last executing test programs: 3.243056207s ago: executing program 3 (id=644): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x18, 0x1e, &(0x7f0000000540)=@raw=[@btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x2}, @printk={@lli}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @exit, @jmp={0x5, 0x0, 0xf, 0x2, 0x9, 0xfffffffffffffff0, 0xffffffffffffffff}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @jmp={0x5, 0x1, 0xd, 0x5, 0x5, 0x2, 0x4}, @jmp={0x5, 0x0, 0x6, 0x6, 0x5, 0x40, 0x4}], &(0x7f0000000400)='GPL\x00', 0x2, 0x33, &(0x7f0000000640)=""/51, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000680)={0x2, 0xd, 0x26a, 0x1}, 0x10, 0x0, 0x0, 0x1, &(0x7f00000006c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff], &(0x7f0000000740)=[{0x2, 0x1, 0xa, 0x8}], 0x10, 0x9, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000ac0)={r0, 0x0, 0x37, 0x4d, &(0x7f0000000980)="9f672ed27ebb832a562720f724c2985cc67fa246782ce6109366cc5e7164fda89c479595ecfc860f2e0c72e68a53244228430785d34e82", &(0x7f0000000a00)=""/77, 0xb, 0x0, 0x0, 0x0, &(0x7f0000000780), &(0x7f0000000a80), 0x0, 0x0, 0x323b}, 0x50) socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r1}, 0x18) r2 = gettid() r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r3, &(0x7f0000000440)=""/247, 0x26) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f00000007c0)={0x31, @time={0x0, 0xbdb}, 0x0, {0x0, 0x3}, 0x0, 0x0, 0x1}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r3, 0x408c5333, &(0x7f0000000180)={0x1, 0x81, 0x0, 'queue1\x00', 0x6}) tkill(r2, 0x7) r4 = socket$netlink(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x52) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r5}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r6}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) ioctl$sock_ifreq(r4, 0x8913, &(0x7f00000000c0)={'veth0_vlan\x00', @ifru_ivalue=0x8}) sendmsg$DEVLINK_CMD_RATE_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r7, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) 3.006324121s ago: executing program 4 (id=652): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x5f, 0xffffffffffffffff, {0x29}}, './file0\x00'}) 2.898812862s ago: executing program 4 (id=656): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f3bbb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68000000000000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465a932b77a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900ff0000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80af740b5b7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48bc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd3170400000085be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890cec55bf404e4e1f74b7eed82571be54c72d978cf906df08f11f1c4042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9f0390a6f01e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5eaff07000000000000b99c9cc0ad1857216f000000009191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a798de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270b939b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf01cfaed9ef0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546bb2e51935ab9067ec3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f626602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df902aeec50e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd6d89f80a4377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f000000000100000000d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fb03b84f63e022fe755f4007a4a899eaf52c4f491f1e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c7167d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c2499ce3ffe2fef03f7cdd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba3c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63e4581d5cc41cbde2ba66adc1168070c8c6e18a6a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c3340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b909006f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f1400010000ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1b0100448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f949170ef8cb9c13c12138116bca7a8c59363799be7005c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2c74664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677eff7c5c568a89d6e36b165c39132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae1676384ff799783f55d7e5a1a0920300000000000000d98440c355927629f2bcf9dc405a18ca0264400abf38e90000000000000000008faf2cddffbfa69bf32eb718e88ec75603ed7c7a8825ce0f27a114bd7a4ab74d0c7b8d90ccc1c3ca6620def782e24d75aed70eb676437f62677a69e0994cd82d72e95493c830fe9515329f40b7025326dec33a527c5d999298eaa3690fd0d38a02fc6e0bc16dbe19f353027edc014411e1138087221492f5d5e5cc9d0a1acd3f581eda9a807aa0e609f935f626d96351e0ff116686cbeb8939feecd5dac8cf45101942cc7cec21b7f337df5431bcf7e504b7c427f70a10e1cb8993a661306a0576b638a0171e6800b5b35589d676eb30ed1a72e8f7b057eb281c4504195635b6b285ebaba019913a2520e43ed790231f047f7d3789c10ae7d724929f77aec1d33d9587580268ee14396f71e7ef588cb2560d6bd0795a9b97281229eb16de086553469fad7214ffc3e416f8b8e442dce1d37f9b1c88a5d8a8d9f2fe45bd8df213ecb4194c8554aea13cadcd502e51f6fec80418e772b5bd8d0228949058038b185909ee542848680f9ad43f4057d676d5e21ae3d7e0e4a28c04f112a94707f032b35915e42993ff148291b8babe026646ee41905992db217561b90811c4702a14f312fe5d2ae7257db6be1034cc1c346b76a853ce274bf0435e18f7e86c660c18c80f30505dd4cf2ae2a1893b83c62d61bfeadc1f913e4cab2b897e096dd3fe3525090410cb23bab36cdf200a36014032cf6e5121803c5a0c4a273a19f340163fc6265425d513a1294b8439276394945d94a589708e32a1cb30f1fa4b2f08e01dc5e8c6732e6dc59b5c8cb400000000000000592c9b68f09c8f5ddb20b4ae08b4d9df548e5ed6cd47b91a4bea8b6aa52edf64576aef1e43f2958437fdc20fbbd0d4e13d8cce1193b2f9b4f107e25af178d056e1b1e40bd75b013f7484fae0bc447b1ffaf34819fe3ad1a634c94345e26e1e68dec08723a37b05d1594a66a4718a51d4d67fc880c9d640f4eacc509873f1a103c87f69"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) pipe2$watch_queue(&(0x7f0000000680), 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) (async, rerun: 32) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') (async, rerun: 32) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffff9}, 0x18) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) (async) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000f1ffff000000000000100000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000000e, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x101}, 0x18) (async) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0xc0f85403, 0x0) (async, rerun: 32) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0xd4) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) (async, rerun: 32) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x880) (rerun: 32) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r3, 0x18, &(0x7f0000000380)={0x49, r5, 0x5, {0x4, 0x80000000}, 0xfc}, 0x1) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x3014850, &(0x7f00000004c0)={[{@min_batch_time={'min_batch_time', 0x3d, 0xd5}}, {@sysvgroups}]}, 0xff, 0x4e4, &(0x7f0000002d40)="$eJzs3c9PXFsdAPDvHZgCLc/hqYvnS3w2+gxttDNQbEtcVEyMrppY68YVIgyEMDCEGdpCGkPjH2Bi/BVduXJj4tqYmP4JxqSJ7o0xmkbbunChjrnDHYu8AYaUYSjz+SSn95z763tO4R7m3HMzN4C+dTkiZiJiICKuRkQhW5/LUuzspnS/F88fzacpicbQvb8lkWTrWudKsuWl7LDhiPjaVyK+lXwwbm1re2WuUilvZOVSfXW9VNvavra8OrdUXiqvzUxN3py+NX1jeuLE2nr7S3/+4Xd//uXbv/nsgz/O/vXKt9NqjWbb9rajEzsd7rfb9Hzz/6JlMCI2jhPsDBvI2pPvdUUAAOhI+hn/wxHxyYh4+ZNe1wYAAADohsYXRuNfSUQDAAAAOLdyzWdgk1wxexZgNHK5YnH3Gd6PxsVcpVqrf2axurm2sPus7Fjkc4vLlfJE9qzwWOSTtDzZzL8qX99XnoqItyPi+4WRZrk4X60s9PrmBwAAAPSJS/vG//8o7I7/AQAAgHNmrNcVAAAAALrO+B8AAADOvwPH/8ng6VYEAAAA6Iav3rmTpkbr/dcL97c2V6r3ry2UayvF1c354nx1Y724VK0uNb+zb/Wo81Wq1fXPxdrmw1K9XKuXalvbs6vVzbX6bPO93rPlRuFUmgUAAADs8fYnnvwhiYidz480U+pCti1/9OEz3a0d0E254+2edKsewOkb6HUFgJ7xgC/0rw7G+MA5d8TA/gf7yse8bQAAAJwF4x97rfl/84HwBjOQh/5l/h/6l/l/6F/m/6HPDR29y/BBG357wnUBAAC6ZrSZklwxmwscjVyuWIx4q/lagHyyuFwpT0TEhyLi94X8UFqe7HWlAQAAAAAAAAAAAAAAAAAAAAAAAOAN02gk0QAAAADOtYjcX5LsRf7jhfdH998fuJD8s9BcRsSDn9770cO5en1jMl3/9/+tr/84W3+9tSb1jVO+kwEAAAC0tMbprXE8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJykF88fzbfSacZ99sWIGGsXfzCGm8vhXxUi4uLLJAb3HJdExMAJxN95HBHvtIufpNWKsawW++PnImKkx/EvnUB86GdP0v5nJr3+8vuuv1xcbi7bX3+DWXpdzy4f1P/lWv1fs59r1/+9dfiph1uZd5/+snRg/McR7w62739a8ZN28S903sZvfn17+6BtjZ9FjB/x9yeNX6qvrpdqW9vXllfnlspL5bWpqcmb07emb0xPlBaXK+Xs37YxvvfxX//nsPZfbBt/t/89sP0R8X6H7f/304fPP3JI/Cufav/zf+eQ+OnvxKezvwPp9vFWfmc3v9d7v/jde4e1f+GA9h/684+IKx22/+rd7/ypw10BgFNQ29pematUyhtdyYx07cwyaaa6diaqIXN2M3ezC/3Yh/e4YwIAAE7cqw/9+7ccY4IHAAAAAAAAAAAAAAAAAAAAeC1d/xKyof//ZoHh3jUVAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOBQ/w0AAP//5w/Stg==") (async) mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) (async, rerun: 64) getpgid(0xffffffffffffffff) (async, rerun: 64) getgid() r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="440000001000030425bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="00050000000000001c0012800e000100e9703665726270616e0000000800021ca3f6358321cbfb00", @ANYRES32=r8, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x20000804}, 0x8000) (async) openat$cgroup_ro(r3, &(0x7f0000005b40)='memory.events\x00', 0x0, 0x0) (async) ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f0000005b80)) newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) chown(&(0x7f00000003c0)='./file0\x00', r9, 0xee01) 2.776283764s ago: executing program 4 (id=658): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, @perf_config_ext={0x2, 0x6}, 0x0, 0x5dd8, 0x3, 0x5, 0x3, 0x8, 0xff7b, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) socket$inet6_tcp(0xa, 0x1, 0x0) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="600000000206050000000000000000000000000005000400000000000900020073797a32000000000500010007000000050005000a000000140007800800114000000000050015000000000011000300686173683a6e65742c6e6574"], 0x60}}, 0x0) (fail_nth: 1) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) 2.653486285s ago: executing program 4 (id=660): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], &(0x7f00000000c0)=""/209, 0x2e, 0xd1, 0x1, 0x0, 0x0, @void, @value}, 0x28) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0000000000000000400012800c0001"], 0x68}}, 0x82) r2 = socket$igmp6(0xa, 0x3, 0x2) r3 = socket$kcm(0x2, 0xa, 0x2) r4 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000040)='.log\x00', 0x480, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f00000002c0)={'ip6gre0\x00', 0x0, 0x4, 0x31, 0x8, 0x8000, 0x2, @rand_addr=' \x01\x00', @loopback, 0x40, 0x7800, 0xe, 0x100}}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000240)={{0x1, 0x1, 0x18, r3, {0x4}}, './file0\x00'}) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@bloom_filter={0x1e, 0x783, 0x2a, 0x3, 0x50c00, r4, 0x40, '\x00', r5, r0, 0x4, 0x5, 0x5, 0x4, @void, @value, @value=r6}, 0x50) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009900000001"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) inotify_rm_watch(0xffffffffffffffff, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000580)={0x0, 'syzkaller1\x00'}) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)=@updpolicy={0x13c, 0x19, 0x1, 0x0, 0x3, {{@in=@dev={0xac, 0x14, 0x14, 0x25}, @in6=@local, 0x0, 0x0, 0xfffd, 0x6, 0xa, 0x0, 0x80}, {0x2, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, 0x0, 0x200}, [@tmpl={0x84, 0x5, [{{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4d6, 0x2b}, 0x2, @in=@private=0xa010102, 0x0, 0x4, 0x3, 0x7, 0x8, 0x4, 0x1}, {{@in6=@mcast1, 0x4d4, 0x32}, 0x2, @in6=@remote, 0x3502, 0x4, 0x1, 0x7, 0x5, 0x3, 0x5}]}]}, 0x13c}}, 0x10) write$tun(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0xfdef) syz_emit_ethernet(0x4e, &(0x7f00000001c0)={@link_local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x18, 0x11, 0xff, @empty, @mcast2, {[], {0x4e22, 0xe22, 0x18, 0x0, @wg=@data={0x4, 0x9}}}}}}}, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x1c) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000000)='kmem_cache_free\x00', r11}, 0x18) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x4004743d, 0x110e22fff6) 2.421000939s ago: executing program 3 (id=662): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001240), 0x129402, 0x0) ioctl$KDSKBMODE(r0, 0x4b45, &(0x7f0000001280)=0x2) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000280)={0xffffffffffffffff, 0xe0, &(0x7f0000001140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, &(0x7f00000000c0)=[0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0], 0x0, 0xd, &(0x7f0000000140)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000180), &(0x7f0000000200), 0x8, 0xd2, 0x8, 0x8, &(0x7f0000000240)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0x34, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10, r1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 2.34149735s ago: executing program 3 (id=664): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c80)={'ip6gre0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001240)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x4000000, {0x0, 0x0, 0x0, r1, {0x0, 0x1}, {0xffff, 0xffff}, {0xc}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x1, 0x5a8, 0x1fc, 0x0, 0xfffffc80, 0x0, 0x6, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, 0x3f, 0x0, 0x0, 0x2, 0xffffffff, 0x2, 0xc00, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x1000, 0xfffffffc, 0x0, 0x0, 0x0, 0x9, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x272, 0xb, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfffffffe, 0x0, 0x80007, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, 0x0, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x0, 0xb97, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x5e, 0xfffffffc, 0x8, 0x0, 0x0, 0x400000, 0x7, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x80003, 0x0, 0xffffffff, 0x1, 0x0, 0x9, 0x0, 0x0, 0x5, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40000002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xffffffff, 0xffff, 0x0, 0x0, 0xb3c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x2, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0xd79, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c3, 0x0, 0x2, 0x0, 0x4, 0x7, 0x100, 0x0, 0x8, 0xfffffffd, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x6, 0x8, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x1, 0x0, 0x0, 0x0, 0xcfc, 0x6}, {0xff, 0x2, 0x0, 0x0, 0x0, 0x40000000}, 0x0, 0x7f}}]}}]}, 0x45c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 2.34075802s ago: executing program 4 (id=665): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, 0x0, &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000400)='io_uring_create\x00', r1}, 0x18) io_uring_setup(0x1de0, &(0x7f00000000c0)={0x0, 0x45d6}) 2.27632686s ago: executing program 3 (id=667): bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000004000000e27f000001"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) r1 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x76200}], 0x1, 0x7c00, 0x0, 0x3) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x143a82, 0x8) r3 = dup(r2) r4 = open(&(0x7f0000000100)='./bus\x00', 0x40542, 0x0) sendfile(r3, r4, 0x0, 0x8000fffffffe) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r5}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) r7 = mq_open(&(0x7f0000000380)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\x01\x00\x00\x00a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\x00\x17\xc0\xa3\xd5\xf9\xaa\x98/\xa4v\xe4)I\xf3+[e\x95\x89\x99\xca\x8e\xc5\xd3\\T\xf0\x1a|5\xfff\xff\x99\xa4\xbb\x9e#oR\xa4\xf1\xba\x04c\xb3-\xf7R\xb85\xb5\xdb\xe9?\xfa/\xdf\xb4R\xbfx=\v_j\x8e\xb0\'\xf4\xe5\xff!\xe1\xbf\x82e\xb1\x9b\x8d\xf3L\t\xd21\x9cbwV\xc8\xcc\xe4\x96M_w\xbc\xdf9\b\r\xf6\x95\xae\xb5,\x92\x8c\xc0DQm\x80\xd1w\xa2\x1a\x12Z\xe5\xf4H\xf7D\n\x96J\x93\xfb\xf0$\x9f\xf7\xa2\xae$O\xa3\xb6\xf5\x98\xd3\v\x00\x86\xa5\x8b\x81\x04\xaf\x03s\xe5\x86>\x0e\xa6\xe6\x1aV\x17\x8b\xed\xa7\'\xd0\r_\xe8,XVR\x13\xe5%\xb9\x88\xb8W@D\'\x17A\xc8\x80\x02J\xd4V\x00wH(\xc5v\f\xc9\xb6\xdf..$\xe6P(_\xf1\'\xc1:\xa3\xcb\xd9\xd1\xc7\x13\x99Md\x1dc\xf1\'j\x03!