last executing test programs: 24.019664801s ago: executing program 4 (id=2894): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480), 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) r2 = openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/kernel/uevent_helper', 0x42, 0x0) pwritev(r2, &(0x7f0000000500)=[{&(0x7f0000000100)='<', 0x1}], 0x1, 0xffffff01, 0x2) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$binfmt_aout(r3, &(0x7f0000000240)=ANY=[], 0xff2e) r4 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$TCXONC(r3, 0x540a, 0x3) socket$nl_route(0x10, 0x3, 0x0) 23.168033573s ago: executing program 4 (id=2899): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x0, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x198) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) 23.106258004s ago: executing program 4 (id=2900): r0 = syz_io_uring_setup(0x5c2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x4, 0xfffffffd}, &(0x7f00000001c0)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r1, 0x0, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x18, 0x0, 0x0, 0x80000020000004, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x40}) io_uring_enter(r0, 0x6e6, 0x3900, 0x1, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="18010000004000000000000008100d00850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r2}, 0x10) poll(0x0, 0x0, 0x1d) 23.033956635s ago: executing program 4 (id=2903): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x0, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x198) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r3 = dup(r2) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) lstat(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) bind$inet6(r0, &(0x7f0000000380)={0xa, 0x4e23, 0xb4, @local, 0x7cbc}, 0x1c) mount$bind(0x0, &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) mount$tmpfs(0x0, &(0x7f0000000400)='./file0/../file0\x00', &(0x7f00000001c0), 0x0, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) 22.934217837s ago: executing program 4 (id=2904): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000840)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f0000000bc0)="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", 0x12d, r1) r2 = add_key$keyring(&(0x7f0000000340), &(0x7f0000000380)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f00000001c0)='ceph\x00', 0x0, &(0x7f0000000840)='\x00\x00\x00\x00\x00\x00\x00\x00\x00*\x00\x00', 0xc, r2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000700)='kfree\x00'}, 0x78) r3 = syz_open_dev$usbfs(&(0x7f0000000040), 0x80000000003, 0x101301) socket$xdp(0x2c, 0x3, 0x0) ioctl$USBDEVFS_ALLOC_STREAMS(r3, 0x8008551c, &(0x7f0000000300)=ANY=[@ANYBLOB="3057000001"]) keyctl$search(0xa, r1, &(0x7f0000000400)='logon\x00', &(0x7f0000000440)={'syz', 0x2}, r2) syz_open_dev$vcsn(&(0x7f0000000180), 0x1, 0x521042) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x8, 0x30410, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30c3a0e4, 0x1, @perf_config_ext={0x20000000000000, 0x1}, 0x11d08, 0x2, 0x0, 0x2, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = io_uring_setup(0x503e, &(0x7f0000000f40)={0x0, 0x698c, 0x100, 0x2, 0xfffffffe}) io_uring_register$IORING_REGISTER_BUFFERS2(r4, 0xf, 0x0, 0x0) keyctl$setperm(0x5, r2, 0x1000) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r0, 0x58, &(0x7f00000000c0)}, 0x10) 22.67086272s ago: executing program 4 (id=2910): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x0, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x198) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) 7.587735063s ago: executing program 32 (id=2910): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x0, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x198) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) 5.64015392s ago: executing program 1 (id=3108): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x36) ioctl$BLKIOMIN(r0, 0x1278, &(0x7f0000000240)) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r2, &(0x7f0000000080)={0x2, 0x0, @rand_addr=0x64010102}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmsg$SMC_PNETID_FLUSH(r0, &(0x7f0000000740)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000680)={&(0x7f00000005c0)={0x58, 0x0, 0x8, 0x70bd27, 0x25dfdbfd, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x30}, 0x4000005) sendmmsg$inet(r2, &(0x7f0000000f40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000900)}, 0x70040000}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000440)="88", 0x1}, {&(0x7f0000000840)="e5", 0x1}, {&(0x7f0000001040)="96", 0x1}], 0x3}}], 0x4, 0x4048841) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0xc, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000780)='\xff6\xd9\xd8\x17\xc1\xa0\xa0Cv))\xb1\xf9\xcd\xc9\xef\x86c\xa6y\n\x98\x84b\xfc\x7f\x89\xce(e\x10G\r\x8da\v\xb9\r;\xec\xfb\xfb\x9b,\x8d\x8d\x16\xcf\xaf_\xac\x167\t\x17uV\xb0\x88\f$\x1e>\x87\xc5\xe5\xa8\xaeG\x15\xab\x89?F\x95\xd8\x81k#\f\xa7') r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) ioctl$EVIOCGEFFECTS(r0, 0x80044584, &(0x7f00000003c0)=""/8) sendmsg$DEVLINK_CMD_RATE_NEW(r3, &(0x7f0000000080)={0x0, 0xfe, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r5, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) sendmsg$netlink(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=ANY=[@ANYBLOB="24000000120005040000000000000000100000000c000000000000000000000004"], 0x24}], 0x1}, 0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000080008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000340)='kfree\x00', r7}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) r8 = syz_io_uring_setup(0x3, &(0x7f0000000580)={0x0, 0xe7b7, 0x13500, 0x0, 0xfffffffd}, &(0x7f0000000240), &(0x7f0000001880)) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r8, 0x21, &(0x7f0000000440), 0x1) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) capset(&(0x7f0000000080)={0x19980330}, &(0x7f00000000c0)={0x0, 0x0, 0x100000}) lsetxattr$security_selinux(&(0x7f00000001c0)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000200), &(0x7f0000000180)='system_u:object_r:crond_var_run_t:s0\x00', 0x25, 0x1) 3.419410552s ago: executing program 1 (id=3146): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f0000002fc0)=[{{&(0x7f0000000340)={0xa, 0x4e23, 0xfffffff9, @private1={0xfc, 0x1, '\x00', 0x1}, 0x9}, 0x1c, &(0x7f00000004c0)=[{&(0x7f00000005c0)="05", 0x1}], 0x1}}], 0x1, 0x24000045) ioctl$AUTOFS_IOC_SETTIMEOUT(r0, 0x80049367, &(0x7f0000000040)) shutdown(r0, 0x1) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x4206, r1) tkill(r1, 0x12) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) fsetxattr$system_posix_acl(r2, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000180)=ANY=[@ANYBLOB="02000000010000000000000004000500000000001000010000000000f83a640d295801df"], 0x24, 0x0) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000080)=@assoc_value={0x0, 0x9}, 0x8) 3.354256443s ago: executing program 1 (id=3148): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000840)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f0000000bc0)="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", 0x12d, r1) r2 = add_key$keyring(&(0x7f0000000340), &(0x7f0000000380)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f00000001c0)='ceph\x00', 0x0, &(0x7f0000000840)='\x00\x00\x00\x00\x00\x00\x00\x00\x00*\x00\x00', 0xc, r2) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000700)='kfree\x00', r3}, 0x78) r4 = syz_open_dev$usbfs(&(0x7f0000000040), 0x80000000003, 0x101301) socket$xdp(0x2c, 0x3, 0x0) ioctl$USBDEVFS_ALLOC_STREAMS(r4, 0x8008551c, &(0x7f0000000300)=ANY=[@ANYBLOB="3057000001"]) keyctl$search(0xa, r1, &(0x7f0000000400)='logon\x00', &(0x7f0000000440)={'syz', 0x2}, r2) syz_open_dev$vcsn(&(0x7f0000000180), 0x1, 0x521042) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x8, 0x30410, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30c3a0e4, 0x1, @perf_config_ext={0x20000000000000, 0x1}, 0x11d08, 0x2, 0x0, 0x2, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = io_uring_setup(0x503e, &(0x7f0000000f40)={0x0, 0x698c, 0x100, 0x2, 0xfffffffe}) io_uring_register$IORING_REGISTER_BUFFERS2(r5, 0xf, &(0x7f0000000140)={0x5b, 0x0, 0x0, 0x0, 0x0}, 0x20) keyctl$setperm(0x5, r2, 0x1000) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7000000000000007b5af8ff00000000bfa200000000000007020000d6ffffffb703000008000000b704000000000000850000001400000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0xcc03, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 3.185331275s ago: executing program 1 (id=3155): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b703000008000040850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='kfree\x00', r1}, 0x18) r2 = mq_open(&(0x7f000084dff0)='rmdF\x17\x16\xbc\xec', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000040)={0x0, 0x6, 0x101}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) r5 = memfd_create(&(0x7f00000001c0)='\x00\xc76\xbe\x91\x8d\x182)!\x9a%\xd9\x19\x17\xb0\xed|\xb3\xc2\x017h\xe9kL\xa2\xd28\xd6\x06\a\x0e\xfc\xfe\x12\x8f&\x13\xae%@T\xa3\xb0>\\\xec\xa9\xf9Q@6A\x10\x8cn|\x00\x00\x00\x00\x00\x00\x00\x00\xeb0\xdd\xe8\x87\x05=\xfb\x8b$\xdcQ\xee\xc5\x1f\x8bQ\xf7fo\"i\xa1hk\x1d\xf5z\xc1\x7f\xa4\\]\xc4\xbe3\xf9\xa8\t?:\xd8\xda\x84\xeepI[\x1c\x00\x00\x00\x00\xf9v\x00\x00\x00\x00\x00T\xb6\xbe\x0f~\xc0\x92\xe9O{\xa8\x81(\x01\x14\xfc\x83\xf9\xfb\x05\x94Tr@Lq]\xf9\x15zj\x87\xc4\x8e\xe8/\xb9-&R\x8e\xb2\xb3bBx\x1e1\x18\x8f2\xf7]#\xed,\xc7\x03\x00\x00\x00\xa3\xee\xcb\xaf\xb3\xe3\'}\x18\xe8O\xa8#K\xb6\xe4R$\xaa\x00U\x92\xd2\x99\xb80x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0xfff3}}}, 0x24}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00'}, 0x10) ioperm(0x0, 0xd, 0x4000000000000020) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x4, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000027"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='kfree\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000040)="dc", 0x1}], 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, 0x0, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0xfe80, &(0x7f00000005c0)=[{&(0x7f0000000940)="2e00000010008188e6b62aa73772cc9f1ba1f8482e0000005e140602000000000e000a001000000002800000128c", 0x2e}], 0x1}, 0x0) 2.250269978s ago: executing program 0 (id=3171): ptrace(0x10, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x3ff, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3, 0xfffffffc, 0x0, @void, @value, @void, @value}, 0x50) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES16=r1, @ANYRES32, @ANYRES64=r0], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) unshare(0x64000600) 1.44074447s ago: executing program 0 (id=3191): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r4 = dup(r3) write$P9_RLERRORu(r4, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r4, 0x0, 0x0) write$binfmt_elf64(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kfree\x00', r1}, 0x18) creat(&(0x7f0000000000)='./file0\x00', 0x0) 1.127187244s ago: executing program 2 (id=3197): socket$key(0xf, 0x3, 0x2) mknod$loop(0x0, 0x6000, 0x0) r0 = creat(0x0, 0x0) dup2(r0, r0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000001040)=ANY=[@ANYBLOB="380100001000130780ffffff00000000ffffffff000000000000000000000000fe8000000000000000000000000000bb00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000bb0000000032000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000200000000000000000048000200656362286369706865725f6e756c6c29"], 0x138}, 0x1, 0xe}, 0x0) 1.112837264s ago: executing program 2 (id=3198): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4c0000001900010929bd700080000000021810180000fd0100000000"], 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f00000001c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xcf14}}, './file0\x00'}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) rt_sigprocmask(0x0, &(0x7f0000000100)={[0xfffffffffffe]}, 0x0, 0x8) r0 = gettid() rt_sigtimedwait(&(0x7f0000000240)={[0xffffffffffffffff]}, 0x0, 0x0, 0x8) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'tunl0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) tkill(r0, 0x12) 1.059284945s ago: executing program 5 (id=3201): mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) creat(&(0x7f0000000000)='./file0\x00', 0x0) 1.044319185s ago: executing program 2 (id=3202): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x18) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x7, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x141341) socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x2d) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x80000}, @IFLA_BR_AGEING_TIME={0x8, 0x4, 0x1}]}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x1000000, 0x0, {0x0, 0x0, 0x74, 0x0, {0x0, 0xa}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 1.035576136s ago: executing program 5 (id=3203): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x200) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x1000003, 0x300102, 0x0, 'queue1\x00', 0xffffffff}) r1 = dup(r0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000001280)={0x0, 0x0, {0x1, 0x0, 0x0, 0x0, 0xf963}}) 956.111246ms ago: executing program 5 (id=3204): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b708000000000e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000020850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x289c2, 0x1) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x1d, 0x48, &(0x7f0000000dc0)=ANY=[@ANYBLOB="1800000000000000000000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018350000050000000000000000000000b7080000000000007b8af8ff00000000b7080000c2db00007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRESDEC, @ANYBLOB="0000000000000000b70500000800000085000000a500000018000000da000000000000002800000018210000", @ANYRES32=r2, @ANYBLOB="00000000c40100009500000000000000b7080000000000007b8af8ff00000000b7080000060000007b8af000bfa100000000000007010000f8ffffffbfa40000774c0b0000000007040000f0ffffffb70200ca0800000018", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a5000000b7080000000000007b8af8ff00000000b7080000080000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000a500000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000310000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008200000085100000fdffffff85100000feffffffbf91000000000000b702000002000000850000008e010000b7000000000000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0xc, 0x34, &(0x7f0000000280)=""/52, 0x41100, 0x1, '\x00', 0x0, @fallback=0x2b, r2, 0x8, &(0x7f0000000380)={0x6, 0x2004}, 0x8, 0x10, &(0x7f00000003c0)={0x5, 0x4, 0x7ff, 0xe}, 0x10, 0xffffffffffffffff, r2, 0x6, &(0x7f0000000400)=[r2, r2], &(0x7f0000000440)=[{0x2, 0x5, 0xc, 0x6}, {0x0, 0x1, 0x8, 0x8}, {0x2, 0x3, 0xe, 0xb}, {0x2, 0x5}, {0x0, 0x5, 0x9, 0x2}, {0x0, 0x3, 0x8, 0xa}], 0x10, 0x5, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{}, &(0x7f0000000980), &(0x7f00000005c0)=r3}, 0xffffffffffffffbf) fcntl$setlease(r2, 0x400, 0x1) fremovexattr(r2, &(0x7f0000000040)=@known='system.posix_acl_default\x00') readv(0xffffffffffffffff, &(0x7f0000000500)=[{0x0}], 0x1) capset(&(0x7f0000000180)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x4081, 0xffffffff}) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) setns(r5, 0x8000000) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.sectors\x00', 0x275a, 0x0) write$UHID_INPUT(r6, &(0x7f0000001c00)={0x8, {"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", 0x104f}}, 0x601) mq_open(&(0x7f0000001140)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\xe0\x9d\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xdf\x15\f]\x15\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb', 0x42, 0x108, 0x0) 937.995157ms ago: executing program 5 (id=3205): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0xfff3}}}, 0x24}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) ioperm(0x0, 0xd, 0x4000000000000020) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x4, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000027"], 0x48) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='kfree\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000040)="dc", 0x1}], 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0xfe80, &(0x7f00000005c0)=[{&(0x7f0000000940)="2e00000010008188e6b62aa73772cc9f1ba1f8482e0000005e140602000000000e000a001000000002800000128c", 0x2e}], 0x1}, 0x0) 889.723408ms ago: executing program 5 (id=3206): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080017000000007b8af8ff011a3000bf0300000800ea346373ef8c26edb6088618ae6df89c0000b704000000000000a5000000010000009540010b653b44c2dc2e"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000080000000000000000000181100", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa2000000000000070200"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_config_ext={0x335, 0x5ff1c798}, 0x100002, 0x0, 0xfffffffc, 0x0, 0x3, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002ac0)={0x1a, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x20c9, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000c9ec0004"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC=r1, @ANYRES32=r7, @ANYRESOCT=r3], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x2d) fsopen(0x0, 0x0) capget(&(0x7f0000feaff9)={0x20071026}, &(0x7f00000001c0)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) 