last executing test programs: 3.406250356s ago: executing program 4 (id=564): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080", @ANYRES32=0x0], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000400000000dfffff1918120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r4}, 0x10) socket$xdp(0x2c, 0x3, 0x0) r5 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r5, &(0x7f0000000000)={0x18, 0x0, {0x2, @broadcast, 'macvlan1\x00'}}, 0x1e) memfd_create(&(0x7f0000000040)='##3:!}(#)^\'\'&\x00', 0x4) write$binfmt_aout(r5, &(0x7f0000001640)=ANY=[], 0x5ea) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x21081e, &(0x7f0000000240)={[{@noload}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@nodiscard}]}, 0x1, 0x501, &(0x7f0000000ac0)="$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") r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f00000004c0), 0x208e24b) 3.310300885s ago: executing program 2 (id=570): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000001540)={&(0x7f0000000040)=@qipcrtr={0x2a, 0x1, 0x7fff}, 0x80, 0x0}, 0x0) 3.298425476s ago: executing program 2 (id=571): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149f3", 0x14) recvmmsg(r1, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r2, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32={[0x2600]}}], 0xffc8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00'}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=@base={0xa, 0xc000, 0x37b0, 0x5c, 0x0, 0xffffffffffffffff, 0xd00, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 2.539749906s ago: executing program 4 (id=579): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x18, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x8, 0x0, 0x0}}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r2, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r2, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8a21b000000bfa200000000000007020000f8ffffffbb03000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) ptrace$PTRACE_GETSIGMASK(0x420a, 0x0, 0x0, 0x0) syz_pidfd_open(0x0, 0x0) syz_clone3(&(0x7f00000008c0)={0x14860000, 0x0, 0x0, 0x0, {0x28}, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x1}, 0x58) sched_getaffinity(0x0, 0x8, &(0x7f0000000440)) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000080)=0x9e7, 0x4) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x10) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b708000000005aab7b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b704000008000000850000009500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00'}, 0x10) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x9}]}, 0x10) bind$bt_hci(r5, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) ioctl$sock_bt_hci(r1, 0x800448d2, 0x0) 2.4963658s ago: executing program 0 (id=580): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000400000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(r1, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e000000020013000200000000000000ff0800ed05000600200000000a00060000000000000500e50000070000001ffeff0001000003f1dc7f7c6e87020001000000000000"], 0x80}}, 0x0) sendmsg$key(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0x10}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f0000000440)={&(0x7f0000000280), 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0xa4, r3, 0x300, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xfffffffa}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}]}, @IPVS_CMD_ATTR_DEST={0x6c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x6}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xffffff9b}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x7}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x1000}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@broadcast}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x4}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x9}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@broadcast}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffff}]}, 0xa4}, 0x1, 0x0, 0x0, 0x8044}, 0x824) r4 = socket$packet(0x11, 0x2, 0x300) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) socket(0x1e, 0x4, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000180)={'vcan0\x00', 0x0}) sendto$packet(r4, &(0x7f0000000080)="18", 0x10, 0x0, &(0x7f00000000c0)={0x11, 0xe, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) 2.49571054s ago: executing program 4 (id=581): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)) r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r0, 0xc) openat$ttyS3(0xffffff9c, &(0x7f0000000200), 0x4001, 0x0) socket$inet6(0xa, 0x2, 0x826) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x4e24, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x5}}, 0x0, 0x0, 0x47, 0x0, "0d85d4a10b5e68cba09f71534934787dd156170f1b3665003b99792fccb14ff36fbdec3876d4497ef315df26d622164fd77081cb865383b9034010149042ceb68a95a8b60fd035e3635bf16fa7fe28b5"}, 0xd8) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000002}, 0x10) getsockopt$inet_int(r1, 0x10d, 0xe7, &(0x7f0000000040), &(0x7f0000000080)=0x4) socket$qrtr(0x2a, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000004480)=ANY=[], 0x70}}, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, 0x0, &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = mq_open(&(0x7f0000000300)='!selinuxselinux\x00\"\xbc\xfd\xc7)\x15\xd8\xee(\x94m\xa5\xe1\xa8\xa3a\x8b.3\x81.[/\xba\xd8(\xbe:\x14\xbc\xfc\xcev\xda_\x1d\xa4\xb9\x9a,\xa4\xcbS\"\xc5Q=/\x1b\xaa\xb6I\x84\xfd h\xd7\x9ar\xa5\xf2\x04(5\x8d\x91\x8a\x1d\xdaUg\xe6\xa6=\xa1\xec\x90\x84\x05K[/\x16k^.\xab\xbf7\xda\xfb?\x8e0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYRES32=r1, @ANYRES32=r0, @ANYRESHEX=0x0], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket(0x11, 0x800000003, 0x0) socket(0x10, 0x3, 0x0) r2 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000000)) mlock(&(0x7f000015f000/0x3000)=nil, 0x3000) lseek(0xffffffffffffffff, 0x0, 0x1) ioctl$PAGEMAP_SCAN(r2, 0xc0606610, &(0x7f0000000100)={0x60, 0x0, &(0x7f0000536000/0x4000)=nil, &(0x7f0000536000/0x1000)=nil, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x6, 0xc}) r3 = syz_io_uring_setup(0x10e, &(0x7f0000000140)={0x0, 0x0, 0x800}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_SHUTDOWN={0x22, 0x13}) io_uring_enter(r3, 0x47f9, 0x0, 0x0, 0x0, 0x0) rt_sigsuspend(&(0x7f0000000040), 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) pipe(0x0) r6 = syz_open_dev$tty20(0xc, 0x4, 0x0) r7 = gettid() socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, 0x0, 0x20000800) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) write$binfmt_misc(r6, &(0x7f0000000240), 0xfffffecc) 2.085982298s ago: executing program 0 (id=586): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYRES32=r1, @ANYRES32=r0, @ANYRESHEX=0x0], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket(0x11, 0x800000003, 0x0) socket(0x10, 0x3, 0x0) r2 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000000)) mlock(&(0x7f000015f000/0x3000)=nil, 0x3000) lseek(0xffffffffffffffff, 0x0, 0x1) ioctl$PAGEMAP_SCAN(r2, 0xc0606610, &(0x7f0000000100)={0x60, 0x0, &(0x7f0000536000/0x4000)=nil, &(0x7f0000536000/0x1000)=nil, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x6, 0xc}) r3 = syz_io_uring_setup(0x10e, &(0x7f0000000140)={0x0, 0x0, 0x800}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_SHUTDOWN={0x22, 0x13}) io_uring_enter(r3, 0x47f9, 0x0, 0x0, 0x0, 0x0) rt_sigsuspend(&(0x7f0000000040), 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) pipe(0x0) r6 = syz_open_dev$tty20(0xc, 0x4, 0x0) r7 = gettid() socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, 0x0, 0x20000800) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) write$binfmt_misc(r6, &(0x7f0000000240), 0xfffffecc) 1.693468044s ago: executing program 3 (id=593): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000400000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(r1, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e000000020013000200000000000000ff0800ed05000600200000000a00060000000000000500e50000070000001ffeff0001000003f1dc7f7c6e87020001000000000000"], 0x80}}, 0x0) sendmsg$key(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0x10}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f0000000440)={&(0x7f0000000280), 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0xa4, r3, 0x300, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xfffffffa}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}]}, @IPVS_CMD_ATTR_DEST={0x6c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x6}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xffffff9b}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x7}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x1000}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@broadcast}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x4}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x9}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@broadcast}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffff}]}, 0xa4}, 0x1, 0x0, 0x0, 0x8044}, 0x824) r4 = socket$packet(0x11, 0x2, 0x300) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000180)={'vcan0\x00', 0x0}) sendto$packet(r4, &(0x7f0000000080)="18", 0x10, 0x0, &(0x7f00000000c0)={0x11, 0xe, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) 1.673708695s ago: executing program 3 (id=594): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}, 0x2}}, 0x2e) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) connect$unix(r2, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r2, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ppoll(&(0x7f0000000140)=[{r2, 0x181}, {r1, 0x8024}, {r3, 0x2000}], 0x3, 0x0, 0x0, 0x0) readv(r0, &(0x7f0000000000)=[{&(0x7f0000000200)=""/150, 0x96}], 0x1) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000000)=0x1b) write$binfmt_aout(r4, &(0x7f0000002140)=ANY=[], 0xff2e) 1.607958402s ago: executing program 4 (id=595): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080", @ANYRES32=0x0], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000400000000dfffff1918120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r4}, 0x10) socket$xdp(0x2c, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x21081e, &(0x7f0000000240)={[{@noload}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@nodiscard}]}, 0x1, 0x501, &(0x7f0000000ac0)="$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") r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f00000004c0), 0x208e24b) 1.593305553s ago: executing program 2 (id=596): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="a90300000000000000003200000008004001", @ANYRES32=0x0, @ANYBLOB="a001e52d8df3cca87886ad0d8960e00f3d072b72b29e1ec4ac615530705013ccc012a7218fc0e2c48bd847e8e26090a89a759bed6b8f8b51c84c94728c6b54b29c89dcd086904f2e8d6b6d4499e0dbf9a1b308e5715c5892a97f9958aa26366a488ecb0b36b84b2a69de48f3879597cefe9aeda1a3032343878e4565b6c3"], 0x1c}}, 0x0) 1.575613955s ago: executing program 2 (id=597): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r0}, 0x18) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) syz_open_pts(0xffffffffffffffff, 0x141601) r1 = msgget$private(0x0, 0x0) msgctl$IPC_SET(r1, 0x1, 0x0) msgsnd(r1, 0x0, 0x0, 0x0) msgrcv(r1, &(0x7f0000000000)={0x0, ""/8}, 0x10, 0x1, 0x1000) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1600170000000000040000000100000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/14], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xc8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r6, &(0x7f0000000300)=ANY=[@ANYBLOB="8fedcb7910009875f37538e486dd6317ce8102033300fe08000e40000200875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) clock_getres(0x6, 0x0) msgctl$IPC_SET(r1, 0x1, &(0x7f0000258f88)={{0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 1.283580301s ago: executing program 1 (id=599): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYRESOCT], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async, rerun: 64) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0xa00000, &(0x7f0000000240), 0xfe, 0x54b, &(0x7f0000000400)="$eJzs3d9rW1UcAPDvTdv96nQdjKE+SGEPTubStfXHBB/mo+hwoO8ztHdlNF1Gk461Dtwe3IsvMgQRB+If4LuPw3/Av2KggyGj6IMvkZvebNmaNGmXrZn5fOC259x70nNP7v2enpOTkACG1mT2oxDxakR8m0Qcajk2GvnByY1y6w+uzWVbEvX6Z38lkeT7muWT/Pd4nnklIn77OuJEYXO91dW1xVK5nC7n+ana0uWp6urayYtLpYV0Ib00Mzt7+p3Zmfffe7dvbX3z3D8/fHrno9PfHFv//pd7h28lcSYO5sda2/EUrrdmJmMyf07G4swTBaf7UNkgSXb7BNiRkTzOxyLrAw7FSB71wP/fVxFRB4ZUIv5hSDXHAc25fZ/mwS+M+x9uTIA2tz/ZeG0k9jXmRgfWk8dmRtl8d6IP9Wd1/Prn7VvZFv17HQKgq+s3IuLU6Gjn/m/nTvVQ5sk69H/w/NzJxj9vtRv/FB6Of6LN+Ge8TezuRPf4L9zrQzUdZeO/D9qOfx8uWk2M5LmXGmO+seTCxXKa9W0vR8TxGNub5bdazzm9frfe6Vjr+C/bsvqbY8H8PO6N7n38MfOlWulp2tzq/o2I17qMf5M21z97Ps71WMfR9PbrnY51b/+zVf854o221//Rilay9frkVON+mGreFZv9ffPo753q3+32Z9f/wNbtn0ha12ur26/jp33/pp2OTSb5ouk27/89yeeN9J5839VSrbY8HbEn+WTz/plHj23mm+Wz9h8/tnX/1+7+3x8RX/TY/ptHbnYsOgjXf35b13/7ibsff/ljp/p76//ebqSO53t66f96PcGnee4AAAAAAABg0BQi4mAkheLDdKFQLG68v+NIHCiUK9XaiQuVlUvz0fis7ESMFZor3eMt74eYzt8P28zPPJGfjYjDEfHdyP5GvjhXKc/vduMBAAAAAAAAAAAAAAAAAABgQIx3+Px/5o+R3T474Jnzld8wvLrGfz++6QkYSP7/w/AS/zC8xD8ML/EPw0v8w/AS/zC8xD8ML/EPAAAAAAAAAAAAAAAAAAAAAAAAAAAAfXXu7Nlsq68/uDaX5eevrK4sVq6cnE+ri8WllbniXGX5cnGhUlkop8W5ylK3v1euVC5Pz8TK1alaWq1NVVfXzi9VVi7Vzl9cKi2k59Ox59IqAAAAAAAAAAAAAAAAAAAAeLFUV9cWS+VyuiwhsaPE6GCchkSfE7vdMwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAI/8FAAD//wZvNao=") (async, rerun: 64) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040), 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) (async) fdatasync(r1) madvise(&(0x7f000033d000/0x3000)=nil, 0x3000, 0xd) timer_create(0x0, 0x0, &(0x7f00000000c0)) (async) ftruncate(r1, 0x9) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='mm_page_alloc\x00', r0}, 0x10) (async) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="9c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000006c00128009000100766c616e000000005c0002800600010000000000280003800c00010000000000000000000c00010000000000000000000c00010000000000000000001c000480040001"], 0x9c}, 0x1, 0xba01}, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r2, 0x891b, &(0x7f0000000080)={'macvlan0\x00', {0x2, 0x0, @initdev}}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000ac0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x400, 0x0, 0x6, 0x803ff}]}, 0x10) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000280)={0xa, 0x2, 0x0, @loopback, 0x9}, 0x1c) (async) sendto$inet6(r4, &(0x7f0000000980)="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", 0x130, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @rand_addr, 0x4}, 0x1c) bpf$MAP_CREATE(0x0, 0x0, 0x48) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc601}) (async) r6 = socket$kcm(0x2, 0xa, 0x2) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYRES16=r4], &(0x7f0000000240)='GPL\x00', 0x8, 0x0, 0x0, 0xb0783914ddc2892c, 0x0, '\x00', 0x0, @fallback, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xa6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r8}, 0x10) (async, rerun: 64) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100fffe08000a40000000000900020073797a32000000000900010073797a3000000000080005400000000f700000000c0a01030000000000800000010000000900020073797a3200000000440003804000008008000340000000023400d6f49ddc01800a00010071756f7461000000100001400000000000000000100001800c000100636f756e746572000900010073797a3000000000140000001000010000000000000000000000000a00000000"], 0xf4}}, 0x0) (async, rerun: 64) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r5, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0700100000001000050060ec97000fc83c00fe8000000000000000000000000000aaff02000000000000000000000000000106"], 0xffe) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) 1.283190802s ago: executing program 1 (id=600): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000008c0)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)={0x20, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @str='nl80211\x00'}]}, 0x20}, 0x1, 0x0, 0x8000000}, 0x0) 1.246516705s ago: executing program 1 (id=601): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$AUTOFS_IOC_EXPIRE(0xffffffffffffffff, 0x810c9365, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r4}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x3a) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r6}, 0x10) ioctl$GIO_UNIMAP(r3, 0x4b66, &(0x7f0000000040)={0x0, 0x0}) r7 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'vxcan1\x00'}) sendmsg$ETHTOOL_MSG_PAUSE_SET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000080)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000010651fbe347b2c"], 0x20}}, 0x0) 1.199345789s ago: executing program 1 (id=602): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) r1 = mq_open(&(0x7f0000000040)='!