last executing test programs: 4.852414242s ago: executing program 3 (id=1726): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$eJzs3T9oM2UcB/DvXRJf+75BXnURxD8gIloor5vg8rooFKQUEUGFioiL0gq1xa1xcnHQWaWTSxE3q6N0KS6K4FS1Q10ELQ4WBx0iybVS24ja1Jz0Ph+43l3vee73HLnvkyyXBGisq0muJ2klmU7SSVIcb3B3tVw93F2f2l5I+v0nfiqG7ar9ylG/K0l6SR5KslUWeamdrG4+s/fLzmP3vbnSuff9zaenJnqRh/b3dh8/eG/ujY9mH1z94qsf5opcT/dP13X+ihH/axfJLf9Fsf+Jol33CPgn5l/78OtB7m9Ncs8w/52UqV68t5Zv2OrkgXf/qu/bP355+yTHCpy/fr8zeA/s9YHGKZN0U5QzSartspyZqT7Df9O6XL68tPzq9ItLK4sv1D1TAeelm+w++smlj6+cyP/3rSr/wMU1yP+T8xvfDrYPWnWPBpiIO6rVIP/Tz63dH/mHxpF/aC75h+aSf2gu+Yfmkn9oLvmHC6xztNEbeVj+obnkH5pL/qG5jucfAGiW/qW6n0AG6lL3/AMAAAAAAAAAAAAAAAAAAJy2PrW9cLRMquZn7yT7jyRpj6rfGv4ecXLj8O/ln4tBsz8UVbexPHvXmCcY0wc1P31903f11v/8znrrry0mvdeTXGu3T99/xeH9d3Y3/83xzvNjFviXihP7Dz812fon/bZRb/3ZneTTwfxzbdT8U+a24Xr0/NM9/hXLZ/TKr2OeAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIn5PQAA//8PK23M") bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000280)=@generic={&(0x7f0000000080)='./file0\x00', r0}, 0x18) open(&(0x7f0000000180)='./bus\x00', 0x14d27e, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000340)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000280)='./bus\x00', 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000800)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x2040d0, &(0x7f0000000540)={[{@errors_remount}, {@nojournal_checksum}, {@barrier}, {@barrier}, {@test_dummy_encryption}, {@nomblk_io_submit}]}, 0xff, 0x4ab, &(0x7f0000000080)="$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") r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000b80)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b40)={&(0x7f0000000600)='kfree\x00', r2, 0x0, 0xde0}, 0x18) r3 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0xa, r3, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000340)='ex') ioctl$FS_IOC_SETFLAGS(r1, 0x4c02, &(0x7f0000000140)) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r4) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r5 = inotify_init1(0x0) fcntl$setown(r5, 0x8, 0xffffffffffffffff) fcntl$getownex(r5, 0x10, &(0x7f0000000140)={0x0, 0x0}) r7 = syz_open_procfs(r6, &(0x7f0000000040)='fd/4\x00') ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r7, 0x40086610, &(0x7f0000000180)={@id={0x40000, 0x0, @b}}) open$dir(&(0x7f0000000000)='./file0\x00', 0x41, 0x0) 4.355088354s ago: executing program 3 (id=1728): bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6(0xa, 0x3, 0xff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xa51ee000) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x0) perf_event_open(0x0, 0x0, 0x4, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) r3 = memfd_create(&(0x7f0000000880)='C(\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc9\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\xa4(V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93i|\xc0\x00\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\x8f\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\xb5\x13^\x13\xaf\xeeC\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x99\x0e$U\xb4X\xc7\xfa\f\b\x8f\xc4\xbeIt\xe4\xc51\xba\xb9H\xe8\x96\x94\xd7\xdc\x81\x111\t\xafl\x97\xd8T\xd40\x90ON\xaaFY\xb4\xb3\xf4\xf8JT\xc5:\xc5\aGc\xb5\x12\x90\x7f\x00\x91\xce@\xe5\xd3A\xcc\xd5|\x9f\x8e5\x042\x9a\xc1\xa1\a\xb7\xf5\xbc\xc2U\x89\xa4*2\xd0\xac\x920\x00=\xf2', 0x0) pwritev(r3, &(0x7f0000000600)=[{&(0x7f0000000180)="10", 0x1}], 0x1, 0x800000, 0x0) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x8, @mcast1, 0xc}, 0x1c) sendfile(r2, r2, 0x0, 0x24002de8) unshare(0x20040600) r4 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$SCSI_IOCTL_GET_PCI(r5, 0x5, 0x0) ioctl$LOOP_SET_STATUS(r2, 0x4c02, &(0x7f0000000300)={0x0, {}, 0x0, {}, 0x9, 0x12, 0xb, 0x1d, "522530d6e597ca54b72437f1295d5713b017ddc8f03f7f9431388f9a2df4e1857ad78ca88090d709b29ee70700000000000000aaa5f78a000000000080030900", "012a519a6f0231000000002b637a4b34368b41cd260b66da3010a9da97c74ba2", [0x1, 0x100000000b]}) bpf$PROG_LOAD(0x5, 0x0, 0x0) rmdir(&(0x7f0000000080)='./file0\x00') ioctl$LOOP_SET_BLOCK_SIZE(r2, 0x4c09, 0x800008001ffc0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x1, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) 3.312464482s ago: executing program 3 (id=1745): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x1, 0x7, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000590000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1, 0x0, 0x6}, 0x18) open(&(0x7f0000000180)='./bus\x00', 0xa37e, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000080000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000021440011800a0001006d617463680000003400028008000240000000001c0003000afe6cbf96caa5debdad61b67ddb2fb68fcf19f7807076430a00010071756f7461"], 0xc8}}, 0x0) 2.985002289s ago: executing program 4 (id=1752): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000340)=ANY=[@ANYRES32=r1, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kmem_cache_free\x00', r2}, 0x18) r3 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00'}, 0x10) connect$pppoe(0xffffffffffffffff, 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000007000000ff"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCMIWAIT(r4, 0x5453, 0x0) 2.967432621s ago: executing program 4 (id=1753): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) clock_gettime(0x0, &(0x7f00000002c0)) 2.787343716s ago: executing program 4 (id=1755): bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6(0xa, 0x3, 0xff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xa51ee000) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x0) perf_event_open(0x0, 0x0, 0x4, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) r3 = memfd_create(&(0x7f0000000880)='C(\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc9\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\xa4(V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93i|\xc0\x00\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\x8f\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\xb5\x13^\x13\xaf\xeeC\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x99\x0e$U\xb4X\xc7\xfa\f\b\x8f\xc4\xbeIt\xe4\xc51\xba\xb9H\xe8\x96\x94\xd7\xdc\x81\x111\t\xafl\x97\xd8T\xd40\x90ON\xaaFY\xb4\xb3\xf4\xf8JT\xc5:\xc5\aGc\xb5\x12\x90\x7f\x00\x91\xce@\xe5\xd3A\xcc\xd5|\x9f\x8e5\x042\x9a\xc1\xa1\a\xb7\xf5\xbc\xc2U\x89\xa4*2\xd0\xac\x920\x00=\xf2', 0x0) pwritev(r3, &(0x7f0000000600)=[{&(0x7f0000000180)="10", 0x1}], 0x1, 0x800000, 0x0) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x8, @mcast1, 0xc}, 0x1c) sendfile(r2, r2, 0x0, 0x24002de8) unshare(0x20040600) r4 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$SCSI_IOCTL_GET_PCI(r5, 0x5, 0x0) ioctl$LOOP_SET_STATUS(r2, 0x4c02, &(0x7f0000000300)={0x0, {}, 0x0, {}, 0x9, 0x12, 0xb, 0x1d, "522530d6e597ca54b72437f1295d5713b017ddc8f03f7f9431388f9a2df4e1857ad78ca88090d709b29ee70700000000000000aaa5f78a000000000080030900", "012a519a6f0231000000002b637a4b34368b41cd260b66da3010a9da97c74ba2", [0x1, 0x100000000b]}) set_robust_list(0x0, 0x0) rmdir(&(0x7f0000000080)='./file0\x00') ioctl$LOOP_SET_BLOCK_SIZE(r2, 0x4c09, 0x800008001ffc0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x1, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) 2.290407547s ago: executing program 4 (id=1760): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="000000000087fb00b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) socket(0x28, 