772.472529ms ago: executing program 3 (id=3208): socket$key(0xf, 0x3, 0x2) mknod$loop(0x0, 0x6000, 0x0) r0 = creat(0x0, 0x0) dup2(r0, r0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000001040)=ANY=[@ANYBLOB="380100001000130780ffffff00000000ffffffff000000000000000000000000fe8000000000000000000000000000bb00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000bb0000000032000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000200000000000000000048000200656362286369706865725f6e756c6c29"], 0x138}, 0x1, 0xe}, 0x0) 771.986609ms ago: executing program 3 (id=3209): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='devpts\x00', 0x0, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x198) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r3 = dup(r2) write$P9_RLERRORu(r3, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) lstat(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) bind$inet6(r0, &(0x7f0000000380)={0xa, 0x4e23, 0xb4, @local, 0x7cbc}, 0x1c) mount$bind(0x0, &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) mount$tmpfs(0x0, &(0x7f0000000400)='./file0/../file0\x00', &(0x7f00000001c0), 0x0, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) 588.207632ms ago: executing program 3 (id=3210): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="020000000400000008000000"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000080)='kmem_cache_free\x00', r1, 0x0, 0x100000000}, 0x18) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000400)=ANY=[@ANYBLOB="54020000170001000000000000000000200100000000000000000000000000010000000000000000ac141400000000000000000000000000fc020000000000000003000000000000e000000200001000000000000000000000000000000000080a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="1242ffff040000000000000000000037660b6aff000000000000000000000000000000000000000002"], 0x254}}, 0x0) 545.221303ms ago: executing program 0 (id=3211): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b708000000000e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000020850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x289c2, 0x1) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x1d, 0x48, &(0x7f0000000dc0)=ANY=[@ANYBLOB="1800000000000000000000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018350000050000000000000000000000b7080000000000007b8af8ff00000000b7080000c2db00007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRESDEC, @ANYBLOB="0000000000000000b70500000800000085000000a500000018000000da000000000000002800000018210000", @ANYRES32=r2, @ANYBLOB="00000000c40100009500000000000000b7080000000000007b8af8ff00000000b7080000060000007b8af000bfa100000000000007010000f8ffffffbfa40000774c0b0000000007040000f0ffffffb70200ca0800000018", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a5000000b7080000000000007b8af8ff00000000b7080000080000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000a500000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000310000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008200000085100000fdffffff85100000feffffffbf91000000000000b702000002000000850000008e010000b7000000000000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0xc, 0x34, &(0x7f0000000280)=""/52, 0x41100, 0x1, '\x00', 0x0, @fallback=0x2b, r2, 0x8, &(0x7f0000000380)={0x6, 0x2004}, 0x8, 0x10, &(0x7f00000003c0)={0x5, 0x4, 0x7ff, 0xe}, 0x10, 0xffffffffffffffff, r2, 0x6, &(0x7f0000000400)=[r2, r2], &(0x7f0000000440)=[{0x2, 0x5, 0xc, 0x6}, {0x0, 0x1, 0x8, 0x8}, {0x2, 0x3, 0xe, 0xb}, {0x2, 0x5}, {0x0, 0x5, 0x9, 0x2}, {0x0, 0x3, 0x8, 0xa}], 0x10, 0x5, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{}, &(0x7f0000000980), &(0x7f00000005c0)=r3}, 0xffffffffffffffbf) fcntl$setlease(r2, 0x400, 0x1) fremovexattr(r2, &(0x7f0000000040)=@known='system.posix_acl_default\x00') readv(0xffffffffffffffff, &(0x7f0000000500)=[{0x0}], 0x1) capset(&(0x7f0000000180)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x4081, 0xffffffff}) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) setns(r5, 0x8000000) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.sectors\x00', 0x275a, 0x0) write$UHID_INPUT(r6, &(0x7f0000001c00)={0x8, {"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", 0x104f}}, 0x601) mq_open(&(0x7f0000001140)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\xe0\x9d\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xdf\x15\f]\x15\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb', 0x42, 0x108, 0x0) 453.404314ms ago: executing program 3 (id=3212): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f00000001c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xcf14}}, './file0\x00'}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) rt_sigprocmask(0x0, &(0x7f0000000100)={[0xfffffffffffe]}, 0x0, 0x8) r0 = gettid() rt_sigtimedwait(&(0x7f0000000240)={[0xffffffffffffffff]}, 0x0, 0x0, 0x8) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'tunl0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) tkill(r0, 0x12) 448.425073ms ago: executing program 0 (id=3213): mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) creat(&(0x7f0000000000)='./file0\x00', 0x0) 361.350715ms ago: executing program 0 (id=3214): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x200) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x1000003, 0x300102, 0x0, 'queue1\x00', 0xffffffff}) r1 = dup(r0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000001280)={0x0, 0x0, {0x1, 0x0, 0x0, 0x0, 0xf963}}) 330.362545ms ago: executing program 3 (id=3215): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b708000000000e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000020850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x289c2, 0x1) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x1d, 0x48, &(0x7f0000000dc0)=ANY=[@ANYBLOB="1800000000000000000000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018350000050000000000000000000000b7080000000000007b8af8ff00000000b7080000c2db00007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRESDEC, @ANYBLOB="0000000000000000b70500000800000085000000a500000018000000da000000000000002800000018210000", @ANYRES32=r2, @ANYBLOB="00000000c40100009500000000000000b7080000000000007b8af8ff00000000b7080000060000007b8af000bfa100000000000007010000f8ffffffbfa40000774c0b0000000007040000f0ffffffb70200ca0800000018", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a5000000b7080000000000007b8af8ff00000000b7080000080000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000a500000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000310000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008200000085100000fdffffff85100000feffffffbf91000000000000b702000002000000850000008e010000b7000000000000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0xc, 0x34, &(0x7f0000000280)=""/52, 0x41100, 0x1, '\x00', 0x0, @fallback=0x2b, r2, 0x8, &(0x7f0000000380)={0x6, 0x2004}, 0x8, 0x10, &(0x7f00000003c0)={0x5, 0x4, 0x7ff, 0xe}, 0x10, 0xffffffffffffffff, r2, 0x6, &(0x7f0000000400)=[r2, r2], &(0x7f0000000440)=[{0x2, 0x5, 0xc, 0x6}, {0x0, 0x1, 0x8, 0x8}, {0x2, 0x3, 0xe, 0xb}, {0x2, 0x5}, {0x0, 0x5, 0x9, 0x2}, {0x0, 0x3, 0x8, 0xa}], 0x10, 0x5, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{}, &(0x7f0000000980), &(0x7f00000005c0)=r3}, 0xffffffffffffffbf) fcntl$setlease(r2, 0x400, 0x1) fremovexattr(r2, &(0x7f0000000040)=@known='system.posix_acl_default\x00') readv(0xffffffffffffffff, &(0x7f0000000500)=[{0x0}], 0x1) capset(&(0x7f0000000180)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x4081, 0xffffffff}) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) setns(r5, 0x8000000) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.sectors\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r6, 0x0) mq_open(&(0x7f0000001140)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\xe0\x9d\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xdf\x15\f]\x15\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb', 0x42, 0x108, 0x0) 311.382406ms ago: executing program 3 (id=3216): bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480), 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = openat$sysfs(0xffffff9c, 0x0, 0x42, 0x0) pwritev(r0, &(0x7f0000000500), 0x0, 0xffffff01, 0x2) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[], 0xff2e) r2 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$TCXONC(r1, 0x540a, 0x3) socket$nl_route(0x10, 0x3, 0x0) 251.536496ms ago: executing program 0 (id=3217): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000680)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff0180040008003950323030"], 0x15) r4 = dup(r3) write$P9_RLERRORu(r4, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kfree\x00', r1}, 0x18) creat(&(0x7f0000000000)='./file0\x00', 0x0) 195.287488ms ago: executing program 2 (id=3218): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000054850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000280)='kfree\x00', r2}, 0x18) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x60, &(0x7f0000000840)={'filter\x00', 0x4, [{}, {0x0, 0x100000000000000}]}, 0x68) prctl$PR_SET_NAME(0xf, &(0x7f0000000000)='\x00') r3 = syz_open_procfs(0x0, &(0x7f0000000380)='attr/exec\x00') mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000880)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) r4 = syz_io_uring_setup(0x2e3b, &(0x7f0000000440)={0x0, 0x482b, 0x10100, 0x1}, &(0x7f0000000400)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, &(0x7f0000000340)=[{&(0x7f00000002c0)=""/9, 0x9}], 0x1}) io_uring_enter(r4, 0x567, 0xa1ff, 0x0, 0x0, 0x0) 162.754958ms ago: executing program 2 (id=3219): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b703000008000040850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='kfree\x00', r1}, 0x18) r2 = mq_open(&(0x7f000084dff0)='rmdF\x17\x16\xbc\xec', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000040)={0x0, 0x6, 0x101}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000380)={0x1, &(0x7f0000000280)=[{0x6, 0xfe, 0x0, 0x7ffffffe}]}) ioctl$sock_inet_udp_SIOCINQ(r4, 0x541b, 0x0) mq_timedsend(r2, 0x0, 0x0, 0x4, 0x0) mq_timedreceive(r2, &(0x7f0000000140)=""/4096, 0x1000, 0x0, 0x0) 97.932488ms ago: executing program 2 (id=3220): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f0000000200)={[{@max_batch_time={'max_batch_time', 0x3d, 0x358}}, {@resuid}, {@stripe={'stripe', 0x3d, 0x9}}]}, 0x3, 0x44b, &(0x7f00000004c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) setsockopt$inet_msfilter(r0, 0x0, 0x29, 0x0, 0x0) 0s ago: executing program 5 (id=3221): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r4 = dup(r3) write$P9_RLERRORu(r4, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r4, 0x0, 0x0) write$binfmt_elf64(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kfree\x00', r1}, 0x18) creat(&(0x7f0000000000)='./file0\x00', 0x0) kernel console output (not intermixed with test programs): 5856][T10967] ALSA: seq fatal error: cannot create timer (-19) [ 131.151236][T10981] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2349'. [ 131.245639][T11027] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2353'. [ 131.300059][T11029] hsr0 speed is unknown, defaulting to 1000 [ 131.432875][T11088] hsr0 speed is unknown, defaulting to 1000 [ 131.856217][T11115] loop1: detected capacity change from 0 to 1024 [ 131.884786][T11115] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 131.901525][T11115] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm wg1: bg 0: block 88: padding at end of block bitmap is not set [ 131.928978][ T4017] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.997287][T11130] ALSA: seq fatal error: cannot create timer (-19) [ 132.067165][T11136] loop4: detected capacity change from 0 to 1024 [ 132.081769][T11138] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2364'. [ 132.116535][T11137] ALSA: seq fatal error: cannot create timer (-19) [ 132.146841][T11136] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 132.209533][T11136] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm wg1: bg 0: block 88: padding at end of block bitmap is not set [ 132.269486][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.292016][T11157] loop2: detected capacity change from 0 to 1024 [ 132.311062][T11157] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 132.320698][T11170] ALSA: seq fatal error: cannot create timer (-19) [ 132.416323][T11174] hsr0 speed is unknown, defaulting to 1000 [ 132.571277][T11157] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm wg1: bg 0: block 88: padding at end of block bitmap is not set [ 132.767486][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.880630][T11225] ALSA: seq fatal error: cannot create timer (-19) [ 132.932364][T11232] loop3: detected capacity change from 0 to 1024 [ 132.956563][T11232] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 132.976737][T11232] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm wg1: bg 0: block 88: padding at end of block bitmap is not set [ 133.016039][ T4047] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.046833][T11279] loop3: detected capacity change from 0 to 1024 [ 133.076406][T11286] __nla_validate_parse: 7 callbacks suppressed [ 133.076423][T11286] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2393'. [ 133.077459][T11279] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 133.111026][T11279] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm wg1: bg 0: block 88: padding at end of block bitmap is not set [ 133.140142][ T4047] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.158890][T11296] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2397'. [ 133.160457][T11298] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2396'. [ 133.210274][T11302] ALSA: seq fatal error: cannot create timer (-19) [ 133.233970][T11308] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2401'. [ 133.298141][T11322] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2405'. [ 133.350796][T11325] loop3: detected capacity change from 0 to 1024 [ 133.391147][T11325] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 133.410929][T11325] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm wg1: bg 0: block 88: padding at end of block bitmap is not set [ 133.410989][T11336] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2409'. [ 133.524879][T11338] hsr0 speed is unknown, defaulting to 1000 [ 133.715231][ T4047] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.831186][T11361] ALSA: seq fatal error: cannot create timer (-19) [ 133.863419][T11374] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2414'. [ 133.910577][T11377] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2413'. [ 133.955163][T11420] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2418'. [ 133.998752][T11427] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2417'. [ 134.011228][T11425] ALSA: seq fatal error: cannot create timer (-19) [ 134.017986][T11429] loop4: detected capacity change from 0 to 1024 [ 134.045452][T11429] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 134.065118][T11429] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm wg1: bg 0: block 88: padding at end of block bitmap is not set [ 134.090030][T11437] FAULT_INJECTION: forcing a failure. [ 134.090030][T11437] name failslab, interval 1, probability 0, space 0, times 0 [ 134.090512][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.102787][T11437] CPU: 0 UID: 0 PID: 11437 Comm: syz.1.2423 Not tainted 6.15.0-rc5-syzkaller-00204-g0e1329d4045c #0 PREEMPT(voluntary) [ 134.102822][T11437] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 134.102839][T11437] Call Trace: [ 134.102847][T11437] [ 134.102856][T11437] __dump_stack+0x1d/0x30 [ 134.102901][T11437] dump_stack_lvl+0xe8/0x140 [ 134.102968][T11437] dump_stack+0x15/0x1b [ 134.102990][T11437] should_fail_ex+0x265/0x280 [ 134.103039][T11437] ? do_eventfd+0x5c/0x1b0 [ 134.103066][T11437] should_failslab+0x8c/0xb0 [ 134.103151][T11437] __kmalloc_cache_noprof+0x4c/0x320 [ 134.103180][T11437] do_eventfd+0x5c/0x1b0 [ 134.103207][T11437] __x64_sys_eventfd2+0x2d/0x40 [ 134.103296][T11437] x64_sys_call+0x1284/0x2fb0 [ 134.103367][T11437] do_syscall_64+0xd0/0x1a0 [ 134.103396][T11437] ? clear_bhb_loop+0x25/0x80 [ 134.103423][T11437] ? clear_bhb_loop+0x25/0x80 [ 134.103452][T11437] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.103479][T11437] RIP: 0033:0x7f4e03e4e969 [ 134.103499][T11437] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 134.103523][T11437] RSP: 002b:00007f4e024b7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000122 [ 134.103547][T11437] RAX: ffffffffffffffda RBX: 00007f4e04075fa0 RCX: 00007f4e03e4e969 [ 134.103563][T11437] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 134.103660][T11437] RBP: 00007f4e024b7090 R08: 0000000000000000 R09: 0000000000000000 [ 134.103705][T11437] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 134.103720][T11437] R13: 0000000000000000 R14: 00007f4e04075fa0 R15: 00007fff3f14a2f8 [ 134.103745][T11437] [ 134.458284][T11464] ALSA: seq fatal error: cannot create timer (-19) [ 134.576027][T11475] hsr0 speed is unknown, defaulting to 1000 [ 135.314449][T11527] hsr0 speed is unknown, defaulting to 1000 [ 135.568007][T11525] ALSA: seq fatal error: cannot create timer (-19) [ 135.643612][T11556] ALSA: seq fatal error: cannot create timer (-19) [ 135.645120][T11559] loop4: detected capacity change from 0 to 1024 [ 