\x7f\x00\xca\x00\x00\x00\f\x00\x00\x01E!Tnux\x00', 0x6e93ebbbcc0884f2, 0x0, 0x0) mq_timedreceive(r1, 0x0, 0xfffffffffffffee3, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1104034, &(0x7f0000000140), 0x84, 0x47c, &(0x7f0000000e00)="$eJzs3EuPFEUcAPB/9+zyxh0QHzzUUTQSH7vsgsrBC0YTLiYmesDjuiwEWcDAmgghshqDR8MnUI8mfgJPeDHKSeMV78aEGC6iBzOmZ7r32bvOMLM7rvP7Jc1WTVd3VU11zVRX9RBA36pl/yQR2yLiVkQMNaMLE9Saf+7euTLx550rE0nU62/+njTS/XHnykSRtDhu62ykGuknSewtyffipctnxqemJi/k8ZHps++NXLx0+fnTZ8dPTZ6aPDd25MjhQ6MvvTj2QlfqOZCVdc+H5/ftPvb29dcnjl9/54evsyJuy/fPr0dTteM8a1Fb+F7O81THZ/9vubljLpwMlCa5sX3tikOLKnnfGGz0/6GoxFzjDcVrH/e0cMBqSzcuealSBGbqwP9YNpoH+lHxRZ/d/xbbGo49eu720Zidx7ibb809A5Fm9/DV5r3Rat271iLi+Mxfn2dblM5DAAB0142jEfFc2fgvjQeLRLW59NWI2BEROyPi/ojYFREPRDTSPhQRD7eZf21RfOn456fNbVeqDdn47+V8bWvh+C8tklQreWx7o/6DycnTU5MHI+K+iDgQgxuz+OgKeXz76s+fLbdv/vgv27L8i7FgXo7fBhZN0J0Ynx7vpM7z3f4oYs9AWf2T2ZWAbHy8OyL23MP5s8Y7/cxX+5bb/+/1X0H5OlNb6l9GPN1s/5lYVP9CsvL65MimmJo8OFJcFQsOi4iZuPnjtTeWy7+j+ndB1v5bSq//2fpXk/nrtRfbz+PaL5+W39NsyP/ew/W/IXlrwSk+GJ+evjAasSGZWfr62NyxRbxIn9X/wP7y/r8z4u8v8uP2RkR2ET8SEY9GxGN52z0eEU9ExP4V6v/9K0++u9y+ufYv5tzXvv1PtNX+7QcqZ777Jj/XrcX5t/b5d7gROpC/0srnX6sF7PT9AwAAgPUgbTwDn6TDs+E03Zw/w78rtqRT9fr0syfPv3/uRPNZ+WoMpsVM19C8+dDRfG64iI8tih9qzBvX6/X65kZ8eOL8lOfBobe2lvT/4eHmvl8rvS4dsOpaWkcrFmGW+0UbsC51YR0dWKf0f+hf+j/0L/0f+ldZ/78acbcHRQHWmO9/6F/6P/Qv/R/6l/4PfamT3/WvFNh5rJPDB7tbnqMR0e0KNgNp5+eprFYTlAfSNv5zhBUD0YW69yyQlu3aFBG9KM/GiGg18dUlJYxNzZ7c7YL1+pMJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgO/4JAAD//0WF2WE=") socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000010700000000000000000000181100"], 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$NFT_BATCH(r2, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000080000000800000000000000", @ANYRES32], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x4, 0x0) set_mempolicy(0x3, 0x0, 0x8) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x0, 0x0, 0x1, 0x7fffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x9b005, &(0x7f0000000240)=ANY=[@ANYRES16=r0]) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000005000000010001000f00000001"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b708000000f1ff007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000000)='kmem_cache_free\x00', r6}, 0x10) read$watch_queue(0xffffffffffffffff, 0x0, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r7, 0x26, &(0x7f0000000380)={0x1}) fcntl$lock(r7, 0x25, &(0x7f00000000c0)) mq_timedsend(r1, 0x0, 0x0, 0x3ed7, 0x0) 1.152515354s ago: executing program 0 (id=603): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x3, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000200007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x21085e, &(0x7f00000001c0)={[{@grpquota}, {@nouid32}, {@minixdf}]}, 0x1, 0x504, &(0x7f0000001480)="$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") fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x2c, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000fe2a1f97f1", @ANYRES32], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 780.004998ms ago: executing program 3 (id=604): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000400000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(r1, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e000000020013000200000000000000ff0800ed05000600200000000a00060000000000000500e50000070000001ffeff0001000003f1dc7f7c6e87020001000000000000"], 0x80}}, 0x0) sendmsg$key(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0x10}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f0000000440)={&(0x7f0000000280), 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0xa4, r3, 0x300, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xfffffffa}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}]}, @IPVS_CMD_ATTR_DEST={0x6c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x6}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xffffff9b}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x7}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x1000}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@broadcast}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x4}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x9}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@broadcast}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffff}]}, 0xa4}, 0x1, 0x0, 0x0, 0x8044}, 0x824) r4 = socket$packet(0x11, 0x2, 0x300) socket(0x1e, 0x4, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000180)={'vcan0\x00', 0x0}) sendto$packet(r4, &(0x7f0000000080)="18", 0x10, 0x0, &(0x7f00000000c0)={0x11, 0xe, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) 767.644039ms ago: executing program 3 (id=605): r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000080)={r0}) listen(r1, 0xa) r2 = socket$inet_dccp(0x2, 0x6, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1809000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0xd, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r4}, 0x10) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) sendmmsg$inet(r2, &(0x7f0000004600)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000280)="05", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000240)="f9", 0x1}], 0x1}}], 0x2, 0x0) 702.578225ms ago: executing program 4 (id=606): syz_read_part_table(0x5be, &(0x7f00000005c0)="$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") r0 = open(&(0x7f0000000200)='./bus\x00', 0x14507e, 0x0) fallocate(r0, 0x0, 0x0, 0x1000f8) sendfile(r0, r0, 0x0, 0x100000008) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) 701.848006ms ago: executing program 2 (id=607): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYRES32=r1, @ANYRES32=r0, @ANYRESHEX=0x0], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket(0x11, 0x800000003, 0x0) socket(0x10, 0x3, 0x0) r2 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000000)) mlock(&(0x7f000015f000/0x3000)=nil, 0x3000) lseek(0xffffffffffffffff, 0x0, 0x1) ioctl$PAGEMAP_SCAN(r2, 0xc0606610, &(0x7f0000000100)={0x60, 0x0, &(0x7f0000536000/0x4000)=nil, &(0x7f0000536000/0x1000)=nil, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x6, 0xc}) r3 = syz_io_uring_setup(0x10e, &(0x7f0000000140)={0x0, 0x0, 0x800}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_SHUTDOWN={0x22, 0x13}) io_uring_enter(r3, 0x47f9, 0x0, 0x0, 0x0, 0x0) rt_sigsuspend(&(0x7f0000000040), 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) pipe(0x0) r6 = syz_open_dev$tty20(0xc, 0x4, 0x0) r7 = gettid() socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, 0x0, 0x20000800) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) write$binfmt_misc(r6, &(0x7f0000000240), 0xfffffecc) 650.97291ms ago: executing program 3 (id=608): perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x34, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$inet_sctp(0x2, 0x1, 0x84) openat$ptmx(0xffffff9c, &(0x7f0000000040), 0x240000, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x5, 0x9, 0x84, 0x144, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000680), 0x0, 0x6c, r0}, 0x38) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={0x0, 0x1100, &(0x7f0000000080)={&(0x7f00000006c0)=@updsa={0x138, 0x1a, 0x1, 0x0, 0x0, {{@in6=@private0, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2}, {@in=@local, 0x0, 0x33}, @in6=@private1, {0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0xffffffffffffffff}, {}, {}, 0x1, 0x3503, 0x2}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x138}}, 0x0) 616.101133ms ago: executing program 3 (id=609): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYRES32=r1, @ANYRES32=r0, @ANYRESHEX=0x0], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket(0x11, 0x800000003, 0x0) syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000000)) mlock(&(0x7f000015f000/0x3000)=nil, 0x3000) lseek(0xffffffffffffffff, 0x0, 0x1) r2 = syz_io_uring_setup(0x10e, &(0x7f0000000140)={0x0, 0x0, 0x800}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_SHUTDOWN={0x22, 0x13}) io_uring_enter(r2, 0x47f9, 0x0, 0x0, 0x0, 0x0) rt_sigsuspend(&(0x7f0000000040), 0x8) 556.181259ms ago: executing program 4 (id=610): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000100), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x14) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mprotect(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x1f2f, 0xe, 0x2f, &(0x7f00000007c0)="9f44948721919580684010a49e66", 0x0, 0x241, 0x0, 0xb1, 0x0, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb42067575318c39"}, 0x23) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYRES32, @ANYRES32=r0, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRESDEC=r0, @ANYBLOB='\x00'/28], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) read$usbmon(r3, &(0x7f0000000140)=""/196, 0xc4) syz_open_dev$usbfs(0x0, 0x20000007d, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x200001ef, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010010850000004300000095"], 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r4}, 0xc) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r5}, 0x10) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f0000000800)=[{&(0x7f0000000c00)="89e7ee2c7cdad9b4b47381c988a8", 0xe}], 0x1) 291.515583ms ago: executing program 1 (id=611): r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000000)=ANY=[@ANYRES8=r0, @ANYRES32=r0, @ANYRESHEX=r0, @ANYRESOCT], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, &(0x7f0000000680)=""/229, &(0x7f0000000040)=0xe5) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x4001, 0x8000000, 0x238, 0xf8, 0x720d, 0x148, 0xf8, 0x148, 0x1c8, 0x240, 0x240, 0x1c8, 0x240, 0x7fffffe, 0x0, {[{{@ip={@remote, @empty, 0x0, 0x0, 'wlan1\x00', 'ip6erspan0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @dev}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x298) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) r4 = getpid() bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x0, 0xc, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) ptrace$PTRACE_GETSIGMASK(0x420a, r4, 0x0, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_linger(r5, 0x1, 0xd, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000000000000000000640000000f000000c5000000a000020095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000420009030000000000000000f3b9541a00000000"], 0x18}}, 0x0) syz_pidfd_open(r4, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./bus\x00', 0xe, &(0x7f0000000780)={[{@jqfmt_vfsv0}, {@user_xattr}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@auto_da_alloc}, {@barrier}, {@quota}]}, 0x3, 0x44b, &(0x7f00000001c0)="$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") r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000500)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000640)=@broute={'broute\x00', 0x20, 0x1, 0x170, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200006c0], 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"]}, 0x178) write$binfmt_script(r8, &(0x7f0000000000), 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r8, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) 275.498685ms ago: executing program 0 (id=612): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r1}, &(0x7f0000000280), &(0x7f00000002c0)=r2}, 0x20) sendmmsg$unix(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x33fe0, 0x20040040}}, {{&(0x7f0000000800)=@abs={0x1, 0x0, 0x4e22}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x20000010}}], 0x2, 0x400c810) 226.796369ms ago: executing program 0 (id=613): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000001240)='./file2\x00', 0x0, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11e0, &(0x7f00000036c0)="$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") r0 = open(&(0x7f0000000040)='./file2\x00', 0x181042, 0x0) write$P9_RREADDIR(r0, &(0x7f0000000500), 0xbf) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) ftruncate(r1, 0x200000d) sendfile(r0, r0, &(0x7f0000000240), 0x7f06) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000900850000008200000095"], &(0x7f0000000800)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r5 = fsopen(&(0x7f0000000200)='mqueue\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x0) mknodat(r6, 0x0, 0x0, 0x0) bind$tipc(r4, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x1}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = openat$ptmx(0xffffff9c, &(0x7f0000000000), 0x400081, 0x0) ioctl$GIO_CMAP(r7, 0x4b70, &(0x7f0000000080)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kfree\x00', r3}, 0x10) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000004c0)={'ip6gre0\x00', &(0x7f0000000440)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, 0x0, 0x0, 0x0, 0x3}}) r8 = socket(0x10, 0x803, 0x0) sendto(r8, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r8, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, 0x0, 0x0, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000600)={'syztnl1\x00', 0x0}) 0s ago: executing program 1 (id=614): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000000f800b70400000000000085000000c3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000005c0)='sched_switch\x00', r1}, 0x10) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x21085e, &(0x7f00000001c0)={[{@data_err_ignore}, {@nouid32}, {@minixdf}]}, 0x1, 0x51c, &(0x7f0000000780)="$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") r2 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r2, 0x7, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): that may corrupt user memory! [ 40.333842][ T4119] loop3: detected capacity change from 0 to 128 [ 40.335541][ T4126] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.345475][ T4119] ext4: Unknown parameter 'hash' [ 40.370177][ T4126] ext4 filesystem being mounted at /26/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 40.411286][ T4137] netlink: 'syz.3.151': attribute type 21 has an invalid length. [ 40.419059][ T4137] netlink: 128 bytes leftover after parsing attributes in process `syz.3.151'. [ 40.429216][ T4137] netlink: 'syz.3.151': attribute type 5 has an invalid length. [ 40.430104][ T3271] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.437107][ T4137] netlink: 3 bytes leftover after parsing attributes in process `syz.3.151'. [ 40.552923][ T4140] loop3: detected capacity change from 0 to 8192 [ 40.605037][ T4140] loop7: detected capacity change from 0 to 7 [ 40.611430][ T4140] Buffer I/O error on dev loop7, logical block 0, async page read [ 40.619385][ T3344] usb 2-1: SetAddress Request (2) to port 0 [ 40.619692][ T4140] Buffer I/O error on dev loop7, logical block 0, async page read [ 40.625355][ T3344] usb 2-1: new SuperSpeed USB device number 2 using vhci_hcd [ 40.633099][ T4140] loop7: unable to read partition table [ 40.647478][ T4140] loop_reread_partitions: partition scan of loop7 (þ被xüŸÑø éÚ¬§½dƤ´à–ƒÝ¡¯¨â·û [ 40.647478][ T4140] ) failed (rc=-5) [ 40.763578][ T4144] loop4: detected capacity change from 0 to 512 [ 40.776692][ T4144] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.789310][ T4144] ext4 filesystem being mounted at /28/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 40.875526][ T4129] vhci_hcd: connection reset by peer [ 40.881004][ T49] vhci_hcd: stop threads [ 40.885299][ T49] vhci_hcd: release socket [ 40.889734][ T49] vhci_hcd: disconnect device [ 40.932780][ T3271] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.933446][ T4149] loop1: detected capacity change from 0 to 2048 [ 40.963451][ T4153] xt_TPROXY: Can be used only with -p tcp or -p udp [ 40.975742][ T4149] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.995609][ T4149] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.080838][ T4170] loop0: detected capacity change from 0 to 512 [ 41.112377][ T4170] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.125892][ T4170] ext4 filesystem being mounted at /37/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 41.146695][ T4168] loop4: detected capacity change from 0 to 128 [ 41.158052][ T4179] FAULT_INJECTION: forcing a failure. [ 41.158052][ T4179] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 41.171195][ T4179] CPU: 0 UID: 0 PID: 4179 Comm: syz.1.163 Not tainted 6.12.0-rc1-syzkaller-00031-ge32cde8d2bd7 #0 [ 41.181880][ T4179] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 41.187523][ T4168] ext4: Unknown parameter 'hash' [ 41.191921][ T4179] Call Trace: [ 41.191929][ T4179] [ 41.191937][ T4179] dump_stack_lvl+0xf2/0x150 [ 41.207738][ T4179] dump_stack+0x15/0x20 [ 41.211974][ T4179] should_fail_ex+0x223/0x230 [ 41.216722][ T4179] should_fail+0xb/0x10 [ 41.220874][ T4179] should_fail_usercopy+0x1a/0x20 [ 41.225900][ T4179] copy_to_user_nofault+0x7a/0x110 [ 41.231125][ T4179] bpf_probe_write_user+0x80/0xc0 [ 41.236255][ T4179] bpf_prog_5cb5524816e22ab1+0x48/0x4e [ 41.241726][ T4179] bpf_trace_run3+0x10c/0x1d0 [ 41.246396][ T4179] ? audit_log_end+0x1d0/0x1e0 [ 41.251151][ T4179] ? audit_log_end+0x1d0/0x1e0 [ 41.255905][ T4179] kmem_cache_free+0x237/0x2d0 [ 41.260679][ T4179] audit_log_end+0x1d0/0x1e0 [ 41.265300][ T4179] audit_seccomp+0x107/0x130 [ 41.269881][ T4179] __seccomp_filter+0x6fa/0x1180 [ 41.274815][ T4179] ? proc_fail_nth_write+0x12a/0x150 [ 41.280146][ T4179] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 41.285773][ T4179] ? vfs_write+0x580/0x910 [ 41.290184][ T4179] ? __fget_files+0x1d4/0x210 [ 41.294866][ T4179] __secure_computing+0x9f/0x1c0 [ 41.299810][ T4179] syscall_trace_enter+0xd1/0x1f0 [ 41.304836][ T4179] ? fpregs_assert_state_consistent+0x83/0xa0 [ 41.310951][ T4179] do_syscall_64+0xaa/0x1c0 [ 41.315529][ T4179] ? clear_bhb_loop+0x55/0xb0 [ 41.320258][ T4179] ? clear_bhb_loop+0x55/0xb0 [ 41.324980][ T4179] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 41.330870][ T4179] RIP: 0033:0x7f7fe88ddff9 [ 41.335289][ T4179] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 41.354887][ T4179] RSP: 002b:00007f7fe7530038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 41.363338][ T4179] RAX: ffffffffffffffda RBX: 00007f7fe8a96058 RCX: 00007f7fe88ddff9 [ 41.371375][ T4179] RDX: 0000000000000001 RSI: 00000000200003c0 RDI: 000000000000000a [ 41.379334][ T4179] RBP: 00007f7fe7530090 R08: 0000000000000000 R09: 0000000000000000 [ 41.387294][ T4179] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 41.395252][ T4179] R13: 0000000000000000 R14: 00007f7fe8a96058 R15: 00007fffe9467358 [ 41.403214][ T4179] [ 41.466024][ T3273] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.508287][ T4190] loop0: detected capacity change from 0 to 164 [ 41.523655][ T4193] loop3: detected capacity change from 0 to 512 [ 41.557878][ T4190] rock: corrupted directory entry. extent=41, offset=65536, size=8 [ 41.577352][ T4194] loop4: detected capacity change from 0 to 512 [ 41.602624][ T4193] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c01c, mo2=0002] [ 41.622485][ T4194] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.637197][ T4193] System zones: 0-2, 18-18, 34-34 [ 41.653660][ T4193] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.169: bg 0: block 248: padding at end of block bitmap is not set [ 41.684894][ T4193] EXT4-fs error (device loop3): ext4_acquire_dquot:6879: comm syz.3.169: Failed to acquire dquot type 1 [ 41.700852][ T4194] ext4 filesystem being mounted at /33/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 41.717595][ T4212] loop2: detected capacity change from 0 to 512 [ 41.724446][ T4193] EXT4-fs (loop3): 1 truncate cleaned up [ 41.730456][ T4193] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.755321][ T4212] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c01c, mo2=0002] [ 41.756663][ T4193] ext4 filesystem being mounted at /24/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 41.763960][ T4212] System zones: 0-2, 18-18, 34-34 [ 41.780100][ T4212] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.175: bg 0: block 248: padding at end of block bitmap is not set [ 41.814278][ T4212] EXT4-fs error (device loop2): ext4_acquire_dquot:6879: comm syz.2.175: Failed to acquire dquot type 1 [ 41.826168][ T4212] EXT4-fs (loop2): 1 