last executing test programs: 41.059416379s ago: executing program 2 (id=881): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000180)=0x8, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r2, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000031c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) sendmsg$inet(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703410000004000000000000000040014000d000a00100000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fc", 0x51}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) 39.755084995s ago: executing program 2 (id=902): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000002500008500000082"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x1f, &(0x7f00000000c0)={&(0x7f0000000400)=@newlink={0x34, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x600}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}]}, 0x34}, 0x1, 0x2}, 0x0) 39.726639985s ago: executing program 2 (id=904): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x1, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, 0x0) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCMIWAIT(r4, 0x545c, 0x0) ioctl$TIOCVHANGUP(r4, 0x5437, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) tkill(0x0, 0x7) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) io_uring_setup(0x87, 0x0) 38.813087164s ago: executing program 2 (id=918): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000000c0)='kfree\x00', r0}, 0x18) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r1 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000300)={[{@usrquota}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@jqfmt_vfsold}, {@minixdf}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000140)={0x0, 0x0}, &(0x7f0000000d80)=0xc) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$getregset(0x4204, r3, 0x202, &(0x7f0000000100)={0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000dc0)={{{@in, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@remote}}, &(0x7f0000000ec0)=0xe8) getgroups(0x9, &(0x7f0000000f00)=[0x0, 0xffffffffffffffff, 0xee01, 0xee01, 0xffffffffffffffff, 0xee00, 0xee01, 0xee01, 0xee01]) r6 = syz_clone(0x200, &(0x7f0000000f40)="7fea00f9636fd87279e28b8cc42cba355c17bce9d29932650b853fac2e1f1b46d4f3b5e4254e37156d6ff36766f4875ca7d6541da3d70a57967c623e5dd6d841ca10aa2aa235fa0812ebeea5abab1d295920d27f9bc647dc216bdf3a5230ec68749053f70bb65f754720ac9bb9876e3f466211cf6c90a1c9f7fbdc03bed937cba3", 0x81, &(0x7f0000001000), &(0x7f0000001040), &(0x7f0000001080)="7ecef3a83c7a886eda40a741affa7370e864479777c67ac31fa9a731f851e574c714d799132d4658a2f2b176f7fd483bd0773a8b3b957688f9abcee468e11bf66450f731eaa2d7c820b45f952032001b5fb013e50b1ecd0c6d4f75f8f25950beb4f72e9f22c8492daaed93fbdd36af7c6f") getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000001100)={{{@in6=@empty, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@private}}, &(0x7f0000001200)=0xe8) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x1, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=r10, @ANYBLOB="0000000000f0924e675eef9ee0000100766574680000000018000280140001000000000013a7ad8b1bb86a03698fce225de98d", @ANYRES32=r10, @ANYBLOB="0000000043030000"], 0x48}}, 0x0) r11 = shmget$private(0x0, 0x4000, 0x1000, &(0x7f0000ffb000/0x4000)=nil) shmctl$SHM_LOCK(r11, 0xb) shmat(r11, &(0x7f000067b000/0x400000)=nil, 0x0) stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000500)={0x0, 0x0, 0x0}, &(0x7f0000000540)=0xc) r14 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r14, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f00000000c0)=0xc) sendmsg$nl_generic(r14, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000100)={0x28, 0x18, 0x1, 0x0, 0x0, {0x2}, [@typed={0x8, 0x800, 0x0, 0x0, @ipv4=@multicast2}, @nested={0xc, 0x8, 0x0, 0x1, [@typed={0x8, 0xc, 0x0, 0x0, @uid=r15}]}]}, 0x28}}, 0x0) ioctl$sock_SIOCGPGRP(r8, 0x8904, &(0x7f0000000580)=0x0) shmctl$IPC_SET(r11, 0x1, &(0x7f0000000640)={{0x2, r12, r13, r15, 0x0, 0x49, 0x6}, 0x81, 0x5, 0x8001, 0x1, r16, 0x0, 0x9}) sendmsg$unix(0xffffffffffffffff, &(0x7f00000012c0)={&(0x7f0000000380)=@file={0x0, './file1\x00'}, 0x6e, &(0x7f00000008c0)=[{&(0x7f0000000400)="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", 0xfb}, {&(0x7f0000000500)="0d139755868c49fff9bad2b5cfc73956ce065ccbf59baed3ae294a326242b93775f0f75d25f084e0e3bd05c4571beff82ea14a75302ad20849079f4144353c1a03c227cef629c891e188d7017096f9904549e3c52680407011d64547c784db31afd8e6f3892f178cf5607f570361b64091d02fa50dff60714d33a4ca7776e9cfb4aa4d0e570f740a9af7b3b0325bbe370ea524908fb371bfe85800b887bcd0a90139f3a2ffc239bbe744c79430c623fcc4177cd69d1f7517f57025fdbab4", 0xbe}, {&(0x7f00000005c0)="a745c8323acc1ce7cd54fdb125a06547e965697f9186e9a51fd0a8b15fcea4bac3ff7c85cfde27438a50a176df5ada9beac44f2bf1c719fd5fb8e6642a46a4d1e86a403296c846800eab734ec59c214af2b59b90c124d1af4c73672eb084205e610cf0ebecd4421d44e2832e314840fad92e95b496fd65c7bda238fe6cc83c0645a9241e938db08137a9f5dd5f2c0a93ee33f0cc3426123b7e7dd3ad79df098cfc44f5092c645988ab709da556cfff2c3669450118a4281cb3279bafc8ac12e2a003b144dcc470a1b32797b46bfba997eb97cf492ada46455632d8a22dca3e4e96fa624935b9ce52a4", 0xe9}, {&(0x7f00000006c0)="663dd90c72cb7dba614cd9a8a4103dff342d21cdd58090bfbded8a1833942a529be90bd1025e49fe6ec4c952af06ab3c3057dd58d6777879661101ae62c38b6eeed853102d978d403517d0587fde99d78cb47642", 0x54}, {&(0x7f0000000740)="cec7f04c127b1de9e42892589904b59275a8f424da73e43fc07fafd06110b2b81f62c69961f9e07b25c762169acd1ba0497c409571ace5a7608ba0bd11d2073db9538e8b9894aba73a5c9871413444d665f6c56ebc5d1f7e21111d3a1d2a44b97c16331fcd0e344d9be7cfae0fe8c73a91b7001282d2ddd3df5f8d45f023948e3686f987e622777fb79ec0dab32d1634db16e40d7740f56bccf185fe6cbeba8df812bbbbce1c58a26e9bbe0f88325c20e389a5cba597ec8aef2f97ecb2f26555add2ee423a27fc149eb675bff2fc7a8d90202f3abdbdfe0ca03b6b9db61e10b55873785fc005603906fa6866827c6606", 0xf0}, {&(0x7f0000000000)="fa59af1b4a483e98da8c03d0965079f0ff141f130f60fb89788dbe6f000f43dee5bc3879d89e", 0x26}, {&(0x7f0000000840)="00decde7cc42c4dcf22e71956561e5f7bac7793249a64c6cb932a292dbf36c1dda9a49a06f27a4841fc14e5b87ba653ca7d622322f806c8ceb517b0fd18101695aab74776c2e3d457d68d16e43bd33672cd3c6d47aa1e7e26c417563fe20082d0f1bd8b32765fa1e5765550b04289f881e1eb9482534ebc045885a75", 0x7c}], 0x7, &(0x7f0000001240)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=r2, @ANYRES32=0xee01, @ANYBLOB="000000001c00000000000000010000000218e500", @ANYRES32=r3, @ANYRES32=r4, @ANYRES32=r5, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r1, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r6, @ANYRES32=r7, @ANYRES32=r13, @ANYBLOB='\x00\x00\x00\x00'], 0x78, 0x81}, 0x20000040) bpf$PROG_LOAD(0x5, 0x0, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000001300)=ANY=[], 0xfe37, 0x0) unlink(&(0x7f0000000180)='./file1\x00') 38.674204216s ago: executing program 2 (id=921): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d", @ANYRES32=r0], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0x2}, 0x18) munlockall() 37.626818838s ago: executing program 2 (id=930): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x2, @perf_bp={0x0, 0xa}, 0x1000, 0x5dd8, 0x0, 0x5, 0x0, 0x8, 0xfffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) readv(r1, &(0x7f0000000000)=[{&(0x7f00000028c0)=""/4098, 0x1002}], 0x1) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18090000002300810000000000000000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) poll(&(0x7f0000000040)=[{r3, 0x100}], 0x1, 0x2) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000700000e0000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000002600000000c0a01080000000000000000010000000900020073797a32000000003400038030000080080003400000000224000b80200001800e000100636f6e6e6c696d69740000000c00028008000140000000000900010073797a30"], 0xe4}}, 0x0) 37.369567812s ago: executing program 32 (id=930): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x2, @perf_bp={0x0, 0xa}, 0x1000, 0x5dd8, 0x0, 0x5, 0x0, 0x8, 0xfffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) readv(r1, &(0x7f0000000000)=[{&(0x7f00000028c0)=""/4098, 0x1002}], 0x1) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18090000002300810000000000000000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) poll(&(0x7f0000000040)=[{r3, 0x100}], 0x1, 0x2) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000700000e0000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000002600000000c0a01080000000000000000010000000900020073797a32000000003400038030000080080003400000000224000b80200001800e000100636f6e6e6c696d69740000000c00028008000140000000000900010073797a30"], 0xe4}}, 0x0) 31.389968822s ago: executing program 4 (id=1040): ioperm(0x0, 0x5, 0x4000000000000020) modify_ldt$write(0x1, 0x0, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$selinux_attr(r0, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) r1 = creat(&(0x7f0000000000)='./file0\x00', 0xecf86c37d53049cc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x2, 0x4, 0x0, 0x1, 0xb8, 0x10}, @exit], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) close(r1) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000180)='blkio.bfq.dequeue\x00', 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) socket$key(0xf, 0x3, 0x2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r1, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000240)=r2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@map_val={0x18, 0x4, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x7}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r6}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r7 = socket$inet_sctp(0x2, 0x5, 0x84) close(r7) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) sendmsg$inet_sctp(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000640)="be", 0x1}], 0x1, &(0x7f00000000c0)=[@sndinfo={0x20, 0x84, 0x2, {0x6, 0x4, 0x28, 0x200000b, r8}}], 0x20, 0x6044}, 0x6) 31.336132143s ago: executing program 4 (id=1041): socket$inet_udp(0x2, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000340)=@generic={&(0x7f00000001c0)='./file0\x00', r2}, 0x18) 31.313898973s ago: executing program 4 (id=1043): r0 = memfd_create(&(0x7f0000000bc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc0r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000001000)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r2, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), r2) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_HARDIF(r6, &(0x7f0000000ec0)={&(0x7f0000000e00), 0xc, &(0x7f0000000e80)={&(0x7f0000000f80)=ANY=[@ANYRESOCT=r1, @ANYRES16=0x0, @ANYBLOB="040026bd7000fbdbdf251000000005002e000000000005002d00000000000800320000020000"], 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000850) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={0x1, 0x58, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000000400)={'ip6tnl0\x00', &(0x7f0000000380)={'ip6gre0\x00', 0x0, 0x4, 0x4, 0x80, 0x8, 0x10, @private1, @mcast1, 0x80, 0x7, 0x1}}) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, &(0x7f00000004c0)=0x0, &(0x7f0000000500)=0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'vxcan0\x00'}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000001c0)={'sit0\x00', &(0x7f0000000580)={'syztnl2\x00', 0x0, 0x4dee3736ee695ee5, 0x700, 0xfffffffe, 0x6, {{0x7, 0x4, 0x2, 0x8, 0x1c, 0x67, 0x0, 0x7, 0x4, 0x0, @remote, @empty, {[@timestamp={0x44, 0x8, 0xb8, 0x0, 0x8, [0x30]}]}}}}}) r13 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r13, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x40, 0x24, 0xd0f, 0x0, 0x25dfdbfb, {0x60, 0x0, 0x0, r16, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x14}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x3, 0xb, 0x2}}}}]}, 0x40}}, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r7, &(0x7f0000000dc0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x9020000}, 0xc, &(0x7f0000000d80)={&(0x7f0000001500)=ANY=[@ANYBLOB="14010000", @ANYRES16=r8, @ANYRES16=r14, @ANYRES32=r10, @ANYBLOB="0800030001000000080003000eb3da750800010063856eba4c93a410fa4091ae6a67be4bb5de6801eb898781824295c76dc5ebbdcbd27ade0733274fd75a79e97e7b6aa91358cef1501982e90cd590ca5a6bcea4bcea54e47afc19b0e028026b246ab7bf4444e607aa380b812cf80b073d57bbef2c273523d1d8571f36373ea59a26583f4ac9e27641d2bb498c789b27a17dd2c03ca34c3a477a9cc56b548e", @ANYRES32=r11, @ANYBLOB="500001801400020067656e6576653100004000000000000008000100c4b9eea14bc615be91024906b990ba361b96a7b6984b6dd928d65fe01f2246d79be7368d63124753b5a356f75f65876d75cb7d2bceab304d74f0d5c648112bf0da58f175d21e09f3037192d338704a869e4433fa75088794ce4c7625217537995bf0823baf65e9994d44ed01a82b6b50f761175c65900f8caed193819f80dbc329d531ceb8f4a9e760816e91032acc112b547e88c29166ac93d58467fd7eb509c11026faebb9143084fb93f2f20db5fc53d556b014cf8d6116a6539f", @ANYRES32=r12, @ANYRESHEX=r9, @ANYRES32=0x0, @ANYRES64=r4, @ANYRESHEX=r7, @ANYBLOB="3400018014000200726f736530000000000000000000000008000300030000001400020065727370616e30000000000000000000200001801400020076657468315f746f5f626f6e6400000008000100", @ANYRES32=r16, @ANYBLOB], 0x114}, 0x1, 0x0, 0x0, 0x80}, 0x1) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x5, 0x0, 0xfb, 0x82, 0x0, 0xa0001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000c00)}, 0x0, 0x1, 0x0, 0x0, 0x400000000, 0x1fffffff, 0x0, 0x0, 0x40, 0x0, 0x8}, 0x0, 0x2, 0xffffffffffffffff, 0x1) 30.732081345s ago: executing program 4 (id=1057): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kfree\x00', r3, 0x0, 0xfffffffffffffffd}, 0x18) openat$misdntimer(0xffffffffffffff9c, 0x0, 0x1, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000190b985a00000000ff000000850000006d00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r5}, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="48000000005794c48f597f7b00c94d0e08010200000000000000050000000a04000480c0ef200c1095e1ac0c00048008000140000000040600024089140000050003003a00000009"], 0x48}, 0x1, 0x0, 0x0, 0x20000010}, 0x40c0) r7 = socket$netlink(0x10, 0x3, 0xb) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2fffffffd}, 0xc) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x10, &(0x7f0000000600)=ANY=[@ANYBLOB="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", @ANYRES32=r8, @ANYBLOB="0000000000000000b70400000800000085000000950000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2e, 0x4100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x6000, 0x0, 0x100}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r9, 0xfffff000, 0xe, 0x0, &(0x7f0000000300)="882f1242a03c3f98722780b605a7", 0x0, 0x990d, 0x7000000, 0x0, 0x0, 0x0, 0x0}, 0x50) close(r7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) r10 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r10, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) recvmmsg$unix(r10, &(0x7f0000004400)=[{{0x0, 0x0, &(0x7f0000001480)=[{&(0x7f0000000300)=""/41, 0x29}], 0x1}}], 0x1, 0x0, 0x0) sendmmsg(r10, &(0x7f0000002800)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="ea", 0x1}], 0x1}}], 0x2, 0x9200000000000000) 30.116834888s ago: executing program 4 (id=1072): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) munlockall() 30.049861489s ago: executing program 33 (id=1072): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) munlockall() 2.114008887s ago: executing program 3 (id=1755): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000003c0)='./file0\x00', 0x201000c, &(0x7f00000001c0), 0xff, 0x535, &(0x7f0000002800)="$eJzs3d9rZFcdAPDvnWSyyW62SdUHLbRWW8kW3ZmksW3woVYQfSqI9X2NySSETDIhM2k3oWj2LxBEVPBJX3wR/AMEWfDFRxEK+qxQUUS3CvqgvTIzd5I4uZPM1tlMdvL5wN17zrk/vufM5py5d+ZwJ4Ar69mIeC0i3k/T9IWImMnKC9kSh+2lud97D95eaS5JpOkbf00iyco650qy9Y3ssMmI+OqXI76RnI5b3z/YXK5WK7tZvtzY2inX9w9ub2wtr1fWK9uLiwsvL72y9NLS/EDaeTMiXv3iH7/37Z986dVffOatP9z5861vNqs1nW0/2Y6HNH7WxnbTi9cmuw7Y/YDBLqNme4qdzFR/x9x7hPUBAKC35jX+hyLikxHxQszE2NmXswAAAMBjKP38dPw7iUjzTfQoBwAAAB4jhdYc2KRQyuYCTEehUCq15/B+JK4XqrV649Nrtb3t1fZc2dkoFtY2qpX5bK7wbBSTZn6hlT7Ov9iVX4yIJyPiuzNTrXxppVZdHfaHHwAAAHBF3Oi6///HTPv+HwAAABgxs8OuAAAAAPDIuf8HAACA0ef+HwAAAEbaV15/vbmknd+/Xn1zf2+z9ubt1Up9s7S1t1Jaqe3ulNZrtfXWM/u2zjtftVbb+Wxs790tNyr1Rrm+f3Bnq7a33bizEZMX0iAAAADglCc/fv93SUQcfm6qtTRNDLtSwIUYP0ol2Tqn9//+ifb63QuqFHAhxvrY591r+eWuE+DxNt5d0KOvA6OnOOwKAEOXnLO95+SdX2frTwy2PgAAwODNfSz/+//CuUcenr8LcKnpxHB1dX3/n84MqyLAhWt9/9/vRB4XCzBSin3NAARG2f/9/f+50vShKgQAAAzcdGtJCqXs473pKBRKpYibrZ8FKCZrG9XKfEQ8ERG/nSlea+YXWkcm594zAAAAAAAAAAAAAAAAAAAAAAAAAABtaZpECgAAAIy0iMKfkl+2n+U/N/P8dPfnAxPJv1o/CTwREW/98I3v311uNHYXmuV/Oypv/CArf3EYn2AAAAAA3Tr36a31P4ddGwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABGzXsP3l7pLH3sPjWouH/5QkTM5sUfj8nWejKKEXH970mMnzguiYixAcQ/vBcRH82LnzSrdRQyL/4gXoRz4sds9irkxb8xgPhwld1vjj+v5fW/QjzbWuf3v/GI/8l/UL3Hvzga/8Z69P+bfcZ46p2flXvGvxfx1Hj++NOJn/SI/1yf8b/+tYODXtvSH0XMdd5/WiPeyQjHqXJja6dc3z+4vbG1vF5Zr2wvLi68vPTK0ktL8+W1jWol+zc3xnee/vn7Z7X/eu77X3v87bzH5LX/+Zzz5b0n/eeduw8+3Mkcno5/67mc+L/6cbbH6de/kMX5VJZubp/rpA/b6ZOe+elvnjmr/avH7S8+zP//rV4n7Xaqozzd758OAPAI1PcPNper1cruyCaad+mXoBoSlzDxrYGeME3TtNmncjbdj4h+zpNE7qapPg8/nSjk1+c40XMEGPbIBAAADNrxRf+wawIAAAAAAAAAAAAAAAAAAABX10U8Za075vEjkJNBPEIbAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAg/hsAAP//eInSOg==") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r1, 0x25, &(0x7f0000000000)={0x1}) r2 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000001440), 0x0, 0x0) ioctl$IMADDTIMER(r2, 0x80044940, &(0x7f0000000080)=0x14) r3 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000001440)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kfree\x00', r4, 0x0, 0x40000}, 0x18) msgget$private(0x0, 0x123) preadv(0xffffffffffffffff, 0x0, 0x0, 0xf0, 0xd3f) close(r2) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r5, 0x26, &(0x7f0000000380)={0x1}) r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r6, &(0x7f00000000c0)={&(0x7f0000000000)={0x24, @short={0x2, 0xffff, 0xffff}}, 0x14, &(0x7f0000000080)={0x0}}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r7, 0x26, &(0x7f0000000040)={0x1, 0x0, 0x10, 0x3}) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r8, 0x7, &(0x7f0000000180)={0x1, 0x0, 0x12, 0x10}) 1.774314154s ago: executing program 3 (id=1763): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 846.115743ms ago: executing program 6 (id=1801): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x18) prlimit64(0x0, 0x6, &(0x7f0000000140), 