135.677589][T11559] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 135.701531][T11559] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm wg1: bg 0: block 88: padding at end of block bitmap is not set [ 135.743773][T11565] hsr0 speed is unknown, defaulting to 1000 [ 135.753647][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.850650][T11604] ALSA: seq fatal error: cannot create timer (-19) [ 135.890470][ T29] kauditd_printk_skb: 226 callbacks suppressed [ 135.890490][ T29] audit: type=1326 audit(1746860649.979:3752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11607 comm="syz.0.2452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13a76ee969 code=0x7ffc0000 [ 135.920852][ T29] audit: type=1326 audit(1746860649.979:3753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11607 comm="syz.0.2452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13a76ee969 code=0x7ffc0000 [ 135.944604][ T29] audit: type=1326 audit(1746860649.979:3754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11607 comm="syz.0.2452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f13a76ee969 code=0x7ffc0000 [ 135.968121][T11613] ALSA: seq fatal error: cannot create timer (-19) [ 135.974971][ T29] audit: type=1326 audit(1746860649.979:3755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11607 comm="syz.0.2452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13a76ee969 code=0x7ffc0000 [ 135.998508][ T29] audit: type=1326 audit(1746860649.989:3756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11607 comm="syz.0.2452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f13a76ee969 code=0x7ffc0000 [ 136.022447][ T29] audit: type=1326 audit(1746860649.989:3757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11607 comm="syz.0.2452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13a76ee969 code=0x7ffc0000 [ 136.046092][ T29] audit: type=1326 audit(1746860649.989:3758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11607 comm="syz.0.2452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f13a76ee969 code=0x7ffc0000 [ 136.069637][ T29] audit: type=1326 audit(1746860649.989:3759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11607 comm="syz.0.2452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13a76ee969 code=0x7ffc0000 [ 136.093339][ T29] audit: type=1326 audit(1746860649.989:3760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11607 comm="syz.0.2452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f13a76ee969 code=0x7ffc0000 [ 136.116978][ T29] audit: type=1326 audit(1746860649.989:3761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11607 comm="syz.0.2452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13a76ee969 code=0x7ffc0000 [ 136.392501][T11634] ALSA: seq fatal error: cannot create timer (-19) [ 136.573702][T11615] hsr0 speed is unknown, defaulting to 1000 [ 136.612873][T11651] hsr0 speed is unknown, defaulting to 1000 [ 136.626435][T11650] 9pnet_fd: Insufficient options for proto=fd [ 137.231539][T11711] hsr0 speed is unknown, defaulting to 1000 [ 137.684003][T11745] loop0: detected capacity change from 0 to 1024 [ 137.727562][T11745] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 137.752033][T11745] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm wg1: bg 0: block 88: padding at end of block bitmap is not set [ 137.789898][T11751] ALSA: seq fatal error: cannot create timer (-19) [ 137.817333][ T3493] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.001786][T11776] ALSA: seq fatal error: cannot create timer (-19) [ 138.025277][T11782] FAULT_INJECTION: forcing a failure. [ 138.025277][T11782] name failslab, interval 1, probability 0, space 0, times 0 [ 138.037998][T11782] CPU: 1 UID: 0 PID: 11782 Comm: syz.3.2491 Not tainted 6.15.0-rc5-syzkaller-00204-g0e1329d4045c #0 PREEMPT(voluntary) [ 138.038085][T11782] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 138.038101][T11782] Call Trace: [ 138.038110][T11782] [ 138.038119][T11782] __dump_stack+0x1d/0x30 [ 138.038172][T11782] dump_stack_lvl+0xe8/0x140 [ 138.038194][T11782] dump_stack+0x15/0x1b [ 138.038214][T11782] should_fail_ex+0x265/0x280 [ 138.038300][T11782] should_failslab+0x8c/0xb0 [ 138.038335][T11782] kmem_cache_alloc_node_noprof+0x57/0x320 [ 138.038376][T11782] ? __alloc_skb+0x101/0x320 [ 138.038427][T11782] __alloc_skb+0x101/0x320 [ 138.038464][T11782] netlink_alloc_large_skb+0xba/0xf0 [ 138.038493][T11782] netlink_sendmsg+0x3cf/0x6b0 [ 138.038535][T11782] ? __pfx_netlink_sendmsg+0x10/0x10 [ 138.038583][T11782] __sock_sendmsg+0x142/0x180 [ 138.038610][T11782] ____sys_sendmsg+0x31e/0x4e0 [ 138.038694][T11782] ___sys_sendmsg+0x17b/0x1d0 [ 138.038727][T11782] __x64_sys_sendmsg+0xd4/0x160 [ 138.038756][T11782] x64_sys_call+0x2999/0x2fb0 [ 138.038833][T11782] do_syscall_64+0xd0/0x1a0 [ 138.038856][T11782] ? clear_bhb_loop+0x25/0x80 [ 138.038883][T11782] ? clear_bhb_loop+0x25/0x80 [ 138.038927][T11782] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.038953][T11782] RIP: 0033:0x7f62c270e969 [ 138.038968][T11782] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 138.038985][T11782] RSP: 002b:00007f62c0d77038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 138.039057][T11782] RAX: ffffffffffffffda RBX: 00007f62c2935fa0 RCX: 00007f62c270e969 [ 138.039072][T11782] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 0000000000000006 [ 138.039096][T11782] RBP: 00007f62c0d77090 R08: 0000000000000000 R09: 0000000000000000 [ 138.039111][T11782] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 138.039125][T11782] R13: 0000000000000000 R14: 00007f62c2935fa0 R15: 00007ffeb6b03d18 [ 138.039149][T11782] [ 138.396231][T11797] ALSA: seq fatal error: cannot create timer (-19) [ 138.555434][T11809] hsr0 speed is unknown, defaulting to 1000 [ 138.769509][T11832] __nla_validate_parse: 11 callbacks suppressed [ 138.769525][T11832] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2500'. [ 138.840582][T11833] ALSA: seq fatal error: cannot create timer (-19) [ 138.903922][T11837] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2502'. [ 139.004509][T11799] netlink: 830 bytes leftover after parsing attributes in process `syz.3.2494'. [ 139.211696][T11847] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2506'. [ 139.315964][T11849] veth0_vlan: entered allmulticast mode [ 139.462436][T11850] veth0_vlan: left promiscuous mode [ 139.476092][T11850] veth0_vlan: entered promiscuous mode [ 139.521440][T11867] ALSA: seq fatal error: cannot create timer (-19) [ 139.939266][T11902] ALSA: seq fatal error: cannot create timer (-19) [ 140.029332][T11909] hsr0 speed is unknown, defaulting to 1000 [ 140.596570][T11934] hsr0 speed is unknown, defaulting to 1000 [ 140.816170][T11957] loop0: detected capacity change from 0 to 1024 [ 140.910022][T11907] ALSA: seq fatal error: cannot create timer (-19) [ 140.941873][T11957] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 141.072473][T11957] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm wg1: bg 0: block 88: padding at end of block bitmap is not set [ 141.221383][ T3493] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.248259][T11973] 9pnet_fd: Insufficient options for proto=fd [ 141.298457][T11971] hsr0 speed is unknown, defaulting to 1000 [ 141.508297][T12009] hsr0 speed is unknown, defaulting to 1000 [ 141.531760][T12008] ALSA: seq fatal error: cannot create timer (-19) [ 141.787754][T12037] ALSA: seq fatal error: cannot create timer (-19) [ 142.044078][T12049] ALSA: seq fatal error: cannot create timer (-19) [ 142.306424][T12070] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2552'. [ 142.420031][T12082] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2555'. [ 142.450030][ T29] kauditd_printk_skb: 47 callbacks suppressed [ 142.450048][ T29] audit: type=1326 audit(1746860656.549:3809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12079 comm="syz.1.2555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e03e4e969 code=0x7ffc0000 [ 142.491419][T12081] ALSA: seq fatal error: cannot create timer (-19) [ 142.548558][T12085] hsr0 speed is unknown, defaulting to 1000 [ 142.608935][ T29] audit: type=1326 audit(1746860656.579:3810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12079 comm="syz.1.2555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4e03e4e969 code=0x7ffc0000 [ 142.632669][ T29] audit: type=1326 audit(1746860656.579:3811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12079 comm="syz.1.2555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e03e4e969 code=0x7ffc0000 [ 142.656585][ T29] audit: type=1326 audit(1746860656.579:3812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12079 comm="syz.1.2555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e03e4e969 code=0x7ffc0000 [ 142.680202][ T29] audit: type=1326 audit(1746860656.599:3813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12079 comm="syz.1.2555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f4e03e4e969 code=0x7ffc0000 [ 142.703850][ T29] audit: type=1326 audit(1746860656.599:3814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12079 comm="syz.1.2555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e03e4e969 code=0x7ffc0000 [ 142.727617][ T29] audit: type=1326 audit(1746860656.599:3815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12079 comm="syz.1.2555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4e03e4e969 code=0x7ffc0000 [ 142.751316][ T29] audit: type=1326 audit(1746860656.599:3816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12079 comm="syz.1.2555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e03e4e969 code=0x7ffc0000 [ 142.774978][ T29] audit: type=1326 audit(1746860656.599:3817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12079 comm="syz.1.2555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4e03e4e969 code=0x7ffc0000 [ 142.798494][ T29] audit: type=1326 audit(1746860656.599:3818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12079 comm="syz.1.2555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e03e4e969 code=0x7ffc0000 [ 142.839527][T12087] hsr0 speed is unknown, defaulting to 1000 [ 143.112703][T12150] ALSA: seq fatal error: cannot create timer (-19) [ 143.217033][T12157] hsr0 speed is unknown, defaulting to 1000 [ 143.548694][T12194] hsr0 speed is unknown, defaulting to 1000 [ 143.719004][T12196] hsr0 speed is unknown, defaulting to 1000 [ 144.461555][T12244] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2572'. [ 144.702928][T12263] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2579'. [ 144.799999][T12267] hsr0 speed is unknown, defaulting to 1000 [ 144.919962][T12268] hsr0 speed is unknown, defaulting to 1000 [ 145.425601][T12325] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2582'. [ 145.434672][T12325] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2582'. [ 145.481453][T12325] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12325 comm=syz.3.2582 [ 145.525445][T12336] ALSA: seq fatal error: cannot create timer (-19) [ 145.653769][T12354] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2590'. [ 145.874375][T12367] hsr0 speed is unknown, defaulting to 1000 [ 146.196846][T12396] hsr0 speed is unknown, defaulting to 1000 [ 146.417033][T12359] netlink: 830 bytes leftover after parsing attributes in process `syz.2.2588'. [ 146.472866][T12429] hsr0 speed is unknown, defaulting to 1000 [ 146.576365][T12460] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2599'. [ 146.659713][T12468] ALSA: seq fatal error: cannot create timer (-19) [ 146.944544][T12476] hsr0 speed is unknown, defaulting to 1000 [ 147.357757][T12502] loop4: detected capacity change from 0 to 1024 [ 147.383909][T12506] ALSA: seq fatal error: cannot create timer (-19) [ 147.424442][T12511] ALSA: seq fatal error: cannot create timer (-19) [ 147.469940][T12509] hsr0 speed is unknown, defaulting to 1000 [ 147.510226][T12502] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 147.683586][T12531] hsr0 speed is unknown, defaulting to 1000 [ 147.972998][ T29] kauditd_printk_skb: 59 callbacks suppressed [ 147.973014][ T29] audit: type=1400 audit(1746860662.089:3878): avc: denied { mount } for pid=12501 comm="syz.4.2605" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 148.008157][ T29] audit: type=1400 audit(1746860662.119:3879): avc: denied { create } for pid=12501 comm="syz.4.2605" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 148.035591][T12502] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm wg1: bg 0: block 88: padding at end of block bitmap is not set [ 148.050093][ T29] audit: type=1400 audit(1746860662.139:3880): avc: denied { write } for pid=12501 comm="syz.4.2605" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 148.065511][T12577] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2612'. [ 148.070681][ T29] audit: type=1400 audit(1746860662.139:3881): avc: denied { read } for pid=12501 comm="syz.4.2605" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 148.100043][ T29] audit: type=1400 audit(1746860662.149:3882): avc: denied { write } for pid=12501 comm="wg1" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 148.121479][ T29] audit: type=1400 audit(1746860662.149:3883): avc: denied { add_name } for pid=12501 comm="wg1" name="cpuacct.usage_percpu_sys" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 148.143486][ T29] audit: type=1400 audit(1746860662.149:3884): avc: denied { create } for pid=12501 comm="wg1" name="cpuacct.usage_percpu_sys" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 148.165527][ T29] audit: type=1400 audit(1746860662.199:3885): avc: denied { mount } for pid=12568 comm="syz.3.2613" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 148.187740][ T29] audit: type=1400 audit(1746860662.199:3886): avc: denied { unmount } for pid=12568 comm="syz.3.2613" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 148.224738][ T29] audit: type=1400 audit(1746860662.339:3887): avc: denied { unmount } for pid=3319 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 148.292297][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.427981][T12607] loop3: detected capacity change from 0 to 512 [ 148.454348][T12600] ALSA: seq fatal error: cannot create timer (-19) [ 148.470964][T12610] hsr0 speed is unknown, defaulting to 1000 [ 148.566692][T12634] loop1: detected capacity change from 0 to 512 [ 148.601457][T12607] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 148.628889][T12607] ext4 filesystem being mounted at /504/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 148.657488][T12634] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 148.690471][T12634] ext4 filesystem being mounted at /488/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 148.702015][T12634] FAULT_INJECTION: forcing a failure. [ 148.702015][T12634] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 148.715277][T12634] CPU: 1 UID: 0 PID: 12634 Comm: syz.1.2622 Not tainted 6.15.0-rc5-syzkaller-00204-g0e1329d4045c #0 PREEMPT(voluntary) [ 148.715304][T12634] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 148.715316][T12634] Call Trace: [ 148.715323][T12634] [ 148.715332][T12634] __dump_stack+0x1d/0x30 [ 148.715358][T12634] dump_stack_lvl+0xe8/0x140 [ 148.715523][T12634] dump_stack+0x15/0x1b [ 148.715540][T12634] should_fail_ex+0x265/0x280 [ 148.715610][T12634] should_fail+0xb/0x20 [ 148.715681][T12634] should_fail_usercopy+0x1a/0x20 [ 148.715702][T12634] _copy_from_user+0x1c/0xb0 [ 148.715729][T12634] __sys_bpf+0x178/0x790 [ 148.715771][T12634] __x64_sys_bpf+0x41/0x50 [ 148.715795][T12634] x64_sys_call+0x2478/0x2fb0 [ 148.715880][T12634] do_syscall_64+0xd0/0x1a0 [ 148.715902][T12634] ? clear_bhb_loop+0x25/0x80 [ 148.715923][T12634] ? clear_bhb_loop+0x25/0x80 [ 148.715943][T12634] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.715969][T12634] RIP: 0033:0x7f4e03e4e969 [ 148.715988][T12634] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 148.716008][T12634] RSP: 002b:00007f4e024b7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 148.716081][T12634] RAX: ffffffffffffffda RBX: 00007f4e04075fa0 RCX: 00007f4e03e4e969 [ 148.716093][T12634] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 148.716182][T12634] RBP: 00007f4e024b7090 R08: 0000000000000000 R09: 0000000000000000 [ 148.716194][T12634] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 148.716206][T12634] R13: 0000000000000000 R14: 00007f4e04075fa0 R15: 00007fff3f14a2f8 [ 148.716227][T12634] [ 148.903846][ T4017] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.935728][ T4047] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.968083][T12652] 9pnet_fd: Insufficient options for proto=fd [ 148.994429][T12645] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2626'. [ 149.025584][T12658] loop3: detected capacity change from 0 to 1024 [ 149.054468][T12658] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 149.071952][T12658] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm wg1: bg 0: block 88: padding at end of block bitmap is not set [ 149.125041][ T4047] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.155956][T12672] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2632'. [ 149.204542][T12678] hsr0 speed is unknown, defaulting to 1000 [ 149.341941][T12723] 9pnet_fd: Insufficient options for proto=fd [ 149.434020][T12726] loop3: detected capacity change from 0 to 1024 [ 149.486603][T12726] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 