\x13\xd1\xb8\xbf\xe6\xb2M\b/\rp\xa5\x00\x00\x00\x00', 0x40, 0x0, 0x0) mq_unlink(&(0x7f0000000340)='eth0\x00') close(r7) 2.27593236s ago: executing program 4 (id=668): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000080)='kfree\x00', r2}, 0x18) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x33fe0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xfff3}}}, 0x24}}, 0x0) 1.324066733s ago: executing program 3 (id=675): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="a1ab0000000000000e003200000008001701"], 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x0) (fail_nth: 11) 1.038039467s ago: executing program 3 (id=678): syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r0 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd_index=0x3, 0x6, 0x0, 0x0, 0x2, 0x1}) io_uring_enter(r0, 0x627, 0x4c1, 0x43, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000000), 0x200, 0x102) (fail_nth: 6) 1.014504197s ago: executing program 1 (id=679): r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2, 0x0, 0x20}, 0x18) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, 0x0, 0xf00) 994.396447ms ago: executing program 1 (id=680): fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffed3) r0 = syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000040000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) wait4(r0, 0x0, 0x40000000, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000280)="d8000000100081044e81f782db44b904021d006a0f000000e8fe55a1290015000600142603600e120900050044000000a80016000a0003400200000000000000b94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a985162f7ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d3220a7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) 834.630119ms ago: executing program 0 (id=682): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=@newqdisc={0x7c, 0x10, 0x1, 0xfffffffe, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe, 0x4}}, [@TCA_RATE={0x6, 0x5, {0x9}}, @TCA_STAB={0x50, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x1000, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}, {{0x1c, 0x1, {0xa0, 0x9, 0x9, 0x0, 0x2, 0x0, 0x5eb, 0x3}}, {0xa, 0x2, [0x4, 0x2, 0x6a65]}}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4040088}, 0x4000c00) 694.551301ms ago: executing program 0 (id=683): bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={0x0, r0}, 0x18) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000200)={0x1d, r2}, 0x10) sendmsg$can_bcm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca7e4d5d5bdbe70000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r2, @ANYRES64=r1, @ANYBLOB="3bf81bb9e9"], 0x20000600}}, 0x0) 693.899551ms ago: executing program 1 (id=684): r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000080)={r0, 0x26b7, 0x4}) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10000, 0x0, 0x2, 0x0, 0x88}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x94) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f088f747e0ffff206000002021000aac141440e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) 509.351353ms ago: executing program 0 (id=686): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000060000000000000000008500000007000000850000000e0000"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000012c0)={&(0x7f0000000040)='kfree\x00', r0}, 0x10) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000054850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) setrlimit(0x9, &(0x7f0000000000)) io_setup(0x2004, &(0x7f0000000680)) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065fffff530000008003950323030302e75"], 0x15) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000300)=ANY=[], 0x15) r4 = dup(r3) write$P9_RLERRORu(r4, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x103843, 0x0) 455.566244ms ago: executing program 0 (id=687): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x8000001f) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r1, 0x402, 0x8000003d) close_range(r0, r1, 0x0) 358.315405ms ago: executing program 2 (id=690): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00"/12], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000032500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000850000000f000000bf91000000000000b7020000002000008500000084000000b70000000000000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r2, 0x12) 321.199515ms ago: executing program 2 (id=691): pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bf"], 0x0, 0x200, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x10) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x2041, 0x0) ioctl$TCSETAF(r4, 0x5408, &(0x7f0000000080)={0x49de, 0x0, 0x0, 0xbfff, 0x0, "ec28a144f13d7607"}) write$binfmt_aout(r4, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x4, 0x0, 0x3, "0062ba7d820000a75e0000000000fcff00"}) r5 = syz_open_pts(r4, 0x0) r6 = dup3(r5, r4, 0x0) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000000)=0x44) sendto$inet6(r1, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x604ab000) sendmmsg$inet6(r1, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000640)="2ec15575afe867fdba546430ca1a47eb15c41b179f8897fc1fbbfc164b92054405964c6c9d2f2ca1430c84c3ceb4810d0311a5c28fa9c1eb7511923f6ae5d4c7cdf4890a373d318f0a00"/91, 0x5b}, {&(0x7f0000000380)="63ce2e88626ff019a592a1faaa30606614baeaef770465257840ae8f02ce892875a9f6e5f40cd87b765acf2da11a69bb49199b4edf44d31a3c9d73f67dc2d7c7453d1dc43b8b74d96e30f7b67032c3611f017ebd3962c42f64174f91f244d50f57873444282103a1ee59b8fb29c92b148600ea95964445f7a6180d38e7834d0732189b9263648675d4332c8253af6aaef3fe5d2dacfef7e832f5efc1b7a32b6332ae5ddc7c943cef2f1c9d9187347f285bfe5577b8caa751a2fc09349166bc23453dbfacd515ac06ddfbc2118d3b887ef740f6ea6a1e81d4642d3f", 0xdb}, {&(0x7f0000005000)="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"/3786, 0xeca}], 0x3}}], 0x1, 0x884) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/4080, 0xfffffffffffffdcc, 0x0, 0x0, 0xffffffffffffff29}, &(0x7f0000000000)=0x40) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000180)={&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, &(0x7f00000002c0)=0x40) bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={0x0, r7}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000900)=ANY=[@ANYBLOB="5000000010001bff0000", @ANYRES8, @ANYRES64=r2, @ANYRES32=r6], 0x50}, 0x1, 0x0, 0x0, 0x40048c4}, 0x4000044) sendmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000000280)=@isdn={0x22, 0x9, 0x9, 0x2, 0x8}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000340)="42b50bb78bdf08baad36a65bb92838387b166cb8966ca26acddaa06b322615f9636ea1a759314b86849e7bae08bb96939d5710a935c5bb0a4fce3aee7b9348b84a55128779ded8619401af7b1c6c0c2d969185f190f36884b111f230968b170f6dfc9ed35e2d678607e36a5ccf0d314632bcfd0561c78f9fc154127dfbcad26c084ce4d7473cff05f1135eb0076380257ff47d0df8d7dbbe51b3773724", 0x9d}, {&(0x7f0000001040)="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", 0xf80}, {&(0x7f00000004c0)="b19eeaa702d8529e6f1aae5f1dfd8d19a4f1591d3608c1cda27b9f32b1638252ed8abfbc7312adb570c936d5347344a2985d101317ae85d36628e123e9f4a58335326a32f1bcbec32557ff2ce693c1ae8bf61fbb934c69da621c0dbe6bebcd1bfd499455c7bb4e5f78a12c6c2774c757be79788f2ff2f4c45f0b3b", 0x7b}, {&(0x7f0000000580)="c3fe98e911b4927c5feea4502ecee925899bcb5268025e8bc4114e6ec04d6d8ec9dfdfa7736d4bb412271a6b7117351d7655ff40418e2b5e5fb97439172d0a93b47ac47adbaea2031bf2a0dde03eb029abf28a73d097d676d2a9859581a8ee028c75299e97256d384ad617df3cfdfd9c8885b3616e216630493e173bb3ba12147865c8b4a64af356f6aa13c248b2f764fe2ede2a3dce4452667ed005c0ff75c79ed3155c2477391a48a15fc320120ffa22e91af4df", 0xb5}, {&(0x7f0000000640)="c807eed46faac0c4b86b45daad48bcbe98821ad27b97a87e44f1b04b08136d779e3789ffdc6aafa04aa942eb068005dc7280eeadecafab0f743a036ebd10d055df455011eda8cb46a9c7a48554", 0x4d}], 0x5, &(0x7f0000000740)=[{0xc8, 0x117, 0x4, "0ba28c1deb07e557eb32db7dd2e050f64c30f81813103e014a07ca405d8bec7537d89966b5f9aee4f42143335dd1408417bf3079256e5e65575600dde5b8b71a16c4787182def7b20ee70c86a8e570288f2d1889cd09788c49d568d31690ad894cc12ec2a786956cf14b8d55afd40c04e3ec9aed0401866cbc20065136159c5003cf7e1687be1a6a7f6d3508aeb8fd37e2b9f63c916175b50f909a9caa960287709766cfaee65558c2826d8e9e519cd268"}, {0x30, 0x116, 0x8, "42c7b9fe2fd1879a80ae4d424921047a7d6ffa1db30b5eab2511fa914228e31c"}], 0xf8}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000202300800000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x69, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 290.387456ms ago: executing program 1 (id=692): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) r2 = memfd_create(&(0x7f0000000bc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='\v\x00\x00\x00\a\x00\x00\x00\b\x00\x00\x00\b\x00\x00'], 0x48) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) timer_settime(r2, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) fcntl$setlease(r1, 0x400, 0x2) write$cgroup_subtree(r0, 0x0, 0x6) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x8, &(0x7f0000000080)=0x9, 0x4) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00'}, 0x10) sendmsg$IPSET_CMD_CREATE(r4, 0x0, 0x0) sendmsg$IPSET_CMD_DESTROY(r4, 0x0, 0x840) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioperm(0x2, 0x7ff, 0x8) syz_emit_ethernet(0x4e, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 279.983667ms ago: executing program 0 (id=694): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000000c0), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000000)={&(0x7f0000000040)={0x1d, r1, 0x2000000}, 0x10, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=r1, @ANYBLOB="000000000100000000000000840004"], 0x48}}, 0x0) 210.073297ms ago: executing program 0 (id=695): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000100000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kmem_cache_free\x00', r0}, 0x10) r1 = epoll_create1(0x80000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x9a974000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) mq_open(0x0, 0x1, 0x8, 0x0) fcntl$setlease(r1, 0x400, 0x1) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="180100000100a7d9000000000020b208850000007b00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r2}, 0x18) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r4, 0x29, 0x42, 0x0, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5}, 0x10) r6 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0) writev(r6, &(0x7f0000000080)=[{&(0x7f0000000300)='4', 0x1}], 0x1) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r3, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000002c0)="68377863ac6ea61666eaa696435a75f1626fe3a3acedcaf71527ff51d446daac757559d2d6fc2b90952355ec6c61d718c91784312b1b4771888a0811895b02ffb658934b0bbd6466c9cc04cc7252f1f1deea5a8b9c6797c8f1263db526cf88899f7ecab544662eb34743cefb660a78cb9468d2900b3cda4cca9d89ab6d341d145acf249276dda272407bc98d9e5431316d468b9e4750f2316589dc4de3157592d27fd723a512c85b08035842b75ec422346f9696f4bb3226b0ca75d135ebd8cae46fb83b71c103e1fdcb1934fd1d28b4916abe2c44e26ea72be426c27052e816212096000155788943b846746ccb492175fc9e01", 0xf4}, {&(0x7f00000003c0)="5453b4b759f9d4f4f33bda880b70e0dadde06223919f4585429ef69078a4956f646ea03bfd4c090a003c01f32b1a175baf38c1eb4572c8b372a4cf9128062e58ff575546876a2804144c3aea98c4a3533396f87e860de8c66bceb0e6b387ec853b7e91c57587d38436637e702ae18eeccefdcd7a3cdd7bfc327b5d619b57d56afe1628b65e2948af5ee0e3f52746a5aff58bb7c6d253a58bf745584d1bc19fe5e42b5534eab9e9d2587b413e81f68b60f56130f82b327f5fe900e3e107bc6b783d1d23a056426d6502133386b51e657046c1c43a2a2c4a7611ee6592a5ee08700d24d832163b3def1f", 0xe9}, {&(0x7f0000000640)="d48c8225ddfdf2c06c27763617468581389d34126760ba3dd0fe077a7c2ce378dd62cafeeb4ba1493766d09fd561d69a5bf8109ffcd3e43d8c16b9c3fa92d4439c5af1fa4775d01dcf0748a24ab51b52fbe75287a4b9aaa18fd479bdd154b4efe531a242d90a1ca2799c242bfd4ddd8271448d3415bd3a907ad340dc2fa2471393212d02eb25242808cffdc4e7a646211c18ac8602f5fc1e4f82b72871a8d42f37988365ff226c1523bf01617976641421438e16378094c94f2e55a44150d9a358d92606afb12f21a63daadbb143d6ccdae88d53521b9fe51ffabb08ff67cb9826", 0xe1}, {&(0x7f0000000040)="f96be6c391f1f8b23ae44a70a75f4a5ed0e013f80882907ab089ee65d16a6c6f5c666dad31257fb48b66d940a3819d0809971ea8274a6590", 0x38}, {&(0x7f0000000740)="f52ec22aafecc37a6d9995f1afb5c1727f223f9b84451a110b1dfbf19cc7ed183ba93f6d55645001887fc999262b9c938e22ef5ec46b4b1b535060dcca5cff1f0e5a1d9b32cef2b6e0a61af7968dc1759c4d901867d7d6e9f2521f6a1578e1cc2fbf58837a2633c0b8299192718c61227412dafd01e899723b33735bbec3e1429117362acc4139fc3565f183bd5568f47f4bc416adb360fdd9c497c2ad2ffe1ad738f4c073f1378d2b455e61844076a4a97ac1e13e2fb300ae69d55c501f96dcc39bf7ed835cc866f0fbd8e936e8374a484f111919dc610e0a36a0ee3df2ab1dc34cea42a4292e2fba", 0xe9}, {&(0x7f0000000200)="057322e18609ed78266492c2a2ae3f0c0f3f6394c53de2727898d209dcb274efec9fc9995189ead7bf00148d091675fa045479985e4f644d258d0aa4a69618eb", 0x40}], 0x6}}, {{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="acc870bde54caaeacb0000108cef4fa7bf44702b284b2e80cb32d33a86853c8c28797cd14c72c87f849f6ccbf3198d11a0b1ef000000000200000088e0e022b04dbd50d36f3c028c27ba0000000000000000", 0x52}, {&(0x7f0000000840)="b1f56ee29c433328d3b2a83bd97e37007087acae7568edff43ed556d76770122635aea1dc48755381c71590cd542e796cc2669e2af442a03760c5cdfc691b3da35ad6a8d2ef9c2baa53a8dec36a2e434d46e643a1277b1dd932f3ef2cf46c257d6a19523b8b789ef34b46e461725b5e437323385b88c368f8bb5b933aa9169f5f7b51dd5319b8016623d1863d70581691a79a6678db1e5e7fa1c98c5b9e4a87272e9c4a1bd98dbb2ab76919ba5c1020e80bd0659e82d861d", 0xb8}, {&(0x7f0000000e80)="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", 0x1ca}], 0x3}}], 0x2, 0xc0) sendmsg$NL80211_CMD_STOP_NAN(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000980)={0x14, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x8044}, 0x50) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r3, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) 127.214718ms ago: executing program 2 (id=696): r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2, 0x0, 0x20}, 0x18) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, 0x0, 0xf00) 99.688798ms ago: executing program 1 (id=697): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=@newqdisc={0x7c, 0x10, 0x1, 0xfffffffe, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe, 0x4}}, [@TCA_RATE={0x6, 0x5, {0x9}}, @TCA_STAB={0x50, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x1000, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}, {{0x1c, 0x1, {0xa0, 0x9, 0x9, 0x0, 0x2, 0x0, 0x5eb, 0x3}}, {0xa, 0x2, [0x4, 0x2, 0x6a65]}}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4040088}, 0x4000c00) 20.144739ms ago: executing program 2 (id=698): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000900)=ANY=[@ANYRESHEX, @ANYRES32, @ANYRESHEX], 0x0, 0xc, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='kmem_cache_free\x00'}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x9, 0x0, 0x80000000, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0}, 0x8124, 0xc8, 0xffffffff, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c562d067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000200040010000800014004000000", 0x58}], 0x1) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="8fedcb7910009875f37538e486dd6317ce8102033200fe08000e40000200875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x40806685, &(0x7f0000000380)={0x1, 0x2, 0x1000, 0x6, &(0x7f0000000300)="9510a9ec1e90", 0x0, 0x0, &(0x7f0000000340)}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', 0xffffffffffffffff, 0x0, 0x80000}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{}, &(0x7f0000000340), &(0x7f0000000500)=r0}, 0x20) 16.43185ms ago: executing program 1 (id=699): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x400, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=ANY=[@ANYRESHEX=r3, @ANYRES8], 0x38}}, 0x840) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r4}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000004c0)={[{@delalloc}, {@nojournal_checksum}, {@barrier_val={'barrier', 0x3d, 0x10002}}, {@dioread_lock}, {@data_err_ignore}, {@mb_optimize_scan}, {@dioread_nolock}, {@nobarrier}, {@abort}, {@user_xattr}, {@norecovery}, {@errors_remount}]}, 0x1, 0x570, &(0x7f00000019c0)="$eJzs3c1rHOUfAPDvbF76+vs1hVJURAI9WNFumsSXCh7qUbRY0HtdkjGUbLoluylNLLQ92IsXKYKIBfHgTe8ei/+Af0VBi0VK0IOXyGxm022zm2zTbXbrfj4w4XlmZvM835l5nn1mn1k2gIE1nv0pRDwfEV8mEYciIsm3DUe+cXx9v9X7V2ayJYm1tY/+TOr7ZfnG/2q87kCeeS4ifvk84tXC5nKryyvzpXI5XczzE7WFixPV5ZUT5xdKc+lcemFqevrUG9NTb7/1ZtdifeXs3998ePu9U18cW/36p7uHbyZxOg7m25rjeALXmjPjMZ4fk5E4/ciOk10orJ8kva4AOzKUt/ORyPqAQzGUt3rgv+9qRKwBAyrR/mFANcYBjXv7Lt0HPzPuvbt+A7Q5/uH1z0Zib/3eaP9q8tCdUXa/O9aF8rMyfv791s1sie59DgGwrWvXI+Lk8PDm/i/J+7+dO9nBPo+Wof+D3XM7G/+81mr8U9gY/0SL8c+BFm13J7Zv/4W7XSimrWz8907L8e/GpNXYUJ77X33MN5J8er6cZn3b/yPieIzsyfJbzeecWr2z1m5b8/gvW7LyG2PBvB53h/c8/JrZUq30JDE3u3c94oWW499k4/wnLc5/djzOdljG0fTWS+22bR//07X2fcTLLc//gxmtZOv5yYn69TDRuCo2++vG0V/blb85/tHYzfiz879/6/jHkub52urjl/Hd3n/Sdtseij86v/5Hk4/r6dF83eVSrbY4GTGafLB5/dSD1zbyjf2z+I8f27r/a3X974uITzqM/8aRH1/sKP4eXP9Z/LOPdf4fP3Hn/c++bVd+Z/3f6/XU8XxNJ/1fpxV8kmMHAAAAAAAA/aYQEQcjKRQ30oVCsbj+fMeR2F8oj60//xGzUf+u7FiMFBoz3YeanoeYzJ+HbeSnHslPR8ThiPhqaF89X5yplGd7HTwAAAAAAAAAAAAAAAAAAAD0iQNtvv+f+W2o17UDnjo/+Q2Da9v2341fegL6kvd/GFzaPwwu7R8Gl/YPg6up/e/pZT2A3ef9HwaX9g+DS/sHAAAAAAAAAAAAAAAAAAAAAAAAAACArjp75ky2rK3evzKT5WcvLS/NVy6dmE2r88WFpZniTGXxYnGuUpkrp8WZysJ2/69cqVycnIqlyxO1tFqbqC6vnFuoLF2onTu/UJpLz6UjuxIVAAAAAAAAAAAAAAAAAAAAPFuqyyvzpXI5XZSQ2FFiuD+qsZ7ILummNVd7XZ+tEn/80BfVaJfodc8EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/8GwAA//9ITzKe") setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file1\x00', &(0x7f00000001c0), &(0x7f0000000140)=ANY=[], 0x841, 0x1) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000100), 0x0, 0x381, 0x2) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100)="89e7ee2c78dad9b4b473fec988ca004063ca", 0x12}, {&(0x7f0000000440)="9c74dfbf77572856c809ff86bb648daf351a32ad", 0x14}], 0x2) 0s ago: executing program 2 (id=700): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000060000000000000000008500000007000000850000000e000000"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000012c0)={&(0x7f0000000040)='kfree\x00', r0}, 0x10) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000054850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) setrlimit(0x9, &(0x7f0000000000)) io_setup(0x2004, &(0x7f0000000680)) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065fffff530000008003950323030302e75"], 0x15) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000300)=ANY=[], 0x15) r4 = dup(r3) write$P9_RLERRORu(r4, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x103843, 0x0) kernel console output (not intermixed with test programs): [ 48.915133][ T4011] dvmrp1: entered allmulticast mode [ 48.941927][ T4011] dvmrp1: left allmulticast mode [ 49.017933][ T4028] netlink: 'syz.4.94': attribute type 4 has an invalid length. [ 49.160884][ T4034] lo speed is unknown, defaulting to 1000 [ 49.200858][ T4034] lo speed is unknown, defaulting to 1000 [ 49.234765][ T4034] lo speed is unknown, defaulting to 1000 [ 49.289112][ T4047] loop4: detected capacity change from 0 to 512 [ 49.298286][ T4034] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 49.313171][ T4047] EXT4-fs (loop4): orphan cleanup on readonly fs [ 49.335523][ T4034] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 49.346120][ T4047] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.99: bg 0: block 248: padding at end of block bitmap is not set [ 49.382135][ T4055] loop3: detected capacity change from 0 to 1024 [ 49.400883][ T4057] loop1: detected capacity change from 0 to 512 [ 49.422385][ T4047] EXT4-fs error (device loop4): ext4_acquire_dquot:6935: comm syz.4.99: Failed to acquire dquot type 1 [ 49.443844][ T4034] lo speed is unknown, defaulting to 1000 [ 49.453674][ T4055] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.468492][ T4057] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.483730][ T4047] EXT4-fs (loop4): 1 truncate cleaned up [ 49.490740][ T4034] lo speed is unknown, defaulting to 1000 [ 49.500813][ T4047] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 49.522787][ T4057] ext4 filesystem being mounted at /18/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 49.536422][ T4034] lo speed is unknown, defaulting to 1000 [ 49.543161][ T4034] lo speed is unknown, defaulting to 1000 [ 49.582472][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.647114][ T4047] lo speed is unknown, defaulting to 1000 [ 49.698858][ T4034] lo speed is unknown, defaulting to 1000 [ 49.738484][ T3326] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.805073][ T3327] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.856766][ T4080] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 49.897073][ T4080] netlink: 112 bytes leftover after parsing attributes in process `syz.4.106'. [ 49.915043][ T4083] netlink: 36 bytes leftover after parsing attributes in process `syz.2.109'. [ 49.943039][ T4090] SELinux: Context system_u:object_r:systemd_logger_exec_t:s0 is not valid (left unmapped). [ 50.078947][ T30] kauditd_printk_skb: 130 callbacks suppressed [ 50.078965][ T30] audit: type=1400 audit(1748490974.703:490): avc: denied { mount } for pid=4097 comm="syz.1.112" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 50.126384][ T30] audit: type=1400 audit(1748490974.753:491): avc: denied { unmount } for pid=3327 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 50.139387][ T4111] loop4: detected capacity change from 0 to 512 [ 50.193109][ T30] audit: type=1326 audit(1748490974.813:492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4118 comm="syz.1.119" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3b497de969 code=0x0 [ 50.237703][ T4111] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.255066][ T4103] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.268364][ T4111] ext4 filesystem being mounted at /29/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 50.326894][ T4103] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.358966][ T4126] netlink: 48 bytes leftover after parsing attributes in process `syz.0.110'. [ 50.397555][ T4103] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.457411][ T4103] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.524684][ T4103] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.538124][ T4103] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.552176][ T4103] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.566391][ T4103] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.577854][ T4134] netlink: 36 bytes leftover after parsing attributes in process `syz.2.121'. [ 50.580154][ T3326] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.719162][ T4141] lo speed is unknown, defaulting to 1000 [ 50.745944][ T30] audit: type=1326 audit(1748490975.363:493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4140 comm="syz.3.124" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7dbcb9e969 code=0x0 [ 50.779543][ T4143] loop2: detected capacity change from 0 to 2048 [ 50.834953][ T3537] Alternate GPT is invalid, using primary GPT. [ 50.848122][ T3537] loop2: p1 p2 p3 [ 50.861846][ T4143] Alternate GPT is invalid, using primary GPT. [ 50.870452][ T4143] loop2: p1 p2 p3 [ 50.897263][ T30] audit: type=1400 audit(1748490975.523:494): avc: denied { write } for pid=4142 comm="syz.2.125" name="loop2p2" dev="devtmpfs" ino=620 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 50.931459][ T30] audit: type=1400 audit(1748490975.523:495): avc: denied { open } for pid=4142 comm="syz.2.125" path="/dev/loop2p2" dev="devtmpfs" ino=620 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 51.059812][ T3496] udevd[3496]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 51.079626][ T3537] udevd[3537]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 51.090823][ T30] audit: type=1400 audit(1748490975.603:496): avc: denied { setattr } for pid=4142 comm="syz.2.125" name="loop2p1" dev="devtmpfs" ino=619 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 51.124206][ T3311] udevd[3311]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 51.174121][ T30] audit: type=1400 audit(1748490975.793:497): avc: denied { sys_module } for pid=4161 comm="syz.2.132" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 51.206034][ T3537] udevd[3537]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 51.226131][ T4165] loop0: detected capacity change from 0 to 512 [ 51.227122][ T4169] netlink: 36 bytes leftover after parsing attributes in process `syz.1.134'. [ 51.246126][ T4162] loop2: detected capacity change from 0 to 512 [ 51.265219][ T4162] EXT4-fs (loop2): orphan cleanup on readonly fs [ 51.279692][ T4165] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.310919][ T4162] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.132: bg 0: block 248: padding at end of block bitmap is not set [ 51.317225][ T4165] ext4 filesystem being mounted at /26/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 51.344731][ T4158] mmap: syz.4.130 (4158) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 51.360878][ T4162] Quota error (device loop2): write_blk: dquota write failed [ 51.369955][ T4162] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 51.381425][ T4162] EXT4-fs error (device loop2): ext4_acquire_dquot:6935: comm syz.2.132: Failed to acquire dquot type 1 [ 51.396250][ T4162] EXT4-fs (loop2): 1 truncate cleaned up [ 51.453994][ T4162] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 51.476282][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.488762][ T4162] lo speed is unknown, defaulting to 1000 [ 51.536150][ T4181] loop4: detected capacity change from 0 to 164 [ 51.565133][ T4181] process 'syz.4.137' launched '/dev/fd/7' with NULL argv: empty string added [ 51.578401][ T4176] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.585319][ T4181] syz.4.137: attempt to access beyond end of device [ 51.585319][ T4181] loop4: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 51.648467][ T4181] syz.4.137: attempt to access beyond end of device [ 51.648467][ T4181] loop4: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 51.693683][ T4176] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.733032][ T4195] loop0: detected capacity change from 0 to 1024 [ 51.750561][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.776788][ T4195] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.789587][ T4176] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.846567][ T4176] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.858237][ T4181] SELinux: Context system_u:object_r:hald_sonypic_exec_t:s0 is not valid (left unmapped). [ 51.877438][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.920807][ T4204] netlink: 36 bytes leftover after parsing attributes in process `syz.2.146'. [ 51.945345][ T4176] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.950968][ T4209] loop4: detected capacity change from 0 to 1024 [ 51.985861][ T4209] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.013786][ T4176] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.018098][ T4209] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2848: Unable to expand inode 12. Delete some EAs or run e2fsck. [ 52.052735][ T4176] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.056503][ T4176] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.129259][ T3326] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.223039][ T4224] netlink: 36 bytes leftover after parsing attributes in process `syz.4.151'. [ 52.245853][ T4230] loop2: detected capacity change from 0 to 1024 [ 52.263106][ T4230] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (12806!=20869) [ 52.289729][ T4230] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a842c018, mo2=0002] [ 52.305602][ T4230] System zones: 0-1, 3-36 [ 52.315928][ T4230] EXT4-fs (loop2): orphan cleanup on readonly fs [ 52.332109][ T4230] EXT4-fs (loop2): 1 orphan inode deleted [ 52.347172][ T4234] dvmrp1: entered allmulticast mode [ 52.355039][ T4230] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 52.356196][ T4234] dvmrp1: left allmulticast mode [ 52.391548][ T4237] loop4: detected capacity change from 0 to 1024 [ 52.405586][ T4237] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.426042][ T4240] netlink: 'syz.1.155': attribute type 4 has an invalid length. [ 52.470486][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.517695][ T3326] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.558610][ T4244] netlink: 48 bytes leftover after parsing attributes in process `syz.2.158'. [ 52.811759][ T4264] netlink: 36 bytes leftover after parsing attributes in process `syz.0.166'. [ 52.849880][ T4251] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.878999][ T4272] nr0: tun_chr_ioctl cmd 2147767520 [ 52.938491][ T4251] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.019745][ T4251] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.079600][ T4251] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.137007][ T4251] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.152677][ T4251] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.168734][ T4251] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.192755][ T4251] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.208550][ T4280] dvmrp1: entered allmulticast mode [ 53.219847][ T4280] dvmrp1: left allmulticast mode [ 53.258866][ T4280] netlink: 'syz.0.173': attribute type 4 has an invalid length. [ 53.268549][ T1038] lo speed is unknown, defaulting to 1000 [ 53.275254][ T3393] lo speed is unknown, defaulting to 1000 [ 53.313224][ T4286] sd 0:0:1:0: device reset [ 53.330521][ T4289] FAULT_INJECTION: forcing a failure. [ 53.330521][ T4289] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 53.346300][ T4289] CPU: 1 UID: 0 PID: 4289 Comm: syz.0.176 Not tainted 6.15.0-syzkaller-03645-g3d413f0cfd7e #0 PREEMPT(voluntary) [ 53.346336][ T4289] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 53.346352][ T4289] Call Trace: [ 53.346361][ T4289] [ 53.346370][ T4289] __dump_stack+0x1d/0x30 [ 53.346400][ T4289] dump_stack_lvl+0xe8/0x140 [ 53.346426][ T4289] dump_stack+0x15/0x1b [ 53.346449][ T4289] should_fail_ex+0x265/0x280 [ 53.346518][ T4289] should_fail+0xb/0x20 [ 53.346545][ T4289] should_fail_usercopy+0x1a/0x20 [ 53.346584][ T4289] _copy_from_user+0x1c/0xb0 [ 53.346658][ T4289] ___bpf_copy_key+0xa5/0x110 [ 53.346680][ T4289] map_delete_elem+0x115/0x2b0 [ 53.346731][ T4289] __sys_bpf+0x42c/0x790 [ 53.346769][ T4289] __x64_sys_bpf+0x41/0x50 [ 53.346799][ T4289] x64_sys_call+0x2478/0x2fb0 [ 53.346861][ T4289] do_syscall_64+0xd2/0x200 [ 53.346955][ T4289] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 53.346992][ T4289] ? clear_bhb_loop+0x40/0x90 [ 53.347016][ T4289] ? clear_bhb_loop+0x40/0x90 [ 53.347066][ T4289] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.347091][ T4289] RIP: 0033:0x7f5d7b34e969 [ 53.347111][ T4289] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 53.347136][ T4289] RSP: 002b:00007f5d799b7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 53.347160][ T4289] RAX: ffffffffffffffda RBX: 00007f5d7b575fa0 RCX: 00007f5d7b34e969 [ 53.347224][ T4289] RDX: 0000000000000020 RSI: 0000200000000580 RDI: 0000000000000003 [ 53.347238][ T4289] RBP: 00007f5d799b7090 R08: 0000000000000000 R09: 0000000000000000 [ 53.347254][ T4289] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 53.347270][ T4289] R13: 0000000000000000 R14: 00007f5d7b575fa0 R15: 00007ffd4fce8be8 [ 53.347296][ T4289] [ 53.613899][ T4295] netlink: 36 bytes leftover after parsing attributes in process `syz.2.179'. [ 53.655595][ T4298] loop2: detected capacity change from 0 to 1024 [ 53.678695][ T4298] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.789577][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.923253][ C1] hrtimer: interrupt took 27985 ns [ 54.318949][ T4328] FAULT_INJECTION: forcing a failure. [ 54.318949][ T4328] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 54.333209][ T4328] CPU: 1 UID: 0 PID: 4328 Comm: syz.2.189 Not tainted 6.15.0-syzkaller-03645-g3d413f0cfd7e #0 PREEMPT(voluntary) [ 54.333237][ T4328] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 54.333249][ T4328] Call Trace: [ 54.333258][ T4328] [ 54.333267][ T4328] __dump_stack+0x1d/0x30 [ 54.333342][ T4328] dump_stack_lvl+0xe8/0x140 [ 54.333432][ T4328] dump_stack+0x15/0x1b [ 54.333455][ T4328] should_fail_ex+0x265/0x280 [ 54.333557][ T4328] should_fail+0xb/0x20 [ 54.333591][ T4328] should_fail_usercopy+0x1a/0x20 [ 54.333706][ T4328] _copy_from_iter+0xcf/0xe40 [ 54.333804][ T4328] ? __build_skb_around+0x1a0/0x200 [ 54.333833][ T4328] ? __alloc_skb+0x223/0x320 [ 54.333857][ T4328] netlink_sendmsg+0x471/0x6b0 [ 54.333901][ T4328] ? __pfx_netlink_sendmsg+0x10/0x10 [ 54.333936][ T4328] __sock_sendmsg+0x145/0x180 [ 54.333976][ T4328] ____sys_sendmsg+0x31e/0x4e0 [ 54.334085][ T4328] ___sys_sendmsg+0x17b/0x1d0 [ 54.334132][ T4328] __x64_sys_sendmsg+0xd4/0x160 [ 54.334234][ T4328] x64_sys_call+0x2999/0x2fb0 [ 54.334291][ T4328] do_syscall_64+0xd2/0x200 [ 54.334330][ T4328] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 54.334380][ T4328] ? clear_bhb_loop+0x40/0x90 [ 54.334405][ T4328] ? clear_bhb_loop+0x40/0x90 [ 54.334426][ T4328] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 54.334447][ T4328] RIP: 0033:0x7f0bf6a2e969 [ 54.334462][ T4328] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 54.334497][ T4328] RSP: 002b:00007f0bf5097038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 54.334521][ T4328] RAX: ffffffffffffffda RBX: 00007f0bf6c55fa0 RCX: 00007f0bf6a2e969 [ 54.334538][ T4328] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 54.334554][ T4328] RBP: 00007f0bf5097090 R08: 0000000000000000 R09: 0000000000000000 [ 54.334608][ T4328] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 54.334620][ T4328] R13: 0000000000000000 R14: 00007f0bf6c55fa0 R15: 00007ffed60f3738 [ 54.334643][ T4328] [ 54.698487][ T4334] netlink: 4 bytes leftover after parsing attributes in process `syz.0.192'. [ 54.715103][ T4334] bridge_slave_1: left allmulticast mode [ 54.722260][ T4334] bridge_slave_1: left promiscuous mode [ 54.729946][ T4334] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.749883][ T4336] FAULT_INJECTION: forcing a failure. [ 54.749883][ T4336] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 54.764751][ T4336] CPU: 1 UID: 0 PID: 4336 Comm: syz.4.193 Not tainted 6.15.0-syzkaller-03645-g3d413f0cfd7e #0 PREEMPT(voluntary) [ 54.764785][ T4336] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 54.764870][ T4336] Call Trace: [ 54.764878][ T4336] [ 54.764886][ T4336] __dump_stack+0x1d/0x30 [ 54.764935][ T4336] dump_stack_lvl+0xe8/0x140 [ 54.764958][ T4336] dump_stack+0x15/0x1b [ 54.764988][ T4336] should_fail_ex+0x265/0x280 [ 54.765093][ T4336] should_fail+0xb/0x20 [ 54.765127][ T4336] should_fail_usercopy+0x1a/0x20 [ 54.765238][ T4336] _copy_from_user+0x1c/0xb0 [ 54.765263][ T4336] vmemdup_user+0x59/0xd0 [ 54.765293][ T4336] path_setxattrat+0x1b6/0x310 [ 54.765338][ T4336] __x64_sys_setxattr+0x6e/0x90 [ 54.765391][ T4336] x64_sys_call+0x28a7/0x2fb0 [ 54.765413][ T4336] do_syscall_64+0xd2/0x200 [ 54.765446][ T4336] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 54.765516][ T4336] ? clear_bhb_loop+0x40/0x90 [ 54.765536][ T4336] ? clear_bhb_loop+0x40/0x90 [ 54.765557][ T4336] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 54.765638][ T4336] RIP: 0033:0x7f2b5d80e969 [ 54.765657][ T4336] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 54.765679][ T4336] RSP: 002b:00007f2b5be77038 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc [ 54.765733][ T4336] RAX: ffffffffffffffda RBX: 00007f2b5da35fa0 RCX: 00007f2b5d80e969 [ 54.765746][ T4336] RDX: 00002000000005c0 RSI: 0000200000000040 RDI: 0000200000002040 [ 54.765762][ T4336] RBP: 00007f2b5be77090 R08: 0000000000000001 R09: 0000000000000000 [ 54.765779][ T4336] R10: 0000000000000054 R11: 0000000000000246 R12: 0000000000000001 [ 54.765795][ T4336] R13: 0000000000000000 R14: 00007f2b5da35fa0 R15: 00007ffee4c73238 [ 54.765818][ T4336] [ 54.991248][ T4334] bridge_slave_0: left allmulticast mode [ 54.998056][ T4334] bridge_slave_0: left promiscuous mode [ 55.004823][ T4334] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.353764][ T30] kauditd_printk_skb: 106 callbacks suppressed [ 55.353786][ T30] audit: type=1400 audit(1748490979.963:604): avc: denied { map } for pid=4349 comm="syz.4.199" path="socket:[7465]" dev="sockfs" ino=7465 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 55.385251][ T30] audit: type=1400 audit(1748490979.963:605): avc: denied { read } for pid=4349 comm="syz.4.199" path="socket:[7465]" dev="sockfs" ino=7465 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 55.469087][ T30] audit: type=1400 audit(1748490980.073:606): avc: denied { name_bind } for pid=4337 comm="syz.2.194" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 55.494177][ T30] audit: type=1400 audit(1748490980.073:607): avc: denied { node_bind } for pid=4337 comm="syz.2.194" saddr=172.20.20.170 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 55.518545][ T30] audit: type=1400 audit(1748490980.093:608): avc: denied { prog_load } for pid=4351 comm="syz.0.200" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 55.539871][ T30] audit: type=1400 audit(1748490980.093:609): avc: denied { bpf } for pid=4351 comm="syz.0.200" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 55.563443][ T30] audit: type=1400 audit(1748490980.093:610): avc: denied { perfmon } for pid=4351 comm="syz.0.200" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 55.586356][ T30] audit: type=1400 audit(1748490980.093:611): avc: denied { open } for pid=4351 comm="syz.0.200" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 55.606913][ T30] audit: type=1400 audit(1748490980.093:612): avc: denied { kernel } for pid=4351 comm="syz.0.200" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 55.629354][ T30] audit: type=1400 audit(1748490980.093:613): avc: denied { module_request } for pid=4351 comm="syz.0.200" kmod="net-pf-16-proto-4-type-45" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 55.730560][ T4358] loop2: detected capacity change from 0 to 1024 [ 55.793395][ T4358] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 55.822645][ T4369] lo speed is unknown, defaulting to 1000 [ 55.830616][ T4371] loop3: detected capacity change from 0 to 1024 [ 55.853059][ T4371] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (12806!