0x0) setreuid(0xee01, 0xffffffffffffffff) setreuid(0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) move_pages(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0) r2 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) unshare(0x6060600) fcntl$setlease(r2, 0x400, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$setlease(r2, 0x400, 0x2) 781.040764ms ago: executing program 6 (id=1803): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x18) syz_emit_ethernet(0x66, &(0x7f0000000280)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd606410a60030000000000000000000000000ffff00000000fe80000000000000000000"], 0x0) 734.795515ms ago: executing program 3 (id=1804): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRESDEC=r0, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x37bfe41691abd1b, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x4, 0x0, 0x7fff0006}]}) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000000), 0x8) close_range(r3, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000500)=ANY=[@ANYRESOCT=r2, @ANYRES64=r4, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r6, &(0x7f0000000080), &(0x7f0000000300)=""/180}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000580), r0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000640)={'gre0\x00', &(0x7f00000005c0)={'syztnl1\x00', 0x0, 0x7, 0x80, 0x1, 0x3, {{0xb, 0x4, 0x2, 0xc, 0x2c, 0x66, 0x0, 0x6, 0x29, 0x0, @multicast2, @broadcast, {[@generic={0x86, 0x6, "888ff2d8"}, @end, @cipso={0x86, 0xd, 0x0, [{0x5, 0x7, "ed8668e907"}]}, @end]}}}}}) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f0000000780)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000740)={&(0x7f0000000680)={0x8c, r8, 0x800, 0x70bd2a, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x1}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x13}}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r9}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x9}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x1c}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x18}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4004}, 0x40d0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r5, 0xc0189373, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) socket$inet(0x2, 0x800, 0x0) ioctl$NS_GET_PARENT(r10, 0xb702, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r0}, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='block_bio_remap\x00', r7}, 0x10) r11 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', &(0x7f0000000200)={0x0, 0xa, 0xfed5bd6bdc950643}, 0x18) renameat2(r11, &(0x7f0000000280)='./file0\x00', r10, &(0x7f00000003c0)='./file0\x00', 0x6) 448.189241ms ago: executing program 5 (id=1809): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xb, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="b4000000000000006e0a00000000000073012200000000009500000000000000ebfbad3f0c4953260cdf35fd70ed47332920667acb285d1367e2a83bfd3b4e34f0cd5eb07ddb8f7707735bdbf16918aa55a241e6cdd111c189067667fe76ceee4928f2c0700e7192f162376ffa83c3342623f2d78735a656ad"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xfffffffffffffff1, 0x10, &(0x7f0000000000)={0x0, 0xf}, 0x7, 0x0, 0xffffffffffffffff, 0x300, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[], 0x39) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x2, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) socket(0x10, 0x3, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x0, 0x8, 0x40, 0x204, 0x300}}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) creat(&(0x7f00000001c0)='./file1\x00', 0x2) acct(&(0x7f0000000080)='./file1\x00') 422.322311ms ago: executing program 0 (id=1810): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0xfffe, @none, 0x0, 0x1}, 0xe) r2 = dup(r1) bind$bt_l2cap(r2, &(0x7f0000000300)={0x1f, 0x0, @any, 0x1da8}, 0xe) sendmsg$inet(r0, &(0x7f0000000a00)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0}, 0x8f0) signalfd(0xffffffffffffffff, &(0x7f0000000040)={[0x5]}, 0x8) ioperm(0x1, 0x3, 0x800000003fb) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x41, 0x0) writev(r3, &(0x7f0000000380)=[{&(0x7f0000000e40)="c15bba0b98", 0x5}, {0x0}], 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r4, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r4, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r4, 0x84, 0x17, &(0x7f0000000440)=ANY=[], 0x9) 376.712702ms ago: executing program 3 (id=1811): socket$inet_udp(0x2, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000340)=@generic={0x0, r2}, 0x18) 349.783073ms ago: executing program 3 (id=1812): openat$bsg(0xffffffffffffff9c, &(0x7f0000000580), 0x450002, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000180)={0x0, @loopback, @multicast2}, &(0x7f0000000200)=0xc) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', r1, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r2}, 0x20) creat(&(0x7f00000002c0)='./file0\x00', 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r5}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000100)='kmem_cache_free\x00', r6}, 0x18) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) 349.240553ms ago: executing program 5 (id=1813): bpf$MAP_CREATE(0x0, 0x0, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x4) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0) chroot(0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f0000000380)=0xffffffff00000041, 0x8) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000580)='attr/exec\x00') mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000880)=ANY=[@ANYBLOB='trans=fd,rfdno', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) writev(r2, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x1) 281.678604ms ago: executing program 0 (id=1814): setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x2, 0x32, 0xfffffffc}, 0x9c) sendto$inet6(0xffffffffffffffff, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 268.259784ms ago: executing program 3 (id=1815): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000d7c900000900000001", @ANYBLOB], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0}, &(0x7f0000000540), &(0x7f0000000500)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r2, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) 264.991274ms ago: executing program 6 (id=1816): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) syz_emit_ethernet(0x66, 0x0, 0x0) 222.432875ms ago: executing program 0 (id=1818): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000002500008500000082"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x1f, &(0x7f00000000c0)={&(0x7f0000000400)=@newlink={0x34, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x600}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}]}, 0x34}, 0x1, 0x2}, 0x0) 222.061075ms ago: executing program 1 (id=1819): socket$inet_udp(0x2, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), 0x0}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000340)=@generic={&(0x7f00000001c0)='./file0\x00', r2}, 0x18) 219.253785ms ago: executing program 6 (id=1820): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = socket$inet_sctp(0x2, 0x5, 0x84) close(r1) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) sendmsg$inet_sctp(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000640)="be", 0x1}], 0x1, &(0x7f00000000c0)=[@sndinfo={0x20, 0x84, 0x2, {0x6, 0x4, 0x28, 0x200000b, r3}}], 0x20, 0x6044}, 0x6) 203.738486ms ago: executing program 0 (id=1821): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r0) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)={0x48, r1, 0x1, 0x0, 0xffffffff, {}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}]}]}]}]}, 0x48}}, 0x804) (fail_nth: 3) 184.742716ms ago: executing program 0 (id=1822): socket$inet_udp(0x2, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000340)=@generic={0x0, r2}, 0x18) 184.340526ms ago: executing program 5 (id=1823): bpf$MAP_CREATE(0x0, 0x0, 0x50) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0) chroot(0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f0000000380)=0xffffffff00000041, 0x8) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0x0) r1 = syz_open_procfs(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000880)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) writev(r2, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x1) 177.403906ms ago: executing program 1 (id=1824): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x18) prlimit64(0x0, 0x6, &(0x7f0000000140), 0x0) setreuid(0xee01, 0xffffffffffffffff) setreuid(0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) move_pages(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0) r2 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) unshare(0x6060600) fcntl$setlease(r2, 0x400, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) fcntl$setlease(r2, 0x400, 0x2) 147.052426ms ago: executing program 0 (id=1825): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x2, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) io_setup(0x8, &(0x7f0000004200)=0x0) io_pgetevents(r1, 0x3, 0x3, &(0x7f0000000440)=[{}, {}, {}], &(0x7f00000004c0)={0x0, 0x3938700}, 0x0) 146.594907ms ago: executing program 1 (id=1826): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x18) syz_emit_ethernet(0x66, &(0x7f0000000280)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd606410a60030000000000000000000000000ffff00000000fe8000"/52], 0x0) 139.874057ms ago: executing program 6 (id=1827): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000010100008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x2d) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x3, 0x13, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$int_in(r4, 0x5452, &(0x7f0000000040)=0xffffffffffffffff) connect$llc(r4, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @broadcast}, 0x10) sendmmsg(r4, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r3, 0x0, 0xfffffffffffffffc}, 0x18) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x2, 0x0}, @generic={0x66}, @initr0, @exit, @alu={0x6, 0x0, 0x3, 0xa}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x65, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000040000000000000000000100000a20000000000a05000000000000000000070000010900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021800000000c0a01030000000000000000070000080900020073797a31000000000900010073797a30000000005400038050000080080003400000000244000b802c0001800a0001006c696d69740000001c0002800c00014000000000000000030c000240000000000000001014000180090001"], 0x104}, 0x1, 0x0, 0x0, 0x4008001}, 0x40000) 98.025258ms ago: executing program 1 (id=1828): setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x2, 0x32, 0xfffffffc}, 0x9c) sendto$inet6(0xffffffffffffffff, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 49.767008ms ago: executing program 1 (id=1829): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000d7c90000090000"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000540), &(0x7f0000000500)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000005000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) move_mount(0xffffffffffffffff, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, 0x0, 0x0) 49.273468ms ago: executing program 5 (id=1830): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) syz_emit_ethernet(0x66, &(0x7f0000000280)=ANY=[], 0x0) 22.858289ms ago: executing program 1 (id=1831): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0xfffe, @none, 0x0, 0x1}, 0xe) r2 = dup(r1) bind$bt_l2cap(r2, &(0x7f0000000300)={0x1f, 0x0, @any, 0x1da8}, 0xe) sendmsg$inet(r0, &(0x7f0000000a00)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0}, 0x8f0) signalfd(0xffffffffffffffff, &(0x7f0000000040)={[0x5]}, 0x8) ioperm(0x1, 0x3, 0x800000003fb) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x41, 0x0) writev(r3, &(0x7f0000000380)=[{&(0x7f0000000e40)="c15bba0b98", 0x5}, {0x0}], 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r4, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r4, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r4, 0x84, 0x17, &(0x7f0000000440)=ANY=[], 0x9) 22.498019ms ago: executing program 5 (id=1832): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b000000000000"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f00000006c0)='kmem_cache_free\x00', r1}, 0x10) r2 = socket(0x10, 0x3, 0x0) connect$netlink(r2, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000040)={&(0x7f0000001540)=@newtaction={0x18, 0x30, 0x829, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x40) 525.94µs ago: executing program 6 (id=1833): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) (async) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r1}, 0x10) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x8, &(0x7f00000002c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x4d1}, [@call={0x85, 0x0, 0x0, 0x41}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}]}, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r4 = gettid() process_vm_writev(r4, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) (async) open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x89900) (async) preadv(r1, &(0x7f00000004c0)=[{&(0x7f0000000180)=""/73, 0x49}, {&(0x7f0000000340)=""/79, 0x4f}, {&(0x7f0000000a00)=""/202, 0xca}, {&(0x7f0000000b00)=""/228, 0xe4}, {&(0x7f0000000c00)=""/180, 0xb4}, {&(0x7f0000000cc0)=""/232, 0xe8}], 0x6, 0x8, 0x5) (async) r5 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r6) (async) ioprio_set$uid(0x0, r6, 0x4000) quotactl_fd$Q_QUOTAON(r0, 0xffffffff80000200, r6, &(0x7f0000000300)='./file0\x00') (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r8}, 0x10) (async) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) r11 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=ANY=[@ANYBLOB="440000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r10, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r10, @ANYBLOB], 0x44}}, 0x0) 0s ago: executing program 5 (id=1834): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = socket$inet_sctp(0x2, 0x5, 0x84) close(r1) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) sendmsg$inet_sctp(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000640)="be", 0x1}], 0x1, &(0x7f00000000c0)=[@sndinfo={0x20, 0x84, 0x2, {0x6, 0x4, 0x28, 0x200000b, r3}}], 0x20, 0x6044}, 0x6) kernel console output (not intermixed with test programs): 7fa6d607cb7c [ 78.231426][ T6309] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 78.231443][ T6309] RSP: 002b:00007fa6d46e7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 78.231484][ T6309] RAX: ffffffffffffffda RBX: 00007fa6d62a5fa0 RCX: 00007fa6d607cb7c [ 78.231498][ T6309] RDX: 000000000000000f RSI: 00007fa6d46e70a0 RDI: 0000000000000008 [ 78.231512][ T6309] RBP: 00007fa6d46e7090 R08: 0000000000000000 R09: 0000000000000000 [ 78.231526][ T6309] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 78.231539][ T6309] R13: 0000000000000000 R14: 00007fa6d62a5fa0 R15: 00007ffd97df04c8 [ 78.231562][ T6309] [ 78.527873][ T6261] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.584545][ T6261] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.640454][ T29] kauditd_printk_skb: 359 callbacks suppressed [ 78.640472][ T29] audit: type=1400 audit(1744841112.360:5121): avc: denied { read write } for pid=6316 comm="syz.1.1093" name="event3" dev="devtmpfs" ino=256 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 78.730078][ T6265] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.737252][ T6265] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.754764][ T29] audit: type=1400 audit(1744841112.390:5122): avc: denied { open } for pid=6316 comm="syz.1.1093" path="/dev/input/event3" dev="devtmpfs" ino=256 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 78.779337][ T29] audit: type=1400 audit(1744841112.390:5123): avc: denied { ioctl } for pid=6316 comm="syz.1.1093" path="/dev/input/event3" dev="devtmpfs" ino=256 ioctlcmd=0x4580 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 78.805499][ T29] audit: type=1400 audit(1744841112.440:5124): avc: denied { write } for pid=6316 comm="syz.1.1093" path="socket:[15510]" dev="sockfs" ino=15510 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 78.841344][ T6265] bridge_slave_0: entered allmulticast mode [ 78.855262][ T6265] bridge_slave_0: entered promiscuous mode [ 78.872233][ T6265] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.879383][ T6265] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.920772][ T6265] bridge_slave_1: entered allmulticast mode [ 78.935979][ T6265] bridge_slave_1: entered promiscuous mode [ 78.988015][ T6265] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.017304][ T6265] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.093919][ T6265] team0: Port device team_slave_0 added [ 79.102772][ T6265] team0: Port device team_slave_1 added [ 79.158209][ T6265] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.165260][ T6265] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.191342][ T6265] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.223466][ T6265] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.230632][ T6265] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.255882][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.256684][ T6265] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.280832][ T6327] __nla_validate_parse: 24 callbacks suppressed [ 79.280848][ T6327] netlink: 96 bytes leftover after parsing attributes in process `syz.5.1094'. [ 79.390853][ T6265] hsr_slave_0: entered promiscuous mode [ 79.403470][ T6265] hsr_slave_1: entered promiscuous mode [ 79.414946][ T6265] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.456601][ T6265] Cannot create hsr debugfs directory [ 79.476663][ T29] audit: type=1326 audit(1744841113.200:5125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6331 comm="syz.0.1098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6d607e169 code=0x7ffc0000 [ 79.503139][ T29] audit: type=1326 audit(1744841113.200:5126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6331 comm="syz.0.1098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fa6d607e169 code=0x7ffc0000 [ 79.526841][ T29] audit: type=1326 