149.584868][T12739] hsr0 speed is unknown, defaulting to 1000 [ 149.778478][T12726] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm wg1: bg 0: block 88: padding at end of block bitmap is not set [ 149.881819][T12765] hsr0 speed is unknown, defaulting to 1000 [ 150.085094][T12790] macvlan2: entered promiscuous mode [ 150.090694][T12790] macvlan2: entered allmulticast mode [ 150.248493][T12790] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 150.289831][ T4047] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.312158][T12801] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2650'. [ 150.365892][T12805] hsr0 speed is unknown, defaulting to 1000 [ 150.408449][T12818] loop1: detected capacity change from 0 to 1024 [ 150.453327][T12818] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 150.522049][T12818] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm wg1: bg 0: block 88: padding at end of block bitmap is not set [ 150.561619][T12849] netlink: 300 bytes leftover after parsing attributes in process `syz.3.2658'. [ 150.607237][ T4017] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.691196][T12865] loop1: detected capacity change from 0 to 1024 [ 150.753995][T12868] hsr0 speed is unknown, defaulting to 1000 [ 150.836019][T12865] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 150.908332][T12865] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm wg1: bg 0: block 88: padding at end of block bitmap is not set [ 150.942128][T12896] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2665'. [ 151.024050][ T4017] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.239269][T12909] hsr0 speed is unknown, defaulting to 1000 [ 151.346320][T12917] hsr0 speed is unknown, defaulting to 1000 [ 151.691798][T12854] netlink: 830 bytes leftover after parsing attributes in process `syz.0.2656'. [ 151.824245][T12978] FAULT_INJECTION: forcing a failure. [ 151.824245][T12978] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 151.837893][T12978] CPU: 1 UID: 0 PID: 12978 Comm: syz.1.2675 Not tainted 6.15.0-rc5-syzkaller-00204-g0e1329d4045c #0 PREEMPT(voluntary) [ 151.837929][T12978] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 151.837994][T12978] Call Trace: [ 151.838000][T12978] [ 151.838008][T12978] __dump_stack+0x1d/0x30 [ 151.838031][T12978] dump_stack_lvl+0xe8/0x140 [ 151.838051][T12978] dump_stack+0x15/0x1b [ 151.838141][T12978] should_fail_ex+0x265/0x280 [ 151.838181][T12978] should_fail+0xb/0x20 [ 151.838215][T12978] should_fail_usercopy+0x1a/0x20 [ 151.838233][T12978] _copy_to_user+0x20/0xa0 [ 151.838287][T12978] simple_read_from_buffer+0xb5/0x130 [ 151.838318][T12978] proc_fail_nth_read+0x100/0x140 [ 151.838351][T12978] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 151.838382][T12978] vfs_read+0x19d/0x6f0 [ 151.838447][T12978] ? _raw_spin_unlock+0x26/0x50 [ 151.838475][T12978] ? __rcu_read_unlock+0x4f/0x70 [ 151.838495][T12978] ? __fget_files+0x184/0x1c0 [ 151.838543][T12978] ksys_read+0xda/0x1a0 [ 151.838574][T12978] __x64_sys_read+0x40/0x50 [ 151.838607][T12978] x64_sys_call+0x2d77/0x2fb0 [ 151.838633][T12978] do_syscall_64+0xd0/0x1a0 [ 151.838658][T12978] ? clear_bhb_loop+0x25/0x80 [ 151.838734][T12978] ? clear_bhb_loop+0x25/0x80 [ 151.838773][T12978] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.838801][T12978] RIP: 0033:0x7f4e03e4d37c [ 151.838871][T12978] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 151.838918][T12978] RSP: 002b:00007f4e024b7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 151.838936][T12978] RAX: ffffffffffffffda RBX: 00007f4e04075fa0 RCX: 00007f4e03e4d37c [ 151.838951][T12978] RDX: 000000000000000f RSI: 00007f4e024b70a0 RDI: 0000000000000004 [ 151.838965][T12978] RBP: 00007f4e024b7090 R08: 0000000000000000 R09: 0000000000000000 [ 151.838995][T12978] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 151.839010][T12978] R13: 0000000000000000 R14: 00007f4e04075fa0 R15: 00007fff3f14a2f8 [ 151.839051][T12978] [ 152.179482][T12991] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2681'. [ 152.239568][T12992] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2679'. [ 152.298176][T13000] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2682'. [ 152.527423][T13017] hsr0 speed is unknown, defaulting to 1000 [ 152.657257][T13043] ALSA: seq fatal error: cannot create timer (-19) [ 152.710662][T12996] netlink: 830 bytes leftover after parsing attributes in process `syz.4.2680'. [ 152.835095][T13059] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2695'. [ 152.851227][T13055] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2693'. [ 152.894598][T13061] loop2: detected capacity change from 0 to 1024 [ 152.940319][T13061] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 152.967686][T13061] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm wg1: bg 0: block 88: padding at end of block bitmap is not set [ 152.998119][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.049519][T13069] hsr0 speed is unknown, defaulting to 1000 [ 153.117971][ T29] kauditd_printk_skb: 114 callbacks suppressed [ 153.117989][ T29] audit: type=1107 audit(1746860667.229:4002): pid=13075 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 153.173751][ T29] audit: type=1400 audit(1746860667.269:4003): avc: denied { mounton } for pid=13068 comm="syz.1.2699" path="/503/bus" dev="tmpfs" ino=2694 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 153.299485][T13099] ALSA: seq fatal error: cannot create timer (-19) [ 153.581956][ T29] audit: type=1326 audit(1746860667.689:4004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13113 comm="syz.3.2707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62c270e969 code=0x7ffc0000 [ 153.605702][ T29] audit: type=1326 audit(1746860667.689:4005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13113 comm="syz.3.2707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62c270e969 code=0x7ffc0000 [ 153.629345][ T29] audit: type=1326 audit(1746860667.689:4006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13113 comm="syz.3.2707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f62c270e969 code=0x7ffc0000 [ 153.652895][ T29] audit: type=1326 audit(1746860667.689:4007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13113 comm="syz.3.2707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62c270e969 code=0x7ffc0000 [ 153.676526][ T29] audit: type=1326 audit(1746860667.689:4008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13113 comm="syz.3.2707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f62c270e969 code=0x7ffc0000 [ 153.700219][ T29] audit: type=1326 audit(1746860667.689:4009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13113 comm="syz.3.2707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62c270e969 code=0x7ffc0000 [ 153.723787][ T29] audit: type=1326 audit(1746860667.689:4010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13113 comm="syz.3.2707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f62c270e969 code=0x7ffc0000 [ 153.890737][ T29] audit: type=1326 audit(1746860667.689:4011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13113 comm="syz.3.2707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62c270e969 code=0x7ffc0000 [ 154.059412][T13141] ALSA: seq fatal error: cannot create timer (-19) [ 154.079744][T13151] hsr0 speed is unknown, defaulting to 1000 [ 154.858467][T13190] hsr0 speed is unknown, defaulting to 1000 [ 155.372429][T13188] hsr0 speed is unknown, defaulting to 1000 [ 155.405763][T13218] hsr0 speed is unknown, defaulting to 1000 [ 156.003501][T13278] ALSA: seq fatal error: cannot create timer (-19) [ 156.045265][T13284] hsr0 speed is unknown, defaulting to 1000 [ 156.160685][T13304] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (1024) [ 156.169965][T13304] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255 [ 156.179950][T13309] __nla_validate_parse: 5 callbacks suppressed [ 156.179967][T13309] netlink: 300 bytes leftover after parsing attributes in process `syz.0.2737'. [ 156.215930][T13304] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2738'. [ 156.505159][T13325] hsr0 speed is unknown, defaulting to 1000 [ 156.921759][T13355] hsr0 speed is unknown, defaulting to 1000 [ 156.939787][T13362] ALSA: seq fatal error: cannot create timer (-19) [ 157.095983][T13376] hsr0 speed is unknown, defaulting to 1000 [ 157.181353][T13383] hsr0 speed is unknown, defaulting to 1000 [ 157.357333][T13448] loop2: detected capacity change from 0 to 1024 [ 157.393202][T13447] ALSA: seq fatal error: cannot create timer (-19) [ 157.428900][T13448] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 157.441498][T13465] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2756'. [ 157.528835][T13448] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm wg1: bg 0: block 88: padding at end of block bitmap is not set [ 157.625605][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.805533][T13488] hsr0 speed is unknown, defaulting to 1000 [ 158.116423][T13513] hsr0 speed is unknown, defaulting to 1000 [ 158.175705][T13525] ALSA: seq fatal error: cannot create timer (-19) [ 158.179353][T13530] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2770'. [ 158.272253][T13555] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2773'. [ 158.369139][T13562] loop2: detected capacity change from 0 to 512 [ 158.409034][T13562] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 158.424762][T13562] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 158.439184][T13562] ext4 filesystem being mounted at /463/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 158.496950][ T29] kauditd_printk_skb: 40 callbacks suppressed [ 158.496966][ T29] audit: type=1400 audit(1746860672.579:4052): avc: denied { name_bind } for pid=13560 comm="syz.2.2776" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 158.581005][ T29] audit: type=1400 audit(1746860672.689:4053): avc: denied { connect } for pid=13587 comm="syz.3.2784" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 158.611218][ T29] audit: type=1400 audit(1746860672.719:4054): avc: denied { write } for pid=13587 comm="syz.3.2784" path="socket:[29374]" dev="sockfs" ino=29374 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 158.611268][ T29] audit: type=1400 audit(1746860672.719:4055): avc: denied { create } for pid=13587 comm="syz.3.2784" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 158.611301][ T29] audit: type=1400 audit(1746860672.719:4056): avc: denied { create } for pid=13587 comm="syz.3.2784" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 158.611329][ T29] audit: type=1400 audit(1746860672.719:4057): avc: denied { write } for pid=13587 comm="syz.3.2784" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 158.620209][T13580] hsr0 speed is unknown, defaulting to 1000 [ 158.717873][ T29] audit: type=1400 audit(1746860672.829:4058): avc: denied { read write } for pid=13560 comm="syz.2.2776" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 158.717981][ T29] audit: type=1400 audit(1746860672.829:4059): avc: denied { open } for pid=13560 comm="syz.2.2776" path="/463/file1/file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 158.853877][T13637] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2786'. [ 158.926007][ T29] audit: type=1400 audit(1746860673.039:4060): avc: denied { write } for pid=13638 comm="syz.3.2787" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 158.950686][ T29] audit: type=1400 audit(1746860673.059:4061): avc: denied { accept } for pid=13638 comm="syz.3.2787" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 159.009667][T13644] netlink: 300 bytes leftover after parsing attributes in process `syz.3.2789'. [ 159.051792][T13652] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2790'. [ 159.143590][T13659] hsr0 speed is unknown, defaulting to 1000 [ 159.209757][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.238587][T13685] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 159.245428][T13685] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 159.253123][T13685] vhci_hcd vhci_hcd.0: Device attached [ 159.276039][T13686] usbip_core: unknown command [ 159.280802][T13686] vhci_hcd: unknown pdu 0 [ 159.285261][T13686] usbip_core: unknown command [ 159.303977][ T12] vhci_hcd: stop threads [ 159.308280][ T12] vhci_hcd: release socket [ 159.312893][ T12] vhci_hcd: disconnect device [ 159.324800][T13692] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2795'. [ 159.363882][T13698] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2798'. [ 159.377496][T13696] loop4: detected capacity change from 0 to 1024 [ 159.394302][T13696] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 159.414055][T13696] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm wg1: bg 0: block 88: padding at end of block bitmap is not set [ 159.439321][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.485383][T13713] macvlan2: entered promiscuous mode [ 159.490760][T13713] macvlan2: entered allmulticast mode [ 159.496644][T13713] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 159.625192][T13721] hsr0 speed is unknown, defaulting to 1000 [ 159.777176][T13759] loop3: detected capacity change from 0 to 1024 [ 159.850528][T13759] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 159.871523][T13759] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm wg1: bg 0: block 88: padding at end of block bitmap is not set [ 159.909996][ T4047] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.910122][T13764] hsr0 speed is unknown, defaulting to 1000 [ 159.995083][T13800] macvlan2: entered promiscuous mode [ 160.000483][T13800] macvlan2: entered allmulticast mode [ 160.001924][T13801] ALSA: seq fatal error: cannot create timer (-19) [ 160.009619][T13800] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 160.059600][T13814] FAULT_INJECTION: forcing a failure. [ 160.059600][T13814] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 160.072818][T13814] CPU: 0 UID: 0 PID: 13814 Comm: syz.1.2818 Not tainted 6.15.0-rc5-syzkaller-00204-g0e1329d4045c #0 PREEMPT(voluntary) [ 160.072855][T13814] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 160.072871][T13814] Call Trace: [ 160.072879][T13814] [ 160.072920][T13814] __dump_stack+0x1d/0x30 [ 160.072946][T13814] dump_stack_lvl+0xe8/0x140 [ 160.072970][T13814] dump_stack+0x15/0x1b [ 160.072990][T13814] should_fail_ex+0x265/0x280 [ 160.073096][T13814] should_fail+0xb/0x20 [ 160.073131][T13814] should_fail_usercopy+0x1a/0x20 [ 160.073151][T13814] _copy_from_user+0x1c/0xb0 [ 160.073174][T13814] tcp_v4_parse_md5_keys+0x94/0x3c0 [ 160.073224][T13809] ALSA: seq fatal error: cannot create timer (-19) [ 160.073302][T13814] do_tcp_setsockopt+0xf21/0x1670 [ 160.073345][T13814] ? selinux_socket_setsockopt+0x1ad/0x1e0 [ 160.073378][T13814] tcp_setsockopt+0x51/0xb0 [ 160.073418][T13814] sock_common_setsockopt+0x66/0x80 [ 160.073501][T13814] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 160.073538][T13814] __sys_setsockopt+0x181/0x200 [ 160.073589][T13814] __x64_sys_setsockopt+0x64/0x80 [ 160.073631][T13814] x64_sys_call+0x2bd5/0x2fb0 [ 160.073730][T13814] do_syscall_64+0xd0/0x1a0 [ 160.073758][T13814] ? clear_bhb_loop+0x25/0x80 [ 160.073823][T13814] ? clear_bhb_loop+0x25/0x80 [ 160.073849][T13814] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.073869][T13814] RIP: 0033:0x7f4e03e4e969 [ 160.073883][T13814] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 160.073980][T13814] RSP: 002b:00007f4e024b7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 160.074004][T13814] RAX: ffffffffffffffda RBX: 00007f4e04075fa0 RCX: 00007f4e03e4e969 [ 160.074018][T13814] RDX: 000000000000000e RSI: 0000000000000006 RDI: 0000000000000003 [ 160.074066][T13814] RBP: 00007f4e024b7090 R08: 00000000000000d8 R09: 0000000000000000 [ 160.074081][T13814] R10: 0000200000000280 R11: 0000000000000246 R12: 0000000000000001 [ 160.074097][T13814] R13: 0000000000000000 R14: 00007f4e04075fa0 R15: 00007fff3f14a2f8 [ 160.074121][T13814] [ 160.266039][T13818] hsr0 speed is unknown, defaulting to 1000 [ 160.378786][T13846] loop2: detected capacity change from 0 to 1024 [ 160.394576][T13846] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 160.414118][T13846] ext4 filesystem being mounted at /469/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 160.461104][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.488663][T13858] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (1024) [ 160.498122][T13858] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255 [ 160.573136][T13869] FAULT_INJECTION: forcing a failure. [ 160.573136][T13869] name failslab, interval 1, probability 0, space 0, times 0 [ 160.585991][T13869] CPU: 1 UID: 0 PID: 13869 Comm: syz.2.2830 Not tainted 6.15.0-rc5-syzkaller-00204-g0e1329d4045c #0 PREEMPT(voluntary) [ 160.586055][T13869] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 160.586070][T13869] Call Trace: [ 160.586077][T13869] [ 160.586085][T13869] __dump_stack+0x1d/0x30 [ 160.586128][T13869] dump_stack_lvl+0xe8/0x140 [ 160.586146][T13869] dump_stack+0x15/0x1b [ 160.586289][T13869] should_fail_ex+0x265/0x280 [ 160.586328][T13869] should_failslab+0x8c/0xb0 [ 160.586358][T13869] kmem_cache_alloc_node_noprof+0x57/0x320 [ 160.586451][T13869] ? __alloc_skb+0x101/0x320 [ 160.586495][T13869] __alloc_skb+0x101/0x320 [ 160.586523][T13869] ? audit_log_start+0x365/0x6c0 [ 160.586606][T13869] audit_log_start+0x380/0x6c0 [ 