0x5, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x66, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfdcd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xe, &(0x7f00000003c0)=ANY=[@ANYBLOB="184b0000fcffffff0000000000000000184800000200000000000000000000008510000007000000188e10668aac14d1bc0100002020732500000000002020207b1af8ffc5000000bfa1ffb702000008000000b7030000040000008500000006000000000000000000000000000000001f573096f9335b56895ef8c267afd36d97257d0d53f676976a760ff4c6353b5ef5aa46c608bd8e75c04c234bca4a42b7f2fc"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r4, &(0x7f0000000000)=0x780, 0x12) 2.252241431s ago: executing program 4 (id=1761): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000004c0)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r0, 0x0, 0x800000000000000}, 0x18) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000e00), r1) sendmsg$NL802154_CMD_NEW_SEC_KEY(r1, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000a00)=ANY=[@ANYBLOB="2c010000", @ANYRES16=r2, @ANYBLOB="01000000000000000000170000000c00060001000000010000000c01308014000400976f1044852bca665354bd217b6b9037200001800c0005000400000000000000080001000300000005000200000000000500020008000000240003"], 0x12c}, 0x1, 0x0, 0x0, 0x20000020}, 0x0) 2.184846586s ago: executing program 4 (id=1762): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) fcntl$addseals(r0, 0x409, 0x2) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000380)={[{@quota}, {@resuid={'resuid', 0x3d, 0xee01}}, {@barrier_val={'barrier', 0x3d, 0x3}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@block_validity}, {@dioread_lock}]}, 0x3, 0x434, &(0x7f00000004c0)="$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") r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) truncate(&(0x7f0000000340)='./file2\x00', 0x0) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x802053, 0x0, 0xfc, 0x0, &(0x7f00000000c0)) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000100)=0x3915, 0x4) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000300), 0x40800, 0x0) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f00000009c0)=0x0, &(0x7f0000001700)=0x4) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r5}, 0x38) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0x20, &(0x7f00000003c0)={&(0x7f0000000680)=""/134, 0x86, 0x0, &(0x7f0000000740)=""/226, 0xe2}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000001800)=@base={0x17, 0xa53, 0x0, 0x0, 0x100, r1, 0x6, '\x00', 0x0, r1, 0x3, 0x3, 0x5, 0x0, @void, @value, @void, @value}, 0x50) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001880)={0x1b, 0x0, 0x0, 0x401, 0x0, 0x1, 0x1, '\x00', 0x0, r1, 0x3, 0x5, 0x5, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000001980)={0x18, 0x5, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2}, [@map_val={0x18, 0x9, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x8}]}, &(0x7f0000000980)='GPL\x00', 0x4, 0xe4, &(0x7f0000001600)=""/228, 0x41000, 0x39, '\x00', r4, @fallback=0x1b, r1, 0x8, &(0x7f0000001740)={0x0, 0x2}, 0x8, 0x10, &(0x7f00000017c0)={0x1, 0xe, 0x0, 0x9}, 0x10, r6, r1, 0x2, &(0x7f0000001900)=[r1, r7, r1, r8, r1, r1, r1], &(0x7f0000001940)=[{0x5, 0x1, 0x6, 0x2}, {0x1, 0x1, 0xe, 0x6}], 0x10, 0x1, @void, @value}, 0x94) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x2d, 0x0) recvmmsg(r2, &(0x7f0000006a00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000041c0)=""/19, 0x13}, 0x1}], 0x1, 0x12000, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r9}}]}, &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r10}, 0x10) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a00)=ANY=[@ANYBLOB="b702000022000000bfa300000000000007030000007effff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065060400010000050404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000496cf27fb6d2c643db7e2d5fb4b0936cdf827fb43a431ca711fcd0cdfa146ed3d09a6175037958e27106e225b7937f02008b5e5a076d83923dd29c034055b67dafe6c8dc525d78c07f34e4d5b3185b310efcfa89147a09000000f110026e6d2ef831ab7ea0c34f17e3ad6eecbb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b0a341a2d7cbdb9cd38bdb2ca8e0500009cb20d03e7564c35a8d36774d5e5003a14817ac61e4dd19699a13477bf7e060e3670ef0e789f65f105006704902cbe7bc04b82d2789cb132b8667c214733a18c8b6619f28d9961b626c57c2691208173656d60a17e3c184b751c51160fbcbbdb5b1e7be6148ba532e60a0ac346dfebd31a080600000002000000ff000000334d83239dd27080e71113610e10d858e8327ef01fb6c86acac12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e957bc73ddc4eabba08ab1e1ad828267d4eadd3957663e88535c133f7130856f756436303767d2e24f29e5dad9796edb697a6ea0182babc190ae2ebf8aad34732181feb215139f15ea7e8cb0bae7c34d5ac5e7c805210600000000000000c3dec04b25dfc17975238345d4f71ab158c36657b7218baa0700f781c0a99bd50499ccc421ace5e845885efb5b9964ecbeba3da8223fe5308e4e65ee93e107000000f8ddebf70132a4d0175b989b8eccf707882042e716df9b57b290c661d4e85031086197bcc5cb0e221a0c34323c129102b6ff0100002e88a1940b3c02ed9c92d6f64b1282dc51bb0015982730711c599e1c72ffa11ed8be1a6830d7507005154c46bd3ca96318c570f0721fc7aa2a5836ba99fe1f86468694f22cdf550ef091a78098534f0d973059594119d06d5ea9a8d0857382ec6e2a071474cfc12346e47ad97f4ead7cf70a9d1cdac944779dc08a705414888700a30e2366c6a06b3367a389ca39059787790017b0689a173db9c24db65c1e00015c1d093dab18fd0699fe3304000000323e9c7080397bc49d70c060d57bc88fbe3bbaa058b040362ab926150363fb099408885afc2bf9a46a076b7babfcddeff8c35030669ea69f5e4be1b8e0d6697e97186f9ae97d5670dba6623279f73db9dec75070cd9ab0fda6b069ef6d2857ca3e4effcf7462710d133d541da86e0477e4a6cc999dc21c3ef408e6b178e7c9f274d7fafc8d757d33dfa35aa2000034837d365e63845f3c1092f8dde8af3904ea0f4b82649b83ed4fa0f873339c4cadecc13219ba7518aa4f7db34ead13484742067ab743c1d82a5687f2ed690000000000000000000000000000000000000000000099d4fa0000000000003f0ecdc7c82e72919c91d2039afe17e95edeeeba72205beff7771bcb293747b88486cacee403000000a2919a4bff2ed893f2c814679fa69fc7e0cf761f918725704a01c56009a9f748e5aaf30a10bd8c409b1870c1f75e26b45264e3d3f8e0048e55ae289ce2ad779ce71d4dc30cbb2cc4289d2f884d66cddc76eb7f601110ff39053c262279f4ef00fbdb8c338615a9ec84f27a9f3938ae736138b8c1ec220c1540bf3d162dc1c27fa30f0dc60b9f257db5d1c7ed2e152cb2cf06f8edb30177fead735a952ffce676a93110904d5ee2abdab2ef3ff84c4d61443f73552195c7ccfbf9f03c44432eaa3b7501d4239354da8de21eada75d3a3afb2c76ff0700007981699b6c0f0e946766f57544ff52cef0dd811bec4e3c0a30f2d7d19d26d2503a3ea376721b8eded3bc475958dd498ee2b2d6146e33fc0de1dc2e0516ac565ddb1d4ae89e6712824a85eb9ee0a3b68c9e209756623adf685dd715d68ed11e4b4d5502f5124948f8f98c615cac3666c58f785c3f758be352a71871d5c081197d37980e4f4e26b5476fb20407ff7098b7174bef66fa03a99b5c1c20b378065fac4ef9ac2d0d804b9400000060e5d3f1749f6aecf69ba83a71caa9bdddc679f1b826f54b6563a4be1fd82b73c8c2bc65f63982b951fb058fd3c7b6341c4580376b6c16bd94d2da66059de81abfa15eeeb88b6ae5882ad341032c73f1285e21fff5a1d138e061b1dc7bbda199b5fab8e0719e9cd69b47dcb52b0be6a3a73afdf328132e1d4f21065716be0c53a23940d07188b015fa341dbc92231c8b5e5717eac184f46c9f61b69f55cd2231bcf821052429a1f250e8b734be0605a15f25923d599544b319319ff0a32621019347df460a098119a6f47eb1bac47946d7a009cbc6ec74c19a93cc7c7138b28c95270116181fd5f553572548104d2ad0e10d3663488e664401453f22f0d76d2162635365258af61ae1f46f4a7862f302d91e3f7c2781f602220522e84602a939a8d5e4137ae31ccd397404dc72e06715a6503d4d865182803ee6725da7293b23daeebefd6fce7411c9624a7e8d5ba5a13e1c32adc4f32744a8c6882a72475e4280a4d9a47c003c6ed3071330c58145be813a10788a720a6b5a498ca2b42496c479a0a71e2f6f9bad8c84bc6be20281bde0b348cf2c60538a505ad4a0510eebb023e4954c9eb6cd70627f5c03d867dbf3ad5d1f1dc852064dd0efafc3df20ec8faf3d194db76127f88f284fa1b71ab964fdd2474471da76373e65e9a8bf844bdfdd348bc7d00c4c7e7afe8a1f8cde79b7a6c5aafe954b8ba37818e40c14b37c23f9f614576b689436fef2f27f8b1e756e00262e22bca49c43fd73e7e99b2fa44a8c1db99c2cf2735ad6c5fabf082e0df0f8ba7e24272165f2f5b28230c02b53d44bd84bf6770157e96bbb96b5e1f165c87e7ad68a3600b3d357fa9a7d53c281d88ebb175a4dbb82130e6970982947913110f091d21760d985afd3163f2e6880682432f9b3b97