audit(1744841113.200:5127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6331 comm="syz.0.1098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fa6d607e1a3 code=0x7ffc0000 [ 79.555458][ T29] audit: type=1326 audit(1744841113.280:5128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6339 comm="syz.3.1101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd13167e169 code=0x7ffc0000 [ 79.593474][ T29] audit: type=1326 audit(1744841113.310:5129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6339 comm="syz.3.1101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd13167e169 code=0x7ffc0000 [ 79.616974][ T29] audit: type=1326 audit(1744841113.310:5130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6339 comm="syz.3.1101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd13167e169 code=0x7ffc0000 [ 79.672465][ T6340] Process accounting resumed [ 79.719840][ T6345] SELinux: ebitmap: truncated map [ 79.730697][ T6332] FAULT_INJECTION: forcing a failure. [ 79.730697][ T6332] name failslab, interval 1, probability 0, space 0, times 0 [ 79.746893][ T6332] CPU: 0 UID: 0 PID: 6332 Comm: syz.0.1098 Not tainted 6.15.0-rc2-syzkaller-00048-gc62f4b82d571 #0 PREEMPT(voluntary) [ 79.746925][ T6332] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 79.746939][ T6332] Call Trace: [ 79.746945][ T6332] [ 79.746951][ T6332] dump_stack_lvl+0xf6/0x150 [ 79.746987][ T6332] dump_stack+0x15/0x1a [ 79.747003][ T6332] should_fail_ex+0x261/0x270 [ 79.747030][ T6332] should_failslab+0x8f/0xb0 [ 79.747068][ T6332] kmem_cache_alloc_noprof+0x59/0x340 [ 79.747095][ T6332] ? ioctx_alloc+0xf0/0x4c0 [ 79.747184][ T6332] ioctx_alloc+0xf0/0x4c0 [ 79.747211][ T6332] __se_sys_io_setup+0x6b/0x1b0 [ 79.747251][ T6332] __x64_sys_io_setup+0x31/0x40 [ 79.747356][ T6332] x64_sys_call+0x2b35/0x2e10 [ 79.747383][ T6332] do_syscall_64+0xc9/0x1c0 [ 79.747463][ T6332] ? clear_bhb_loop+0x25/0x80 [ 79.747507][ T6332] ? clear_bhb_loop+0x25/0x80 [ 79.747534][ T6332] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.747612][ T6332] RIP: 0033:0x7fa6d607e169 [ 79.747627][ T6332] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 79.747648][ T6332] RSP: 002b:00007fa6d46e7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 79.747671][ T6332] RAX: ffffffffffffffda RBX: 00007fa6d62a5fa0 RCX: 00007fa6d607e169 [ 79.747748][ T6332] RDX: 0000000000000000 RSI: 0000200000004200 RDI: 0000000000000008 [ 79.747762][ T6332] RBP: 00007fa6d46e7090 R08: 0000000000000000 R09: 0000000000000000 [ 79.747776][ T6332] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 79.747790][ T6332] R13: 0000000000000000 R14: 00007fa6d62a5fa0 R15: 00007ffd97df04c8 [ 79.747814][ T6332] [ 79.754033][ T6345] SELinux: failed to load policy [ 79.981590][ T6355] FAULT_INJECTION: forcing a failure. [ 79.981590][ T6355] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 79.983756][ T6265] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 79.994813][ T6355] CPU: 1 UID: 0 PID: 6355 Comm: syz.3.1108 Not tainted 6.15.0-rc2-syzkaller-00048-gc62f4b82d571 #0 PREEMPT(voluntary) [ 79.994928][ T6355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 79.994943][ T6355] Call Trace: [ 79.994951][ T6355] [ 79.994960][ T6355] dump_stack_lvl+0xf6/0x150 [ 79.994990][ T6355] dump_stack+0x15/0x1a [ 79.995018][ T6355] should_fail_ex+0x261/0x270 [ 79.995052][ T6355] should_fail+0xb/0x10 [ 79.995081][ T6355] should_fail_usercopy+0x1a/0x20 [ 79.995169][ T6355] _copy_to_user+0x20/0xa0 [ 79.995209][ T6355] simple_read_from_buffer+0xb2/0x130 [ 79.995249][ T6355] proc_fail_nth_read+0x103/0x140 [ 79.995323][ T6355] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 79.995347][ T6355] vfs_read+0x1b2/0x710 [ 79.995380][ T6355] ? __rcu_read_unlock+0x4e/0x70 [ 79.995416][ T6355] ? __fget_files+0x186/0x1c0 [ 79.995443][ T6355] ksys_read+0xeb/0x1b0 [ 79.995551][ T6355] __x64_sys_read+0x42/0x50 [ 79.995586][ T6355] x64_sys_call+0x2a3b/0x2e10 [ 79.995613][ T6355] do_syscall_64+0xc9/0x1c0 [ 79.995678][ T6355] ? clear_bhb_loop+0x25/0x80 [ 79.995698][ T6355] ? clear_bhb_loop+0x25/0x80 [ 79.995722][ T6355] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.995815][ T6355] RIP: 0033:0x7fd13167cb7c [ 79.995835][ T6355] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 79.995857][ T6355] RSP: 002b:00007fd12fce7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 79.995880][ T6355] RAX: ffffffffffffffda RBX: 00007fd1318a5fa0 RCX: 00007fd13167cb7c [ 79.995895][ T6355] RDX: 000000000000000f RSI: 00007fd12fce70a0 RDI: 0000000000000005 [ 79.995910][ T6355] RBP: 00007fd12fce7090 R08: 0000000000000000 R09: 0000000000000000 [ 79.995925][ T6355] R10: 00002000000004c0 R11: 0000000000000246 R12: 0000000000000001 [ 79.995950][ T6355] R13: 0000000000000000 R14: 00007fd1318a5fa0 R15: 00007fff37014738 [ 79.996021][ T6355] [ 80.037948][ T6352] Process accounting resumed [ 80.152735][ T6363] loop1: detected capacity change from 0 to 1764 [ 80.212044][ T6265] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 80.212444][ T6363] iso9660: Unknown parameter 'map9ormal' [ 80.217234][ T6265] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 80.249029][ T3375] Process accounting resumed [ 80.258017][ T6265] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 80.294408][ T6378] loop1: detected capacity change from 0 to 164 [ 80.306583][ T6378] syz.1.1117: attempt to access beyond end of device [ 80.306583][ T6378] loop1: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 80.325496][ T6378] syz.1.1117: attempt to access beyond end of device [ 80.325496][ T6378] loop1: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 80.336816][ T6265] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.364073][ T6265] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.374717][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.382278][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.404371][ T6265] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 80.414876][ T6265] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 80.435567][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.441494][ T6390] loop3: detected capacity change from 0 to 512 [ 80.442697][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.465508][ T6382] Process accounting resumed [ 80.491072][ T6390] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.498387][ T6265] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.521208][ T6390] ext4 filesystem being mounted at /254/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 80.551296][ T6390] EXT4-fs error (device loop3): ext4_do_update_inode:5211: inode #2: comm syz.3.1122: corrupted inode contents [ 80.568229][ T6390] EXT4-fs error (device loop3): ext4_dirty_inode:6103: inode #2: comm syz.3.1122: mark_inode_dirty error [ 80.581034][ T6390] EXT4-fs error (device loop3): ext4_do_update_inode:5211: inode #2: comm syz.3.1122: corrupted inode contents [ 80.593961][ T6390] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #2: comm syz.3.1122: mark_inode_dirty error [ 80.633260][ T6405] loop5: detected capacity change from 0 to 512 [ 80.664213][ T6405] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 80.673351][ T6405] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 80.686977][ T6405] EXT4-fs (loop5): warning: checktime reached, running e2fsck is recommended [ 80.705078][ T6405] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 80.720848][ T6405] System zones: 0-2, 18-18, 34-34 [ 80.733274][ T6405] EXT4-fs warning (device loop5): ext4_update_dynamic_rev:1132: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 80.764167][ T6265] veth0_vlan: entered promiscuous mode [ 80.771829][ T6265] veth1_vlan: entered promiscuous mode [ 80.792222][ T6265] veth0_macvtap: entered promiscuous mode [ 80.799330][ T6265] veth1_macvtap: entered promiscuous mode [ 80.809740][ T6265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.820411][ T6265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.830283][ T6265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.840758][ T6265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.850700][ T6265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.854125][ T6405] EXT4-fs (loop5): 1 truncate cleaned up [ 80.861651][ T6265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.870854][ T6405] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 80.877055][ T6265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.899680][ T6265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.919169][ T6265] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.927157][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.943835][ T6265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.954451][ T6265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.964359][ T6265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.964376][ T6265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.964390][ T6265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.964433][ T6265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.005442][ T6265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.005472][ T6265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.008095][ T6265] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.009058][ T6265] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.009108][ T6265] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.009288][ T6265] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.009316][ T6265] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.027881][ T6430] dummy0 speed is unknown, defaulting to 1000 [ 81.062773][ T3438] Process accounting resumed [ 81.069816][ T6437] FAULT_INJECTION: forcing a failure. [ 81.069816][ T6437] name failslab, interval 1, probability 0, space 0, times 0 [ 81.100409][ T6437] CPU: 1 UID: 0 PID: 6437 Comm: syz.0.1132 Not tainted 6.15.0-rc2-syzkaller-00048-gc62f4b82d571 #0 PREEMPT(voluntary) [ 81.100442][ T6437] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 81.100456][ T6437] Call Trace: [ 81.100463][ T6437] [ 81.100470][ T6437] dump_stack_lvl+0xf6/0x150 [ 81.100493][ T6437] dump_stack+0x15/0x1a [ 81.100540][ T6437] should_fail_ex+0x261/0x270 [ 81.100574][ T6437] should_failslab+0x8f/0xb0 [ 81.100612][ T6437] __kmalloc_node_noprof+0xaf/0x420 [ 81.100704][ T6437] ? crypto_create_tfm_node+0x59/0x240 [ 81.100729][ T6437] crypto_create_tfm_node+0x59/0x240 [ 81.100756][ T6437] crypto_spawn_tfm2+0x43/0x70 [ 81.100787][ T6437] crypto_authenc_esn_init_tfm+0x2f/0x150 [ 81.100870][ T6437] ? __pfx_crypto_authenc_esn_init_tfm+0x10/0x10 [ 81.100897][ T6437] crypto_aead_init_tfm+0x9a/0xb0 [ 81.100934][ T6437] crypto_create_tfm_node+0xef/0x240 [ 81.100983][ T6437] crypto_alloc_tfm_node+0xd1/0x290 [ 81.101019][ T6437] crypto_alloc_aead+0x2f/0x40 [ 81.101122][ T6437] esp_init_state+0x405/0xa00 [ 81.101160][ T6437] ? __kmalloc_node_track_caller_noprof+0x1ed/0x410 [ 81.101309][ T6437] __xfrm_init_state+0x67d/0xa80 [ 81.101351][ T6437] xfrm_add_sa+0x2049/0x2640 [ 81.101402][ T6437] xfrm_user_rcv_msg+0x59d/0x6a0 [ 81.101435][ T6437] ? nlmon_xmit+0x51/0x60 [ 81.101549][ T6437] netlink_rcv_skb+0x12f/0x230 [ 81.101608][ T6437] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 81.101645][ T6437] xfrm_netlink_rcv+0x47/0x60 [ 81.101725][ T6437] netlink_unicast+0x605/0x6c0 [ 81.101761][ T6437] netlink_sendmsg+0x609/0x720 [ 81.101798][ T6437] ? __pfx_netlink_sendmsg+0x10/0x10 [ 81.101828][ T6437] __sock_sendmsg+0x140/0x180 [ 81.101850][ T6437] ____sys_sendmsg+0x350/0x4e0 [ 81.101934][ T6437] __sys_sendmsg+0x1a0/0x240 [ 81.101981][ T6437] __x64_sys_sendmsg+0x46/0x50 [ 81.102019][ T6437] x64_sys_call+0x26f3/0x2e10 [ 81.102043][ T6437] do_syscall_64+0xc9/0x1c0 [ 81.102154][ T6437] ? clear_bhb_loop+0x25/0x80 [ 81.102176][ T6437] ? clear_bhb_loop+0x25/0x80 [ 81.102197][ T6437] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.102217][ T6437] RIP: 0033:0x7fa6d607e169 [ 81.102232][ T6437] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 81.102249][ T6437] RSP: 002b:00007fa6d46e7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 81.102300][ T6437] RAX: ffffffffffffffda RBX: 00007fa6d62a5fa0 RCX: 00007fa6d607e169 [ 81.102312][ T6437] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000005 [ 81.102324][ T6437] RBP: 00007fa6d46e7090 R08: 0000000000000000 R09: 0000000000000000 [ 81.102374][ T6437] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 81.102385][ T6437] R13: 0000000000000000 R14: 00007fa6d62a5fa0 R15: 00007ffd97df04c8 [ 81.102450][ T6437] [ 81.416982][ T5845] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.482888][ T6449] infiniband srz1: RDMA CMA: cma_listen_on_dev, error -98 [ 81.559195][ T6464] loop3: detected capacity change from 0 to 1024 [ 81.583661][ T6464] EXT4-fs: Ignoring removed nobh option [ 81.589336][ T6464] EXT4-fs: Ignoring removed bh option [ 81.622789][ T6464] EXT4-fs error (device loop3): ext4_orphan_get:1416: comm syz.3.1142: bad orphan inode 32767 [ 81.633916][ T6464] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.708874][ T6480] loop5: detected capacity change from 0 to 512 [ 81.764569][ T6480] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.808910][ T6480] ext4 filesystem being mounted at /42/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 81.851842][ T6480] EXT4-fs error (device loop5): ext4_do_update_inode:5211: inode #2: comm syz.5.1148: corrupted inode contents [ 81.890388][ T6480] EXT4-fs error (device loop5): ext4_dirty_inode:6103: inode #2: comm syz.5.1148: mark_inode_dirty error [ 81.928464][ T6480] EXT4-fs error (device loop5): ext4_do_update_inode:5211: inode #2: comm syz.5.1148: corrupted inode contents [ 81.960411][ T6480] EXT4-fs error (device loop5): __ext4_ext_dirty:207: inode #2: comm syz.5.1148: mark_inode_dirty error [ 81.975194][ T6498] dummy0 speed is unknown, defaulting to 1000 [ 82.002101][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.048755][ T36] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x1 [ 82.056686][ T36] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 82.064649][ T36] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 82.072848][ T36] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 82.081464][ T36] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x2 [ 82.089653][ T36] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 82.097653][ T36] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 82.105484][ T36] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x4 [ 82.113252][ T36] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 82.121035][ T36] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 82.128822][ T36] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 82.136886][ T36] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 82.145404][ T36] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x2 [ 82.153322][ T36] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 82.161246][ T36] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 82.169027][ T36] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 82.176863][ T36] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 82.184899][ T36] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 82.192657][ T36] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 82.200712][ T36] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 82.208491][ T36] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 82.216291][ T36] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 82.224159][ T36] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 82.232155][ T36] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 82.239937][ T36] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 82.247836][ T36] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 82.249564][ T6510] loop3: detected capacity change from 0 to 512 [ 82.255729][ T36] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 82.255758][ T36] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 82.277956][ T36] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 82.285868][ T36] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 82.290346][ T6510] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 82.293653][ T36] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 82.293680][ T36] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 82.302758][ T6510] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 82.310467][ T36] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x1 [ 82.321044][ T6510] EXT4-fs (loop3): warning: checktime reached, running e2fsck is recommended [ 82.335198][ T36] hid-generic 0000:007F:FFFFFFFE.