last executing test programs: 5.677061105s ago: executing program 0 (id=357): setxattr$incfs_id(&(0x7f0000000200)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000440), 0x0, 0x0, 0x2) r0 = getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setresuid(0x0, r2, 0x0) sendmmsg$unix(r1, &(0x7f0000002c80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002880)=[@cred={{0x1c, 0x1, 0x2, {r0, 0x0, 0xee00}}}], 0x20, 0x24000084}}], 0x1, 0x804) io_setup(0x1, &(0x7f00000012c0)=0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x4}, {0x0, [0x0, 0x30]}}, &(0x7f0000002cc0)=""/4089, 0x1c, 0xff9, 0x1, 0x0, 0x0, @void, @value}, 0x28) r4 = openat$random(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) io_submit(r3, 0x1, &(0x7f0000000140)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x3, 0x0, r4, &(0x7f0000000080), 0x0, 0x200000000004}]) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) syz_emit_ethernet(0x3a, &(0x7f00000004c0)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x3, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x4, 0x0, @empty, @multicast1}, {0x0, 0x0, 0x18, 0x0, @wg=@data}}}}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0100000003000000610200000200000000000000", @ANYRES32, @ANYBLOB="00000000000000000000ff8e87e04e25bf23c300", @ANYRES32=r7], 0x48) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1b00000095b37300000000000000400080002000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, @void, @value}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r9}, 0x10) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_GET(r10, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010028bd7000fddbdf2513000000180003801402020074756e6c300000000000002000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x20000800}, 0x20000004) r12 = syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r5) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r6, 0x40049366, &(0x7f0000000180)) sendmsg$DEVLINK_CMD_RATE_NEW(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="010000000300000000000000000a0e0001006e657464657673696d0000000f0002006e657464657673696d300000"], 0x34}}, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r13 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000340)={'bond_slave_1\x00'}) 5.580885152s ago: executing program 0 (id=361): syz_mount_image$ext4(&(0x7f0000000d80)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x21881e, &(0x7f0000000280)={[{@mb_optimize_scan}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@stripe={'stripe', 0x3d, 0x9}}]}, 0x1, 0x4fa, &(0x7f0000000dc0)="$eJzs3c9vG1kdAPCvnThx0uwmu+wBEOyW3YWCqjqJuxut9gDLCSFUCdEjSG1I3CiKHUexU5rQQ3rmikQlTnDkD+DcE3cuCG5cygGJHxGoQeLg1YwnqZvaTdQkdhR/PtJo3ps39fe9pvNe/U3iF8DQuhoRuxExFhF3I2I6u57LjvisfST3Pdt7uLS/93ApF63W7X/l0vbkWnT8mcSV7DWLEfGj70X8NPdy3Mb2ztpitVrZzOqzzdrGbGN758ZqbXGlslJZL5cX5hfmPrn5cfnMxvpebSwrffXpH3e/9fOkW1PZlc5xnKX20AuHcRKjEfGD8wg2ACPZeMYG3RFeSz4i3o6I99PnfzpG0q8mAHCZtVrT0ZrurAMAl10+zYHl8qUsFzAV+Xyp1M7hvROT+Wq90bx+r761vtzOlc1EIX9vtVqZy3KFM1HIJfX5tPy8Xj5SvxkRb0XEL8cn0nppqV5dHuR/fABgiF05sv7/d7y9/gMAl1xx0B0AAPrO+g8Aw8f6DwDDx/oPAMOnvf5PDLobAEAfef8PAMPH+g8AQ+WHt24lR2s/+/zr5fvbW2v1+zeWK421Um1rqbRU39wordTrK+ln9tSOe71qvb4x/1FsPZj59kajOdvY3rlTq2+tN++kn+t9p1JI79rtw8gAgF7eeu/JX3LJivzpRHpEx14OhYH2DDhv+UF3ABiYkUF3ABgYu33B8DrFe3zpAbgkumzR+4Jit18QarVarfPrEnDOrn1J/h+GVUf+308Bw5CR/4fhJf8Pw6vVyp10z/846Y0AwMUmxw/0+P7/29n5d9k3B36yfPSOx+fZKwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYDvb/LWV7gU9FPl8qRbwRETNRyN1brVbmIuLNiPjzeGE8qc8PuM8AwGnl/57L9v+6Nv3h1AtN7145LI5FxM9+fftXDxabzc0/RYzl/j1+cL35OLte7n/vAYDjHazT6bnjjfyzvYdLB0c/+/OP70ZEsR1/f28s9g/jj8Zoei5GISIm/5PL6m25jtzFaew+iogvdht/LqbSHEh759Oj8ZPYb/Q1fv6F+Pm0rX1O/i6+cAZ9gWHzJJl/Puv2/OXjanru/vwX0xnq9LL5L3mppf10Dnwe/2D+G+kx/109aYyP/vD9dmni5bZHEV8ejTiIvd8x/xzEz/WI/+EJ4//1K+++36ut9ZuIa9E9fmes2WZtY7axvXNjtba4UlmprJfLC/MLc5/c/Lg8m+aoZ3uvBv/89PqbvdqS8U/2iF88ZvxfP+H4f/v/uz/+2ivif/ODbvHz8c4r4idr4jdOGH9x8vfFXm1J/OUe4z/u63/9hPGf/m3npW3DAYDBaWzvrC1Wq5VNBYWLX0j+yV6AbnQtfKdfscaie9MvPmg/00eaWq3XitVrxjiLrBtwERw+9BHxv0F3BgAAAAAAAAAAAAAA6Kofv7E06DECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABweX0eAAD//19xzyM=") (async, rerun: 32) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) (rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000240)='kfree\x00', r1}, 0x18) (async) r2 = io_uring_setup(0x3efa, &(0x7f0000000000)={0x0, 0x0, 0x40}) io_uring_register$IORING_REGISTER_RESTRICTIONS(r2, 0xb, &(0x7f0000000080), 0x61) r3 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x2) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x1f00, {0x0, 0x0, 0x74, r6, {0xb, 0xfff2}, {}, {0xe, 0xc}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x8881}, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000380)="cb", 0x1}], 0x1}, 0x1) (async) r7 = socket$kcm(0x29, 0x2, 0x0) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) (async, rerun: 32) r9 = socket$kcm(0x2, 0x2, 0x0) (rerun: 32) ioctl$sock_kcm_SIOCKCMATTACH(r7, 0x89e0, &(0x7f0000000040)={r9, r8}) (async) sendmsg$inet(r3, 0x0, 0x52cc) 5.007755454s ago: executing program 0 (id=372): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) (async) r1 = socket(0x2c, 0x2, 0x5) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) (async, rerun: 64) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) (rerun: 64) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x608, 0x360, 0x11, 0x148, 0x360, 0x10, 0x570, 0x2a8, 0x2a8, 0x570, 0x2a8, 0x7fffffe, 0x0, {[{{@uncond, 0x10, 0x2f8, 0x360, 0x1c, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip6gretap0\x00', {0x0, 0x0, 0x9, 0x0, 0x0, 0xffffffff, 0x8}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x19, 0x0, 0x0, 0x0, 'syz0\x00', 'syz0\x00'}}}, {{@ip={@multicast1, @rand_addr, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_batadv\x00'}, 0x0, 0x1c8, 0x210, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'team_slave_0\x00', {0x459, 0x0, 0x48, 0x0, 0x0, 0x3, 0x2, 0x80}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@dev, 'macsec0\x00'}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x66d) (async) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async, rerun: 64) r5 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) (rerun: 64) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f00000001c0)={0x0, 0x0}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x18) r6 = inotify_init1(0x80000) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000740)=ANY=[@ANYBLOB, @ANYRES32=r7, @ANYBLOB="412474612657f2b5351367a45beee7494e903098c08c641c711b42067d0448148817ad29ea8e1e55368bbbf6714934f775d78ee0336b564a0e34220f8d49d1a19f4d447037cc89b030ed1d11ac2d72eeb93b94bde0c8227fc883d1"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r8}, 0x10) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x3, &(0x7f00000001c0)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kfree\x00', r9}, 0x10) (async) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="24000007200001030024bc8a37179a4eca000000000000010000000008000b0005000000"], 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB], 0x28}}, 0x0) (async) r12 = syz_io_uring_setup(0x1178, &(0x7f0000000640)={0x0, 0xad98, 0x800, 0x0, 0x0, 0x0, r6}, &(0x7f0000000540), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_RESTRICTIONS(r12, 0xb, &(0x7f0000000900), 0x0) r13 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) (async) r14 = socket$nl_generic(0x10, 0x3, 0x10) (async) r15 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB="00000000000000c7aa00859d37040e1a8bd30000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/19], 0x48) sendmsg$ETHTOOL_MSG_PAUSE_SET(r14, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000080)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r13, @ANYBLOB="0100000010651fbe347b2c2b00000c00018008000100", @ANYRES8=r15], 0x20}}, 0x0) (async, rerun: 32) inotify_add_watch(r6, &(0x7f0000000200)='./file0\x00', 0x3) (rerun: 32) getsockopt$inet_mreqn(r1, 0x0, 0x24, &(0x7f0000000540)={@broadcast, @loopback}, &(0x7f0000000580)=0xc) 4.78442282s ago: executing program 0 (id=375): r0 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r1 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 64) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000020017e9c0000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000100)=ANY=[@ANYBLOB="0b00000073790101000000000000000000000000000af7f4f0c55de8ca0000000000000000000000000000000000000000f3c800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff0000000000000000000000000000002000"], 0x138) write$UHID_DESTROY(r3, &(0x7f0000000340), 0x4) (async) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) (async, rerun: 32) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) (rerun: 32) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r5, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) (async) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="200000001000250800170000000000000a000000", @ANYRES32=r8, @ANYBLOB="0174"], 0x20}}, 0x0) r9 = socket(0x1, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) (async) r11 = syz_io_uring_setup(0xeec, &(0x7f0000000780)={0x0, 0x0, 0x10100}, &(0x7f00000001c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r12, r13, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0xffffffffffffffff, &(0x7f00000004c0)}) (async) io_uring_enter(r11, 0x567, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'wg0\x00'}) (rerun: 32) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=@newlink={0x50, 0x10, 0xf11, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x104}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x20, 0x20}}}}}}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 3.433825549s ago: executing program 0 (id=383): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000040000000c"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000000f740000000c0a01080000000000000000010000000900020073797a32000000004800038044000080080003400000000238000b80140001800c000180636f756e7465720004000280200001800a00010071756f7461000000100002800c00010700000000000000000900010073797a3000000000140000001000010000"], 0xf8}}, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = gettid() r4 = gettid() kcmp(r3, r4, 0x4, 0xffffffffffffffff, 0xffffffffffffffff) 1.385514549s ago: executing program 3 (id=413): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000003, 0x4008032, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x2) readv(r1, &(0x7f0000000000)=[{&(0x7f0000001300)=""/244, 0x940}], 0x1) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) 1.315025354s ago: executing program 1 (id=414): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000003, 0x4008032, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x2) readv(r1, &(0x7f0000000000)=[{&(0x7f0000001300)=""/244, 0x940}], 0x1) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) 1.191528883s ago: executing program 3 (id=415): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) unshare(0x22020600) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000240), 0xfe, 0x54b, &(0x7f0000000400)="$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") bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000001800"/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xe, 0x10, &(0x7f0000000a80)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES64=r0, @ANYBLOB="00000000000000009500000095000600"/32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r1}, 0x10) pivot_root(&(0x7f0000000000)='.\x00', &(0x7f0000000080)='./file0/../file0\x00') openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x1}, 0x8002, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x201, 0x2) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000002, 0x11012, r2, 0xffffd000) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x40084504, &(0x7f0000ffcffc)=0x4) mbind(&(0x7f0000651000/0x4000)=nil, 0x4000, 0x2, &(0x7f0000000000)=0x5, 0x4, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000980)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="796100000000000000007e00000008000300", @ANYRES32=0x0, @ANYBLOB="27b47c1d6bebeb58558b37895758637b7a526880353e1938b4292c329d37db4285a2fb92b12388a140b6de6503de12b7606655e41bf29ac509359b5d300730e13d4ed707855fe128f38674784a70b89c796712923553a9fcc755b1c4f9cac31c4340e62d5f57730367e0711bdaccd7ed2eef14dbb48a4a700220f3c9b10b7212e596ea4236c69a08ce6b2b5c83750540f345a4be18e89ce78f006ae7ca8e2433537e0620d95208a86eae"], 0x1c}}, 0x4000054) 1.147009527s ago: executing program 1 (id=416): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x44003) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x18) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={r0, r1}, 0xc) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r1, 0x58, &(0x7f00000002c0)}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000000, 0x8010, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0xad9, &(0x7f0000000200)={0x0, 0xf1bf, 0x10, 0x1, 0x219}, 0x0, &(0x7f00000003c0)=0x0) syz_io_uring_submit(r2, r3, 0x0) creat(0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f0000000280)={[{@jqfmt_vfsv1}, {}, {@quota}, {@noauto_da_alloc}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@noauto_da_alloc}, {@stripe={'stripe', 0x3d, 0x5}}, {@orlov}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") chdir(&(0x7f0000000240)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x48942, 0x0) symlink(&(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r4}, 0x10) 1.119663058s ago: executing program 4 (id=417): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000440)='./file2\x00', 0x404, &(0x7f0000000380)={[{@errors_remount}, {@resuid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@resgid}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="04000300"/20, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000400)={'veth1_to_bridge\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)=ANY=[@ANYBLOB="780000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000005000128009000100766c616e00000000400002800600010000000000340003800c000100ff010000060000000c0001007f000000000000000c000100ff000000010000000c000100ff0100000008000008000500", @ANYRES32=r4], 0x78}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) quotactl$Q_GETNEXTQUOTA(0xffffffff80000900, &(0x7f0000001700)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000001800)) 1.019150356s ago: executing program 4 (id=418): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000004840)={0x14, r1, 0x731, 0x0, 0x0, {0x38}}, 0x14}, 0x1, 0x2, 0x0, 0x880}, 0x4000) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000008500000050000000181100", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) gettid() futex_waitv(0x0, 0x0, 0x0, 0x0, 0x1) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0xa, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x0, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x55, 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x18000000000002a0, 0xe06, 0x1000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) r6 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) setsockopt$TIPC_GROUP_LEAVE(r6, 0x10f, 0x88) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x2, 0x800000000000}, 0x1320, 0xffffffff, 0x3, 0x5, 0x0, 0x1, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r7 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r7, &(0x7f0000001240)=""/102400, 0x200000, 0x0) 1.002439607s ago: executing program 1 (id=419): syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0}) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="8765990ee3d4361513d1930b712753ac982ca53b83f8fa4a00182d72737cd7188c76867de74bbeee8aaa341bba0cb59ad6ddfe7c798145708d04c7f3d611d53eb839cb3df3169fbb48de5d9bebee4dca55633dae7aef92108868c550b01e7c5ee09bfb0bf5f7cf9236be7574d6f93988", @ANYRESOCT=0x0], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\b\x00'/14], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000000400000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000500)='mm_page_alloc\x00', r0}, 0x10) creat(&(0x7f0000000080)='./bus\x00', 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000f50f"], 0x48}, 0x1, 0x0, 0x0, 0x20040884}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000640)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r7 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) close_range(r7, 0xffffffffffffffff, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000000100000024000180060005004e230000060001000200000008000300ac1414aa0800060001"], 0x38}, 0x1, 0x0, 0x0, 0x4000011}, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000580)={0x14, r6, 0x1, 0x70bd28, 0x25dfdbfc}, 0x14}}, 0x0) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r4, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="04002abd7000fcdbdf250b13000500040000000800040001000100050005000a0000000808000073e2767bf7085e0000800000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x40081}, 0x4044001) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="a90300000000334900003200000008004001"], 0x1c}}, 0x0) r9 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r9, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r9, 0x40047451, &(0x7f0000000200)=0x3) ioctl$PPPIOCSFLAGS1(r9, 0x40047459, &(0x7f0000000100)=0x2000004) pwritev(r9, &(0x7f0000000540)=[{&(0x7f00000002c0)="00214717a70700000000030600710a069d317ebb906c", 0xa1}], 0x1, 0x0, 0x0) 904.599364ms ago: executing program 3 (id=421): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00"/13], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x2) readv(r2, &(0x7f0000000000)=[{&(0x7f0000001300)=""/244, 0x940}], 0x1) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) 899.621815ms ago: executing program 1 (id=422): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000440)='./file2\x00', 0x404, &(0x7f0000000380)={[{@errors_remount}, {@resuid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@resgid}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="04000300"/20, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000400)={'veth1_to_bridge\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)=ANY=[@ANYBLOB="780000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000005000128009000100766c616e00000000400002800600010000000000340003800c000100ff010000060000000c0001007f000000000000000c000100ff000000010000000c000100ff0100000008000008000500", @ANYRES32=r4], 