160.586648][T13869] audit_seccomp+0x48/0x100 [ 160.586677][T13869] ? __seccomp_filter+0x68c/0x10d0 [ 160.586702][T13869] __seccomp_filter+0x69d/0x10d0 [ 160.586753][T13869] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 160.586867][T13869] ? vfs_write+0x75e/0x8d0 [ 160.586973][T13869] __secure_computing+0x82/0x150 [ 160.586993][T13869] syscall_trace_enter+0xcf/0x1e0 [ 160.587016][T13869] do_syscall_64+0xaa/0x1a0 [ 160.587040][T13869] ? clear_bhb_loop+0x25/0x80 [ 160.587126][T13869] ? clear_bhb_loop+0x25/0x80 [ 160.587146][T13869] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.587165][T13869] RIP: 0033:0x7fe7b945e969 [ 160.587180][T13869] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 160.587198][T13869] RSP: 002b:00007fe7b7ac7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f5 [ 160.587223][T13869] RAX: ffffffffffffffda RBX: 00007fe7b9685fa0 RCX: 00007fe7b945e969 [ 160.587238][T13869] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffffffffffff [ 160.587253][T13869] RBP: 00007fe7b7ac7090 R08: 0000000000000000 R09: 0000000000000000 [ 160.587267][T13869] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 160.587282][T13869] R13: 0000000000000000 R14: 00007fe7b9685fa0 R15: 00007ffc3efddac8 [ 160.587341][T13869] [ 160.927434][T13882] ALSA: seq fatal error: cannot create timer (-19) [ 160.948046][T13885] hsr0 speed is unknown, defaulting to 1000 [ 160.987961][T13893] macvlan2: entered promiscuous mode [ 160.993420][T13893] macvlan2: entered allmulticast mode [ 160.999928][T13893] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 161.086398][T13919] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (1024) [ 161.095833][T13919] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255 [ 161.196636][T13926] __nla_validate_parse: 11 callbacks suppressed [ 161.196659][T13926] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2840'. [ 161.223046][T13934] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2843'. [ 161.389595][T13943] loop4: detected capacity change from 0 to 1024 [ 161.405670][T13945] ALSA: seq fatal error: cannot create timer (-19) [ 161.430608][T13941] hsr0 speed is unknown, defaulting to 1000 [ 161.471280][T13951] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2848'. [ 161.482401][T13943] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 161.509310][T13943] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm wg1: bg 0: block 88: padding at end of block bitmap is not set [ 161.540333][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.582378][T13985] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (1024) [ 161.591582][T13985] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255 [ 161.611942][T13985] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2851'. [ 161.633867][T13983] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2852'. [ 161.667085][T13991] FAULT_INJECTION: forcing a failure. [ 161.667085][T13991] name failslab, interval 1, probability 0, space 0, times 0 [ 161.669014][T13993] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2855'. [ 161.679948][T13991] CPU: 1 UID: 0 PID: 13991 Comm: syz.4.2854 Not tainted 6.15.0-rc5-syzkaller-00204-g0e1329d4045c #0 PREEMPT(voluntary) [ 161.679989][T13991] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 161.680072][T13991] Call Trace: [ 161.680079][T13991] [ 161.680088][T13991] __dump_stack+0x1d/0x30 [ 161.680117][T13991] dump_stack_lvl+0xe8/0x140 [ 161.680142][T13991] dump_stack+0x15/0x1b [ 161.680227][T13991] should_fail_ex+0x265/0x280 [ 161.680328][T13991] should_failslab+0x8c/0xb0 [ 161.680377][T13991] kmem_cache_alloc_noprof+0x50/0x310 [ 161.680502][T13991] ? audit_log_start+0x365/0x6c0 [ 161.680542][T13991] audit_log_start+0x365/0x6c0 [ 161.680585][T13991] audit_seccomp+0x48/0x100 [ 161.680616][T13991] ? __seccomp_filter+0x68c/0x10d0 [ 161.680650][T13991] __seccomp_filter+0x69d/0x10d0 [ 161.680678][T13991] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 161.680711][T13991] ? vfs_write+0x75e/0x8d0 [ 161.680795][T13991] ? __rcu_read_unlock+0x4f/0x70 [ 161.680822][T13991] ? __fget_files+0x184/0x1c0 [ 161.680861][T13991] __secure_computing+0x82/0x150 [ 161.680887][T13991] syscall_trace_enter+0xcf/0x1e0 [ 161.680919][T13991] do_syscall_64+0xaa/0x1a0 [ 161.680948][T13991] ? clear_bhb_loop+0x25/0x80 [ 161.680975][T13991] ? clear_bhb_loop+0x25/0x80 [ 161.681068][T13991] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.681095][T13991] RIP: 0033:0x7fad28a0e969 [ 161.681205][T13991] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 161.681271][T13991] RSP: 002b:00007fad27077038 EFLAGS: 00000246 ORIG_RAX: 000000000000001a [ 161.681319][T13991] RAX: ffffffffffffffda RBX: 00007fad28c35fa0 RCX: 00007fad28a0e969 [ 161.681337][T13991] RDX: 0000000000000001 RSI: 000000000000c000 RDI: 0000200000ff1000 [ 161.681354][T13991] RBP: 00007fad27077090 R08: 0000000000000000 R09: 0000000000000000 [ 161.681370][T13991] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 161.681387][T13991] R13: 0000000000000000 R14: 00007fad28c35fa0 R15: 00007ffd22ba1f58 [ 161.681434][T13991] [ 161.787659][T13999] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2856'. [ 161.972996][T14019] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2864'. [ 162.001957][T14024] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (1024) [ 162.002289][T14021] ALSA: seq fatal error: cannot create timer (-19) [ 162.011195][T14024] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255 [ 162.031019][T14024] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2865'. [ 162.066291][T14026] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2866'. [ 162.213513][T14050] macvlan2: entered promiscuous mode [ 162.218927][T14050] macvlan2: entered allmulticast mode [ 162.224669][T14050] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 162.312988][T14035] hsr0 speed is unknown, defaulting to 1000 [ 162.415207][T14069] hsr0 speed is unknown, defaulting to 1000 [ 162.758564][ T31] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.770345][T14168] ALSA: seq fatal error: cannot create timer (-19) [ 162.780056][T14035] chnl_net:caif_netlink_parms(): no params data found [ 162.829607][ T31] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.877789][T14035] bridge0: port 1(bridge_slave_0) entered blocking state [ 162.885051][T14035] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.892821][T14035] bridge_slave_0: entered allmulticast mode [ 162.899436][T14035] bridge_slave_0: entered promiscuous mode [ 162.908258][ T31] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.925540][T14035] bridge0: port 2(bridge_slave_1) entered blocking state [ 162.932827][T14035] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.969116][T14035] bridge_slave_1: entered allmulticast mode [ 163.081345][T14035] bridge_slave_1: entered promiscuous mode [ 163.101206][ T31] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.138918][T14035] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 163.150700][T14260] hsr0 speed is unknown, defaulting to 1000 [ 163.160748][T14035] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 163.309013][T14035] team0: Port device team_slave_0 added [ 163.321816][T14035] team0: Port device team_slave_1 added [ 163.386137][T14035] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 163.393257][T14035] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 163.419305][T14035] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 163.519521][ T31] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 163.531483][T14267] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=14267 comm=syz.2.2881 [ 163.546366][ T31] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 163.548693][ T29] kauditd_printk_skb: 204 callbacks suppressed [ 163.548735][ T29] audit: type=1107 audit(1746860677.659:4262): pid=14266 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 163.575739][ T31] bond0 (unregistering): Released all slaves [ 163.594483][ T31] bond1 (unregistering): Released all slaves [ 163.606998][ T31] bond2 (unregistering): Released all slaves [ 163.619884][ T31] bond3 (unregistering): Released all slaves [ 163.631613][ T31] bond4 (unregistering): Released all slaves [ 163.640132][T14035] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 163.647196][T14035] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 163.673158][T14035] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 163.732430][ T29] audit: type=1326 audit(1746860677.839:4263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14387 comm="syz.3.2883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62c270e969 code=0x7ffc0000 [ 163.754516][T14035] hsr_slave_0: entered promiscuous mode [ 163.756068][ T29] audit: type=1326 audit(1746860677.839:4264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14387 comm="syz.3.2883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62c270e969 code=0x7ffc0000 [ 163.766010][T14035] hsr_slave_1: entered promiscuous mode [ 163.785049][ T29] audit: type=1326 audit(1746860677.839:4265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14387 comm="syz.3.2883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f62c270e969 code=0x7ffc0000 [ 163.814041][ T29] audit: type=1326 audit(1746860677.839:4266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14387 comm="syz.3.2883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62c270e969 code=0x7ffc0000 [ 163.822015][T14035] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 163.837586][ T29] audit: type=1326 audit(1746860677.839:4267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14387 comm="syz.3.2883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f62c270e969 code=0x7ffc0000 [ 163.868731][ T29] audit: type=1326 audit(1746860677.839:4268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14387 comm="syz.3.2883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62c270e969 code=0x7ffc0000 [ 163.882019][T14035] Cannot create hsr debugfs directory [ 163.899254][ T29] audit: type=1326 audit(1746860677.929:4269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14387 comm="syz.3.2883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62c270e969 code=0x7ffc0000 [ 163.929632][ T29] audit: type=1326 audit(1746860678.039:4270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14387 comm="syz.3.2883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f62c270e969 code=0x7ffc0000 [ 163.953276][ T29] audit: type=1326 audit(1746860678.039:4271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14387 comm="syz.3.2883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62c270e969 code=0x7ffc0000 [ 164.011151][T14425] loop3: detected capacity change from 0 to 1024 [ 164.032594][ T31] hsr_slave_1: left promiscuous mode [ 164.041715][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 164.049311][ T31] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 164.058212][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 164.065869][ T31] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 164.078130][T14425] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 164.092463][ T31] veth1_macvtap: left promiscuous mode [ 164.101165][T14425] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm wg1: bg 0: block 88: padding at end of block bitmap is not set [ 164.108121][ T31] veth0_macvtap: left promiscuous mode [ 164.130188][ T31] veth1_vlan: left promiscuous mode [ 164.135742][ T31] veth0_vlan: left promiscuous mode [ 164.137713][ T4047] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.259559][ T31] team0 (unregistering): Port device team_slave_1 removed [ 164.270022][ T31] team0 (unregistering): Port device team_slave_0 removed [ 164.503870][T14507] hsr0 speed is unknown, defaulting to 1000 [ 164.809095][T14035] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 164.817929][T14035] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 164.827011][T14035] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 164.837124][T14035] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 164.873108][T14035] 8021q: adding VLAN 0 to HW filter on device bond0 [ 164.886382][T14035] 8021q: adding VLAN 0 to HW filter on device team0 [ 164.903884][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 164.911075][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 164.920451][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 164.927634][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 165.027267][T14035] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 165.117332][T14571] loop2: detected capacity change from 0 to 1024 [ 165.128821][T14035] veth0_vlan: entered promiscuous mode [ 165.147054][T14035] veth1_vlan: entered promiscuous mode [ 165.158279][T14571] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 165.176246][T14035] veth0_macvtap: entered promiscuous mode [ 165.203708][T14035] veth1_macvtap: entered promiscuous mode [ 165.218839][T14035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 165.229348][T14035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.239374][T14035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 165.249911][T14035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.260092][T14035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 165.270603][T14035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.281047][T14035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 165.291620][T14035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.306489][T14035] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 165.314639][T14571] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm wg1: bg 0: block 88: padding at end of block bitmap is not set [ 165.348090][T14035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 165.358671][T14035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.368608][T14035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 165.379269][T14035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.389225][T14035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 165.399733][T14035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.410043][T14035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 165.420563][T14035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.434174][T14035] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 165.445338][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.453457][T14035] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.463214][T14035] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.471933][T14035] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.480704][T14035] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.545972][T14595] ALSA: seq fatal error: cannot create timer (-19) [ 165.651050][T14612] 9pnet_fd: Insufficient options for proto=fd [ 165.695649][T14614] hsr0 speed is unknown, defaulting to 1000 [ 165.885958][T14644] hsr0 speed is unknown, defaulting to 1000 [ 166.225007][T14669] __nla_validate_parse: 4 callbacks suppressed [ 166.225027][T14669] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2919'. [ 166.261745][T14673] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2920'. [ 166.394853][T14677] hsr0 speed is unknown, defaulting to 1000 [ 166.606910][T14716] hsr0 speed is unknown, defaulting to 1000 [ 166.656777][T14710] hsr0 speed is unknown, defaulting to 1000 [ 166.824857][T14767] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2931'. [ 166.834482][T14767] bridge_slave_1: left allmulticast mode [ 166.840290][T14767] bridge_slave_1: left promiscuous mode [ 166.840364][T14768] loop1: detected capacity change from 0 to 1024 [ 166.846189][T14767] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.860572][T14767] bridge_slave_0: left allmulticast mode [ 166.866321][T14767] bridge_slave_0: left promiscuous mode [ 166.871964][T14767] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.874156][T14768] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 166.898887][T14768] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm wg1: bg 0: block 88: padding at end of block bitmap is not set [ 166.913192][T14776] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2930'. [ 166.931189][ T4017] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.948956][T14780] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2933'. [ 167.059521][T14789] hsr0 speed is unknown, defaulting to 1000 [ 167.262993][T14820] macvlan2: entered promiscuous mode [ 167.268398][T14820] macvlan2: entered allmulticast mode [ 167.274116][T14820] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 167.489120][T14827] hsr0 speed is unknown, defaulting to 1000 [ 167.497702][T14835] hsr0 speed is unknown, defaulting to 1000 [ 167.649270][T14880] hsr0 speed is unknown, defaulting to 1000 [ 167.665940][T14887] FAULT_INJECTION: forcing a failure. [ 167.665940][T14887] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 167.679195][T14887] CPU: 0 UID: 0 PID: 14887 Comm: syz.2.2943 Not tainted 6.15.0-rc5-syzkaller-00204-g0e1329d4045c #0 PREEMPT(voluntary) [ 167.679301][T14887] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 167.679368][T14887] Call Trace: [ 167.679374][T14887] [ 167.679384][T14887] __dump_stack+0x1d/0x30 [ 167.679413][T14887] dump_stack_lvl+0xe8/0x140 [ 167.679432][T14887] dump_stack+0x15/0x1b [ 167.679518][T14887] should_fail_ex+0x265/0x280 [ 167.679564][T14887] should_fail+0xb/0x20 [ 167.679614][T14887] should_fail_usercopy+0x1a/0x20 [ 