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 82.345380][ T6510] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 82.362744][ T6510] System zones: 0-2, 18-18, 34-34 [ 82.371754][ T6510] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1132: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 82.397208][ T6510] EXT4-fs (loop3): 1 truncate cleaned up [ 82.405110][ T6510] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 82.431038][ T5845] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.463148][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.508120][ T6521] Process accounting resumed [ 82.561049][ T6534] loop5: detected capacity change from 0 to 512 [ 82.575951][ T6537] SELinux: policydb magic number 0x18 does not match expected magic number 0xf97cff8c [ 82.587328][ T6537] SELinux: failed to load policy [ 82.594298][ T6534] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.607621][ T6534] ext4 filesystem being mounted at /45/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 82.620540][ T6534] EXT4-fs error (device loop5): ext4_do_update_inode:5211: inode #2: comm syz.5.1166: corrupted inode contents [ 82.634250][ T6534] EXT4-fs error (device loop5): ext4_dirty_inode:6103: inode #2: comm syz.5.1166: mark_inode_dirty error [ 82.647680][ T6534] EXT4-fs error (device loop5): ext4_do_update_inode:5211: inode #2: comm syz.5.1166: corrupted inode contents [ 82.659921][ T6534] EXT4-fs error (device loop5): __ext4_ext_dirty:207: inode #2: comm syz.5.1166: mark_inode_dirty error [ 82.833299][ T6551] loop3: detected capacity change from 0 to 512 [ 82.844744][ T5845] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.850676][ T6559] loop6: detected capacity change from 0 to 512 [ 82.862188][ T6551] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 82.871478][ T6551] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 82.883122][ T6551] EXT4-fs (loop3): warning: checktime reached, running e2fsck is recommended [ 82.892220][ T6551] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 82.900802][ T6551] System zones: 0-2, 18-18, 34-34 [ 82.907307][ T6559] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.927787][ T6559] ext4 filesystem being mounted at /7/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 82.964551][ T6551] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1132: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 83.021118][ T6559] EXT4-fs error (device loop6): ext4_do_update_inode:5211: inode #2: comm syz.6.1175: corrupted inode contents [ 83.041654][ T6551] EXT4-fs (loop3): 1 truncate cleaned up [ 83.047796][ T6551] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 83.060599][ T6559] EXT4-fs error (device loop6): ext4_dirty_inode:6103: inode #2: comm syz.6.1175: mark_inode_dirty error [ 83.092535][ T6559] EXT4-fs error (device loop6): ext4_do_update_inode:5211: inode #2: comm syz.6.1175: corrupted inode contents [ 83.092972][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.119934][ T6559] EXT4-fs error (device loop6): __ext4_ext_dirty:207: inode #2: comm syz.6.1175: mark_inode_dirty error [ 83.189462][ T6576] loop5: detected capacity change from 0 to 8192 [ 83.235281][ T6576] loop5: p1 p2 p3 p4 [ 83.239458][ T6576] loop5: p1 size 108922248 extends beyond EOD, truncated [ 83.262844][ T6576] loop5: p2 start 861536256 is beyond EOD, truncated [ 83.269679][ T6576] loop5: p3 start 851968 is beyond EOD, truncated [ 83.276312][ T6576] loop5: p4 size 65536 extends beyond EOD, truncated [ 83.364235][ T6265] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.422057][ T6595] : renamed from vlan0 (while UP) [ 83.599531][ T6596] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1190'. [ 83.609738][ T6596] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1190'. [ 83.629282][ T6596] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1190'. [ 83.675295][ T6596] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1190'. [ 83.689059][ T6596] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1190'. [ 83.699507][ T6596] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1190'. [ 83.761989][ T6596] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1190'. [ 83.777269][ T6596] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1190'. [ 83.801972][ T6596] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1190'. [ 83.840688][ T29] kauditd_printk_skb: 402 callbacks suppressed [ 83.840704][ T29] audit: type=1326 audit(1744841117.560:5533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6618 comm="syz.0.1200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6d607e169 code=0x7ffc0000 [ 83.878221][ T29] audit: type=1326 audit(1744841117.560:5534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6618 comm="syz.0.1200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa6d607e169 code=0x7ffc0000 [ 83.901825][ T29] audit: type=1326 audit(1744841117.560:5535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6618 comm="syz.0.1200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6d607e169 code=0x7ffc0000 [ 83.925528][ T29] audit: type=1326 audit(1744841117.560:5536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6618 comm="syz.0.1200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa6d607e169 code=0x7ffc0000 [ 83.949097][ T29] audit: type=1326 audit(1744841117.560:5537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6618 comm="syz.0.1200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6d607e169 code=0x7ffc0000 [ 83.972831][ T29] audit: type=1326 audit(1744841117.560:5538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6618 comm="syz.0.1200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa6d607e169 code=0x7ffc0000 [ 83.996630][ T29] audit: type=1326 audit(1744841117.570:5539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6618 comm="syz.0.1200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6d607e169 code=0x7ffc0000 [ 84.020286][ T29] audit: type=1326 audit(1744841117.570:5540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6618 comm="syz.0.1200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa6d607e169 code=0x7ffc0000 [ 84.044067][ T29] audit: type=1326 audit(1744841117.570:5541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6618 comm="syz.0.1200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6d607e169 code=0x7ffc0000 [ 84.068168][ T29] audit: type=1326 audit(1744841117.570:5542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6618 comm="syz.0.1200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=152 compat=0 ip=0x7fa6d607e169 code=0x7ffc0000 [ 84.145742][ T6628] dummy0 speed is unknown, defaulting to 1000 [ 84.257748][ T6645] loop1: detected capacity change from 0 to 512 [ 84.267045][ T6645] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 84.277499][ T6645] EXT4-fs (loop1): can't mount with data_err=abort, fs mounted w/o journal [ 84.290353][ T6645] vhci_hcd: default hub control req: 600f v0000 i0000 l0 [ 84.300266][ T6645] loop1: detected capacity change from 0 to 512 [ 84.302051][ T6649] loop3: detected capacity change from 0 to 2048 [ 84.308987][ T6645] EXT4-fs: Invalid want_extra_isize 3228 [ 84.329049][ T6649] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 84.348062][ T6656] 9pnet_fd: Insufficient options for proto=fd [ 84.349075][ T6649] ext4 filesystem being mounted at /274/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 84.387694][ T6658] FAULT_INJECTION: forcing a failure. [ 84.387694][ T6658] name failslab, interval 1, probability 0, space 0, times 0 [ 84.395473][ T6649] vlan0: entered promiscuous mode [ 84.400846][ T6658] CPU: 1 UID: 0 PID: 6658 Comm: syz.1.1213 Not tainted 6.15.0-rc2-syzkaller-00048-gc62f4b82d571 #0 PREEMPT(voluntary) [ 84.400886][ T6658] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 84.400903][ T6658] Call Trace: [ 84.400912][ T6658] [ 84.400923][ T6658] dump_stack_lvl+0xf6/0x150 [ 84.400952][ T6658] dump_stack+0x15/0x1a [ 84.401046][ T6658] should_fail_ex+0x261/0x270 [ 84.401089][ T6658] should_failslab+0x8f/0xb0 [ 84.401128][ T6658] kmem_cache_alloc_noprof+0x59/0x340 [ 84.401155][ T6658] ? security_inode_alloc+0x37/0x100 [ 84.401200][ T6658] security_inode_alloc+0x37/0x100 [ 84.401237][ T6658] inode_init_always_gfp+0x4a2/0x4f0 [ 84.401279][ T6658] ? __pfx_sock_alloc_inode+0x10/0x10 [ 84.401390][ T6658] alloc_inode+0x86/0x170 [ 84.401429][ T6658] __sock_create+0x12b/0x5a0 [ 84.401521][ T6658] sock_create+0x58/0x70 [ 84.401546][ T6658] sctp_do_peeloff+0x243/0x3a0 [ 84.401669][ T6658] sctp_getsockopt_peeloff_flags+0xdb/0x250 [ 84.401799][ T6658] sctp_getsockopt+0x303/0xab0 [ 84.401826][ T6658] sock_common_getsockopt+0x5b/0x70 [ 84.401851][ T6658] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 84.401876][ T6658] do_sock_getsockopt+0x1fc/0x290 [ 84.401914][ T6658] __x64_sys_getsockopt+0x191/0x210 [ 84.401976][ T6658] x64_sys_call+0x128f/0x2e10 [ 84.402010][ T6658] do_syscall_64+0xc9/0x1c0 [ 84.402053][ T6658] ? clear_bhb_loop+0x25/0x80 [ 84.402081][ T6658] ? clear_bhb_loop+0x25/0x80 [ 84.402107][ T6658] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.402134][ T6658] RIP: 0033:0x7f6e3356e169 [ 84.402154][ T6658] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 84.402240][ T6658] RSP: 002b:00007f6e31bd7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 84.402258][ T6658] RAX: ffffffffffffffda RBX: 00007f6e33795fa0 RCX: 00007f6e3356e169 [ 84.402272][ T6658] RDX: 000000000000007a RSI: 0000000000000084 RDI: 0000000000000003 [ 84.402287][ T6658] RBP: 00007f6e31bd7090 R08: 0000200000000000 R09: 0000000000000000 [ 84.402302][ T6658] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000001 [ 84.402317][ T6658] R13: 0000000000000000 R14: 00007f6e33795fa0 R15: 00007ffe2440b018 [ 84.402342][ T6658] [ 84.402358][ T6658] socket: no more sockets [ 84.407737][ T6649] macvtap0: entered promiscuous mode [ 84.673643][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.683731][ T6673] geneve0: entered allmulticast mode [ 84.693633][ T6667] dummy0 speed is unknown, defaulting to 1000 [ 84.731299][ T6677] loop3: detected capacity change from 0 to 512 [ 84.738885][ T6677] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 84.763224][ T6677] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.798477][ T6677] ext4 filesystem being mounted at /276/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 84.822042][ T6677] FAULT_INJECTION: forcing a failure. [ 84.822042][ T6677] name failslab, interval 1, probability 0, space 0, times 0 [ 84.835509][ T6677] CPU: 0 UID: 0 PID: 6677 Comm: syz.3.1221 Not tainted 6.15.0-rc2-syzkaller-00048-gc62f4b82d571 #0 PREEMPT(voluntary) [ 84.835635][ T6677] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 84.835670][ T6677] Call Trace: [ 84.835676][ T6677] [ 84.835683][ T6677] dump_stack_lvl+0xf6/0x150 [ 84.835712][ T6677] dump_stack+0x15/0x1a [ 84.835732][ T6677] should_fail_ex+0x261/0x270 [ 84.835775][ T6677] should_failslab+0x8f/0xb0 [ 84.835874][ T6677] kmem_cache_alloc_noprof+0x59/0x340 [ 84.835902][ T6677] ? dup_fd+0x3a/0x580 [ 84.835940][ T6677] dup_fd+0x3a/0x580 [ 84.836005][ T6677] copy_files+0x98/0xe0 [ 84.836036][ T6677] copy_process+0xc60/0x1f60 [ 84.836138][ T6677] kernel_clone+0x168/0x5d0 [ 84.836170][ T6677] __x64_sys_clone+0xe9/0x120 [ 84.836212][ T6677] x64_sys_call+0x2dc9/0x2e10 [ 84.836240][ T6677] do_syscall_64+0xc9/0x1c0 [ 84.836330][ T6677] ? clear_bhb_loop+0x25/0x80 [ 84.836357][ T6677] ? clear_bhb_loop+0x25/0x80 [ 84.836392][ T6677] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.836417][ T6677] RIP: 0033:0x7fd13167e169 [ 84.836434][ T6677] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 84.836452][ T6677] RSP: 002b:00007fd12fce6fe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 84.836473][ T6677] RAX: ffffffffffffffda RBX: 00007fd1318a5fa0 RCX: 00007fd13167e169 [ 84.836485][ T6677] RDX: 0000000000000000 RSI: fffffffffffffe60 RDI: 0000000006063000 [ 84.836577][ T6677] RBP: 00007fd12fce7090 R08: 0000000000000000 R09: 0000000000000000 [ 84.836590][ T6677] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 84.836603][ T6677] R13: 0000000000000000 R14: 00007fd1318a5fa0 R15: 00007fff37014738 [ 84.836634][ T6677] [ 85.064360][ T6699] netlink: 76 bytes leftover after parsing attributes in process `syz.6.1230'. [ 85.077912][ T6701] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1231'. [ 85.095407][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.109230][ T6701] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 85.116379][ T6705] validate_nla: 14 callbacks suppressed [ 85.116398][ T6705] netlink: 'syz.5.1232': attribute type 49 has an invalid length. [ 85.167904][ T6709] dummy0 speed is unknown, defaulting to 1000 [ 85.218371][ T6721] loop5: detected capacity change from 0 to 512 [ 85.229675][ T6723] rtc_cmos 00:00: Alarms can be up to one day in the future [ 85.237480][ T6721] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 85.288712][ T6721] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.301847][ T6721] ext4 filesystem being mounted at /53/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 85.949346][ T5845] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.995462][ T6745] vhci_hcd: invalid port number 254 [ 86.128790][ T6756] loop5: detected capacity change from 0 to 512 [ 86.184413][ T6756] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.206852][ T6756] ext4 filesystem being mounted at /56/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 86.238773][ T5845] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.288313][ T9] Process accounting resumed [ 86.355239][ T6771] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1254'. [ 86.365508][ T6771] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1254'. [ 86.378445][ T6771] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1254'. [ 86.401013][ T6771] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1254'. [ 86.410872][ T6771] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1254'. [ 86.444958][ T6771] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1254'. [ 86.501852][ T6771] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1254'. [ 86.515500][ T6771] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1254'. [ 87.153842][ T6814] loop6: detected capacity change from 0 to 164 [ 87.179856][ T6817] 9pnet_fd: Insufficient options for proto=fd [ 87.214408][ T6822] loop3: detected capacity change from 0 to 2048 [ 87.255419][ T6822] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 87.289883][ T6822] ext4 filesystem being mounted at /284/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 87.323901][ T3376] Process accounting resumed [ 87.360246][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.376006][ T6837] loop5: detected capacity change from 0 to 512 [ 87.414657][ T6837] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.437905][ T6837] ext4 filesystem being mounted at /61/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 87.468178][ T6837] EXT4-fs error (device loop5): ext4_do_update_inode:5211: inode #2: comm syz.5.1281: corrupted inode contents [ 87.497400][ T6849] Process accounting resumed [ 87.523916][ T6837] EXT4-fs error (device loop5): ext4_dirty_inode:6103: inode #2: comm syz.5.1281: mark_inode_dirty error [ 87.574452][ T6837] EXT4-fs error (device loop5): ext4_do_update_inode:5211: inode #2: comm syz.5.1281: corrupted inode contents [ 87.591428][ T6865] siw: device registration error -23 [ 87.600084][ T6837] EXT4-fs error (device loop5): __ext4_ext_dirty:207: inode #2: comm syz.5.1281: mark_inode_dirty error [ 87.609262][ T6859] Process accounting resumed [ 87.682175][ T5845] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.748694][ T6878] SELinux: failed to load policy [ 87.754467][ T6879] Process accounting resumed [ 87.959760][ T6895] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 87.997841][ T6900] loop5: detected capacity change from 0 to 2048 [ 88.016123][ T6902] dummy0 speed is unknown, defaulting to 1000 [ 88.041158][ T6900] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 88.083499][ T5845] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.427106][ T6949] loop5: detected capacity change from 0 to 1024 [ 88.436567][ T6949] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 88.451916][ T6949] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 88.463944][ T6949] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.1322: bg 0: block 88: padding at end of block bitmap is not set [ 88.493402][ T5845] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.520001][ T6959] 9pnet_fd: Insufficient options for proto=fd [ 88.661082][ T6977] geneve0: entered allmulticast mode [ 88.709171][ T6983] 9pnet_fd: Insufficient options for proto=fd [ 88.729553][ T6985] loop1: detected capacity change from 0 to 512 [ 88.738010][ T6985] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 88.749739][ T6985] EXT4-fs (loop1): 1 truncate cleaned up [ 88.757578][ T6985] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 88.778007][ T6990] loop5: detected capacity change from 0 to 164 [ 88.786158][ T6990] syz.5.1341: attempt to access beyond end of device [ 88.786158][ T6990] loop5: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 88.800422][ T6990] syz.5.1341: attempt to access beyond end of device [ 88.800422][ T6990] loop5: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 88.830646][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.879212][ T29] kauditd_printk_skb: 532 callbacks suppressed [ 88.879227][ T29] audit: type=1326 audit(1744841122.600:6075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6999 comm="syz.5.1346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4de63e169 code=0x7ffc0000 [ 88.908956][ T29] audit: type=1326 audit(1744841122.600:6076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6999 comm="syz.5.1346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4de63e169 code=0x7ffc0000 [ 88.932537][ T29] audit: type=1326 audit(1744841122.600:6077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6999 comm="syz.5.1346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb4de63e169 code=0x7ffc0000 [ 88.932627][ T29] audit: type=1326 audit(1744841122.600:6078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6999 comm="syz.5.1346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4de63e169 code=0x7ffc0000 [ 88.932660][ T29] audit: type=1326 audit(1744841122.600:6079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6999 comm="syz.5.1346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb4de63cad0 code=0x7ffc0000 [ 88.932768][ T29] audit: type=1326 audit(1744841122.630:6080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6999 comm="syz.5.1346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4de63e169 code=0x7ffc0000 [ 88.932794][ T29] audit: type=1326 audit(1744841122.630:6081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6999 comm="syz.5.1346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb4de63e169 code=0x7ffc0000 [ 88.932823][ T29] audit: type=1326 audit(1744841122.630:6082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6999 comm="syz.5.1346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4de63e169 code=0x7ffc0000 [ 88.932921][ T29] audit: type=1326 audit(1744841122.630:6083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6999 comm="syz.5.1346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb4de63e169 code=0x7ffc0000 [ 88.932979][ T29] audit: type=1326 audit(1744841122.630:6084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6999 comm="syz.5.1346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4de63e169 code=0x7ffc0000 [ 88.988003][ T9] Process accounting resumed [ 89.146238][ T1042] Process accounting resumed [ 89.188101][ T7012] loop3: detected capacity change from 0 to 512 [ 89.210972][ T7012] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 89.220222][ T7012] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 89.234463][ T7007] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 89.280889][ T7012] EXT4-fs (loop3): warning: checktime reached, running e2fsck is recommended [ 89.293212][ T7012] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 89.301382][ T7012] System zones: 0-2, 18-18, 34-34 [ 89.310032][ T7012] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1132: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 89.329653][ T7012] EXT4-fs (loop3): 1 truncate cleaned up [ 89.336489][ T7012] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 89.407951][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.476628][ T7036] FAULT_INJECTION: forcing a failure. [ 89.476628][ T7036] name failslab, interval 1, probability 0, space 0, times 0 [ 89.489484][ T7036] CPU: 0 UID: 0 PID: 7036 Comm: syz.3.1359 Not tainted 6.15.0-rc2-syzkaller-00048-gc62f4b82d571 #0 PREEMPT(voluntary) [ 89.489520][ T7036] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 89.489570][ T7036] Call Trace: [ 89.489578][ T7036] [ 89.489586][ T7036] dump_stack_lvl+0xf6/0x150 [ 89.489616][ T7036] dump_stack+0x15/0x1a [ 89.489637][ T7036] should_fail_ex+0x261/0x270 [ 89.489670][ T7036] should_failslab+0x8f/0xb0 [ 89.489790][ T7036] kmem_cache_alloc_noprof+0x59/0x340 [ 89.489816][ T7036] ? getname_flags+0x81/0x3b0 [ 89.489841][ T7036] getname_flags+0x81/0x3b0 [ 89.489864][ T7036] io_getxattr_prep+0x1bb/0x200 [ 89.489913][ T7036] io_submit_sqes+0x607/0x1050 [ 89.489947][ T7036] __se_sys_io_uring_enter+0x1ce/0x1c00 [ 89.489975][ T7036] ? 