=20869) [ 55.866292][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.868037][ T4371] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a842c018, mo2=0002] [ 55.885125][ T4371] System zones: 0-1, 3-36 [ 55.890074][ T4371] EXT4-fs (loop3): orphan cleanup on readonly fs [ 55.928359][ T4371] EXT4-fs (loop3): 1 orphan inode deleted [ 55.935235][ T4371] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 56.014748][ T4371] vhci_hcd: invalid port number 96 [ 56.020540][ T4371] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 56.043230][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.266933][ T4386] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 56.278398][ T4388] loop4: detected capacity change from 0 to 1024 [ 56.300700][ T4390] netlink: 4 bytes leftover after parsing attributes in process `syz.3.212'. [ 56.310872][ T4390] bridge_slave_1: left allmulticast mode [ 56.317533][ T4390] bridge_slave_1: left promiscuous mode [ 56.318917][ T4386] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 56.323579][ T4390] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.343830][ T4388] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 56.357705][ T4390] bridge_slave_0: left allmulticast mode [ 56.364250][ T4390] bridge_slave_0: left promiscuous mode [ 56.373000][ T4390] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.445702][ T3326] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.478353][ T4394] loop4: detected capacity change from 0 to 1024 [ 56.503161][ T4394] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 56.537578][ T3326] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.548882][ T4398] netlink: 36 bytes leftover after parsing attributes in process `syz.3.214'. [ 56.609131][ T4405] loop4: detected capacity change from 0 to 512 [ 56.616302][ T4403] loop3: detected capacity change from 0 to 1024 [ 56.678699][ T4403] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 56.702836][ T4405] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.724371][ T4405] ext4 filesystem being mounted at /54/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 56.788201][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.871265][ T4415] can: request_module (can-proto-4) failed. [ 56.920754][ T3326] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.080087][ T4423] 9pnet_fd: Insufficient options for proto=fd [ 57.204786][ T4432] lo speed is unknown, defaulting to 1000 [ 57.218384][ T4439] netlink: 12 bytes leftover after parsing attributes in process `syz.4.230'. [ 57.235333][ T4438] TCP: tcp_parse_options: Illegal window scaling value 53 > 14 received [ 57.278656][ T4439] SET target dimension over the limit! [ 57.308153][ T4441] loop0: detected capacity change from 0 to 1024 [ 57.324767][ T4438] infiniband syz2: set active [ 57.330584][ T4438] infiniband syz2: added veth0_to_bond [ 57.362986][ T4438] RDS/IB: syz2: added [ 57.368671][ T4438] smc: adding ib device syz2 with port count 1 [ 57.380707][ T4438] smc: ib device syz2 port 1 has pnetid [ 57.654427][ T4441] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 57.745135][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.041069][ T4459] loop1: detected capacity change from 0 to 512 [ 58.089141][ T4459] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 58.110534][ T4459] ext4 filesystem being mounted at /30/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 58.195881][ T4465] 9pnet_fd: Insufficient options for proto=fd [ 58.313414][ T3327] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.421334][ T4478] loop1: detected capacity change from 0 to 1024 [ 58.448696][ T4478] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 58.491228][ T3327] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.297502][ T4554] loop0: detected capacity change from 0 to 2048 [ 59.329593][ T4554] EXT4-fs error (device loop0): __ext4_fill_super:5502: inode #2: comm +}[@: iget: bad extended attribute block 281474976710655 [ 59.359968][ T4554] EXT4-fs (loop0): get root inode failed [ 59.366570][ T4554] EXT4-fs (loop0): mount failed [ 59.502810][ T4573] loop2: detected capacity change from 0 to 512 [ 59.550635][ T4576] lo speed is unknown, defaulting to 1000 [ 59.558333][ T4573] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 59.577418][ T4573] ext4 filesystem being mounted at /44/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 59.669380][ T4579] lo speed is unknown, defaulting to 1000 [ 59.787243][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.033368][ T4588] FAULT_INJECTION: forcing a failure. [ 60.033368][ T4588] name failslab, interval 1, probability 0, space 0, times 1 [ 60.047584][ T4588] CPU: 1 UID: 0 PID: 4588 Comm: syz.3.259 Not tainted 6.15.0-syzkaller-03645-g3d413f0cfd7e #0 PREEMPT(voluntary) [ 60.047611][ T4588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 60.047627][ T4588] Call Trace: [ 60.047636][ T4588] [ 60.047646][ T4588] __dump_stack+0x1d/0x30 [ 60.047697][ T4588] dump_stack_lvl+0xe8/0x140 [ 60.047717][ T4588] dump_stack+0x15/0x1b [ 60.047776][ T4588] should_fail_ex+0x265/0x280 [ 60.047833][ T4588] should_failslab+0x8c/0xb0 [ 60.047853][ T4588] kmem_cache_alloc_noprof+0x50/0x310 [ 60.047875][ T4588] ? fcntl_setlk+0x53/0x950 [ 60.047906][ T4588] fcntl_setlk+0x53/0x950 [ 60.047944][ T4588] ? should_fail_ex+0xdb/0x280 [ 60.048063][ T4588] do_fcntl+0x5dd/0xdf0 [ 60.048093][ T4588] ? selinux_file_fcntl+0x1cb/0x1e0 [ 60.048120][ T4588] __se_sys_fcntl+0xb1/0x120 [ 60.048226][ T4588] __x64_sys_fcntl+0x43/0x50 [ 60.048248][ T4588] x64_sys_call+0x1f1d/0x2fb0 [ 60.048277][ T4588] do_syscall_64+0xd2/0x200 [ 60.048316][ T4588] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 60.048462][ T4588] ? clear_bhb_loop+0x40/0x90 [ 60.048489][ T4588] ? clear_bhb_loop+0x40/0x90 [ 60.048516][ T4588] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 60.048538][ T4588] RIP: 0033:0x7f7dbcb9e969 [ 60.048553][ T4588] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 60.048596][ T4588] RSP: 002b:00007f7dbb207038 EFLAGS: 00000246 ORIG_RAX: 0000000000000048 [ 60.048693][ T4588] RAX: ffffffffffffffda RBX: 00007f7dbcdc5fa0 RCX: 00007f7dbcb9e969 [ 60.048705][ T4588] RDX: 00002000000006c0 RSI: 0000000000000007 RDI: 0000000000000003 [ 60.048717][ T4588] RBP: 00007f7dbb207090 R08: 0000000000000000 R09: 0000000000000000 [ 60.048729][ T4588] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 60.048743][ T4588] R13: 0000000000000000 R14: 00007f7dbcdc5fa0 R15: 00007ffc4569bb48 [ 60.048768][ T4588] [ 60.341974][ T4592] netlink: 36 bytes leftover after parsing attributes in process `syz.3.261'. [ 60.440713][ T30] kauditd_printk_skb: 257 callbacks suppressed [ 60.440733][ T30] audit: type=1326 audit(1748490985.063:871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4596 comm="syz.0.264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d7b34e969 code=0x7ffc0000 [ 60.479144][ T30] audit: type=1326 audit(1748490985.063:872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4596 comm="syz.0.264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d7b34e969 code=0x7ffc0000 [ 60.505044][ T30] audit: type=1326 audit(1748490985.063:873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4596 comm="syz.0.264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f5d7b34e969 code=0x7ffc0000 [ 60.505875][ T4601] netlink: 'syz.0.264': attribute type 5 has an invalid length. [ 60.531945][ T30] audit: type=1326 audit(1748490985.063:874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4596 comm="syz.0.264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d7b34e969 code=0x7ffc0000 [ 60.540823][ T4601] netlink: 152 bytes leftover after parsing attributes in process `syz.0.264'. [ 60.577379][ T30] audit: type=1326 audit(1748490985.063:875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4596 comm="syz.0.264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d7b34e969 code=0x7ffc0000 [ 60.604596][ T30] audit: type=1326 audit(1748490985.063:876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4598 comm="syz.0.264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f5d7b381225 code=0x7ffc0000 [ 60.632325][ T30] audit: type=1326 audit(1748490985.073:877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4596 comm="syz.0.264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5d7b34e969 code=0x7ffc0000 [ 60.657824][ T30] audit: type=1326 audit(1748490985.073:878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4596 comm="syz.0.264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d7b34e969 code=0x7ffc0000 [ 60.683339][ T30] audit: type=1326 audit(1748490985.073:879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4596 comm="syz.0.264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d7b34e969 code=0x7ffc0000 [ 60.709087][ T30] audit: type=1326 audit(1748490985.073:880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4596 comm="syz.0.264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5d7b34e969 code=0x7ffc0000 [ 60.742690][ T4601] : renamed from bond0 (while UP) [ 60.894583][ T4614] loop0: detected capacity change from 0 to 512 [ 60.927053][ T4614] ext4 filesystem being mounted at /61/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 60.944903][ T4622] TCP: tcp_parse_options: Illegal window scaling value 53 > 14 received [ 60.977389][ T4622] rdma_rxe: rxe_newlink: failed to add veth0_to_bond [ 61.255220][ T4641] loop1: detected capacity change from 0 to 512 [ 61.274817][ T4641] EXT4-fs (loop1): orphan cleanup on readonly fs [ 61.311328][ T4641] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.273: bg 0: block 248: padding at end of block bitmap is not set [ 61.327550][ T4656] loop4: detected capacity change from 0 to 1024 [ 61.350673][ T4657] netlink: 36 bytes leftover after parsing attributes in process `syz.0.274'. [ 61.365520][ T4641] EXT4-fs error (device loop1): ext4_acquire_dquot:6935: comm syz.1.273: Failed to acquire dquot type 1 [ 61.404756][ T4641] EXT4-fs (loop1): 1 truncate cleaned up [ 61.469295][ T4668] loop0: detected capacity change from 0 to 1024 [ 61.493029][ T4641] lo speed is unknown, defaulting to 1000 [ 61.525250][ T4671] lo speed is unknown, defaulting to 1000 [ 61.744277][ T4693] loop2: detected capacity change from 0 to 512 [ 61.758948][ T4693] ext4 filesystem being mounted at /47/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 61.860339][ T4707] loop2: detected capacity change from 0 to 1024 [ 61.876139][ T4707] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (12806!=20869) [ 61.891456][ T4707] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a842c018, mo2=0002] [ 61.900613][ T4707] System zones: 0-1, 3-36 [ 61.905792][ T4707] EXT4-fs (loop2): orphan cleanup on readonly fs [ 61.916139][ T4707] EXT4-fs (loop2): 1 orphan inode deleted [ 61.959704][ T4708] loop1: detected capacity change from 0 to 512 [ 61.978118][ T4708] EXT4-fs (loop1): orphan cleanup on readonly fs [ 62.005372][ T4708] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.288: bg 0: block 248: padding at end of block bitmap is not set [ 62.025255][ T4707] vhci_hcd: invalid port number 96 [ 62.027321][ T4708] EXT4-fs error (device loop1): ext4_acquire_dquot:6935: comm syz.1.288: Failed to acquire dquot type 1 [ 62.031996][ T4707] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 62.046091][ T4708] EXT4-fs (loop1): 1 truncate cleaned up [ 62.090350][ T4708] lo speed is unknown, defaulting to 1000 [ 62.150539][ T4726] dvmrp1: entered allmulticast mode [ 62.158764][ T4726] netlink: 'syz.2.290': attribute type 4 has an invalid length. [ 62.296641][ T4739] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 62.325224][ T4739] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 62.401422][ T4746] loop4: detected capacity change from 0 to 164 [ 62.575122][ T4764] loop4: detected capacity change from 0 to 512 [ 62.607197][ T4764] ext4 filesystem being mounted at /68/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 62.736184][ T4778] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 62.800763][ T4783] loop1: detected capacity change from 0 to 1024 [ 62.823476][ T4783] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (12806!=20869) [ 62.834641][ T4786] loop4: detected capacity change from 0 to 512 [ 62.844724][ T4783] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a842c018, mo2=0002] [ 62.861249][ T4783] System zones: 0-1, 3-36 [ 62.867577][ T4783] EXT4-fs (loop1): orphan cleanup on readonly fs [ 62.891748][ T4783] EXT4-fs (loop1): 1 orphan inode deleted [ 62.900147][ T4786] ext4 filesystem being mounted at /70/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 62.975822][ T4796] netlink: 4 bytes leftover after parsing attributes in process `syz.2.305'. [ 62.993364][ T4796] bridge_slave_1: left allmulticast mode [ 63.000103][ T4796] bridge_slave_1: left promiscuous mode [ 63.006657][ T4796] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.031004][ T4796] bridge_slave_0: left allmulticast mode [ 63.032037][ T4783] vhci_hcd: invalid port number 96 [ 63.037540][ T4796] bridge_slave_0: left promiscuous mode [ 63.043137][ T4783] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 63.049434][ T4796] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.081536][ T4797] loop3: detected capacity change from 0 to 1024 [ 63.173659][ T4805] loop1: detected capacity change from 0 to 512 [ 63.207500][ T4805] ext4 filesystem being mounted at /48/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 63.252946][ T4813] TCP: tcp_parse_options: Illegal window scaling value 53 > 14 received [ 63.269922][ T4813] rdma_rxe: rxe_newlink: failed to add veth0_to_bond [ 63.426900][ T4835] syz2: rxe_newlink: already configured on veth0_to_bond [ 63.517045][ T4847] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 63.534179][ T4847] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 63.613700][ T4839] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.658006][ T4839] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.678910][ T4843] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.705636][ T4839] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.756875][ T4843] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.775516][ T4839] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.806272][ T4843] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.825555][ T4876] netlink: 48 bytes leftover after parsing attributes in process `syz.0.319'. [ 63.851470][ T4839] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.867572][ T4839] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.882370][ T4839] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.894798][ T4843] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.912741][ T4839] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.957737][ T4843] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.999575][ T4843] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.016730][ T4843] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.031515][ T4843] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.143500][ T4906] loop1: detected capacity change from 0 to 1024 [ 64.163224][ T4894] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.203115][ T4908] loop3: detected capacity change from 0 to 1024 [ 64.223273][ T4894] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.235024][ T4913] loop4: detected capacity change from 0 to 512 [ 64.252631][ T4913] EXT4-fs (loop4): orphan cleanup on readonly fs [ 64.263583][ T4913] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.324: bg 0: block 248: padding at end of block bitmap is not set [ 64.284437][ T4913] EXT4-fs error (device loop4): ext4_acquire_dquot:6935: comm syz.4.324: Failed to acquire dquot type 1 [ 64.298563][ T4894] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.299603][ T4913] EXT4-fs (loop4): 1 truncate cleaned up [ 64.375373][ T4913] lo speed is unknown, defaulting to 1000 [ 64.388011][ T4894] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.636824][ T4929] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.685679][ T4929] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.729802][ T4948] netlink: 172 bytes leftover after parsing attributes in process `syz.4.333'. [ 64.755708][ T4929] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.801415][ T4957] syz.4.333: attempt to access beyond end of device [ 64.801415][ T4957] loop8: rw=0, sector=0, nr_sectors = 1 limit=0 [ 64.815296][ T4957] FAT-fs (loop8): unable to read boot sector [ 64.835753][ T4929] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.981986][ T4976] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 65.006841][ T4976] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 65.272149][ T5011] TCP: tcp_parse_options: Illegal window scaling value 53 > 14 received [ 65.287940][ T5011] rdma_rxe: rxe_newlink: failed to add veth0_to_bond [ 65.454515][ T30] kauditd_printk_skb: 110 callbacks suppressed [ 65.454533][ T30] audit: type=1400 audit(1748490990.083:985): avc: denied { ioctl } for pid=5033 comm="syz.1.340" path="socket:[8450]" dev="sockfs" ino=8450 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 65.522011][ T5038] loop1: detected capacity change from 0 to 1024 [ 65.534296][ T30] audit: type=1400 audit(1748490990.163:986): avc: denied { mounton } for pid=5037 comm="syz.1.342" path="/60/file0" dev="tmpfs" ino=342 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 65.570397][ T5038] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (12806!=20869) [ 65.609435][ T5038] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a842c018, mo2=0002] [ 65.627082][ T5043] netlink: 48 bytes leftover after parsing attributes in process `syz.0.341'. [ 65.639655][ T5038] System zones: 0-1, 3-36 [ 65.644979][ T5038] EXT4-fs (loop1): orphan cleanup on readonly fs [ 65.654472][ T5038] EXT4-fs (loop1): 1 orphan inode deleted [ 65.665892][ T30] audit: type=1400 audit(1748490990.293:987): avc: denied { mount } for pid=5037 comm="syz.1.342" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 65.690871][ T30] audit: type=1400 audit(1748490990.293:988): avc: denied { open } for pid=5041 comm="syz.4.343" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 65.730345][ T30] audit: type=1400 audit(1748490990.293:989): avc: denied { kernel } for pid=5041 comm="syz.4.343" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 65.758249][ T30] audit: type=1400 audit(1748490990.323:990): avc: denied { write } for pid=5037 comm="syz.1.342" name="001" dev="devtmpfs" ino=162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 65.797980][ T30] audit: type=1400 audit(1748490990.423:991): avc: denied { map } for pid=5037 comm="syz.1.342" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 65.798733][ T5038] vhci_hcd: invalid port number 96 [ 65.830541][ T30] audit: type=1400 audit(1748490990.453:992): avc: denied { create } for pid=5041 comm="syz.4.343" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 65.834098][ T5038] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 65.881901][ T30] audit: type=1400 audit(1748490990.503:993): avc: denied { unmount } for pid=3327 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 65.936699][ T5049] TCP: tcp_parse_options: Illegal window scaling value 53 > 14 received [ 65.951551][ T5049] rdma_rxe: rxe_newlink: failed to add veth0_to_bond [ 66.106144][ T30] audit: type=1400 audit(1748490990.733:994): avc: denied { name_bind } for pid=5050 comm="syz.1.346" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 66.391120][ T5054] loop0: detected capacity change from 0 to 1024 [ 66.539160][ T5069] loop4: detected capacity change from 0 to 512 [ 66.558458][ T5069] ext4 filesystem being mounted at /81/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 66.619877][ T5079] loop4: detected capacity change from 0 to 1024 [ 66.634731][ T5079] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (12806!