0x78}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) getegid() 834.894469ms ago: executing program 3 (id=423): ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, &(0x7f00000002c0)) 729.130997ms ago: executing program 3 (id=424): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = dup(r0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) listen(0xffffffffffffffff, 0x0) mount$9p_fd(0x0, &(0x7f0000000540)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}}) sendmsg$NFT_MSG_GETTABLE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008085) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/notes', 0x8000, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x18) r4 = socket$can_bcm(0x1d, 0x2, 0x2) syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f00000001c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x800714, &(0x7f0000000040), 0x1, 0x488, &(0x7f0000001640)="$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") r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0b00000005000000020000000200000005000000", @ANYRES32=0x0, @ANYRES32], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa2000000000000070207000000ffffb703000008000000b70400000000000085000000030000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r6, 0x0, 0xfffffffffffffffd}, 0x18) splice(r4, 0x0, 0xffffffffffffffff, 0x0, 0xe8, 0x12) io_uring_setup(0x17c7, &(0x7f00000002c0)) r7 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r7, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r8 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r8, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x50) r9 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r9}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r10, 0x8923, &(0x7f0000000000)={'vlan0\x00', @local}) accept4(r7, 0x0, 0x0, 0x0) close_range(r4, r0, 0x0) connect$can_bcm(r4, 0x0, 0x0) 698.939989ms ago: executing program 1 (id=425): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000680)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000700000045000000a000020095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000003c0)='kfree\x00', r0}, 0x10) getdents(0xffffffffffffffff, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$selinux_load(r1, &(0x7f0000000340)={0xf97cff8c, 0x8}, 0x2000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000240)='net_dev_xmit\x00', 0xffffffffffffffff, 0x0, 0x401}, 0x18) prctl$PR_SET_NAME(0xf, &(0x7f0000000100)='GPL\x00') readahead(0xffffffffffffffff, 0xfffffffffffffffd, 0x80000001) r2 = syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) r3 = syz_open_dev$rtc(&(0x7f0000000000), 0x3, 0x40) setresuid(0xee01, 0x0, 0x0) ioctl$RTC_UIE_OFF(r3, 0x7004) 626.176185ms ago: executing program 4 (id=427): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x63, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000600)={0x0, 0x1000000, &(0x7f0000000880)={&(0x7f0000001d80)=ANY=[@ANYBLOB="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"], 0x1028}}, 0x20000050) 566.969559ms ago: executing program 4 (id=428): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000440)='./file2\x00', 0x404, &(0x7f0000000380)={[{@errors_remount}, {@resuid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@resgid}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="04000300"/20, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000400)={'veth1_to_bridge\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)=ANY=[@ANYBLOB="780000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000005000128009000100766c616e00000000400002800600010000000000340003800c000100ff010000060000000c0001007f000000000000000c000100ff000000010000000c000100ff0100000008000008000500", @ANYRES32=r4], 0x78}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) quotactl$Q_GETNEXTQUOTA(0xffffffff80000900, &(0x7f0000001700)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000001800)) 566.701739ms ago: executing program 3 (id=429): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="0500000001ea2f3352c9a24cfb0fe8f3", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64, @ANYBLOB="37eb290aca"], 0x20000600}}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r2, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) setsockopt$sock_int(r4, 0x1, 0x10, &(0x7f0000000040)=0xd, 0x4) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) mknodat(0xffffffffffffffff, &(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200, 0x62722653) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) recvmmsg(r0, &(0x7f0000001040)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=""/43, 0x2b}, 0x3}], 0x1, 0x2040, 0x0) 566.445669ms ago: executing program 1 (id=430): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x2, &(0x7f00000000c0)=[{0x3, 0x5, 0x2c, 0x4}, {0xfac3, 0x2, 0x4, 0x2}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) mq_timedreceive(r2, &(0x7f0000004600)=""/102381, 0xfffffceb, 0x0, 0x0) 472.472206ms ago: executing program 4 (id=432): syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0}) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="8765990ee3d4361513d1930b712753ac982ca53b83f8fa4a00182d72737cd7188c76867de74bbeee8aaa341bba0cb59ad6ddfe7c798145708d04c7f3d611d53eb839cb3df3169fbb48de5d9bebee4dca55633dae7aef92108868c550b01e7c5ee09bfb0bf5f7cf9236be7574d6f93988", @ANYRESOCT=0x0], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\b\x00'/14], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000000400000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000500)='mm_page_alloc\x00', r0}, 0x10) creat(&(0x7f0000000080)='./bus\x00', 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000f50f"], 0x48}, 0x1, 0x0, 0x0, 0x20040884}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000640)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r7 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) close_range(r7, 0xffffffffffffffff, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000000100000024000180060005004e230000060001000200000008000300ac1414aa0800060001"], 0x38}, 0x1, 0x0, 0x0, 0x4000011}, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000580)={0x14, r6, 0x1, 0x70bd28, 0x25dfdbfc}, 0x14}}, 0x0) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r4, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="04002abd7000fcdbdf250b13000500040000000800040001000100050005000a0000000808000073e2767bf7085e0000800000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x40081}, 0x4044001) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="a90300000000334900003200000008004001"], 0x1c}}, 0x0) r9 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r9, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r9, 0x40047451, &(0x7f0000000200)=0x3) ioctl$PPPIOCSFLAGS1(r9, 0x40047459, &(0x7f0000000100)=0x2000004) pwritev(r9, &(0x7f0000000540)=[{&(0x7f00000002c0)="00214717a70700000000030600710a069d317ebb906c", 0xa1}], 0x1, 0x0, 0x0) 398.324161ms ago: executing program 4 (id=434): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) mq_timedreceive(r2, &(0x7f0000004600)=""/102381, 0xfffffceb, 0x0, 0x0) 346.683165ms ago: executing program 2 (id=436): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000001afc180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000090000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x500, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r3, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000060000000400000000000007000000000000000061008a3d58f599459b02ead9d56b931362922585726d"], &(0x7f0000000300)=""/221, 0x2a, 0xdd, 0x1, 0x0, 0x0, @void, @value}, 0x28) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000180)='sys_enter\x00', r2}, 0x10) faccessat2(0xffffffffffffffff, 0x0, 0x46, 0x1100) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000002280)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e9232f118db0049d90491ceaebfd26ceeef23248000000f858dbb8a19052", 0x33}, {&(0x7f0000002200)="fcd206f7844cfa", 0x7}], 0x2) r5 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000640)='/proc/key-users\x00', 0x0, 0x0) read$char_usb(r6, &(0x7f0000001840)=""/4090, 0xffa) preadv(r6, &(0x7f0000000040)=[{&(0x7f0000000180)=""/128, 0x80}], 0x1, 0xffffffff, 0x0) read$char_usb(r6, &(0x7f0000000240)=""/34, 0x43) keyctl$restrict_keyring(0x1d, r5, 0x0, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r5, &(0x7f0000000040)='asymmetric\x00', &(0x7f0000000000)=@chain) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet_SIOCGIFBRDADDR(r6, 0x8919, &(0x7f0000000080)={'bridge_slave_1\x00', {0x2, 0x0, @multicast1}}) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001240)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x4000000, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x1, 0x0, 0x1ff, 0x0, 0xfffffc80, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3f, 0x0, 0x0, 0x0, 0xffffffff, 0x2, 0xc00, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x2, 0x0, 0x0, 0x7, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0xb97, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x5e, 0xfffffffc, 0x8, 0x0, 0x0, 0x3ffffd, 0x7, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0xb3c, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0xd79, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x100, 0x0, 0x4, 0xfffffffd, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0xfffffffd]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x1, 0x0, 0x0, 0x0, 0x0, 0x6}, {0xff}}}]}}]}, 0x45c}}, 0x0) 233.132823ms ago: executing program 0 (id=437): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000004840)={0x14, r1, 0x731, 0x0, 0x0, {0x38}}, 0x14}, 0x1, 0x2, 0x0, 0x880}, 0x4000) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) gettid() futex_waitv(0x0, 0x0, 0x0, 0x0, 0x1) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0xa, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x0, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r4}, 0x18) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x55, 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x18000000000002a0, 0xe06, 0x1000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) r6 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) setsockopt$TIPC_GROUP_LEAVE(r6, 0x10f, 0x88) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x2, 0x800000000000}, 0x1320, 0xffffffff, 0x3, 0x5, 0x0, 0x1, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r7 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r7, &(0x7f0000001240)=""/102400, 0x200000, 0x0) 232.855073ms ago: executing program 2 (id=438): mkdir(&(0x7f0000000180)='./file0\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0b00000007000000d7c9000009"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000540), &(0x7f0000000500)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000005000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) getxattr(0x0, 0x0, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000780), 0x0, 0x20008880) close(0xffffffffffffffff) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'}) 223.757344ms ago: executing program 2 (id=439): syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0}) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="8765990ee3d4361513d1930b712753ac982ca53b83f8fa4a00182d72737cd7188c76867de74bbeee8aaa341bba0cb59ad6ddfe7c798145708d04c7f3d611d53eb839cb3df3169fbb48de5d9bebee4dca55633dae7aef92108868c550b01e7c5ee09bfb0bf5f7cf9236be7574d6f93988", @ANYRESOCT=0x0], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\b\x00'/14], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000000400000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000500)='mm_page_alloc\x00', r0}, 0x10) creat(&(0x7f0000000080)='./bus\x00', 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000f50f"], 0x48}, 0x1, 0x0, 0x0, 0x20040884}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000640)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r7 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) close_range(r7, 0xffffffffffffffff, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000000100000024000180060005004e230000060001000200000008000300ac1414aa0800060001"], 0x38}, 0x1, 0x0, 0x0, 0x4000011}, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000580)={0x14, r6, 0x1, 0x70bd28, 0x25dfdbfc}, 0x14}}, 0x0) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r4, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="04002abd7000fcdbdf250b13000500040000000800040001000100050005000a0000000808000073e2767bf7085e0000800000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x40081}, 0x4044001) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="a90300000000334900003200000008004001"], 0x1c}}, 0x0) r9 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r9, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r9, 0x40047451, &(0x7f0000000200)=0x3) ioctl$PPPIOCSFLAGS1(r9, 0x40047459, &(0x7f0000000100)=0x2000004) pwritev(r9, &(0x7f0000000540)=[{&(0x7f00000002c0)="00214717a70700000000030600710a069d317ebb906c", 0xa1}], 0x1, 0x0, 0x0) 104.728973ms ago: executing program 2 (id=440): mkdir(&(0x7f0000000180)='./file0\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0b00000007000000d7c90000090000"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000540), &(0x7f0000000500)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000005000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) getxattr(0x0, 0x0, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000780), 0x0, 0x20008880) close(0xffffffffffffffff) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'}) 86.356824ms ago: executing program 2 (id=441): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ec0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) socket$tipc(0x1e, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1018e58, &(0x7f0000000280)={[{@max_batch_time={'max_batch_time', 0x3d, 0x6}}, {@noblock_validity}, {@user_xattr}, {@usrjquota_path={'usrjquota', 0x3d, './file0'}}, {@block_validity}, {@errors_continue}, {@inlinecrypt}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x4}}]}, 0x6, 0x5fc, &(0x7f0000000600)="$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") pipe(&(0x7f0000000080)={0xffffffffffffffff}) syz_mount_image$msdos(&(0x7f00000003c0), &(0x7f0000000340)='.\x00', 0x126a4b5, &(0x7f0000001280)=ANY=[], 0x6, 0x0, &(0x7f0000000000)) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000400)={0x70, 0x0, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0x300}}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc}]}, 0x70}, 0x1, 0x0, 0x0, 0x44080}, 0x8150) mmap$xdp(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x9, 0x4000010, r1, 0x0) 0s ago: executing program 2 (id=442): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000440)='./file2\x00', 0x404, &(0x7f0000000380)={[{@errors_remount}, {@resuid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@resgid}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$eJzs289rHFUcAPDvzCat/WViqT+aVo1WMfgjadJae/CiKHhQEPRQjzFJS+y2kSaCLUGjSD1Kwbt4FPwLPOlF1JPgVe9SKJJLq6eV2Z1Jdje7aZJustX9fGCS92be8t53Z97ue/N2AuhZw9mfJGJ/RPweEQO1bGOB4dq/W8uLU38vL04lUam89VdSLXdzeXGqKFq8bl+R6YtIP0viSIt65y9fOT9ZLs9cyvNjCxfeH5u/fOW52QuT52bOzVycOH365InxF05NPN+ROLO4bg59NHf08GvvXHtj6sy1d3/+Ninib4qjQ4bXO/hkpdLh6rrrQF066etiQ9iUUq2bRn+1/w9EKVZP3kC8+mlXGwdsq0qlUnmg/eGlCvA/lkS3WwB0R/FFn81/i22Hhh53hRsv1SZAWdy38q12pC/SvEx/0/y2k4Yj4szSP19lW2zPfQgAgAbfZ+OfZ1uN/9Kovy90b76GMhgR90XEwYg4FRGHIuL+iGrZByPioU3W37xIsnb8k17fUmAblI3/XszXthrHf8XoLwZLee5ANf7+5OxseeZ4/p6MRP/uLD++Th0/vPLbF+2O1Y//si2rvxgL5u243re78TXTkwuTdxJzvRufRAz1tYo/WVkJSCLicEQMbbGO2ae/Odru2O3jX0cH1pkqX0c8VTv/S9EUfyFZf31y7J4ozxwfK66KtX759eqb7eq/o/g7IDv/e1te/yvxDyb167Xzm6/j6h+ft53TbPX635W83bDvw8mFhUvjEbuS12uNrt8/0VRuYrV8Fv/Isdb9/2CsvhNHIiK7iB+OiEci4tG87Y9FxOMRcWyd+H96+Yn3th7/9srin97U+V9N7IrmPa0TpfM/ftdQ6eBm4s/O/8lqaiTfs5HPv420a2tXMwAAAPz3pBGxP5J0dCWdpqOjtd/wH4q9aXlufuGZs3MfXJyuPSMwGP1pcadroO5+6Hg+rS/yE035E/l94y9Le6r50am58nS3g4cet69N/8/8Wep264Bt53kt6F36P/Qu/R96l/4PvatF/9/TjXYAO6/V9//HXWgHsPOa+r9lP+gh5v/Qu/R/6F36P/Sk+T1x+4fkJSTWJCK9K5ohsU2Jbn8yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdMa/AQAA//9QOObV") bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="04000300"/20, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000400)={'veth1_to_bridge\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)=ANY=[@ANYBLOB="780000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000005000128009000100766c616e00000000400002800600010000000000340003800c000100ff010000060000000c0001007f000000000000000c000100ff000000010000000c000100ff0100000008000008000500", @ANYRES32=r4], 0x78}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) quotactl$Q_GETNEXTQUOTA(0xffffffff80000900, &(0x7f0000001700)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000001800)) kernel console output (not intermixed with test programs): 0: Port device team_slave_1 added [ 28.592087][ T3302] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.599297][ T3302] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.606846][ T3302] bridge_slave_1: entered allmulticast mode [ 28.613905][ T3302] bridge_slave_1: entered promiscuous mode [ 28.650779][ T3308] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.657889][ T3308] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.683965][ T3308] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.697301][ T3308] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.704429][ T3308] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.730952][ T3308] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.747002][ T3299] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.754118][ T3299] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.780397][ T3299] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.792328][ T3302] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.811352][ T3301] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.818640][ T3301] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.826198][ T3301] bridge_slave_0: entered allmulticast mode [ 28.832975][ T3301] bridge_slave_0: entered promiscuous mode [ 28.840352][ T3301] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.847446][ T3301] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.854697][ T3301] bridge_slave_1: entered allmulticast mode [ 28.861120][ T3301] bridge_slave_1: entered promiscuous mode [ 28.867414][ T3299] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.874453][ T3299] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.900510][ T3299] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.912719][ T3302] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.949264][ T3302] team0: Port device team_slave_0 added [ 28.960617][ T3309] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.967970][ T3309] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.976214][ T3309] bridge_slave_0: entered allmulticast mode [ 28.982708][ T3309] bridge_slave_0: entered promiscuous mode [ 28.996504][ T3301] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.006707][ T3302] team0: Port device team_slave_1 added [ 29.022897][ T3309] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.030298][ T3309] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.037724][ T3309] bridge_slave_1: entered allmulticast mode [ 29.044457][ T3309] bridge_slave_1: entered promiscuous mode [ 29.056399][ T3301] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.076705][ T3308] hsr_slave_0: entered promiscuous mode [ 29.082816][ T3308] hsr_slave_1: entered promiscuous mode [ 29.095355][ T3299] hsr_slave_0: entered promiscuous mode [ 29.101332][ T3299] hsr_slave_1: entered promiscuous mode [ 29.107182][ T3299] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 29.115029][ T3299] Cannot create hsr debugfs directory [ 29.125971][ T3302] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.133017][ T3302] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.159123][ T3302] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.171416][ T3302] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.179543][ T3302] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.206792][ T3302] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.224032][ T3309] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.233869][ T3301] team0: Port device team_slave_0 added [ 29.240834][ T3301] team0: Port device team_slave_1 added [ 29.257309][ T3309] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.304828][ T3301] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.311914][ T3301] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.340617][ T3301] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.368166][ T3309] team0: Port device team_slave_0 added [ 29.374445][ T3301] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.381483][ T3301] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.408920][ T3301] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.424203][ T3302] hsr_slave_0: entered promiscuous mode [ 29.430915][ T3302] hsr_slave_1: entered promiscuous mode [ 29.436755][ T3302] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 29.445600][ T3302] Cannot create hsr debugfs directory [ 29.454848][ T3309] team0: Port device team_slave_1 added [ 29.491634][ T3309] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.498607][ T3309] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.524698][ T3309] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.538272][ T3309] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.545656][ T3309] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.572662][ T3309] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.603310][ T3301] hsr_slave_0: entered promiscuous mode [ 29.609972][ T3301] hsr_slave_1: entered promiscuous mode [ 29.615888][ T3301] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 29.625219][ T3301] Cannot create hsr debugfs directory [ 29.690126][ T3309] hsr_slave_0: entered promiscuous mode [ 29.696491][ T3309] hsr_slave_1: entered promiscuous mode [ 29.702926][ T3309] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 29.711924][ T3309] Cannot create hsr debugfs directory [ 29.790664][ T3308] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 29.811826][ T3308] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 29.824923][ T3308] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 29.841170][ T3308] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 29.879147][ T3299] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 29.890387][ T3299] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 29.899717][ T3299] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 29.910419][ T3299] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 29.938169][ T3301] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 29.947749][ T3301] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 29.959527][ T3301] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 29.969346][ T3301] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 30.008463][ T3302] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 30.017504][ T3302] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 30.036368][ T3302] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 30.045555][ T3302] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 30.070587][ T3309] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 30.080166][ T3309] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 30.090581][ T3309] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 30.107944][ T3309] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 30.145592][ T3299] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.175377][ T3308] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.204810][ T3299] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.214320][ T3308] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.242547][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.250774][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.261673][ T3301] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.285280][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.293103][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.304317][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.313567][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.327122][ T3309] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.342429][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.350833][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.362806][ T3302] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.377736][ T3301] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.396778][ T3309] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.407953][ T1770] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.415163][ T1770] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.424959][ T1770] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.432915][ T1770] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.451296][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.459187][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.470878][ T3302] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.496502][ T3301] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 30.508265][ T3301] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 30.530828][ T1770] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.538647][ T1770] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.552332][ T38] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.561484][ T38] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.584456][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.592208][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.631099][ T3309] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 30.643994][ T3309] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 30.691821][ T3308] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.738232][ T3301] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.761306][ T3299] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.787011][ T3309] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.855125][ T3308] veth0_vlan: entered promiscuous mode [ 30.879976][ T3302] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.891910][ T3308] veth1_vlan: entered promiscuous mode [ 30.914078][ T3301] veth0_vlan: entered promiscuous mode [ 30.931638][ T3308] veth0_macvtap: entered promiscuous mode [ 30.946146][ T3308] veth1_macvtap: entered promiscuous mode [ 30.958410][ T3301] veth1_vlan: entered promiscuous mode [ 30.984191][ T3308] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.997896][ T3299] veth0_vlan: entered promiscuous mode [ 31.008036][ T3308] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.026799][ T3301] veth0_macvtap: entered promiscuous mode [ 31.035593][ T3308] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.045821][ T3308] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.056193][ T3308] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.066119][ T3308] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.086788][ T3299] veth1_vlan: entered promiscuous mode [ 31.099862][ T3301] veth1_macvtap: entered promiscuous mode [ 31.122904][ T3302] veth0_vlan: entered promiscuous mode [ 31.145586][ T3302] veth1_vlan: entered promiscuous mode [ 31.154837][ T3301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.166506][ T3301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.180631][ T3301] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.195094][ T3309] veth0_vlan: entered promiscuous mode [ 31.204529][ T3301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.215561][ T3301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.228536][ T3301] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.247218][ T3302] veth0_macvtap: entered promiscuous mode [ 31.264882][ T3299] veth0_macvtap: entered promiscuous mode [ 31.272678][ T3301] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.281949][ T3301] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.291464][ T3301] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.301898][ T3301] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.315227][ T3302] veth1_macvtap: entered promiscuous mode [ 31.322787][ T3308] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 31.326159][ T3299] veth1_macvtap: entered promiscuous mode [ 31.356999][ T3309] veth1_vlan: entered promiscuous mode [ 31.371637][ T29] kauditd_printk_skb: 30 callbacks suppressed [ 31.371653][ T29] audit: type=1400 audit(1739325901.065:122): avc: denied { create } for pid=3436 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 31.402944][ T29] audit: type=1326 audit(1739325901.075:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3436 comm="syz.2.3" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f722dc3cde9 code=0x7ffc0000 [ 31.411577][ T3299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.431789][ T29] audit: type=1326 audit(1739325901.075:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3436 comm="syz.2.3" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f722dc3cde9 code=0x7ffc0000 [ 31.442801][ T3299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.470315][ T29] audit: type=1326 audit(1739325901.075:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3436 comm="syz.2.3" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f722dc3cde9 code=0x7ffc0000 [ 31.470349][ T29] audit: type=1400 audit(1739325901.075:126): avc: denied { prog_load } for pid=3436 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 31.470374][ T29] audit: type=1400 audit(1739325901.075:127): avc: denied { bpf } for pid=3436 comm="syz.2.3" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 31.480589][ T3299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.505936][ T29] audit: type=1400 audit(1739325901.075:128): avc: denied { perfmon } for pid=3436 comm="syz.2.3" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 31.506019][ T29] audit: type=1326 audit(1739325901.075:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3436 comm="syz.2.3" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f722dc3cde9 code=0x7ffc0000 [ 31.528369][ T3299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.550589][ T29] audit: type=1326 audit(1739325901.075:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3436 comm="syz.2.3" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f722dc3cde9 code=0x7ffc0000 [ 31.550625][ T29] audit: type=1326 audit(1739325901.075:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3436 comm="syz.2.3" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f722dc3cde9 code=0x7ffc0000 [ 31.559367][ T3438] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3'. [ 31.641311][ T3299] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.681133][ T3302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.691711][ T3302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.701984][ T3302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.712678][ T3302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.722728][ T3302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.733372][ T3302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.747238][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.762874][ T3309] veth0_macvtap: entered promiscuous mode [ 31.771029][ T3309] veth1_macvtap: entered promiscuous mode [ 31.784744][ T3309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.795535][ T3309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.805965][ T3309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.816773][ T3309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.826932][ T3309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.837818][ T3309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.849597][ T3309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.860366][ T3309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.871641][ T3309] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.892201][ T3302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.902798][ T3302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.912850][ T3302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.923406][ T3302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.934461][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.945155][ T3299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.956778][ T3299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.966671][ T3299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.977877][ T3299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.987804][ T3299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.998482][ T3299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.009285][ T3299] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.020302][ T3299] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.031210][ T3299] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.040484][ T3299] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.049563][ T3299] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.062642][ T3302] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.071592][ T3302] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.080780][ T3302] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.089737][ T3302] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.102920][ T3309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.114104][ T3309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.124728][ T3309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.136065][ T3309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.146318][ T3309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.158811][ T3309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.169471][ T3309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.180385][ T3309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.192806][ T3309] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.204233][ T3309] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.215501][ T3309] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.225138][ T3309] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.236596][ T3309] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.402170][ T3453] netlink: 14 bytes leftover after parsing attributes in process `syz.4.5'. [ 32.464748][ T3455] loop3: detected capacity change from 0 to 1024 [ 32.495925][ T3455] EXT4-fs: Ignoring removed orlov option [ 32.519047][ T3455] EXT4-fs (loop3): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 32.544606][ T3455] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 32.577058][ T3455] EXT4-fs error (device loop3): ext4_find_dest_de:2079: inode #12: block 7: comm syz.3.7: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=56 fake=0 [ 32.641284][ T3455] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2863: Unable to expand inode 12. Delete some EAs or run e2fsck. [ 32.697330][ T3450] serio: Serial port ptm0 [ 32.721634][ T3464] EXT4-fs error (device loop3): ext4_check_all_de:656: inode #12: block 7: comm syz.3.7: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=124 fake=0 [ 32.811638][ T3466] loop1: detected capacity change from 0 to 512 [ 32.830963][ T3466] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 32.849950][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.878192][ T3466] EXT4-fs (loop1): 1 orphan inode deleted [ 32.886880][ T3466] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 32.919465][ T11] EXT4-fs error (device loop1): ext4_release_dquot:6950: comm kworker/u8:0: Failed to release dquot type 1 [ 32.949023][ T3466] ext4 filesystem being mounted at /1/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 32.983441][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.081312][ T3482] syz.1.13 (3482) used greatest stack depth: 10576 bytes left [ 33.169717][ T3490] loop1: detected capacity change from 0 to 1024 [ 33.196776][ T3490] EXT4-fs: Ignoring removed orlov option [ 33.260940][ T3490] EXT4-fs (loop1): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 33.329122][ T3490] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.360597][ T3499] loop4: detected capacity change from 0 to 128 [ 33.442751][ T3499] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x61ff7272 (sector = 1) [ 33.457284][ T3490] EXT4-fs error (device loop1): ext4_find_dest_de:2079: inode #12: block 7: comm syz.1.15: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=56 fake=0 [ 33.564886][ T3504] EXT4-fs error (device loop1): ext4_check_all_de:656: inode #12: block 7: comm syz.1.15: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=124 fake=0 [ 33.601062][ T3506] process 'syz.3.20' launched '/dev/fd/7' with NULL argv: empty string added [ 33.621466][ T3510] netlink: 'syz.0.17': attribute type 10 has an invalid length. [ 33.623708][ T3509] loop4: detected capacity change from 0 to 1024 [ 33.653558][ T3509] EXT4-fs: Ignoring removed orlov option [ 33.699865][ T3509] EXT4-fs (loop4): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 33.704269][ T3510] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.712596][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.758650][ T3509] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.766875][ T3510] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 33.791497][ T3522] loop1: detected capacity change from 0 to 512 [ 33.798857][ T3509] EXT4-fs error (device loop4): ext4_find_dest_de:2079: inode #12: block 7: comm syz.4.21: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=56 fake=0 [ 33.850768][ T3517] loop2: detected capacity change from 0 to 1024 [ 33.887051][ T3522] EXT4-fs (loop1): 1 orphan inode deleted [ 33.904516][ T3526] EXT4-fs error (device loop4): ext4_check_all_de:656: inode #12: block 7: comm syz.4.21: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=124 fake=0 [ 33.925355][ T3517] EXT4-fs: Ignoring removed orlov option [ 33.941460][ T3522] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.981741][ T3522] ext4 filesystem being mounted at /4/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 34.002016][ T3517] EXT4-fs (loop2): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 34.015288][ T50] EXT4-fs error (device loop1): ext4_release_dquot:6950: comm kworker/u8:3: Failed to release dquot type 1 [ 34.087676][ T3510] syz.0.17 (3510) used greatest stack depth: 10472 bytes left [ 34.111895][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.124491][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.131900][ T3517] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.252801][ T3517] EXT4-fs error (device loop2): ext4_find_dest_de:2079: inode #12: block 7: comm syz.2.24: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=56 fake=0 [ 34.367951][ T3523] EXT4-fs error (device loop2): ext4_check_all_de:656: inode #12: block 7: comm syz.2.24: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=124 fake=0 [ 34.641448][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.780352][ T3559] delete_channel: no stack [ 34.793815][ T3569] netlink: 'syz.4.34': attribute type 10 has an invalid length. [ 34.797871][ T3559] delete_channel: no stack [ 34.952292][ T3569] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 34.974787][ T3569] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 35.027498][ T3573] loop1: detected capacity change from 0 to 1024 [ 35.040050][ T3573] EXT4-fs: Ignoring removed orlov option [ 35.062829][ T3573] EXT4-fs (loop1): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 35.166104][ T3573] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.215281][ T3579] loop3: detected capacity change from 0 to 1024 [ 35.282689][ T3573] EXT4-fs error (device loop1): ext4_find_dest_de:2079: inode #12: block 7: comm syz.1.35: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=56 fake=0 [ 35.337670][ T3586] loop4: detected capacity change from 0 to 512 [ 35.346412][ T3579] EXT4-fs: Ignoring removed orlov option [ 35.383356][ T3579] EXT4-fs (loop3): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 35.401663][ T3591] EXT4-fs error (device loop1): ext4_check_all_de:656: inode #12: block 7: comm syz.1.35: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=124 fake=0 [ 35.443903][ T3586] EXT4-fs (loop4): 1 orphan inode deleted [ 35.452401][ T3586] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.467639][ T85] EXT4-fs error (device loop4): ext4_release_dquot:6950: comm kworker/u8:5: Failed to release dquot type 1 [ 35.505706][ T3579] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.544633][ T3586] ext4 filesystem being mounted at /5/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 35.560978][ T3579] EXT4-fs error (device loop3): ext4_find_dest_de:2079: inode #12: block 7: comm syz.3.37: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=56 fake=0 [ 35.613851][ T3600] EXT4-fs error (device loop3): ext4_check_all_de:656: inode #12: block 7: comm syz.3.37: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=124 fake=0 [ 35.652183][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.690993][ T3603] FAULT_INJECTION: forcing a failure. [ 35.690993][ T3603] name failslab, interval 1, probability 0, space 0, times 1 [ 35.705878][ T3603] CPU: 0 UID: 0 PID: 3603 Comm: syz.0.42 Not tainted 6.14.0-rc2-syzkaller-00039-g09fbf3d50205 #0 [ 35.705986][ T3603] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 35.706005][ T3603] Call Trace: [ 35.706014][ T3603] [ 35.706103][ T3603] dump_stack_lvl+0xf2/0x150 [ 35.706137][ T3603] dump_stack+0x15/0x1a [ 35.706163][ T3603] should_fail_ex+0x24a/0x260 [ 35.706203][ T3603] ? audit_log_d_path+0x96/0x250 [ 35.706241][ T3603] should_failslab+0x8f/0xb0 [ 35.706295][ T3603] __kmalloc_cache_noprof+0x4e/0x320 [ 35.706334][ T3603] audit_log_d_path+0x96/0x250 [ 35.706434][ T3603] ? __rcu_read_unlock+0x4e/0x70 [ 35.706455][ T3603] audit_log_d_path_exe+0x42/0x70 [ 35.706541][ T3603] audit_log_task+0x192/0x1c0 [ 35.706577][ T3603] audit_seccomp+0x68/0x130 [ 35.706610][ T3603] __seccomp_filter+0x6fa/0x1180 [ 35.706679][ T3603] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 35.706709][ T3603] ? vfs_write+0x644/0x920 [ 35.706782][ T3603] ? putname+0xcf/0xf0 [ 35.706822][ T3603] __secure_computing+0x9f/0x1c0 [ 35.706871][ T3603] syscall_trace_enter+0xd1/0x1f0 [ 35.706904][ T3603] ? fpregs_assert_state_consistent+0x83/0xa0 [ 35.706996][ T3603] do_syscall_64+0xaa/0x1c0 [ 35.707026][ T3603] ? clear_bhb_loop+0x55/0xb0 [ 35.707183][ T3603] ? clear_bhb_loop+0x55/0xb0 [ 35.707216][ T3603] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 35.707253][ T3603] RIP: 0033:0x7feca8b9cde9 [ 35.707275][ T3603] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 35.707310][ T3603] RSP: 002b:00007feca7201038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f9 [ 35.707456][ T3603] RAX: ffffffffffffffda RBX: 00007feca8db5fa0 RCX: 00007feca8b9cde9 [ 35.707467][ T3603] RDX: 0000400000001fee RSI: 0000400000001ffb RDI: 0000000000000000 [ 35.707479][ T3603] RBP: 00007feca7201090 R08: 0000000000000000 R09: 0000000000000000 [ 35.707490][ T3603] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 35.707501][ T3603] R13: 0000000000000000 R14: 00007feca8db5fa0 R15: 00007ffdeb094b68 [ 35.707584][ T3603] [ 35.962806][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.023394][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.295707][ T3614] loop2: detected capacity change from 0 to 764 [ 36.324338][ T3614] netlink: 12 bytes leftover after parsing attributes in process `syz.2.48'. [ 36.429486][ T29] kauditd_printk_skb: 207 callbacks suppressed [ 36.429511][ T29] audit: type=1400 audit(1739325906.115:336): avc: denied { unmount } for pid=3308 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 36.536214][ T3623] netlink: 12 bytes leftover after parsing attributes in process `syz.0.49'. [ 36.574410][ T29] audit: type=1400 audit(1739325906.175:337): avc: denied { bind } for pid=3624 comm="syz.2.50" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 36.599216][ T29] audit: type=1326 audit(1739325906.255:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3630 comm="syz.3.52" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f653594cde9 code=0x7ffc0000 [ 36.626622][ T29] audit: type=1326 audit(1739325906.255:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3630 comm="syz.3.52" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f653594cde9 code=0x7ffc0000 [ 36.655675][ T29] audit: type=1326 audit(1739325906.255:340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3630 comm="syz.3.52" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f653594cde9 code=0x7ffc0000 [ 36.719466][ T29] audit: type=1400 audit(1739325906.355:341): avc: denied { create } for pid=3615 comm="syz.0.49" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 36.741879][ T3635] loop0: detected capacity change from 0 to 512 [ 36.749154][ T29] audit: type=1326 audit(1739325906.385:342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3630 comm="syz.3.52" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f653594cde9 code=0x7ffc0000 [ 36.879718][ T29] audit: type=1326 audit(1739325906.415:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3630 comm="syz.3.52" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f653594cde9 code=0x7ffc0000 [ 36.910249][ T29] audit: type=1326 audit(1739325906.415:344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3630 comm="syz.3.52" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f653594cde9 code=0x7ffc0000 [ 36.939992][ T29] audit: type=1326 audit(1739325906.415:345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3630 comm="syz.3.52" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f653594cde9 code=0x7ffc0000 [ 37.029619][ T3635] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 37.067099][ T3635] EXT4-fs (loop0): orphan cleanup on readonly fs [ 37.234301][ T3635] EXT4-fs warning (device loop0): ext4_enable_quotas:7145: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 37.319127][ T3635] EXT4-fs (loop0): Cannot turn on quotas: error -117 [ 37.397733][ T3635] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.49: bg 0: block 40: padding at end of block bitmap is not set [ 37.582011][ T3635] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 37.740138][ T3635] EXT4-fs (loop0): 1 truncate cleaned up [ 37.773886][ T3635] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 37.861002][ T3635] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.925899][ T3674] loop2: detected capacity change from 0 to 1024 [ 37.986694][ T3674] ======================================================= [ 37.986694][ T3674] WARNING: The mand mount option has been deprecated and [ 37.986694][ T3674] and is ignored by this kernel. Remove the mand [ 37.986694][ T3674] option from the mount to silence this warning. [ 37.986694][ T3674] ======================================================= [ 38.170650][ T3674] EXT4-fs: Ignoring removed orlov option [ 38.177201][ T3674] EXT4-fs: Ignoring removed nobh option [ 38.185046][ T3674] EXT4-fs: inline encryption not supported [ 38.225845][ T3679] 9pnet: Could not find request transport: 0xffffffffffffffff [ 38.297090][ T3674] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 38.340084][ T3686] loop0: detected capacity change from 0 to 1024 [ 38.364871][ T3686] EXT4-fs: Ignoring removed orlov option [ 38.387647][ T3686] EXT4-fs (loop0): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 38.437029][ T3674] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.61: Invalid block bitmap block 0 in block_group 0 [ 38.469803][ T3692] loop1: detected capacity change from 0 to 1024 [ 38.477516][ T3692] EXT4-fs: Ignoring removed nobh option [ 38.483314][ T3692] EXT4-fs: Ignoring removed bh option [ 38.495193][ T3694] loop4: detected capacity change from 0 to 512 [ 38.499552][ T3674] EXT4-fs error (device loop2): ext4_acquire_dquot:6927: comm syz.2.61: Failed to acquire dquot type 0 [ 38.516215][ T3692] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.531645][ T3674] EXT4-fs error (device loop2): ext4_free_blocks:6589: comm syz.2.61: Freeing blocks not in datazone - block = 0, count = 4096 [ 38.546844][ T3674] EXT4-fs error (device loop2): ext4_read_inode_bitmap:139: comm syz.2.61: Invalid inode bitmap blk 0 in block_group 0 [ 38.560385][ T3694] EXT4-fs: Ignoring removed nobh option [ 38.570976][ T11] EXT4-fs error (device loop2): ext4_release_dquot:6950: comm kworker/u8:0: Failed to release dquot type 0 [ 38.590798][ T3674] EXT4-fs error (device loop2) in ext4_free_inode:361: Corrupt filesystem [ 38.610009][ T3674] EXT4-fs (loop2): 1 orphan inode deleted [ 38.621325][ T3674] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.627230][ T3694] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.663685][ T3686] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.698998][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.724841][ T3674] syz.2.61 (3674) used greatest stack depth: 9344 bytes left [ 38.766405][ T3686] EXT4-fs error (device loop0): ext4_find_dest_de:2079: inode #12: block 7: comm syz.0.64: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=56 fake=0 [ 38.808139][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.820954][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.831203][ T3704] EXT4-fs error (device loop0): ext4_check_all_de:656: inode #12: block 7: comm syz.0.64: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=124 fake=0 [ 38.834872][ T3705] loop1: detected capacity change from 0 to 256 [ 38.885620][ T3299] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.951284][ T3705] FAULT_INJECTION: forcing a failure. [ 38.951284][ T3705] name failslab, interval 1, probability 0, space 0, times 0 [ 38.970144][ T3705] CPU: 0 UID: 0 PID: 3705 Comm: syz.1.69 Not tainted 6.14.0-rc2-syzkaller-00039-g09fbf3d50205 #0 [ 38.970172][ T3705] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 38.970187][ T3705] Call Trace: [ 38.970194][ T3705] [ 38.970202][ T3705] dump_stack_lvl+0xf2/0x150 [ 38.970275][ T3705] dump_stack+0x15/0x1a [ 38.970297][ T3705] should_fail_ex+0x24a/0x260 [ 38.970338][ T3705] should_failslab+0x8f/0xb0 [ 38.970367][ T3705] kmem_cache_alloc_lru_noprof+0x57/0x320 [ 38.970409][ T3705] ? __d_alloc+0x3d/0x340 [ 38.970448][ T3705] ? msdos_format_name+0x74f/0x860 [ 38.970473][ T3705] __d_alloc+0x3d/0x340 [ 38.970666][ T3705] d_alloc_parallel+0x54/0xc80 [ 38.970696][ T3705] ? __rcu_read_unlock+0x4e/0x70 [ 38.970723][ T3705] ? __d_lookup+0x342/0x370 [ 38.970788][ T3705] ? try_to_unlazy+0x264/0x390 [ 38.970826][ T3705] path_openat+0x6c8/0x1fc0 [ 38.970861][ T3705] do_filp_open+0x107/0x230 [ 38.970930][ T3705] do_sys_openat2+0xab/0x120 [ 38.970968][ T3705] __x64_sys_openat+0xf3/0x120 [ 38.971005][ T3705] x64_sys_call+0x2b30/0x2dc0 [ 38.971041][ T3705] do_syscall_64+0xc9/0x1c0 [ 38.971073][ T3705] ? clear_bhb_loop+0x55/0xb0 [ 38.971182][ T3705] ? clear_bhb_loop+0x55/0xb0 [ 38.971227][ T3705] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 38.971263][ T3705] RIP: 0033:0x7f080743cde9 [ 38.971330][ T3705] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 38.971354][ T3705] RSP: 002b:00007f0805aa7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 38.971378][ T3705] RAX: ffffffffffffffda RBX: 00007f0807655fa0 RCX: 00007f080743cde9 [ 38.971393][ T3705] RDX: 000000000000275a RSI: 0000400000000080 RDI: ffffffffffffff9c [ 38.971408][ T3705] RBP: 00007f0805aa7090 R08: 0000000000000000 R09: 0000000000000000 [ 38.971422][ T3705] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 38.971507][ T3705] R13: 0000000000000000 R14: 00007f0807655fa0 R15: 00007ffec07af9e8 [ 38.971531][ T3705] [ 38.977057][ T3717] loop0: detected capacity change from 0 to 164 [ 39.365853][ T3717] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 39.383519][ T3723] loop4: detected capacity change from 0 to 8192 [ 39.450935][ T3723] loop4: p1 p2 p3 p4[EZD] [ 39.456412][ T3723] loop4: p1 size 16128 extends beyond EOD, truncated [ 39.490224][ T3723] loop4: p3 start 458783 is beyond EOD, truncated [ 39.499324][ T3723] loop4: p4 size 65536 extends beyond EOD, truncated [ 39.586149][ T3001] loop4: p1 p2 p3 p4[EZD] [ 39.593465][ T3001] loop4: p1 size 16128 extends beyond EOD, truncated [ 39.605643][ T3001] loop4: p3 start 458783 is beyond EOD, truncated [ 39.612970][ T3001] loop4: p4 size 65536 extends beyond EOD, truncated [ 39.625209][ T3734] loop3: detected capacity change from 0 to 128 [ 39.711678][ T3734] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 39.815506][ T3734] ext4 filesystem being mounted at /19/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 39.870374][ T3745] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 39.889581][ T3290] udevd[3290]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 39.889684][ T3618] udevd[3618]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 39.920163][ T3749] udevd[3749]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 39.956261][ T3618] udevd[3618]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 39.980291][ T3751] capability: warning: `syz.0.82' uses deprecated v2 capabilities in a way that may be insecure [ 40.061200][ T3755] loop2: detected capacity change from 0 to 512 [ 40.097334][ T3755] EXT4-fs (loop2): orphan cleanup on readonly fs [ 40.111036][ T3755] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.84: bg 0: block 248: padding at end of block bitmap is not set [ 40.189382][ T3762] netlink: 44 bytes leftover after parsing attributes in process `syz.1.87'. [ 40.204069][ T3755] EXT4-fs error (device loop2): ext4_acquire_dquot:6927: comm syz.2.84: Failed to acquire dquot type 1 [ 40.204117][ T3760] loop0: detected capacity change from 0 to 1024 [ 40.254849][ T3762] netlink: 40 bytes leftover after parsing attributes in process `syz.1.87'. [ 40.269991][ T3755] EXT4-fs (loop2): 1 truncate cleaned up [ 40.339377][ T3755] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 40.360513][ T3760] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.380071][ T3760] ext4 