d57a9f980ede51116a3d04d58872a07d6a7e12db673acd2f7b8988d833e71943fe2c1c60100f36b955c56b55bfd3ecf0af694c71a03f2996c15b1ba971de1cb9c7e6a0000000000000014783ef54c51199317413f98dca8ff3d0bda50f6c0af58dbd6c031b1a5a7512c5896514adfa17d31429c68db50a93d88199defd3b4625fea426ff9293a28a544a6a9e2a79b55daa1b3c6b14c4ec6d164e902ce4913843d65d841973468729ea12bf6d3499036dbb66718f3497855c3baa6cc07c0fa388ec9df0617c1a28ef5a595ee267a76175b8a057e6efaf4fefe46def451f2858fe71a53e77b1a44e98843bb3a40102da3703dfb9f61bdcea2fb810b32d52e2157a150a63ea6135d1cf6f864c2e6887dd7245bc5d61dc5a114d10ffb22e76678bbfc1e3865d17d128306d1b81884a934cb00000000000000000098a4526e6468987dbc63bff7590eb388afaba43d811996333eef7e9f472bee293f0c40d434b8be07cbd52325296e22802493edb5c590ad208bac683a8b2d4c9d2d57ff846ae8c422e0b28546671f11d8157bb762c91f3fbc8b8e21589c92446ae65d408c0637ffcc2d44d715ce003dd1e12b085e186d069a55c2e96efbe5024d61a56a36d988c0f51a973a6c545b28211a92000000001501aed8972af0fcd540a9d4e293690c5e697b3a1480e46df5371bca1cfb28a57c1b3c956ec81397e81fbf870a67385fea04220423f52ad8178b9fd04bdc7e5fee4bd52db996e633792118efdb6b88023e80da74fdf723c7f05e96d738989f2c8b1e6b3a9716b6130a09e2698b12d8ae4d329f305fde3e8dec42eae3c69988ad568543a715755110c8dff124a6ba9ee1dc32ea7d17a35a420133c7df262a30cbff8790d80fd4def27ff1b268014daec1b0d1d2864bf010801f092efac0b349b86631d2a7455a72c0e7f43730b78e9beb255188acb12f3770fcc2223ba034181d9c3acef5b6d9ee77883ca12cfd68a5db88cc94c65a9fd1d070387a351905240b0b1920429109032ddc3cf9bf4ba32f594d45478bca432bdeb1a21fd5b5c2c416ed8eeabade9e2002b4e714dc3d7476fa52fedc0d0e6bed973e3aa468597810c13a8c40d9845bf0080850f309ec4dc5f88ef54b6674d8402f8ccd86d33edb1894e46b793641e9bf407b7c8b2b4b555f07467c96828163ce30fd4c24b108df352bc32eae5b1e3adecf6cf8d2bc3549f49c14a553683499b707a422e98082456c0dcf3f7155db062dfad1e92af9708dca9b70a77f4b88c06f8ee7a43df5f5ac21a6ed194102abaa0970000000000000"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r11, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000040)="76389e147583ddd0569ba56a5cfd55", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) rename(&(0x7f0000000000)='./bus\x00', &(0x7f0000000180)='./file1\x00') connect$pppoe(0xffffffffffffffff, &(0x7f00000000c0)={0x18, 0x0, {0x3, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, 'gretap0\x00'}}, 0x1e) open(&(0x7f0000001780)='./bus\x00', 0x64842, 0x0) 1.849269445s ago: executing program 0 (id=1767): bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.time\x00', 0x26e1, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x4, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r1}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300"/72], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2, 0x0, 0xfffffffffffffffe}, 0x18) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x1f4, 0xa, 0x0, &(0x7f0000000100)="ff412f72b0833efc8864", 0x0, 0x300, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50) dup3(r3, r4, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r6}, 0x10) eventfd2(0x401, 0x1) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r7}, 0x10) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000006c0)=ANY=[@ANYBLOB="020900000200"], 0x10}}, 0x0) 1.726960005s ago: executing program 0 (id=1768): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000000000000000000080021850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kmem_cache_free\x00', r1, 0x0, 0x2}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) clock_nanosleep(0x9, 0x0, &(0x7f0000000080)={0x0, 0x3938700}, 0x0) 1.639391172s ago: executing program 0 (id=1769): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r0}, &(0x7f0000000180), &(0x7f00000004c0)=r1}, 0x20) syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8002, &(0x7f00000000c0), 0x1, 0x4b4, &(0x7f0000000c80)="$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") 1.622085384s ago: executing program 0 (id=1770): bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6(0xa, 0x3, 0xff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xa51ee000) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x0) perf_event_open(0x0, 0x0, 0x4, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) r3 = memfd_create(&(0x7f0000000880)='C(\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc9\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\xa4(V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93i|\xc0\x00\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\x8f\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\xb5\x13^\x13\xaf\xeeC\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x99\x0e$U\xb4X\xc7\xfa\f\b\x8f\xc4\xbeIt\xe4\xc51\xba\xb9H\xe8\x96\x94\xd7\xdc\x81\x111\t\xafl\x97\xd8T\xd40\x90ON\xaaFY\xb4\xb3\xf4\xf8JT\xc5:\xc5\aGc\xb5\x12\x90\x7f\x00\x91\xce@\xe5\xd3A\xcc\xd5|\x9f\x8e5\x042\x9a\xc1\xa1\a\xb7\xf5\xbc\xc2U\x89\xa4*2\xd0\xac\x920\x00=\xf2', 0x0) pwritev(r3, &(0x7f0000000600)=[{&(0x7f0000000180)="10", 0x1}], 0x1, 0x800000, 0x0) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x8, @mcast1, 0xc}, 0x1c) sendfile(r2, r2, 0x0, 0x24002de8) unshare(0x20040600) r4 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$SCSI_IOCTL_GET_PCI(r5, 0x5, 0x0) ioctl$LOOP_SET_STATUS(r2, 0x4c02, &(0x7f0000000300)={0x0, {}, 0x0, {}, 0x9, 0x12, 0xb, 0x1d, "522530d6e597ca54b72437f1295d5713b017ddc8f03f7f9431388f9a2df4e1857ad78ca88090d709b29ee70700000000000000aaa5f78a000000000080030900", "012a519a6f0231000000002b637a4b34368b41cd260b66da3010a9da97c74ba2", [0x1, 0x100000000b]}) set_robust_list(0x0, 0x0) rmdir(&(0x7f0000000080)='./file0\x00') ioctl$LOOP_SET_BLOCK_SIZE(r2, 0x4c09, 0x800008001ffc0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x1, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) 1.288189002s ago: executing program 2 (id=1771): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000340)=ANY=[@ANYRES32=r1, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kmem_cache_free\x00', r2}, 0x18) r3 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00'}, 0x10) connect$pppoe(0xffffffffffffffff, 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000007000000ff"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCMIWAIT(r4, 0x5453, 0x0) 1.262443194s ago: executing program 2 (id=1772): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000004c0)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0, 0x0, 0x800000000000000}, 0x18) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(0x0, r1) sendmsg$NL802154_CMD_NEW_SEC_KEY(r1, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000a00)=ANY=[@ANYBLOB="2c010000", @ANYRES16=r2, @ANYBLOB="01000000000000000000170000000c00060001000000010000000c01308014000400976f1044852bca665354bd217b6b9037200001800c0005000400000000000000080001000300000005000200000000000500020008000000240003"], 0x12c}, 0x1, 0x0, 0x0, 0x20000020}, 0x0) 1.221565337s ago: executing program 2 (id=1773): r0 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) r1 = memfd_create(&(0x7f0000000880)='C(\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc9\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\xa4(V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93i|\xc0\x00\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\x8f\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\xb5\x13^\x13\xaf\xeeC\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x99\x0e$U\xb4X\xc7\xfa\f\b\x8f\xc4\xbeIt\xe4\xc51\xba\xb9H\xe8\x96\x94\xd7\xdc\x81\x111\t\xafl\x97\xd8T\xd40\x90ON\xaaFY\xb4\xb3\xf4\xf8JT\xc5:\xc5\aGc\xb5\x12\x90\x7f\x00\x91\xce@\xe5\xd3A\xcc\xd5|\x9f\x8e5\x042\x9a\xc1\xa1\a\xb7\xf5\xbc\xc2U\x89\xa4*2\xd0\xac\x920\x00=\xf2', 0x0) pwritev(r1, &(0x7f0000000600)=[{&(0x7f0000000180)="10", 0x1}], 0x1, 