167.679631][T14887] _copy_from_user+0x1c/0xb0 [ 167.679666][T14887] tls_setsockopt+0x3ec/0xce0 [ 167.679712][T14887] sock_common_setsockopt+0x66/0x80 [ 167.679746][T14887] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 167.679792][T14887] __sys_setsockopt+0x181/0x200 [ 167.679831][T14887] __x64_sys_setsockopt+0x64/0x80 [ 167.679862][T14887] x64_sys_call+0x2bd5/0x2fb0 [ 167.679882][T14887] do_syscall_64+0xd0/0x1a0 [ 167.679978][T14887] ? clear_bhb_loop+0x25/0x80 [ 167.679999][T14887] ? clear_bhb_loop+0x25/0x80 [ 167.680019][T14887] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.680040][T14887] RIP: 0033:0x7fe7b945e969 [ 167.680131][T14887] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 167.680153][T14887] RSP: 002b:00007fe7b7ac7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 167.680210][T14887] RAX: ffffffffffffffda RBX: 00007fe7b9685fa0 RCX: 00007fe7b945e969 [ 167.680221][T14887] RDX: 0000000000000002 RSI: 000000000000011a RDI: 0000000000000005 [ 167.680233][T14887] RBP: 00007fe7b7ac7090 R08: 0000000000000038 R09: 0000000000000000 [ 167.680244][T14887] R10: 0000200000000500 R11: 0000000000000246 R12: 0000000000000001 [ 167.680259][T14887] R13: 0000000000000000 R14: 00007fe7b9685fa0 R15: 00007ffc3efddac8 [ 167.680282][T14887] [ 167.889272][T14889] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2944'. [ 168.199941][T14919] hsr0 speed is unknown, defaulting to 1000 [ 168.379002][T14920] hsr0 speed is unknown, defaulting to 1000 [ 169.377845][ T29] kauditd_printk_skb: 103 callbacks suppressed [ 169.377859][ T29] audit: type=1400 audit(1746860683.489:4375): avc: denied { execute } for pid=14976 comm="syz.2.2953" dev="tmpfs" ino=1235 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 169.405573][ T29] audit: type=1400 audit(1746860683.489:4376): avc: denied { execute_no_trans } for pid=14976 comm="syz.2.2953" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=1235 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 169.443354][ T29] audit: type=1400 audit(1746860683.559:4377): avc: denied { connect } for pid=14976 comm="syz.2.2953" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 169.451503][T14973] hsr0 speed is unknown, defaulting to 1000 [ 169.463399][ T29] audit: type=1400 audit(1746860683.559:4378): avc: denied { write } for pid=14976 comm="syz.2.2953" path="socket:[32504]" dev="sockfs" ino=32504 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 169.492848][ T29] audit: type=1400 audit(1746860683.559:4379): avc: denied { execute } for pid=14976 comm="syz.2.2953" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=32506 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 169.538550][T14979] loop2: detected capacity change from 0 to 2048 [ 169.593040][T14979] loop2: p1 < > p4 [ 169.598329][T14979] loop2: p4 size 8388608 extends beyond EOD, truncated [ 169.630116][T15003] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2954'. [ 169.686492][T15012] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2956'. [ 169.697248][ T29] audit: type=1400 audit(1746860683.819:4380): avc: denied { unmount } for pid=3322 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 169.720457][ T29] audit: type=1326 audit(1746860683.819:4381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15011 comm="syz.1.2956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e03e4e969 code=0x7ffc0000 [ 169.744363][ T29] audit: type=1326 audit(1746860683.819:4382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15011 comm="syz.1.2956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e03e4e969 code=0x7ffc0000 [ 169.752003][T15021] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2957'. [ 169.768545][ T29] audit: type=1326 audit(1746860683.819:4383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15011 comm="syz.1.2956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4e03e4e969 code=0x7ffc0000 [ 169.801156][ T29] audit: type=1326 audit(1746860683.819:4384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15011 comm="syz.1.2956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e03e4e969 code=0x7ffc0000 [ 169.829663][T15024] tipc: Enabling of bearer rejected, failed to enable media [ 169.861518][T15027] FAULT_INJECTION: forcing a failure. [ 169.861518][T15027] name failslab, interval 1, probability 0, space 0, times 0 [ 169.874234][T15027] CPU: 0 UID: 0 PID: 15027 Comm: syz.1.2959 Not tainted 6.15.0-rc5-syzkaller-00204-g0e1329d4045c #0 PREEMPT(voluntary) [ 169.874336][T15027] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 169.874354][T15027] Call Trace: [ 169.874411][T15027] [ 169.874422][T15027] __dump_stack+0x1d/0x30 [ 169.874449][T15027] dump_stack_lvl+0xe8/0x140 [ 169.874476][T15027] dump_stack+0x15/0x1b [ 169.874537][T15027] should_fail_ex+0x265/0x280 [ 169.874582][T15027] ? ip6_setup_cork+0x129/0x810 [ 169.874612][T15027] should_failslab+0x8c/0xb0 [ 169.874761][T15027] __kmalloc_cache_noprof+0x4c/0x320 [ 169.874794][T15027] ip6_setup_cork+0x129/0x810 [ 169.874866][T15027] ip6_append_data+0x18e/0x250 [ 169.874954][T15027] ? __pfx_raw6_getfrag+0x10/0x10 [ 169.874978][T15027] rawv6_sendmsg+0xdab/0xf60 [ 169.875017][T15027] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 169.875046][T15027] inet_sendmsg+0xc2/0xd0 [ 169.875150][T15027] __sock_sendmsg+0x102/0x180 [ 169.875205][T15027] sock_write_iter+0x165/0x1b0 [ 169.875244][T15027] do_iter_readv_writev+0x41e/0x4c0 [ 169.875288][T15027] vfs_writev+0x2c9/0x870 [ 169.875407][T15027] do_writev+0xe7/0x210 [ 169.875506][T15027] __x64_sys_writev+0x45/0x50 [ 169.875544][T15027] x64_sys_call+0x2006/0x2fb0 [ 169.875635][T15027] do_syscall_64+0xd0/0x1a0 [ 169.875666][T15027] ? clear_bhb_loop+0x25/0x80 [ 169.875689][T15027] ? clear_bhb_loop+0x25/0x80 [ 169.875768][T15027] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.875796][T15027] RIP: 0033:0x7f4e03e4e969 [ 169.875812][T15027] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 169.875873][T15027] RSP: 002b:00007f4e024b7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 169.875929][T15027] RAX: ffffffffffffffda RBX: 00007f4e04075fa0 RCX: 00007f4e03e4e969 [ 169.875947][T15027] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000005 [ 169.875961][T15027] RBP: 00007f4e024b7090 R08: 0000000000000000 R09: 0000000000000000 [ 169.875976][T15027] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 169.876013][T15027] R13: 0000000000000000 R14: 00007f4e04075fa0 R15: 00007fff3f14a2f8 [ 169.876039][T15027] [ 170.128807][T15031] loop1: detected capacity change from 0 to 1024 [ 170.156665][T15031] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 170.173877][T15031] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm wg1: bg 0: block 88: padding at end of block bitmap is not set [ 170.206114][ T4017] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.228912][T15040] loop1: detected capacity change from 0 to 1024 [ 170.257964][T15040] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 170.317942][T15044] hsr0 speed is unknown, defaulting to 1000 [ 170.447596][T15040] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm wg1: bg 0: block 88: padding at end of block bitmap is not set [ 170.498123][ T4017] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.651362][T15074] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2965'. [ 170.820132][T15089] ALSA: seq fatal error: cannot create timer (-19) [ 170.874662][T15094] IPVS: Error joining to the multicast group [ 171.124230][T15102] loop0: detected capacity change from 0 to 128 [ 171.149405][T15102] netem: change failed [ 171.188555][T15107] loop0: detected capacity change from 0 to 512 [ 171.199990][T15107] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 171.213109][T15107] EXT4-fs (loop0): 1 truncate cleaned up [ 171.219653][T15107] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 171.349358][T15111] EXT4-fs error (device loop0): ext4_find_dest_de:2054: inode #2: block 13: comm syz.0.2974: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 171.515865][T15113] loop2: detected capacity change from 0 to 128 [ 171.523119][T15113] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 171.547657][T15113] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 171.625409][ T57] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 171.673685][T15121] __nla_validate_parse: 3 callbacks suppressed [ 171.673705][T15121] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2977'. [ 171.732853][T15123] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2978'. [ 171.782679][T14035] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.819790][T15130] netlink: 300 bytes leftover after parsing attributes in process `syz.2.2981'. [ 171.841511][T15132] loop0: detected capacity change from 0 to 1024 [ 171.877518][T15136] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2983'. [ 171.900195][T15132] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 171.913776][T15141] loop1: detected capacity change from 0 to 128 [ 171.924973][T15143] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (1024) [ 171.934300][T15143] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255 [ 171.946973][T15141] FAT-fs (loop1): Directory bread(block 162) failed [ 171.953954][T15141] FAT-fs (loop1): Directory bread(block 163) failed [ 171.954815][T15143] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2985'. [ 171.960825][T15141] FAT-fs (loop1): Directory bread(block 164) failed [ 171.977266][T15141] FAT-fs (loop1): Directory bread(block 165) failed [ 171.984232][T15141] FAT-fs (loop1): Directory bread(block 166) failed [ 171.990921][T15141] FAT-fs (loop1): Directory bread(block 167) failed [ 171.997583][T15141] FAT-fs (loop1): Directory bread(block 168) failed [ 172.004389][T15141] FAT-fs (loop1): Directory bread(block 169) failed [ 172.016341][T15141] FAT-fs (loop1): Directory bread(block 162) failed [ 172.016840][T15132] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm wg1: bg 0: block 88: padding at end of block bitmap is not set [ 172.023029][T15141] FAT-fs (loop1): Directory bread(block 163) failed [ 172.043946][T15141] syz.1.2984: attempt to access beyond end of device [ 172.043946][T15141] loop1: rw=3, sector=226, nr_sectors = 6 limit=128 [ 172.057121][T15141] syz.1.2984: attempt to access beyond end of device [ 172.057121][T15141] loop1: rw=2051, sector=232, nr_sectors = 2 limit=128 [ 172.072830][T15150] syz.1.2984: attempt to access beyond end of device [ 172.072830][T15150] loop1: rw=3, sector=234, nr_sectors = 6 limit=128 [ 172.086714][T15150] syz.1.2984: attempt to access beyond end of device [ 172.086714][T15150] loop1: rw=2051, sector=240, nr_sectors = 2 limit=128 [ 172.116121][T14035] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.148225][T15168] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2989'. [ 172.171137][T15170] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2993'. [ 172.191824][T15172] ALSA: seq fatal error: cannot create timer (-19) [ 172.224819][T15175] hsr0 speed is unknown, defaulting to 1000 [ 172.278009][T15182] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 172.310585][T15203] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (1024) [ 172.319932][T15203] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255 [ 172.331149][T15203] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2997'. [ 172.345688][T15204] netlink: 830 bytes leftover after parsing attributes in process `syz.0.2995'. [ 172.398924][T15208] netlink: 'syz.1.2999': attribute type 3 has an invalid length. [ 172.544537][T15220] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3004'. [ 172.957573][T15234] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (1024) [ 172.966844][T15234] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255 [ 173.053428][T15236] hsr0 speed is unknown, defaulting to 1000 [ 173.516464][T15265] hsr0 speed is unknown, defaulting to 1000 [ 173.664960][ T51] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.737641][T15265] chnl_net:caif_netlink_parms(): no params data found [ 173.766255][ T51] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.832052][ T51] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.870855][T15265] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.878300][T15265] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.888305][T15265] bridge_slave_0: entered allmulticast mode [ 173.895097][T15265] bridge_slave_0: entered promiscuous mode [ 173.907075][ T51] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.920230][T15265] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.927424][T15265] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.937183][T15265] bridge_slave_1: entered allmulticast mode [ 173.944391][T15265] bridge_slave_1: entered promiscuous mode [ 173.952936][T15422] loop0: detected capacity change from 0 to 32768 [ 173.969628][T15265] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 173.979959][T15265] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 173.992774][T15422] loop0: p1 p2 p3 < p5 p6 > [ 173.997440][T15422] loop0: p1 size 242222080 extends beyond EOD, truncated [ 174.005342][T15422] loop0: p2 start 4294967295 is beyond EOD, truncated [ 174.017956][T15265] team0: Port device team_slave_0 added [ 174.024641][T15265] team0: Port device team_slave_1 added [ 174.052994][T15265] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 174.060009][T15265] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 174.085994][T15265] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 174.139432][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 174.150714][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 174.164451][ T51] bond0 (unregistering): Released all slaves [ 174.173608][ T51] bond1 (unregistering): Released all slaves [ 174.182773][T15265] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 174.189804][T15265] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 174.216083][T15265] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 174.257833][T15569] loop0: detected capacity change from 0 to 1024 [ 174.271590][ T51] hsr_slave_1: left promiscuous mode [ 174.277808][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 174.280678][T15569] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 174.285349][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 174.307242][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 174.307340][T15569] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm wg1: bg 0: block 88: padding at end of block bitmap is not set [ 174.314830][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 174.339983][ T51] veth1_macvtap: left promiscuous mode [ 174.345557][ T51] veth0_macvtap: left promiscuous mode [ 174.351193][ T51] veth1_vlan: left promiscuous mode [ 174.356759][ T51] veth0_vlan: left promiscuous mode [ 174.357455][T14035] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.429419][ T51] team0 (unregistering): Port device team_slave_1 removed [ 174.439295][ T51] team0 (unregistering): Port device team_slave_0 removed [ 174.478293][T15265] hsr_slave_0: entered promiscuous mode [ 174.484880][T15265] hsr_slave_1: entered promiscuous mode [ 174.490833][T15265] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 174.498925][T15265] Cannot create hsr debugfs directory [ 174.505691][ T29] kauditd_printk_skb: 297 callbacks suppressed [ 174.505705][ T29] audit: type=1326 audit(1746860688.629:4682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15595 comm="syz.2.3026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7b945e969 code=0x7ffc0000 [ 174.535940][ T29] audit: type=1326 audit(1746860688.629:4683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15595 comm="syz.2.3026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7b945e969 code=0x7ffc0000 [ 174.559642][ T29] audit: type=1326 audit(1746860688.629:4684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15595 comm="syz.2.3026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe7b945e969 code=0x7ffc0000 [ 174.583232][ T29] audit: type=1326 audit(1746860688.629:4685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15595 comm="syz.2.3026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7b945e969 code=0x7ffc0000 [ 174.606849][ T29] audit: type=1326 audit(1746860688.629:4686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15595 comm="syz.2.3026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fe7b945e969 code=0x7ffc0000 [ 174.630659][ T29] audit: type=1326 audit(1746860688.629:4687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15595 comm="syz.2.3026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7b945e969 code=0x7ffc0000 [ 174.654269][ T29] audit: type=1326 audit(1746860688.629:4688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15595 comm="syz.2.3026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe7b945e969 code=0x7ffc0000 [ 174.677813][ T29] audit: type=1326 audit(1746860688.629:4689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15595 comm="syz.2.3026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7b945e969 code=0x7ffc0000 [ 174.701511][ T29] audit: type=1326 audit(1746860688.629:4690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15595 comm="syz.2.3026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7b945e969 code=0x7ffc0000 [ 174.725109][ T29] audit: type=1326 audit(1746860688.629:4691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15595 