truncate cleaned up [ 41.840844][ T4212] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.856787][ T4212] ext4 filesystem being mounted at /24/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 41.873346][ T3549] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.885712][ T3265] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.975165][ T8] IPVS: starting estimator thread 0... [ 41.989699][ T4222] Cannot find del_set index 0 as target [ 42.015402][ T4222] IPVS: sed: SCTP 127.0.0.1:0 - no destination available [ 42.016310][ T4220] loop3: detected capacity change from 0 to 128 [ 42.035911][ T4225] loop1: detected capacity change from 0 to 512 [ 42.042165][ T4220] ext4: Unknown parameter 'hash' [ 42.063640][ T4227] capability: warning: `syz.2.180' uses deprecated v2 capabilities in a way that may be insecure [ 42.063933][ T4223] IPVS: using max 2880 ests per chain, 144000 per kthread [ 42.075472][ T4227] 9pnet_fd: p9_fd_create_tcp (4227): problem binding to privport [ 42.107883][ T4225] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.124264][ T4225] ext4 filesystem being mounted at /42/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 42.141383][ T8] IPVS: starting estimator thread 0... [ 42.150156][ T4232] IPVS: sed: SCTP 127.0.0.1:0 - no destination available [ 42.158757][ T3266] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.182640][ T4235] FAULT_INJECTION: forcing a failure. [ 42.182640][ T4235] name failslab, interval 1, probability 0, space 0, times 0 [ 42.195361][ T4235] CPU: 0 UID: 0 PID: 4235 Comm: syz.3.183 Not tainted 6.12.0-rc1-syzkaller-00031-ge32cde8d2bd7 #0 [ 42.205955][ T4235] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 42.216097][ T4235] Call Trace: [ 42.219365][ T4235] [ 42.222284][ T4235] dump_stack_lvl+0xf2/0x150 [ 42.226922][ T4235] dump_stack+0x15/0x20 [ 42.231065][ T4235] should_fail_ex+0x223/0x230 [ 42.235800][ T4235] ? __alloc_skb+0x10b/0x310 [ 42.240437][ T4235] should_failslab+0x8f/0xb0 [ 42.245017][ T4235] kmem_cache_alloc_node_noprof+0x51/0x2b0 [ 42.250871][ T4235] ? __rtnl_unlock+0x99/0xb0 [ 42.255468][ T4235] __alloc_skb+0x10b/0x310 [ 42.259893][ T4235] netlink_ack+0xef/0x4f0 [ 42.264232][ T4235] ? __dev_queue_xmit+0x161/0x1fe0 [ 42.269367][ T4235] netlink_rcv_skb+0x19c/0x230 [ 42.274126][ T4235] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 42.279574][ T4235] rtnetlink_rcv+0x1c/0x30 [ 42.284041][ T4235] netlink_unicast+0x599/0x670 [ 42.288811][ T4235] netlink_sendmsg+0x5cc/0x6e0 [ 42.293577][ T4235] ? __pfx_netlink_sendmsg+0x10/0x10 [ 42.298848][ T4235] __sock_sendmsg+0x140/0x180 [ 42.303513][ T4235] ____sys_sendmsg+0x312/0x410 [ 42.308359][ T4235] __sys_sendmmsg+0x259/0x500 [ 42.313100][ T4235] __x64_sys_sendmmsg+0x57/0x70 [ 42.317945][ T4235] x64_sys_call+0xa49/0x2d60 [ 42.322525][ T4235] do_syscall_64+0xc9/0x1c0 [ 42.327044][ T4235] ? clear_bhb_loop+0x55/0xb0 [ 42.331719][ T4235] ? clear_bhb_loop+0x55/0xb0 [ 42.336468][ T4235] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 42.342439][ T4235] RIP: 0033:0x7f508c6cdff9 [ 42.346843][ T4235] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 42.366490][ T4235] RSP: 002b:00007f508b341038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 42.374979][ T4235] RAX: ffffffffffffffda RBX: 00007f508c885f80 RCX: 00007f508c6cdff9 [ 42.382962][ T4235] RDX: 040000000000009f RSI: 00000000200002c0 RDI: 0000000000000003 [ 42.390961][ T4235] RBP: 00007f508b341090 R08: 0000000000000000 R09: 0000000000000000 [ 42.398923][ T4235] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 42.406878][ T4235] R13: 0000000000000000 R14: 00007f508c885f80 R15: 00007ffe7ce6b618 [ 42.414841][ T4235] [ 42.420623][ T4233] IPVS: using max 3120 ests per chain, 156000 per kthread [ 42.466440][ T4238] loop1: detected capacity change from 0 to 512 [ 42.469416][ T4241] loop3: detected capacity change from 0 to 1024 [ 42.474516][ T3271] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.488910][ T4245] loop2: detected capacity change from 0 to 512 [ 42.515430][ T4252] FAULT_INJECTION: forcing a failure. [ 42.515430][ T4252] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 42.515449][ T4238] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.528552][ T4252] CPU: 0 UID: 0 PID: 4252 Comm: syz.4.187 Not tainted 6.12.0-rc1-syzkaller-00031-ge32cde8d2bd7 #0 [ 42.528579][ T4252] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 42.561911][ T4252] Call Trace: [ 42.565178][ T4252] [ 42.568121][ T4252] dump_stack_lvl+0xf2/0x150 [ 42.572703][ T4252] dump_stack+0x15/0x20 [ 42.576847][ T4252] should_fail_ex+0x223/0x230 [ 42.581540][ T4252] should_fail+0xb/0x10 [ 42.585737][ T4252] should_fail_usercopy+0x1a/0x20 [ 42.590763][ T4252] _copy_from_user+0x1e/0xd0 [ 42.595404][ T4252] copy_msghdr_from_user+0x54/0x2a0 [ 42.600593][ T4252] __sys_sendmsg+0x171/0x270 [ 42.605213][ T4252] __x64_sys_sendmsg+0x46/0x50 [ 42.609987][ T4252] x64_sys_call+0x2689/0x2d60 [ 42.614882][ T4252] do_syscall_64+0xc9/0x1c0 [ 42.619371][ T4252] ? clear_bhb_loop+0x55/0xb0 [ 42.624053][ T4252] ? clear_bhb_loop+0x55/0xb0 [ 42.628724][ T4252] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 42.634674][ T4252] RIP: 0033:0x7ffa5fb7dff9 [ 42.639082][ T4252] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 42.658713][ T4252] RSP: 002b:00007ffa5e7f7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 42.667119][ T4252] RAX: ffffffffffffffda RBX: 00007ffa5fd35f80 RCX: 00007ffa5fb7dff9 [ 42.675134][ T4252] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000006 [ 42.683106][ T4252] RBP: 00007ffa5e7f7090 R08: 0000000000000000 R09: 0000000000000000 [ 42.691095][ T4252] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 42.699053][ T4252] R13: 0000000000000000 R14: 00007ffa5fd35f80 R15: 00007fff73fe9888 [ 42.707015][ T4252] [ 42.711668][ T4238] ext4 filesystem being mounted at /43/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 42.722454][ T4241] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.736552][ T4245] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c11c, mo2=0002] [ 42.741503][ T4238] Process accounting resumed [ 42.744615][ T4245] System zones: 0-2, 18-18, 34-34 [ 42.754951][ T4245] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.186: bg 0: block 248: padding at end of block bitmap is not set [ 42.755166][ T4238] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 42.769498][ T4245] EXT4-fs error (device loop2): ext4_acquire_dquot:6879: comm syz.2.186: Failed to acquire dquot type 1 [ 42.791107][ T4245] EXT4-fs (loop2): 1 truncate cleaned up [ 42.797184][ T4245] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.809708][ T4245] ext4 filesystem being mounted at /28/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 42.846511][ T3266] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.857173][ T4258] loop4: detected capacity change from 0 to 2048 [ 42.874680][ T3265] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.878563][ T4262] loop1: detected capacity change from 0 to 512 [ 42.887851][ T4258] EXT4-fs: Ignoring removed orlov option [ 42.904370][ T3549] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.905656][ T4262] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c11c, mo2=0002] [ 42.921832][ T4262] System zones: 0-2, 18-18, 34-34 [ 42.927998][ T4262] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.191: bg 0: block 248: padding at end of block bitmap is not set [ 42.928462][ T4258] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.957125][ T4262] EXT4-fs error (device loop1): ext4_acquire_dquot:6879: comm syz.1.191: Failed to acquire dquot type 1 [ 42.983566][ T4262] EXT4-fs (loop1): 1 truncate cleaned up [ 42.984805][ T4258] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 42.989598][ T4262] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.018769][ T4262] ext4 filesystem being mounted at /44/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 43.032369][ T4258] EXT4-fs (loop4): Remounting filesystem read-only [ 43.050269][ T4277] IPVS: sed: SCTP 127.0.0.1:0 - no destination available [ 43.059678][ T3266] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.128921][ T3271] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.190198][ T4292] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 43.250456][ T4297] loop3: detected capacity change from 0 to 512 [ 43.275176][ T4297] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c11c, mo2=0002] [ 43.283229][ T4297] System zones: 0-2, 18-18, 34-34 [ 43.288849][ T4297] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.202: bg 0: block 248: padding at end of block bitmap is not set [ 43.303548][ T4297] EXT4-fs error (device loop3): ext4_acquire_dquot:6879: comm syz.3.202: Failed to acquire dquot type 1 [ 43.315391][ T4297] EXT4-fs (loop3): 1 truncate cleaned up [ 43.321481][ T4297] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.334160][ T4297] ext4 filesystem being mounted at /33/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 43.371508][ T3549] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.393943][ T4303] loop3: detected capacity change from 0 to 512 [ 43.415416][ T4303] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.428133][ T4303] ext4 filesystem being mounted at /34/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 43.452757][ T3549] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.474713][ T4307] IPVS: sed: SCTP 127.0.0.1:0 - no destination available [ 43.602916][ T4311] loop3: detected capacity change from 0 to 512 [ 43.615117][ T4311] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c11c, mo2=0002] [ 43.623221][ T4311] System zones: 0-2, 18-18, 34-34 [ 43.629015][ T4311] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.206: bg 0: block 248: padding at end of block bitmap is not set [ 43.643321][ T4311] __quota_error: 468 callbacks suppressed [ 43.643335][ T4311] Quota error (device loop3): write_blk: dquota write failed [ 43.656581][ T4311] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 43.666516][ T4311] EXT4-fs error (device loop3): ext4_acquire_dquot:6879: comm syz.3.206: Failed to acquire dquot type 1 [ 43.678345][ T4311] EXT4-fs (loop3): 1 truncate cleaned up [ 43.684457][ T4311] ext4 filesystem being mounted at /37/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 43.722377][ T4315] loop0: detected capacity change from 0 to 1024 [ 43.730032][ T4315] EXT4-fs: Ignoring removed orlov option [ 43.736211][ T4315] EXT4-fs: Ignoring removed nomblk_io_submit option [ 43.756776][ T4315] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a842e018, mo2=0002] [ 43.765134][ T4315] System zones: 0-1, 3-12 [ 43.778926][ T4325] loop3: detected capacity change from 0 to 1024 [ 43.786309][ T4325] EXT4-fs (loop3): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 43.804982][ T4327] xt_TPROXY: Can be used only with -p tcp or -p udp [ 43.815561][ T4327] x_tables: duplicate underflow at hook 4 [ 43.819434][ T4325] netlink: 12 bytes leftover after parsing attributes in process `syz.3.211'. [ 43.830244][ T4325] netlink: 12 bytes leftover after parsing attributes in process `syz.3.211'. [ 43.843259][ T29] audit: type=1400 audit(1727864564.590:829): avc: denied { write } for pid=4330 comm="syz.0.213" path="socket:[6472]" dev="sockfs" ino=6472 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 43.867254][ T29] audit: type=1400 audit(1727864564.590:830): avc: denied { nlmsg_read } for pid=4330 comm="syz.0.213" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 43.871311][ T4331] loop0: detected capacity change from 0 to 512 [ 43.898703][ T4331] EXT4-fs: Ignoring removed orlov option [ 43.904494][ T4331] ext2: Unknown parameter 'appraise_type' [ 43.920256][ T29] audit: type=1404 audit(1727864564.670:831): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 43.935569][ T29] audit: type=1400 audit(1727864564.670:832): avc: denied { prog_load } for pid=4332 comm="syz.2.214" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 43.938565][ T4331] SELinux: Context system_u:object_r:auditd_initrc_exec_t:s0 is not valid (left unmapped). [ 43.954530][ T29] audit: type=1400 audit(1727864564.670:833): avc: denied { prog_load } for pid=4332 comm="syz.2.214" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 43.983550][ T29] audit: type=1400 audit(1727864564.670:834): avc: denied { open } for pid=4332 comm="syz.2.214" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 44.002605][ T29] audit: type=1400 audit(1727864564.670:835): avc: denied { create } for pid=4332 comm="syz.2.214" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=0 [ 44.021917][ T29] audit: type=1400 audit(1727864564.670:836): avc: denied { create } for pid=4332 comm="syz.2.214" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=0 [ 44.049933][ T4338] loop2: detected capacity change from 0 to 164 [ 44.069452][ T4338] rock: corrupted directory entry. extent=41, offset=65536, size=8 [ 44.124200][ T4347] loop4: detected capacity change from 0 to 512 [ 44.144131][ T4344] netlink: 16 bytes leftover after parsing attributes in process `syz.1.216'. [ 44.146231][ T4353] loop2: detected capacity change from 0 to 512 [ 44.153053][ T4344] netlink: 8 bytes leftover after parsing attributes in process `syz.1.216'. [ 44.153738][ T4344] Zero length message leads to an empty skb [ 44.174663][ T4347] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c11c, mo2=0002] [ 44.182900][ T4347] System zones: 0-2, 18-18, 34-34 [ 44.190171][ T4347] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.218: bg 0: block 248: padding at end of block bitmap is not set [ 44.207042][ T4347] EXT4-fs error (device loop4): ext4_acquire_dquot:6879: comm syz.4.218: Failed to acquire dquot type 1 [ 44.221086][ T4353] ext4 filesystem being mounted at /33/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 44.242789][ T4361] loop1: detected capacity change from 0 to 2048 [ 44.254149][ T4353] Process accounting resumed [ 44.267392][ T4363] loop0: detected capacity change from 0 to 1024 [ 44.270469][ T4353] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 44.275325][ T4363] EXT4-fs: Ignoring removed orlov option [ 44.290728][ T4363] EXT4-fs: Ignoring removed nomblk_io_submit option [ 44.292933][ T4347] EXT4-fs (loop4): 1 truncate cleaned up [ 44.305605][ T4363] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a842e018, mo2=0002] [ 44.313232][ T4347] ext4 filesystem being mounted at /37/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 44.324078][ T4363] System zones: 0-1, 3-12 [ 44.377258][ T4373] loop2: detected capacity change from 0 to 164 [ 44.390228][ T4373] rock: corrupted directory entry. extent=41, offset=65536, size=8 [ 44.433409][ T4379] loop1: detected capacity change from 0 to 128 [ 44.445411][ T4379] ext4: Unknown parameter 'hash' [ 44.500775][ T4385] loop1: detected capacity change from 0 to 512 [ 44.512295][ T4385] EXT4-fs: Ignoring removed orlov option [ 44.520075][ T4385] ext2: Unknown parameter 'appraise_type' [ 44.572514][ T4391] loop0: detected capacity change from 0 to 128 [ 44.579163][ T4391] ext4: Unknown parameter 'hash' [ 44.643293][ T4397] loop3: detected capacity change from 0 to 512 [ 44.666085][ T4397] ext4 filesystem being mounted at /42/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 44.707968][ T4405] loop3: detected capacity change from 0 to 2048 [ 44.757155][ T4410] loop3: detected capacity change from 0 to 512 [ 44.774728][ T4410] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c11c, mo2=0002] [ 44.782796][ T4410] System zones: 0-2, 18-18, 34-34 [ 44.789370][ T4410] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.235: bg 0: block 248: padding at end of block bitmap is not set [ 44.804791][ T4410] EXT4-fs error (device loop3): ext4_acquire_dquot:6879: comm syz.3.235: Failed to acquire dquot type 1 [ 44.811388][ T4414] loop0: detected capacity change from 0 to 1024 [ 44.822640][ T4410] EXT4-fs (loop3): 1 truncate cleaned up [ 44.822853][ T4414] EXT4-fs: Ignoring removed orlov option [ 44.828721][ T4410] ext4 filesystem being mounted at /44/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 44.834904][ T4414] EXT4-fs: Ignoring removed nomblk_io_submit option [ 44.854700][ T4414] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a842e018, mo2=0002] [ 44.862902][ T4414] System zones: 0-1, 3-12 [ 44.972176][ T4424] loop3: detected capacity change from 0 to 128 [ 44.978700][ T4424] ext4: Unknown parameter 'hash' [ 45.031801][ T4429] loop0: detected capacity change from 0 to 128 [ 45.038403][ T4429] ext4: Unknown parameter 'hash' [ 45.068260][ T4436] netlink: 28 bytes leftover after parsing attributes in process `syz.0.246'. [ 45.122181][ T4442] loop0: detected capacity change from 0 to 2048 [ 45.214699][ T4449] loop4: detected capacity change from 0 to 1024 [ 45.221506][ T4449] EXT4-fs: Ignoring removed orlov option [ 45.232275][ T4449] EXT4-fs: Ignoring removed nomblk_io_submit option [ 45.256098][ T4449] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a842e018, mo2=0002] [ 45.264784][ T4449] System zones: 0-1, 3-12 [ 45.290157][ T4453] loop0: detected capacity change from 0 to 512 [ 45.325930][ T4453] ext4 filesystem being mounted at /60/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 45.350414][ T4459] loop4: detected capacity change from 0 to 1024 [ 45.387791][ T4459] netlink: 24 bytes leftover after parsing attributes in process `syz.4.251'. [ 45.496955][ T4466] loop2: detected capacity change from 0 to 512 [ 45.536642][ T4466] ext4 filesystem being mounted at /38/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 45.556422][ T4474] bpf_get_probe_write_proto: 11 callbacks suppressed [ 45.556444][ T4474] syz.1.256[4474] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 45.563177][ T4474] syz.1.256[4474] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 45.584578][ T4474] syz.1.256[4474] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 45.599317][ T4474] FAULT_INJECTION: forcing a failure. [ 45.599317][ T4474] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 45.623649][ T4474] CPU: 1 UID: 0 PID: 4474 Comm: syz.1.256 Not tainted 6.12.0-rc1-syzkaller-00031-ge32cde8d2bd7 #0 [ 45.634281][ T4474] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 45.644321][ T4474] Call Trace: [ 45.647584][ T4474] [ 45.650528][ T4474] dump_stack_lvl+0xf2/0x150 [ 45.655212][ T4474] dump_stack+0x15/0x20 [ 45.659381][ T4474] should_fail_ex+0x223/0x230 [ 45.664104][ T4474] should_fail+0xb/0x10 [ 45.668261][ T4474] should_fail_usercopy+0x1a/0x20 [ 45.673312][ T4474] _copy_from_iter+0xd3/0xd20 [ 45.678065][ T4474] ? kmalloc_reserve+0x16e/0x190 [ 45.682996][ T4474] ? __build_skb_around+0x196/0x1f0 [ 45.688355][ T4474] ? __alloc_skb+0x21f/0x310 [ 45.692941][ T4474] ? __virt_addr_valid+0x1ed/0x250 [ 45.698053][ T4474] ? __check_object_size+0x364/0x520 [ 45.703438][ T4474] netlink_sendmsg+0x460/0x6e0 [ 45.708242][ T4474] ? __pfx_netlink_sendmsg+0x10/0x10 [ 45.713514][ T4474] __sock_sendmsg+0x140/0x180 [ 45.718250][ T4474] ____sys_sendmsg+0x312/0x410 [ 45.723047][ T4474] __sys_sendmsg+0x1d9/0x270 [ 45.727718][ T4474] __x64_sys_sendmsg+0x46/0x50 [ 45.732526][ T4474] x64_sys_call+0x2689/0x2d60 [ 45.737195][ T4474] do_syscall_64+0xc9/0x1c0 [ 45.741686][ T4474] ? clear_bhb_loop+0x55/0xb0 [ 45.746444][ T4474] ? clear_bhb_loop+0x55/0xb0 [ 45.751121][ T4474] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 45.757069][ T4474] RIP: 0033:0x7f7fe88ddff9 [ 45.761469][ T4474] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 45.781064][ T4474] RSP: 002b:00007f7fe7551038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 45.789525][ T4474] RAX: ffffffffffffffda RBX: 00007f7fe8a95f80 RCX: 00007f7fe88ddff9 [ 45.797527][ T4474] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000006 [ 45.805486][ T4474] RBP: 00007f7fe7551090 R08: 0000000000000000 R09: 0000000000000000 [ 45.813474][ T4474] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 45.821484][ T4474] R13: 0000000000000000 R14: 00007f7fe8a95f80 R15: 00007fffe9467358 [ 45.829449][ T4474] [ 45.839069][ T3344] usb 2-1: device descriptor read/8, error -110 [ 45.848221][ T4466] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 45.954838][ T3344] usb 2-1: new SuperSpeed USB device number 2 using vhci_hcd [ 45.970180][ T4487] loop4: detected capacity change from 0 to 512 [ 45.973983][ T3344] usb 2-1: enqueue for inactive port 0 [ 45.982053][ T3344] usb 2-1: enqueue for inactive port 0 [ 45.987929][ T3344] usb 2-1: enqueue for inactive port 0 [ 46.004370][ T4487] ext4 filesystem being mounted at /43/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 46.098830][ T4494] netlink: 96 bytes leftover after parsing attributes in process `syz.2.263'. [ 46.109777][ T4494] syz.2.263[4494] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 46.109882][ T4494] syz.2.263[4494] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 46.121188][ T4494] syz.2.263[4494] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 46.127859][ T4497] syz.0.264[4497] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 46.144326][ T4497] syz.0.264[4497] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 46.167786][ T4497] syz.0.264[4497] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 46.255544][ T4500] netlink: 4 bytes leftover after parsing attributes in process `syz.0.264'. [ 46.323515][ T4508] loop2: detected capacity change from 0 to 512 [ 46.336515][ T4509] loop4: detected capacity change from 0 to 512 [ 46.355144][ T4509] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c11c, mo2=0002] [ 46.359063][ T4511] loop0: detected capacity change from 0 to 512 [ 46.363158][ T4509] System zones: 0-2, 18-18, 34-34 [ 46.380019][ T4508] ext4 filesystem being mounted at /42/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 46.390729][ T4509] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.268: bg 0: block 248: padding at end of block bitmap is not set [ 46.407277][ T4511] ext4 filesystem being mounted at /63/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 46.414023][ T4509] EXT4-fs error (device loop4): ext4_acquire_dquot:6879: comm syz.4.268: Failed to acquire dquot type 1 [ 46.432086][ T4511] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 46.452293][ T4509] EXT4-fs (loop4): 1 truncate cleaned up [ 46.459404][ T4509] ext4 filesystem being mounted at /45/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 46.540196][ T4521] sch_tbf: burst 1 is lower than device lo mtu (65550) ! [ 46.551000][ T4523] loop0: detected capacity change from 0 to 512 [ 46.565663][ T4523] ext4 filesystem being mounted at /65/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 46.581690][ T4523] Process accounting resumed [ 46.587706][ T4523] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 46.600636][ T4523] netlink: 92 bytes leftover after parsing attributes in process `syz.0.272'. [ 46.670070][ T4530] netlink: 20 bytes leftover after parsing attributes in process `syz.0.274'. [ 46.746272][ T4532] loop1: detected capacity change from 0 to 512 [ 46.765923][ T4530] loop0: detected capacity change from 0 to 512 [ 46.779987][ T4535] loop3: detected capacity change from 0 to 1024 [ 46.792123][ T4535] EXT4-fs: Ignoring removed orlov option [ 46.802494][ T4535] EXT4-fs: Ignoring removed nomblk_io_submit option [ 46.821895][ T4532] ext4 filesystem being mounted at /56/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 46.824274][ T4535] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a842e018, mo2=0002] [ 46.840465][ T4535] System zones: 0-1, 3-12 [ 46.903038][ T3341] hid-generic 0003:0095:0005.0002: unknown main item tag 0x0 [ 46.910533][ T3341] hid-generic 0003:0095:0005.0002: unknown main item tag 0x0 [ 46.918101][ T3341] hid-generic 0003:0095:0005.0002: unknown main item tag 0x0 [ 46.925707][ T3341] hid-generic 0003:0095:0005.0002: unknown main item tag 0x0 [ 46.929216][ T4539] Driver unsupported XDP return value 0 on prog (id 221) dev N/A, expect packet loss! [ 46.933083][ T3341] hid-generic 0003:0095:0005.0002: unknown main item tag 0x0 [ 46.950108][ T3341] hid-generic 0003:0095:0005.0002: unknown main item tag 0x0 [ 46.957496][ T3341] hid-generic 0003:0095:0005.0002: unknown main item tag 0x0 [ 46.964935][ T3341] hid-generic 0003:0095:0005.0002: unknown main item tag 0x0 [ 46.972307][ T3341] hid-generic 0003:0095:0005.0002: unknown main item tag 0x0 [ 46.979833][ T3341] hid-generic 0003:0095:0005.0002: unknown main item tag 0x0 [ 46.987259][ T3341] hid-generic 0003:0095:0005.0002: unknown main item tag 0x0 [ 46.994727][ T3341] hid-generic 0003:0095:0005.0002: unknown main item tag 0x0 [ 47.002101][ T3341] hid-generic 0003:0095:0005.0002: unknown main item tag 0x0 [ 47.009487][ T3341] hid-generic 0003:0095:0005.0002: unknown main item tag 0x0 [ 47.014189][ T3344] usb usb2-port1: attempt power cycle [ 47.016868][ T3341] hid-generic 0003:0095:0005.0002: unknown main item tag 0x0 [ 47.016889][ T3341] hid-generic 0003:0095:0005.0002: unknown main item tag 0x0 [ 47.036994][ T3341] hid-generic 0003:0095:0005.0002: unknown main item tag 0x0 [ 47.044404][ T3341] hid-generic 0003:0095:0005.0002: unknown main item tag 0x0 [ 47.051772][ T3341] hid-generic 0003:0095:0005.0002: unknown main item tag 0x0 [ 47.059174][ T3341] hid-generic 0003:0095:0005.0002: unknown main item tag 0x0 [ 47.066585][ T3341] hid-generic 0003:0095:0005.0002: unknown main item tag 0x0 [ 47.074033][ T3341] hid-generic 0003:0095:0005.0002: unknown main item tag 0x0 [ 47.081562][ T3341] hid-generic 0003:0095:0005.0002: unknown main item tag 0x0 [ 47.089037][ T3341] hid-generic 0003:0095:0005.0002: unknown main item tag 0x0 [ 47.096535][ T3341] hid-generic 0003:0095:0005.0002: unknown main item tag 0x0 [ 47.104102][ T3341] hid-generic 0003:0095:0005.0002: unknown main item tag 0x0 [ 47.111528][ T3341] hid-generic 0003:0095:0005.0002: unknown main item tag 0x0 [ 47.118921][ T3341] hid-generic 0003:0095:0005.0002: unknown main item tag 0x0 [ 47.126310][ T3341] hid-generic 0003:0095:0005.0002: unknown main item tag 0x0 [ 47.133688][ T3341] hid-generic 0003:0095:0005.0002: unknown main item tag 0x0 [ 47.141199][ T3341] hid-generic 0003:0095:0005.0002: unknown main item tag 0x0 [ 47.148628][ T3341] hid-generic 0003:0095:0005.0002: unknown main item tag 0x0 [ 47.156035][ T3341] hid-generic 0003:0095:0005.0002: unknown main item tag 0x0 [ 47.163416][ T3341] hid-generic 0003:0095:0005.0002: unknown main item tag 0x0 [ 47.170831][ T3341] hid-generic 0003:0095:0005.0002: unknown main item tag 0x0 [ 47.178348][ T3341] hid-generic 0003:0095:0005.0002: unknown main item tag 0x0 [ 47.185851][ T3341] hid-generic 0003:0095:0005.0002: unknown main item tag 0x0 [ 47.193219][ T3341] hid-generic 0003:0095:0005.0002: unknown main item tag 0x0 [ 47.200646][ T3341] hid-generic 0003:0095:0005.0002: unknown main item tag 0x0 [ 47.208064][ T3341] hid-generic 0003:0095:0005.0002: unknown main item tag 0x0 [ 47.215474][ T3341] hid-generic 0003:0095:0005.0002: unknown main item tag 0x0 [ 47.222843][ T3341] hid-generic 0003:0095:0005.0002: unknown main item tag 0x0 [ 47.230231][ T3341] hid-generic 0003:0095:0005.0002: unknown main item tag 0x0 [ 47.237607][ T3341] hid-generic 0003:0095:0005.0002: unknown main item tag 0x0 [ 47.245010][ T3341] hid-generic 0003:0095:0005.0002: unknown main item tag 0x0 [ 47.252378][ T3341] hid-generic 0003:0095:0005.0002: unknown main item tag 0x0 [ 47.259756][ T3341] hid-generic 0003:0095:0005.0002: unknown main item tag 0x0 [ 47.267144][ T3341] hid-generic 0003:0095:0005.0002: unknown main item tag 0x0 [ 47.274545][ T3341] hid-generic 0003:0095:0005.0002: unknown main item tag 0x0 [ 47.281967][ T3341] hid-generic 0003:0095:0005.0002: unknown main item tag 0x0 [ 47.289353][ T3341] hid-generic 0003:0095:0005.0002: unknown main item tag 0x0 [ 47.296753][ T3341] hid-generic 0003:0095:0005.0002: unknown main item tag 0x0 [ 47.304176][ T3341] hid-generic 0003:0095:0005.0002: unknown main item tag 0x0 [ 47.311544][ T3341] hid-generic 0003:0095:0005.0002: unknown main item tag 0x0 [ 47.318946][ T3341] hid-generic 0003:0095:0005.0002: unknown main item tag 0x0 [ 47.326359][ T3341] hid-generic 0003:0095:0005.0002: unknown main item tag 0x0 [ 47.333792][ T3341] hid-generic 0003:0095:0005.0002: unknown main item tag 0x0 [ 47.341231][ T3341] hid-generic 0003:0095:0005.0002: unknown main item tag 0x0 [ 47.348614][ T3341] hid-generic 0003:0095:0005.0002: unknown main item tag 0x0 [ 47.356017][ T3341] hid-generic 0003:0095:0005.0002: unknown main item tag 0x0 [ 47.363373][ T3341] hid-generic 0003:0095:0005.0002: unknown main item tag 0x0 [ 47.370840][ T3341] hid-generic 0003:0095:0005.0002: unknown main item tag 0x0 [ 47.378337][ T3341] hid-generic 0003:0095:0005.0002: unknown main item tag 0x0 [ 47.385719][ T3341] hid-generic 0003:0095:0005.0002: unknown main item tag 0x0 [ 47.393084][ T3341] hid-generic 0003:0095:0005.0002: unknown main item tag 0x0 [ 47.400465][ T3341] hid-generic 0003:0095:0005.0002: unknown main item tag 0x0 [ 47.407993][ T3341] hid-generic 0003:0095:0005.0002: unknown main item tag 0x0 [ 47.415426][ T3341] hid-generic 0003:0095:0005.0002: unknown main item tag 0x0 [ 47.422872][ T3341] hid-generic 0003:0095:0005.0002: unknown main item tag 0x0 [ 47.430295][ T3341] hid-generic 0003:0095:0005.0002: unknown main item tag 0x0 [ 47.437763][ T3341] hid-generic 0003:0095:0005.0002: unknown main item tag 0x0 [ 47.445259][ T3341] hid-generic 0003:0095:0005.0002: unknown main item tag 0x0 [ 47.452628][ T3341] hid-generic 0003:0095:0005.0002: unknown main item tag 0x0 [ 47.460022][ T3341] hid-generic 0003:0095:0005.0002: unknown main item tag 0x0 [ 47.467609][ T3341] hid-generic 0003:0095:0005.0002: unknown main item tag 0x0 [ 47.475013][ T3341] hid-generic 0003:0095:0005.0002: unknown main item tag 0x0 [ 47.482404][ T3341] hid-generic 0003:0095:0005.0002: unknown main item tag 0x0 [ 47.489805][ T3341] hid-generic 0003:0095:0005.0002: unknown main item tag 0x0 [ 47.497192][ T3341] hid-generic 0003:0095:0005.0002: unknown main item tag 0x0 [ 47.504568][ T3341] hid-generic 0003:0095:0005.0002: unknown main item tag 0x0 [ 47.511992][ T3341] hid-generic 0003:0095:0005.0002: unknown main item tag 0x0 [ 47.519441][ T3341] hid-generic 0003:0095:0005.0002: unknown main item tag 0x0 [ 47.526893][ T3341] hid-generic 0003:0095:0005.0002: unknown main item tag 0x0 [ 47.534289][ T3341] hid-generic 0003:0095:0005.0002: unknown main item tag 0x0 [ 47.541672][ T3341] hid-generic 0003:0095:0005.0002: unknown main item tag 0x0 [ 47.549142][ T3341] hid-generic 0003:0095:0005.0002: unknown main item tag 0x0 [ 47.556550][ T3341] hid-generic 0003:0095:0005.0002: unknown main item tag 0x0 [ 47.563935][ T3341] hid-generic 0003:0095:0005.0002: unknown main item tag 0x0 [ 47.571299][ T3341] hid-generic 0003:0095:0005.0002: unknown main item tag 0x0 [ 47.578766][ T3341] hid-generic 0003:0095:0005.0002: unknown main item tag 0x0 [ 47.586195][ T3341] hid-generic 0003:0095:0005.0002: unknown main item tag 0x0 [ 47.593685][ T3341] hid-generic 0003:0095:0005.0002: unknown main item tag 0x0 [ 47.601131][ T3341] hid-generic 0003:0095:0005.0002: unknown main item tag 0x0 [ 47.608527][ T3341] hid-generic 0003:0095:0005.0002: unknown main item tag 0x0 [ 47.615917][ T3341] hid-generic 0003:0095:0005.0002: unknown main item tag 0x0 [ 47.623362][ T3341] hid-generic 0003:0095:0005.0002: unknown main item tag 0x0 [ 47.630756][ T3341] hid-generic 0003:0095:0005.0002: unknown main item tag 0x0 [ 47.638138][ T3341] hid-generic 0003:0095:0005.0002: unknown main item tag 0x0 [ 47.645533][ T3341] hid-generic 0003:0095:0005.0002: unknown main item tag 0x0 [ 47.652980][ T3341] hid-generic 0003:0095:0005.0002: unknown main item tag 0x0 [ 47.660396][ T3341] hid-generic 0003:0095:0005.0002: unknown main item tag 0x0 [ 47.667779][ T3341] hid-generic 0003:0095:0005.0002: unknown main item tag 0x0 [ 47.675154][ T3341] hid-generic 0003:0095:0005.0002: unknown main item tag 0x0 [ 47.682524][ T3341] hid-generic 0003:0095:0005.0002: unknown main item tag 0x0 [ 47.689928][ T3341] hid-generic 0003:0095:0005.0002: unknown main item tag 0x0 [ 47.697381][ T3341] hid-generic 0003:0095:0005.0002: unknown main item tag 0x0 [ 47.704757][ T3341] hid-generic 0003:0095:0005.0002: unknown main item tag 0x0 [ 47.712124][ T3341] hid-generic 0003:0095:0005.0002: unknown main item tag 0x0 [ 47.719549][ T3341] hid-generic 0003:0095:0005.0002: unknown main item tag 0x0 [ 47.726948][ T3341] hid-generic 0003:0095:0005.0002: unknown main item tag 0x0 [ 47.734321][ T3341] hid-generic 0003:0095:0005.0002: unknown main item tag 0x0 [ 47.741697][ T3341] hid-generic 0003:0095:0005.0002: unknown main item tag 0x0 [ 47.749113][ T3341] hid-generic 0003:0095:0005.0002: unknown main item tag 0x0 [ 47.756563][ T3341] hid-generic 0003:0095:0005.0002: unknown main item tag 0x0 [ 47.763952][ T3341] hid-generic 0003:0095:0005.0002: unknown main item tag 0x0 [ 47.771346][ T3341] hid-generic 0003:0095:0005.0002: unknown main item tag 0x0 [ 47.778729][ T3341] hid-generic 0003:0095:0005.0002: unknown main item tag 0x0 [ 47.786185][ T3341] hid-generic 0003:0095:0005.0002: unknown main item tag 0x0 [ 47.793538][ T3341] hid-generic 0003:0095:0005.0002: unknown main item tag 0x0 [ 47.800920][ T3341] hid-generic 0003:0095:0005.0002: unknown main item tag 0x0 [ 47.808299][ T3341] hid-generic 0003:0095:0005.0002: unknown main item tag 0x0 [ 47.815757][ T3341] hid-generic 0003:0095:0005.0002: unknown main item tag 0x0 [ 47.823142][ T3341] hid-generic 0003:0095:0005.0002: unknown main item tag 0x0 [ 47.830546][ T3341] hid-generic 0003:0095:0005.0002: unknown main item tag 0x0 [ 47.838006][ T3341] hid-generic 0003:0095:0005.0002: unknown main item tag 0x0 [ 47.845399][ T3341] hid-generic 0003:0095:0005.0002: unknown main item tag 0x0 [ 47.852866][ T3341] hid-generic 0003:0095:0005.0002: unknown main item tag 0x0 [ 47.860251][ T3341] hid-generic 0003:0095:0005.0002: unknown main item tag 0x0 [ 47.867628][ T3341] hid-generic 0003:0095:0005.0002: unknown main item tag 0x0 [ 47.875006][ T3341] hid-generic 0003:0095:0005.0002: unknown main item tag 0x0 [ 47.882371][ T3341] hid-generic 0003:0095:0005.0002: unknown main item tag 0x0 [ 47.889750][ T3341] hid-generic 0003:0095:0005.0002: unknown main item tag 0x0 [ 47.897182][ T3341] hid-generic 0003:0095:0005.0002: unknown main item tag 0x0 [ 47.904564][ T3341] hid-generic 0003:0095:0005.0002: unknown main item tag 0x0 [ 47.911976][ T3341] hid-generic 0003:0095:0005.0002: unknown main item tag 0x0 [ 47.919358][ T3341] hid-generic 0003:0095:0005.0002: unknown main item tag 0x0 [ 47.926740][ T3341] hid-generic 0003:0095:0005.0002: unknown main item tag 0x0 [ 47.934139][ T3341] hid-generic 0003:0095:0005.0002: unknown main item tag 0x0 [ 47.941500][ T3341] hid-generic 0003:0095:0005.0002: unknown main item tag 0x0 [ 47.948908][ T3341] hid-generic 0003:0095:0005.0002: unknown main item tag 0x0 [ 47.956284][ T3341] hid-generic 0003:0095:0005.0002: unknown main item tag 0x0 [ 47.963816][ T3341] hid-generic 0003:0095:0005.0002: unknown main item tag 0x0 [ 47.971242][ T3341] hid-generic 0003:0095:0005.0002: unknown main item tag 0x0 [ 47.978640][ T3341] hid-generic 0003:0095:0005.0002: unknown main item tag 0x0 [ 47.986018][ T3341] hid-generic 0003:0095:0005.0002: unknown main item tag 0x0 [ 47.993369][ T3341] hid-generic 0003:0095:0005.0002: unknown main item tag 0x0 [ 48.000822][ T3341] hid-generic 0003:0095:0005.0002: unknown main item tag 0x0 [ 48.008201][ T3341] hid-generic 0003:0095:0005.0002: unknown main item tag 0x0 [ 48.015700][ T3341] hid-generic 0003:0095:0005.0002: unknown main item tag 0x0 [ 48.023061][ T3341] hid-generic 0003:0095:0005.0002: unknown main item tag 0x0 [ 48.030440][ T3341] hid-generic 0003:0095:0005.0002: unknown main item tag 0x0 [ 48.037912][ T3341] hid-generic 0003:0095:0005.0002: unknown main item tag 0x0 [ 48.045296][ T3341] hid-generic 0003:0095:0005.0002: unknown main item tag 0x0 [ 48.052662][ T3341] hid-generic 0003:0095:0005.0002: unknown main item tag 0x0 [ 48.060047][ T3341] hid-generic 0003:0095:0005.0002: unknown main item tag 0x0 [ 48.067425][ T3341] hid-generic 0003:0095:0005.0002: unknown main item tag 0x0 [ 48.074804][ T3341] hid-generic 0003:0095:0005.0002: unknown main item tag 0x0 [ 48.082172][ T3341] hid-generic 0003:0095:0005.0002: unknown main item tag 0x0 [ 48.089570][ T3341] hid-generic 0003:0095:0005.0002: unknown main item tag 0x0 [ 48.096962][ T3341] hid-generic 0003:0095:0005.0002: unknown main item tag 0x0 [ 48.104428][ T3341] hid-generic 0003:0095:0005.0002: unknown main item tag 0x0 [ 48.111847][ T3341] hid-generic 0003:0095:0005.0002: unknown main item tag 0x0 [ 48.119296][ T3341] hid-generic 0003:0095:0005.0002: unknown main item tag 0x0 [ 48.126675][ T3341] hid-generic 0003:0095:0005.0002: unknown main item tag 0x0 [ 48.134047][ T3341] hid-generic 0003:0095:0005.0002: unknown main item tag 0x0 [ 48.141409][ T3341] hid-generic 0003:0095:0005.0002: unknown main item tag 