0x800000, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24002de8) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000300)={0x0, {}, 0x0, {}, 0x9, 0x12, 0xb, 0x1d, "522530d6e597ca54b72437f1295d5713b017ddc8f03f7f9431388f9a2df4e1857ad78ca88090d709b29ee70700000000000000aaa5f78a000000000080030900", "012a519a6f0231000000002b637a4b34368b41cd260b66da3010a9da97c74ba2", [0x1, 0x100000000b]}) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x800008001ffc0) 1.107414927s ago: executing program 0 (id=1774): bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6(0xa, 0x3, 0xff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xa51ee000) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x0) perf_event_open(0x0, 0x0, 0x4, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) r3 = memfd_create(&(0x7f0000000880)='C(\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc9\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\xa4(V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93i|\xc0\x00\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\x8f\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\xb5\x13^\x13\xaf\xeeC\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x99\x0e$U\xb4X\xc7\xfa\f\b\x8f\xc4\xbeIt\xe4\xc51\xba\xb9H\xe8\x96\x94\xd7\xdc\x81\x111\t\xafl\x97\xd8T\xd40\x90ON\xaaFY\xb4\xb3\xf4\xf8JT\xc5:\xc5\aGc\xb5\x12\x90\x7f\x00\x91\xce@\xe5\xd3A\xcc\xd5|\x9f\x8e5\x042\x9a\xc1\xa1\a\xb7\xf5\xbc\xc2U\x89\xa4*2\xd0\xac\x920\x00=\xf2', 0x0) pwritev(r3, &(0x7f0000000600)=[{&(0x7f0000000180)="10", 0x1}], 0x1, 0x800000, 0x0) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x8, @mcast1, 0xc}, 0x1c) sendfile(r2, r2, 0x0, 0x24002de8) unshare(0x20040600) r4 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$SCSI_IOCTL_GET_PCI(r5, 0x5, 0x0) ioctl$LOOP_SET_STATUS(r2, 0x4c02, &(0x7f0000000300)={0x0, {}, 0x0, {}, 0x9, 0x12, 0xb, 0x1d, "522530d6e597ca54b72437f1295d5713b017ddc8f03f7f9431388f9a2df4e1857ad78ca88090d709b29ee70700000000000000aaa5f78a000000000080030900", "012a519a6f0231000000002b637a4b34368b41cd260b66da3010a9da97c74ba2", [0x1, 0x100000000b]}) set_robust_list(0x0, 0x0) rmdir(&(0x7f0000000080)='./file0\x00') ioctl$LOOP_SET_BLOCK_SIZE(r2, 0x4c09, 0x800008001ffc0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x1, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) 1.077367739s ago: executing program 2 (id=1775): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) iopl(0x3) mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000500)={0x10000a, 0x73, 0x40000}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r1}, 0x10) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r4 = dup(r3) write$P9_RLERRORu(r4, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe935"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r5}, 0x0, &(0x7f0000000040)}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=@base={0x6, 0x4, 0x8000, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 862.706278ms ago: executing program 2 (id=1776): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x5, @void, @value}, 0x94) r0 = perf_event_open(&(0x7f0000000380)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x4}, 0x10220}, 0x0, 0x0, 0xffffffffffffffff, 0x8) mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) perf_event_open(&(0x7f0000000040)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r0, 0x3) socket$inet_mptcp(0x2, 0x1, 0x106) socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x40000000015, 0x5, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r1, 0x25, &(0x7f0000000000)={0x1}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r2, 0x26, &(0x7f0000000000)) fcntl$lock(r2, 0x7, &(0x7f00000006c0)) fcntl$lock(r1, 0x25, &(0x7f0000000180)) syz_io_uring_setup(0x4076, &(0x7f0000000240)={0x0, 0x0, 0x10100}, &(0x7f0000000380)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000180)=@IORING_OP_SYMLINKAT={0x26, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) syz_io_uring_complete(r3) socket$inet(0x2b, 0x801, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1}, 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) 861.508468ms ago: executing program 1 (id=1785): bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6(0xa, 0x3, 0xff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xa51ee000) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x0) perf_event_open(0x0, 0x0, 0x4, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) pwritev(0xffffffffffffffff, &(0x7f0000000600)=[{&(0x7f0000000180)="10", 0x1}], 0x1, 0x800000, 0x0) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, 0xffffffffffffffff) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x8, @mcast1, 0xc}, 0x1c) sendfile(r2, r2, 0x0, 0x24002de8) unshare(0x20040600) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$SCSI_IOCTL_GET_PCI(r4, 0x5, 0x0) 450.362502ms ago: executing program 1 (id=1777): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) clock_gettime(0x0, &(0x7f00000002c0)) 428.657064ms ago: executing program 1 (id=1778): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000000000000000000080021850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kmem_cache_free\x00', r1, 0x0, 0x2}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) clock_nanosleep(0x9, 0x0, &(0x7f0000000080)={0x0, 0x3938700}, 0x0) 427.690794ms ago: executing program 0 (id=1779): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000250000609a00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) getrlimit(0x3, &(0x7f0000000000)) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101a01) ioctl$USBDEVFS_DISCONNECT_CLAIM(r5, 0x8108551b, &(0x7f0000000380)={0x0, 0x0, "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"}) ioctl$USBDEVFS_CLEAR_HALT(r5, 0x80045515, &(0x7f0000000340)={0x1, 0x1}) unshare(0x40020000) 418.883304ms ago: executing program 3 (id=1746): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b000000050000000004000009"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) clock_gettime(0x0, &(0x7f00000002c0)) 378.647348ms ago: executing program 3 (id=1780): socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0x14) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xffd, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001040)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}}, 0x0) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x109022, 0x0) ioctl$PTP_EXTTS_REQUEST2(r3, 0x43403d0e, 0x0) 338.465341ms ago: executing program 1 (id=1781): bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000500)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="18000000300000776437"], 0x20) 337.506622ms ago: executing program 3 (id=1782): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x5, @void, @value}, 0x94) r0 = perf_event_open(&(0x7f0000000380)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x4}, 0x10220}, 0x0, 0x0, 0xffffffffffffffff, 0x8) mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) perf_event_open(&(0x7f0000000040)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r0, 0x3) socket$inet_mptcp(0x2, 0x1, 0x106) socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x40000000015, 0x5, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r1, 0x25, &(0x7f0000000000)={0x1}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r2, 0x26, &(0x7f0000000000)) fcntl$lock(r2, 0x7, &(0x7f00000006c0)) fcntl$lock(r1, 0x25, &(0x7f0000000180)) syz_io_uring_setup(0x4076, &(0x7f0000000240)={0x0, 0x0, 0x10100}, &(0x7f0000000380)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000180)=@IORING_OP_SYMLINKAT={0x26, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) syz_io_uring_complete(r3) socket$inet(0x2b, 