comm="syz.2.3026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe7b945e969 code=0x7ffc0000 [ 174.752923][T15598] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (1024) [ 174.762193][T15598] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255 [ 174.823725][T15636] FAULT_INJECTION: forcing a failure. [ 174.823725][T15636] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 174.837205][T15636] CPU: 1 UID: 0 PID: 15636 Comm: syz.2.3030 Not tainted 6.15.0-rc5-syzkaller-00204-g0e1329d4045c #0 PREEMPT(voluntary) [ 174.837264][T15636] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 174.837281][T15636] Call Trace: [ 174.837287][T15636] [ 174.837296][T15636] __dump_stack+0x1d/0x30 [ 174.837331][T15636] dump_stack_lvl+0xe8/0x140 [ 174.837355][T15636] dump_stack+0x15/0x1b [ 174.837375][T15636] should_fail_ex+0x265/0x280 [ 174.837430][T15636] should_fail+0xb/0x20 [ 174.837465][T15636] should_fail_usercopy+0x1a/0x20 [ 174.837487][T15636] strncpy_from_user+0x25/0x230 [ 174.837587][T15636] ? __kmalloc_cache_noprof+0x189/0x320 [ 174.837610][T15636] __se_sys_memfd_create+0x1ff/0x590 [ 174.837723][T15636] __x64_sys_memfd_create+0x31/0x40 [ 174.837753][T15636] x64_sys_call+0x122f/0x2fb0 [ 174.837775][T15636] do_syscall_64+0xd0/0x1a0 [ 174.837803][T15636] ? clear_bhb_loop+0x25/0x80 [ 174.837824][T15636] ? clear_bhb_loop+0x25/0x80 [ 174.837921][T15636] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.837942][T15636] RIP: 0033:0x7fe7b945e969 [ 174.837957][T15636] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 174.837978][T15636] RSP: 002b:00007fe7b7ac6e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 174.837996][T15636] RAX: ffffffffffffffda RBX: 00000000000011ff RCX: 00007fe7b945e969 [ 174.838034][T15636] RDX: 00007fe7b7ac6ef0 RSI: 0000000000000000 RDI: 00007fe7b94e1444 [ 174.838046][T15636] RBP: 0000200000001280 R08: 00007fe7b7ac6bb7 R09: 00007fe7b7ac6e40 [ 174.838061][T15636] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000001240 [ 174.838076][T15636] R13: 00007fe7b7ac6ef0 R14: 00007fe7b7ac6eb0 R15: 0000200000000b40 [ 174.838170][T15636] [ 175.096564][T15660] loop0: detected capacity change from 0 to 8192 [ 175.115393][T15679] loop2: detected capacity change from 0 to 1024 [ 175.144232][T15679] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 175.170440][T15679] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm wg1: bg 0: block 88: padding at end of block bitmap is not set [ 175.201777][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.340735][T15265] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 175.351823][T15265] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 175.366577][T15265] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 175.386465][T15265] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 175.431736][T15265] 8021q: adding VLAN 0 to HW filter on device bond0 [ 175.462167][T15265] 8021q: adding VLAN 0 to HW filter on device team0 [ 175.476674][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.483977][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 175.515788][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.522944][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 175.548931][T15265] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 175.637994][T15265] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 175.729999][T15265] veth0_vlan: entered promiscuous mode [ 175.739476][T15265] veth1_vlan: entered promiscuous mode [ 175.768290][T15265] veth0_macvtap: entered promiscuous mode [ 175.777334][T15265] veth1_macvtap: entered promiscuous mode [ 175.790064][T15265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 175.800774][T15265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.810903][T15265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 175.821441][T15265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.831345][T15265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 175.841855][T15265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.851771][T15265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 175.862295][T15265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.885830][T15265] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 175.897089][T15265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 175.907699][T15265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.917642][T15265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 175.928183][T15265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.938040][T15265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 175.948480][T15265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.958549][T15265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 175.969144][T15265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.979818][T15265] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 175.989332][T15265] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.998210][T15265] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.007089][T15265] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.015878][T15265] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.061762][T15746] netlink: 'syz.3.3012': attribute type 12 has an invalid length. [ 176.094332][T15750] netlink: zone id is out of range [ 176.099480][T15750] netlink: zone id is out of range [ 176.104729][T15750] netlink: zone id is out of range [ 176.109840][T15750] netlink: zone id is out of range [ 176.115156][T15750] netlink: zone id is out of range [ 176.120298][T15750] netlink: zone id is out of range [ 176.125548][T15750] netlink: zone id is out of range [ 176.130792][T15750] netlink: zone id is out of range [ 176.135982][T15750] netlink: zone id is out of range [ 176.141294][T15750] netlink: zone id is out of range [ 176.225251][T15762] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 176.257032][T15764] ALSA: seq fatal error: cannot create timer (-19) [ 176.396846][T15775] bridge_slave_1: left allmulticast mode [ 176.402579][T15775] bridge_slave_1: left promiscuous mode [ 176.408288][T15775] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.418362][T15775] bridge_slave_0: left allmulticast mode [ 176.424170][T15775] bridge_slave_0: left promiscuous mode [ 176.429790][T15775] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.840709][T15784] hsr0 speed is unknown, defaulting to 1000 [ 176.959155][T15784] chnl_net:caif_netlink_parms(): no params data found [ 176.971282][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.032606][T15927] __nla_validate_parse: 17 callbacks suppressed [ 177.032625][T15927] netlink: 256 bytes leftover after parsing attributes in process `syz.2.3054'. [ 177.048305][T15927] unsupported nlmsg_type 40 [ 177.054356][ T2969] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 177.061924][ T2969] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 177.069413][ T2969] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 177.090424][ T2969] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 177.098015][ T2969] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 177.105496][ T2969] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 177.112956][ T2969] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 177.120349][ T2969] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 177.127853][ T2969] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 177.135290][ T2969] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 177.142715][ T2969] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 177.150114][ T2969] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 177.157608][ T2969] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 177.165184][ T2969] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 177.172711][ T2969] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 177.180124][ T2969] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 177.187604][ T2969] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 177.195162][ T2969] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 177.202630][ T2969] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 177.210041][ T2969] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 177.217581][ T2969] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 177.225029][ T2969] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 177.232515][ T2969] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 177.239936][ T2969] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 177.247421][ T2969] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 177.254858][ T2969] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 177.262280][ T2969] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 177.269720][ T2969] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 177.282120][ T2969] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz0] on syz1 [ 177.298575][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.319904][T15784] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.327153][T15784] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.339349][T15784] bridge_slave_0: entered allmulticast mode [ 177.346171][T15784] bridge_slave_0: entered promiscuous mode [ 177.365853][T15784] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.373147][T15784] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.383980][T15784] bridge_slave_1: entered allmulticast mode [ 177.390622][T15784] bridge_slave_1: entered promiscuous mode [ 177.401865][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.439690][T15784] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 177.451159][T15784] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 177.465295][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.497879][T15784] team0: Port device team_slave_0 added [ 177.504790][T15784] team0: Port device team_slave_1 added [ 177.530121][T15784] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 177.537207][T15784] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 177.563861][T15784] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 177.660730][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 177.671018][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 177.685699][ T12] bond0 (unregistering): Released all slaves [ 177.695361][ T12] bond1 (unregistering): Released all slaves [ 177.704136][ T12] bond2 (unregistering): Released all slaves [ 177.714782][T15784] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 177.721770][T15784] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 177.747820][T15784] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 177.790934][T15784] hsr_slave_0: entered promiscuous mode [ 177.807253][T15784] hsr_slave_1: entered promiscuous mode [ 177.819183][T16079] ALSA: seq fatal error: cannot create timer (-19) [ 177.819544][T15784] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 177.835868][T15784] Cannot create hsr debugfs directory [ 177.848911][ T12] hsr_slave_1: left promiscuous mode [ 177.855612][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 177.863089][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 177.871171][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 177.878634][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 177.889680][ T12] veth1_macvtap: left promiscuous mode [ 177.896761][ T12] veth0_macvtap: left promiscuous mode [ 177.904249][ T12] veth1_vlan: left promiscuous mode [ 177.909704][ T12] veth0_vlan: left promiscuous mode [ 177.998340][ T12] team0 (unregistering): Port device team_slave_1 removed [ 178.008590][ T12] team0 (unregistering): Port device team_slave_0 removed [ 178.120271][T16085] hsr0 speed is unknown, defaulting to 1000 [ 178.183845][T16086] hsr0 speed is unknown, defaulting to 1000 [ 178.418344][T16088] hsr0 speed is unknown, defaulting to 1000 [ 178.819780][T16167] hsr0 speed is unknown, defaulting to 1000 [ 179.002283][T16224] loop2: detected capacity change from 0 to 512 [ 179.009622][T16224] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 179.026110][T16224] EXT4-fs (loop2): 1 truncate cleaned up [ 179.034327][T16224] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 179.081949][T16260] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 179.120417][T16263] ALSA: seq fatal error: cannot create timer (-19) [ 179.146051][T16266] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3071'. [ 179.157676][T16267] EXT4-fs error (device loop2): ext4_find_dest_de:2054: inode #2: block 13: comm syz.2.3068: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 179.350779][T16261] syz.2.3068 (16261) used greatest stack depth: 9696 bytes left [ 179.366621][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.371631][T15784] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 179.427765][T15784] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 179.428775][T16302] loop2: detected capacity change from 0 to 512 [ 179.441632][T16302] EXT4-fs: Ignoring removed mblk_io_submit option [ 179.446943][T15784] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 179.448809][T16302] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 179.466525][T16302] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 179.467149][T15784] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 179.484580][T16302] EXT4-fs (loop2): 1 truncate cleaned up [ 179.492775][T16302] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 179.524923][T15784] 8021q: adding VLAN 0 to HW filter on device bond0 [ 179.543193][T15784] 8021q: adding VLAN 0 to HW filter on device team0 [ 179.564242][ T3420] bridge0: port 1(bridge_slave_0) entered blocking state [ 179.571671][ T3420] bridge0: port 1(bridge_slave_0) entered forwarding state [ 179.638637][ T3420] bridge0: port 2(bridge_slave_1) entered blocking state [ 179.641262][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.646014][ T3420] bridge0: port 2(bridge_slave_1) entered forwarding state [ 179.671811][T16309] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3077'. [ 179.733960][T15784] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 179.750519][T16322] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3079'. [ 179.790264][T16327] ALSA: seq fatal error: cannot create timer (-19) [ 179.823477][T16333] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3081'. [ 179.834728][ T29] kauditd_printk_skb: 125 callbacks suppressed [ 179.834745][ T29] audit: type=1326 audit(1746860693.949:4817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16332 comm="syz.0.3081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc7630e969 code=0x7ffc0000 [ 179.868442][ T29] audit: type=1326 audit(1746860693.979:4818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16332 comm="syz.0.3081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fbc7630e969 code=0x7ffc0000 [ 179.892037][ T29] audit: type=1326 audit(1746860693.979:4819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16332 comm="syz.0.3081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc7630e969 code=0x7ffc0000 [ 179.915769][ T29] audit: type=1326 audit(1746860693.979:4820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16332 comm="syz.0.3081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fbc7630e969 code=0x7ffc0000 [ 179.936003][T15784] veth0_vlan: entered promiscuous mode [ 179.939370][ T29] audit: type=1326 audit(1746860693.979:4821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16332 comm="syz.0.3081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc7630e969 code=0x7ffc0000 [ 179.947466][T15784] veth1_vlan: entered promiscuous mode [ 179.968186][ T29] audit: type=1326 audit(1746860693.979:4822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16332 comm="syz.0.3081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbc7630e969 code=0x7ffc0000 [ 179.981676][T15784] veth0_macvtap: entered promiscuous mode [ 179.997240][ T29] audit: type=1326 audit(1746860693.979:4823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16332 comm="syz.0.3081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc7630e969 code=0x7ffc0000 [ 179.997269][ T29] audit: type=1326 audit(1746860693.979:4824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16332 comm="syz.0.3081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbc7630e969 code=0x7ffc0000 [ 180.029289][T15784] veth1_macvtap: entered promiscuous mode [ 180.050044][ T29] audit: type=1326 audit(1746860693.979:4825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16332 comm="syz.0.3081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc7630e969 code=0x7ffc0000 [ 180.066073][T15784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 180.079239][ T29] audit: type=1326 audit(1746860693.979:4826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16332 comm="syz.0.3081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fbc7630e969 code=0x7ffc0000 [ 180.089697][T15784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.123173][T15784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 180.133671][T15784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.143541][T15784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 180.154087][T15784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.164044][T15784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 180.174532][T15784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.190089][T15784] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 180.193181][T16338] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3083'. [ 