filesystem being mounted at /17/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 40.398923][ T3770] netlink: 8 bytes leftover after parsing attributes in process `syz.1.90'. [ 40.409032][ T3770] netlink: 8 bytes leftover after parsing attributes in process `syz.1.90'. [ 40.445508][ T3755] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 40.462326][ T3299] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.499307][ T3776] FAULT_INJECTION: forcing a failure. [ 40.499307][ T3776] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 40.516580][ T3776] CPU: 0 UID: 0 PID: 3776 Comm: syz.4.89 Not tainted 6.14.0-rc2-syzkaller-00039-g09fbf3d50205 #0 [ 40.516622][ T3776] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 40.516634][ T3776] Call Trace: [ 40.516641][ T3776] [ 40.516649][ T3776] dump_stack_lvl+0xf2/0x150 [ 40.516677][ T3776] dump_stack+0x15/0x1a [ 40.516699][ T3776] should_fail_ex+0x24a/0x260 [ 40.516836][ T3776] should_fail+0xb/0x10 [ 40.516869][ T3776] should_fail_usercopy+0x1a/0x20 [ 40.516957][ T3776] _copy_from_user+0x1c/0xa0 [ 40.517056][ T3776] snd_seq_ioctl+0x11b/0x2a0 [ 40.517086][ T3776] ? __pfx_snd_seq_ioctl+0x10/0x10 [ 40.517109][ T3776] __se_sys_ioctl+0xc9/0x140 [ 40.517133][ T3776] __x64_sys_ioctl+0x43/0x50 [ 40.517216][ T3776] x64_sys_call+0x1690/0x2dc0 [ 40.517246][ T3776] do_syscall_64+0xc9/0x1c0 [ 40.517294][ T3776] ? clear_bhb_loop+0x55/0xb0 [ 40.517348][ T3776] ? clear_bhb_loop+0x55/0xb0 [ 40.517375][ T3776] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 40.517405][ T3776] RIP: 0033:0x7fad6fb0cde9 [ 40.517423][ T3776] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 40.517444][ T3776] RSP: 002b:00007fad6e135038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 40.517464][ T3776] RAX: ffffffffffffffda RBX: 00007fad6fd26160 RCX: 00007fad6fb0cde9 [ 40.517477][ T3776] RDX: 0000400000000440 RSI: 00000000c0105303 RDI: 0000000000000008 [ 40.517490][ T3776] RBP: 00007fad6e135090 R08: 0000000000000000 R09: 0000000000000000 [ 40.517515][ T3776] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 40.517528][ T3776] R13: 0000000000000001 R14: 00007fad6fd26160 R15: 00007ffd750319c8 [ 40.517547][ T3776] [ 40.763058][ T3755] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 40.790708][ T3733] syz.3.76 (3733) used greatest stack depth: 6144 bytes left [ 40.807347][ T3301] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 40.855304][ T3783] wireguard0: entered promiscuous mode [ 40.861223][ T3783] wireguard0: entered allmulticast mode [ 40.913840][ T3794] FAULT_INJECTION: forcing a failure. [ 40.913840][ T3794] name failslab, interval 1, probability 0, space 0, times 0 [ 40.932612][ T3794] CPU: 1 UID: 0 PID: 3794 Comm: syz.3.95 Not tainted 6.14.0-rc2-syzkaller-00039-g09fbf3d50205 #0 [ 40.932640][ T3794] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 40.932686][ T3794] Call Trace: [ 40.932692][ T3794] [ 40.932699][ T3794] dump_stack_lvl+0xf2/0x150 [ 40.932727][ T3794] dump_stack+0x15/0x1a [ 40.932749][ T3794] should_fail_ex+0x24a/0x260 [ 40.932785][ T3794] should_failslab+0x8f/0xb0 [ 40.932810][ T3794] kmem_cache_alloc_node_noprof+0x59/0x320 [ 40.932892][ T3794] ? __alloc_skb+0x10b/0x310 [ 40.932917][ T3794] ? __list_del_entry_valid_or_report+0x66/0x130 [ 40.932943][ T3794] __alloc_skb+0x10b/0x310 [ 40.932968][ T3794] alloc_skb_with_frags+0x80/0x450 [ 40.933060][ T3794] sock_alloc_send_pskb+0x435/0x4f0 [ 40.933230][ T3794] unix_dgram_sendmsg+0x39b/0xea0 [ 40.933272][ T3794] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 40.933376][ T3794] __sock_sendmsg+0x140/0x180 [ 40.933399][ T3794] ____sys_sendmsg+0x312/0x410 [ 40.933441][ T3794] __sys_sendmmsg+0x227/0x4b0 [ 40.933493][ T3794] __x64_sys_sendmmsg+0x57/0x70 [ 40.933528][ T3794] x64_sys_call+0x29aa/0x2dc0 [ 40.933605][ T3794] do_syscall_64+0xc9/0x1c0 [ 40.933663][ T3794] ? clear_bhb_loop+0x55/0xb0 [ 40.933691][ T3794] ? clear_bhb_loop+0x55/0xb0 [ 40.933719][ T3794] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 40.933760][ T3794] RIP: 0033:0x7f653594cde9 [ 40.933775][ T3794] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 40.933793][ T3794] RSP: 002b:00007f6533fb7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 40.933811][ T3794] RAX: ffffffffffffffda RBX: 00007f6535b65fa0 RCX: 00007f653594cde9 [ 40.933823][ T3794] RDX: 0000000000000002 RSI: 0000400000000d40 RDI: 0000000000000003 [ 40.933835][ T3794] RBP: 00007f6533fb7090 R08: 0000000000000000 R09: 0000000000000000 [ 40.933907][ T3794] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 40.933918][ T3794] R13: 0000000000000000 R14: 00007f6535b65fa0 R15: 00007ffe9c0165c8 [ 40.934010][ T3794] [ 40.934296][ T3796] loop0: detected capacity change from 0 to 512 [ 41.165555][ T3796] EXT4-fs (loop0): couldn't mount as ext2 due to feature incompatibilities [ 41.205414][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.273675][ T3814] loop4: detected capacity change from 0 to 1024 [ 41.295109][ T3812] loop0: detected capacity change from 0 to 512 [ 41.295440][ T3814] EXT4-fs: Ignoring removed orlov option [ 41.315305][ T3814] EXT4-fs (loop4): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 41.337474][ T3812] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 41.372923][ T3812] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.391731][ T3812] ext4 filesystem being mounted at /19/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 41.395063][ T3814] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.434935][ T3812] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 41.448351][ T29] kauditd_printk_skb: 150 callbacks suppressed [ 41.448367][ T29] audit: type=1400 audit(1739325911.145:489): avc: denied { getopt } for pid=3810 comm="syz.0.102" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 41.500318][ T3299] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.514281][ T3814] EXT4-fs error (device loop4): ext4_find_dest_de:2079: inode #12: block 7: comm syz.4.103: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=56 fake=0 [ 41.555326][ T3814] EXT4-fs error (device loop4): ext4_check_all_de:656: inode #12: block 7: comm syz.4.103: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=124 fake=0 [ 41.598929][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.635506][ T29] audit: type=1326 audit(1739325911.325:490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3836 comm="syz.2.110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f722dc3cde9 code=0x7ffc0000 [ 41.688789][ T29] audit: type=1326 audit(1739325911.325:491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3836 comm="syz.2.110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f722dc3cde9 code=0x7ffc0000 [ 41.720510][ T29] audit: type=1326 audit(1739325911.325:492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3836 comm="syz.2.110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f722dc3cde9 code=0x7ffc0000 [ 41.749712][ T29] audit: type=1326 audit(1739325911.325:493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3836 comm="syz.2.110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f722dc3cde9 code=0x7ffc0000 [ 41.776317][ T29] audit: type=1326 audit(1739325911.355:494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3836 comm="syz.2.110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f722dc3cde9 code=0x7ffc0000 [ 41.802762][ T29] audit: type=1326 audit(1739325911.355:495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3836 comm="syz.2.110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f722dc3cde9 code=0x7ffc0000 [ 41.830311][ T29] audit: type=1400 audit(1739325911.375:496): avc: denied { create } for pid=3840 comm="syz.0.112" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 41.855847][ T29] audit: type=1326 audit(1739325911.375:497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3836 comm="syz.2.110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=306 compat=0 ip=0x7f722dc3cde9 code=0x7ffc0000 [ 41.880694][ T29] audit: type=1326 audit(1739325911.375:498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3836 comm="syz.2.110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f722dc3cde9 code=0x7ffc0000 [ 42.077836][ T3854] loop0: detected capacity change from 0 to 512 [ 42.084873][ T3854] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 42.098411][ T3850] FAULT_INJECTION: forcing a failure. [ 42.098411][ T3850] name failslab, interval 1, probability 0, space 0, times 0 [ 42.113803][ T3850] CPU: 1 UID: 0 PID: 3850 Comm: syz.2.114 Not tainted 6.14.0-rc2-syzkaller-00039-g09fbf3d50205 #0 [ 42.113828][ T3850] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 42.113853][ T3850] Call Trace: [ 42.113861][ T3850] [ 42.113870][ T3850] dump_stack_lvl+0xf2/0x150 [ 42.113976][ T3850] dump_stack+0x15/0x1a [ 42.114001][ T3850] should_fail_ex+0x24a/0x260 [ 42.114042][ T3850] should_failslab+0x8f/0xb0 [ 42.114094][ T3850] kmem_cache_alloc_noprof+0x52/0x320 [ 42.114126][ T3850] ? security_inode_alloc+0x37/0x100 [ 42.114157][ T3850] security_inode_alloc+0x37/0x100 [ 42.114228][ T3850] inode_init_always_gfp+0x4a2/0x4f0 [ 42.114259][ T3850] ? __pfx_proc_alloc_inode+0x10/0x10 [ 42.114422][ T3850] alloc_inode+0x82/0x160 [ 42.114456][ T3850] new_inode+0x1e/0x100 [ 42.114483][ T3850] proc_pid_make_inode+0x1d/0xd0 [ 42.114513][ T3850] proc_pid_instantiate+0x37/0x1a0 [ 42.114569][ T3850] proc_pid_lookup+0x125/0x1c0 [ 42.114618][ T3850] proc_root_lookup+0x1f/0x50 [ 42.114654][ T3850] __lookup_slow+0x18a/0x250 [ 42.114695][ T3850] lookup_slow+0x3c/0x60 [ 42.114734][ T3850] link_path_walk+0x668/0x830 [ 42.114830][ T3850] path_openat+0x1af/0x1fc0 [ 42.114851][ T3850] ? _parse_integer_limit+0x167/0x180 [ 42.114890][ T3850] ? kstrtouint_from_user+0xb0/0xe0 [ 42.114925][ T3850] do_filp_open+0x107/0x230 [ 42.114950][ T3850] ? __pfx_kfree_link+0x10/0x10 [ 42.115038][ T3850] do_sys_openat2+0xab/0x120 [ 42.115072][ T3850] __x64_sys_openat+0xf3/0x120 [ 42.115109][ T3850] x64_sys_call+0x2b30/0x2dc0 [ 42.115138][ T3850] do_syscall_64+0xc9/0x1c0 [ 42.115252][ T3850] ? clear_bhb_loop+0x55/0xb0 [ 42.115285][ T3850] ? clear_bhb_loop+0x55/0xb0 [ 42.115317][ T3850] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 42.115383][ T3850] RIP: 0033:0x7f722dc3b750 [ 42.115398][ T3850] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44 [ 42.115418][ T3850] RSP: 002b:00007f722c2a6f10 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 42.115501][ T3850] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f722dc3b750 [ 42.115513][ T3850] RDX: 0000000000000002 RSI: 00007f722c2a6fa0 RDI: 00000000ffffff9c [ 42.115525][ T3850] RBP: 00007f722c2a6fa0 R08: 0000000000000000 R09: 00007f722c2a6cd6 [ 42.115537][ T3850] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 42.115548][ T3850] R13: 0000000000000000 R14: 00007f722de55fa0 R15: 00007ffce131b018 [ 42.115568][ T3850] [ 42.406893][ T3854] EXT4-fs (loop0): 1 truncate cleaned up [ 42.415727][ T3854] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.478986][ T3299] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.501379][ T3859] loop1: detected capacity change from 0 to 1024 [ 42.573095][ T3859] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.631985][ T3859] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 42.794514][ T3872] SELinux: failed to load policy [ 42.821128][ T3872] hub 9-0:1.0: USB hub found [ 42.835559][ T3872] hub 9-0:1.0: 8 ports detected [ 42.972400][ T3881] FAULT_INJECTION: forcing a failure. [ 42.972400][ T3881] name failslab, interval 1, probability 0, space 0, times 0 [ 42.987705][ T3881] CPU: 0 UID: 0 PID: 3881 Comm: syz.4.124 Not tainted 6.14.0-rc2-syzkaller-00039-g09fbf3d50205 #0 [ 42.987735][ T3881] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 42.987748][ T3881] Call Trace: [ 42.987755][ T3881] [ 42.987762][ T3881] dump_stack_lvl+0xf2/0x150 [ 42.987829][ T3881] dump_stack+0x15/0x1a [ 42.987855][ T3881] should_fail_ex+0x24a/0x260 [ 42.987896][ T3881] should_failslab+0x8f/0xb0 [ 42.987921][ T3881] kmem_cache_alloc_noprof+0x52/0x320 [ 42.987953][ T3881] ? alloc_empty_file+0xd0/0x200 [ 42.988064][ T3881] ? _raw_spin_unlock+0x26/0x50 [ 42.988097][ T3881] alloc_empty_file+0xd0/0x200 [ 42.988127][ T3881] alloc_file_pseudo+0xc9/0x160 [ 42.988184][ T3881] aio_setup_ring+0x137/0x700 [ 42.988218][ T3881] ioctx_alloc+0x2b2/0x4c0 [ 42.988262][ T3881] __se_sys_io_setup+0x6b/0x1b0 [ 42.988290][ T3881] __x64_sys_io_setup+0x31/0x40 [ 42.988336][ T3881] x64_sys_call+0x160f/0x2dc0 [ 42.988367][ T3881] do_syscall_64+0xc9/0x1c0 [ 42.988396][ T3881] ? clear_bhb_loop+0x55/0xb0 [ 42.988456][ T3881] ? clear_bhb_loop+0x55/0xb0 [ 42.988489][ T3881] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 42.988522][ T3881] RIP: 0033:0x7fad6fb0cde9 [ 42.988539][ T3881] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 42.988559][ T3881] RSP: 002b:00007fad6e177038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 42.988577][ T3881] RAX: ffffffffffffffda RBX: 00007fad6fd25fa0 RCX: 00007fad6fb0cde9 [ 42.988645][ T3881] RDX: 0000000000000000 RSI: 0000400000000640 RDI: 00000000000003ff [ 42.988659][ T3881] RBP: 00007fad6e177090 R08: 0000000000000000 R09: 0000000000000000 [ 42.988672][ T3881] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 42.988686][ T3881] R13: 0000000000000000 R14: 00007fad6fd25fa0 R15: 00007ffd750319c8 [ 42.988707][ T3881] [ 43.258502][ T3859] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.510822][ T3920] 9pnet: p9_errstr2errno: server reported unknown error @í΂Í( [ 43.629836][ T3932] Zero length message leads to an empty skb [ 43.637015][ T3932] FAULT_INJECTION: forcing a failure. [ 43.637015][ T3932] name failslab, interval 1, probability 0, space 0, times 0 [ 43.652447][ T3932] CPU: 1 UID: 0 PID: 3932 Comm: syz.0.134 Not tainted 6.14.0-rc2-syzkaller-00039-g09fbf3d50205 #0 [ 43.652475][ T3932] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 43.652488][ T3932] Call Trace: [ 43.652495][ T3932] [ 43.652512][ T3932] dump_stack_lvl+0xf2/0x150 [ 43.652551][ T3932] dump_stack+0x15/0x1a [ 43.652612][ T3932] should_fail_ex+0x24a/0x260 [ 43.652645][ T3932] ? gf128mul_init_4k_lle+0x3c/0x470 [ 43.652664][ T3932] should_failslab+0x8f/0xb0 [ 43.652690][ T3932] __kmalloc_cache_noprof+0x4e/0x320 [ 43.652795][ T3932] gf128mul_init_4k_lle+0x3c/0x470 [ 43.652817][ T3932] ghash_setkey+0x89/0xe0 [ 43.652909][ T3932] crypto_shash_setkey+0x43/0xe0 [ 43.652948][ T3932] crypto_ahash_setkey+0x4f/0x160 [ 43.653004][ T3932] crypto_gcm_setkey+0x28e/0x2b0 [ 43.653028][ T3932] crypto_aead_setkey+0xe5/0x160 [ 43.653056][ T3932] macsec_validate_attr+0x139/0x600 [ 43.653082][ T3932] rtnl_newlink+0x7c4/0x1250 [ 43.653118][ T3932] ? xas_load+0x3ae/0x3d0 [ 43.653143][ T3932] ? kmem_cache_free+0xdc/0x2d0 [ 43.653294][ T3932] ? __kfree_skb+0x102/0x150 [ 43.653327][ T3932] ? packet_rcv+0xd4/0x990 [ 43.653411][ T3932] ? sk_skb_reason_drop+0xba/0x290 [ 43.653439][ T3932] ? packet_rcv+0xd4/0x990 [ 43.653463][ T3932] ? __rcu_read_unlock+0x4e/0x70 [ 43.653485][ T3932] ? avc_has_perm_noaudit+0x1cc/0x210 [ 43.653532][ T3932] ? selinux_capable+0x1f2/0x260 [ 43.653564][ T3932] ? security_capable+0x81/0x90 [ 43.653660][ T3932] ? ns_capable+0x7d/0xb0 [ 43.653758][ T3932] ? __pfx_rtnl_newlink+0x10/0x10 [ 43.653825][ T3932] rtnetlink_rcv_msg+0x651/0x710 [ 43.653854][ T3932] ? ref_tracker_free+0x3a5/0x410 [ 43.653910][ T3932] ? __dev_queue_xmit+0x186/0x2090 [ 43.653940][ T3932] netlink_rcv_skb+0x12c/0x230 [ 43.654036][ T3932] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 43.654072][ T3932] rtnetlink_rcv+0x1c/0x30 [ 43.654100][ T3932] netlink_unicast+0x599/0x670 [ 43.654170][ T3932] netlink_sendmsg+0x5cc/0x6e0 [ 43.654208][ T3932] ? __pfx_netlink_sendmsg+0x10/0x10 [ 43.654305][ T3932] __sock_sendmsg+0x140/0x180 [ 43.654382][ T3932] ____sys_sendmsg+0x312/0x410 [ 43.654415][ T3932] __sys_sendmsg+0x19d/0x230 [ 43.654458][ T3932] __x64_sys_sendmsg+0x46/0x50 [ 43.654566][ T3932] x64_sys_call+0x2734/0x2dc0 [ 43.654595][ T3932] do_syscall_64+0xc9/0x1c0 [ 43.654619][ T3932] ? clear_bhb_loop+0x55/0xb0 [ 43.654647][ T3932] ? clear_bhb_loop+0x55/0xb0 [ 43.654725][ T3932] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 43.654751][ T3932] RIP: 0033:0x7feca8b9cde9 [ 43.654767][ T3932] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 43.654785][ T3932] RSP: 002b:00007feca7201038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 43.654803][ T3932] RAX: ffffffffffffffda RBX: 00007feca8db5fa0 RCX: 00007feca8b9cde9 [ 43.654815][ T3932] RDX: 0000000000000000 RSI: 0000400000000040 RDI: 0000000000000006 [ 43.654900][ T3932] RBP: 00007feca7201090 R08: 0000000000000000 R09: 0000000000000000 [ 43.654959][ T3932] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 43.654970][ T3932] R13: 0000000000000000 R14: 00007feca8db5fa0 R15: 00007ffdeb094b68 [ 43.654987][ T3932] [ 44.034981][ T3930] loop1: detected capacity change from 0 to 512 [ 44.053109][ T3930] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 44.061242][ T3935] netlink: 'syz.3.135': attribute type 1 has an invalid length. [ 44.070495][ T3935] netlink: 'syz.3.135': attribute type 2 has an invalid length. [ 44.071444][ T3930] EXT4-fs (loop1): orphan cleanup on readonly fs [ 44.086523][ T3935] netlink: 4 bytes leftover after parsing attributes in process `syz.3.135'. [ 44.099855][ T3930] EXT4-fs warning (device loop1): ext4_enable_quotas:7145: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 44.173163][ T3930] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 44.204836][ T3930] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.133: bg 0: block 40: padding at end of block bitmap is not set [ 44.228161][ T3930] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 44.293540][ T3930] EXT4-fs (loop1): 1 truncate cleaned up [ 44.301844][ T3930] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 44.345364][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.414943][ T3957] loop1: detected capacity change from 0 to 512 [ 44.468454][ T3957] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.487808][ T3964] loop2: detected capacity change from 0 to 512 [ 44.510208][ T3957] ext4 