0x801, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1}, 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) 290.917966ms ago: executing program 1 (id=1783): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000004c0)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0, 0x0, 0x800000000000000}, 0x18) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(0x0, r1) sendmsg$NL802154_CMD_NEW_SEC_KEY(r1, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000a00)=ANY=[@ANYBLOB="2c010000", @ANYRES16=r2, @ANYBLOB="01000000000000000000170000000c00060001000000010000000c01308014000400976f1044852bca665354bd217b6b9037200001800c0005000400000000000000080001000300000005000200000000000500020008000000240003"], 0x12c}, 0x1, 0x0, 0x0, 0x20000020}, 0x0) 290.425556ms ago: executing program 1 (id=1784): bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6(0xa, 0x3, 0xff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xa51ee000) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x0) perf_event_open(0x0, 0x0, 0x4, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) r3 = memfd_create(&(0x7f0000000880)='C(\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc9\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\xa4(V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93i|\xc0\x00\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\x8f\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\xb5\x13^\x13\xaf\xeeC\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x99\x0e$U\xb4X\xc7\xfa\f\b\x8f\xc4\xbeIt\xe4\xc51\xba\xb9H\xe8\x96\x94\xd7\xdc\x81\x111\t\xafl\x97\xd8T\xd40\x90ON\xaaFY\xb4\xb3\xf4\xf8JT\xc5:\xc5\aGc\xb5\x12\x90\x7f\x00\x91\xce@\xe5\xd3A\xcc\xd5|\x9f\x8e5\x042\x9a\xc1\xa1\a\xb7\xf5\xbc\xc2U\x89\xa4*2\xd0\xac\x920\x00=\xf2', 0x0) pwritev(r3, &(0x7f0000000600)=[{&(0x7f0000000180)="10", 0x1}], 0x1, 0x800000, 0x0) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x8, @mcast1, 0xc}, 0x1c) sendfile(r2, r2, 0x0, 0x24002de8) unshare(0x20040600) r4 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$SCSI_IOCTL_GET_PCI(r5, 0x5, 0x0) ioctl$LOOP_SET_STATUS(r2, 0x4c02, &(0x7f0000000300)={0x0, {}, 0x0, {}, 0x9, 0x12, 0xb, 0x1d, "522530d6e597ca54b72437f1295d5713b017ddc8f03f7f9431388f9a2df4e1857ad78ca88090d709b29ee70700000000000000aaa5f78a000000000080030900", "012a519a6f0231000000002b637a4b34368b41cd260b66da3010a9da97c74ba2", [0x1, 0x100000000b]}) set_robust_list(0x0, 0x0) rmdir(&(0x7f0000000080)='./file0\x00') ioctl$LOOP_SET_BLOCK_SIZE(r2, 0x4c09, 0x800008001ffc0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x1, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) 0s ago: executing program 2 (id=1786): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = syz_open_dev$evdev(&(0x7f0000000100), 0x2, 0x109500) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f0000000180)=0x1) r3 = getpid() syz_pidfd_open(r3, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) r5 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r5, r4, 0x0, 0x3a) kernel console output (not intermixed with test programs): tered promiscuous mode [ 102.257068][ T8443] bond_slave_0: entered promiscuous mode [ 102.262885][ T8443] bond_slave_1: entered promiscuous mode [ 102.293757][ T8459] syz.4.1193[8459] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 102.293819][ T8459] syz.4.1193[8459] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 102.304356][ T8329] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.326425][ T8459] syz.4.1193[8459] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 102.337415][ T8329] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.360470][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.367675][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.384255][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.391363][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.559289][ T8486] syz.4.1193: attempt to access beyond end of device [ 102.559289][ T8486] loop128: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 102.599819][ T8486] hub 6-0:1.0: USB hub found [ 102.604514][ T8486] hub 6-0:1.0: 8 ports detected [ 102.837012][ T8329] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 102.916198][ T8503] 9pnet: Could not find request transport: rdm [ 102.963745][ T8514] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1208'. [ 102.971631][ T8329] veth0_vlan: entered promiscuous mode [ 102.986814][ T8329] veth1_vlan: entered promiscuous mode [ 103.006350][ T8522] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1211'. [ 103.021279][ T8329] veth0_macvtap: entered promiscuous mode [ 103.029703][ T8329] veth1_macvtap: entered promiscuous mode [ 103.040858][ T8329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 103.051441][ T8329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.061449][ T8329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 103.071888][ T8329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.081835][ T8329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 103.085037][ T8532] loop3: detected capacity change from 0 to 1860 [ 103.092292][ T8329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.092308][ T8329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 103.092322][ T8329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.096091][ T8329] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 103.154394][ T8535] loop3: detected capacity change from 0 to 512 [ 103.162148][ T8329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 103.172621][ T8329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.182455][ T8329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 103.193113][ T8329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.203042][ T8329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 103.213643][ T8329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.223468][ T8329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 103.233898][ T8329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.245369][ T8329] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 103.253439][ T8539] 9pnet: Could not find request transport: rdm [ 103.258609][ T8329] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.268304][ T8329] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.277111][ T8329] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.285880][ T8329] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.297065][ T8535] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.338307][ T8535] ext4 filesystem being mounted at /44/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 103.351202][ T8556] netlink: 'syz.4.1220': attribute type 4 has an invalid length. [ 103.364121][ T8535] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.370192][ T8555] loop2: detected capacity change from 0 to 256 [ 103.414584][ T8551] dvmrp8: entered allmulticast mode [ 103.421716][ T8551] dvmrp8: left allmulticast mode [ 103.431348][ T8555] FAT-fs (loop2): Directory bread(block 64) failed [ 103.439729][ T8555] FAT-fs (loop2): Directory bread(block 65) failed [ 103.446685][ T8555] FAT-fs (loop2): Directory bread(block 66) failed [ 103.454556][ T8555] FAT-fs (loop2): Directory bread(block 67) failed [ 103.476662][ T8555] FAT-fs (loop2): Directory bread(block 68) failed [ 103.483250][ T8555] FAT-fs (loop2): Directory bread(block 69) failed [ 103.490059][ T8555] FAT-fs (loop2): Directory bread(block 70) failed [ 103.494234][ T8569] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=297 sclass=netlink_route_socket pid=8569 comm=syz.4.1224 [ 103.496763][ T8555] FAT-fs (loop2): Directory bread(block 71) failed [ 103.530661][ T8555] FAT-fs (loop2): Directory bread(block 72) failed [ 103.535957][ T8576] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 103.546009][ T8555] FAT-fs (loop2): Directory bread(block 73) failed [ 103.697223][ T8555] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1217'. [ 103.711651][ T8599] loop4: detected capacity change from 0 to 512 [ 103.739492][ T8599] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.752443][ T8599] ext4 filesystem being mounted at /56/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 103.772143][ T7434] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.811766][ T50] kworker/u8:3: attempt to access beyond end of device [ 103.811766][ T50] loop2: rw=1, sector=1224, nr_sectors = 608 limit=256 [ 103.834304][ T50] kworker/u8:3: attempt to access beyond end of device [ 103.834304][ T50] loop2: rw=1, sector=1864, nr_sectors = 10296 limit=256 [ 103.858840][ T50] kworker/u8:3: attempt to access beyond end of device [ 103.858840][ T50] loop2: rw=1, sector=12160, nr_sectors = 7672 limit=256 [ 103.880689][ T50] kworker/u8:3: attempt to access beyond end of device [ 103.880689][ T50] loop2: rw=1, sector=19832, nr_sectors = 6176 limit=256 [ 103.901048][ T50] kworker/u8:3: attempt to access beyond end of device [ 103.901048][ T50] loop2: rw=1, sector=26008, nr_sectors = 3792 limit=256 [ 103.917603][ T50] kworker/u8:3: attempt to access beyond end of device [ 103.917603][ T50] loop2: rw=1, sector=29800, nr_sectors = 2280 limit=256 [ 103.933700][ T50] kworker/u8:3: attempt to access beyond end of device [ 103.933700][ T50] loop2: rw=1, sector=32080, nr_sectors = 1720 limit=256 [ 103.996608][ T8613] xt_CT: No such helper "pptp" [ 104.348654][ T8623] FAULT_INJECTION: forcing a failure. [ 104.348654][ T8623] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 104.361744][ T8623] CPU: 1 UID: 0 PID: 8623 Comm: syz.3.1238 Not tainted 6.12.0-rc3-syzkaller-00044-g2f87d0916ce0 #0 [ 104.372481][ T8623] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 104.382535][ T8623] Call Trace: [ 104.385856][ T8623] [ 104.388786][ T8623] dump_stack_lvl+0xf2/0x150 [ 104.393388][ T8623] dump_stack+0x15/0x20 [ 104.397549][ T8623] should_fail_ex+0x223/0x230 [ 104.402319][ T8623] should_fail+0xb/0x10 [ 104.406589][ T8623] should_fail_usercopy+0x1a/0x20 [ 104.411705][ T8623] _copy_from_user+0x1e/0xd0 [ 104.416316][ T8623] memdup_user+0x64/0xc0 [ 104.420570][ T8623] security_setselfattr+0x8f/0x260 [ 104.425713][ T8623] __x64_sys_lsm_set_self_attr+0x51/0x60 [ 104.431349][ T8623] x64_sys_call+0x1229/0x2d60 [ 104.436032][ T8623] do_syscall_64+0xc9/0x1c0 [ 104.440540][ T8623] ? clear_bhb_loop+0x55/0xb0 [ 104.445317][ T8623] ? clear_bhb_loop+0x55/0xb0 [ 104.450039][ T8623] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.456001][ T8623] RIP: 0033:0x7fc5cf47dff9 [ 104.460415][ T8623] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 104.480024][ T8623] RSP: 002b:00007fc5ce0f1038 EFLAGS: 00000246 ORIG_RAX: 00000000000001cc [ 104.488607][ T8623] RAX: ffffffffffffffda RBX: 00007fc5cf635f80 RCX: 00007fc5cf47dff9 [ 104.496590][ T8623] RDX: 0000000000000020 RSI: 0000000000000000 RDI: 0000000000000068 [ 104.504560][ T8623] RBP: 00007fc5ce0f1090 R08: 0000000000000000 R09: 0000000000000000 [ 104.512589][ T8623] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 104.520562][ T8623] R13: 0000000000000000 R14: 00007fc5cf635f80 R15: 00007fffa2d665c8 [ 104.528615][ T8623] [ 104.600492][ T8634] loop3: detected capacity change from 0 to 128 [ 104.678879][ T8640] FAULT_INJECTION: forcing a failure. [ 104.678879][ T8640] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 104.692451][ T8640] CPU: 0 UID: 0 PID: 8640 Comm: syz.0.1245 Not tainted 6.12.0-rc3-syzkaller-00044-g2f87d0916ce0 #0 [ 104.703180][ T8640] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 104.713240][ T8640] Call Trace: [ 104.716583][ T8640] [ 104.719576][ T8640] dump_stack_lvl+0xf2/0x150 [ 104.724165][ T8640] dump_stack+0x15/0x20 [ 104.728354][ T8640] should_fail_ex+0x223/0x230 [ 104.733069][ T8640] should_fail+0xb/0x10 [ 104.737294][ T8640] should_fail_usercopy+0x1a/0x20 [ 104.742319][ T8640] _copy_to_user+0x1e/0xa0 [ 104.746858][ T8640] simple_read_from_buffer+0xa0/0x110 [ 104.752280][ T8640] proc_fail_nth_read+0xf9/0x140 [ 104.757267][ T8640] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 104.762862][ T8640] vfs_read+0x195/0x720 [ 104.767162][ T8640] ? __rcu_read_unlock+0x4e/0x70 [ 104.772100][ T8640] ? __fget_files+0x1d4/0x210 [ 104.776924][ T8640] ksys_read+0xeb/0x1b0 [ 104.781078][ T8640] __x64_sys_read+0x42/0x50 [ 104.785627][ T8640] x64_sys_call+0x27d3/0x2d60 [ 104.790300][ T8640] do_syscall_64+0xc9/0x1c0 [ 104.794792][ T8640] ? clear_bhb_loop+0x55/0xb0 [ 104.799498][ T8640] ? clear_bhb_loop+0x55/0xb0 [ 104.804176][ T8640] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.810153][ T8640] RIP: 0033:0x7f333d09ca3c [ 104.814559][ T8640] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 104.834159][ T8640] RSP: 002b:00007f333bd11030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 104.842565][ T8640] RAX: ffffffffffffffda RBX: 00007f333d255f80 RCX: 00007f333d09ca3c [ 104.850536][ T8640] RDX: 000000000000000f RSI: 00007f333bd110a0 RDI: 0000000000000008 [ 104.858557][ T8640] RBP: 00007f333bd11090 R08: 0000000000000000 R09: 0000000000000000 [ 104.866702][ T8640] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 104.874663][ T8640] R13: 0000000000000000 R14: 00007f333d255f80 R15: 00007ffcfd621048 [ 104.882630][ T8640] [ 104.966921][ T8666] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1256'. [ 104.998299][ T8673] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1257'. [ 105.100501][ T8684] FAULT_INJECTION: forcing a failure. [ 105.100501][ T8684] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 105.113609][ T8684] CPU: 1 UID: 0 PID: 8684 Comm: syz.2.1260 Not tainted 6.12.0-rc3-syzkaller-00044-g2f87d0916ce0 #0 [ 105.124292][ T8684] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 105.134433][ T8684] Call Trace: [ 105.137743][ T8684] [ 105.140713][ T8684] dump_stack_lvl+0xf2/0x150 [ 105.145286][ T8684] dump_stack+0x15/0x20 [ 105.149429][ T8684] should_fail_ex+0x223/0x230 [ 105.154106][ T8684] should_fail+0xb/0x10 [ 105.158272][ T8684] should_fail_usercopy+0x1a/0x20 [ 105.163454][ T8684] _copy_to_user+0x1e/0xa0 [ 105.167939][ T8684] simple_read_from_buffer+0xa0/0x110 [ 105.173404][ T8684] proc_fail_nth_read+0xf9/0x140 [ 105.178343][ T8684] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 105.183933][ T8684] vfs_read+0x195/0x720 [ 105.188095][ T8684] ? __rcu_read_unlock+0x4e/0x70 [ 105.193090][ T8684] ? __fget_files+0x1d4/0x210 [ 105.197777][ T8684] ksys_read+0xeb/0x1b0 [ 105.201943][ T8684] __x64_sys_read+0x42/0x50 [ 105.206486][ T8684] x64_sys_call+0x27d3/0x2d60 [ 105.211164][ T8684] do_syscall_64+0xc9/0x1c0 [ 105.215666][ T8684] ? clear_bhb_loop+0x55/0xb0 [ 105.220344][ T8684] ? clear_bhb_loop+0x55/0xb0 [ 105.225071][ T8684] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.231065][ T8684] RIP: 0033:0x7f065995ca3c [ 105.235473][ T8684] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 105.255072][ T8684] RSP: 002b:00007f06585d7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 105.263477][ T8684] RAX: ffffffffffffffda RBX: 00007f0659b15f80 RCX: 00007f065995ca3c [ 105.271441][ T8684] RDX: 000000000000000f RSI: 00007f06585d70a0 RDI: 0000000000000005 [ 105.279405][ T8684] RBP: 00007f06585d7090 R08: 0000000000000000 R09: 0000000000000000 [ 105.287365][ T8684] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 105.295849][ T8684] R13: 0000000000000000 R14: 00007f0659b15f80 R15: 00007ffd076b2118 [ 105.303813][ T8684] [ 105.392337][ T8689] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1261'. [ 