180.203268][T15784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 180.217102][T15784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.227064][T15784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 180.237569][T15784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.247464][T15784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 180.258307][T15784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.268317][T15784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 180.278826][T15784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.294286][T15784] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 180.303277][T15784] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.312237][T15784] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.320964][T15784] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.329719][T15784] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.450384][T16349] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 180.477065][T16348] hsr0 speed is unknown, defaulting to 1000 [ 180.858274][T16365] hsr0 speed is unknown, defaulting to 1000 [ 181.029494][T16365] chnl_net:caif_netlink_parms(): no params data found [ 181.106668][T16365] bridge0: port 1(bridge_slave_0) entered blocking state [ 181.113951][T16365] bridge0: port 1(bridge_slave_0) entered disabled state [ 181.131356][T16365] bridge_slave_0: entered allmulticast mode [ 181.141910][T16365] bridge_slave_0: entered promiscuous mode [ 181.180749][T16565] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3096'. [ 181.181724][T16365] bridge0: port 2(bridge_slave_1) entered blocking state [ 181.197006][T16365] bridge0: port 2(bridge_slave_1) entered disabled state [ 181.208234][T16365] bridge_slave_1: entered allmulticast mode [ 181.215331][T16365] bridge_slave_1: entered promiscuous mode [ 181.245332][T16365] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 181.257461][T16365] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 181.305803][T16365] team0: Port device team_slave_0 added [ 181.313696][T16365] team0: Port device team_slave_1 added [ 181.341446][T16365] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 181.348613][T16365] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 181.375227][T16365] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 181.386860][T16365] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 181.394144][T16365] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 181.420389][T16365] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 181.474797][T16365] hsr_slave_0: entered promiscuous mode [ 181.481011][T16365] hsr_slave_1: entered promiscuous mode [ 181.487239][T16365] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 181.495185][T16365] Cannot create hsr debugfs directory [ 181.518172][T16372] netlink: 830 bytes leftover after parsing attributes in process `syz.3.3087'. [ 181.596228][T16365] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 181.605969][T16365] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 181.621106][T16365] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 181.630586][T16365] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 181.648280][T16365] bridge0: port 2(bridge_slave_1) entered blocking state [ 181.655518][T16365] bridge0: port 2(bridge_slave_1) entered forwarding state [ 181.662840][T16365] bridge0: port 1(bridge_slave_0) entered blocking state [ 181.669971][T16365] bridge0: port 1(bridge_slave_0) entered forwarding state [ 181.694844][ T3420] bridge0: port 1(bridge_slave_0) entered disabled state [ 181.709885][ T3420] bridge0: port 2(bridge_slave_1) entered disabled state [ 181.753510][T16365] 8021q: adding VLAN 0 to HW filter on device bond0 [ 181.770558][T16365] 8021q: adding VLAN 0 to HW filter on device team0 [ 181.787661][T12039] bridge0: port 1(bridge_slave_0) entered blocking state [ 181.794870][T12039] bridge0: port 1(bridge_slave_0) entered forwarding state [ 181.808354][T12039] bridge0: port 2(bridge_slave_1) entered blocking state [ 181.815618][T12039] bridge0: port 2(bridge_slave_1) entered forwarding state [ 181.958016][T16365] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 182.028577][T16756] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3101'. [ 182.119450][T16365] veth0_vlan: entered promiscuous mode [ 182.130603][T16365] veth1_vlan: entered promiscuous mode [ 182.156283][T16365] veth0_macvtap: entered promiscuous mode [ 182.166580][T16365] veth1_macvtap: entered promiscuous mode [ 182.177887][T16365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 182.188468][T16365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.198537][T16365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 182.209344][T16365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.219236][T16365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 182.224918][T16778] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3104'. [ 182.229830][T16365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.248606][T16365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 182.259190][T16365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.269261][T16365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 182.279758][T16365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.290977][T16365] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 182.305572][T16365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 182.316270][T16365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.326216][T16365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 182.336851][T16365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.346917][T16365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 182.357896][T16365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.367737][T16365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 182.378281][T16365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.388348][T16365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 182.398886][T16365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.410254][T16365] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 182.422043][T16365] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.431087][T16365] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.439919][T16365] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.448816][T16365] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.536374][T16791] loop5: detected capacity change from 0 to 8192 [ 182.551773][T16797] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.557255][T16791] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 182.570793][T16791] FAT-fs (loop5): Filesystem has been set read-only [ 182.581546][T16791] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 182.589478][T16793] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 182.598858][T16793] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 182.742609][T16813] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3112'. [ 182.928352][T16827] hsr0 speed is unknown, defaulting to 1000 [ 182.993920][T16863] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3119'. [ 183.116453][T16879] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3124'. [ 183.137805][T16879] bridge_slave_1: left allmulticast mode [ 183.143581][T16879] bridge_slave_1: left promiscuous mode [ 183.149361][T16879] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.208224][T16879] bridge_slave_0: left allmulticast mode [ 183.214017][T16879] bridge_slave_0: left promiscuous mode [ 183.219703][T16879] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.264376][T16882] hsr0 speed is unknown, defaulting to 1000 [ 183.439426][T16885] hsr0 speed is unknown, defaulting to 1000 [ 183.808779][T16933] IPv6: NLM_F_CREATE should be specified when creating new route [ 183.994170][T16948] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3132'. [ 184.047354][T16952] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3134'. [ 184.053932][T16950] hsr0 speed is unknown, defaulting to 1000 [ 184.091384][T16961] loop2: detected capacity change from 0 to 1024 [ 184.099490][T16959] hsr0 speed is unknown, defaulting to 1000 [ 184.102357][T16961] EXT4-fs: quotafile must be on filesystem root [ 184.475465][T16797] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.518024][T17024] hsr0 speed is unknown, defaulting to 1000 [ 184.529315][T16797] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.570044][T17016] hsr0 speed is unknown, defaulting to 1000 [ 184.587866][T16797] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.666932][T16797] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.687616][T16797] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.709636][T16797] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.724613][T16797] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.774771][T17097] sctp: [Deprecated]: syz.1.3146 (pid 17097) Use of struct sctp_assoc_value in delayed_ack socket option. [ 184.774771][T17097] Use struct sctp_sack_info instead [ 184.994756][T17116] hsr0 speed is unknown, defaulting to 1000 [ 185.050525][T17128] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3157'. [ 185.072725][T17130] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3158'. [ 185.124287][T17128] loop0: detected capacity change from 0 to 512 [ 185.130579][T17130] bridge_slave_1: left allmulticast mode [ 185.131056][T17128] EXT4-fs: Ignoring removed orlov option [ 185.136315][T17130] bridge_slave_1: left promiscuous mode [ 185.147786][T17130] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.155146][T17128] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 185.165921][T17130] bridge_slave_0: left allmulticast mode [ 185.165925][T17128] EXT4-fs (loop0): orphan cleanup on readonly fs [ 185.165944][T17130] bridge_slave_0: left promiscuous mode [ 185.183882][T17130] bridge0: port 1(bridge_slave_0) entered disabled state [ 185.193941][T17128] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.3157: bg 0: block 248: padding at end of block bitmap is not set [ 185.217166][T17128] __quota_error: 253 callbacks suppressed [ 185.217181][T17128] Quota error (device loop0): write_blk: dquota write failed [ 185.230477][T17128] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 185.240484][T17128] EXT4-fs error (device loop0): ext4_acquire_dquot:6935: comm syz.0.3157: Failed to acquire dquot type 1 [ 185.254229][T17128] EXT4-fs (loop0): 1 truncate cleaned up [ 185.260634][T17128] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 185.277813][ T29] audit: type=1400 audit(1746860699.389:5080): avc: denied { remount } for pid=17127 comm="syz.0.3157" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 185.302044][T17128] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 185.336616][T17131] hsr0 speed is unknown, defaulting to 1000 [ 185.344171][T17128] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 185.378751][T17128] ext4 filesystem being remounted at /55/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 185.386684][T17162] loop5: detected capacity change from 0 to 1024 [ 185.410843][T17128] syz.0.3157 (17128) used greatest stack depth: 9360 bytes left [ 185.439325][T17162] EXT4-fs: Invalid journal IO priority (must be 0-7) [ 185.450122][T14035] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 185.481819][ T29] audit: type=1326 audit(1746860699.579:5081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17161 comm="syz.5.3159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa42252e969 code=0x7ffc0000 [ 185.505442][ T29] audit: type=1326 audit(1746860699.579:5082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17161 comm="syz.5.3159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa42252e969 code=0x7ffc0000 [ 185.529131][ T29] audit: type=1326 audit(1746860699.579:5083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17161 comm="syz.5.3159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa42252e969 code=0x7ffc0000 [ 185.552933][ T29] audit: type=1326 audit(1746860699.579:5084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17161 comm="syz.5.3159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa42252e969 code=0x7ffc0000 [ 185.576617][ T29] audit: type=1326 audit(1746860699.579:5085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17161 comm="syz.5.3159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=328 compat=0 ip=0x7fa42252e969 code=0x7ffc0000 [ 185.600180][ T29] audit: type=1326 audit(1746860699.579:5086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17161 comm="syz.5.3159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa42252e969 code=0x7ffc0000 [ 185.625337][ T29] audit: type=1326 audit(1746860699.579:5087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17161 comm="syz.5.3159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa42252e969 code=0x7ffc0000 [ 185.654109][T17186] loop0: detected capacity change from 0 to 256 [ 185.654213][T17187] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3162'. [ 185.901602][T17223] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3170'. [ 185.975567][T17236] hsr0 speed is unknown, defaulting to 1000 [ 186.000636][T17235] ALSA: seq fatal error: cannot create timer (-19) [ 186.208943][T17275] loop3: detected capacity change from 0 to 128 [ 186.886766][T17313] ALSA: seq fatal error: cannot create timer (-19) [ 187.016965][T17328] loop5: detected capacity change from 0 to 2048 [ 187.199579][T17349] ALSA: seq fatal error: cannot create timer (-19) [ 187.254118][T17356] __nla_validate_parse: 4 callbacks suppressed [ 187.254191][T17356] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3205'. [ 187.484859][T17373] capability: warning: `syz.5.3206' uses deprecated v2 capabilities in a way that may be insecure [ 187.626916][T17376] netlink: 300 bytes leftover after parsing attributes in process `syz.3.3210'. [ 187.886202][T17391] ALSA: seq fatal error: cannot create timer (-19) [ 187.986456][ T3391] kernel write not supported for file /1376/attr/exec (pid: 3391 comm: kworker/0:3) [ 188.035168][T17402] loop2: detected capacity change from 0 to 512 [ 188.042681][T17402] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 188.054439][T17402] EXT4-fs (loop2): 1 truncate cleaned up [ 188.060791][T17402] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 188.471415][T17402] ================================================================== [ 188.479645][T17402] BUG: KCSAN: data-race in __writeback_single_inode / xas_set_mark [ 188.487579][T17402] [ 188.489928][T17402] write to 0xffff888106ac5d44 of 4 bytes by task 17406 on cpu 0: [ 188.497726][T17402] xas_set_mark+0x12b/0x140 [ 188.502244][T17402] __folio_start_writeback+0x1dd/0x430 [ 188.507787][T17402] ext4_bio_write_folio+0x590/0x9d0 [ 188.512998][T17402] mpage_process_page_bufs+0x46c/0x5b0 [ 188.518494][T17402] mpage_prepare_extent_to_map+0x775/0xb80 [ 188.524514][T17402] ext4_do_writepages+0xa25/0x2270 [ 188.529649][T17402] ext4_writepages+0x176/0x300 [ 188.534435][T17402] do_writepages+0x1d2/0x480 [ 188.539052][T17402] file_write_and_wait_range+0x156/0x2c0 [ 188.544694][T17402] generic_buffers_fsync_noflush+0x45/0x120 [ 188.550604][T17402] ext4_sync_file+0x1ab/0x690 [ 188.555466][T17402] vfs_fsync_range+0x10a/0x130 [ 188.560397][T17402] ext4_buffered_write_iter+0x34f/0x3c0 [ 188.566055][T17402] ext4_file_write_iter+0x383/0xf00 [ 188.571697][T17402] iter_file_splice_write+0x5ef/0x970 [ 188.577072][T17402] direct_splice_actor+0x153/0x2a0 [ 188.582190][T17402] splice_direct_to_actor+0x30f/0x680 [ 188.587573][T17402] do_splice_direct+0xda/0x150 [ 188.592340][T17402] do_sendfile+0x380/0x640 [ 188.596780][T17402] __x64_sys_sendfile64+0x105/0x150 [ 188.601998][T17402] x64_sys_call+0xb39/0x2fb0 [ 188.606591][T17402] do_syscall_64+0xd0/0x1a0 [ 188.611106][T17402] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.616998][T17402] [ 188.619317][T17402] read to 0xffff888106ac5d44 of 4 bytes by task 17402 on cpu 1: [ 188.627054][T17402] __writeback_single_inode+0x1f9/0x7c0 [ 188.632630][T17402] writeback_single_inode+0x167/0x3e0 [ 188.638022][T17402] sync_inode_metadata+0x5b/0x90 [ 188.643069][T17402] generic_buffers_fsync_noflush+0xd9/0x120 [ 188.648985][T17402] ext4_sync_file+0x1ab/0x690 [ 188.653701][T17402] vfs_fsync_range+0x10a/0x130 [ 188.658479][T17402] ext4_buffered_write_iter+0x34f/0x3c0 [ 188.664039][T17402] ext4_file_write_iter+0x383/0xf00 [ 188.669251][T17402] iter_file_splice_write+0x5ef/0x970 [ 188.674640][T17402] direct_splice_actor+0x153/0x2a0 [ 188.679761][T17402] splice_direct_to_actor+0x30f/0x680 [ 188.685137][T17402] do_splice_direct+0xda/0x150 [ 188.689937][T17402] do_sendfile+0x380/0x640 [ 188.694374][T17402] __x64_sys_sendfile64+0x105/0x150 [ 188.699600][T17402] x64_sys_call+0xb39/0x2fb0 [ 188.704209][T17402] do_syscall_64+0xd0/0x1a0 [ 188.708825][T17402] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.714738][T17402] [ 188.717066][T17402] value changed: 0x0a000021 -> 0x04000021 [ 188.722787][T17402] [ 188.725111][T17402] Reported by Kernel Concurrency Sanitizer on: [ 188.731362][T17402] CPU: 1 UID: 0 PID: 17402 Comm: syz.2.3220 Not tainted 6.15.0-rc5-syzkaller-00204-g0e1329d4045c #0 PREEMPT(voluntary) [ 188.743873][T17402] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 188.753939][T17402] ================================================================== [ 188.984781][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.