=20869) [ 66.655109][ T5079] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a842c018, mo2=0002] [ 66.666376][ T5079] System zones: 0-1, 3-36 [ 66.674108][ T5079] EXT4-fs (loop4): orphan cleanup on readonly fs [ 66.686677][ T5079] EXT4-fs (loop4): 1 orphan inode deleted [ 66.837455][ T5099] loop4: detected capacity change from 0 to 1024 [ 66.855725][ T5099] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (12806!=20869) [ 66.871886][ T5099] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a842c018, mo2=0002] [ 66.907341][ T5099] System zones: 0-1, 3-36 [ 66.915652][ T5099] EXT4-fs (loop4): orphan cleanup on readonly fs [ 66.927404][ T5099] EXT4-fs (loop4): 1 orphan inode deleted [ 66.991425][ T5099] vhci_hcd: invalid port number 96 [ 66.997514][ T5099] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 67.161354][ T5134] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 67.193231][ T5134] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 67.365629][ T5154] loop0: detected capacity change from 0 to 1024 [ 67.474281][ T5160] syz.0.362 uses obsolete (PF_INET,SOCK_PACKET) [ 67.534886][ T5160] netlink: 4 bytes leftover after parsing attributes in process `syz.0.362'. [ 67.599981][ T4894] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.616373][ T4894] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.641447][ T4894] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.660025][ T4894] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.759310][ T4929] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.775598][ T4929] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.791098][ T4929] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.805876][ T4929] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.816731][ T5170] netlink: 'syz.2.366': attribute type 5 has an invalid length. [ 67.825876][ T5170] netlink: 152 bytes leftover after parsing attributes in process `syz.2.366'. [ 67.857181][ T5170] : renamed from bond0 (while UP) [ 67.882808][ T5172] loop3: detected capacity change from 0 to 1024 [ 67.899702][ T5172] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (12806!=20869) [ 67.925609][ T5172] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a842c018, mo2=0002] [ 67.938694][ T5172] System zones: 0-1, 3-36 [ 67.945629][ T5172] EXT4-fs (loop3): orphan cleanup on readonly fs [ 67.983166][ T5172] EXT4-fs (loop3): 1 orphan inode deleted [ 68.075275][ T5172] vhci_hcd: invalid port number 96 [ 68.083504][ T5172] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 68.282937][ T5202] sd 0:0:1:0: device reset [ 68.302152][ T5205] loop2: detected capacity change from 0 to 1024 [ 68.311472][ T5202] loop3: detected capacity change from 0 to 164 [ 68.314643][ T5205] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (12806!=20869) [ 68.346572][ T5202] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 68.366924][ T5205] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a842c018, mo2=0002] [ 68.379248][ T5205] System zones: 0-1, 3-36 [ 68.393742][ T5205] EXT4-fs (loop2): orphan cleanup on readonly fs [ 68.405393][ T5205] EXT4-fs (loop2): 1 orphan inode deleted [ 68.510899][ T5205] vhci_hcd: invalid port number 96 [ 68.516657][ T5205] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 68.593319][ T5223] xt_TPROXY: Can be used only with -p tcp or -p udp [ 68.781797][ T5242] loop2: detected capacity change from 0 to 1024 [ 68.908201][ T5255] loop2: detected capacity change from 0 to 1024 [ 68.936247][ T5255] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (12806!=20869) [ 68.951697][ T5258] loop1: detected capacity change from 0 to 1024 [ 68.972166][ T5258] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 68.984226][ T5258] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 68.998584][ T5255] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a842c018, mo2=0002] [ 69.003820][ T5258] JBD2: no valid journal superblock found [ 69.009025][ T5255] System zones: 0-1 [ 69.014557][ T5258] EXT4-fs (loop1): Could not load journal inode [ 69.014599][ T5255] , 3-36 [ 69.032936][ T5255] EXT4-fs (loop2): orphan cleanup on readonly fs [ 69.042731][ T5255] EXT4-fs (loop2): 1 orphan inode deleted [ 69.136990][ T5255] vhci_hcd: invalid port number 96 [ 69.142732][ T5255] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 69.224895][ T5258] x_tables: duplicate underflow at hook 3 [ 69.455932][ T5269] loop2: detected capacity change from 0 to 512 [ 69.490087][ T5269] EXT4-fs (loop2): orphan cleanup on readonly fs [ 69.518385][ T5269] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.386: bad orphan inode 13 [ 69.532336][ T5269] ext4_test_bit(bit=12, block=18) = 1 [ 69.540766][ T5269] is_bad_inode(inode)=0 [ 69.540776][ T5269] NEXT_ORPHAN(inode)=2130706432 [ 69.540811][ T5269] max_ino=32 [ 69.540820][ T5269] i_nlink=1 [ 69.571640][ T5269] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 69.657546][ T5273] netlink: 244 bytes leftover after parsing attributes in process `syz.0.387'. [ 69.682781][ T5269] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.386: bg 0: block 248: padding at end of block bitmap is not set [ 69.702485][ T5276] lo speed is unknown, defaulting to 1000 [ 69.815923][ T5269] EXT4-fs error (device loop2): ext4_acquire_dquot:6935: comm syz.2.386: Failed to acquire dquot type 1 [ 69.843506][ T5292] netlink: 'syz.1.394': attribute type 13 has an invalid length. [ 69.852749][ T5269] EXT4-fs warning (device loop2): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 69.904302][ T5296] loop3: detected capacity change from 0 to 164 [ 69.922937][ T5296] syz.3.396: attempt to access beyond end of device [ 69.922937][ T5296] loop3: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 69.943345][ T5269] syz.2.386 (5269) used greatest stack depth: 9272 bytes left [ 69.945298][ T5296] syz.3.396: attempt to access beyond end of device [ 69.945298][ T5296] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 70.007430][ T5294] loop0: detected capacity change from 0 to 512 [ 70.041414][ T5294] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 70.063627][ T5299] loop2: detected capacity change from 0 to 512 [ 70.064160][ T5292] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 70.087752][ T5292] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 70.092726][ T5299] EXT4-fs (loop2): orphan cleanup on readonly fs [ 70.120754][ T5299] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.397: bg 0: block 248: padding at end of block bitmap is not set [ 70.138333][ T5299] EXT4-fs error (device loop2): ext4_acquire_dquot:6935: comm syz.2.397: Failed to acquire dquot type 1 [ 70.152820][ T5294] EXT4-fs (loop0): 1 orphan inode deleted [ 70.155821][ T5299] EXT4-fs (loop2): 1 truncate cleaned up [ 70.163840][ T5294] ext4 filesystem being mounted at /91/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 70.177607][ T3563] EXT4-fs error (device loop0): ext4_release_dquot:6971: comm kworker/u8:29: Failed to release dquot type 1 [ 70.215362][ T5292] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.225814][ T5292] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.241174][ T5292] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.252824][ T5292] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.313876][ T5299] lo speed is unknown, defaulting to 1000 [ 70.423063][ T5316] TCP: tcp_parse_options: Illegal window scaling value 53 > 14 received [ 70.488483][ T30] kauditd_printk_skb: 270 callbacks suppressed [ 70.488501][ T30] audit: type=1400 audit(1748490995.113:1258): avc: denied { create } for pid=5315 comm="syz.0.400" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 70.497990][ T5316] rdma_rxe: rxe_newlink: failed to add veth0_to_bond [ 70.517766][ T30] audit: type=1400 audit(1748490995.123:1259): avc: denied { create } for pid=5315 comm="syz.0.400" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 70.547606][ T30] audit: type=1400 audit(1748490995.123:1260): avc: denied { write } for pid=5315 comm="syz.0.400" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 70.575153][ T30] audit: type=1400 audit(1748490995.153:1261): avc: denied { getopt } for pid=5315 comm="syz.0.400" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 70.596705][ T30] audit: type=1400 audit(1748490995.193:1262): avc: denied { setopt } for pid=5319 comm="syz.4.402" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 70.629420][ T5318] loop1: detected capacity change from 0 to 1024 [ 70.655627][ T5323] FAULT_INJECTION: forcing a failure. [ 70.655627][ T5323] name failslab, interval 1, probability 0, space 0, times 0 [ 70.669337][ T5323] CPU: 1 UID: 0 PID: 5323 Comm: syz.0.404 Not tainted 6.15.0-syzkaller-03645-g3d413f0cfd7e #0 PREEMPT(voluntary) [ 70.669407][ T5323] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 70.669421][ T5323] Call Trace: [ 70.669482][ T5323] [ 70.669492][ T5323] __dump_stack+0x1d/0x30 [ 70.669586][ T5323] dump_stack_lvl+0xe8/0x140 [ 70.669612][ T5323] dump_stack+0x15/0x1b [ 70.669706][ T5323] should_fail_ex+0x265/0x280 [ 70.669747][ T5323] should_failslab+0x8c/0xb0 [ 70.669772][ T5323] kmem_cache_alloc_node_noprof+0x57/0x320 [ 70.669817][ T5323] ? __alloc_skb+0x101/0x320 [ 70.669852][ T5323] __alloc_skb+0x101/0x320 [ 70.669910][ T5323] netlink_alloc_large_skb+0xba/0xf0 [ 70.669933][ T5323] netlink_sendmsg+0x3cf/0x6b0 [ 70.669962][ T5323] ? __pfx_netlink_sendmsg+0x10/0x10 [ 70.669995][ T5323] __sock_sendmsg+0x145/0x180 [ 70.670110][ T5323] ____sys_sendmsg+0x31e/0x4e0 [ 70.670142][ T5323] ___sys_sendmsg+0x17b/0x1d0 [ 70.670198][ T5323] __x64_sys_sendmsg+0xd4/0x160 [ 70.670239][ T5323] x64_sys_call+0x2999/0x2fb0 [ 70.670262][ T5323] do_syscall_64+0xd2/0x200 [ 70.670309][ T5323] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 70.670343][ T5323] ? clear_bhb_loop+0x40/0x90 [ 70.670372][ T5323] ? clear_bhb_loop+0x40/0x90 [ 70.670401][ T5323] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 70.670481][ T5323] RIP: 0033:0x7f5d7b34e969 [ 70.670500][ T5323] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 70.670518][ T5323] RSP: 002b:00007f5d799b7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 70.670539][ T5323] RAX: ffffffffffffffda RBX: 00007f5d7b575fa0 RCX: 00007f5d7b34e969 [ 70.670554][ T5323] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 70.670568][ T5323] RBP: 00007f5d799b7090 R08: 0000000000000000 R09: 0000000000000000 [ 70.670653][ T5323] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 70.670667][ T5323] R13: 0000000000000000 R14: 00007f5d7b575fa0 R15: 00007ffd4fce8be8 [ 70.670687][ T5323] [ 70.910242][ T30] audit: type=1400 audit(1748490995.353:1263): avc: denied { bind } for pid=5319 comm="syz.4.402" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 70.931861][ T30] audit: type=1400 audit(1748490995.353:1264): avc: denied { name_bind } for pid=5319 comm="syz.4.402" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 70.954397][ T30] audit: type=1400 audit(1748490995.353:1265): avc: denied { node_bind } for pid=5319 comm="syz.4.402" saddr=ff02::1 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 70.986046][ T30] audit: type=1400 audit(1748490995.603:1266): avc: denied { read } for pid=5319 comm="syz.4.402" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 71.009408][ T5326] loop2: detected capacity change from 0 to 512 [ 71.032455][ T5326] EXT4-fs error (device loop2): ext4_orphan_get:1391: inode #15: comm syz.2.403: casefold flag without casefold feature [ 71.051206][ T5326] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.403: couldn't read orphan inode 15 (err -117) [ 71.123573][ T30] audit: type=1400 audit(1748490995.743:1267): avc: denied { setattr } for pid=5324 comm="syz.2.403" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 71.335215][ T5351] loop3: detected capacity change from 0 to 164 [ 71.366914][ T5353] lo speed is unknown, defaulting to 1000 [ 71.367025][ T5353] lo speed is unknown, defaulting to 1000 [ 71.367427][ T5353] lo speed is unknown, defaulting to 1000 [ 71.369874][ T5353] infiniband s…z0: RDMA CMA: cma_listen_on_dev, error -98 [ 71.381843][ T5353] lo speed is unknown, defaulting to 1000 [ 71.382844][ T5353] lo speed is unknown, defaulting to 1000 [ 71.384081][ T5353] lo speed is unknown, defaulting to 1000 [ 71.384551][ T5353] lo speed is unknown, defaulting to 1000 [ 71.385419][ T5353] lo speed is unknown, defaulting to 1000 [ 71.646812][ T5357] loop1: detected capacity change from 0 to 1024 [ 71.748416][ T5357] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (12806!=20869) [ 71.760852][ T5357] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a842c018, mo2=0002] [ 71.825939][ T5357] System zones: 0-1, 3-36 [ 71.831200][ T5357] EXT4-fs (loop1): orphan cleanup on readonly fs [ 71.851781][ T5351] syz.3.413: attempt to access beyond end of device [ 71.851781][ T5351] loop3: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 71.875850][ T5357] EXT4-fs (loop1): 1 orphan inode deleted [ 71.913666][ T5351] syz.3.413: attempt to access beyond end of device [ 71.913666][ T5351] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 72.096492][ T5387] netlink: 'syz.2.415': attribute type 5 has an invalid length. [ 72.105747][ T5387] netlink: 152 bytes leftover after parsing attributes in process `syz.2.415'. [ 72.121784][ T5386] loop4: detected capacity change from 0 to 1024 [ 72.144901][ T5357] vhci_hcd: invalid port number 96 [ 72.151037][ T5357] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 72.226468][ T5399] loop0: detected capacity change from 0 to 1024 [ 72.259959][ T5399] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (12806!=20869) [ 72.343595][ T5399] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a842c018, mo2=0002] [ 72.364541][ T5399] System zones: 0-1, 3-36 [ 72.369661][ T5399] EXT4-fs (loop0): orphan cleanup on readonly fs [ 72.419619][ T5416] loop3: detected capacity change from 0 to 512 [ 72.470335][ T5424] netlink: 48 bytes leftover after parsing attributes in process `syz.1.422'. [ 72.505942][ T5399] EXT4-fs (loop0): 1 orphan inode deleted [ 72.513406][ T5416] EXT4-fs (loop3): orphan cleanup on readonly fs [ 72.538891][ T5416] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.421: bg 0: block 248: padding at end of block bitmap is not set [ 72.611144][ T5399] vhci_hcd: invalid port number 96 [ 72.617157][ T5399] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 72.634632][ T5416] EXT4-fs error (device loop3): ext4_acquire_dquot:6935: comm syz.3.421: Failed to acquire dquot type 1 [ 72.685060][ T5416] EXT4-fs (loop3): 1 truncate cleaned up [ 72.705785][ T5436] loop2: detected capacity change from 0 to 164 [ 72.721499][ T5438] loop4: detected capacity change from 0 to 1024 [ 72.728938][ T5435] netlink: 'syz.1.429': attribute type 4 has an invalid length. [ 72.740265][ T5436] syz.2.430: attempt to access beyond end of device [ 72.740265][ T5436] loop2: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 72.745330][ T5405] lo speed is unknown, defaulting to 1000 [ 72.767166][ T5438] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (12806!=20869) [ 72.795387][ T5438] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a842c018, mo2=0002] [ 72.804951][ T5436] syz.2.430: attempt to access beyond end of device [ 72.804951][ T5436] loop2: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 72.832433][ T5438] System zones: 0-1, 3-36 [ 72.837834][ T5438] EXT4-fs (loop4): orphan cleanup on readonly fs [ 72.874661][ T5447] capability: warning: `syz.2.435' uses 32-bit capabilities (legacy support in use) [ 72.887223][ T5438] EXT4-fs (loop4): 1 orphan inode deleted [ 72.897134][ T5447] FAULT_INJECTION: forcing a failure. [ 72.897134][ T5447] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 72.912380][ T5447] CPU: 0 UID: 0 PID: 5447 Comm: syz.2.435 Not tainted 6.15.0-syzkaller-03645-g3d413f0cfd7e #0 PREEMPT(voluntary) [ 72.912470][ T5447] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 72.912485][ T5447] Call Trace: [ 72.912492][ T5447] [ 72.912501][ T5447] __dump_stack+0x1d/0x30 [ 72.912590][ T5447] dump_stack_lvl+0xe8/0x140 [ 72.912615][ T5447] dump_stack+0x15/0x1b [ 72.912637][ T5447] should_fail_ex+0x265/0x280 [ 72.912676][ T5447] should_fail+0xb/0x20 [ 72.912845][ T5447] should_fail_usercopy+0x1a/0x20 [ 72.912888][ T5447] _copy_from_user+0x1c/0xb0 [ 72.912906][ T5447] __sys_bpf+0x178/0x790 [ 72.913025][ T5447] __x64_sys_bpf+0x41/0x50 [ 72.913129][ T5447] x64_sys_call+0x2478/0x2fb0 [ 72.913159][ T5447] do_syscall_64+0xd2/0x200 [ 72.913197][ T5447] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 72.913233][ T5447] ? clear_bhb_loop+0x40/0x90 [ 72.913276][ T5447] ? clear_bhb_loop+0x40/0x90 [ 72.913396][ T5447] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 72.913433][ T5447] RIP: 0033:0x7f0bf6a2e969 [ 72.913452][ T5447] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 72.913473][ T5447] RSP: 002b:00007f0bf5097038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 72.913495][ T5447] RAX: ffffffffffffffda RBX: 00007f0bf6c55fa0 RCX: 00007f0bf6a2e969 [ 72.913510][ T5447] RDX: 0000000000000094 RSI: 00002000000005c0 RDI: 0000000000000005 [ 72.913587][ T5447] RBP: 00007f0bf5097090 R08: 0000000000000000 R09: 0000000000000000 [ 72.913631][ T5447] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 72.913647][ T5447] R13: 0000000000000000 R14: 00007f0bf6c55fa0 R15: 00007ffed60f3738 [ 72.913672][ T5447] [ 73.160425][ T5405] lo speed is unknown, defaulting to 1000 [ 73.180440][ T5455] netlink: 'syz.1.433': attribute type 5 has an invalid length. [ 73.188619][ T5455] netlink: 152 bytes leftover after parsing attributes in process `syz.1.433'. [ 73.230442][ T5455] : renamed from bond0 [ 73.243475][ T5438] vhci_hcd: invalid port number 96 [ 73.249813][ T5438] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 73.296266][ T3326] EXT4-fs unmount: 68 callbacks suppressed [ 73.296286][ T3326] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.320479][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.332601][ T5460] loop1: detected capacity change from 0 to 1024 [ 73.343271][ T5460] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (12806!