0x0 [ 48.148790][ T3341] hid-generic 0003:0095:0005.0002: unknown main item tag 0x0 [ 48.156167][ T3341] hid-generic 0003:0095:0005.0002: unknown main item tag 0x0 [ 48.163520][ T3341] hid-generic 0003:0095:0005.0002: unknown main item tag 0x0 [ 48.170949][ T3341] hid-generic 0003:0095:0005.0002: unknown main item tag 0x0 [ 48.178403][ T3341] hid-generic 0003:0095:0005.0002: unknown main item tag 0x0 [ 48.185779][ T3341] hid-generic 0003:0095:0005.0002: unknown main item tag 0x0 [ 48.193148][ T3341] hid-generic 0003:0095:0005.0002: unknown main item tag 0x0 [ 48.200527][ T3341] hid-generic 0003:0095:0005.0002: unknown main item tag 0x0 [ 48.207903][ T3341] hid-generic 0003:0095:0005.0002: unknown main item tag 0x0 [ 48.215304][ T3341] hid-generic 0003:0095:0005.0002: unknown main item tag 0x0 [ 48.222690][ T3341] hid-generic 0003:0095:0005.0002: unknown main item tag 0x0 [ 48.230141][ T3341] hid-generic 0003:0095:0005.0002: unknown main item tag 0x0 [ 48.237579][ T3341] hid-generic 0003:0095:0005.0002: unknown main item tag 0x0 [ 48.244979][ T3341] hid-generic 0003:0095:0005.0002: unknown main item tag 0x0 [ 48.252343][ T3341] hid-generic 0003:0095:0005.0002: unknown main item tag 0x0 [ 48.259882][ T3341] hid-generic 0003:0095:0005.0002: unknown main item tag 0x0 [ 48.267338][ T3341] hid-generic 0003:0095:0005.0002: unknown main item tag 0x0 [ 48.274728][ T3341] hid-generic 0003:0095:0005.0002: unknown main item tag 0x0 [ 48.282174][ T3341] hid-generic 0003:0095:0005.0002: unknown main item tag 0x0 [ 48.289556][ T3341] hid-generic 0003:0095:0005.0002: unknown main item tag 0x0 [ 48.297020][ T3341] hid-generic 0003:0095:0005.0002: unknown main item tag 0x0 [ 48.304405][ T3341] hid-generic 0003:0095:0005.0002: unknown main item tag 0x0 [ 48.311769][ T3341] hid-generic 0003:0095:0005.0002: unknown main item tag 0x0 [ 48.319235][ T3341] hid-generic 0003:0095:0005.0002: unknown main item tag 0x0 [ 48.326622][ T3341] hid-generic 0003:0095:0005.0002: unknown main item tag 0x0 [ 48.334016][ T3341] hid-generic 0003:0095:0005.0002: unknown main item tag 0x0 [ 48.341382][ T3341] hid-generic 0003:0095:0005.0002: unknown main item tag 0x0 [ 48.348782][ T3341] hid-generic 0003:0095:0005.0002: unknown main item tag 0x0 [ 48.356220][ T3341] hid-generic 0003:0095:0005.0002: unknown main item tag 0x0 [ 48.363600][ T3341] hid-generic 0003:0095:0005.0002: unknown main item tag 0x0 [ 48.371008][ T3341] hid-generic 0003:0095:0005.0002: unknown main item tag 0x0 [ 48.378395][ T3341] hid-generic 0003:0095:0005.0002: unknown main item tag 0x0 [ 48.385773][ T3341] hid-generic 0003:0095:0005.0002: unknown main item tag 0x0 [ 48.393221][ T3341] hid-generic 0003:0095:0005.0002: unknown main item tag 0x0 [ 48.400745][ T3341] hid-generic 0003:0095:0005.0002: unknown main item tag 0x0 [ 48.408210][ T3341] hid-generic 0003:0095:0005.0002: unknown main item tag 0x0 [ 48.415714][ T3341] hid-generic 0003:0095:0005.0002: unknown main item tag 0x0 [ 48.423143][ T3341] hid-generic 0003:0095:0005.0002: unknown main item tag 0x0 [ 48.430581][ T3341] hid-generic 0003:0095:0005.0002: unknown main item tag 0x0 [ 48.438056][ T3341] hid-generic 0003:0095:0005.0002: unknown main item tag 0x0 [ 48.445434][ T3341] hid-generic 0003:0095:0005.0002: unknown main item tag 0x0 [ 48.452840][ T3341] hid-generic 0003:0095:0005.0002: unknown main item tag 0x0 [ 48.460232][ T3341] hid-generic 0003:0095:0005.0002: unknown main item tag 0x0 [ 48.467678][ T3341] hid-generic 0003:0095:0005.0002: unknown main item tag 0x0 [ 48.475053][ T3341] hid-generic 0003:0095:0005.0002: unknown main item tag 0x0 [ 48.482499][ T3341] hid-generic 0003:0095:0005.0002: unknown main item tag 0x0 [ 48.489884][ T3341] hid-generic 0003:0095:0005.0002: unknown main item tag 0x0 [ 48.497367][ T3341] hid-generic 0003:0095:0005.0002: unknown main item tag 0x0 [ 48.504743][ T3341] hid-generic 0003:0095:0005.0002: unknown main item tag 0x0 [ 48.512180][ T3341] hid-generic 0003:0095:0005.0002: unknown main item tag 0x0 [ 48.519625][ T3341] hid-generic 0003:0095:0005.0002: unknown main item tag 0x0 [ 48.527003][ T3341] hid-generic 0003:0095:0005.0002: unknown main item tag 0x0 [ 48.534373][ T3341] hid-generic 0003:0095:0005.0002: unknown main item tag 0x0 [ 48.541753][ T3341] hid-generic 0003:0095:0005.0002: unknown main item tag 0x0 [ 48.549156][ T3341] hid-generic 0003:0095:0005.0002: unknown main item tag 0x0 [ 48.556534][ T3341] hid-generic 0003:0095:0005.0002: unknown main item tag 0x0 [ 48.563927][ T3341] hid-generic 0003:0095:0005.0002: unknown main item tag 0x0 [ 48.571372][ T3341] hid-generic 0003:0095:0005.0002: unknown main item tag 0x0 [ 48.578774][ T3341] hid-generic 0003:0095:0005.0002: unknown main item tag 0x0 [ 48.586261][ T3341] hid-generic 0003:0095:0005.0002: unknown main item tag 0x0 [ 48.593661][ T3341] hid-generic 0003:0095:0005.0002: unknown main item tag 0x0 [ 48.601077][ T3341] hid-generic 0003:0095:0005.0002: unknown main item tag 0x0 [ 48.608567][ T3341] hid-generic 0003:0095:0005.0002: unknown main item tag 0x0 [ 48.615974][ T3341] hid-generic 0003:0095:0005.0002: unknown main item tag 0x0 [ 48.623339][ T3341] hid-generic 0003:0095:0005.0002: unknown main item tag 0x0 [ 48.630712][ T3341] hid-generic 0003:0095:0005.0002: unknown main item tag 0x0 [ 48.638163][ T3341] hid-generic 0003:0095:0005.0002: unknown main item tag 0x0 [ 48.645534][ T3341] hid-generic 0003:0095:0005.0002: unknown main item tag 0x0 [ 48.653004][ T3341] hid-generic 0003:0095:0005.0002: unknown main item tag 0x0 [ 48.660449][ T3341] hid-generic 0003:0095:0005.0002: unknown main item tag 0x0 [ 48.667847][ T3341] hid-generic 0003:0095:0005.0002: unknown main item tag 0x0 [ 48.675226][ T3341] hid-generic 0003:0095:0005.0002: unknown main item tag 0x0 [ 48.682615][ T3341] hid-generic 0003:0095:0005.0002: unknown main item tag 0x0 [ 48.690001][ T3341] hid-generic 0003:0095:0005.0002: unknown main item tag 0x0 [ 48.697403][ T3341] hid-generic 0003:0095:0005.0002: unknown main item tag 0x0 [ 48.708161][ T3341] hid-generic 0003:0095:0005.0002: hidraw0: USB HID v0.0b Device [syz1] on syz0 [ 48.773702][ T29] kauditd_printk_skb: 473 callbacks suppressed [ 48.773716][ T29] audit: type=1400 audit(1727864569.520:1304): avc: denied { mounton } for pid=4557 comm="syz.4.285" path="/48/bus" dev="tmpfs" ino=285 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 48.813076][ T4556] loop2: detected capacity change from 0 to 512 [ 48.828090][ T4559] loop4: detected capacity change from 0 to 4096 [ 48.835002][ T3344] usb usb2-port1: unable to enumerate USB device [ 48.842704][ T4561] loop0: detected capacity change from 0 to 128 [ 48.845178][ T4559] /dev/loop4: Can't open blockdev [ 48.852310][ T4561] ext4: Unknown parameter 'hash' [ 48.869043][ T4556] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c11c, mo2=0002] [ 48.879211][ T4556] System zones: 0-2, 18-18, 34-34 [ 48.895644][ T29] audit: type=1400 audit(1727864569.650:1305): avc: denied { ioctl } for pid=4562 comm="+}[@" path="socket:[7386]" dev="sockfs" ino=7386 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 48.939317][ T29] audit: type=1400 audit(1727864569.680:1306): avc: denied { map } for pid=4557 comm="syz.4.285" path="/48/bus" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 48.942695][ T4556] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.280: bg 0: block 248: padding at end of block bitmap is not set [ 48.962865][ T29] audit: type=1400 audit(1727864569.680:1307): avc: denied { execute } for pid=4557 comm="syz.4.285" path="/48/bus" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 49.010164][ T4556] Quota error (device loop2): write_blk: dquota write failed [ 49.017654][ T4556] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 49.027615][ T4556] EXT4-fs error (device loop2): ext4_acquire_dquot:6879: comm syz.2.280: Failed to acquire dquot type 1 [ 49.090989][ T4556] EXT4-fs (loop2): 1 truncate cleaned up [ 49.097826][ T4556] ext4 filesystem being mounted at /43/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 49.138356][ T29] audit: type=1326 audit(1727864569.890:1308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4573 comm="syz.1.288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fe88ddff9 code=0x7ffc0000 [ 49.147500][ T4574] FAULT_INJECTION: forcing a failure. [ 49.147500][ T4574] name failslab, interval 1, probability 0, space 0, times 0 [ 49.174319][ T4574] CPU: 1 UID: 0 PID: 4574 Comm: syz.1.288 Not tainted 6.12.0-rc1-syzkaller-00031-ge32cde8d2bd7 #0 [ 49.181591][ T29] audit: type=1326 audit(1727864569.900:1309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4573 comm="syz.1.288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7fe88ddff9 code=0x7ffc0000 [ 49.184943][ T4574] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 49.184955][ T4574] Call Trace: [ 49.184970][ T4574] [ 49.184977][ T4574] dump_stack_lvl+0xf2/0x150 [ 49.208349][ T29] audit: type=1326 audit(1727864569.900:1310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4573 comm="syz.1.288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fe88ddff9 code=0x7ffc0000 [ 49.218266][ T4574] dump_stack+0x15/0x20 [ 49.218286][ T4574] should_fail_ex+0x223/0x230 [ 49.218344][ T4574] ? audit_log_start+0x34c/0x6b0 [ 49.221594][ T29] audit: type=1326 audit(1727864569.900:1311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4573 comm="syz.1.288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fe88ddff9 code=0x7ffc0000 [ 49.224471][ T4574] should_failslab+0x8f/0xb0 [ 49.294024][ T4574] kmem_cache_alloc_noprof+0x4c/0x290 [ 49.299544][ T4574] audit_log_start+0x34c/0x6b0 [ 49.304346][ T4574] ? kmem_cache_free+0xdc/0x2d0 [ 49.309276][ T4574] audit_seccomp+0x4b/0x130 [ 49.313810][ T4574] __seccomp_filter+0x6fa/0x1180 [ 49.318747][ T4574] ? proc_fail_nth_write+0x12a/0x150 [ 49.324091][ T4574] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 49.329727][ T4574] ? vfs_write+0x580/0x910 [ 49.334256][ T4574] __secure_computing+0x9f/0x1c0 [ 49.339221][ T4574] syscall_trace_enter+0xd1/0x1f0 [ 49.344242][ T4574] ? fpregs_assert_state_consistent+0x83/0xa0 [ 49.350325][ T4574] do_syscall_64+0xaa/0x1c0 [ 49.354817][ T4574] ? clear_bhb_loop+0x55/0xb0 [ 49.359487][ T4574] ? clear_bhb_loop+0x55/0xb0 [ 49.364159][ T4574] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 49.370331][ T4574] RIP: 0033:0x7f7fe88dca3c [ 49.374845][ T4574] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 49.394468][ T4574] RSP: 002b:00007f7fe7551030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 49.402931][ T4574] RAX: ffffffffffffffda RBX: 00007f7fe8a95f80 RCX: 00007f7fe88dca3c [ 49.410897][ T4574] RDX: 000000000000000f RSI: 00007f7fe75510a0 RDI: 0000000000000006 [ 49.418965][ T4574] RBP: 00007f7fe7551090 R08: 0000000000000000 R09: 0000000000000000 [ 49.426965][ T4574] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 49.434930][ T4574] R13: 0000000000000000 R14: 00007f7fe8a95f80 R15: 00007fffe9467358 [ 49.442961][ T4574] [ 49.469446][ T4578] loop4: detected capacity change from 0 to 512 [ 49.484835][ T4578] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c11c, mo2=0002] [ 49.494950][ T4578] System zones: 0-2, 18-18, 34-34 [ 49.500706][ T4578] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.290: bg 0: block 248: padding at end of block bitmap is not set [ 49.501648][ T4581] loop2: detected capacity change from 0 to 1024 [ 49.516261][ T4578] EXT4-fs error (device loop4): ext4_acquire_dquot:6879: comm syz.4.290: Failed to acquire dquot type 1 [ 49.522246][ T4581] EXT4-fs: Ignoring removed orlov option [ 49.539238][ T4581] EXT4-fs: Ignoring removed nomblk_io_submit option [ 49.546924][ T4578] EXT4-fs (loop4): 1 truncate cleaned up [ 49.553369][ T4578] ext4 filesystem being mounted at /49/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 49.565411][ T4581] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a842e018, mo2=0002] [ 49.577778][ T4587] loop1: detected capacity change from 0 to 512 [ 49.584218][ T4581] System zones: 0-1, 3-12 [ 49.622913][ T4587] ext4 filesystem being mounted at /59/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 49.634766][ T4593] loop2: detected capacity change from 0 to 512 [ 49.666653][ T4593] ext4 filesystem being mounted at /46/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 49.692341][ T4597] netlink: 'syz.4.294': attribute type 1 has an invalid length. [ 49.720635][ T4597] bond1: entered promiscuous mode [ 49.733569][ T4597] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 49.770254][ T4597] bond1: (slave ip6gretap1): making interface the new active one [ 49.778152][ T4597] ip6gretap1: entered promiscuous mode [ 49.791602][ T4597] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 49.800707][ T4604] __nla_validate_parse: 3 callbacks suppressed [ 49.800727][ T4604] netlink: 4 bytes leftover after parsing attributes in process `syz.4.294'. [ 49.817553][ T4604] bond1: left promiscuous mode [ 49.822483][ T4604] ip6gretap1: left promiscuous mode [ 49.828361][ T4604] 8021q: adding VLAN 0 to HW filter on device bond1 [ 49.849040][ T4610] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 49.863120][ T4610] loop3: detected capacity change from 0 to 764 [ 49.872171][ T4608] loop0: detected capacity change from 0 to 512 [ 49.916788][ T4616] loop3: detected capacity change from 0 to 1024 [ 49.923548][ T4616] EXT4-fs: Ignoring removed orlov option [ 49.929772][ T4616] EXT4-fs: Ignoring removed nomblk_io_submit option [ 49.937596][ T4608] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c11c, mo2=0002] [ 49.955302][ T4608] System zones: 0-2, 18-18, 34-34 [ 49.966661][ T4616] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a842e018, mo2=0002] [ 49.981445][ T4608] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.299: bg 0: block 248: padding at end of block bitmap is not set [ 50.000154][ T4622] loop4: detected capacity change from 0 to 512 [ 50.008371][ T4616] System zones: 0-1, 3-12 [ 50.018881][ T4608] EXT4-fs error (device loop0): ext4_acquire_dquot:6879: comm syz.0.299: Failed to acquire dquot type 1 [ 50.073027][ T4608] EXT4-fs (loop0): 1 truncate cleaned up [ 50.084743][ T4622] ext4 filesystem being mounted at /51/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 50.100522][ T4608] ext4 filesystem being mounted at /71/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 50.463686][ T4636] loop0: detected capacity change from 0 to 2048 [ 50.504374][ T4636] loop0: p1 < > p4 [ 50.509139][ T4636] loop0: p4 size 393216 extends beyond EOD, truncated [ 50.765960][ T4654] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 50.785623][ T4656] loop2: detected capacity change from 0 to 1024 [ 50.792305][ T4656] EXT4-fs: Ignoring removed orlov option [ 50.798035][ T4656] EXT4-fs: Ignoring removed nomblk_io_submit option [ 50.827260][ T4656] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a842e018, mo2=0002] [ 50.836496][ T4656] System zones: 0-1, 3-12 [ 50.844278][ T4658] netlink: 4 bytes leftover after parsing attributes in process `syz.4.314'. [ 50.855558][ T4658] bridge_slave_1: left allmulticast mode [ 50.861268][ T4658] bridge_slave_1: left promiscuous mode [ 50.866999][ T4658] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.881834][ T4658] bridge_slave_0: left allmulticast mode [ 50.887622][ T4658] bridge_slave_0: left promiscuous mode [ 50.893290][ T4658] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.939029][ T4665] loop2: detected capacity change from 0 to 512 [ 50.964303][ T4665] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c11c, mo2=0002] [ 50.972436][ T4665] System zones: 0-2, 18-18, 34-34 [ 50.978530][ T4665] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.316: bg 0: block 248: padding at end of block bitmap is not set [ 51.010076][ T4665] EXT4-fs error (device loop2): ext4_acquire_dquot:6879: comm syz.2.316: Failed to acquire dquot type 1 [ 51.023072][ T4669] xt_TPROXY: Can be used only with -p tcp or -p udp [ 51.030964][ T4665] EXT4-fs (loop2): 1 truncate cleaned up [ 51.037652][ T4665] ext4 filesystem being mounted at /54/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 51.037886][ T4669] x_tables: duplicate underflow at hook 4 [ 51.106548][ T35] IPVS: starting estimator thread 0... [ 51.115433][ T4673] IPVS: sed: SCTP 127.0.0.1:0 - no destination available [ 51.129295][ T4676] IPVS: sed: SCTP 127.0.0.1:0 - no destination available [ 51.158987][ T4680] loop4: detected capacity change from 0 to 512 [ 51.190748][ T4680] ext4 filesystem being mounted at /57/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 51.209358][ T4689] loop0: detected capacity change from 0 to 1024 [ 51.216896][ T4675] IPVS: using max 2976 ests per chain, 148800 per kthread [ 51.226820][ T4689] EXT4-fs: Ignoring removed orlov option [ 51.228049][ T4683] loop3: detected capacity change from 0 to 1024 [ 51.232816][ T4689] EXT4-fs: Ignoring removed nomblk_io_submit option [ 51.239541][ T4683] EXT4-fs: Ignoring removed orlov option [ 51.251203][ T4683] EXT4-fs: Ignoring removed nomblk_io_submit option [ 51.271310][ T4683] EXT4-fs (loop3): Invalid log cluster size: 64516 [ 51.295625][ T4689] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a842e018, mo2=0002] [ 51.303832][ T4689] System zones: 0-1, 3-12 [ 51.352842][ T4704] xt_TPROXY: Can be used only with -p tcp or -p udp [ 51.363191][ T4704] x_tables: duplicate underflow at hook 4 [ 51.372397][ T4708] netlink: 176 bytes leftover after parsing attributes in process `syz.1.327'. [ 51.430197][ T4711] loop4: detected capacity change from 0 to 512 [ 51.442122][ T4714] loop3: detected capacity change from 0 to 512 [ 51.476836][ T4708] loop1: detected capacity change from 0 to 512 [ 51.483564][ T4714] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c11c, mo2=0002] [ 51.503038][ T4711] ext4 filesystem being mounted at /58/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 51.514161][ T4708] EXT4-fs (loop1): orphan cleanup on readonly fs [ 51.521274][ T4714] System zones: 0-2, 18-18, 34-34 [ 51.526922][ T4708] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.327: bg 0: block 248: padding at end of block bitmap is not set [ 51.548841][ T4714] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.331: bg 0: block 248: padding at end of block bitmap is not set [ 51.577581][ T4708] EXT4-fs error (device loop1): ext4_acquire_dquot:6879: comm syz.1.327: Failed to acquire dquot type 1 [ 51.595136][ T4714] EXT4-fs error (device loop3): ext4_acquire_dquot:6879: comm syz.3.331: Failed to acquire dquot type 1 [ 51.621600][ T4708] EXT4-fs (loop1): 1 truncate cleaned up [ 51.627843][ T4714] EXT4-fs (loop3): 1 truncate cleaned up [ 51.634958][ T4714] ext4 filesystem being mounted at /64/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 51.709139][ T4724] loop3: detected capacity change from 0 to 512 [ 51.736333][ T4724] ext4 filesystem being mounted at /66/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 51.749092][ T4724] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 51.907674][ T4732] netlink: 4 bytes leftover after parsing attributes in process `syz.3.337'. [ 51.962035][ T4736] loop3: detected capacity change from 0 to 1024 [ 51.967992][ T4738] netlink: 4 bytes leftover after parsing attributes in process `syz.2.340'. [ 51.975189][ T4736] EXT4-fs: Ignoring removed orlov option [ 51.979490][ T4738] netlink: 4 bytes leftover after parsing attributes in process `syz.2.340'. [ 51.985420][ T4736] EXT4-fs: Ignoring removed nomblk_io_submit option [ 52.005326][ T4736] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a842e018, mo2=0002] [ 52.013546][ T4736] System zones: 0-1, 3-12 [ 52.035368][ T4744] loop2: detected capacity change from 0 to 512 [ 52.053978][ T4746] dccp_v4_rcv: dropped packet with invalid checksum [ 52.062142][ T4744] ext4 filesystem being mounted at /58/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 52.090959][ T4744] EXT4-fs error (device loop2): ext4_do_update_inode:5121: inode #19: comm syz.2.342: corrupted inode contents [ 52.103580][ T4750] netlink: 'syz.3.344': attribute type 11 has an invalid length. [ 52.106332][ T4744] EXT4-fs error (device loop2): ext4_dirty_inode:5984: inode #19: comm syz.2.342: mark_inode_dirty error [ 52.123391][ T4744] EXT4-fs error (device loop2): ext4_do_update_inode:5121: inode #19: comm syz.2.342: corrupted inode contents [ 52.136037][ T4744] EXT4-fs error (device loop2): ext4_xattr_delete_inode:3005: inode #19: comm syz.2.342: mark_inode_dirty error [ 52.158787][ T40] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.169347][ T4744] EXT4-fs error (device loop2): ext4_xattr_delete_inode:3008: inode #19: comm syz.2.342: mark inode dirty (error -117) [ 52.187853][ T4744] EXT4-fs warning (device loop2): ext4_evict_inode:276: xattr delete (err -117) [ 52.237523][ T40] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.292590][ T4757] atomic_op ffff888115c25528 conn xmit_atomic 0000000000000000 [ 52.308283][ T40] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.362067][ T4765] loop0: detected capacity change from 0 to 512 [ 52.372003][ T4765] EXT4-fs: Ignoring removed oldalloc option [ 52.381239][ T4765] ext2: Unknown parameter 'audit' [ 52.395243][ T40] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.408851][ T4773] netlink: 44 bytes leftover after parsing attributes in process `syz.4.352'. [ 52.465192][ T4777] loop0: detected capacity change from 0 to 1024 [ 52.473056][ T4777] EXT4-fs: Ignoring removed orlov option [ 52.478909][ T4777] EXT4-fs: Ignoring removed nomblk_io_submit option [ 52.513136][ T4777] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a842e018, mo2=0002] [ 52.522096][ T4777] System zones: 0-1, 3-12 [ 52.534778][ T40] bridge_slave_1: left allmulticast mode [ 52.540453][ T40] bridge_slave_1: left promiscuous mode [ 52.546121][ T40] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.554044][ T40] bridge_slave_0: left allmulticast mode [ 52.559700][ T40] bridge_slave_0: left promiscuous mode [ 52.565537][ T40] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.609578][ T4794] ip6t_rpfilter: unknown options [ 52.666321][ T40] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 52.676881][ T40] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 52.687016][ T40] bond0 (unregistering): Released all slaves [ 52.721454][ T4754] chnl_net:caif_netlink_parms(): no params data found [ 52.754804][ T40] hsr_slave_0: left promiscuous mode [ 52.767373][ T40] hsr_slave_1: left promiscuous mode [ 52.779065][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 52.786646][ T40] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 52.795270][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 52.802668][ T40] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 52.812028][ T40] veth1_macvtap: left promiscuous mode [ 52.817796][ T40] veth0_macvtap: left promiscuous mode [ 52.823338][ T40] veth1_vlan: left promiscuous mode [ 52.828700][ T40] veth0_vlan: left promiscuous mode [ 52.849423][ T4817] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 52.862080][ T4817] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 52.948391][ T40] team0 (unregistering): Port device team_slave_1 removed [ 52.959434][ T40] team0 (unregistering): Port device team_slave_0 removed [ 53.091248][ T4754] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.095752][ T4836] loop2: detected capacity change from 0 to 1024 [ 53.098365][ T4754] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.106977][ T4836] EXT4-fs: Ignoring removed orlov option [ 53.121623][ T4754] bridge_slave_0: entered allmulticast mode [ 53.126685][ T4836] EXT4-fs: Ignoring removed nomblk_io_submit option [ 53.128272][ T4754] bridge_slave_0: entered promiscuous mode [ 53.141704][ T4754] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.148897][ T4754] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.156453][ T4754] bridge_slave_1: entered allmulticast mode [ 53.165227][ T4754] bridge_slave_1: entered promiscuous mode [ 53.176014][ T4836] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a842e018, mo2=0002] [ 53.190264][ T4754] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.205606][ T4754] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.206145][ T4836] System zones: 0-1, 3-12 [ 53.225826][ T4849] xt_TPROXY: Can be used only with -p tcp or -p udp [ 53.235381][ T4849] x_tables: duplicate underflow at hook 4 [ 53.253701][ T4754] team0: Port device team_slave_0 added [ 53.261685][ T4754] team0: Port device team_slave_1 added [ 53.287287][ T4861] syz.0.373[4861] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 53.287381][ T4861] syz.0.373[4861] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 53.301936][ T4861] syz.0.373[4861] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 53.361098][ T4754] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.370453][ T4865] loop2: detected capacity change from 0 to 512 [ 53.372381][ T4754] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.398648][ T4867] loop3: detected capacity change from 0 to 1024 [ 53.411432][ T4754] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.439623][ T4867] EXT4-fs: Ignoring removed oldalloc option [ 53.445802][ T4754] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.452808][ T4754] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.478847][ T4754] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.498584][ T4867] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a802c018, mo2=0102] [ 53.507182][ T4867] System zones: 0-1, 3-12 [ 53.512534][ T4865] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c11c, mo2=0002] [ 53.526381][ T4865] System zones: 0-2, 18-18, 34-34 [ 53.532494][ T4865] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.375: bg 0: block 248: padding at end of block bitmap is not set [ 53.562406][ T4865] EXT4-fs error (device loop2): ext4_acquire_dquot:6879: comm syz.2.375: Failed to acquire dquot type 1 [ 53.575765][ T4754] hsr_slave_0: entered promiscuous mode [ 53.582404][ T4865] EXT4-fs (loop2): 1 truncate cleaned up [ 53.588466][ T4754] hsr_slave_1: entered promiscuous mode [ 53.594732][ T4865] ext4 filesystem being mounted at /62/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 53.609510][ T4754] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 53.617164][ T4754] Cannot create hsr debugfs directory [ 53.667330][ T4891] syz.3.386[4891] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 53.667388][ T4891] syz.3.386[4891] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 53.678871][ T4891] syz.3.386[4891] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 53.758094][ T4900] bond2: entered promiscuous mode [ 53.774454][ T4900] bond2: entered allmulticast mode [ 53.781108][ T4900] 8021q: adding VLAN 0 to HW filter on device bond2 [ 53.811760][ T4900] bond2 (unregistering): Released all slaves [ 53.835478][ T4918] loop3: detected capacity change from 0 to 512 [ 53.861698][ T4918] ext4 filesystem being mounted at /81/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 53.876249][ T4920] loop2: detected capacity change from 0 to 512 [ 53.919347][ T4920] ext4 filesystem being mounted at /65/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 54.190908][ T4754] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 54.209029][ T4754] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 54.230904][ T4754] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 54.251158][ T4754] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 54.319641][ T4754] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.345293][ T4754] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.361297][ T134] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.368470][ T134] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.409564][ T134] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.416659][ T134] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.429828][ T29] kauditd_printk_skb: 291 callbacks suppressed [ 54.429841][ T29] audit: type=1326 audit(1727864575.180:1589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4959 comm="syz.0.390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efde940dff9 code=0x7ffc0000 [ 54.498676][ T29] audit: type=1326 audit(1727864575.210:1590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4959 comm="syz.0.390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efde940dff9 code=0x7ffc0000 [ 54.507033][ T4967] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 54.522035][ T29] audit: type=1326 audit(1727864575.210:1591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4959 comm="syz.0.390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efde940dff9 code=0x7ffc0000 [ 54.552496][ T29] audit: type=1326 audit(1727864575.210:1592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4959 comm="syz.0.390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efde940dff9 code=0x7ffc0000 [ 54.575816][ T29] audit: type=1326 audit(1727864575.210:1593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4959 comm="syz.0.390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=433 compat=0 ip=0x7efde940dff9 code=0x7ffc0000 [ 54.599319][ T29] audit: type=1326 audit(1727864575.210:1594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4959 comm="syz.0.390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efde940dff9 code=0x7ffc0000 [ 54.622666][ T29] audit: type=1326 audit(1727864575.210:1595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4959 comm="syz.0.390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7efde940dff9 code=0x7ffc0000 [ 54.646133][ T29] audit: type=1326 audit(1727864575.210:1596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4959 comm="syz.0.390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efde940dff9 code=0x7ffc0000 [ 54.677247][ T4975] loop0: detected capacity change from 0 to 764 [ 54.767238][ T4984] loop2: detected capacity change from 0 to 256 [ 54.795400][ T4984] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 54.824763][ T29] audit: type=1400 audit(1727864575.580:1597): avc: denied { map } for pid=4992 comm="" path="socket:[9342]" dev="sockfs" ino=9342 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 54.825145][ T4993] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=4993 comm= [ 54.863530][ T29] audit: type=1400 audit(1727864575.610:1598): avc: denied { mount } for pid=4981 comm="syz.2.393" name="/" dev="loop2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 54.865538][ T4754] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.920361][ T4993] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=4993 comm= [ 54.970171][ T4993] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=4993 comm= [ 55.013033][ T4993] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=4993 comm= [ 55.031008][ T4993] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=4993 comm= [ 55.079205][ T4754] veth0_vlan: entered promiscuous mode [ 55.088127][ T4754] veth1_vlan: entered promiscuous mode [ 55.107875][ T5032] IPVS: sed: SCTP 127.0.0.1:0 - no destination available [ 55.130457][ T4754] veth0_macvtap: entered promiscuous mode [ 55.138072][ T4754] veth1_macvtap: entered promiscuous mode [ 55.148033][ T4754] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.157237][ T5037] loop0: detected capacity change from 0 to 512 [ 55.158478][ T4754] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.174524][ T4754] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.185041][ T4754] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.194861][ T4754] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.205382][ T4754] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.215406][ T4754] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.225925][ T4754] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.236545][ T4754] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.247436][ T5037] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c11c, mo2=0002] [ 55.247854][ T4754] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.263929][ T5037] System zones: 0-2 [ 55.265965][ T4754] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.269750][ T5037] , 18-18 [ 55.279612][ T4754] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.279626][ T4754] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.279636][ T4754] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.282541][ T5037] , 34-34 [ 55.292935][ T4754] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.303109][ T5037] [ 55.313673][ T4754] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.318041][ T5037] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.403: bg 0: block 248: padding at end of block bitmap is not set [ 55.326445][ T4754] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.327259][ T4754] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.346802][ T5037] EXT4-fs error (device loop0): ext4_acquire_dquot:6879: comm syz.0.403: Failed to acquire dquot type 1 [ 55.354575][ T4754] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.370435][ T4754] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.382822][ T5037] EXT4-fs (loop0): 1 truncate cleaned up [ 55.390296][ T4754] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.400653][ T5037] ext4 filesystem being mounted at /98/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 55.404574][ T4754] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.429772][ T5040] loop3: detected capacity change from 0 to 512 [ 55.473808][ T5040] ext4 filesystem being mounted at /85/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 55.494765][ T5043] syzkaller0: entered allmulticast mode [ 55.505397][ T5043] syz.0.404[5043] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 55.505523][ T5043] syz.0.404[5043] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 55.528752][ T5043] syz.0.404[5043] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 55.597189][ T5043] syzkaller0 (unregistering): left allmulticast mode [ 55.655734][ T5055] loop4: detected capacity change from 0 to 512 [ 55.707594][ T5055] ext4 filesystem being mounted at /72/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 55.878994][ T5070] IPVS: sed: SCTP 127.0.0.1:0 - no destination available [ 55.918975][ T5073] netlink: 'syz.1.414': attribute type 1 has an invalid length. [ 55.931223][ T5074] loop2: detected capacity change from 0 to 512 [ 55.962032][ T5074] ext4 filesystem being mounted at /71/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 55.999052][ T5080] syz.1.416[5080] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 56.012185][ T5074] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 56.113078][ T5089] xt_TPROXY: Can be used only with -p tcp or -p udp [ 56.118421][ T5093] loop3: detected capacity change from 0 to 512 [ 56.142153][ T5093] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.421: invalid indirect mapped block 256 (level 2) [ 56.144956][ T5089] x_tables: duplicate underflow at hook 4 [ 56.170346][ T5093] EXT4-fs (loop3): 2 truncates cleaned up [ 56.238188][ T5105] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 56.252227][ T5105] loop3: detected capacity change from 0 to 764 [ 56.335001][ T5112] loop2: detected capacity change from 0 to 2048 [ 56.434881][ T5122] netlink: 'syz.2.433': attribute type 10 has an invalid length. [ 56.445229][ T5122] team0: Port device netdevsim1 added [ 56.470404][ T5129] loop3: detected capacity change from 0 to 128 [ 56.479224][ T5129] ext4: Unknown parameter 'hash' [ 56.518909][ T5135] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 56.540867][ T5135] loop4: detected capacity change from 0 to 764 [ 56.655309][ T5147] loop2: detected capacity change from 0 to 128 [ 56.667789][ T5139] xt_hashlimit: max too large, truncated to 1048576 [ 56.676603][ T5147] ext4 filesystem being mounted at /78/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 56.772647][ T5154] loop4: detected capacity change from 0 to 512 [ 56.796462][ T5158] netlink: 4 bytes leftover after parsing attributes in process `syz.3.447'. [ 56.827249][ T5158] netlink: 4 bytes leftover after parsing attributes in process `syz.3.447'. [ 56.856799][ T5156] loop2: detected capacity change from 0 to 8192 [ 56.890126][ T5162] sch_tbf: burst 5 is lower than device lo mtu (65550) ! [ 56.899418][ T5154] ext4 filesystem being mounted at /79/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 56.990464][ T5172] loop0: detected capacity change from 0 to 512 [ 56.998235][ T5175] (unnamed net_device) (uninitialized): option lacp_rate: invalid value (64) [ 57.023107][ T5175] netlink: 20 bytes leftover after parsing attributes in process `syz.3.454'. [ 57.045892][ T5175] tun0: tun_chr_ioctl cmd 1074812117 [ 57.085383][ T5172] ext4 filesystem being mounted at /108/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 57.097793][ T5178] loop1: detected capacity change from 0 to 512 [ 57.110641][ T5172] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 