filesystem being mounted at /27/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 44.890931][ T3964] EXT4-fs warning (device loop2): ext4_enable_quotas:7145: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 44.908607][ T3964] EXT4-fs (loop2): mount failed [ 44.931125][ T3964] netlink: 8 bytes leftover after parsing attributes in process `syz.2.142'. [ 44.950918][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.971261][ T3964] loop2: detected capacity change from 0 to 512 [ 45.010902][ T3964] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 45.133076][ T3964] EXT4-fs error (device loop2): ext4_orphan_get:1389: inode #17: comm syz.2.142: iget: bad i_size value: -6917529027641081756 [ 45.179318][ T3964] EXT4-fs error (device loop2): ext4_orphan_get:1394: comm syz.2.142: couldn't read orphan inode 17 (err -117) [ 45.200645][ T3964] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.334058][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.412617][ T3991] loop2: detected capacity change from 0 to 1024 [ 45.428185][ T3991] EXT4-fs: Ignoring removed orlov option [ 45.457060][ T3991] EXT4-fs (loop2): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 45.473956][ T3991] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.492685][ T3996] netlink: 296 bytes leftover after parsing attributes in process `syz.4.150'. [ 45.504028][ T3996] unsupported nlmsg_type 40 [ 45.515064][ T3991] EXT4-fs error (device loop2): ext4_find_dest_de:2079: inode #12: block 7: comm syz.2.148: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=56 fake=0 [ 45.563565][ T3998] loop4: detected capacity change from 0 to 1024 [ 45.574384][ T3999] EXT4-fs error (device loop2): ext4_check_all_de:656: inode #12: block 7: comm syz.2.148: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=124 fake=0 [ 45.583213][ T3998] EXT4-fs: Ignoring removed nobh option [ 45.619357][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.630907][ T3998] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.704309][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.814461][ T4012] syz.4.155 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 45.874846][ T4016] loop3: detected capacity change from 0 to 2048 [ 45.882926][ T4016] EXT4-fs: Ignoring removed nomblk_io_submit option [ 45.891558][ T4016] ext4: Unknown parameter 'dont_measure' [ 45.966731][ T4018] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 46.328009][ T4028] netlink: 12 bytes leftover after parsing attributes in process `syz.1.161'. [ 46.347970][ T4028] loop1: detected capacity change from 0 to 512 [ 46.361670][ T4028] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 46.372258][ T4028] EXT4-fs (loop1): orphan cleanup on readonly fs [ 46.378886][ T4028] EXT4-fs warning (device loop1): ext4_enable_quotas:7145: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 46.398549][ T4028] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 46.405976][ T4028] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.161: bg 0: block 40: padding at end of block bitmap is not set [ 46.423290][ T4028] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 46.434328][ T4028] EXT4-fs (loop1): 1 truncate cleaned up [ 46.440886][ T4028] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 46.456888][ T4028] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.664284][ T29] kauditd_printk_skb: 206 callbacks suppressed [ 46.664301][ T29] audit: type=1400 audit(1739325916.355:703): avc: denied { write } for pid=4045 comm="syz.4.167" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 46.752456][ T4053] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 46.761678][ T4053] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 46.815174][ T29] audit: type=1326 audit(1739325916.505:704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4054 comm="syz.3.171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f653594cde9 code=0x7ffc0000 [ 46.842967][ T29] audit: type=1326 audit(1739325916.505:705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4054 comm="syz.3.171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f653594cde9 code=0x7ffc0000 [ 46.870789][ T29] audit: type=1326 audit(1739325916.535:706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4054 comm="syz.3.171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f653594cde9 code=0x7ffc0000 [ 46.897128][ T29] audit: type=1326 audit(1739325916.535:707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4054 comm="syz.3.171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f653594cde9 code=0x7ffc0000 [ 46.921594][ T29] audit: type=1326 audit(1739325916.535:708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4054 comm="syz.3.171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f653594cde9 code=0x7ffc0000 [ 46.947125][ T29] audit: type=1326 audit(1739325916.535:709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4054 comm="syz.3.171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f653594cde9 code=0x7ffc0000 [ 46.971351][ T29] audit: type=1326 audit(1739325916.535:710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4054 comm="syz.3.171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f653594cde9 code=0x7ffc0000 [ 46.995270][ T29] audit: type=1326 audit(1739325916.535:711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4054 comm="syz.3.171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f653594cde9 code=0x7ffc0000 [ 47.019485][ T29] audit: type=1326 audit(1739325916.565:712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4054 comm="syz.3.171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f653594cde9 code=0x7ffc0000 [ 47.046642][ T4061] xt_connbytes: Forcing CT accounting to be enabled [ 47.055467][ T4061] Cannot find add_set index 0 as target [ 47.312386][ T4074] loop4: detected capacity change from 0 to 2048 [ 47.331983][ T4078] loop1: detected capacity change from 0 to 512 [ 47.351575][ T4078] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 47.364677][ T4078] ext4 filesystem being mounted at /38/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 47.365881][ T4074] loop4: p1 < > p4 [ 47.382175][ T4074] loop4: p4 size 8388608 extends beyond EOD, truncated [ 47.425470][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 47.534215][ T4090] xt_connbytes: Forcing CT accounting to be enabled [ 47.541286][ T4090] Cannot find add_set index 0 as target [ 47.875809][ T4122] Cannot find add_set index 0 as target [ 47.906568][ T4125] netlink: 24 bytes leftover after parsing attributes in process `syz.4.197'. [ 47.945743][ T4125] netlink: '+}[@': attribute type 13 has an invalid length. [ 47.975166][ T4128] program syz.1.198 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 48.002205][ T4128] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 48.015411][ T4128] loop1: detected capacity change from 0 to 512 [ 48.027353][ T4128] EXT4-fs: Ignoring removed oldalloc option [ 48.051380][ T4132] netlink: 'syz.3.199': attribute type 1 has an invalid length. [ 48.060139][ T4128] EXT4-fs error (device loop1): ext4_xattr_inode_iget:436: comm syz.1.198: Parent and EA inode have the same ino 15 [ 48.071205][ T4125] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.080960][ T4125] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.100994][ T4132] loop3: detected capacity change from 0 to 1024 [ 48.106608][ T4128] EXT4-fs (loop1): Remounting filesystem read-only [ 48.113440][ T4132] EXT4-fs: Ignoring removed oldalloc option [ 48.114586][ T4128] EXT4-fs warning (device loop1): ext4_evict_inode:259: couldn't mark inode dirty (err -5) [ 48.132800][ T4128] EXT4-fs (loop1): 1 orphan inode deleted [ 48.146247][ T4132] EXT4-fs (loop3): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 48.154302][ T4128] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.172035][ T4128] SELinux: (dev loop1, type ext4) getxattr errno 5 [ 48.184989][ T4128] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.235706][ T4132] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.308995][ T4125] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 48.334030][ T4125] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 48.398478][ T4125] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.407978][ T4125] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.417678][ T4125] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.426824][ T4125] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.624897][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.646161][ T4170] syz.1.203 uses obsolete (PF_INET,SOCK_PACKET) [ 48.696563][ T4173] delete_channel: no stack [ 48.701806][ T4173] delete_channel: no stack [ 48.734370][ T4170] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 48.753170][ T4181] loop3: detected capacity change from 0 to 128 [ 48.766214][ T4181] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 48.781905][ T4181] ext4 filesystem being mounted at /37/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 48.904266][ T3301] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 48.933548][ T4202] loop2: detected capacity change from 0 to 2048 [ 48.982536][ T4202] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.144070][ T4214] netlink: 8 bytes leftover after parsing attributes in process `syz.1.216'. [ 49.153499][ T4214] netlink: 4 bytes leftover after parsing attributes in process `syz.1.216'. [ 49.234444][ T4219] delete_channel: no stack [ 49.252727][ T4219] delete_channel: no stack [ 49.266019][ T85] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 49.295388][ T85] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2048 with error 28 [ 49.308872][ T85] EXT4-fs (loop2): This should not happen!! Data will be lost [ 49.308872][ T85] [ 49.318787][ T85] EXT4-fs (loop2): Total free blocks count 0 [ 49.325001][ T85] EXT4-fs (loop2): Free/Dirty block details [ 49.331214][ T85] EXT4-fs (loop2): free_blocks=2415919504 [ 49.337355][ T85] EXT4-fs (loop2): dirty_blocks=8192 [ 49.342913][ T85] EXT4-fs (loop2): Block reservation details [ 49.349833][ T85] EXT4-fs (loop2): i_reserved_data_blocks=512 [ 49.363295][ T4228] geneve0: entered allmulticast mode [ 49.376220][ T85] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 2050 with max blocks 2048 with error 28 [ 49.479156][ T4235] loop3: detected capacity change from 0 to 2048 [ 49.520073][ T4235] loop3: p1 < > p4 [ 49.524579][ T4235] loop3: p4 size 8388608 extends beyond EOD, truncated [ 49.654200][ T4247] loop2: detected capacity change from 0 to 512 [ 49.672261][ T4247] EXT4-fs (loop2): corrupt root inode, run e2fsck [ 49.678938][ T4247] EXT4-fs (loop2): mount failed [ 49.721443][ T4252] xt_CT: You must specify a L4 protocol and not use inversions on it [ 49.839223][ T4258] FAULT_INJECTION: forcing a failure. [ 49.839223][ T4258] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 49.848144][ T4254] netlink: 8 bytes leftover after parsing attributes in process `syz.2.233'. [ 49.852766][ T4258] CPU: 0 UID: 0 PID: 4258 Comm: syz.4.234 Not tainted 6.14.0-rc2-syzkaller-00039-g09fbf3d50205 #0 [ 49.852798][ T4258] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 49.852814][ T4258] Call Trace: [ 49.852821][ T4258] [ 49.852831][ T4258] dump_stack_lvl+0xf2/0x150 [ 49.852867][ T4258] dump_stack+0x15/0x1a [ 49.852894][ T4258] should_fail_ex+0x24a/0x260 [ 49.852976][ T4258] should_fail+0xb/0x10 [ 49.853013][ T4258] should_fail_usercopy+0x1a/0x20 [ 49.853036][ T4258] strncpy_from_user+0x25/0x210 [ 49.853107][ T4258] ? __kmalloc_cache_noprof+0x186/0x320 [ 49.853152][ T4258] __se_sys_memfd_create+0x218/0x5a0 [ 49.853180][ T4258] __x64_sys_memfd_create+0x31/0x40 [ 49.853281][ T4258] x64_sys_call+0x2d4c/0x2dc0 [ 49.853315][ T4258] do_syscall_64+0xc9/0x1c0 [ 49.853346][ T4258] ? clear_bhb_loop+0x55/0xb0 [ 49.853380][ T4258] ? clear_bhb_loop+0x55/0xb0 [ 49.853413][ T4258] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 49.853482][ T4258] RIP: 0033:0x7fad6fb0cde9 [ 49.853501][ T4258] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 49.853522][ T4258] RSP: 002b:00007fad6e176e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 49.853545][ T4258] RAX: ffffffffffffffda RBX: 000000000000041e RCX: 00007fad6fb0cde9 [ 49.853560][ T4258] RDX: 00007fad6e176ef0 RSI: 0000000000000000 RDI: 00007fad6fb8ec51 [ 49.853656][ T4258] RBP: 0000400000000880 R08: 00007fad6e176bb7 R09: 00007fad6e176e40 [ 49.853670][ T4258] R10: 000000000000000a R11: 0000000000000202 R12: 00004000000003c0 [ 49.853685][ T4258] R13: 00007fad6e176ef0 R14: 00007fad6e176eb0 R15: 0000400000000000 [ 49.853707][ T4258] [ 50.041751][ T4254] netlink: 4 bytes leftover after parsing attributes in process `syz.2.233'. [ 50.221758][ T4282] netlink: 12 bytes leftover after parsing attributes in process `syz.1.243'. [ 50.233739][ T4282] mmap: syz.1.243 (4282) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 50.498073][ T4291] loop3: detected capacity change from 0 to 128 [ 50.505436][ T4291] vfat: Unknown parameter '0xffffffffffffffff' [ 50.518869][ T4291] netlink: 4 bytes leftover after parsing attributes in process `GPL'. [ 50.527329][ T4291] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 50.534988][ T4291] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 50.543239][ T4291] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 50.551728][ T4291] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 50.678264][ T4297] FAULT_INJECTION: forcing a failure. [ 50.678264][ T4297] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 50.691615][ T4297] CPU: 0 UID: 0 PID: 4297 Comm: syz.0.249 Not tainted 6.14.0-rc2-syzkaller-00039-g09fbf3d50205 #0 [ 50.691640][ T4297] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 50.691652][ T4297] Call Trace: [ 50.691658][ T4297] [ 50.691667][ T4297] dump_stack_lvl+0xf2/0x150 [ 50.691696][ T4297] dump_stack+0x15/0x1a [ 50.691716][ T4297] should_fail_ex+0x24a/0x260 [ 50.691750][ T4297] should_fail+0xb/0x10 [ 50.691844][ T4297] should_fail_usercopy+0x1a/0x20 [ 50.691862][ T4297] _copy_from_user+0x1c/0xa0 [ 50.691885][ T4297] move_addr_to_kernel+0x82/0x120 [ 50.691905][ T4297] copy_msghdr_from_user+0x271/0x2a0 [ 50.691933][ T4297] __sys_sendmsg+0x13e/0x230 [ 50.691988][ T4297] __x64_sys_sendmsg+0x46/0x50 [ 50.692013][ T4297] x64_sys_call+0x2734/0x2dc0 [ 50.692103][ T4297] do_syscall_64+0xc9/0x1c0 [ 50.692123][ T4297] ? clear_bhb_loop+0x55/0xb0 [ 50.692146][ T4297] ? clear_bhb_loop+0x55/0xb0 [ 50.692169][ T4297] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.692201][ T4297] RIP: 0033:0x7feca8b9cde9 [ 50.692214][ T4297] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 50.692229][ T4297] RSP: 002b:00007feca7201038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 50.692245][ T4297] RAX: ffffffffffffffda RBX: 00007feca8db5fa0 RCX: 00007feca8b9cde9 [ 50.692255][ T4297] RDX: 0000000000000000 RSI: 0000400000000980 RDI: 0000000000000003 [ 50.692265][ T4297] RBP: 00007feca7201090 R08: 0000000000000000 R09: 0000000000000000 [ 50.692279][ T4297] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 50.692357][ T4297] R13: 0000000000000000 R14: 00007feca8db5fa0 R15: 00007ffdeb094b68 [ 50.692373][ T4297] [ 51.106135][ T4312] netlink: 'syz.4.254': attribute type 7 has an invalid length. [ 51.114527][ T4312] netlink: 8 bytes leftover after parsing attributes in process `syz.4.254'. [ 51.198481][ T4319] SELinux: policydb magic number 0x4553080f does not match expected magic number 0xf97cff8c [ 51.222243][ C0] hrtimer: interrupt took 29514 ns [ 51.243788][ T4319] SELinux: failed to load policy [ 51.254062][ T4324] FAULT_INJECTION: forcing a failure. [ 51.254062][ T4324] name failslab, interval 1, probability 0, space 0, times 0 [ 51.257702][ T4321] loop4: detected capacity change from 0 to 512 [ 51.267775][ T4324] CPU: 1 UID: 0 PID: 4324 Comm: syz.0.259 Not tainted 6.14.0-rc2-syzkaller-00039-g09fbf3d50205 #0 [ 51.267808][ T4324] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 51.267999][ T4324] Call Trace: [ 51.268007][ T4324] [ 51.268017][ T4324] dump_stack_lvl+0xf2/0x150 [ 51.268052][ T4324] dump_stack+0x15/0x1a [ 51.268079][ T4324] should_fail_ex+0x24a/0x260 [ 51.268119][ T4324] should_failslab+0x8f/0xb0 [ 51.268182][ T4324] kmem_cache_alloc_node_noprof+0x59/0x320 [ 51.268292][ T4324] ? __alloc_skb+0x10b/0x310 [ 51.268334][ T4324] __alloc_skb+0x10b/0x310 [ 51.268364][ T4324] netlink_alloc_large_skb+0xad/0xe0 [ 51.268405][ T4324] netlink_sendmsg+0x3b4/0x6e0 [ 51.268449][ T4324] ? __pfx_netlink_sendmsg+0x10/0x10 [ 51.268543][ T4324] __sock_sendmsg+0x140/0x180 [ 51.268579][ T4324] ____sys_sendmsg+0x312/0x410 [ 51.268615][ T4324] __sys_sendmmsg+0x227/0x4b0 [ 51.268682][ T4324] __x64_sys_sendmmsg+0x57/0x70 [ 51.268734][ T4324] x64_sys_call+0x29aa/0x2dc0 [ 51.268786][ T4324] do_syscall_64+0xc9/0x1c0 [ 51.268829][ T4324] ? clear_bhb_loop+0x55/0xb0 [ 51.268864][ T4324] ? clear_bhb_loop+0x55/0xb0 [ 51.268898][ T4324] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.268931][ T4324] RIP: 0033:0x7feca8b9cde9 [ 51.268952][ T4324] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 51.269016][ T4324] RSP: 002b:00007feca7201038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 51.269071][ T4324] RAX: ffffffffffffffda RBX: 00007feca8db5fa0 RCX: 00007feca8b9cde9 [ 51.269087][ T4324] RDX: 04000000000001f2 RSI: 0000400000000000 RDI: 0000000000000004 [ 51.269102][ T4324] RBP: 00007feca7201090 R08: 0000000000000000 R09: 0000000000000000 [ 51.269151][ T4324] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 51.269162][ T4324] R13: 0000000000000000 R14: 00007feca8db5fa0 R15: 00007ffdeb094b68 [ 51.269180][ T4324] [ 51.503574][ T4321] EXT4-fs: Ignoring removed oldalloc option [ 51.537345][ T4331] FAULT_INJECTION: forcing a failure. [ 51.537345][ T4331] name failslab, interval 1, probability 0, space 0, times 0 [ 51.553112][ T4331] CPU: 0 UID: 0 PID: 4331 Comm: syz.0.261 Not tainted 6.14.0-rc2-syzkaller-00039-g09fbf3d50205 #0 [ 51.553193][ T4331] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 51.553206][ T4331] Call Trace: [ 51.553215][ T4331] [ 51.553222][ T4331] dump_stack_lvl+0xf2/0x150 [ 51.553261][ T4331] dump_stack+0x15/0x1a [ 51.553285][ T4331] should_fail_ex+0x24a/0x260 [ 51.553325][ T4331] ? alloc_fs_context+0x44/0x4e0 [ 51.553409][ T4331] should_failslab+0x8f/0xb0 [ 51.553440][ T4331] __kmalloc_cache_noprof+0x4e/0x320 [ 51.553599][ T4331] alloc_fs_context+0x44/0x4e0 [ 51.553625][ T4331] ? strncmp+0x34/0x70 [ 51.553658][ T4331] fs_context_for_mount+0x21/0x30 [ 51.553687][ T4331] do_new_mount+0xf3/0x690 [ 51.553733][ T4331] path_mount+0x49b/0xb30 [ 51.553976][ T4331] __se_sys_mount+0x27f/0x2d0 [ 51.554010][ T4331] ? fput+0x1c4/0x200 [ 51.554052][ T4331] __x64_sys_mount+0x67/0x80 [ 51.554085][ T4331] x64_sys_call+0x2c84/0x2dc0 [ 51.554142][ T4331] do_syscall_64+0xc9/0x1c0 [ 51.554174][ T4331] ? clear_bhb_loop+0x55/0xb0 [ 51.554209][ T4331] ? clear_bhb_loop+0x55/0xb0 [ 51.554251][ T4331] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.554283][ T4331] RIP: 0033:0x7feca8b9cde9 [ 51.554301][ T4331] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 51.554334][ T4331] RSP: 002b:00007feca7201038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 51.554357][ T4331] RAX: ffffffffffffffda RBX: 00007feca8db5fa0 RCX: 00007feca8b9cde9 [ 51.554372][ T4331] RDX: 0000400000004380 RSI: 0000400000004280 RDI: 0000000000000000 [ 51.554387][ T4331] RBP: 00007feca7201090 R08: 00004000000045c0 R09: 0000000000000000 [ 51.554423][ T4331] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 51.554437][ T4331] R13: 0000000000000000 R14: 00007feca8db5fa0 R15: 00007ffdeb094b68 [ 51.554461][ T4331] [ 51.560843][ T4321] EXT4-fs error (device loop4): ext4_xattr_inode_iget:436: comm syz.4.257: Parent and EA inode have the same ino 15 [ 51.693606][ T4339] loop0: detected capacity change from 0 to 512 [ 51.695112][ T4321] EXT4-fs (loop4): Remounting filesystem read-only [ 51.761793][ T4339] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 51.767849][ T4321] EXT4-fs warning (device loop4): ext4_evict_inode:259: couldn't mark inode dirty (err -5) [ 51.776834][ T4339] ext4 filesystem being mounted at /44/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 51.784861][ T4321] EXT4-fs (loop4): 1 orphan inode deleted [ 51.863280][ T3299] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 51.865330][ T4321] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.888331][ T4321] SELinux: (dev loop4, type ext4) getxattr errno 5 [ 51.903083][ T4321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.930124][ T4345] netlink: 'syz.2.267': attribute type 39 has an invalid length. [ 51.949559][ T29] kauditd_printk_skb: 116 callbacks suppressed [ 51.949576][ T29] audit: type=1400 audit(1739325921.635:829): avc: denied { read } for pid=4344 comm="syz.2.267" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 52.034333][ T4347] loop0: detected capacity change from 0 to 512 [ 52.063456][ T4347] EXT4-fs (loop0): couldn't mount as ext2 due to feature incompatibilities [ 52.119572][ T29] audit: type=1400 audit(1739325921.805:830): avc: denied { mount } for pid=4346 comm="syz.0.268" name="/" dev="ramfs" ino=7316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 52.145603][ T29] audit: type=1400 audit(1739325921.805:831): avc: denied { unmount } for pid=4346 comm="syz.0.268" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 52.237376][ T29] audit: type=1400 audit(1739325921.895:832): avc: denied { bind } for pid=4355 comm="syz.0.271" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 52.296659][ T4363] FAULT_INJECTION: forcing a failure. [ 52.296659][ T4363] name failslab, interval 1, probability 0, space 0, times 0 [ 52.311143][ T4363] CPU: 0 UID: 0 PID: 4363 Comm: syz.1.273 Not tainted 6.14.0-rc2-syzkaller-00039-g09fbf3d50205 #0 [ 52.311167][ T4363] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 52.311179][ T4363] Call Trace: [ 52.311186][ T4363] [ 52.311194][ T4363] dump_stack_lvl+0xf2/0x150 [ 52.311223][ T4363] dump_stack+0x15/0x1a [ 52.311243][ T4363] should_fail_ex+0x24a/0x260 [ 52.311313][ T4363] should_failslab+0x8f/0xb0 [ 52.311345][ T4363] kmem_cache_alloc_node_noprof+0x59/0x320 [ 52.311387][ T4363] ? __alloc_skb+0x10b/0x310 [ 52.311419][ T4363] __alloc_skb+0x10b/0x310 [ 52.311451][ T4363] netlink_alloc_large_skb+0xad/0xe0 [ 52.311480][ T4363] netlink_sendmsg+0x3b4/0x6e0 [ 52.311558][ T4363] ? __pfx_netlink_sendmsg+0x10/0x10 [ 52.311627][ T4363] __sock_sendmsg+0x140/0x180 [ 52.311653][ T4363] ____sys_sendmsg+0x312/0x410 [ 52.311762][ T4363] __sys_sendmsg+0x19d/0x230 [ 52.311810][ T4363] __x64_sys_sendmsg+0x46/0x50 [ 52.311838][ T4363] x64_sys_call+0x2734/0x2dc0 [ 52.311880][ T4363] do_syscall_64+0xc9/0x1c0 [ 52.311910][ T4363] ? clear_bhb_loop+0x55/0xb0 [ 52.311945][ T4363] ? clear_bhb_loop+0x55/0xb0 [ 52.311974][ T4363] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.312069][ T4363] RIP: 0033:0x7f080743cde9 [ 52.312158][ T4363] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 52.312180][ T4363] RSP: 002b:00007f0805aa7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 52.312203][ T4363] RAX: ffffffffffffffda RBX: 00007f0807655fa0 RCX: 00007f080743cde9 [ 52.312218][ T4363] RDX: 0000000000000800 RSI: 0000400000000180 RDI: 0000000000000003 [ 52.312280][ T4363] RBP: 00007f0805aa7090 R08: 0000000000000000 R09: 0000000000000000 [ 52.312294][ T4363] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 52.312308][ T4363] R13: 0000000000000000 R14: 00007f0807655fa0 R15: 00007ffec07af9e8 [ 52.312330][ T4363] [ 52.577158][ T29] audit: type=1400 audit(1739325922.265:833): avc: denied { create } for pid=4368 comm="syz.1.277" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 52.599027][ T29] audit: type=1400 audit(1739325922.265:834): avc: denied { write } for pid=4368 comm="syz.1.277" name="file0" dev="tmpfs" ino=344 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 52.622394][ T29] audit: type=1400 audit(1739325922.265:835): avc: denied { open } for pid=4368 comm="syz.1.277" path="/60/file0" dev="tmpfs" ino=344 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 52.647234][ T4373] loop1: detected capacity change from 0 to 1024 [ 52.656156][ T4373] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 52.666191][ T29] audit: type=1400 audit(1739325922.335:836): avc: denied { ioctl } for pid=4368 comm="syz.1.277" path="/60/file0" dev="tmpfs" ino=344 ioctlcmd=0x1276 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 52.675870][ T4373] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 52.715325][ T4373] EXT4-fs (loop1): orphan cleanup on readonly fs [ 52.726966][ T4373] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5838: Corrupt filesystem [ 52.741356][ T4373] EXT4-fs (loop1): Remounting filesystem read-only [ 52.741542][ T4373] Quota error (device loop1): write_blk: dquota write failed [ 52.741568][ T4373] Quota error (device loop1): write_blk: dquota write failed [ 52.741618][ T4373] EXT4-fs (loop1): 1 orphan inode deleted [ 52.745477][ T4373] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 52.745559][ T4373] SELinux: (dev loop1, type ext4) getxattr errno 5 [ 52.745872][ T4373] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.750976][ T4378] loop2: detected capacity change from 0 to 1024 [ 52.758303][ T4378] EXT4-fs: Ignoring removed orlov option [ 52.758738][ T4378] EXT4-fs (loop2): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 52.773895][ T4378] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.776952][ T4378] EXT4-fs error (device loop2): ext4_check_all_de:656: inode #12: block 7: comm syz.2.279: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=108 fake=0 [ 52.795672][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.828029][ T4156] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65380 sclass=netlink_route_socket pid=4156 comm=kworker/1:14 [ 52.892284][ T4380] netlink: 20 bytes leftover after parsing attributes in process `syz.0.278'. [ 52.892332][ T4380] IPv6: NLM_F_REPLACE set, but no existing node found! [ 53.791342][ T4424] loop4: detected capacity change from 0 to 512 [ 53.798199][ T4424] EXT4-fs: Ignoring removed oldalloc option [ 53.807415][ T4424] EXT4-fs error (device loop4): ext4_xattr_inode_iget:436: comm syz.4.294: Parent and EA inode have the same ino 15 [ 53.829501][ T4424] EXT4-fs (loop4): Remounting filesystem read-only [ 53.836816][ T4424] EXT4-fs warning (device loop4): ext4_evict_inode:259: couldn't mark inode dirty (err -5) [ 53.856572][ T4424] EXT4-fs (loop4): 1 orphan inode deleted [ 53.865598][ T4424] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.881528][ T4424] SELinux: (dev loop4, type ext4) getxattr errno 5 [ 53.908409][ T4424] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.947171][ T4432] FAULT_INJECTION: forcing a failure. [ 53.947171][ T4432] name failslab, interval 1, probability 0, space 0, times 0 [ 53.963337][ T4432] CPU: 1 UID: 0 PID: 4432 Comm: syz.3.297 Not tainted 6.14.0-rc2-syzkaller-00039-g09fbf3d50205 #0 [ 53.963369][ T4432] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 53.963449][ T4432] Call Trace: [ 53.963457][ T4432] [ 53.963466][ T4432] dump_stack_lvl+0xf2/0x150 [ 53.963578][ T4432] dump_stack+0x15/0x1a [ 53.963599][ T4432] should_fail_ex+0x24a/0x260 [ 53.963684][ T4432] should_failslab+0x8f/0xb0 [ 53.963715][ T4432] kmem_cache_alloc_node_noprof+0x59/0x320 [ 53.963749][ T4432] ? __alloc_skb+0x10b/0x310 [ 53.963774][ T4432] __alloc_skb+0x10b/0x310 [ 53.963841][ T4432] ? audit_log_start+0x34c/0x6b0 [ 53.963933][ T4432] audit_log_start+0x368/0x6b0 [ 53.963980][ T4432] audit_seccomp+0x4b/0x130 [ 53.964012][ T4432] __seccomp_filter+0x6fa/0x1180 [ 53.964039][ T4432] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 53.964140][ T4432] ? vfs_write+0x644/0x920 [ 53.964184][ T4432] ? putname+0xcf/0xf0 [ 53.964240][ T4432] __secure_computing+0x9f/0x1c0 [ 53.964265][ T4432] syscall_trace_enter+0xd1/0x1f0 [ 53.964288][ T4432] ? fpregs_assert_state_consistent+0x83/0xa0 [ 53.964363][ T4432] do_syscall_64+0xaa/0x1c0 [ 53.964449][ T4432] ? clear_bhb_loop+0x55/0xb0 [ 53.964477][ T4432] ? clear_bhb_loop+0x55/0xb0 [ 53.964580][ T4432] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.964608][ T4432] RIP: 0033:0x7f653594cde9 [ 53.964622][ T4432] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 53.964641][ T4432] RSP: 002b:00007f6533fb7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 53.964720][ T4432] RAX: ffffffffffffffda RBX: 00007f6535b65fa0 RCX: 00007f653594cde9 [ 53.964735][ T4432] RDX: 0000400000000000 RSI: 0000000000008918 RDI: 0000000000000007 [ 53.964749][ T4432] RBP: 00007f6533fb7090 R08: 0000000000000000 R09: 0000000000000000 [ 53.964764][ T4432] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 53.964816][ T4432] R13: 0000000000000000 R14: 00007f6535b65fa0 R15: 00007ffe9c0165c8 [ 53.964838][ T4432] [ 54.308897][ T4440] FAULT_INJECTION: forcing a failure. [ 54.308897][ T4440] name failslab, interval 1, probability 0, space 0, times 0 [ 54.322397][ T4440] CPU: 0 UID: 0 PID: 4440 Comm: syz.4.300 Not tainted 6.14.0-rc2-syzkaller-00039-g09fbf3d50205 #0 [ 54.322427][ T4440] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 54.322442][ T4440] Call Trace: [ 54.322450][ T4440] [ 54.322459][ T4440] dump_stack_lvl+0xf2/0x150 [ 54.322503][ T4440] dump_stack+0x15/0x1a [ 54.322529][ T4440] should_fail_ex+0x24a/0x260 [ 54.322571][ T4440] ? alloc_fs_context+0x44/0x4e0 [ 54.322599][ T4440] should_failslab+0x8f/0xb0 [ 54.322670][ T4440] __kmalloc_cache_noprof+0x4e/0x320 [ 54.322711][ T4440] alloc_fs_context+0x44/0x4e0 [ 54.322735][ T4440] ? strncmp+0x34/0x70 [ 54.322822][ T4440] fs_context_for_mount+0x21/0x30 [ 54.322868][ T4440] do_new_mount+0xf3/0x690 [ 54.322899][ T4440] path_mount+0x49b/0xb30 [ 54.322997][ T4440] __se_sys_mount+0x27f/0x2d0 [ 54.323027][ T4440] ? fput+0x1c4/0x200 [ 54.323113][ T4440] __x64_sys_mount+0x67/0x80 [ 54.323143][ T4440] x64_sys_call+0x2c84/0x2dc0 [ 54.323282][ T4440] do_syscall_64+0xc9/0x1c0 [ 54.323311][ T4440] ? clear_bhb_loop+0x55/0xb0 [ 54.323420][ T4440] ? clear_bhb_loop+0x55/0xb0 [ 54.323451][ T4440] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 54.323483][ T4440] RIP: 0033:0x7fad6fb0cde9 [ 54.323502][ T4440] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 54.323523][ T4440] RSP: 002b:00007fad6e177038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 54.323556][ T4440] RAX: ffffffffffffffda RBX: 00007fad6fd25fa0 RCX: 00007fad6fb0cde9 [ 54.323571][ T4440] RDX: 0000400000004380 RSI: 0000400000004280 RDI: 0000000000000000 [ 54.323586][ T4440] RBP: 00007fad6e177090 R08: 00004000000045c0 R09: 0000000000000000 [ 54.323601][ T4440] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 54.323615][ T4440] R13: 0000000000000000 R14: 00007fad6fd25fa0 R15: 00007ffd750319c8 [ 54.323638][ T4440] [ 54.783722][ T4459] serio: Serial port ptm0 [ 54.863451][ T4465] loop3: detected capacity change from 0 to 512 [ 54.875110][ T4465] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 54.897630][ T4465] EXT4-fs (loop3): 1 truncate cleaned up [ 54.916710][ T4465] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.968603][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.065239][ T4484] loop3: detected capacity change from 0 to 1024 [ 55.073823][ T4484] EXT4-fs: Ignoring removed orlov option [ 55.081058][ T4484] EXT4-fs (loop3): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 55.096137][ T4486] loop2: detected capacity change from 0 to 1024 [ 55.126696][ T4486] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 55.140092][ T4484] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.173656][ T4484] EXT4-fs error (device loop3): ext4_find_dest_de:2079: inode #12: block 7: comm syz.3.319: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=56 fake=0 [ 55.214589][ T4486] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.227547][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.533171][ T4499] serio: Serial port ptm0 [ 55.561435][ T4507] Cannot find add_set index 0 as target [ 55.572831][ T4508] loop0: detected capacity change from 0 to 512 [ 55.582003][ T4508] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 55.610302][ T4508] EXT4-fs (loop0): 1 truncate cleaned up [ 55.618979][ T4508] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.663655][ T3299] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.727002][ T4523] loop3: detected capacity change from 0 to 512 [ 55.750693][ T4523] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 55.797365][ T4523] EXT4-fs (loop3): 1 truncate cleaned up [ 55.878507][ T4522] serio: Serial port ptm0 [ 55.902384][ T4542] 9pnet_fd: p9_fd_create_tcp (4542): problem connecting socket to 127.0.0.1 [ 55.917476][ T4539] serio: Serial port ptm1 [ 56.019567][ T4558] loop3: detected capacity change from 0 to 256 [ 56.027365][ T4558] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 56.052731][ T4558] FAT-fs (loop3): Directory bread(block 64) failed [ 56.060469][ T4558] FAT-fs (loop3): Directory bread(block 65) failed [ 56.067484][ T4558] FAT-fs (loop3): Directory bread(block 66) failed [ 56.074662][ T4558] FAT-fs (loop3): Directory bread(block 67) failed [ 56.081572][ T4558] FAT-fs (loop3): Directory bread(block 68) failed [ 56.088820][ T4558] FAT-fs (loop3): Directory bread(block 69) failed [ 56.090444][ T4559] Cannot find add_set index 0 as target [ 56.095752][ T4558] FAT-fs (loop3): Directory bread(block 70) failed [ 56.108481][ T4558] FAT-fs (loop3): Directory bread(block 71) failed [ 56.115630][ T4558] FAT-fs (loop3): Directory bread(block 72) failed [ 56.124834][ T4558] FAT-fs (loop3): Directory bread(block 73) failed [ 56.159882][ T4563] loop0: detected capacity change from 0 to 512 [ 56.167793][ T4563] EXT4-fs: Ignoring removed oldalloc option [ 56.177872][ T4563] EXT4-fs (loop0): 1 truncate cleaned up [ 56.248027][ T4569] loop3: detected capacity change from 0 to 1024 [ 56.255116][ T4569] EXT4-fs: Ignoring removed orlov option [ 56.267224][ T4571] loop2: detected capacity change from 0 to 512 [ 56.274951][ T4569] EXT4-fs (loop3): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 56.298381][ T4571] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 56.317172][ T4157] IPVS: starting estimator thread 0... [ 56.324999][ T4571] EXT4-fs (loop2): 1 truncate cleaned up [ 56.334859][ T4569] EXT4-fs error (device loop3): ext4_find_dest_de:2079: inode #12: block 7: comm syz.3.351: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=56 fake=0 [ 56.411891][ T4574] IPVS: using max 2352 ests per chain, 117600 per kthread [ 56.491667][ T4586] serio: Serial port ptm1 [ 56.572669][ T4596] FAULT_INJECTION: forcing a failure. [ 56.572669][ T4596] name failslab, interval 1, probability 0, space 0, times 0 [ 56.590224][ T4596] CPU: 0 UID: 0 PID: 4596 Comm: syz.3.360 Not tainted 6.14.0-rc2-syzkaller-00039-g09fbf3d50205 #0 [ 56.590256][ T4596] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 56.590269][ T4596] Call Trace: [ 56.590276][ T4596] [ 56.590284][ T4596] dump_stack_lvl+0xf2/0x150 [ 56.590466][ T4596] dump_stack+0x15/0x1a [ 56.590502][ T4596] should_fail_ex+0x24a/0x260 [ 56.590557][ T4596] should_failslab+0x8f/0xb0 [ 56.590583][ T4596] kmem_cache_alloc_node_noprof+0x59/0x320 [ 56.590676][ T4596] ? __alloc_skb+0x10b/0x310 [ 56.590707][ T4596] __alloc_skb+0x10b/0x310 [ 56.590736][ T4596] netlink_alloc_large_skb+0xad/0xe0 [ 56.590771][ T4596] netlink_sendmsg+0x3b4/0x6e0 [ 56.590838][ T4596] ? __pfx_netlink_sendmsg+0x10/0x10 [ 56.590954][ T4596] __sock_sendmsg+0x140/0x180 [ 56.590981][ T4596] ____sys_sendmsg+0x312/0x410 [ 56.591022][ T4596] __sys_sendmsg+0x19d/0x230 [ 56.591236][ T4596] __x64_sys_sendmsg+0x46/0x50 [ 56.591355][ T4596] x64_sys_call+0x2734/0x2dc0 [ 56.591388][ T4596] do_syscall_64+0xc9/0x1c0 [ 56.591433][ T4596] ? clear_bhb_loop+0x55/0xb0 [ 56.591466][ T4596] ? clear_bhb_loop+0x55/0xb0 [ 56.591498][ T4596] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 56.591573][ T4596] RIP: 0033:0x7f653594cde9 [ 56.591590][ T4596] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 56.591667][ T4596] RSP: 002b:00007f6533fb7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 56.591685][ T4596] RAX: ffffffffffffffda RBX: 00007f6535b65fa0 RCX: 00007f653594cde9 [ 56.591699][ T4596] RDX: 0000000000000000 RSI: 00004000000001c0 RDI: 0000000000000004 [ 56.591754][ T4596] RBP: 00007f6533fb7090 R08: 0000000000000000 R09: 0000000000000000 [ 56.591822][ T4596] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 56.591835][ T4596] R13: 0000000000000000 R14: 00007f6535b65fa0 R15: 00007ffe9c0165c8 [ 56.591892][ T4596] [ 56.920669][ T4603] loop0: detected capacity change from 0 to 512 [ 56.966293][ T29] kauditd_printk_skb: 307 callbacks suppressed [ 56.966313][ T29] audit: type=1400 audit(1739325926.655:1140): avc: denied { name_bind } for pid=4609 comm="syz.2.366" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 57.009903][ T4603] EXT4-fs warning (device loop0): ext4_multi_mount_protect:398: Unable to create kmmpd thread for loop0. [ 57.243744][ T29] audit: type=1400 audit(1739325926.935:1141): avc: denied { read } for pid=4630 comm="syz.4.374" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 57.266489][ T4624] serio: Serial port ptm0 [ 57.305818][ T4637] loop2: detected capacity change from 0 to 256 [ 57.404254][ T4157] hid-generic 0000:0025:0000.0001: unknown main item tag 0x0 [ 57.412902][ T4157] hid-generic 0000:0025:0000.0001: unknown main item tag 0x0 [ 57.421392][ T4157] hid-generic 0000:0025:0000.0001: unknown main item tag 0x0 [ 57.429468][ T4157] hid-generic 0000:0025:0000.0001: unknown main item tag 0x0 [ 57.438676][ T4157] hid-generic 0000:0025:0000.0001: unknown main item tag 0x0 [ 57.447142][ T4157] hid-generic 0000:0025:0000.0001: unknown main item tag 0x0 [ 57.456192][ T4157] hid-generic 0000:0025:0000.0001: unknown main item tag 0x0 [ 57.464179][ T4157] hid-generic 0000:0025:0000.0001: unknown main item tag 0x0 [ 57.473016][ T4157] hid-generic 0000:0025:0000.0001: unknown main item tag 0x0 [ 57.481689][ T4157] hid-generic 0000:0025:0000.0001: unknown main item tag 0x0 [ 57.490333][ T4157] hid-generic 0000:0025:0000.0001: unknown main item tag 0x0 [ 57.499147][ T4157] hid-generic 0000:0025:0000.0001: unknown main item tag 0x0 [ 57.507134][ T4157] hid-generic 0000:0025:0000.0001: unknown main item tag 0x0 [ 57.515856][ T4157] hid-generic 0000:0025:0000.0001: unknown main item tag 0x0 [ 57.524268][ T4157] hid-generic 0000:0025:0000.0001: unknown main item tag 0x0 [ 57.533374][ T4157] hid-generic 0000:0025:0000.0001: unknown main item tag 0x0 [ 57.542405][ T4157] hid-generic 0000:0025:0000.0001: unknown main item tag 0x0 [ 57.552258][ T4157] hid-generic 0000:0025:0000.0001: unknown main item tag 0x0 [ 57.560707][ T4157] hid-generic 0000:0025:0000.0001: unknown main item tag 0x0 [ 57.569575][ T4157] hid-generic 0000:0025:0000.0001: unknown main item tag 0x0 [ 57.579081][ T4157] hid-generic 0000:0025:0000.0001: unknown main item tag 0x0 [ 57.587267][ T4157] hid-generic 0000:0025:0000.0001: unknown main item tag 0x0 [ 57.596075][ T4157] hid-generic 0000:0025:0000.0001: unknown main item tag 0x0 [ 57.604588][ T4157] hid-generic 0000:0025:0000.0001: unknown main item tag 0x0 [ 57.613437][ T4157] hid-generic 0000:0025:0000.0001: unknown main item tag 0x0 [ 57.621354][ T4157] hid-generic 0000:0025:0000.0001: unknown main item tag 0x0 [ 57.630900][ T4157] hid-generic 0000:0025:0000.0001: unknown main item tag 0x0 [ 57.640958][ T4157] hid-generic 0000:0025:0000.0001: unknown main item tag 0x0 [ 57.648802][ T4157] hid-generic 0000:0025:0000.0001: unknown main item tag 0x0 [ 57.657857][ T4157] hid-generic 0000:0025:0000.0001: unknown main item tag 0x0 [ 57.667363][ T4157] hid-generic 0000:0025:0000.0001: unknown main item tag 0x0 [ 57.676104][ T4157] hid-generic 0000:0025:0000.0001: unknown main item tag 0x0 [ 57.695402][ T29] audit: type=1326 audit(1739325927.015:1142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4630 comm="syz.4.374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad6fb0cde9 code=0x7ffc0000 [ 57.719634][ T29] audit: type=1326 audit(1739325927.015:1143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4630 comm="syz.4.374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad6fb0cde9 code=0x7ffc0000 [ 57.747368][ T29] audit: type=1326 audit(1739325927.015:1144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4630 comm="syz.4.374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7fad6fb0cde9 code=0x7ffc0000 [ 57.773115][ T29] audit: type=1326 audit(1739325927.015:1145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4630 comm="syz.4.374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad6fb0cde9 code=0x7ffc0000 [ 57.800552][ T29] audit: type=1326 audit(1739325927.015:1146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4630 comm="syz.4.374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad6fb0cde9 code=0x7ffc0000 [ 58.235666][ T29] audit: type=1326 audit(1739325927.905:1147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4651 comm="syz.3.379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f653594cde9 code=0x7ffc0000 [ 58.262456][ T29] audit: type=1326 audit(1739325927.905:1148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4651 comm="syz.3.379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f653594cde9 code=0x7ffc0000 [ 58.286987][ T29] audit: type=1326 audit(1739325927.905:1149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4651 comm="syz.3.379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f653594cde9 code=0x7ffc0000 [ 58.354437][ T4656] FAULT_INJECTION: forcing a failure. [ 58.354437][ T4656] name failslab, interval 1, probability 0, space 0, times 0 [ 58.367331][ T4656] CPU: 1 UID: 0 PID: 4656 Comm: syz.1.380 Not tainted 6.14.0-rc2-syzkaller-00039-g09fbf3d50205 #0 [ 58.367365][ T4656] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 58.367415][ T4656] Call Trace: [ 58.367422][ T4656] [ 58.367430][ T4656] dump_stack_lvl+0xf2/0x150 [ 58.367464][ T4656] dump_stack+0x15/0x1a [ 58.367490][ T4656] should_fail_ex+0x24a/0x260 [ 58.367530][ T4656] should_failslab+0x8f/0xb0 [ 58.367555][ T4656] __kmalloc_node_track_caller_noprof+0xa8/0x410 [ 58.367663][ T4656] ? sidtab_sid2str_get+0xb8/0x140 [ 58.367688][ T4656] kmemdup_noprof+0x2a/0x60 [ 58.367716][ T4656] sidtab_sid2str_get+0xb8/0x140 [ 58.367743][ T4656] security_sid_to_context_core+0x1eb/0x2f0 [ 58.367834][ T4656] security_sid_to_context+0x27/0x30 [ 58.367881][ T4656] selinux_lsmprop_to_secctx+0x68/0xf0 [ 58.367903][ T4656] security_lsmprop_to_secctx+0x40/0x80 [ 58.367965][ T4656] audit_log_task_context+0x76/0x180 [ 58.368027][ T4656] audit_log_task+0xf9/0x1c0 [ 58.368056][ T4656] audit_seccomp+0x68/0x130 [ 58.368131][ T4656] __seccomp_filter+0x6fa/0x1180 [ 58.368159][ T4656] ? strncpy_from_user+0x178/0x210 [ 58.368189][ T4656] ? strncpy_from_user+0x1eb/0x210 [ 58.368215][ T4656] ? strncpy_from_user+0x1f4/0x210 [ 58.368320][ T4656] __secure_computing+0x9f/0x1c0 [ 58.368341][ T4656] syscall_trace_enter+0xd1/0x1f0 [ 58.368364][ T4656] ? fpregs_assert_state_consistent+0x83/0xa0 [ 58.368476][ T4656] do_syscall_64+0xaa/0x1c0 [ 58.368500][ T4656] ? clear_bhb_loop+0x55/0xb0 [ 58.368530][ T4656] ? clear_bhb_loop+0x55/0xb0 [ 58.368567][ T4656] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 58.368661][ T4656] RIP: 0033:0x7f080743b7fc [ 58.368675][ T4656] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 58.368691][ T4656] RSP: 002b:00007f0805aa7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 58.368709][ T4656] RAX: ffffffffffffffda RBX: 00007f0807655fa0 RCX: 00007f080743b7fc [ 58.368720][ T4656] RDX: 000000000000000f RSI: 00007f0805aa70a0 RDI: 0000000000000005 [ 58.368731][ T4656] RBP: 00007f0805aa7090 R08: 0000000000000000 R09: 0000000000000000 [ 58.368742][ T4656] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 58.368753][ T4656] R13: 0000000000000000 R14: 00007f0807655fa0 R15: 00007ffec07af9e8 [ 58.368836][ T4656] [ 58.685820][ T4157] hid-generic 0000:0025:0000.0001: hidraw0: HID v0.00 Device [sy] on syz0 [ 58.815607][ T4662] loop1: detected capacity change from 0 to 512 [ 58.823470][ T4662] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 58.892002][ T4662] EXT4-fs (loop1): 1 truncate cleaned up [ 58.894621][ T4672] loop2: detected capacity change from 0 to 512 [ 58.970385][ T4672] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.387: bg 0: block 35: padding at end of block bitmap is not set [ 59.021264][ T4672] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 59.035070][ T4672] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.387: invalid indirect mapped block 4294967295 (level 1) [ 59.083762][ T4672] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.387: invalid indirect mapped block 4294967295 (level 2) [ 59.112305][ T4672] EXT4-fs (loop2): 1 truncate cleaned up [ 59.175026][ T4672] netlink: 180900 bytes leftover after parsing attributes in process `syz.2.387'. [ 59.202413][ T4672] netlink: zone id is out of range [ 59.209639][ T4672] netlink: zone id is out of range [ 59.237642][ T4692] loop4: detected capacity change from 0 to 512 [ 59.246192][ T4672] netlink: zone id is out of range [ 59.252608][ T4672] netlink: zone id is out of range [ 59.258213][ T4672] netlink: zone id is out of range [ 59.261203][ T4692] EXT4-fs: Ignoring removed oldalloc option [ 59.266412][ T4672] netlink: zone id is out of range [ 59.284693][ T4694] bridge_slave_0: left allmulticast mode [ 59.290862][ T4694] bridge_slave_0: left promiscuous mode [ 59.296737][ T4694] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.309023][ T4695] loop1: detected capacity change from 0 to 512 [ 59.320009][ T4672] netlink: zone id is out of range [ 59.333004][ T4692] EXT4-fs error (device loop4): ext4_xattr_inode_iget:436: comm syz.4.393: Parent and EA inode have the same ino 15 [ 59.348102][ T4672] netlink: zone id is out of range [ 59.348249][ T4672] netlink: zone id is out of range [ 59.348451][ T4672] netlink: zone id is out of range [ 59.356438][ T4692] EXT4-fs (loop4): Remounting filesystem read-only [ 59.370641][ T4695] EXT4-fs: Ignoring removed oldalloc option [ 59.375163][ T4692] EXT4-fs warning (device loop4): ext4_evict_inode:259: couldn't mark inode dirty (err -5) [ 59.403132][ T4692] EXT4-fs (loop4): 1 orphan inode deleted [ 59.415206][ T4692] SELinux: (dev loop4, type ext4) getxattr errno 5 [ 59.430055][ T4694] bridge_slave_1: left allmulticast mode [ 59.437247][ T4694] bridge_slave_1: left promiscuous mode [ 59.443466][ T4694] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.528700][ T4694] bond0: (slave bond_slave_0): Releasing backup interface [ 59.550762][ T4705] loop4: detected capacity change from 0 to 512 [ 59.573628][ T4705] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 59.586666][ T4694] bond0: (slave bond_slave_1): Releasing backup interface [ 59.605794][ T4695] EXT4-fs error (device loop1): ext4_xattr_inode_iget:436: comm syz.1.394: Parent and EA inode have the same ino 15 [ 59.630217][ T4694] team0: Port device team_slave_0 removed [ 59.641488][ T4694] team0: Port device team_slave_1 removed [ 59.650781][ T4705] EXT4-fs (loop4): 1 truncate cleaned up [ 59.661428][ T4694] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 59.669061][ T4694] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 59.692375][ T4694] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 59.701124][ T4694] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 59.744922][ T4695] EXT4-fs (loop1): Remounting filesystem read-only [ 59.754093][ T4695] EXT4-fs warning (device loop1): ext4_evict_inode:259: couldn't mark inode dirty (err -5) [ 59.825267][ T4695] EXT4-fs (loop1): 1 orphan inode deleted [ 59.849020][ T4695] SELinux: (dev loop1, type ext4) getxattr errno 5 [ 59.986294][ T4713] loop2: detected capacity change from 0 to 1024 [ 60.007475][ T4713] EXT4-fs: Ignoring removed orlov option [ 60.021587][ T4713] EXT4-fs (loop2): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 60.064339][ T4713] EXT4-fs error (device loop2): ext4_find_dest_de:2079: inode #12: block 7: comm syz.2.401: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=56 fake=0 [ 60.104561][ T4723] loop1: detected capacity change from 0 to 512 [ 60.122198][ T4724] EXT4-fs error (device loop2): ext4_check_all_de:656: inode #12: block 7: comm syz.2.401: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=124 fake=0 [ 60.122306][ T4723] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 60.220969][ T4723] EXT4-fs (loop1): 1 truncate cleaned up [ 60.366460][ T4735] loop2: detected capacity change from 0 to 128 [ 60.423496][ T4735] vfat: Unknown parameter '0x0000000000000004' [ 60.647313][ T4739] loop4: detected capacity change from 0 to 2048 [ 60.695813][ T4739] loop4: p1 < > p4 [ 60.700779][ T4739] loop4: p4 size 8388608 extends beyond EOD, truncated [ 60.750657][ T4749] loop1: detected capacity change from 0 to 1024 [ 60.758068][ T4749] EXT4-fs: Ignoring removed orlov option [ 60.767312][ T4749] EXT4-fs (loop1): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 60.798381][ T4749] EXT4-fs error (device loop1): ext4_find_dest_de:2079: inode #12: block 7: comm syz.1.412: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=56 fake=0 [ 60.823871][ T4749] EXT4-fs error (device loop1): ext4_check_all_de:656: inode #12: block 7: comm syz.1.412: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=124 fake=0 [ 60.903782][ T4756] serio: Serial port ptm1 [ 60.939423][ T4759] serio: Serial port ptm2 [ 60.993383][ T4764] loop3: detected capacity change from 0 to 1024 [ 61.043223][ T4769] loop1: detected capacity change from 0 to 1024 [ 61.054198][ T4769] EXT4-fs: Ignoring removed orlov option [ 61.067597][ T4769] EXT4-fs (loop1): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 61.084565][ T4772] loop4: detected capacity change from 0 to 512 [ 61.091647][ T4772] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 61.103580][ T4772] EXT4-fs (loop4): 1 truncate cleaned up [ 61.104176][ T4769] EXT4-fs error (device loop1): ext4_find_dest_de:2079: inode #12: block 7: comm syz.1.416: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=56 fake=0 [ 61.131210][ T4769] EXT4-fs error (device loop1): ext4_check_all_de:656: inode #12: block 7: comm syz.1.416: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=124 fake=0 [ 61.307705][ T4786] loop1: detected capacity change from 0 to 512 [ 61.342380][ T4786] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 61.411746][ T4786] EXT4-fs (loop1): 1 truncate cleaned up [ 61.482013][ T4792] loop3: detected capacity change from 0 to 512 [ 61.496272][ T4792] EXT4-fs (loop3): bad s_want_extra_isize: 192 [ 61.506269][ T4794] SELinux: policydb version 0 does not match my version range 15-34 [ 61.516627][ T4794] SELinux: failed to load policy [ 61.539153][ T4792] ªªªªªª: renamed from vlan0 (while UP) [ 61.573755][ T4794] hub 6-0:1.0: USB hub found [ 61.580146][ T4794] hub 6-0:1.0: 8 ports detected [ 61.615998][ T4800] loop4: detected capacity change from 0 to 512 [ 61.634039][ T4800] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 61.659985][ T4807] loop2: detected capacity change from 0 to 1024 [ 61.663595][ T4800] EXT4-fs (loop4): 1 truncate cleaned up [ 61.689532][ T4807] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 62.098589][ T4832] loop2: detected capacity change from 0 to 1024 [ 62.105765][ T4832] EXT4-fs: quotafile must be on filesystem root [ 62.117196][ T29] kauditd_printk_skb: 84 callbacks suppressed [ 62.117213][ T29] audit: type=1400 audit(1739325931.698:1233): avc: denied { remount } for pid=4831 comm="syz.2.441" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 62.148231][ T29] audit: type=1400 audit(1739325931.698:1234): avc: denied { map } for pid=4831 comm="syz.2.441" path="pipe:[8114]" dev="pipefs" ino=8114 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 62.152961][ T4834] loop2: detected capacity change from 0 to 512 [ 62.181106][ T3618] ================================================================== [ 62.190293][ T3618] BUG: KCSAN: data-race in do_mpage_readpage / set_blocksize [ 62.199637][ T3618] [ 62.202085][ T3618] write to 0xffff8881004c16ee of 1 bytes by task 4834 on cpu 1: [ 62.209932][ T3618] set_blocksize+0x218/0x270 [ 62.214669][ T3618] sb_min_blocksize+0x63/0xe0 [ 62.220082][ T3618] ext4_fill_super+0x38b/0x3650 [ 62.225233][ T3618] get_tree_bdev_flags+0x29f/0x310 [ 62.232571][ T3618] get_tree_bdev+0x1f/0x30 [ 62.240060][ T3618] ext4_get_tree+0x1c/0x30 [ 62.246669][ T3618] vfs_get_tree+0x56/0x1e0 [ 62.252169][ T3618] do_new_mount+0x227/0x690 [ 62.257562][ T3618] path_mount+0x49b/0xb30 [ 62.263471][ T3618] __se_sys_mount+0x27f/0x2d0 [ 62.268453][ T3618] __x64_sys_mount+0x67/0x80 [ 62.273515][ T3618] x64_sys_call+0x2c84/0x2dc0 [ 62.279221][ T3618] do_syscall_64+0xc9/0x1c0 [ 62.286120][ T3618] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 62.292330][ T3618] [ 62.296346][ T3618] read to 0xffff8881004c16ee of 1 bytes by task 3618 on cpu 0: [ 62.307598][ T3618] do_mpage_readpage+0x55/0xcb0 [ 62.313432][ T3618] mpage_readahead+0x1ad/0x2d0 [ 62.319456][ T3618] blkdev_readahead+0x1c/0x30 [ 62.324775][ T3618] read_pages+0x9e/0x460 [ 62.329659][ T3618] page_cache_ra_unbounded+0x30d/0x350 [ 62.336220][ T3618] page_cache_sync_ra+0x252/0x680 [ 62.341896][ T3618] filemap_get_pages+0x2ca/0x11a0 [ 62.347938][ T3618] filemap_read+0x230/0x8c0 [ 62.353978][ T3618] blkdev_read_iter+0x228/0x2d0 [ 62.361996][ T3618] vfs_read+0x5cc/0x6f0 [ 62.366274][ T3618] ksys_read+0xe8/0x1b0 [ 62.370988][ T3618] __x64_sys_read+0x42/0x50 [ 62.375606][ T3618] x64_sys_call+0x2874/0x2dc0 [ 62.380737][ T3618] do_syscall_64+0xc9/0x1c0 [ 62.385619][ T3618] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 62.394239][ T3618] [ 62.396723][ T3618] value changed: 0x0c -> 0x0a [ 62.403353][ T3618] [ 62.406065][ T3618] Reported by Kernel Concurrency Sanitizer on: [ 62.412412][ T3618] CPU: 0 UID: 0 PID: 3618 Comm: udevd Not tainted 6.14.0-rc2-syzkaller-00039-g09fbf3d50205 #0 [ 62.428866][ T3618] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 62.442330][ T3618] ================================================================== [ 62.456744][ T4834] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 62.476017][ T4834] EXT4-fs (loop2): 1 truncate cleaned up