=20869) [ 73.361304][ T5460] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a842c018, mo2=0002] [ 73.388489][ T5460] System zones: 0-1, 3-36 [ 73.391615][ T5458] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 73.394656][ T5460] EXT4-fs (loop1): orphan cleanup on readonly fs [ 73.464161][ T5460] EXT4-fs (loop1): 1 orphan inode deleted [ 73.475649][ T5467] netlink: 48 bytes leftover after parsing attributes in process `syz.3.440'. [ 73.478180][ T5460] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 73.511303][ T5471] netlink: 'syz.0.436': attribute type 3 has an invalid length. [ 73.547906][ T5460] vhci_hcd: invalid port number 96 [ 73.553817][ T5460] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 73.573025][ T3327] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.621586][ T5476] netlink: 'syz.1.444': attribute type 4 has an invalid length. [ 74.020731][ T5481] loop0: detected capacity change from 0 to 1024 [ 74.028725][ T5481] EXT4-fs: Ignoring removed orlov option [ 74.037585][ T5481] EXT4-fs (loop0): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 74.055254][ T5481] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.069322][ T5481] FAULT_INJECTION: forcing a failure. [ 74.069322][ T5481] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 74.083878][ T5481] CPU: 1 UID: 0 PID: 5481 Comm: syz.0.446 Not tainted 6.15.0-syzkaller-03645-g3d413f0cfd7e #0 PREEMPT(voluntary) [ 74.083976][ T5481] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 74.083990][ T5481] Call Trace: [ 74.083999][ T5481] [ 74.084008][ T5481] __dump_stack+0x1d/0x30 [ 74.084035][ T5481] dump_stack_lvl+0xe8/0x140 [ 74.084056][ T5481] dump_stack+0x15/0x1b [ 74.084073][ T5481] should_fail_ex+0x265/0x280 [ 74.084185][ T5481] should_fail+0xb/0x20 [ 74.084215][ T5481] should_fail_usercopy+0x1a/0x20 [ 74.084245][ T5481] strncpy_from_user+0x25/0x230 [ 74.084318][ T5481] ? kmem_cache_alloc_noprof+0x186/0x310 [ 74.084403][ T5481] ? getname_flags+0x80/0x3b0 [ 74.084424][ T5481] getname_flags+0xae/0x3b0 [ 74.084447][ T5481] __x64_sys_mkdir+0x33/0x50 [ 74.084490][ T5481] x64_sys_call+0x2289/0x2fb0 [ 74.084559][ T5481] do_syscall_64+0xd2/0x200 [ 74.084590][ T5481] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 74.084616][ T5481] ? clear_bhb_loop+0x40/0x90 [ 74.084640][ T5481] ? clear_bhb_loop+0x40/0x90 [ 74.084667][ T5481] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.084703][ T5481] RIP: 0033:0x7f5d7b34e969 [ 74.084722][ T5481] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 74.084742][ T5481] RSP: 002b:00007f5d799b7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 74.084776][ T5481] RAX: ffffffffffffffda RBX: 00007f5d7b575fa0 RCX: 00007f5d7b34e969 [ 74.084791][ T5481] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000000 [ 74.084806][ T5481] RBP: 00007f5d799b7090 R08: 0000000000000000 R09: 0000000000000000 [ 74.084817][ T5481] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 74.084830][ T5481] R13: 0000000000000000 R14: 00007f5d7b575fa0 R15: 00007ffd4fce8be8 [ 74.084851][ T5481] [ 74.347784][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.395250][ T5488] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 74.415322][ T5493] lo speed is unknown, defaulting to 1000 [ 74.583590][ T5493] lo speed is unknown, defaulting to 1000 [ 74.606573][ T5515] loop4: detected capacity change from 0 to 164 [ 74.617924][ T5516] netlink: 4 bytes leftover after parsing attributes in process `syz.2.459'. [ 74.632700][ T5515] syz.4.460: attempt to access beyond end of device [ 74.632700][ T5515] loop4: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 74.662264][ T5515] syz.4.460: attempt to access beyond end of device [ 74.662264][ T5515] loop4: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 74.731080][ T5525] loop3: detected capacity change from 0 to 1024 [ 74.749084][ T5527] netlink: 'syz.2.462': attribute type 15 has an invalid length. [ 74.767361][ T5527] FAULT_INJECTION: forcing a failure. [ 74.767361][ T5527] name failslab, interval 1, probability 0, space 0, times 0 [ 74.781014][ T5527] CPU: 0 UID: 0 PID: 5527 Comm: syz.2.462 Not tainted 6.15.0-syzkaller-03645-g3d413f0cfd7e #0 PREEMPT(voluntary) [ 74.781041][ T5527] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 74.781054][ T5527] Call Trace: [ 74.781061][ T5527] [ 74.781069][ T5527] __dump_stack+0x1d/0x30 [ 74.781119][ T5527] dump_stack_lvl+0xe8/0x140 [ 74.781143][ T5527] dump_stack+0x15/0x1b [ 74.781174][ T5527] should_fail_ex+0x265/0x280 [ 74.781210][ T5527] should_failslab+0x8c/0xb0 [ 74.781251][ T5527] kmem_cache_alloc_noprof+0x50/0x310 [ 74.781277][ T5527] ? skb_clone+0x151/0x1f0 [ 74.781312][ T5527] skb_clone+0x151/0x1f0 [ 74.781346][ T5527] __netlink_deliver_tap+0x2c9/0x500 [ 74.781382][ T5527] netlink_sendskb+0x126/0x150 [ 74.781425][ T5527] netlink_unicast+0x28a/0x670 [ 74.781456][ T5527] netlink_ack+0x4c8/0x500 [ 74.781490][ T5527] netlink_rcv_skb+0x192/0x220 [ 74.781634][ T5527] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 74.781731][ T5527] rtnetlink_rcv+0x1c/0x30 [ 74.781770][ T5527] netlink_unicast+0x59e/0x670 [ 74.781843][ T5527] netlink_sendmsg+0x58b/0x6b0 [ 74.781999][ T5527] ? __pfx_netlink_sendmsg+0x10/0x10 [ 74.782034][ T5527] __sock_sendmsg+0x145/0x180 [ 74.782076][ T5527] ____sys_sendmsg+0x31e/0x4e0 [ 74.782170][ T5527] ___sys_sendmsg+0x17b/0x1d0 [ 74.782225][ T5527] __x64_sys_sendmsg+0xd4/0x160 [ 74.782301][ T5527] x64_sys_call+0x2999/0x2fb0 [ 74.782411][ T5527] do_syscall_64+0xd2/0x200 [ 74.782499][ T5527] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 74.782534][ T5527] ? clear_bhb_loop+0x40/0x90 [ 74.782562][ T5527] ? clear_bhb_loop+0x40/0x90 [ 74.782668][ T5527] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.782696][ T5527] RIP: 0033:0x7f0bf6a2e969 [ 74.782716][ T5527] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 74.782749][ T5527] RSP: 002b:00007f0bf5097038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 74.782773][ T5527] RAX: ffffffffffffffda RBX: 00007f0bf6c55fa0 RCX: 00007f0bf6a2e969 [ 74.782789][ T5527] RDX: 0000000004040044 RSI: 0000200000000200 RDI: 0000000000000005 [ 74.782830][ T5527] RBP: 00007f0bf5097090 R08: 0000000000000000 R09: 0000000000000000 [ 74.782845][ T5527] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 74.782861][ T5527] R13: 0000000000000000 R14: 00007f0bf6c55fa0 R15: 00007ffed60f3738 [ 74.782940][ T5527] [ 75.052046][ T5525] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.087951][ T5529] lo speed is unknown, defaulting to 1000 [ 75.171344][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.192387][ T5529] lo speed is unknown, defaulting to 1000 [ 75.274797][ T5542] loop3: detected capacity change from 0 to 1024 [ 75.287866][ T5542] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 75.301118][ T5542] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 75.315872][ T5542] JBD2: no valid journal superblock found [ 75.322923][ T5542] EXT4-fs (loop3): Could not load journal inode [ 75.350879][ T5546] loop2: detected capacity change from 0 to 128 [ 75.378577][ T5546] syz.2.470: attempt to access beyond end of device [ 75.378577][ T5546] loop2: rw=34817, sector=97, nr_sectors = 32 limit=128 [ 75.525634][ T5554] TCP: tcp_parse_options: Illegal window scaling value 53 > 14 received [ 75.545875][ T30] kauditd_printk_skb: 215 callbacks suppressed [ 75.545894][ T30] audit: type=1400 audit(1748491000.173:1481): avc: denied { append } for pid=5549 comm="syz.0.471" name="loop7" dev="devtmpfs" ino=107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 75.579567][ T5552] lo speed is unknown, defaulting to 1000 [ 75.638001][ T5542] x_tables: duplicate underflow at hook 3 [ 75.665723][ T30] audit: type=1326 audit(1748491000.173:1482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5551 comm="gtp" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3b497de969 code=0x0 [ 75.735330][ T5552] lo speed is unknown, defaulting to 1000 [ 75.744077][ T5554] rdma_rxe: rxe_newlink: failed to add veth0_to_bond [ 75.828923][ T5560] lo speed is unknown, defaulting to 1000 [ 75.858760][ T30] audit: type=1400 audit(1748491000.483:1483): avc: denied { bind } for pid=5564 comm="syz.3.476" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 75.886317][ T5563] usb usb2: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 75.898687][ T5563] vhci_hcd: default hub control req: 6001 v8001 i0001 l0 [ 75.947076][ T30] audit: type=1400 audit(1748491000.483:1484): avc: denied { setopt } for pid=5564 comm="syz.3.476" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 75.970707][ T30] audit: type=1400 audit(1748491000.483:1485): avc: denied { read } for pid=5564 comm="syz.3.476" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 75.992106][ T30] audit: type=1326 audit(1748491000.513:1486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5559 comm="gtp" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5d7b34e969 code=0x0 [ 76.016747][ T30] audit: type=1400 audit(1748491000.533:1487): avc: denied { getopt } for pid=5562 comm="syz.2.475" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 76.061155][ T5560] lo speed is unknown, defaulting to 1000 [ 76.119903][ T5571] loop2: detected capacity change from 0 to 1024 [ 76.156969][ T5571] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.210056][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.291656][ T5582] loop2: detected capacity change from 0 to 1024 [ 76.336167][ T5582] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.372870][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.385121][ T5587] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 76.388791][ T30] audit: type=1400 audit(1748491001.013:1488): avc: denied { create } for pid=5592 comm="syz.1.485" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 76.431507][ T5593] loop1: detected capacity change from 0 to 128 [ 76.439356][ T5593] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 76.463922][ T5593] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 76.478223][ T5577] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.496458][ T5593] netlink: 'syz.1.485': attribute type 13 has an invalid length. [ 76.510626][ T30] audit: type=1400 audit(1748491001.053:1489): avc: denied { create } for pid=5592 comm="syz.1.485" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 76.531290][ T30] audit: type=1400 audit(1748491001.133:1490): avc: denied { create } for pid=5594 comm="syz.2.486" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 76.537503][ T5598] loop4: detected capacity change from 0 to 1024 [ 76.553862][ T5592] cgroup: fork rejected by pids controller in /syz1 [ 76.584501][ T5598] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.607522][ T5577] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.643334][ T5595] loop2: detected capacity change from 0 to 1024 [ 76.660874][ T5595] EXT4-fs: Ignoring removed orlov option [ 76.668646][ T5577] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.683766][ T5595] EXT4-fs (loop2): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 76.706264][ T3326] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.726828][ T5577] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.757493][ T5595] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.819625][ T5714] loop0: detected capacity change from 0 to 1024 [ 76.856559][ T5714] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (12806!=20869) [ 76.880316][ T5577] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.932980][ T5714] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a842c018, mo2=0002] [ 76.942721][ T5714] System zones: 0-1, 3-36 [ 76.948222][ T5714] EXT4-fs (loop0): orphan cleanup on readonly fs [ 76.969820][ T5577] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.981976][ T5714] EXT4-fs (loop0): 1 orphan inode deleted [ 76.989917][ T5577] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.991457][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.999905][ T5714] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 77.048938][ T5577] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.186367][ T5722] loop4: detected capacity change from 0 to 164 [ 77.203778][ T5714] vhci_hcd: invalid port number 96 [ 77.210618][ T5714] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 77.233455][ T5722] syz.4.495: attempt to access beyond end of device [ 77.233455][ T5722] loop4: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 77.277635][ T5722] syz.4.495: attempt to access beyond end of device [ 77.277635][ T5722] loop4: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 77.296300][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.412006][ T5740] loop4: detected capacity change from 0 to 1024 [ 77.434669][ T5740] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (12806!=20869) [ 77.468816][ T5747] netlink: 'syz.0.498': attribute type 5 has an invalid length. [ 77.477218][ T5747] netlink: 152 bytes leftover after parsing attributes in process `syz.0.498'. [ 77.500596][ T5740] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a842c018, mo2=0002] [ 77.520461][ T5740] System zones: 0-1, 3-36 [ 77.564533][ T5740] EXT4-fs (loop4): orphan cleanup on readonly fs [ 77.599265][ T3544]  (unregistering): (slave bond_slave_0): Releasing backup interface [ 77.628852][ T3544]  (unregistering): (slave bond_slave_1): Releasing backup interface [ 77.646899][ T3544]  (unregistering): Released all slaves [ 77.646972][ T5740] EXT4-fs (loop4): 1 orphan inode deleted [ 77.706377][ T5740] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 77.709104][ T5727] lo speed is unknown, defaulting to 1000 [ 77.746353][ T5776] loop2: detected capacity change from 0 to 1024 [ 77.787491][ T5776] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (12806!=20869) [ 77.833924][ T5776] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a842c018, mo2=0002] [ 77.852956][ T5776] System zones: 0-1, 3-36 [ 77.859686][ T5776] EXT4-fs (loop2): orphan cleanup on readonly fs [ 77.871605][ T5727] lo speed is unknown, defaulting to 1000 [ 77.880365][ T5776] EXT4-fs (loop2): 1 orphan inode deleted [ 77.889494][ T5776] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 77.914003][ T5776] vhci_hcd: invalid port number 96 [ 77.919770][ T5776] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 77.962033][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.975179][ T3544] hsr_slave_0: left promiscuous mode [ 77.983862][ T3544] hsr_slave_1: left promiscuous mode [ 77.990295][ T3544] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 77.999783][ T3544] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 78.026094][ T5740] vhci_hcd: invalid port number 96 [ 78.031826][ T5740] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 78.041200][ T5798] program syz.0.509 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 78.075649][ T3326] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.125291][ T3544] team0 (unregistering): Port device team_slave_1 removed [ 78.147789][ T3544] team0 (unregistering): Port device team_slave_0 removed [ 78.230457][ T5811] netlink: 'syz.2.512': attribute type 4 has an invalid length. [ 78.371984][ T5830] TCP: tcp_parse_options: Illegal window scaling value 53 > 14 received [ 78.389769][ T5832] TCP: tcp_parse_options: Illegal window scaling value 53 > 14 received [ 78.391314][ T5727] chnl_net:caif_netlink_parms(): no params data found [ 78.400243][ T5830] syz2: rxe_newlink: already configured on veth0_to_bond [ 78.440395][ T5832] rdma_rxe: rxe_newlink: failed to add veth0_to_bond [ 78.568029][ T5855] netlink: 'syz.2.517': attribute type 5 has an invalid length. [ 78.577412][ T5855] netlink: 152 bytes leftover after parsing attributes in process `syz.2.517'. [ 78.598420][ T5727] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.607116][ T5727] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.616061][ T5727] bridge_slave_0: entered allmulticast mode [ 78.623512][ T5727] bridge_slave_0: entered promiscuous mode [ 78.632966][ T5727] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.641391][ T5727] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.646337][ T5857] loop4: detected capacity change from 0 to 1024 [ 78.658705][ T5727] bridge_slave_1: entered allmulticast mode [ 78.666229][ T5727] bridge_slave_1: entered promiscuous mode [ 78.678956][ T5857] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (12806!