57.132106][ T5178] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c11c, mo2=0002] [ 57.140467][ T5178] System zones: 0-2, 18-18, 34-34 [ 57.147388][ T5178] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.455: bg 0: block 248: padding at end of block bitmap is not set [ 57.165070][ T5178] EXT4-fs error (device loop1): ext4_acquire_dquot:6879: comm syz.1.455: Failed to acquire dquot type 1 [ 57.190225][ T5178] EXT4-fs (loop1): 1 truncate cleaned up [ 57.203146][ T5184] FAULT_INJECTION: forcing a failure. [ 57.203146][ T5184] name failslab, interval 1, probability 0, space 0, times 0 [ 57.215970][ T5184] CPU: 0 UID: 0 PID: 5184 Comm: syz.0.456 Not tainted 6.12.0-rc1-syzkaller-00031-ge32cde8d2bd7 #0 [ 57.226596][ T5184] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 57.236654][ T5184] Call Trace: [ 57.239987][ T5184] [ 57.242911][ T5184] dump_stack_lvl+0xf2/0x150 [ 57.247507][ T5184] dump_stack+0x15/0x20 [ 57.251724][ T5184] should_fail_ex+0x223/0x230 [ 57.256435][ T5184] ? __alloc_skb+0x10b/0x310 [ 57.261029][ T5184] should_failslab+0x8f/0xb0 [ 57.265617][ T5184] kmem_cache_alloc_node_noprof+0x51/0x2b0 [ 57.271495][ T5184] ? ip6_pol_route+0x6ff/0xb90 [ 57.276270][ T5184] __alloc_skb+0x10b/0x310 [ 57.280703][ T5184] ? ____sys_sendmsg+0x312/0x410 [ 57.285651][ T5184] alloc_skb_with_frags+0x80/0x450 [ 57.290847][ T5184] ? dst_init+0x20f/0x260 [ 57.295174][ T5184] ? __rcu_read_unlock+0x34/0x70 [ 57.300118][ T5184] ? ip6_rt_copy_init+0x4dc/0x540 [ 57.305150][ T5184] sock_alloc_send_pskb+0x435/0x4f0 [ 57.310349][ T5184] ? ipv6_get_saddr_eval+0x7a8/0x7d0 [ 57.315817][ T5184] __ip6_append_data+0x178a/0x2170 [ 57.320958][ T5184] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 57.326521][ T5184] ? __rcu_read_unlock+0x4e/0x70 [ 57.331615][ T5184] ? ip6_mtu+0xfb/0x120 [ 57.335811][ T5184] ? __pfx_ip6_mtu+0x10/0x10 [ 57.340492][ T5184] ip6_make_skb+0x28f/0x510 [ 57.344497][ T5178] ext4 filesystem being mounted at /11/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 57.345009][ T5184] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 57.360874][ T5184] udpv6_sendmsg+0x14ac/0x1590 [ 57.365654][ T5184] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 57.371292][ T5184] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 57.376409][ T5184] inet6_sendmsg+0xaf/0xd0 [ 57.380932][ T5184] __sock_sendmsg+0x8b/0x180 [ 57.385517][ T5184] ____sys_sendmsg+0x312/0x410 [ 57.390285][ T5184] __sys_sendmmsg+0x259/0x500 [ 57.395068][ T5184] __x64_sys_sendmmsg+0x57/0x70 [ 57.399917][ T5184] x64_sys_call+0xa49/0x2d60 [ 57.404627][ T5184] do_syscall_64+0xc9/0x1c0 [ 57.409151][ T5184] ? clear_bhb_loop+0x55/0xb0 [ 57.413825][ T5184] ? clear_bhb_loop+0x55/0xb0 [ 57.418575][ T5184] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 57.424471][ T5184] RIP: 0033:0x7efde940dff9 [ 57.428871][ T5184] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 57.448524][ T5184] RSP: 002b:00007efde8087038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 57.456932][ T5184] RAX: ffffffffffffffda RBX: 00007efde95c5f80 RCX: 00007efde940dff9 [ 57.464901][ T5184] RDX: 0000000000000002 RSI: 0000000020006b80 RDI: 0000000000000005 [ 57.472872][ T5184] RBP: 00007efde8087090 R08: 0000000000000000 R09: 0000000000000000 [ 57.480888][ T5184] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 57.488850][ T5184] R13: 0000000000000000 R14: 00007efde95c5f80 R15: 00007ffcd05b5e08 [ 57.496911][ T5184] [ 57.605054][ T5187] FAULT_INJECTION: forcing a failure. [ 57.605054][ T5187] name failslab, interval 1, probability 0, space 0, times 0 [ 57.617719][ T5187] CPU: 0 UID: 0 PID: 5187 Comm: syz.3.457 Not tainted 6.12.0-rc1-syzkaller-00031-ge32cde8d2bd7 #0 [ 57.628323][ T5187] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 57.638378][ T5187] Call Trace: [ 57.641662][ T5187] [ 57.644658][ T5187] dump_stack_lvl+0xf2/0x150 [ 57.649239][ T5187] dump_stack+0x15/0x20 [ 57.653484][ T5187] should_fail_ex+0x223/0x230 [ 57.658171][ T5187] ? __alloc_skb+0x10b/0x310 [ 57.662821][ T5187] should_failslab+0x8f/0xb0 [ 57.667400][ T5187] kmem_cache_alloc_node_noprof+0x51/0x2b0 [ 57.673240][ T5187] __alloc_skb+0x10b/0x310 [ 57.677649][ T5187] netlink_alloc_large_skb+0xad/0xe0 [ 57.683020][ T5187] netlink_sendmsg+0x3b4/0x6e0 [ 57.687890][ T5187] ? __pfx_netlink_sendmsg+0x10/0x10 [ 57.693205][ T5187] __sock_sendmsg+0x140/0x180 [ 57.697888][ T5187] ____sys_sendmsg+0x312/0x410 [ 57.702704][ T5187] __sys_sendmsg+0x1d9/0x270 [ 57.707350][ T5187] __x64_sys_sendmsg+0x46/0x50 [ 57.712108][ T5187] x64_sys_call+0x2689/0x2d60 [ 57.716780][ T5187] do_syscall_64+0xc9/0x1c0 [ 57.721275][ T5187] ? clear_bhb_loop+0x55/0xb0 [ 57.725960][ T5187] ? clear_bhb_loop+0x55/0xb0 [ 57.730632][ T5187] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 57.736523][ T5187] RIP: 0033:0x7f508c6cdff9 [ 57.740944][ T5187] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 57.760672][ T5187] RSP: 002b:00007f508b341038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 57.769158][ T5187] RAX: ffffffffffffffda RBX: 00007f508c885f80 RCX: 00007f508c6cdff9 [ 57.777151][ T5187] RDX: 0000000000000000 RSI: 0000000020000480 RDI: 0000000000000003 [ 57.785110][ T5187] RBP: 00007f508b341090 R08: 0000000000000000 R09: 0000000000000000 [ 57.793190][ T5187] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 57.801236][ T5187] R13: 0000000000000000 R14: 00007f508c885f80 R15: 00007ffe7ce6b618 [ 57.809216][ T5187] [ 57.838446][ T5192] loop3: detected capacity change from 0 to 512 [ 57.884399][ T5192] ext4 filesystem being mounted at /101/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 57.924231][ T5198] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 57.990346][ T5209] IPVS: set_ctl: invalid protocol: 158 255.255.255.255:0 [ 58.158600][ T40] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.218188][ T40] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.256951][ T40] team0: Port device netdevsim1 removed [ 58.263754][ T40] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.287451][ T40] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.351256][ T5212] chnl_net:caif_netlink_parms(): no params data found [ 58.497895][ T40] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 58.508484][ T40] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 58.520477][ T40] bond0 (unregistering): Released all slaves [ 58.561882][ T5212] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.566120][ T5243] loop0: detected capacity change from 0 to 512 [ 58.569131][ T5212] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.586501][ T5212] bridge_slave_0: entered allmulticast mode [ 58.592977][ T5212] bridge_slave_0: entered promiscuous mode [ 58.601938][ T40] hsr_slave_0: left promiscuous mode [ 58.610360][ T5243] ext4 filesystem being mounted at /111/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 58.621384][ T40] hsr_slave_1: left promiscuous mode [ 58.627227][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 58.634681][ T40] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 58.644467][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 58.651901][ T40] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 58.665304][ T40] veth1_macvtap: left promiscuous mode [ 58.670817][ T40] veth0_macvtap: left promiscuous mode [ 58.676376][ T40] veth1_vlan: left promiscuous mode [ 58.681578][ T40] veth0_vlan: left promiscuous mode [ 58.865977][ T5253] netlink: 44 bytes leftover after parsing attributes in process `syz.3.472'. [ 58.878041][ T40] team0 (unregistering): Port device team_slave_1 removed [ 58.896130][ T40] team0 (unregistering): Port device team_slave_0 removed [ 58.923913][ T5256] hub 9-0:1.0: USB hub found [ 58.932215][ T5258] bpf_get_probe_write_proto: 8 callbacks suppressed [ 58.932240][ T5258] syz.1.473[5258] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 58.939050][ T5256] hub 9-0:1.0: 8 ports detected [ 58.955542][ T5258] syz.1.473[5258] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 58.955615][ T5258] syz.1.473[5258] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 58.977920][ T5212] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.996322][ T5212] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.038891][ T5261] loop1: detected capacity change from 0 to 512 [ 59.047657][ T5212] bridge_slave_1: entered allmulticast mode [ 59.065986][ T5212] bridge_slave_1: entered promiscuous mode [ 59.073251][ T5261] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c11c, mo2=0002] [ 59.090297][ T5251] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 59.099607][ T5261] System zones: 0-2, 18-18, 34-34 [ 59.113921][ T5261] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.475: bg 0: block 248: padding at end of block bitmap is not set [ 59.159661][ T5212] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.168008][ T5271] loop4: detected capacity change from 0 to 512 [ 59.177485][ T5261] EXT4-fs error (device loop1): ext4_acquire_dquot:6879: comm syz.1.475: Failed to acquire dquot type 1 [ 59.195905][ T5212] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.229295][ T5212] team0: Port device team_slave_0 added [ 59.245266][ T5261] EXT4-fs (loop1): 1 truncate cleaned up [ 59.256995][ T5212] team0: Port device team_slave_1 added [ 59.266534][ T5261] ext4 filesystem being mounted at /15/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 59.267704][ T5271] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c11c, mo2=0002] [ 59.299643][ T5271] System zones: 0-2, 18-18, 34-34 [ 59.305838][ T5212] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.312826][ T5212] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.338814][ T5212] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.379007][ T5271] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.476: bg 0: block 248: padding at end of block bitmap is not set [ 59.396550][ T5212] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.403507][ T5212] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.429588][ T5212] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.463834][ T5271] __quota_error: 88 callbacks suppressed [ 59.463849][ T5271] Quota error (device loop4): write_blk: dquota write failed [ 59.476971][ T5271] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 59.492605][ T40] IPVS: stop unused estimator thread 0... [ 59.498821][ T5271] EXT4-fs error (device loop4): ext4_acquire_dquot:6879: comm syz.4.476: Failed to acquire dquot type 1 [ 59.522176][ T5212] hsr_slave_0: entered promiscuous mode [ 59.531790][ T5271] EXT4-fs (loop4): 1 truncate cleaned up [ 59.538881][ T5271] ext4 filesystem being mounted at /83/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 59.553294][ T5212] hsr_slave_1: entered promiscuous mode [ 59.604964][ T29] audit: type=1400 audit(1727864836.357:1681): avc: denied { cpu } for pid=5311 comm="syz.1.477" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 59.731370][ T5320] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 59.737969][ T5320] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 59.745488][ T5320] vhci_hcd vhci_hcd.0: Device attached [ 59.815834][ T5327] loop0: detected capacity change from 0 to 512 [ 59.841331][ T5321] vhci_hcd: cannot find the pending unlink 0 [ 59.964909][ T29] audit: type=1400 audit(1727864836.697:1682): avc: denied { ioctl } for pid=5311 comm="syz.1.477" path="socket:[8975]" dev="sockfs" ino=8975 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 59.989528][ T29] audit: type=1400 audit(1727864836.697:1683): avc: denied { write } for pid=5311 comm="syz.1.477" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 60.027757][ T5327] ext4 filesystem being mounted at /113/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 60.059605][ T29] audit: type=1400 audit(1727864836.757:1684): avc: denied { append } for pid=2950 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=7 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 60.082350][ T29] audit: type=1400 audit(1727864836.777:1685): avc: denied { mount } for pid=5313 comm="syz.0.479" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 60.103976][ T29] audit: type=1400 audit(1727864836.787:1686): avc: denied { read write } for pid=5313 comm="syz.0.479" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 60.127901][ T29] audit: type=1400 audit(1727864836.787:1687): avc: denied { open } for pid=5313 comm="syz.0.479" path="/dev/loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 60.151824][ T29] audit: type=1400 audit(1727864836.787:1688): avc: denied { prog_load } for pid=5313 comm="syz.0.479" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 60.158448][ T5333] loop3: detected capacity change from 0 to 8192 [ 60.170807][ T35] vhci_hcd: vhci_device speed not set [ 60.233934][ T35] usb 3-1: new full-speed USB device number 2 using vhci_hcd [ 60.244470][ T5335] loop4: detected capacity change from 0 to 512 [ 60.291933][ T5335] ext4 filesystem being mounted at /84/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 60.365683][ T5212] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 60.390557][ T5212] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 60.420603][ T5321] vhci_hcd: connection reset by peer [ 60.438875][ T5212] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 60.449248][ T5324] vhci_hcd: stop threads [ 60.453508][ T5324] vhci_hcd: release socket [ 60.457945][ T5324] vhci_hcd: disconnect device [ 60.479339][ T5212] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 60.615478][ T5212] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.630885][ T5212] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.633205][ T5317] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.633242][ T5317] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.651724][ T5278] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.651783][ T5278] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.783582][ T5212] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.850628][ T5212] veth0_vlan: entered promiscuous mode [ 60.858923][ T5212] veth1_vlan: entered promiscuous mode [ 60.872651][ T5212] veth0_macvtap: entered promiscuous mode [ 60.880198][ T5212] veth1_macvtap: entered promiscuous mode [ 60.889740][ T5212] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.900232][ T5212] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.910180][ T5212] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.920688][ T5212] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.930521][ T5212] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.940946][ T5212] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.950799][ T5212] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.961316][ T5212] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.973549][ T5212] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.976640][ T5212] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.976658][ T5212] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.976667][ T5212] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.976751][ T5212] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.976762][ T5212] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.976775][ T5212] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.976821][ T5212] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.976834][ T5212] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.977462][ T5212] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.978572][ T5212] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.978607][ T5212] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.978694][ T5212] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.978730][ T5212] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.016489][ T5360] 9pnet_fd: Insufficient options for proto=fd [ 61.050084][ T5360] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 61.160587][ T5360] infiniband Syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 61.231590][ T5373] loop1: detected capacity change from 0 to 128 [ 61.437050][ T5385] loop2: detected capacity change from 0 to 256 [ 61.460785][ T5385] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5385 comm=syz.2.467 [ 61.524938][ T5387] netlink: 256 bytes leftover after parsing attributes in process `syz.1.494'. [ 61.551615][ T5386] loop0: detected capacity change from 0 to 512 [ 61.635381][ T5386] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c11c, mo2=0002] [ 61.656674][ T5386] System zones: 0-2, 18-18, 34-34 [ 61.681425][ T5386] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.493: bg 0: block 248: padding at end of block bitmap is not set [ 61.698819][ T5386] EXT4-fs error (device loop0): ext4_acquire_dquot:6879: comm syz.0.493: Failed to acquire dquot type 1 [ 61.711162][ T5386] EXT4-fs (loop0): 1 truncate cleaned up [ 61.718654][ T5386] ext4 filesystem being mounted at /115/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 61.765205][ T5403] xt_TPROXY: Can be used only with -p tcp or -p udp [ 61.775444][ T5403] x_tables: duplicate underflow at hook 4 [ 61.806441][ T5406] loop3: detected capacity change from 0 to 512 [ 61.850045][ T5411] loop1: detected capacity change from 0 to 512 [ 61.860460][ T5406] ext4 filesystem being mounted at /114/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 61.901328][ T5411] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c11c, mo2=0002] [ 61.923707][ T5414] sg_write: process 288 (syz.0.498) changed security contexts after opening file descriptor, this is not allowed. [ 61.946456][ T5411] System zones: 0-2, 18-18, 34-34 [ 61.974596][ T5411] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.500: bg 0: block 248: padding at end of block bitmap is not set [ 61.990317][ T5417] program syz.0.498 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 62.005670][ T5411] EXT4-fs error (device loop1): ext4_acquire_dquot:6879: comm syz.1.500: Failed to acquire dquot type 1 [ 62.029575][ T5411] EXT4-fs (loop1): 1 truncate cleaned up [ 62.040505][ T5411] ext4 filesystem being mounted at /24/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 62.054841][ T5419] xt_TPROXY: Can be used only with -p tcp or -p udp [ 62.101384][ T5419] x_tables: duplicate underflow at hook 4 [ 62.152129][ T5427] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 62.190931][ T5430] netlink: 180 bytes leftover after parsing attributes in process `syz.2.506'. [ 62.200983][ T5430] netlink: 56 bytes leftover after parsing attributes in process `syz.2.506'. [ 62.220983][ T5430] loop2: detected capacity change from 0 to 512 [ 62.259633][ T5430] loop2: detected capacity change from 0 to 2048 [ 62.333433][ T5441] xt_TPROXY: Can be used only with -p tcp or -p udp [ 62.335550][ T5440] loop2: detected capacity change from 0 to 512 [ 62.347170][ T5441] x_tables: duplicate underflow at hook 4 [ 62.450212][ T5450] loop4: detected capacity change from 0 to 8192 [ 62.562889][ T5454] netlink: 12 bytes leftover after parsing attributes in process `syz.3.514'. [ 62.576784][ T5454] FAULT_INJECTION: forcing a failure. [ 62.576784][ T5454] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 62.589969][ T5454] CPU: 0 UID: 0 PID: 5454 Comm: syz.3.514 Not tainted 6.12.0-rc1-syzkaller-00031-ge32cde8d2bd7 #0 [ 62.600554][ T5454] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 62.610604][ T5454] Call Trace: [ 62.613876][ T5454] [ 62.616856][ T5454] dump_stack_lvl+0xf2/0x150 [ 62.621453][ T5454] dump_stack+0x15/0x20 [ 62.625606][ T5454] should_fail_ex+0x223/0x230 [ 62.630293][ T5454] should_fail+0xb/0x10 [ 62.634517][ T5454] should_fail_usercopy+0x1a/0x20 [ 62.639638][ T5454] _copy_to_user+0x1e/0xa0 [ 62.644068][ T5454] simple_read_from_buffer+0xa0/0x110 [ 62.649578][ T5454] proc_fail_nth_read+0xf9/0x140 [ 62.654585][ T5454] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 62.660282][ T5454] vfs_read+0x195/0x720 [ 62.664543][ T5454] ? __rcu_read_unlock+0x4e/0x70 [ 62.669596][ T5454] ? __fget_files+0x1d4/0x210 [ 62.674292][ T5454] ksys_read+0xeb/0x1b0 [ 62.678463][ T5454] __x64_sys_read+0x42/0x50 [ 62.682984][ T5454] x64_sys_call+0x27d3/0x2d60 [ 62.687665][ T5454] do_syscall_64+0xc9/0x1c0 [ 62.692241][ T5454] ? clear_bhb_loop+0x55/0xb0 [ 62.696934][ T5454] ? clear_bhb_loop+0x55/0xb0 [ 62.701729][ T5454] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 62.707809][ T5454] RIP: 0033:0x7f508c6cca3c [ 62.712223][ T5454] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 62.731852][ T5454] RSP: 002b:00007f508b341030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 62.740272][ T5454] RAX: ffffffffffffffda RBX: 00007f508c885f80 RCX: 00007f508c6cca3c [ 62.748252][ T5454] RDX: 000000000000000f RSI: 00007f508b3410a0 RDI: 0000000000000007 [ 62.756342][ T5454] RBP: 00007f508b341090 R08: 0000000000000000 R09: 0000000000000000 [ 62.764308][ T5454] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 62.772273][ T5454] R13: 0000000000000000 R14: 00007f508c885f80 R15: 00007ffe7ce6b618 [ 62.780260][ T5454] [ 62.926264][ T5467] IPVS: sed: SCTP 127.0.0.1:0 - no destination available [ 62.955171][ T5469] IPVS: sed: SCTP 127.0.0.1:0 - no destination available [ 62.997320][ T5478] syz.4.525[5478] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 62.997468][ T5478] syz.4.525[5478] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 63.009181][ T5478] syz.4.525[5478] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 63.030221][ T5478] vlan2: entered promiscuous mode [ 63.058157][ T5481] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 63.075427][ T5481] netlink: 16 bytes leftover after parsing attributes in process `syz.1.526'. [ 63.087965][ T5480] uprobe: syz.1.526:5480 failed to unregister, leaking uprobe [ 63.125405][ T5486] syz.4.528[5486] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 63.125462][ T5486] syz.4.528[5486] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 63.137442][ T5486] syz.4.528[5486] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 63.234009][ T5499] IPVS: sed: SCTP 127.0.0.1:0 - no destination available [ 63.269688][ T5501] loop4: detected capacity change from 0 to 512 [ 63.301414][ T5501] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c11c, mo2=0002] [ 63.313639][ T5501] System zones: 0-2, 18-18, 34-34 [ 63.320428][ T5501] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.535: bg 0: block 248: padding at end of block bitmap is not set [ 63.341007][ T5501] EXT4-fs error (device loop4): ext4_acquire_dquot:6879: comm syz.4.535: Failed to acquire dquot type 1 [ 63.352912][ T5501] EXT4-fs (loop4): 1 truncate cleaned up [ 63.365609][ T5501] ext4 filesystem being mounted at /102/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 63.392016][ T5513] syz.4.540[5513] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 63.475642][ T5524] loop2: detected capacity change from 0 to 512 [ 63.495454][ T5526] xt_TPROXY: Can be used only with -p tcp or -p udp [ 63.506824][ T5526] x_tables: duplicate underflow at hook 4 [ 63.528990][ T5524] ext4 filesystem being mounted at /7/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 63.650701][ T5544] loop4: detected capacity change from 0 to 512 [ 63.676631][ T5544] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c11c, mo2=0002] [ 63.694379][ T5544] System zones: 0-2, 18-18, 34-34 [ 63.695188][ T5544] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.552: bg 0: block 248: padding at end of block bitmap is not set [ 63.695462][ T5544] EXT4-fs error (device loop4): ext4_acquire_dquot:6879: comm syz.4.552: Failed to acquire dquot type 1 [ 63.715340][ T5544] EXT4-fs (loop4): 1 truncate cleaned up [ 63.715771][ T5544] ext4 filesystem being mounted at /109/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 63.846050][ T5560] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 63.863033][ T5560] netlink: 'syz.0.557': attribute type 4 has an invalid length. [ 63.884235][ T5560] netlink: 'syz.0.557': attribute type 4 has an invalid length. [ 63.896973][ T5562] loop4: detected capacity change from 0 to 512 [ 63.906226][ T5560] 9pnet_fd: Insufficient options for proto=fd [ 63.924701][ T5562] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c11c, mo2=0002] [ 63.932792][ T5562] System zones: 0-2, 18-18, 34-34 [ 63.938545][ T5562] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.559: bg 0: block 248: padding at end of block bitmap is not set [ 63.954714][ T5562] EXT4-fs error (device loop4): ext4_acquire_dquot:6879: comm syz.4.559: Failed to acquire dquot type 1 [ 63.975894][ T5566] netlink: 'syz.0.560': attribute type 4 has an invalid length. [ 63.976959][ T5562] EXT4-fs (loop4): 1 truncate cleaned up [ 63.989732][ T5562] ext4 filesystem being mounted at /113/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 63.990444][ T5566] netlink: 'syz.0.560': attribute type 4 has an invalid length. [ 64.025027][ T5566] FAULT_INJECTION: forcing a failure. [ 64.025027][ T5566] name failslab, interval 1, probability 0, space 0, times 0 [ 64.037670][ T5566] CPU: 0 UID: 0 PID: 5566 Comm: syz.0.560 Not tainted 6.12.0-rc1-syzkaller-00031-ge32cde8d2bd7 #0 [ 64.048257][ T5566] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 64.058299][ T5566] Call Trace: [ 64.061589][ T5566] [ 64.064506][ T5566] dump_stack_lvl+0xf2/0x150 [ 64.069145][ T5566] dump_stack+0x15/0x20 [ 64.073359][ T5566] should_fail_ex+0x223/0x230 [ 64.078065][ T5566] ? sf_setstate+0x18c/0x300 [ 64.082650][ T5566] should_failslab+0x8f/0xb0 [ 64.087230][ T5566] __kmalloc_cache_noprof+0x4b/0x2a0 [ 64.092517][ T5566] sf_setstate+0x18c/0x300 [ 64.096956][ T5566] ip_mc_del_src+0x310/0x480 [ 64.101559][ T5566] ip_mc_leave_group+0x299/0x350 [ 64.106516][ T5566] do_ip_setsockopt+0x1f7c/0x2340 [ 64.111728][ T5566] ip_setsockopt+0x63/0x100 [ 64.116226][ T5566] sctp_setsockopt+0x141/0xea0 [ 64.121091][ T5566] sock_common_setsockopt+0x64/0x80 [ 64.126369][ T5566] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 64.132256][ T5566] __sys_setsockopt+0x1cc/0x240 [ 64.137132][ T5566] __x64_sys_setsockopt+0x66/0x80 [ 64.142158][ T5566] x64_sys_call+0x278d/0x2d60 [ 64.146855][ T5566] do_syscall_64+0xc9/0x1c0 [ 64.151416][ T5566] ? clear_bhb_loop+0x55/0xb0 [ 64.156091][ T5566] ? clear_bhb_loop+0x55/0xb0 [ 64.160785][ T5566] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 64.166702][ T5566] RIP: 0033:0x7efde940dff9 [ 64.171103][ T5566] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 64.190744][ T5566] RSP: 002b:00007efde8087038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 64.199157][ T5566] RAX: ffffffffffffffda RBX: 00007efde95c5f80 RCX: 00007efde940dff9 [ 64.207120][ T5566] RDX: 0000000000000024 RSI: 0000000000000000 RDI: 0000000000000003 [ 64.215082][ T5566] RBP: 00007efde8087090 R08: 000000000000000c R09: 0000000000000000 [ 64.223122][ T5566] R10: 0000000020000440 R11: 0000000000000246 R12: 0000000000000001 [ 64.231080][ T5566] R13: 0000000000000000 R14: 00007efde95c5f80 R15: 00007ffcd05b5e08 [ 64.239066][ T5566] [ 64.291509][ T5573] xt_TPROXY: Can be used only with -p tcp or -p udp [ 64.304386][ T5573] x_tables: duplicate underflow at hook 4 [ 64.353012][ T5583] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 64.430209][ T5592] loop4: detected capacity change from 0 to 512 [ 64.446332][ T5592] ext4 filesystem being mounted at /114/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 64.504372][ T5597] loop1: detected capacity change from 0 to 512 [ 64.530333][ T5597] ext4 filesystem being mounted at /38/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 64.541683][ T5597] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 64.699716][ T5607] loop1: detected capacity change from 0 to 512 [ 64.743040][ T5607] ext4 filesystem being mounted at /40/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 64.755545][ T5613] xt_TPROXY: Can be used only with -p tcp or -p udp [ 64.766264][ T5613] x_tables: duplicate underflow at hook 4 [ 65.157373][ T3271] EXT4-fs unmount: 146 callbacks suppressed [ 65.157383][ T3271] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.208923][ T29] kauditd_printk_skb: 339 callbacks suppressed [ 65.208936][ T29] audit: type=1400 audit(1727864841.957:2018): avc: denied { setopt } for pid=5621 comm="syz.4.581" lport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 65.265396][ T5624] loop0: detected capacity change from 0 to 8192 [ 65.287214][ T29] audit: type=1400 audit(1727864842.037:2019): avc: denied { getopt } for pid=5621 comm="syz.4.581" laddr=127.0.0.1 lport=47500 faddr=127.0.0.2 fport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 65.293981][ T35] usb 3-1: enqueue for inactive port 0 [ 65.314955][ T5628] loop4: detected capacity change from 0 to 128 [ 65.328432][ T5628] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 65.337229][ T35] usb 3-1: enqueue for inactive port 0 [ 65.337364][ T29] audit: type=1400 audit(1727864842.047:2020): avc: denied { create } for pid=5621 comm="syz.4.581" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 65.352135][ T5628] syz.4.581: attempt to access beyond end of device [ 65.352135][ T5628] loop4: rw=3, sector=6950, nr_sectors = 2 limit=128 [ 65.352181][ T5628] syz.4.581: attempt to access beyond end of device [ 65.352181][ T5628] loop4: rw=2051, sector=6952, nr_sectors = 942 limit=128 [ 65.407256][ T35] vhci_hcd: vhci_device speed not set [ 65.440271][ T4754] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.654578][ T5640] loop3: detected capacity change from 0 to 512 [ 65.672879][ T5640] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c11c, mo2=0002] [ 65.680952][ T5640] System zones: 0-2, 18-18, 34-34 [ 65.687910][ T5640] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.588: bg 0: block 248: padding at end of block bitmap is not set [ 65.702607][ T5640] Quota error (device loop3): write_blk: dquota write failed [ 65.710016][ T5640] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 65.720003][ T5640] EXT4-fs error (device loop3): ext4_acquire_dquot:6879: comm syz.3.588: Failed to acquire dquot type 1 [ 65.731581][ T5640] EXT4-fs (loop3): 1 truncate cleaned up [ 65.737534][ T5640] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 65.737598][ T5640] ext4 filesystem being mounted at /127/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 65.786306][ T3549] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.824891][ T5650] loop3: detected capacity change from 0 to 512 [ 65.845329][ T5650] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c11c, mo2=0002] [ 65.853462][ T5650] System zones: 0-2, 18-18, 34-34 [ 65.859271][ T5650] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.590: bg 0: block 248: padding at end of block bitmap is not set [ 65.873827][ T5650] Quota error (device loop3): write_blk: dquota write failed [ 65.881245][ T5650] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 65.891356][ T5650] EXT4-fs error (device loop3): ext4_acquire_dquot:6879: comm syz.3.590: Failed to acquire dquot type 1 [ 65.903932][ T5650] EXT4-fs (loop3): 1 truncate cleaned up [ 65.909872][ T5650] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 65.922463][ T5650] ext4 filesystem being mounted at /129/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 65.940726][ T3549] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.959870][ T5654] IPVS: sed: SCTP 127.0.0.1:0 - no destination available [ 66.158856][ T5669] loop4: detected capacity change from 0 to 512 [ 66.195347][ T5669] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 66.209112][ T5669] ext4 filesystem being mounted at /117/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 66.332221][ T5674] loop1: detected capacity change from 0 to 128 [ 66.347648][ T29] audit: type=1400 audit(1727864843.097:2021): avc: denied { name_bind } for pid=5673 comm="syz.1.598" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 66.369043][ T29] audit: type=1400 audit(1727864843.097:2022): avc: denied { unlink } for pid=4754 comm="syz-executor" name="file0" dev="tmpfs" ino=247 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 66.471857][ T5683] netlink: 12 bytes leftover after parsing attributes in process `syz.1.601'. [ 66.510053][ T29] audit: type=1326 audit(1727864843.257:2023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5684 comm="syz.1.602" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd4b63adff9 code=0x0 [ 66.617559][ T5690] loop1: detected capacity change from 0 to 512 [ 66.724403][ T5691] loop0: detected capacity change from 0 to 512 [ 66.768201][ T5691] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 66.780801][ T5691] ext4 filesystem being mounted at /129/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 67.006584][ T3271] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.059634][ T5704] loop4: detected capacity change from 0 to 2048 [ 67.115879][ T5704] GPT:first_usable_lbas don't match. [ 67.115889][ T5704] GPT:34 != 290 [ 67.115899][ T5704] GPT: Use GNU Parted to correct GPT errors. [ 67.116049][ T5704] loop4: p1 p2 p3 [ 67.161072][ T3250] udevd[3250]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 67.175341][ T4780] udevd[4780]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 67.186281][ T3258] udevd[3258]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 67.197908][ T3250] udevd[3250]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 67.215350][ T3258] udevd[3258]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 67.215522][ T3250] udevd[3250]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 67.226392][ T4780] udevd[4780]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 67.419542][ T3273] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.461785][ T5714] loop1: detected capacity change from 0 to 512 [ 67.496595][ T5714] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 67.510001][ T5714] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 67.554548][ T5718] loop0: detected capacity change from 0 to 8192 [ 67.578681][ T5714] EXT4-fs (loop1): 1 truncate cleaned up [ 67.584697][ T5714] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.654001][ T4754] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.682559][ T5722] loop1: detected capacity change from 0 to 512 [ 67.699145][ T5718] ================================================================== [ 67.707242][ T5718] BUG: KCSAN: data-race in mark_buffer_dirty_inode / sync_mapping_buffers [ 67.715764][ T5718] [ 67.718079][ T5718] write to 0xffff88810064dc88 of 8 bytes by task 5720 on cpu 0: [ 67.725709][ T5718] sync_mapping_buffers+0x156/0x7b0 [ 67.730921][ T5718] fat_file_fsync+0xa7/0x100 [ 67.735527][ T5718] vfs_fsync_range+0x116/0x130 [ 67.740290][ T5718] generic_file_write_iter+0x185/0x1c0 [ 67.745742][ T5718] iter_file_splice_write+0x5f1/0x980 [ 67.751108][ T5718] direct_splice_actor+0x160/0x2c0 [ 67.756214][ T5718] splice_direct_to_actor+0x302/0x670 [ 67.761578][ T5718] do_splice_direct+0xd7/0x150 [ 67.766332][ T5718] do_sendfile+0x39b/0x970 [ 67.770738][ T5718] __x64_sys_sendfile64+0xbd/0x150 [ 67.775839][ T5718] x64_sys_call+0xed5/0x2d60 [ 67.780422][ T5718] do_syscall_64+0xc9/0x1c0 [ 67.784913][ T5718] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 67.790805][ T5718] [ 67.793113][ T5718] read to 0xffff88810064dc88 of 8 bytes by task 5718 on cpu 1: [ 67.800640][ T5718] mark_buffer_dirty_inode+0x96/0x1c0 [ 67.806005][ T5718] fat16_ent_put+0x4f/0x60 [ 67.810413][ T5718] fat_ent_write+0x66/0xe0 [ 67.814819][ T5718] fat_chain_add+0x15f/0x400 [ 67.819403][ T5718] fat_get_block+0x46b/0x5e0 [ 67.823983][ T5718] __block_write_begin_int+0x417/0xfa0 [ 67.829436][ T5718] cont_write_begin+0x546/0x860 [ 67.834279][ T5718] fat_write_begin+0x51/0xe0 [ 67.838861][ T5718] cont_write_begin+0x18b/0x860 [ 67.843703][ T5718] fat_write_begin+0x51/0xe0 [ 67.848299][ T5718] generic_cont_expand_simple+0xaa/0x150 [ 67.853935][ T5718] fat_cont_expand+0x3a/0x160 [ 67.858603][ T5718] fat_setattr+0x2aa/0x840 [ 67.863008][ T5718] notify_change+0x85c/0x8e0 [ 67.867590][ T5718] do_ftruncate+0x3cf/0x460 [ 67.872087][ T5718] __x64_sys_ftruncate+0x6a/0xc0 [ 67.877033][ T5718] x64_sys_call+0x8e5/0x2d60 [ 67.881628][ T5718] do_syscall_64+0xc9/0x1c0 [ 67.886128][ T5718] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 67.892025][ T5718] [ 67.894334][ T5718] value changed: 0xffff88810665ef08 -> 0x0000000000000000 [ 67.901424][ T5718] [ 67.903733][ T5718] Reported by Kernel Concurrency Sanitizer on: [ 67.909876][ T5718] CPU: 1 UID: 0 PID: 5718 Comm: syz.0.613 Not tainted 6.12.0-rc1-syzkaller-00031-ge32cde8d2bd7 #0 [ 67.920458][ T5718] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 67.930503][ T5718] ================================================================== [ 67.941117][ T5722] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.954032][ T5722] ext4 filesystem being mounted at /49/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 67.954868][ T5722] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 67.974528][ T4754] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.