0xffffffff81000000 [ 89.490003][ T7036] ? get_pid_task+0x94/0xd0 [ 89.490035][ T7036] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 89.490063][ T7036] ? vfs_write+0x669/0x950 [ 89.490089][ T7036] ? putname+0xe1/0x100 [ 89.490107][ T7036] ? __fget_files+0x186/0x1c0 [ 89.490165][ T7036] ? fput+0x99/0xd0 [ 89.490190][ T7036] ? ksys_write+0x180/0x1b0 [ 89.490221][ T7036] __x64_sys_io_uring_enter+0x78/0x90 [ 89.490248][ T7036] x64_sys_call+0x26cb/0x2e10 [ 89.490282][ T7036] do_syscall_64+0xc9/0x1c0 [ 89.490312][ T7036] ? clear_bhb_loop+0x25/0x80 [ 89.490333][ T7036] ? clear_bhb_loop+0x25/0x80 [ 89.490355][ T7036] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.490410][ T7036] RIP: 0033:0x7fd13167e169 [ 89.490449][ T7036] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 89.490468][ T7036] RSP: 002b:00007fd12fce7038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 89.490490][ T7036] RAX: ffffffffffffffda RBX: 00007fd1318a5fa0 RCX: 00007fd13167e169 [ 89.490505][ T7036] RDX: 0000000000000002 RSI: 00000000000047bc RDI: 0000000000000003 [ 89.490519][ T7036] RBP: 00007fd12fce7090 R08: 0000000000000000 R09: 0000000000000000 [ 89.490532][ T7036] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 89.490543][ T7036] R13: 0000000000000000 R14: 00007fd1318a5fa0 R15: 00007fff37014738 [ 89.490587][ T7036] [ 89.715577][ T7035] loop5: detected capacity change from 0 to 512 [ 89.740518][ T9] Process accounting resumed [ 89.750361][ T7035] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 89.763307][ T7035] ext4 filesystem being mounted at /90/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 89.776886][ T7035] EXT4-fs error (device loop5): ext4_do_update_inode:5211: inode #2: comm syz.5.1360: corrupted inode contents [ 89.789825][ T7035] EXT4-fs error (device loop5): ext4_dirty_inode:6103: inode #2: comm syz.5.1360: mark_inode_dirty error [ 89.802307][ T7035] EXT4-fs error (device loop5): ext4_do_update_inode:5211: inode #2: comm syz.5.1360: corrupted inode contents [ 89.815475][ T7035] EXT4-fs error (device loop5): __ext4_ext_dirty:207: inode #2: comm syz.5.1360: mark_inode_dirty error [ 89.888774][ T5845] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.950393][ T7060] netlink: 'syz.5.1367': attribute type 10 has an invalid length. [ 89.964195][ T7062] loop6: detected capacity change from 0 to 164 [ 89.973703][ T7060] ipvlan0: entered allmulticast mode [ 89.979171][ T7060] veth0_vlan: entered allmulticast mode [ 89.982020][ T7062] syz.6.1373: attempt to access beyond end of device [ 89.982020][ T7062] loop6: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 89.986521][ T7060] team0: Device ipvlan0 failed to register rx_handler [ 90.042811][ T7062] syz.6.1373: attempt to access beyond end of device [ 90.042811][ T7062] loop6: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 90.136028][ T7078] loop3: detected capacity change from 0 to 164 [ 90.146621][ T7078] syz.3.1379: attempt to access beyond end of device [ 90.146621][ T7078] loop3: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 90.177851][ T7078] syz.3.1379: attempt to access beyond end of device [ 90.177851][ T7078] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 90.200888][ T7084] 9pnet_fd: Insufficient options for proto=fd [ 90.265305][ T7088] 9pnet_fd: Insufficient options for proto=fd [ 90.379904][ T7100] loop5: detected capacity change from 0 to 164 [ 90.399280][ T7100] syz.5.1389: attempt to access beyond end of device [ 90.399280][ T7100] loop5: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 90.415321][ T7100] syz.5.1389: attempt to access beyond end of device [ 90.415321][ T7100] loop5: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 90.563934][ T7116] FAULT_INJECTION: forcing a failure. [ 90.563934][ T7116] name failslab, interval 1, probability 0, space 0, times 0 [ 90.576919][ T7116] CPU: 1 UID: 0 PID: 7116 Comm: syz.6.1396 Not tainted 6.15.0-rc2-syzkaller-00048-gc62f4b82d571 #0 PREEMPT(voluntary) [ 90.576994][ T7116] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 90.577007][ T7116] Call Trace: [ 90.577014][ T7116] [ 90.577021][ T7116] dump_stack_lvl+0xf6/0x150 [ 90.577046][ T7116] dump_stack+0x15/0x1a [ 90.577063][ T7116] should_fail_ex+0x261/0x270 [ 90.577093][ T7116] should_failslab+0x8f/0xb0 [ 90.577299][ T7116] kmem_cache_alloc_node_noprof+0x5c/0x340 [ 90.577324][ T7116] ? __alloc_skb+0x10d/0x320 [ 90.577349][ T7116] __alloc_skb+0x10d/0x320 [ 90.577426][ T7116] netlink_alloc_large_skb+0xad/0xe0 [ 90.577450][ T7116] netlink_sendmsg+0x3da/0x720 [ 90.577508][ T7116] ? __pfx_netlink_sendmsg+0x10/0x10 [ 90.577552][ T7116] __sock_sendmsg+0x140/0x180 [ 90.577570][ T7116] ____sys_sendmsg+0x350/0x4e0 [ 90.577625][ T7116] __sys_sendmsg+0x1a0/0x240 [ 90.577731][ T7116] __x64_sys_sendmsg+0x46/0x50 [ 90.577778][ T7116] x64_sys_call+0x26f3/0x2e10 [ 90.577801][ T7116] do_syscall_64+0xc9/0x1c0 [ 90.577923][ T7116] ? clear_bhb_loop+0x25/0x80 [ 90.577947][ T7116] ? clear_bhb_loop+0x25/0x80 [ 90.577969][ T7116] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.577991][ T7116] RIP: 0033:0x7eff30f1e169 [ 90.578007][ T7116] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 90.578081][ T7116] RSP: 002b:00007eff2f587038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 90.578104][ T7116] RAX: ffffffffffffffda RBX: 00007eff31145fa0 RCX: 00007eff30f1e169 [ 90.578117][ T7116] RDX: 0000000004000800 RSI: 0000200000006040 RDI: 0000000000000004 [ 90.578130][ T7116] RBP: 00007eff2f587090 R08: 0000000000000000 R09: 0000000000000000 [ 90.578218][ T7116] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 90.578230][ T7116] R13: 0000000000000000 R14: 00007eff31145fa0 R15: 00007ffd96e8c1a8 [ 90.578251][ T7116] [ 90.803086][ T7124] 9pnet_fd: Insufficient options for proto=fd [ 90.888639][ T7132] loop3: detected capacity change from 0 to 164 [ 90.902364][ T7136] FAULT_INJECTION: forcing a failure. [ 90.902364][ T7136] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 90.915748][ T7136] CPU: 1 UID: 0 PID: 7136 Comm: syz.1.1406 Not tainted 6.15.0-rc2-syzkaller-00048-gc62f4b82d571 #0 PREEMPT(voluntary) [ 90.915847][ T7136] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 90.915862][ T7136] Call Trace: [ 90.915871][ T7136] [ 90.915880][ T7136] dump_stack_lvl+0xf6/0x150 [ 90.915909][ T7136] dump_stack+0x15/0x1a [ 90.915984][ T7136] should_fail_ex+0x261/0x270 [ 90.916047][ T7136] should_fail+0xb/0x10 [ 90.916075][ T7136] should_fail_usercopy+0x1a/0x20 [ 90.916175][ T7136] _copy_from_user+0x1c/0xa0 [ 90.916212][ T7136] do_ip_setsockopt+0x2ec/0x22a0 [ 90.916278][ T7136] ip_setsockopt+0x63/0x100 [ 90.916378][ T7136] raw_setsockopt+0x10f/0x170 [ 90.916404][ T7136] sock_common_setsockopt+0x64/0x80 [ 90.916428][ T7136] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 90.916452][ T7136] __sys_setsockopt+0x187/0x200 [ 90.916483][ T7136] __x64_sys_setsockopt+0x66/0x80 [ 90.916565][ T7136] x64_sys_call+0x2a09/0x2e10 [ 90.916598][ T7136] do_syscall_64+0xc9/0x1c0 [ 90.916632][ T7136] ? clear_bhb_loop+0x25/0x80 [ 90.916657][ T7136] ? clear_bhb_loop+0x25/0x80 [ 90.916683][ T7136] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.916707][ T7136] RIP: 0033:0x7f6e3356e169 [ 90.916724][ T7136] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 90.916872][ T7136] RSP: 002b:00007f6e31bd7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 90.916890][ T7136] RAX: ffffffffffffffda RBX: 00007f6e33795fa0 RCX: 00007f6e3356e169 [ 90.916918][ T7136] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000007 [ 90.916933][ T7136] RBP: 00007f6e31bd7090 R08: 0000000000000004 R09: 0000000000000000 [ 90.916946][ T7136] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000001 [ 90.916961][ T7136] R13: 0000000000000000 R14: 00007f6e33795fa0 R15: 00007ffe2440b018 [ 90.916986][ T7136] [ 91.133681][ T7132] syz.3.1404: attempt to access beyond end of device [ 91.133681][ T7132] loop3: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 91.150959][ T7132] syz.3.1404: attempt to access beyond end of device [ 91.150959][ T7132] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 91.165854][ T7144] FAULT_INJECTION: forcing a failure. [ 91.165854][ T7144] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 91.179010][ T7144] CPU: 1 UID: 0 PID: 7144 Comm: syz.0.1408 Not tainted 6.15.0-rc2-syzkaller-00048-gc62f4b82d571 #0 PREEMPT(voluntary) [ 91.179045][ T7144] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 91.179058][ T7144] Call Trace: [ 91.179065][ T7144] [ 91.179074][ T7144] dump_stack_lvl+0xf6/0x150 [ 91.179102][ T7144] dump_stack+0x15/0x1a [ 91.179154][ T7144] should_fail_ex+0x261/0x270 [ 91.179181][ T7144] should_fail+0xb/0x10 [ 91.179206][ T7144] should_fail_usercopy+0x1a/0x20 [ 91.179248][ T7144] _copy_to_user+0x20/0xa0 [ 91.179281][ T7144] rng_dev_read+0x3f4/0x720 [ 91.179316][ T7144] vfs_readv+0x3e5/0x660 [ 91.179352][ T7144] ? __pfx_rng_dev_read+0x10/0x10 [ 91.179394][ T7144] __x64_sys_preadv+0xf9/0x1c0 [ 91.179428][ T7144] x64_sys_call+0x1410/0x2e10 [ 91.179449][ T7144] do_syscall_64+0xc9/0x1c0 [ 91.179506][ T7144] ? clear_bhb_loop+0x25/0x80 [ 91.179526][ T7144] ? clear_bhb_loop+0x25/0x80 [ 91.179548][ T7144] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.179574][ T7144] RIP: 0033:0x7fa6d607e169 [ 91.179592][ T7144] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 91.179612][ T7144] RSP: 002b:00007fa6d46e7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 91.179654][ T7144] RAX: ffffffffffffffda RBX: 00007fa6d62a5fa0 RCX: 00007fa6d607e169 [ 91.179666][ T7144] RDX: 0000000000000001 RSI: 0000200000000240 RDI: 0000000000000003 [ 91.179749][ T7144] RBP: 00007fa6d46e7090 R08: 0000000000000000 R09: 0000000000000000 [ 91.179763][ T7144] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 91.179777][ T7144] R13: 0000000000000000 R14: 00007fa6d62a5fa0 R15: 00007ffd97df04c8 [ 91.179799][ T7144] [ 91.416286][ T7155] FAULT_INJECTION: forcing a failure. [ 91.416286][ T7155] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 91.423024][ T7151] loop5: detected capacity change from 0 to 2048 [ 91.429608][ T7155] CPU: 1 UID: 0 PID: 7155 Comm: syz.0.1413 Not tainted 6.15.0-rc2-syzkaller-00048-gc62f4b82d571 #0 PREEMPT(voluntary) [ 91.429646][ T7155] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 91.429663][ T7155] Call Trace: [ 91.429775][ T7155] [ 91.429785][ T7155] dump_stack_lvl+0xf6/0x150 [ 91.429816][ T7155] dump_stack+0x15/0x1a [ 91.429837][ T7155] should_fail_ex+0x261/0x270 [ 91.429871][ T7155] should_fail_alloc_page+0xfd/0x110 [ 91.429913][ T7155] __alloc_frozen_pages_noprof+0x11d/0x360 [ 91.430027][ T7155] alloc_pages_mpol+0xb6/0x260 [ 91.430064][ T7155] folio_alloc_mpol_noprof+0x36/0x80 [ 91.430097][ T7155] shmem_get_folio_gfp+0x3c1/0xd30 [ 91.430226][ T7155] shmem_write_begin+0xa7/0x190 [ 91.430299][ T7155] generic_perform_write+0x189/0x4b0 [ 91.430334][ T7155] shmem_file_write_iter+0xc2/0xe0 [ 91.430360][ T7155] do_iter_readv_writev+0x40d/0x4b0 [ 91.430394][ T7155] vfs_writev+0x2da/0x880 [ 91.430414][ T7155] ? get_pid_task+0x94/0xd0 [ 91.430455][ T7155] __se_sys_pwritev2+0x103/0x1d0 [ 91.430553][ T7155] __x64_sys_pwritev2+0x78/0x90 [ 91.430593][ T7155] x64_sys_call+0x1c86/0x2e10 [ 91.430637][ T7155] do_syscall_64+0xc9/0x1c0 [ 91.430737][ T7155] ? clear_bhb_loop+0x25/0x80 [ 91.430770][ T7155] ? clear_bhb_loop+0x25/0x80 [ 91.430797][ T7155] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.430823][ T7155] RIP: 0033:0x7fa6d607e169 [ 91.430842][ T7155] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 91.430865][ T7155] RSP: 002b:00007fa6d46e7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 91.430892][ T7155] RAX: ffffffffffffffda RBX: 00007fa6d62a5fa0 RCX: 00007fa6d607e169 [ 91.430907][ T7155] RDX: 0000000000000001 RSI: 00002000000001c0 RDI: 0000000000000003 [ 91.430922][ T7155] RBP: 00007fa6d46e7090 R08: 0000000000000000 R09: 0000000000000000 [ 91.430937][ T7155] R10: 0000000000000e7b R11: 0000000000000246 R12: 0000000000000001 [ 91.430978][ T7155] R13: 0000000000000000 R14: 00007fa6d62a5fa0 R15: 00007ffd97df04c8 [ 91.431001][ T7155] [ 91.456509][ T7157] 9pnet_fd: Insufficient options for proto=fd [ 91.601101][ T7151] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 91.666610][ T7151] ext4 filesystem being mounted at /100/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 91.680024][ T7171] FAULT_INJECTION: forcing a failure. [ 91.680024][ T7171] name failslab, interval 1, probability 0, space 0, times 0 [ 91.683462][ T7151] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.1415: bg 0: block 345: padding at end of block bitmap is not set [ 91.692715][ T7171] CPU: 1 UID: 0 PID: 7171 Comm: syz.6.1420 Not tainted 6.15.0-rc2-syzkaller-00048-gc62f4b82d571 #0 PREEMPT(voluntary) [ 91.692761][ T7171] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 91.692851][ T7171] Call Trace: [ 91.692860][ T7171] [ 91.692911][ T7171] dump_stack_lvl+0xf6/0x150 [ 91.692941][ T7171] dump_stack+0x15/0x1a [ 91.692962][ T7171] should_fail_ex+0x261/0x270 [ 91.692996][ T7171] should_failslab+0x8f/0xb0 [ 91.693035][ T7171] __kmalloc_noprof+0xad/0x410 [ 91.693077][ T7171] ? sk_prot_alloc+0xab/0x190 [ 91.693106][ T7171] ? should_failslab+0x8f/0xb0 [ 91.693150][ T7171] sk_prot_alloc+0xab/0x190 [ 91.693182][ T7171] sk_alloc+0x33/0x360 [ 91.693210][ T7171] ? bpf_prog_test_run_skb+0x231/0xbe0 [ 91.693241][ T7171] bpf_prog_test_run_skb+0x26c/0xbe0 [ 91.693292][ T7171] ? __fget_files+0x186/0x1c0 [ 91.693318][ T7171] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 91.693349][ T7171] bpf_prog_test_run+0x20e/0x3a0 [ 91.693414][ T7171] __sys_bpf+0x440/0x800 [ 91.693448][ T7171] __x64_sys_bpf+0x43/0x50 [ 91.693471][ T7171] x64_sys_call+0x23da/0x2e10 [ 91.693498][ T7171] do_syscall_64+0xc9/0x1c0 [ 91.693567][ T7171] ? clear_bhb_loop+0x25/0x80 [ 91.693593][ T7171] ? clear_bhb_loop+0x25/0x80 [ 91.693621][ T7171] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.693648][ T7171] RIP: 0033:0x7eff30f1e169 [ 91.693666][ T7171] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 91.693774][ T7171] RSP: 002b:00007eff2f587038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 91.693798][ T7171] RAX: ffffffffffffffda RBX: 00007eff31145fa0 RCX: 00007eff30f1e169 [ 91.693813][ T7171] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 91.693854][ T7171] RBP: 00007eff2f587090 R08: 0000000000000000 R09: 0000000000000000 [ 91.693868][ T7171] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 91.693883][ T7171] R13: 0000000000000000 R14: 00007eff31145fa0 R15: 00007ffd96e8c1a8 [ 91.693908][ T7171] [ 91.802414][ T7177] FAULT_INJECTION: forcing a failure. [ 91.802414][ T7177] name failslab, interval 1, probability 0, space 0, times 0 [ 91.805101][ T7151] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 1 with error 117 [ 91.808950][ T7177] CPU: 1 UID: 0 PID: 7177 Comm: syz.6.1423 Not tainted 6.15.0-rc2-syzkaller-00048-gc62f4b82d571 #0 PREEMPT(voluntary) [ 91.809052][ T7177] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 91.809075][ T7177] Call Trace: [ 91.809085][ T7177] [ 91.809156][ T7177] dump_stack_lvl+0xf6/0x150 [ 91.809186][ T7177] dump_stack+0x15/0x1a [ 91.809207][ T7177] should_fail_ex+0x261/0x270 [ 91.809311][ T7177] should_failslab+0x8f/0xb0 [ 91.809349][ T7177] kmem_cache_alloc_node_noprof+0x5c/0x340 [ 91.809379][ T7177] ? __alloc_skb+0x10d/0x320 [ 91.809435][ T7177] __alloc_skb+0x10d/0x320 [ 91.809492][ T7177] ? audit_log_start+0x37f/0x6e0 [ 91.809523][ T7177] audit_log_start+0x39a/0x6e0 [ 91.809574][ T7177] ? kstrtouint+0x7b/0xc0 [ 91.809605][ T7177] audit_seccomp+0x4b/0x130 [ 91.809691][ T7177] __seccomp_filter+0x694/0x10e0 [ 91.809745][ T7177] ? vfs_write+0x669/0x950 [ 91.809801][ T7177] __secure_computing+0x7e/0x160 [ 91.809889][ T7177] syscall_trace_enter+0xcf/0x1f0 [ 91.809928][ T7177] do_syscall_64+0xaa/0x1c0 [ 91.809967][ T7177] ? clear_bhb_loop+0x25/0x80 [ 91.809993][ T7177] ? clear_bhb_loop+0x25/0x80 [ 91.810078][ T7177] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.810104][ T7177] RIP: 0033:0x7eff30f1e169 [ 91.810123][ T7177] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 91.810146][ T7177] RSP: 002b:00007eff2f587038 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 91.810169][ T7177] RAX: ffffffffffffffda RBX: 00007eff31145fa0 RCX: 00007eff30f1e169 [ 91.810263][ T7177] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 91.810278][ T7177] RBP: 00007eff2f587090 R08: 00002000000003c0 R09: 0000000000000000 [ 91.810293][ T7177] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 91.810307][ T7177] R13: 0000000000000000 R14: 00007eff31145fa0 R15: 00007ffd96e8c1a8 [ 91.810332][ T7177] [ 91.866070][ T7181] loop6: detected capacity change from 0 to 164 [ 91.870421][ T7151] EXT4-fs (loop5): This should not happen!! Data will be lost [ 91.870421][ T7151] [ 92.155785][ T7169] Process accounting resumed [ 92.193085][ T5845] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.233373][ T7194] __nla_validate_parse: 24 callbacks suppressed [ 92.233409][ T7194] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1431'. [ 92.359091][ T7214] loop5: detected capacity change from 0 to 512 [ 92.369206][ T7214] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 92.380076][ T7206] Process accounting resumed [ 92.390208][ T7214] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 92.425729][ T7214] ext4 filesystem being mounted at /105/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 92.440440][ T7212] FAULT_INJECTION: forcing a failure. [ 92.440440][ T7212] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 92.453715][ T7212] CPU: 0 UID: 0 PID: 7212 Comm: syz.0.1439 Not tainted 6.15.0-rc2-syzkaller-00048-gc62f4b82d571 #0 PREEMPT(voluntary) [ 92.453747][ T7212] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 92.453759][ T7212] Call Trace: [ 92.453765][ T7212] [ 92.453772][ T7212] dump_stack_lvl+0xf6/0x150 [ 92.453800][ T7212] dump_stack+0x15/0x1a [ 92.453906][ T7212] should_fail_ex+0x261/0x270 [ 92.453937][ T7212] should_fail+0xb/0x10 [ 92.454006][ T7212] should_fail_usercopy+0x1a/0x20 [ 92.454040][ T7212] _copy_to_user+0x20/0xa0 [ 92.454079][ T7212] simple_read_from_buffer+0xb2/0x130 [ 92.454144][ T7212] proc_fail_nth_read+0x103/0x140 [ 92.454170][ T7212] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 92.454192][ T7212] vfs_read+0x1b2/0x710 [ 92.454270][ T7212] ? __rcu_read_unlock+0x4e/0x70 [ 92.454305][ T7212] ? __fget_files+0x186/0x1c0 [ 92.454331][ T7212] ksys_read+0xeb/0x1b0 [ 92.454365][ T7212] __x64_sys_read+0x42/0x50 [ 92.454399][ T7212] x64_sys_call+0x2a3b/0x2e10 [ 92.454496][ T7212] do_syscall_64+0xc9/0x1c0 [ 92.454532][ T7212] ? clear_bhb_loop+0x25/0x80 [ 92.454597][ T7212] ? clear_bhb_loop+0x25/0x80 [ 92.454623][ T7212] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.454647][ T7212] RIP: 0033:0x7fa6d607cb7c [ 92.454664][ T7212] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 92.454732][ T7212] RSP: 002b:00007fa6d46e7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 92.454751][ T7212] RAX: ffffffffffffffda RBX: 00007fa6d62a5fa0 RCX: 00007fa6d607cb7c [ 92.454763][ T7212] RDX: 000000000000000f RSI: 00007fa6d46e70a0 RDI: 0000000000000007 [ 92.454853][ T7212] RBP: 00007fa6d46e7090 R08: 0000000000000000 R09: 0000000000000000 [ 92.454868][ T7212] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 92.454881][ T7212] R13: 0000000000000000 R14: 00007fa6d62a5fa0 R15: 00007ffd97df04c8 [ 92.454969][ T7212] [ 92.659695][ T7221] loop6: detected capacity change from 0 to 512 [ 92.669068][ T7214] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.1440: bg 0: block 304: padding at end of block bitmap is not set [ 92.684343][ T7214] EXT4-fs (loop5): Remounting filesystem read-only [ 92.707062][ T7221] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 92.721596][ T7221] ext4 filesystem being mounted at /61/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 92.782358][ T5845] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.863897][ T7221] EXT4-fs error (device loop6): ext4_do_update_inode:5211: inode #2: comm syz.6.1441: corrupted inode contents [ 92.946158][ T7221] EXT4-fs error (device loop6): ext4_dirty_inode:6103: inode #2: comm syz.6.1441: mark_inode_dirty error [ 92.961851][ T7221] EXT4-fs error (device loop6): ext4_do_update_inode:5211: inode #2: comm syz.6.1441: corrupted inode contents [ 92.975603][ T7221] EXT4-fs error (device loop6): __ext4_ext_dirty:207: inode #2: comm syz.6.1441: mark_inode_dirty error [ 93.071768][ T7249] Process accounting resumed [ 93.145424][ T7257] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1455'. [ 93.159664][ T7257] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 93.168476][ T7257] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 93.177492][ T7257] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 93.186419][ T7257] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 93.209070][ T7257] vxlan0: entered promiscuous mode [ 93.214288][ T7257] vxlan0: entered allmulticast mode [ 93.215807][ T6265] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.279618][ T7264] loop1: detected capacity change from 0 to 1024 [ 93.349653][ T7264] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 93.368720][ T7264] ext4 filesystem being mounted at /239/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 93.429403][ T7281] Process accounting resumed [ 93.460578][ T7289] loop3: detected capacity change from 0 to 1024 [ 93.528171][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.556573][ T7289] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 93.601963][ T7289] ext4 filesystem being mounted at /313/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 93.638679][ T7309] Process accounting resumed [ 93.699230][ T7289] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1467: bg 0: block 393: padding at end of block bitmap is not set [ 93.723595][ T7289] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 2035 with error 117 [ 93.736416][ T7289] EXT4-fs (loop3): This should not happen!! Data will be lost [ 93.736416][ T7289] [ 93.763142][ T7318] ALSA: seq fatal error: cannot create timer (-19) [ 93.785480][ T3438] Process accounting resumed [ 93.821770][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.844391][ T7326] FAULT_INJECTION: forcing a failure. [ 93.844391][ T7326] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 93.857713][ T7326] CPU: 1 UID: 0 PID: 7326 Comm: syz.3.1481 Not tainted 6.15.0-rc2-syzkaller-00048-gc62f4b82d571 #0 PREEMPT(voluntary) [ 93.857747][ T7326] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 93.857762][ T7326] Call Trace: [ 93.857770][ T7326] [ 93.857796][ T7326] dump_stack_lvl+0xf6/0x150 [ 93.857824][ T7326] dump_stack+0x15/0x1a [ 93.857842][ T7326] should_fail_ex+0x261/0x270 [ 93.857869][ T7326] should_fail+0xb/0x10 [ 93.857891][ T7326] should_fail_usercopy+0x1a/0x20 [ 93.858004][ T7326] _copy_from_iter+0xd8/0xd10 [ 93.858044][ T7326] ? kmalloc_reserve+0x16e/0x190 [ 93.858070][ T7326] ? __build_skb_around+0x199/0x1f0 [ 93.858175][ T7326] ? __alloc_skb+0x227/0x320 [ 93.858197][ T7326] ? __virt_addr_valid+0x1ed/0x250 [ 93.858280][ T7326] ? __check_object_size+0x367/0x510 [ 93.858312][ T7326] netlink_sendmsg+0x492/0x720 [ 93.858369][ T7326] ? __pfx_netlink_sendmsg+0x10/0x10 [ 93.858393][ T7326] __sock_sendmsg+0x140/0x180 [ 93.858411][ T7326] ____sys_sendmsg+0x350/0x4e0 [ 93.858445][ T7326] __sys_sendmsg+0x1a0/0x240 [ 93.858570][ T7326] __x64_sys_sendmsg+0x46/0x50 [ 93.858601][ T7326] x64_sys_call+0x26f3/0x2e10 [ 93.858623][ T7326] do_syscall_64+0xc9/0x1c0 [ 93.858719][ T7326] ? clear_bhb_loop+0x25/0x80 [ 93.858745][ T7326] ? clear_bhb_loop+0x25/0x80 [ 93.858804][ T7326] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.858870][ T7326] RIP: 0033:0x7fd13167e169 [ 93.858887][ T7326] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 93.858908][ T7326] RSP: 002b:00007fd12fce7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 93.858931][ T7326] RAX: ffffffffffffffda RBX: 00007fd1318a5fa0 RCX: 00007fd13167e169 [ 93.858945][ T7326] RDX: 0000000000000000 RSI: 0000200000001080 RDI: 0000000000000003 [ 93.858956][ T7326] RBP: 00007fd12fce7090 R08: 0000000000000000 R09: 0000000000000000 [ 93.858967][ T7326] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 93.859040][ T7326] R13: 0000000000000000 R14: 00007fd1318a5fa0 R15: 00007fff37014738 [ 93.859063][ T7326] [ 94.117697][ T7332] netlink: 8 bytes leftover after parsing attributes in process `+}[@'. [ 94.144819][ T29] kauditd_printk_skb: 613 callbacks suppressed [ 94.144838][ T29] audit: type=1400 audit(1744841127.860:6694): avc: denied { write } for pid=7331 comm="+}[@" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 94.159625][ T7340] 9pnet_fd: Insufficient options for proto=fd [ 94.170955][ T29] audit: type=1400 audit(1744841127.860:6695): avc: denied { nlmsg_write } for pid=7331 comm="+}[@" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 94.208533][ T7342] loop3: detected capacity change from 0 to 1024 [ 94.226557][ T7342] ext4: Unknown parameter './file1' [ 94.249910][ T7350] FAULT_INJECTION: forcing a failure. [ 94.249910][ T7350] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 94.263762][ T7350] CPU: 0 UID: 0 PID: 7350 Comm: syz.5.1491 Not tainted 6.15.0-rc2-syzkaller-00048-gc62f4b82d571 #0 PREEMPT(voluntary) [ 94.263793][ T7350] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 94.263806][ T7350] Call Trace: [ 94.263813][ T7350] [ 94.263821][ T7350] dump_stack_lvl+0xf6/0x150 [ 94.263939][ T7350] dump_stack+0x15/0x1a [ 94.263960][ T7350] should_fail_ex+0x261/0x270 [ 94.263994][ T7350] should_fail+0xb/0x10 [ 94.264100][ T7350] should_fail_usercopy+0x1a/0x20 [ 94.264203][ T7350] strncpy_from_user+0x25/0x230 [ 94.264226][ T7350] ? getname_flags+0x81/0x3b0 [ 94.264325][ T7350] getname_flags+0xb0/0x3b0 [ 94.264350][ T7350] user_path_at+0x26/0x140 [ 94.264378][ T7350] do_faccessat+0x3aa/0x6e0 [ 94.264439][ T7350] __x64_sys_faccessat+0x43/0x50 [ 94.264471][ T7350] x64_sys_call+0x27d9/0x2e10 [ 94.264510][ T7350] do_syscall_64+0xc9/0x1c0 [ 94.264544][ T7350] ? clear_bhb_loop+0x25/0x80 [ 94.264570][ T7350] ? clear_bhb_loop+0x25/0x80 [ 94.264609][ T7350] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.264630][ T7350] RIP: 0033:0x7fb4de63e169 [ 94.264665][ T7350] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 94.264686][ T7350] RSP: 002b:00007fb4dcca7038 EFLAGS: 00000246 ORIG_RAX: 000000000000010d [ 94.264715][ T7350] RAX: ffffffffffffffda RBX: 00007fb4de865fa0 RCX: 00007fb4de63e169 [ 94.264729][ T7350] RDX: 0000000000000005 RSI: 0000200000000000 RDI: 0000000000000005 [ 94.264743][ T7350] RBP: 00007fb4dcca7090 R08: 0000000000000000 R09: 0000000000000000 [ 94.264757][ T7350] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 94.264771][ T7350] R13: 0000000000000000 R14: 00007fb4de865fa0 R15: 00007ffc7f0bbf68 [ 94.264796][ T7350] [ 94.492112][ T29] audit: type=1326 audit(1744841128.210:6696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7356 comm="syz.6.1494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff30f1e169 code=0x7ffc0000 [ 94.492484][ T7360] syz_tun: entered allmulticast mode [ 94.515775][ T29] audit: type=1326 audit(1744841128.210:6697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7356 comm="syz.6.1494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff30f1e169 code=0x7ffc0000 [ 94.545220][ T29] audit: type=1326 audit(1744841128.210:6698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7356 comm="syz.6.1494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7eff30f1e169 code=0x7ffc0000 [ 94.570335][ T29] audit: type=1326 audit(1744841128.210:6699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7356 comm="syz.6.1494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff30f1e169 code=0x7ffc0000 [ 94.594097][ T29] audit: type=1326 audit(1744841128.210:6700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7356 comm="syz.6.1494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff30f1e169 code=0x7ffc0000 [ 94.618048][ T29] audit: type=1326 audit(1744841128.210:6701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7356 comm="syz.6.1494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7eff30f1e169 code=0x7ffc0000 [ 94.643037][ T29] audit: type=1326 audit(1744841128.210:6702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7356 comm="syz.6.1494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff30f1e169 code=0x7ffc0000 [ 94.666768][ T29] audit: type=1326 audit(1744841128.210:6703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7356 comm="syz.6.1494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7eff30f1e169 code=0x7ffc0000 [ 94.670383][ T7364] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1492'. [ 94.699550][ T7364] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1492'. [ 94.699673][ T7366] loop3: detected capacity change from 0 to 1024 [ 94.737814][ T7364] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 94.755240][ T7366] ext4 filesystem being mounted at /318/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 94.771165][ T7364] gretap1: entered promiscuous mode [ 94.776603][ T7364] gretap1: entered allmulticast mode [ 94.843287][ T7366] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1497: bg 0: block 393: padding at end of block bitmap is not set [ 94.864686][ T7361] syz_tun: left allmulticast mode [ 94.890572][ T7366] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 2035 with error 117 [ 94.891647][ T7379] 9pnet_fd: Insufficient options for proto=fd [ 94.903352][ T7366] EXT4-fs (loop3): This should not happen!! Data will be lost [ 94.903352][ T7366] [ 94.944054][ T7366] ALSA: seq fatal error: cannot create timer (-19) [ 94.950985][ T7366] FAULT_INJECTION: forcing a failure. [ 94.950985][ T7366] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 94.964551][ T7366] CPU: 1 UID: 0 PID: 7366 Comm: syz.3.1497 Not tainted 6.15.0-rc2-syzkaller-00048-gc62f4b82d571 #0 PREEMPT(voluntary) [ 94.964583][ T7366] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 94.964602][ T7366] Call Trace: [ 94.964656][ T7366] [ 94.964666][ T7366] dump_stack_lvl+0xf6/0x150 [ 94.964699][ T7366] dump_stack+0x15/0x1a [ 94.964717][ T7366] should_fail_ex+0x261/0x270 [ 94.964821][ T7366] should_fail+0xb/0x10 [ 94.964845][ T7366] should_fail_usercopy+0x1a/0x20 [ 94.964938][ T7366] _copy_from_user+0x1c/0xa0 [ 94.964971][ T7366] copy_from_sockptr_offset+0x6d/0xb0 [ 94.965082][ T7366] do_ip6t_set_ctl+0x693/0x8c0 [ 94.965119][ T7366] ? kstrtouint+0x7b/0xc0 [ 94.965152][ T7366] nf_setsockopt+0x195/0x1b0 [ 94.965198][ T7366] ipv6_setsockopt+0x10f/0x130 [ 94.965233][ T7366] tcp_setsockopt+0x93/0xb0 [ 94.965308][ T7366] sock_common_setsockopt+0x64/0x80 [ 94.965328][ T7366] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 94.965348][ T7366] __sys_setsockopt+0x187/0x200 [ 94.965383][ T7366] __x64_sys_setsockopt+0x66/0x80 [ 94.965423][ T7366] x64_sys_call+0x2a09/0x2e10 [ 94.965450][ T7366] do_syscall_64+0xc9/0x1c0 [ 94.965485][ T7366] ? clear_bhb_loop+0x25/0x80 [ 94.965506][ T7366] ? clear_bhb_loop+0x25/0x80 [ 94.965605][ T7366] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.965625][ T7366] RIP: 0033:0x7fd13167e169 [ 94.965640][ T7366] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 94.965658][ T7366] RSP: 002b:00007fd12fce7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 94.965682][ T7366] RAX: ffffffffffffffda RBX: 00007fd1318a5fa0 RCX: 00007fd13167e169 [ 94.965764][ T7366] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 000000000000000c [ 94.965789][ T7366] RBP: 00007fd12fce7090 R08: 0000000000000518 R09: 0000000000000000 [ 94.965803][ T7366] R10: 0000200000000b40 R11: 0000000000000246 R12: 0000000000000001 [ 94.965816][ T7366] R13: 0000000000000000 R14: 00007fd1318a5fa0 R15: 00007fff37014738 [ 94.965839][ T7366] [ 95.202481][ T7388] FAULT_INJECTION: forcing a failure. [ 95.202481][ T7388] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 95.216879][ T7388] CPU: 1 UID: 0 PID: 7388 Comm: syz.1.1506 Not tainted 6.15.0-rc2-syzkaller-00048-gc62f4b82d571 #0 PREEMPT(voluntary) [ 95.216911][ T7388] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 95.216930][ T7388] Call Trace: [ 95.216965][ T7388] [ 95.216972][ T7388] dump_stack_lvl+0xf6/0x150 [ 95.217000][ T7388] dump_stack+0x15/0x1a [ 95.217020][ T7388] should_fail_ex+0x261/0x270 [ 95.217051][ T7388] should_fail+0xb/0x10 [ 95.217074][ T7388] should_fail_usercopy+0x1a/0x20 [ 95.217139][ T7388] _copy_from_user+0x1c/0xa0 [ 95.217228][ T7388] __se_sys_mount+0x11b/0x2e0 [ 95.217262][ T7388] ? ksys_write+0x180/0x1b0 [ 95.217291][ T7388] __x64_sys_mount+0x67/0x80 [ 95.217324][ T7388] x64_sys_call+0xd11/0x2e10 [ 95.217345][ T7388] do_syscall_64+0xc9/0x1c0 [ 95.217423][ T7388] ? clear_bhb_loop+0x25/0x80 [ 95.217444][ T7388] ? clear_bhb_loop+0x25/0x80 [ 95.217505][ T7388] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.217525][ T7388] RIP: 0033:0x7f6e3356e169 [ 95.217583][ T7388] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 95.217600][ T7388] RSP: 002b:00007f6e31bd7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 95.217618][ T7388] RAX: ffffffffffffffda RBX: 00007f6e33795fa0 RCX: 00007f6e3356e169 [ 95.217630][ T7388] RDX: 00002000000000c0 RSI: 0000200000000080 RDI: 0000000000000000 [ 95.217642][ T7388] RBP: 00007f6e31bd7090 R08: 0000200000000000 R09: 0000000000000000 [ 95.217653][ T7388] R10: 0000000001000000 R11: 0000000000000246 R12: 0000000000000001 [ 95.217664][ T7388] R13: 0000000000000000 R14: 00007f6e33795fa0 R15: 00007ffe2440b018 [ 95.217684][ T7388] [ 95.445216][ T7400] 9pnet_fd: Insufficient options for proto=fd [ 95.490370][ T7402] futex_wake_op: syz.5.1512 tries to shift op by -1; fix this program [ 95.531516][ T7402] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1512'. [ 95.547731][ T7405] loop3: detected capacity change from 0 to 164 [ 95.570849][ T7405] bio_check_eod: 2 callbacks suppressed [ 95.570865][ T7405] syz.3.1513: attempt to access beyond end of device [ 95.570865][ T7405] loop3: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 95.608983][ T7405] syz.3.1513: attempt to access beyond end of device [ 95.608983][ T7405] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 96.110159][ T7438] loop1: detected capacity change from 0 to 2048 [ 96.152042][ T7438] Option ' ' to dns_resolver key: bad/missing value [ 96.206352][ T7444] loop1: detected capacity change from 0 to 512 [ 96.226935][ T7444] ext4 filesystem being mounted at /248/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 96.249032][ T7444] EXT4-fs error (device loop1): ext4_do_update_inode:5211: inode #2: comm syz.1.1530: corrupted inode contents [ 96.266045][ T7444] EXT4-fs error (device loop1): ext4_dirty_inode:6103: inode #2: comm syz.1.1530: mark_inode_dirty error [ 96.278003][ T7444] EXT4-fs error (device loop1): ext4_do_update_inode:5211: inode #2: comm syz.1.1530: corrupted inode contents [ 96.290288][ T7444] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #2: comm syz.1.1530: mark_inode_dirty error [ 96.607064][ T7461] dummy0 speed is unknown, defaulting to 1000 [ 96.849376][ T7478] FAULT_INJECTION: forcing a failure. [ 96.849376][ T7478] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 96.862653][ T7478] CPU: 1 UID: 0 PID: 7478 Comm: syz.5.1543 Not tainted 6.15.0-rc2-syzkaller-00048-gc62f4b82d571 #0 PREEMPT(voluntary) [ 96.862719][ T7478] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 96.862733][ T7478] Call Trace: [ 96.862739][ T7478] [ 96.862768][ T7478] dump_stack_lvl+0xf6/0x150 [ 96.862833][ T7478] dump_stack+0x15/0x1a [ 96.862854][ T7478] should_fail_ex+0x261/0x270 [ 96.862885][ T7478] should_fail+0xb/0x10 [ 96.862991][ T7478] should_fail_usercopy+0x1a/0x20 [ 96.863026][ T7478] _copy_from_iter+0xd8/0xd10 [ 96.863108][ T7478] ? kmalloc_reserve+0x16e/0x190 [ 96.863137][ T7478] ? __build_skb_around+0x199/0x1f0 [ 96.863179][ T7478] ? __alloc_skb+0x227/0x320 [ 96.863205][ T7478] ? __virt_addr_valid+0x1ed/0x250 [ 96.863239][ T7478] ? __check_object_size+0x367/0x510 [ 96.863271][ T7478] netlink_sendmsg+0x492/0x720 [ 96.863309][ T7478] ? __pfx_netlink_sendmsg+0x10/0x10 [ 96.863383][ T7478] __sock_sendmsg+0x140/0x180 [ 96.863407][ T7478] ____sys_sendmsg+0x350/0x4e0 [ 96.863482][ T7478] __sys_sendmsg+0x1a0/0x240 [ 96.863529][ T7478] __x64_sys_sendmsg+0x46/0x50 [ 96.863560][ T7478] x64_sys_call+0x26f3/0x2e10 [ 96.863581][ T7478] do_syscall_64+0xc9/0x1c0 [ 96.863696][ T7478] ? clear_bhb_loop+0x25/0x80 [ 96.863722][ T7478] ? clear_bhb_loop+0x25/0x80 [ 96.863747][ T7478] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.863788][ T7478] RIP: 0033:0x7fb4de63e169 [ 96.863804][ T7478] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 96.863824][ T7478] RSP: 002b:00007fb4dcca7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 96.863846][ T7478] RAX: ffffffffffffffda RBX: 00007fb4de865fa0 RCX: 00007fb4de63e169 [ 96.863861][ T7478] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 96.863876][ T7478] RBP: 00007fb4dcca7090 R08: 0000000000000000 R09: 0000000000000000 [ 96.863950][ T7478] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 96.863964][ T7478] R13: 0000000000000000 R14: 00007fb4de865fa0 R15: 00007ffc7f0bbf68 [ 96.863987][ T7478] [ 97.114872][ T7482] loop5: detected capacity change from 0 to 164 [ 97.130349][ T7482] syz.5.1545: attempt to access beyond end of device [ 97.130349][ T7482] loop5: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 97.144580][ T7482] syz.5.1545: attempt to access beyond end of device [ 97.144580][ T7482] loop5: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 97.502900][ T7494] loop6: detected capacity change from 0 to 1024 [ 97.708984][ T7517] 9pnet_fd: Insufficient options for proto=fd [ 97.731051][ T7525] loop5: detected capacity change from 0 to 164 [ 97.751263][ T7525] FAULT_INJECTION: forcing a failure. [ 97.751263][ T7525] name failslab, interval 1, probability 0, space 0, times 0 [ 97.764317][ T7525] CPU: 0 UID: 0 PID: 7525 Comm: syz.5.1561 Not tainted 6.15.0-rc2-syzkaller-00048-gc62f4b82d571 #0 PREEMPT(voluntary) [ 97.764348][ T7525] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 97.764362][ T7525] Call Trace: [ 97.764369][ T7525] [ 97.764375][ T7525] dump_stack_lvl+0xf6/0x150 [ 97.764409][ T7525] dump_stack+0x15/0x1a [ 97.764483][ T7525] should_fail_ex+0x261/0x270 [ 97.764514][ T7525] should_failslab+0x8f/0xb0 [ 97.764608][ T7525] kmem_cache_alloc_noprof+0x59/0x340 [ 97.764701][ T7525] ? security_file_alloc+0x32/0x100 [ 97.764723][ T7525] security_file_alloc+0x32/0x100 [ 97.764744][ T7525] init_file+0x5e/0x1e0 [ 97.764769][ T7525] alloc_empty_file+0x8e/0x200 [ 97.764804][ T7525] path_openat+0x6f/0x2000 [ 97.764833][ T7525] ? mntput+0x49/0x70 [ 97.764864][ T7525] ? path_openat+0x1ab2/0x2000 [ 97.764892][ T7525] ? _parse_integer_limit+0x167/0x180 [ 97.764920][ T7525] do_filp_open+0x115/0x240 [ 97.764989][ T7525] do_open_execat+0xd5/0x280 [ 97.765016][ T7525] alloc_bprm+0x2a/0x680 [ 97.765052][ T7525] do_execveat_common+0x12b/0x7e0 [ 97.765087][ T7525] ? getname_flags+0x15a/0x3b0 [ 97.765111][ T7525] __x64_sys_execveat+0x75/0x90 [ 97.765222][ T7525] x64_sys_call+0x2ac7/0x2e10 [ 97.765244][ T7525] do_syscall_64+0xc9/0x1c0 [ 97.765274][ T7525] ? clear_bhb_loop+0x25/0x80 [ 97.765369][ T7525] ? clear_bhb_loop+0x25/0x80 [ 97.765392][ T7525] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.765468][ T7525] RIP: 0033:0x7fb4de63e169 [ 97.765484][ T7525] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 97.765537][ T7525] RSP: 002b:00007fb4dcca7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 97.765555][ T7525] RAX: ffffffffffffffda RBX: 00007fb4de865fa0 RCX: 00007fb4de63e169 [ 97.765566][ T7525] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 97.765579][ T7525] RBP: 00007fb4dcca7090 R08: 0000000000001000 R09: 0000000000000000 [ 97.765592][ T7525] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 97.765605][ T7525] R13: 0000000000000000 R14: 00007fb4de865fa0 R15: 00007ffc7f0bbf68 [ 97.765625][ T7525] [ 97.818446][ T7519] bond0: entered promiscuous mode [ 97.818467][ T7519] bond_slave_0: entered promiscuous mode [ 97.818641][ T7519] bond_slave_1: entered promiscuous mode [ 98.010781][ T7519] batadv0: entered promiscuous mode [ 98.017090][ T7519] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 98.028738][ T7519] bond0: left promiscuous mode [ 98.033653][ T7519] bond_slave_0: left promiscuous mode [ 98.039319][ T7519] bond_slave_1: left promiscuous mode [ 98.046399][ T7519] batadv0: left promiscuous mode [ 98.054778][ T7533] loop5: detected capacity change from 0 to 512 [ 98.063310][ T7528] Process accounting resumed [ 98.181261][ T7533] ext4 filesystem being mounted at /138/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 98.193997][ T7533] FAULT_INJECTION: forcing a failure. [ 98.193997][ T7533] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 98.207669][ T7533] CPU: 1 UID: 0 PID: 7533 Comm: syz.5.1565 Not tainted 6.15.0-rc2-syzkaller-00048-gc62f4b82d571 #0 PREEMPT(voluntary) [ 98.207702][ T7533] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 98.207716][ T7533] Call Trace: [ 98.207751][ T7533] [ 98.207759][ T7533] dump_stack_lvl+0xf6/0x150 [ 98.207784][ T7533] dump_stack+0x15/0x1a [ 98.207804][ T7533] should_fail_ex+0x261/0x270 [ 98.207887][ T7533] should_fail+0xb/0x10 [ 98.207915][ T7533] should_fail_usercopy+0x1a/0x20 [ 98.207949][ T7533] strncpy_from_user+0x25/0x230 [ 98.207975][ T7533] ? getname_flags+0x81/0x3b0 [ 98.208002][ T7533] getname_flags+0xb0/0x3b0 [ 98.208026][ T7533] user_path_at+0x26/0x140 [ 98.208096][ T7533] do_fchownat+0x9a/0x1b0 [ 98.208128][ T7533] __x64_sys_lchown+0x4a/0x60 [ 98.208152][ T7533] x64_sys_call+0x1c04/0x2e10 [ 98.208178][ T7533] do_syscall_64+0xc9/0x1c0 [ 98.208207][ T7533] ? clear_bhb_loop+0x25/0x80 [ 98.208242][ T7533] ? clear_bhb_loop+0x25/0x80 [ 98.208264][ T7533] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.208340][ T7533] RIP: 0033:0x7fb4de63e169 [ 98.208358][ T7533] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 98.208379][ T7533] RSP: 002b:00007fb4dcca7038 EFLAGS: 00000246 ORIG_RAX: 000000000000005e [ 98.208402][ T7533] RAX: ffffffffffffffda RBX: 00007fb4de865fa0 RCX: 00007fb4de63e169 [ 98.208416][ T7533] RDX: 000000000000ee01 RSI: ffffffffffffffff RDI: 0000200000000e40 [ 98.208431][ T7533] RBP: 00007fb4dcca7090 R08: 0000000000000000 R09: 0000000000000000 [ 98.208445][ T7533] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 98.208459][ T7533] R13: 0000000000000000 R14: 00007fb4de865fa0 R15: 00007ffc7f0bbf68 [ 98.208490][ T7533] [ 98.427883][ T7535] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1566'. [ 98.440000][ T5845] EXT4-fs unmount: 5 callbacks suppressed [ 98.440021][ T5845] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.292255][ T7558] 9pnet_fd: Insufficient options for proto=fd [ 99.360883][ T29] kauditd_printk_skb: 345 callbacks suppressed [ 99.360900][ T29] audit: type=1326 audit(1744841133.080:7049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7562 comm="syz.0.1575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6d607e169 code=0x7ffc0000 [ 99.391312][ T29] audit: type=1326 audit(1744841133.080:7050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7562 comm="syz.0.1575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6d607e169 code=0x7ffc0000 [ 99.433763][ T3375] Process accounting resumed [ 99.495073][ T29] audit: type=1326 audit(1744841133.080:7051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7562 comm="syz.0.1575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa6d607e169 code=0x7ffc0000 [ 99.518875][ T29] audit: type=1326 audit(1744841133.080:7052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7562 comm="syz.0.1575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6d607e169 code=0x7ffc0000 [ 99.542529][ T29] audit: type=1326 audit(1744841133.080:7053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7562 comm="syz.0.1575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6d607e169 code=0x7ffc0000 [ 99.566218][ T29] audit: type=1326 audit(1744841133.090:7054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7562 comm="syz.0.1575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa6d607e169 code=0x7ffc0000 [ 99.590028][ T29] audit: type=1326 audit(1744841133.090:7055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7562 comm="syz.0.1575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6d607e169 code=0x7ffc0000 [ 99.613884][ T29] audit: type=1326 audit(1744841133.090:7056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7562 comm="syz.0.1575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa6d607e169 code=0x7ffc0000 [ 99.637388][ T29] audit: type=1326 audit(1744841133.090:7057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7562 comm="syz.0.1575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6d607e169 code=0x7ffc0000 [ 99.649597][ T7569] Process accounting resumed [ 99.660901][ T29] audit: type=1326 audit(1744841133.090:7058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7562 comm="syz.0.1575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fa6d607e169 code=0x7ffc0000 [ 99.693417][ T7573] FAULT_INJECTION: forcing a failure. [ 99.693417][ T7573] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 99.706580][ T7573] CPU: 0 UID: 0 PID: 7573 Comm: syz.6.1580 Not tainted 6.15.0-rc2-syzkaller-00048-gc62f4b82d571 #0 PREEMPT(voluntary) [ 99.706646][ T7573] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 99.706735][ T7573] Call Trace: [ 99.706773][ T7573] [ 99.706780][ T7573] dump_stack_lvl+0xf6/0x150 [ 99.706805][ T7573] dump_stack+0x15/0x1a [ 99.706823][ T7573] should_fail_ex+0x261/0x270 [ 99.706856][ T7573] should_fail+0xb/0x10 [ 99.706885][ T7573] should_fail_usercopy+0x1a/0x20 [ 99.706973][ T7573] _copy_to_user+0x20/0xa0 [ 99.707138][ T7573] simple_read_from_buffer+0xb2/0x130 [ 99.707177][ T7573] proc_fail_nth_read+0x103/0x140 [ 99.707198][ T7573] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 99.707280][ T7573] vfs_read+0x1b2/0x710 [ 99.707312][ T7573] ? __rcu_read_unlock+0x4e/0x70 [ 99.707344][ T7573] ? __fget_files+0x186/0x1c0 [ 99.707370][ T7573] ksys_read+0xeb/0x1b0 [ 99.707405][ T7573] __x64_sys_read+0x42/0x50 [ 99.707484][ T7573] x64_sys_call+0x2a3b/0x2e10 [ 99.707506][ T7573] do_syscall_64+0xc9/0x1c0 [ 99.707576][ T7573] ? clear_bhb_loop+0x25/0x80 [ 99.707601][ T7573] ? clear_bhb_loop+0x25/0x80 [ 99.707627][ T7573] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.707651][ T7573] RIP: 0033:0x7eff30f1cb7c [ 99.707667][ T7573] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 99.707731][ T7573] RSP: 002b:00007eff2f587030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 99.707754][ T7573] RAX: ffffffffffffffda RBX: 00007eff31145fa0 RCX: 00007eff30f1cb7c [ 99.707768][ T7573] RDX: 000000000000000f RSI: 00007eff2f5870a0 RDI: 0000000000000007 [ 99.707781][ T7573] RBP: 00007eff2f587090 R08: 0000000000000000 R09: 0000000000000000 [ 99.707795][ T7573] R10: 0000000000000020 R11: 0000000000000246 R12: 0000000000000001 [ 99.707810][ T7573] R13: 0000000000000000 R14: 00007eff31145fa0 R15: 00007ffd96e8c1a8 [ 99.707834][ T7573] [ 100.013779][ T7594] batadv1: entered allmulticast mode [ 100.020757][ T7594] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 100.061879][ T7597] loop3: detected capacity change from 0 to 2048 [ 100.076699][ T7597] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 100.089418][ T7597] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.132304][ T7600] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1581'. [ 100.252682][ T7623] loop3: detected capacity change from 0 to 256 [ 100.487042][ T7648] Process accounting resumed [ 100.555531][ T7654] Process accounting resumed [ 100.664079][ T7674] Process accounting resumed [ 100.753039][ T7651] netlink: 96 bytes leftover after parsing attributes in process `syz.5.1612'. [ 100.815564][ T7696] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1634'. [ 100.839664][ T7703] FAULT_INJECTION: forcing a failure. [ 100.839664][ T7703] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 100.852848][ T7703] CPU: 1 UID: 0 PID: 7703 Comm: syz.6.1636 Not tainted 6.15.0-rc2-syzkaller-00048-gc62f4b82d571 #0 PREEMPT(voluntary) [ 100.852882][ T7703] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 100.852897][ T7703] Call Trace: [ 100.852905][ T7703] [ 100.852913][ T7703] dump_stack_lvl+0xf6/0x150 [ 100.853014][ T7703] dump_stack+0x15/0x1a [ 100.853033][ T7703] should_fail_ex+0x261/0x270 [ 100.853065][ T7703] should_fail+0xb/0x10 [ 100.853092][ T7703] should_fail_usercopy+0x1a/0x20 [ 100.853188][ T7703] _copy_from_iter+0xd8/0xd10 [ 100.853224][ T7703] ? kmalloc_reserve+0x16e/0x190 [ 100.853248][ T7703] ? __build_skb_around+0x199/0x1f0 [ 100.853271][ T7703] ? __alloc_skb+0x227/0x320 [ 100.853364][ T7703] ? __virt_addr_valid+0x1ed/0x250 [ 100.853391][ T7703] ? __check_object_size+0x367/0x510 [ 100.853418][ T7703] netlink_sendmsg+0x492/0x720 [ 100.853449][ T7703] ? __pfx_netlink_sendmsg+0x10/0x10 [ 100.853531][ T7703] __sock_sendmsg+0x140/0x180 [ 100.853554][ T7703] ____sys_sendmsg+0x350/0x4e0 [ 100.853587][ T7703] __sys_sendmsg+0x1a0/0x240 [ 100.853653][ T7703] __x64_sys_sendmsg+0x46/0x50 [ 100.853686][ T7703] x64_sys_call+0x26f3/0x2e10 [ 100.853713][ T7703] do_syscall_64+0xc9/0x1c0 [ 100.853828][ T7703] ? clear_bhb_loop+0x25/0x80 [ 100.853856][ T7703] ? clear_bhb_loop+0x25/0x80 [ 100.853877][ T7703] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.853897][ T7703] RIP: 0033:0x7eff30f1e169 [ 100.853912][ T7703] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 100.853931][ T7703] RSP: 002b:00007eff2f587038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 100.853993][ T7703] RAX: ffffffffffffffda RBX: 00007eff31145fa0 RCX: 00007eff30f1e169 [ 100.854005][ T7703] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000006 [ 100.854016][ T7703] RBP: 00007eff2f587090 R08: 0000000000000000 R09: 0000000000000000 [ 100.854030][ T7703] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 100.854044][ T7703] R13: 0000000000000000 R14: 00007eff31145fa0 R15: 00007ffd96e8c1a8 [ 100.854068][ T7703] [ 101.088956][ T7705] Process accounting resumed [ 101.143246][ T7719] loop3: detected capacity change from 0 to 164 [ 101.153530][ T7719] syz.3.1641: attempt to access beyond end of device [ 101.153530][ T7719] loop3: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 101.185411][ T7719] syz.3.1641: attempt to access beyond end of device [ 101.185411][ T7719] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 101.233759][ T7733] FAULT_INJECTION: forcing a failure. [ 101.233759][ T7733] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 101.246964][ T7733] CPU: 0 UID: 0 PID: 7733 Comm: syz.5.1650 Not tainted 6.15.0-rc2-syzkaller-00048-gc62f4b82d571 #0 PREEMPT(voluntary) [ 101.247039][ T7733] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 101.247054][ T7733] Call Trace: [ 101.247069][ T7733] [ 101.247079][ T7733] dump_stack_lvl+0xf6/0x150 [ 101.247108][ T7733] dump_stack+0x15/0x1a [ 101.247129][ T7733] should_fail_ex+0x261/0x270 [ 101.247168][ T7733] should_fail+0xb/0x10 [ 101.247194][ T7733] should_fail_usercopy+0x1a/0x20 [ 101.247285][ T7733] _copy_to_user+0x20/0xa0 [ 101.247389][ T7733] simple_read_from_buffer+0xb2/0x130 [ 101.247459][ T7733] proc_fail_nth_read+0x103/0x140 [ 101.247485][ T7733] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 101.247508][ T7733] vfs_read+0x1b2/0x710 [ 101.247533][ T7733] ? __rcu_read_unlock+0x4e/0x70 [ 101.247627][ T7733] ? __fget_files+0x186/0x1c0 [ 101.247714][ T7733] ksys_read+0xeb/0x1b0 [ 101.247744][ T7733] __x64_sys_read+0x42/0x50 [ 101.247776][ T7733] x64_sys_call+0x2a3b/0x2e10 [ 101.247802][ T7733] do_syscall_64+0xc9/0x1c0 [ 101.247882][ T7733] ? clear_bhb_loop+0x25/0x80 [ 101.247906][ T7733] ? clear_bhb_loop+0x25/0x80 [ 101.247928][ T7733] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.247952][ T7733] RIP: 0033:0x7fb4de63cb7c [ 101.247998][ T7733] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 101.248020][ T7733] RSP: 002b:00007fb4dcca7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 101.248042][ T7733] RAX: ffffffffffffffda RBX: 00007fb4de865fa0 RCX: 00007fb4de63cb7c [ 101.248055][ T7733] RDX: 000000000000000f RSI: 00007fb4dcca70a0 RDI: 0000000000000004 [ 101.248076][ T7733] RBP: 00007fb4dcca7090 R08: 0000000000000000 R09: 0000000000000000 [ 101.248091][ T7733] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 101.248104][ T7733] R13: 0000000000000000 R14: 00007fb4de865fa0 R15: 00007ffc7f0bbf68 [ 101.248135][ T7733] [ 101.452346][ T7729] netlink: 96 bytes leftover after parsing attributes in process `syz.6.1648'. [ 101.517049][ T3300] block device autoloading is deprecated and will be removed. [ 101.602030][ T1042] Process accounting resumed [ 101.680921][ T7769] dummy0 speed is unknown, defaulting to 1000 [ 101.723617][ T7762] syzkaller0: entered promiscuous mode [ 101.729178][ T7762] syzkaller0: entered allmulticast mode [ 101.892511][ T9] Process accounting resumed [ 101.910341][ T7777] netlink: 96 bytes leftover after parsing attributes in process `syz.5.1666'. [ 101.975645][ T7807] FAULT_INJECTION: forcing a failure. [ 101.975645][ T7807] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 101.988889][ T7807] CPU: 0 UID: 0 PID: 7807 Comm: syz.5.1678 Not tainted 6.15.0-rc2-syzkaller-00048-gc62f4b82d571 #0 PREEMPT(voluntary) [ 101.988919][ T7807] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 101.988933][ T7807] Call Trace: [ 101.988941][ T7807] [ 101.988949][ T7807] dump_stack_lvl+0xf6/0x150 [ 101.988976][ T7807] dump_stack+0x15/0x1a [ 101.988995][ T7807] should_fail_ex+0x261/0x270 [ 101.989066][ T7807] should_fail+0xb/0x10 [ 101.989089][ T7807] should_fail_usercopy+0x1a/0x20 [ 101.989225][ T7807] _copy_from_iter+0xd8/0xd10 [ 101.989273][ T7807] ? kmalloc_reserve+0x16e/0x190 [ 101.989296][ T7807] ? __build_skb_around+0x199/0x1f0 [ 101.989321][ T7807] ? __alloc_skb+0x227/0x320 [ 101.989389][ T7807] ? __virt_addr_valid+0x1ed/0x250 [ 101.989412][ T7807] ? __check_object_size+0x367/0x510 [ 101.989442][ T7807] netlink_sendmsg+0x492/0x720 [ 101.989478][ T7807] ? __pfx_netlink_sendmsg+0x10/0x10 [ 101.989518][ T7807] __sock_sendmsg+0x140/0x180 [ 101.989541][ T7807] ____sys_sendmsg+0x350/0x4e0 [ 101.989601][ T7807] __sys_sendmsg+0x1a0/0x240 [ 101.989690][ T7807] __x64_sys_sendmsg+0x46/0x50 [ 101.989737][ T7807] x64_sys_call+0x26f3/0x2e10 [ 101.989760][ T7807] do_syscall_64+0xc9/0x1c0 [ 101.989842][ T7807] ? clear_bhb_loop+0x25/0x80 [ 101.989885][ T7807] ? clear_bhb_loop+0x25/0x80 [ 101.989911][ T7807] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.990016][ T7807] RIP: 0033:0x7fb4de63e169 [ 101.990063][ T7807] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 101.990085][ T7807] RSP: 002b:00007fb4dcca7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 101.990112][ T7807] RAX: ffffffffffffffda RBX: 00007fb4de865fa0 RCX: 00007fb4de63e169 [ 101.990124][ T7807] RDX: 0000000000000810 RSI: 0000200000000040 RDI: 0000000000000004 [ 101.990136][ T7807] RBP: 00007fb4dcca7090 R08: 0000000000000000 R09: 0000000000000000 [ 101.990147][ T7807] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 101.990158][ T7807] R13: 0000000000000000 R14: 00007fb4de865fa0 R15: 00007ffc7f0bbf68 [ 101.990183][ T7807] [ 102.226327][ T7808] Process accounting resumed [ 102.340155][ T3376] IPVS: starting estimator thread 0... [ 102.352603][ T7820] 9pnet_fd: Insufficient options for proto=fd [ 102.387462][ T7821] loop6: detected capacity change from 0 to 164 [ 102.418632][ T7821] syz.6.1685: attempt to access beyond end of device [ 102.418632][ T7821] loop6: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 102.433619][ T7821] syz.6.1685: attempt to access beyond end of device [ 102.433619][ T7821] loop6: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 102.447326][ T7816] IPVS: using max 2304 ests per chain, 115200 per kthread [ 102.567109][ T7835] loop6: detected capacity change from 0 to 164 [ 102.590375][ T7835] syz.6.1692: attempt to access beyond end of device [ 102.590375][ T7835] loop6: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 102.598447][ T1042] hid-generic 0000:007F:FFFFFFFE.0005: unexpected long global item [ 102.611261][ T7835] syz.6.1692: attempt to access beyond end of device [ 102.611261][ T7835] loop6: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 102.624765][ T1042] hid-generic 0000:007F:FFFFFFFE.0005: probe with driver hid-generic failed with error -22 [ 102.676141][ T7845] 9pnet_fd: Insufficient options for proto=fd [ 102.729172][ T7830] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1689'. [ 102.771522][ T7848] loop5: detected capacity change from 0 to 1024 [ 102.837751][ T7858] FAULT_INJECTION: forcing a failure. [ 102.837751][ T7858] name failslab, interval 1, probability 0, space 0, times 0 [ 102.850498][ T7858] CPU: 0 UID: 0 PID: 7858 Comm: syz.3.1700 Not tainted 6.15.0-rc2-syzkaller-00048-gc62f4b82d571 #0 PREEMPT(voluntary) [ 102.850622][ T7858] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 102.850637][ T7858] Call Trace: [ 102.850710][ T7858] [ 102.850719][ T7858] dump_stack_lvl+0xf6/0x150 [ 102.850747][ T7858] dump_stack+0x15/0x1a [ 102.850800][ T7858] should_fail_ex+0x261/0x270 [ 102.850848][ T7858] should_failslab+0x8f/0xb0 [ 102.850883][ T7858] __kmalloc_cache_noprof+0x55/0x320 [ 102.850918][ T7858] ? vmstat_start+0x91/0x5c0 [ 102.850943][ T7858] vmstat_start+0x91/0x5c0 [ 102.851027][ T7858] traverse+0xf3/0x3c0 [ 102.851055][ T7858] ? path_openat+0x1ab2/0x2000 [ 102.851089][ T7858] seq_read_iter+0x89f/0x970 [ 102.851128][ T7858] ? _parse_integer+0x27/0x30 [ 102.851154][ T7858] ? kstrtoull+0x115/0x140 [ 102.851178][ T7858] proc_reg_read_iter+0x118/0x190 [ 102.851201][ T7858] do_iter_readv_writev+0x40d/0x4b0 [ 102.851264][ T7858] vfs_readv+0x1e1/0x660 [ 102.851293][ T7858] __x64_sys_preadv+0xf9/0x1c0 [ 102.851330][ T7858] x64_sys_call+0x1410/0x2e10 [ 102.851355][ T7858] do_syscall_64+0xc9/0x1c0 [ 102.851391][ T7858] ? clear_bhb_loop+0x25/0x80 [ 102.851439][ T7858] ? clear_bhb_loop+0x25/0x80 [ 102.851484][ T7858] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.851506][ T7858] RIP: 0033:0x7fd13167e169 [ 102.851538][ T7858] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 102.851559][ T7858] RSP: 002b:00007fd12fce7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 102.851577][ T7858] RAX: ffffffffffffffda RBX: 00007fd1318a5fa0 RCX: 00007fd13167e169 [ 102.851589][ T7858] RDX: 0000000000000001 RSI: 0000200000000e80 RDI: 0000000000000006 [ 102.851664][ T7858] RBP: 00007fd12fce7090 R08: 0000000000000005 R09: 0000000000000000 [ 102.851678][ T7858] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001 [ 102.851736][ T7858] R13: 0000000000000000 R14: 00007fd1318a5fa0 R15: 00007fff37014738 [ 102.851824][ T7858] [ 103.345065][ T7904] loop6: detected capacity change from 0 to 512 [ 103.376950][ T7904] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.394235][ T7913] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1724'. [ 103.403699][ T7913] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1724'. [ 103.415157][ T7902] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1713'. [ 103.429052][ T7904] ext4 filesystem being mounted at /120/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 103.471688][ T7904] EXT4-fs error (device loop6): ext4_do_update_inode:5211: inode #2: comm syz.6.1721: corrupted inode contents [ 103.483821][ T7904] EXT4-fs error (device loop6): ext4_dirty_inode:6103: inode #2: comm syz.6.1721: mark_inode_dirty error [ 103.495501][ T7904] EXT4-fs error (device loop6): ext4_do_update_inode:5211: inode #2: comm syz.6.1721: corrupted inode contents [ 103.510008][ T7904] EXT4-fs error (device loop6): __ext4_ext_dirty:207: inode #2: comm syz.6.1721: mark_inode_dirty error [ 103.561755][ T7914] Process accounting resumed [ 103.656068][ T7931] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1732'. [ 103.678469][ T7931] loop3: detected capacity change from 0 to 512 [ 103.685233][ T7931] EXT4-fs: Ignoring removed mblk_io_submit option [ 103.692194][ T6265] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.707764][ T7934] loop5: detected capacity change from 0 to 164 [ 103.731209][ T7932] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1733'. [ 103.740066][ T7931] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -13 [ 103.741201][ T7932] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1733'. [ 103.766268][ T7932] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1733'. [ 103.769063][ T7931] EXT4-fs error (device loop3): ext4_clear_blocks:876: inode #13: comm syz.3.1732: attempt to clear invalid blocks 2 len 1 [ 103.792673][ T7931] EXT4-fs (loop3): Remounting filesystem read-only [ 103.798117][ T7934] syz.5.1735: attempt to access beyond end of device [ 103.798117][ T7934] loop5: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 103.799903][ T7931] EXT4-fs (loop3): 1 truncate cleaned up [ 103.817526][ T7934] syz.5.1735: attempt to access beyond end of device [ 103.817526][ T7934] loop5: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 103.821152][ T7932] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1733'. [ 103.832877][ T7931] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.856563][ T7932] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1733'. [ 103.876460][ T7932] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1733'. [ 103.901904][ T7931] xt_CT: You must specify a L4 protocol and not use inversions on it [ 103.943534][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.961785][ T7932] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1733'. [ 103.971735][ T7932] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1733'. [ 104.011683][ T7932] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1733'. [ 104.043333][ T7946] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 104.623664][ T7976] loop3: detected capacity change from 0 to 164 [ 104.631761][ T7976] syz.3.1748: attempt to access beyond end of device [ 104.631761][ T7976] loop3: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 104.645769][ T7976] syz.3.1748: attempt to access beyond end of device [ 104.645769][ T7976] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 104.692274][ T29] kauditd_printk_skb: 828 callbacks suppressed [ 104.692290][ T29] audit: type=1400 audit(1744841138.410:7885): avc: denied { read } for pid=7982 comm="syz.3.1751" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 104.725753][ T29] audit: type=1400 audit(1744841138.440:7886): avc: denied { write } for pid=7981 comm="syz.1.1750" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 104.749106][ T29] audit: type=1400 audit(1744841138.440:7887): avc: denied { open } for pid=7982 comm="syz.3.1751" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 104.845369][ T29] audit: type=1326 audit(1744841138.560:7888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7988 comm="syz.6.1752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff30f1e169 code=0x7ffc0000 [ 104.868961][ T29] audit: type=1326 audit(1744841138.570:7889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7988 comm="syz.6.1752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff30f1e169 code=0x7ffc0000 [ 104.902596][ T29] audit: type=1326 audit(1744841138.570:7890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7988 comm="syz.6.1752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7eff30f1e169 code=0x7ffc0000 [ 104.926185][ T29] audit: type=1326 audit(1744841138.570:7891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7988 comm="syz.6.1752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff30f1e169 code=0x7ffc0000 [ 104.950119][ T29] audit: type=1326 audit(1744841138.570:7892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7988 comm="syz.6.1752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff30f1e169 code=0x7ffc0000 [ 104.953083][ T7995] loop3: detected capacity change from 0 to 512 [ 104.973796][ T29] audit: type=1326 audit(1744841138.570:7893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7988 comm="syz.6.1752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7eff30f1e169 code=0x7ffc0000 [ 105.004399][ T29] audit: type=1326 audit(1744841138.570:7894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7988 comm="syz.6.1752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff30f1e169 code=0x7ffc0000 [ 105.081362][ T7995] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1755: bg 0: block 248: padding at end of block bitmap is not set [ 105.117970][ T7995] EXT4-fs error (device loop3): ext4_acquire_dquot:6935: comm syz.3.1755: Failed to acquire dquot type 1 [ 105.167461][ T8007] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 105.190366][ T8000] Process accounting resumed [ 105.206293][ T7995] EXT4-fs (loop3): 1 truncate cleaned up [ 105.213130][ T7995] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.237684][ T7995] ext4 filesystem being mounted at /367/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 105.283335][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.294272][ T12] EXT4-fs error (device loop3): ext4_release_dquot:6971: comm kworker/u8:0: Failed to release dquot type 1 [ 105.363792][ T3376] Process accounting resumed [ 105.389881][ T8033] 9pnet_fd: Insufficient options for proto=fd [ 105.515617][ T8047] FAULT_INJECTION: forcing a failure. [ 105.515617][ T8047] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 105.528917][ T8047] CPU: 1 UID: 0 PID: 8047 Comm: syz.1.1776 Not tainted 6.15.0-rc2-syzkaller-00048-gc62f4b82d571 #0 PREEMPT(voluntary) [ 105.529066][ T8047] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 105.529082][ T8047] Call Trace: [ 105.529089][ T8047] [ 105.529097][ T8047] dump_stack_lvl+0xf6/0x150 [ 105.529126][ T8047] dump_stack+0x15/0x1a [ 105.529146][ T8047] should_fail_ex+0x261/0x270 [ 105.529180][ T8047] should_fail+0xb/0x10 [ 105.529251][ T8047] should_fail_usercopy+0x1a/0x20 [ 105.529304][ T8047] _copy_to_user+0x20/0xa0 [ 105.529353][ T8047] simple_read_from_buffer+0xb2/0x130 [ 105.529391][ T8047] proc_fail_nth_read+0x103/0x140 [ 105.529416][ T8047] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 105.529445][ T8047] vfs_read+0x1b2/0x710 [ 105.529476][ T8047] ? __rcu_read_unlock+0x4e/0x70 [ 105.529547][ T8047] ? __fget_files+0x186/0x1c0 [ 105.529574][ T8047] ksys_read+0xeb/0x1b0 [ 105.529676][ T8047] __x64_sys_read+0x42/0x50 [ 105.529710][ T8047] x64_sys_call+0x2a3b/0x2e10 [ 105.529737][ T8047] do_syscall_64+0xc9/0x1c0 [ 105.529772][ T8047] ? clear_bhb_loop+0x25/0x80 [ 105.529881][ T8047] ? clear_bhb_loop+0x25/0x80 [ 105.529903][ T8047] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.529924][ T8047] RIP: 0033:0x7f6e3356cb7c [ 105.529938][ T8047] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 105.529955][ T8047] RSP: 002b:00007f6e31bd7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 105.529987][ T8047] RAX: ffffffffffffffda RBX: 00007f6e33795fa0 RCX: 00007f6e3356cb7c [ 105.529999][ T8047] RDX: 000000000000000f RSI: 00007f6e31bd70a0 RDI: 0000000000000006 [ 105.530010][ T8047] RBP: 00007f6e31bd7090 R08: 0000000000000000 R09: 0000000000000000 [ 105.530022][ T8047] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 105.530045][ T8047] R13: 0000000000000000 R14: 00007f6e33795fa0 R15: 00007ffe2440b018 [ 105.530069][ T8047] [ 105.794079][ T9] Process accounting resumed [ 105.802888][ T8067] 9pnet_fd: Insufficient options for proto=fd [ 105.852266][ T8072] netlink: 'syz.0.1787': attribute type 39 has an invalid length. [ 105.861587][ T8073] netlink: 'syz.0.1787': attribute type 39 has an invalid length. [ 105.944523][ T8085] loop1: detected capacity change from 0 to 1024 [ 105.987392][ T8085] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 106.003560][ T8085] ext4 filesystem being mounted at /302/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 106.033838][ T8085] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.107899][ T8085] loop1: detected capacity change from 0 to 1024 [ 106.141393][ T8104] 9pnet_fd: Insufficient options for proto=fd [ 106.168820][ T8085] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 106.181307][ T8085] ext4 filesystem being mounted at /302/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 106.195532][ T8085] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.292417][ T8111] loop0: detected capacity change from 0 to 164 [ 106.293229][ T8085] loop1: detected capacity change from 0 to 1024 [ 106.310484][ T8111] syz.0.1802: attempt to access beyond end of device [ 106.310484][ T8111] loop0: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 106.339164][ T8111] syz.0.1802: attempt to access beyond end of device [ 106.339164][ T8111] loop0: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 106.371409][ T8109] loop5: detected capacity change from 0 to 128 [ 106.420211][ T8109] syz.5.1797: attempt to access beyond end of device [ 106.420211][ T8109] loop5: rw=0, sector=121, nr_sectors = 120 limit=128 [ 106.456411][ T8085] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 106.469245][ T8085] ext4 filesystem being mounted at /302/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 106.481141][ T166] kworker/u8:5: attempt to access beyond end of device [ 106.481141][ T166] loop5: rw=1, sector=241, nr_sectors = 800 limit=128 [ 106.560361][ T8085] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.725733][ T8130] Process accounting resumed [ 106.766864][ T8140] 9pnet_fd: Insufficient options for proto=fd [ 106.920080][ T8161] 9pnet_fd: Insufficient options for proto=fd [ 107.079890][ T8182] ================================================================== [ 107.088024][ T8182] BUG: KCSAN: data-race in mas_replace_node / mtree_range_walk [ 107.095607][ T8182] [ 107.097974][ T8182] write to 0xffff888105630600 of 8 bytes by task 8185 on cpu 1: [ 107.105634][ T8182] mas_replace_node+0x1b8/0x430 [ 107.110496][ T8182] mas_wr_store_entry+0x1e80/0x2460 [ 107.115721][ T8182] mas_store_prealloc+0x6d5/0x960 [ 107.121018][ T8182] vma_iter_store_new+0x1d3/0x210 [ 107.126047][ T8182] vma_complete+0x12b/0x570 [ 107.130566][ T8182] __split_vma+0x5b6/0x630 [ 107.134998][ T8182] vms_gather_munmap_vmas+0x2a5/0x790 [ 107.140517][ T8182] mmap_region+0x46f/0x1490 [ 107.145224][ T8182] do_mmap+0x9ef/0xc80 [ 107.149315][ T8182] vm_mmap_pgoff+0x16d/0x2d0 [ 107.153937][ T8182] ksys_mmap_pgoff+0xd0/0x340 [ 107.158628][ T8182] x64_sys_call+0x1945/0x2e10 [ 107.163326][ T8182] do_syscall_64+0xc9/0x1c0 [ 107.167848][ T8182] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.173774][ T8182] [ 107.176096][ T8182] read to 0xffff888105630600 of 8 bytes by task 8182 on cpu 0: [ 107.183639][ T8182] mtree_range_walk+0x347/0x460 [ 107.188504][ T8182] mas_walk+0x16e/0x320 [ 107.192670][ T8182] lock_vma_under_rcu+0xa7/0x340 [ 107.197639][ T8182] exc_page_fault+0x150/0x6a0 [ 107.202345][ T8182] asm_exc_page_fault+0x26/0x30 [ 107.207232][ T8182] [ 107.209569][ T8182] value changed: 0xffff888105630d06 -> 0xffff888105630600 [ 107.216684][ T8182] [ 107.219011][ T8182] Reported by Kernel Concurrency Sanitizer on: [ 107.225609][ T8182] CPU: 0 UID: 0 PID: 8182 Comm: syz.6.1833 Not tainted 6.15.0-rc2-syzkaller-00048-gc62f4b82d571 #0 PREEMPT(voluntary) [ 107.238152][ T8182] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 107.248217][ T8182] ==================================================================