=20869) [ 78.712547][ T5857] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a842c018, mo2=0002] [ 78.729453][ T5857] System zones: 0-1, 3-36 [ 78.736714][ T5857] EXT4-fs (loop4): orphan cleanup on readonly fs [ 78.745970][ T5727] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.770363][ T5857] EXT4-fs (loop4): 1 orphan inode deleted [ 78.774393][ T5864] Unknown options in mask 5 [ 78.780093][ T5727] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.793312][ T5857] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 78.826239][ T5864] loop2: detected capacity change from 0 to 512 [ 78.835501][ T5864] EXT4-fs: dax option not supported [ 78.851744][ T5870] netlink: 'syz.3.524': attribute type 4 has an invalid length. [ 78.862714][ T5727] team0: Port device team_slave_0 added [ 78.865416][ T5857] vhci_hcd: invalid port number 96 [ 78.874342][ T5857] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 78.890935][ T5727] team0: Port device team_slave_1 added [ 78.942793][ T3326] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.978831][ T5727] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.986353][ T5727] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.015320][ T5727] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.043504][ T5727] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.051013][ T5727] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.080047][ T5727] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.160668][ T5898] loop4: detected capacity change from 0 to 164 [ 79.199528][ T5902] loop2: detected capacity change from 0 to 1024 [ 79.219452][ T5904] netlink: 48 bytes leftover after parsing attributes in process `syz.3.531'. [ 79.245557][ T5898] syz.4.526: attempt to access beyond end of device [ 79.245557][ T5898] loop4: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 79.277882][ T5902] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.285006][ T5898] syz.4.526: attempt to access beyond end of device [ 79.285006][ T5898] loop4: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 79.368179][ T5727] hsr_slave_0: entered promiscuous mode [ 79.395735][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.411063][ T5727] hsr_slave_1: entered promiscuous mode [ 79.426066][ T5727] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.442472][ T5727] Cannot create hsr debugfs directory [ 79.493313][ T5927] netlink: 'syz.4.532': attribute type 5 has an invalid length. [ 79.501993][ T5927] netlink: 152 bytes leftover after parsing attributes in process `syz.4.532'. [ 79.571421][ T5934] loop2: detected capacity change from 0 to 256 [ 79.585163][ T5927] : renamed from bond0 (while UP) [ 79.710534][ T5944] netlink: 'syz.4.535': attribute type 4 has an invalid length. [ 79.723603][ T10] lo speed is unknown, defaulting to 1000 [ 79.730506][ T10] s…z0: Port: 1 Link DOWN [ 79.737789][ T9] lo speed is unknown, defaulting to 1000 [ 79.774613][ T9] lo speed is unknown, defaulting to 1000 [ 79.855929][ T5952] loop0: detected capacity change from 0 to 164 [ 79.871877][ T5952] syz.0.537: attempt to access beyond end of device [ 79.871877][ T5952] loop0: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 79.884170][ T5955] FAULT_INJECTION: forcing a failure. [ 79.884170][ T5955] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 79.901837][ T5955] CPU: 1 UID: 0 PID: 5955 Comm: syz.4.538 Not tainted 6.15.0-syzkaller-03645-g3d413f0cfd7e #0 PREEMPT(voluntary) [ 79.901874][ T5955] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 79.901935][ T5955] Call Trace: [ 79.901943][ T5955] [ 79.901952][ T5955] __dump_stack+0x1d/0x30 [ 79.901976][ T5955] dump_stack_lvl+0xe8/0x140 [ 79.901998][ T5955] dump_stack+0x15/0x1b [ 79.902019][ T5955] should_fail_ex+0x265/0x280 [ 79.902064][ T5955] should_fail+0xb/0x20 [ 79.902105][ T5955] should_fail_usercopy+0x1a/0x20 [ 79.902135][ T5955] _copy_from_user+0x1c/0xb0 [ 79.902153][ T5955] ___sys_sendmsg+0xc1/0x1d0 [ 79.902199][ T5955] __x64_sys_sendmsg+0xd4/0x160 [ 79.902311][ T5955] x64_sys_call+0x2999/0x2fb0 [ 79.902339][ T5955] do_syscall_64+0xd2/0x200 [ 79.902372][ T5955] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 79.902399][ T5955] ? clear_bhb_loop+0x40/0x90 [ 79.902444][ T5955] ? clear_bhb_loop+0x40/0x90 [ 79.902466][ T5955] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.902487][ T5955] RIP: 0033:0x7f2b5d80e969 [ 79.902502][ T5955] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 79.902524][ T5955] RSP: 002b:00007f2b5be77038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 79.902598][ T5955] RAX: ffffffffffffffda RBX: 00007f2b5da35fa0 RCX: 00007f2b5d80e969 [ 79.902611][ T5955] RDX: 0000000000044040 RSI: 00002000000001c0 RDI: 0000000000000003 [ 79.902623][ T5955] RBP: 00007f2b5be77090 R08: 0000000000000000 R09: 0000000000000000 [ 79.902638][ T5955] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 79.902654][ T5955] R13: 0000000000000000 R14: 00007f2b5da35fa0 R15: 00007ffee4c73238 [ 79.902678][ T5955] [ 79.925086][ T5952] syz.0.537: attempt to access beyond end of device [ 79.925086][ T5952] loop0: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 79.951124][ T5945] loop3: detected capacity change from 0 to 8192 [ 79.963340][ T5727] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 80.151554][ T5727] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 80.164520][ T5727] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 80.198145][ T5727] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 80.224737][ T5970] TCP: tcp_parse_options: Illegal window scaling value 53 > 14 received [ 80.288971][ T5970] rdma_rxe: rxe_newlink: failed to add veth0_to_bond [ 80.371719][ T5727] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.402388][ T5727] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.438084][ T3576] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.445510][ T3576] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.506948][ T3597] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.515187][ T3597] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.541349][ T5727] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 80.556342][ T5997] netlink: 48 bytes leftover after parsing attributes in process `syz.3.546'. [ 80.723288][ T5727] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.836204][ T30] kauditd_printk_skb: 97 callbacks suppressed [ 80.836223][ T30] audit: type=1400 audit(1748491005.463:1588): avc: denied { load_policy } for pid=5974 comm="syz.0.544" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 80.879055][ T5975] SELinux: failed to load policy [ 80.972283][ T5727] veth0_vlan: entered promiscuous mode [ 80.997861][ T5727] veth1_vlan: entered promiscuous mode [ 81.037936][ T5727] veth0_macvtap: entered promiscuous mode [ 81.058561][ T5727] veth1_macvtap: entered promiscuous mode [ 81.073471][ T5727] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.102694][ T5727] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.121581][ T5727] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.131336][ T5727] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.141160][ T5727] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.151014][ T5727] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.199478][ T30] audit: type=1400 audit(1748491005.823:1589): avc: denied { mounton } for pid=5727 comm="syz-executor" path="/root/syzkaller.So85hM/syz-tmp" dev="sda1" ino=2047 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 81.232798][ T30] audit: type=1400 audit(1748491005.853:1590): avc: denied { mount } for pid=5727 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 81.257391][ T30] audit: type=1400 audit(1748491005.853:1591): avc: denied { mount } for pid=5727 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 81.282186][ T30] audit: type=1400 audit(1748491005.853:1592): avc: denied { mounton } for pid=5727 comm="syz-executor" path="/root/syzkaller.So85hM/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 81.312791][ T30] audit: type=1400 audit(1748491005.853:1593): avc: denied { mounton } for pid=5727 comm="syz-executor" path="/root/syzkaller.So85hM/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=11088 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 81.417775][ T30] audit: type=1400 audit(1748491005.973:1594): avc: denied { mounton } for pid=5727 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 81.443413][ T30] audit: type=1400 audit(1748491005.973:1595): avc: denied { mount } for pid=5727 comm="syz-executor" name="/" dev="gadgetfs" ino=3032 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 81.485189][ T6028] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.570159][ T6028] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.627720][ T6056] loop4: detected capacity change from 0 to 8192 [ 81.668220][ T6028] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.698299][ T30] audit: type=1400 audit(1748491006.313:1596): avc: denied { bind } for pid=6067 comm="syz.1.552" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 81.755707][ T6028] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.803856][ T30] audit: type=1400 audit(1748491006.403:1597): avc: denied { create } for pid=6067 comm="syz.1.552" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 81.844059][ T6070] loop1: detected capacity change from 0 to 2048 [ 81.861829][ T6028] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.886785][ T6028] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.902070][ T6028] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.923153][ T5355] Alternate GPT is invalid, using primary GPT. [ 81.930133][ T5355] loop1: p1 p2 p3 [ 81.946460][ T6070] Alternate GPT is invalid, using primary GPT. [ 81.953597][ T6070] loop1: p1 p2 p3 [ 82.014972][ T6091] lo speed is unknown, defaulting to 1000 [ 82.019196][ T6028] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.277698][ T6091] lo speed is unknown, defaulting to 1000 [ 82.375337][ T6133] loop1: detected capacity change from 0 to 164 [ 82.412825][ T6133] syz.1.559: attempt to access beyond end of device [ 82.412825][ T6133] loop1: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 82.432646][ T6130] lo speed is unknown, defaulting to 1000 [ 82.442256][ T6137] loop0: detected capacity change from 0 to 2048 [ 82.450915][ T6133] syz.1.559: attempt to access beyond end of device [ 82.450915][ T6133] loop1: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 82.497707][ T6139] netlink: 4 bytes leftover after parsing attributes in process `syz.1.562'. [ 82.508762][ T5355] loop0: p1 < > p4 [ 82.514472][ T5355] loop0: p4 size 8388608 extends beyond EOD, truncated [ 82.523019][ T6139] bridge_slave_1: left allmulticast mode [ 82.529721][ T6139] bridge_slave_1: left promiscuous mode [ 82.536205][ T6139] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.557691][ T6137] loop0: p1 < > p4 [ 82.557719][ T6139] bridge_slave_0: left allmulticast mode [ 82.569379][ T6139] bridge_slave_0: left promiscuous mode [ 82.575869][ T6139] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.582549][ T6137] loop0: p4 size 8388608 extends beyond EOD, truncated [ 82.652862][ T6130] lo speed is unknown, defaulting to 1000 [ 82.688524][ T6146] loop0: detected capacity change from 0 to 164 [ 82.715369][ T6146] syz.0.565: attempt to access beyond end of device [ 82.715369][ T6146] loop0: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 82.737193][ T6146] syz.0.565: attempt to access beyond end of device [ 82.737193][ T6146] loop0: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 83.134072][ T6186] loop4: detected capacity change from 0 to 164 [ 83.153836][ T6186] syz.4.574: attempt to access beyond end of device [ 83.153836][ T6186] loop4: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 83.203802][ T6186] syz.4.574: attempt to access beyond end of device [ 83.203802][ T6186] loop4: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 83.323517][ T6201] TCP: tcp_parse_options: Illegal window scaling value 53 > 14 received [ 83.342423][ T6202] loop3: detected capacity change from 0 to 1024 [ 83.345758][ T6201] rdma_rxe: rxe_newlink: failed to add veth0_to_bond [ 83.372076][ T6202] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 83.397342][ T6202] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 49 with max blocks 16 with error 28 [ 83.411600][ T6202] EXT4-fs (loop3): This should not happen!! Data will be lost [ 83.411600][ T6202] [ 83.421741][ T6202] EXT4-fs (loop3): Total free blocks count 0 [ 83.428865][ T6202] EXT4-fs (loop3): Free/Dirty block details [ 83.435564][ T6202] EXT4-fs (loop3): free_blocks=0 [ 83.441168][ T6202] EXT4-fs (loop3): dirty_blocks=0 [ 83.447574][ T6202] EXT4-fs (loop3): Block reservation details [ 83.454279][ T6202] EXT4-fs (loop3): i_reserved_data_blocks=0 [ 83.561138][ T6213] lo speed is unknown, defaulting to 1000 [ 83.627931][ T6213] lo speed is unknown, defaulting to 1000 [ 83.667695][ T6233] netlink: 'syz.0.583': attribute type 4 has an invalid length. [ 83.686098][ T2957] lo speed is unknown, defaulting to 1000 [ 83.692617][ T36] lo speed is unknown, defaulting to 1000 [ 83.716370][ T6235] loop2: detected capacity change from 0 to 512 [ 83.752378][ T6235] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.776825][ T6235] ext4 filesystem being mounted at /123/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 83.812281][ T6235] EXT4-fs error (device loop2): ext4_do_update_inode:5211: inode #2: comm syz.2.584: corrupted inode contents [ 83.853939][ T6235] EXT4-fs error (device loop2): ext4_dirty_inode:6103: inode #2: comm syz.2.584: mark_inode_dirty error [ 83.877300][ T6235] EXT4-fs error (device loop2): ext4_do_update_inode:5211: inode #2: comm syz.2.584: corrupted inode contents [ 83.895161][ T6235] EXT4-fs error (device loop2): ext4_do_update_inode:5211: inode #2: comm syz.2.584: corrupted inode contents [ 83.910010][ T6235] EXT4-fs error (device loop2): ext4_dirty_inode:6103: inode #2: comm syz.2.584: mark_inode_dirty error [ 83.923809][ T6235] EXT4-fs error (device loop2): ext4_do_update_inode:5211: inode #2: comm syz.2.584: corrupted inode contents [ 83.942276][ T6235] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #2: comm syz.2.584: mark_inode_dirty error [ 83.957072][ T6235] EXT4-fs error (device loop2): ext4_do_update_inode:5211: inode #2: comm syz.2.584: corrupted inode contents [ 84.006878][ T6235] EXT4-fs error (device loop2): ext4_dirty_inode:6103: inode #2: comm syz.2.584: mark_inode_dirty error [ 84.168527][ T6238] Set syz1 is full, maxelem 65536 reached [ 84.184422][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.246213][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.247797][ T6264] loop1: detected capacity change from 0 to 164 [ 84.288288][ T6259] netlink: 48 bytes leftover after parsing attributes in process `syz.0.591'. [ 84.310121][ T6268] netlink: 'syz.1.596': attribute type 4 has an invalid length. [ 84.422012][ T6276] loop1: detected capacity change from 0 to 164 [ 84.437723][ T6276] syz.1.598: attempt to access beyond end of device [ 84.437723][ T6276] loop1: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 84.466200][ T6276] syz.1.598: attempt to access beyond end of device [ 84.466200][ T6276] loop1: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 84.547869][ T6280] FAULT_INJECTION: forcing a failure. [ 84.547869][ T6280] name failslab, interval 1, probability 0, space 0, times 0 [ 84.562083][ T6280] CPU: 1 UID: 0 PID: 6280 Comm: syz.1.601 Not tainted 6.15.0-syzkaller-03645-g3d413f0cfd7e #0 PREEMPT(voluntary) [ 84.562118][ T6280] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 84.562192][ T6280] Call Trace: [ 84.562199][ T6280] [ 84.562209][ T6280] __dump_stack+0x1d/0x30 [ 84.562235][ T6280] dump_stack_lvl+0xe8/0x140 [ 84.562262][ T6280] dump_stack+0x15/0x1b [ 84.562314][ T6280] should_fail_ex+0x265/0x280 [ 84.562347][ T6280] should_failslab+0x8c/0xb0 [ 84.562372][ T6280] __kvmalloc_node_noprof+0x126/0x4f0 [ 84.562445][ T6280] ? seq_read_iter+0x13e/0x940 [ 84.562476][ T6280] seq_read_iter+0x13e/0x940 [ 84.562509][ T6280] kernfs_fop_read_iter+0xc4/0x300 [ 84.562547][ T6280] ? iov_iter_bvec+0xa4/0xd0 [ 84.562608][ T6280] copy_splice_read+0x3c4/0x5f0 [ 84.562650][ T6280] ? __pfx_copy_splice_read+0x10/0x10 [ 84.562685][ T6280] splice_direct_to_actor+0x26f/0x680 [ 84.562726][ T6280] ? __pfx_direct_splice_actor+0x10/0x10 [ 84.562763][ T6280] do_splice_direct+0xda/0x150 [ 84.562790][ T6280] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 84.562901][ T6280] do_sendfile+0x380/0x650 [ 84.563068][ T6280] __x64_sys_sendfile64+0x105/0x150 [ 84.563091][ T6280] x64_sys_call+0xb39/0x2fb0 [ 84.563187][ T6280] do_syscall_64+0xd2/0x200 [ 84.563215][ T6280] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 84.563304][ T6280] ? clear_bhb_loop+0x40/0x90 [ 84.563330][ T6280] ? clear_bhb_loop+0x40/0x90 [ 84.563375][ T6280] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.563394][ T6280] RIP: 0033:0x7f6d2ce2e969 [ 84.563408][ T6280] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 84.563424][ T6280] RSP: 002b:00007f6d2b497038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 84.563440][ T6280] RAX: ffffffffffffffda RBX: 00007f6d2d055fa0 RCX: 00007f6d2ce2e969 [ 84.563452][ T6280] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000007 [ 84.563523][ T6280] RBP: 00007f6d2b497090 R08: 0000000000000000 R09: 0000000000000000 [ 84.563534][ T6280] R10: 2000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 84.563545][ T6280] R13: 0000000000000000 R14: 00007f6d2d055fa0 R15: 00007ffe70b0ef08 [ 84.563565][ T6280] [ 84.877536][ T6283] loop4: detected capacity change from 0 to 1024 [ 84.905954][ T6283] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 84.912699][ T6286] loop3: detected capacity change from 0 to 164 [ 84.939585][ T6286] syz.3.604: attempt to access beyond end of device [ 84.939585][ T6286] loop3: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 84.975486][ T6286] syz.3.604: attempt to access beyond end of device [ 84.975486][ T6286] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 85.003034][ T6293] loop1: detected capacity change from 0 to 164 [ 85.015757][ T6295] loop0: detected capacity change from 0 to 164 [ 85.070855][ T3326] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.085611][ T6297] netlink: 'syz.2.609': attribute type 4 has an invalid length. [ 85.202779][ T6304] loop3: detected capacity change from 0 to 512 [ 85.222900][ T6311] loop4: detected capacity change from 0 to 1024 [ 85.275648][ T6304] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 85.288556][ T6311] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 85.312811][ T6304] EXT4-fs (loop3): 1 truncate cleaned up [ 85.325946][ T6304] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 85.344251][ T6319] netlink: 4 bytes leftover after parsing attributes in process `syz.0.618'. [ 85.357831][ T6304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.368454][ T6319] netlink: 2 bytes leftover after parsing attributes in process `syz.0.618'. [ 85.375074][ T6322] netlink: 48 bytes leftover after parsing attributes in process `syz.2.617'. [ 85.436446][ T6304] geneve2: entered promiscuous mode [ 85.442402][ T6304] geneve2: entered allmulticast mode [ 85.493289][ T3326] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.610321][ T6337] loop4: detected capacity change from 0 to 164 [ 85.931519][ T6342] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.006060][ T6342] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.068139][ T6342] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.131026][ T6342] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.220081][ T6342] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.265536][ T6342] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.317993][ T6342] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.370708][ T6342] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.517603][ T6359] loop2: detected capacity change from 0 to 1024 [ 86.598636][ T6359] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 86.747350][ T6361] SELinux: policydb magic number 0x747a7973 does not match expected magic number 0xf97cff8c [ 86.783068][ T30] kauditd_printk_skb: 153 callbacks suppressed [ 86.783086][ T30] audit: type=1326 audit(1748491011.403:1751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6372 comm="syz.4.635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b5d80e969 code=0x7ffc0000 [ 86.827527][ T6361] SELinux: failed to load policy [ 86.840993][ T6375] loop1: detected capacity change from 0 to 164 [ 86.928646][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.959277][ T30] audit: type=1326 audit(1748491011.443:1752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6372 comm="syz.4.635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=255 compat=0 ip=0x7f2b5d80e969 code=0x7ffc0000 [ 86.986314][ T30] audit: type=1326 audit(1748491011.443:1753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6372 comm="syz.4.635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b5d80e969 code=0x7ffc0000 [ 87.011470][ T30] audit: type=1326 audit(1748491011.443:1754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6372 comm="syz.4.635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2b5d80e969 code=0x7ffc0000 [ 87.036942][ T30] audit: type=1326 audit(1748491011.453:1755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6372 comm="syz.4.635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b5d80e969 code=0x7ffc0000 [ 87.063393][ T30] audit: type=1326 audit(1748491011.463:1756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6372 comm="syz.4.635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2b5d80e969 code=0x7ffc0000 [ 87.089409][ T30] audit: type=1326 audit(1748491011.473:1757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6372 comm="syz.4.635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b5d80e969 code=0x7ffc0000 [ 87.116560][ T30] audit: type=1326 audit(1748491011.473:1758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6372 comm="syz.4.635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b5d80e969 code=0x7ffc0000 [ 87.142177][ T30] audit: type=1326 audit(1748491011.473:1759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6372 comm="syz.4.635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2b5d80e969 code=0x7ffc0000 [ 87.167845][ T30] audit: type=1326 audit(1748491011.473:1760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6372 comm="syz.4.635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b5d80e969 code=0x7ffc0000 [ 87.324415][ T6393] vhci_hcd: invalid port number 96 [ 87.329958][ T6393] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 87.415313][ T6405] netlink: 'syz.0.647': attribute type 5 has an invalid length. [ 87.424197][ T6405] netlink: 152 bytes leftover after parsing attributes in process `syz.0.647'. [ 87.451288][ T6391] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.525474][ T6391] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.578682][ T6419] loop0: detected capacity change from 0 to 512 [ 87.587723][ T6391] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.627342][ T6419] EXT4-fs (loop0): orphan cleanup on readonly fs [ 87.636475][ T6391] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.654593][ T6419] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.655: bg 0: block 248: padding at end of block bitmap is not set [ 87.705388][ T6419] EXT4-fs error (device loop0): ext4_acquire_dquot:6935: comm syz.0.655: Failed to acquire dquot type 1 [ 87.725031][ T6429] FAULT_INJECTION: forcing a failure. [ 87.725031][ T6429] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 87.727264][ T6391] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.738872][ T6429] CPU: 1 UID: 0 PID: 6429 Comm: syz.4.658 Not tainted 6.15.0-syzkaller-03645-g3d413f0cfd7e #0 PREEMPT(voluntary) [ 87.738910][ T6429] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 87.738928][ T6429] Call Trace: [ 87.738937][ T6429] [ 87.738983][ T6429] __dump_stack+0x1d/0x30 [ 87.739012][ T6429] dump_stack_lvl+0xe8/0x140 [ 87.739118][ T6429] dump_stack+0x15/0x1b [ 87.739141][ T6429] should_fail_ex+0x265/0x280 [ 87.739181][ T6429] should_fail+0xb/0x20 [ 87.739230][ T6429] should_fail_usercopy+0x1a/0x20 [ 87.739345][ T6429] _copy_from_user+0x1c/0xb0 [ 87.739371][ T6429] ___sys_sendmsg+0xc1/0x1d0 [ 87.739436][ T6429] __x64_sys_sendmsg+0xd4/0x160 [ 87.739520][ T6429] x64_sys_call+0x2999/0x2fb0 [ 87.739551][ T6429] do_syscall_64+0xd2/0x200 [ 87.739591][ T6429] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 87.739634][ T6429] ? clear_bhb_loop+0x40/0x90 [ 87.739667][ T6429] ? clear_bhb_loop+0x40/0x90 [ 87.739697][ T6429] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.739725][ T6429] RIP: 0033:0x7f2b5d80e969 [ 87.739796][ T6429] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 87.739820][ T6429] RSP: 002b:00007f2b5be77038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 87.739893][ T6429] RAX: ffffffffffffffda RBX: 00007f2b5da35fa0 RCX: 00007f2b5d80e969 [ 87.739910][ T6429] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005 [ 87.739926][ T6429] RBP: 00007f2b5be77090 R08: 0000000000000000 R09: 0000000000000000 [ 87.739942][ T6429] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 87.739958][ T6429] R13: 0000000000000000 R14: 00007f2b5da35fa0 R15: 00007ffee4c73238 [ 87.739985][ T6429] [ 87.779452][ T6419] EXT4-fs (loop0): 1 truncate cleaned up [ 87.786338][ T6391] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.790740][ T6391] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.969663][ T6419] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 87.972783][ T6391] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.059387][ T6419] lo speed is unknown, defaulting to 1000 [ 88.103517][ T6430] lo speed is unknown, defaulting to 1000 [ 88.137719][ T6450] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 88.201673][ T6419] lo speed is unknown, defaulting to 1000 [ 88.242680][ T6459] netlink: 4 bytes leftover after parsing attributes in process `syz.4.668'. [ 88.256124][ T6459] bridge_slave_1: left allmulticast mode [ 88.262736][ T6459] bridge_slave_1: left promiscuous mode [ 88.269113][ T6459] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.272415][ T6462] netlink: 'syz.1.666': attribute type 5 has an invalid length. [ 88.285738][ T6462] netlink: 152 bytes leftover after parsing attributes in process `syz.1.666'. [ 88.301051][ T6459] bridge_slave_0: left allmulticast mode [ 88.308528][ T6459] bridge_slave_0: left promiscuous mode [ 88.315314][ T6459] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.372817][ T6462] : renamed from bond0 (while UP) [ 88.391132][ T6430] lo speed is unknown, defaulting to 1000 [ 88.450073][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.475362][ T6473] netlink: 'syz.1.669': attribute type 4 has an invalid length. [ 88.582291][ T6484] netlink: 4 bytes leftover after parsing attributes in process `syz.0.671'. [ 88.612563][ T6484] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 88.632647][ T6484] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 88.744421][ T6495] FAULT_INJECTION: forcing a failure. [ 88.744421][ T6495] name failslab, interval 1, probability 0, space 0, times 0 [ 88.759395][ T6495] CPU: 0 UID: 0 PID: 6495 Comm: syz.1.674 Not tainted 6.15.0-syzkaller-03645-g3d413f0cfd7e #0 PREEMPT(voluntary) [ 88.759430][ T6495] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 88.759504][ T6495] Call Trace: [ 88.759512][ T6495] [ 88.759519][ T6495] __dump_stack+0x1d/0x30 [ 88.759547][ T6495] dump_stack_lvl+0xe8/0x140 [ 88.759574][ T6495] dump_stack+0x15/0x1b [ 88.759612][ T6495] should_fail_ex+0x265/0x280 [ 88.759792][ T6495] ? br_vlan_init+0x34/0x110 [ 88.759823][ T6495] should_failslab+0x8c/0xb0 [ 88.759842][ T6495] __kmalloc_cache_noprof+0x4c/0x320 [ 88.759876][ T6495] br_vlan_init+0x34/0x110 [ 88.759959][ T6495] br_dev_init+0x5d/0xf0 [ 88.759991][ T6495] register_netdevice+0x281/0xf10 [ 88.760017][ T6495] ? validate_linkmsg+0x4f2/0x570 [ 88.761193][ T6495] br_dev_newlink+0x42/0x100 [ 88.761287][ T6495] ? __pfx_br_dev_newlink+0x10/0x10 [ 88.761340][ T6495] rtnl_newlink_create+0x1bf/0x630 [ 88.761368][ T6495] ? security_capable+0x83/0x90 [ 88.761402][ T6495] ? netlink_ns_capable+0x86/0xa0 [ 88.761444][ T6495] rtnl_newlink+0xf29/0x12d0 [ 88.761502][ T6495] ? bpf_trace_run3+0x12c/0x1d0 [ 88.761537][ T6495] ? __memcg_slab_free_hook+0x11e/0x240 [ 88.761577][ T6495] ? __kfree_skb+0x109/0x150 [ 88.761605][ T6495] ? __rcu_read_unlock+0x4f/0x70 [ 88.761672][ T6495] ? avc_has_perm_noaudit+0x1b1/0x200 [ 88.761779][ T6495] ? selinux_capable+0x1f9/0x270 [ 88.761820][ T6495] ? security_capable+0x83/0x90 [ 88.761850][ T6495] ? ns_capable+0x7d/0xb0 [ 88.761876][ T6495] ? __pfx_rtnl_newlink+0x10/0x10 [ 88.761912][ T6495] rtnetlink_rcv_msg+0x5fe/0x6d0 [ 88.762013][ T6495] netlink_rcv_skb+0x120/0x220 [ 88.762042][ T6495] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 88.762159][ T6495] rtnetlink_rcv+0x1c/0x30 [ 88.762197][ T6495] netlink_unicast+0x59e/0x670 [ 88.762225][ T6495] netlink_sendmsg+0x58b/0x6b0 [ 88.762264][ T6495] ? __pfx_netlink_sendmsg+0x10/0x10 [ 88.762373][ T6495] __sock_sendmsg+0x145/0x180 [ 88.762419][ T6495] ____sys_sendmsg+0x31e/0x4e0 [ 88.762450][ T6495] ___sys_sendmsg+0x17b/0x1d0 [ 88.762518][ T6495] __x64_sys_sendmsg+0xd4/0x160 [ 88.762560][ T6495] x64_sys_call+0x2999/0x2fb0 [ 88.762583][ T6495] do_syscall_64+0xd2/0x200 [ 88.762621][ T6495] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 88.762675][ T6495] ? clear_bhb_loop+0x40/0x90 [ 88.762702][ T6495] ? clear_bhb_loop+0x40/0x90 [ 88.762724][ T6495] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.762888][ T6495] RIP: 0033:0x7f6d2ce2e969 [ 88.762909][ T6495] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 88.762933][ T6495] RSP: 002b:00007f6d2b497038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 88.762959][ T6495] RAX: ffffffffffffffda RBX: 00007f6d2d055fa0 RCX: 00007f6d2ce2e969 [ 88.762975][ T6495] RDX: 0000000004048000 RSI: 0000200000000040 RDI: 0000000000000003 [ 88.763042][ T6495] RBP: 00007f6d2b497090 R08: 0000000000000000 R09: 0000000000000000 [ 88.763056][ T6495] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 88.763132][ T6495] R13: 0000000000000000 R14: 00007f6d2d055fa0 R15: 00007ffe70b0ef08 [ 88.763223][ T6495] [ 89.198236][ T6500] FAULT_INJECTION: forcing a failure. [ 89.198236][ T6500] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 89.212511][ T6500] CPU: 1 UID: 0 PID: 6500 Comm: syz.3.675 Not tainted 6.15.0-syzkaller-03645-g3d413f0cfd7e #0 PREEMPT(voluntary) [ 89.212546][ T6500] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 89.212563][ T6500] Call Trace: [ 89.212571][ T6500] [ 89.212581][ T6500] __dump_stack+0x1d/0x30 [ 89.212647][ T6500] dump_stack_lvl+0xe8/0x140 [ 89.212667][ T6500] dump_stack+0x15/0x1b [ 89.212688][ T6500] should_fail_ex+0x265/0x280 [ 89.212727][ T6500] should_fail+0xb/0x20 [ 89.212803][ T6500] should_fail_usercopy+0x1a/0x20 [ 89.212971][ T6500] _copy_to_user+0x20/0xa0 [ 89.212995][ T6500] simple_read_from_buffer+0xb5/0x130 [ 89.213030][ T6500] proc_fail_nth_read+0x100/0x140 [ 89.213156][ T6500] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 89.213188][ T6500] vfs_read+0x1a0/0x6f0 [ 89.213219][ T6500] ? __rcu_read_unlock+0x4f/0x70 [ 89.213255][ T6500] ? __fget_files+0x184/0x1c0 [ 89.213307][ T6500] ksys_read+0xda/0x1a0 [ 89.213338][ T6500] __x64_sys_read+0x40/0x50 [ 89.213371][ T6500] x64_sys_call+0x2d77/0x2fb0 [ 89.213418][ T6500] do_syscall_64+0xd2/0x200 [ 89.213458][ T6500] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 89.213493][ T6500] ? clear_bhb_loop+0x40/0x90 [ 89.213515][ T6500] ? clear_bhb_loop+0x40/0x90 [ 89.213537][ T6500] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.213586][ T6500] RIP: 0033:0x7f7dbcb9d37c [ 89.213603][ T6500] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 89.213676][ T6500] RSP: 002b:00007f7dbb207030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 89.213704][ T6500] RAX: ffffffffffffffda RBX: 00007f7dbcdc5fa0 RCX: 00007f7dbcb9d37c [ 89.213720][ T6500] RDX: 000000000000000f RSI: 00007f7dbb2070a0 RDI: 0000000000000007 [ 89.213733][ T6500] RBP: 00007f7dbb207090 R08: 0000000000000000 R09: 0000000000000000 [ 89.213745][ T6500] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 89.213757][ T6500] R13: 0000000000000000 R14: 00007f7dbcdc5fa0 R15: 00007ffc4569bb48 [ 89.213777][ T6500] [ 89.553785][ T6512] FAULT_INJECTION: forcing a failure. [ 89.553785][ T6512] name failslab, interval 1, probability 0, space 0, times 0 [ 89.567390][ T6512] CPU: 1 UID: 0 PID: 6512 Comm: syz.3.678 Not tainted 6.15.0-syzkaller-03645-g3d413f0cfd7e #0 PREEMPT(voluntary) [ 89.567468][ T6512] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 89.567480][ T6512] Call Trace: [ 89.567487][ T6512] [ 89.567495][ T6512] __dump_stack+0x1d/0x30 [ 89.567518][ T6512] dump_stack_lvl+0xe8/0x140 [ 89.567568][ T6512] dump_stack+0x15/0x1b [ 89.567591][ T6512] should_fail_ex+0x265/0x280 [ 89.567630][ T6512] ? usb_control_msg+0x58/0x250 [ 89.567656][ T6512] should_failslab+0x8c/0xb0 [ 89.567736][ T6512] __kmalloc_cache_noprof+0x4c/0x320 [ 89.567760][ T6512] ? finish_task_switch+0xad/0x2b0 [ 89.567788][ T6512] usb_control_msg+0x58/0x250 [ 89.567816][ T6512] ? _raw_spin_unlock_irqrestore+0x2b/0x60 [ 89.567846][ T6512] hub_ext_port_status+0xc0/0x480 [ 89.567872][ T6512] hub_activate+0x5ca/0x1030 [ 89.567931][ T6512] hub_resume+0x47/0x1e0 [ 89.567961][ T6512] ? mutex_lock+0xd/0x30 [ 89.567993][ T6512] usb_resume_both+0x3e3/0x5b0 [ 89.568086][ T6512] ? __pfx_usb_runtime_resume+0x10/0x10 [ 89.568120][ T6512] usb_runtime_resume+0x21/0x30 [ 89.568160][ T6512] __rpm_callback+0x2ab/0x6e0 [ 89.568265][ T6512] ? __update_runtime_status+0xe8/0x1c0 [ 89.568307][ T6512] ? __pfx_usb_runtime_resume+0x10/0x10 [ 89.568413][ T6512] rpm_resume+0x8ee/0xd20 [ 89.568444][ T6512] ? klist_dec_and_del+0xba/0x270 [ 89.568465][ T6512] __pm_runtime_resume+0xd6/0x100 [ 89.568541][ T6512] usb_autoresume_device+0x23/0xc0 [ 89.568574][ T6512] usbdev_open+0x121/0x450 [ 89.568721][ T6512] chrdev_open+0x2eb/0x3a0 [ 89.568744][ T6512] do_dentry_open+0x646/0xa20 [ 89.568766][ T6512] ? __pfx_chrdev_open+0x10/0x10 [ 89.568786][ T6512] vfs_open+0x37/0x1e0 [ 89.568891][ T6512] path_openat+0x1c5e/0x2170 [ 89.568932][ T6512] do_filp_open+0x109/0x230 [ 89.568983][ T6512] do_sys_openat2+0xa6/0x110 [ 89.569172][ T6512] __x64_sys_openat+0xf2/0x120 [ 89.569235][ T6512] x64_sys_call+0x1af/0x2fb0 [ 89.569258][ T6512] do_syscall_64+0xd2/0x200 [ 89.569292][ T6512] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 89.569403][ T6512] ? clear_bhb_loop+0x40/0x90 [ 89.569425][ T6512] ? clear_bhb_loop+0x40/0x90 [ 89.569454][ T6512] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.569561][ T6512] RIP: 0033:0x7f7dbcb9d2d0 [ 89.569646][ T6512] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44 [ 89.569669][ T6512] RSP: 002b:00007f7dbb1b2b70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 89.569694][ T6512] RAX: ffffffffffffffda RBX: 0000000000000102 RCX: 00007f7dbcb9d2d0 [ 89.569710][ T6512] RDX: 0000000000000102 RSI: 00007f7dbb1b2c10 RDI: 00000000ffffff9c [ 89.569726][ T6512] RBP: 00007f7dbb1b2c10 R08: 0000000000000000 R09: 0000000000000000 [ 89.569781][ T6512] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 89.569797][ T6512] R13: 0000000000000001 R14: 00007f7dbcdc6080 R15: 00007ffc4569bb48 [ 89.569823][ T6512] [ 89.569839][ T6512] hub 2-0:1.0: hub_ext_port_status failed (err = -12) [ 89.577545][ T6513] netlink: 'syz.1.680': attribute type 5 has an invalid length. [ 89.636607][ T6515] lo speed is unknown, defaulting to 1000 [ 89.637879][ T6513] netlink: 152 bytes leftover after parsing attributes in process `syz.1.680'. [ 89.700743][ T6518] netlink: 'syz.0.682': attribute type 4 has an invalid length. [ 89.734187][ T6515] lo speed is unknown, defaulting to 1000 [ 89.748534][ T3395] lo speed is unknown, defaulting to 1000 [ 89.968947][ T3392] lo speed is unknown, defaulting to 1000 [ 90.082440][ T6529] vhci_hcd: invalid port number 96 [ 90.088215][ T6529] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 90.222760][ T6540] loop1: detected capacity change from 0 to 164 [ 90.267186][ T6540] bio_check_eod: 4 callbacks suppressed [ 90.267204][ T6540] syz.1.692: attempt to access beyond end of device [ 90.267204][ T6540] loop1: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 90.314861][ T6540] syz.1.692: attempt to access beyond end of device [ 90.314861][ T6540] loop1: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 90.416449][ T6551] netlink: 'syz.1.697': attribute type 4 has an invalid length. [ 90.545133][ T6506] ================================================================== [ 90.553929][ T6506] BUG: KCSAN: data-race in avc_policy_seqno / avc_ss_reset [ 90.563249][ T6506] [ 90.566012][ T6506] write to 0xffffffff88e90c08 of 4 bytes by task 6546 on cpu 0: [ 90.575442][ T6506] avc_ss_reset+0x20c/0x240 [ 90.580334][ T6506] security_set_bools+0x301/0x340 [ 90.585590][ T6506] sel_commit_bools_write+0x1ea/0x270 [ 90.592208][ T6506] vfs_writev+0x3ee/0x870 [ 90.597197][ T6506] do_writev+0xe7/0x210 [ 90.602069][ T6506] __x64_sys_writev+0x45/0x50 [ 90.607064][ T6506] x64_sys_call+0x2006/0x2fb0 [ 90.612154][ T6506] do_syscall_64+0xd2/0x200 [ 90.617135][ T6506] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.623349][ T6506] [ 90.625701][ T6506] read to 0xffffffff88e90c08 of 4 bytes by task 6506 on cpu 1: [ 90.633799][ T6506] avc_policy_seqno+0x15/0x30 [ 90.639659][ T6506] selinux_file_permission+0x1cd/0x320 [ 90.645741][ T6506] security_file_permission+0x3e/0x80 [ 90.655456][ T6506] rw_verify_area+0x8d/0x160 [ 90.664795][ T6506] __io_read+0x3d7/0xc20 [ 90.670200][ T6506] io_read+0x1c/0x60 [ 90.674324][ T6506] __io_issue_sqe+0xfe/0x2e0 [ 90.680660][ T6506] io_issue_sqe+0x53/0x970 [ 90.685318][ T6506] io_req_task_submit+0x6b/0xc0 [ 90.693374][ T6506] __io_run_local_work+0x185/0x4f0 [ 90.699165][ T6506] __se_sys_io_uring_enter+0x144b/0x1b70 [ 90.705189][ T6506] __x64_sys_io_uring_enter+0x78/0x90 [ 90.714437][ T6506] x64_sys_call+0x28c8/0x2fb0 [ 90.719791][ T6506] do_syscall_64+0xd2/0x200 [ 90.725698][ T6506] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.732754][ T6506] [ 90.735085][ T6506] value changed: 0x00000009 -> 0x0000000a [ 90.742485][ T6506] [ 90.744851][ T6506] Reported by Kernel Concurrency Sanitizer on: [ 90.752528][ T6506] CPU: 1 UID: 0 PID: 6506 Comm: syz.3.678 Not tainted 6.15.0-syzkaller-03645-g3d413f0cfd7e #0 PREEMPT(voluntary) [ 90.765501][ T6506] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 90.776843][ T6506] ================================================================== [ 90.793640][ T6558] loop1: detected capacity change from 0 to 1024 [ 90.833068][ T6558] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 90.907057][ T5727] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.