do_sendfile+0x398/0x660 [ 50.914208][ T4304] __x64_sys_sendfile64+0x110/0x150 [ 50.919436][ T4304] x64_sys_call+0xfbd/0x2dc0 [ 50.924057][ T4304] do_syscall_64+0xc9/0x1c0 [ 50.928592][ T4304] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.934555][ T4304] [ 50.937084][ T4304] read to 0xffff888106223c38 of 4 bytes by task 4304 on cpu 1: [ 50.944694][ T4304] generic_buffers_fsync_noflush+0x83/0x120 [ 50.950715][ T4304] ext4_sync_file+0x1ff/0x6c0 [ 50.955444][ T4304] vfs_fsync_range+0x116/0x130 [ 50.960258][ T4304] ext4_buffered_write_iter+0x326/0x370 [ 50.965846][ T4304] ext4_file_write_iter+0x383/0xf20 [ 50.971090][ T4304] iter_file_splice_write+0x5f1/0x980 [ 50.976522][ T4304] direct_splice_actor+0x160/0x2c0 [ 50.981686][ T4304] splice_direct_to_actor+0x302/0x670 [ 50.987105][ T4304] do_splice_direct+0xd7/0x150 [ 50.991909][ T4304] do_sendfile+0x398/0x660 [ 50.996342][ T4304] __x64_sys_sendfile64+0x110/0x150 [ 51.001561][ T4304] x64_sys_call+0xfbd/0x2dc0 [ 51.006191][ T4304] do_syscall_64+0xc9/0x1c0 [ 51.010722][ T4304] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.016747][ T4304] [ 51.019088][ T4304] value changed: 0x00000002 -> 0x00000020 [ 51.024824][ T4304] [ 51.027250][ T4304] Reported by Kernel Concurrency Sanitizer on: [ 51.033410][ T4304] CPU: 1 UID: 0 PID: 4304 Comm: syz.4.311 Not tainted 6.13.0-rc1-syzkaller-00316-gb5f217084ab3 #0 [ 51.044019][ T4304] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 51.054109][ T4304] ================================================================== [ 51.187536][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.516857][ T29] kauditd_printk_skb: 637 callbacks suppressed [ 58.516873][ T29] audit: type=1400 audit(1733589347.468:10256): avc: denied { egress } for pid=3288 comm="syz-executor" saddr=fe80::1c daddr=ff02::2 netif=gretap0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 58.547061][ T29] audit: type=1400 audit(1733589347.468:10257): avc: denied { sendto } for pid=3288 comm="syz-executor" saddr=fe80::1c daddr=ff02::2 netif=gretap0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1