105.466039][ T8693] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 105.474589][ T8693] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 105.673436][ T8705] FAULT_INJECTION: forcing a failure. [ 105.673436][ T8705] name failslab, interval 1, probability 0, space 0, times 0 [ 105.686196][ T8705] CPU: 0 UID: 0 PID: 8705 Comm: syz.1.1264 Not tainted 6.12.0-rc3-syzkaller-00044-g2f87d0916ce0 #0 [ 105.697058][ T8705] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 105.707107][ T8705] Call Trace: [ 105.710380][ T8705] [ 105.713339][ T8705] dump_stack_lvl+0xf2/0x150 [ 105.717938][ T8705] dump_stack+0x15/0x20 [ 105.722155][ T8705] should_fail_ex+0x223/0x230 [ 105.726838][ T8705] ? usb_alloc_urb+0x36/0xb0 [ 105.731429][ T8705] should_failslab+0x8f/0xb0 [ 105.736035][ T8705] __kmalloc_noprof+0xa5/0x370 [ 105.740890][ T8705] usb_alloc_urb+0x36/0xb0 [ 105.745314][ T8705] usb_control_msg+0xd2/0x240 [ 105.750018][ T8705] usb_clear_halt+0x60/0xf0 [ 105.754523][ T8705] usbdev_ioctl+0x37e9/0x3e00 [ 105.759228][ T8705] ? ioctl_has_perm+0x286/0x2e0 [ 105.764148][ T8705] ? do_vfs_ioctl+0x96e/0x1530 [ 105.768985][ T8705] ? selinux_file_ioctl+0x2f7/0x380 [ 105.774241][ T8705] ? __fget_files+0x1d4/0x210 [ 105.778981][ T8705] ? __pfx_usbdev_ioctl+0x10/0x10 [ 105.784029][ T8705] __se_sys_ioctl+0xcd/0x140 [ 105.788633][ T8705] __x64_sys_ioctl+0x43/0x50 [ 105.793311][ T8705] x64_sys_call+0x15cc/0x2d60 [ 105.797991][ T8705] do_syscall_64+0xc9/0x1c0 [ 105.802523][ T8705] ? clear_bhb_loop+0x55/0xb0 [ 105.807292][ T8705] ? clear_bhb_loop+0x55/0xb0 [ 105.811972][ T8705] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.818061][ T8705] RIP: 0033:0x7f37b0cadff9 [ 105.822468][ T8705] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 105.842203][ T8705] RSP: 002b:00007f37af8e5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 105.850617][ T8705] RAX: ffffffffffffffda RBX: 00007f37b0e66130 RCX: 00007f37b0cadff9 [ 105.858592][ T8705] RDX: 0000000020000340 RSI: 0000000080045515 RDI: 0000000000000005 [ 105.866642][ T8705] RBP: 00007f37af8e5090 R08: 0000000000000000 R09: 0000000000000000 [ 105.874606][ T8705] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 105.882640][ T8705] R13: 0000000000000000 R14: 00007f37b0e66130 R15: 00007ffc98340ce8 [ 105.890621][ T8705] [ 106.179920][ T8718] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1272'. [ 106.319946][ T29] kauditd_printk_skb: 248 callbacks suppressed [ 106.319961][ T29] audit: type=1400 audit(2000000019.900:3471): avc: denied { read } for pid=8706 comm="syz.0.1269" name="event0" dev="devtmpfs" ino=218 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 106.333904][ T8726] loop4: detected capacity change from 0 to 8192 [ 106.349342][ T29] audit: type=1400 audit(2000000019.900:3472): avc: denied { open } for pid=8706 comm="syz.0.1269" path="/dev/input/event0" dev="devtmpfs" ino=218 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 106.379844][ T29] audit: type=1400 audit(2000000019.940:3473): avc: denied { create } for pid=8706 comm="syz.0.1269" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 106.399470][ T29] audit: type=1400 audit(2000000019.940:3474): avc: denied { connect } for pid=8706 comm="syz.0.1269" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 106.435376][ T8726] loop4: p1 p2[DM] p4 [ 106.439682][ T8726] loop4: p1 size 196608 extends beyond EOD, truncated [ 106.502998][ T8726] loop4: p2 start 4292936063 is beyond EOD, truncated [ 106.509894][ T8726] loop4: p4 size 50331648 extends beyond EOD, truncated [ 106.546126][ T29] audit: type=1326 audit(2000000020.130:3475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8735 comm="syz.0.1280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f333d09dff9 code=0x7ffc0000 [ 106.574411][ T29] audit: type=1326 audit(2000000020.160:3476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8735 comm="syz.0.1280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f333d09dff9 code=0x7ffc0000 [ 106.597896][ T29] audit: type=1326 audit(2000000020.160:3477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8735 comm="syz.0.1280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f333d09dff9 code=0x7ffc0000 [ 106.621327][ T29] audit: type=1326 audit(2000000020.160:3478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8735 comm="syz.0.1280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f333d09dff9 code=0x7ffc0000 [ 106.644856][ T29] audit: type=1326 audit(2000000020.160:3479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8735 comm="syz.0.1280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f333d09dff9 code=0x7ffc0000 [ 106.650660][ T8739] audit: audit_backlog=65 > audit_backlog_limit=64 [ 106.679742][ T8739] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 106.863144][ T8752] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1284'. [ 107.063702][ T8760] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1288'. [ 107.090940][ T8764] loop3: detected capacity change from 0 to 512 [ 107.098969][ T8764] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1290: bg 0: block 393: padding at end of block bitmap is not set [ 107.113517][ T8764] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 107.122827][ T8764] EXT4-fs (loop3): 2 truncates cleaned up [ 107.129060][ T8764] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.148971][ T8768] loop2: detected capacity change from 0 to 1024 [ 107.171164][ T7840] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.184746][ T8771] netlink: 168 bytes leftover after parsing attributes in process `syz.4.1292'. [ 107.195634][ T8768] EXT4-fs error (device loop2): ext4_ext_check_inode:524: inode #2: comm syz.2.1291: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 107.215462][ T8768] EXT4-fs (loop2): get root inode failed [ 107.221112][ T8768] EXT4-fs (loop2): mount failed [ 107.299683][ T8776] loop7: detected capacity change from 0 to 16384 [ 107.327187][ T8793] loop2: detected capacity change from 0 to 512 [ 107.360735][ T8789] program syz.0.1295 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 107.370157][ T8789] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 107.380300][ T8793] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1298: bg 0: block 393: padding at end of block bitmap is not set [ 107.418013][ T8793] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 107.427668][ T8803] syz.3.1300[8803] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 107.427724][ T8803] syz.3.1300[8803] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 107.453434][ T8806] netlink: 'syz.4.1299': attribute type 4 has an invalid length. [ 107.455524][ T8789] loop7: detected capacity change from 16384 to 16383 [ 107.465682][ T8803] syz.3.1300[8803] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 107.482016][ T8793] EXT4-fs (loop2): 2 truncates cleaned up [ 107.499911][ T8793] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.515236][ T8804] Invalid logical block size (65472) [ 107.542559][ T8797] dvmrp8: entered allmulticast mode [ 107.554942][ T8797] dvmrp8: left allmulticast mode [ 107.578217][ T8813] FAULT_INJECTION: forcing a failure. [ 107.578217][ T8813] name failslab, interval 1, probability 0, space 0, times 0 [ 107.590865][ T8813] CPU: 0 UID: 0 PID: 8813 Comm: syz.1.1304 Not tainted 6.12.0-rc3-syzkaller-00044-g2f87d0916ce0 #0 [ 107.601603][ T8813] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 107.611679][ T8813] Call Trace: [ 107.614959][ T8813] [ 107.617883][ T8813] dump_stack_lvl+0xf2/0x150 [ 107.622483][ T8813] dump_stack+0x15/0x20 [ 107.626683][ T8813] should_fail_ex+0x223/0x230 [ 107.631424][ T8813] ? cond_bools_copy+0x30/0x80 [ 107.636239][ T8813] should_failslab+0x8f/0xb0 [ 107.640814][ T8813] __kmalloc_node_track_caller_noprof+0xa6/0x380 [ 107.647129][ T8813] kmemdup_noprof+0x2a/0x60 [ 107.651616][ T8813] cond_bools_copy+0x30/0x80 [ 107.656262][ T8813] hashtab_duplicate+0x12c/0x370 [ 107.661295][ T8813] ? __pfx_cond_bools_copy+0x10/0x10 [ 107.666575][ T8813] ? __pfx_cond_bools_destroy+0x10/0x10 [ 107.672116][ T8813] cond_policydb_dup+0xdb/0x710 [ 107.676968][ T8813] ? __kmalloc_node_track_caller_noprof+0x17e/0x380 [ 107.683610][ T8813] security_set_bools+0xa8/0x350 [ 107.688571][ T8813] ? sel_commit_bools_write+0x164/0x260 [ 107.694203][ T8813] sel_commit_bools_write+0x1de/0x260 [ 107.699560][ T8813] vfs_writev+0x3fb/0x880 [ 107.703895][ T8813] ? __pfx_sel_commit_bools_write+0x10/0x10 [ 107.709782][ T8813] ? mutex_lock+0xd/0x40 [ 107.714096][ T8813] do_writev+0xf8/0x220 [ 107.718237][ T8813] __x64_sys_writev+0x45/0x50 [ 107.722908][ T8813] x64_sys_call+0x1f18/0x2d60 [ 107.727751][ T8813] do_syscall_64+0xc9/0x1c0 [ 107.732239][ T8813] ? clear_bhb_loop+0x55/0xb0 [ 107.736945][ T8813] ? clear_bhb_loop+0x55/0xb0 [ 107.741612][ T8813] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.747572][ T8813] RIP: 0033:0x7f37b0cadff9 [ 107.752169][ T8813] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 107.771837][ T8813] RSP: 002b:00007f37af927038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 107.780235][ T8813] RAX: ffffffffffffffda RBX: 00007f37b0e65f80 RCX: 00007f37b0cadff9 [ 107.788250][ T8813] RDX: 0000000000000002 RSI: 00000000200025c0 RDI: 0000000000000005 [ 107.796202][ T8813] RBP: 00007f37af927090 R08: 0000000000000000 R09: 0000000000000000 [ 107.804235][ T8813] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 107.812192][ T8813] R13: 0000000000000000 R14: 00007f37b0e65f80 R15: 00007ffc98340ce8 [ 107.820250][ T8813] [ 107.846771][ T7580] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.930275][ T8820] syz.3.1300: attempt to access beyond end of device [ 107.930275][ T8820] loop128: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 107.953479][ T8821] netlink: 'syz.1.1306': attribute type 4 has an invalid length. [ 108.055659][ T8817] dvmrp8: entered allmulticast mode [ 108.071429][ T8817] dvmrp8: left allmulticast mode [ 108.277133][ T8831] loop1: detected capacity change from 0 to 512 [ 108.344120][ T8831] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2 [ 108.376274][ T8831] EXT4-fs warning (device loop1): ext4_block_to_path:107: block 3279945729 > max in inode 13 [ 108.401910][ T8831] EXT4-fs warning (device loop1): ext4_block_to_path:107: block 3279945730 > max in inode 13 [ 108.410415][ T8849] loop4: detected capacity change from 0 to 1024 [ 108.412286][ T8831] EXT4-fs (loop1): 1 truncate cleaned up [ 108.424451][ T8831] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.440355][ T8831] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1309'. [ 108.446480][ T8857] loop3: detected capacity change from 0 to 512 [ 108.487096][ T8857] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1318: bg 0: block 393: padding at end of block bitmap is not set [ 108.506997][ T8849] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 108.515361][ T8857] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 108.538205][ T7027] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.547424][ T8857] EXT4-fs (loop3): 2 truncates cleaned up [ 108.553640][ T8857] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.580981][ T8854] loop7: detected capacity change from 0 to 16384 [ 108.609366][ T7840] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.638573][ T8862] program syz.2.1317 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 108.647993][ T8862] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 108.697362][ T8871] syz.0.1323: attempt to access beyond end of device [ 108.697362][ T8871] loop128: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 108.715999][ T8862] loop7: detected capacity change from 16384 to 16383 [ 108.737226][ T8873] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1324'. [ 108.765165][ T8874] Invalid logical block size (65472) [ 108.878666][ T8878] program syz.1.1326 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 108.906362][ T8878] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 109.005002][ T8888] dvmrp8: entered allmulticast mode [ 109.012409][ T8861] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.064625][ T8894] loop2: detected capacity change from 0 to 512 [ 109.072282][ T8888] dvmrp8: left allmulticast mode [ 109.142028][ T162] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.213562][ T8903] loop2: detected capacity change from 0 to 512 [ 109.239589][ T162] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.343861][ T8913] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks [ 109.387890][ T162] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.429822][ T162] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.478976][ T8907] chnl_net:caif_netlink_parms(): no params data found [ 109.517037][ T8907] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.524115][ T8907] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.531538][ T8922] syz.3.1338[8922] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 109.531675][ T8922] syz.3.1338[8922] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 109.546103][ T8907] bridge_slave_0: entered allmulticast mode [ 109.563491][ T8922] syz.3.1338[8922] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 109.579550][ T8907] bridge_slave_0: entered promiscuous mode [ 109.623169][ T8907] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.630369][ T8907] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.641809][ T8929] loop7: detected capacity change from 0 to 16384 [ 109.658165][ T8907] bridge_slave_1: entered allmulticast mode [ 109.669339][ T8907] bridge_slave_1: entered promiscuous mode [ 109.678149][ T8940] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 109.687280][ T162] veth0_to_bond: left allmulticast mode [ 109.692850][ T162] veth0_to_bond: left promiscuous mode [ 109.698646][ T162] bridge0: port 3(veth0_to_bond) entered disabled state [ 109.706461][ T8936] program syz.0.1339 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 109.715940][ T8936] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 109.730136][ T162] bridge_slave_1: left allmulticast mode [ 109.735839][ T162] bridge_slave_1: left promiscuous mode [ 109.741474][ T162] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.751903][ T162] bridge_slave_0: left allmulticast mode [ 109.757715][ T162] bridge_slave_0: left promiscuous mode [ 109.763474][ T162] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.772201][ T162] bond0: left allmulticast mode [ 109.777172][ T162] bond_slave_0: left allmulticast mode [ 109.782649][ T162] bond_slave_1: left allmulticast mode [ 109.788164][ T162] bond0: left promiscuous mode [ 109.792920][ T162] bond_slave_0: left promiscuous mode [ 109.798439][ T162] bond_slave_1: left promiscuous mode [ 109.803924][ T162] GPL: port 1(bond0) entered disabled state [ 109.809929][ T8936] loop7: detected capacity change from 16384 to 16383 [ 109.818251][ T8933] program syz.1.1342 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 109.827699][ T8933] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 109.847747][ T8946] loop3: detected capacity change from 0 to 256 [ 109.894289][ T8946] FAT-fs (loop3): Directory bread(block 64) failed [ 109.900880][ T8946] FAT-fs (loop3): Directory bread(block 65) failed [ 109.907445][ T8944] Invalid logical block size (65472) [ 109.912764][ T8946] FAT-fs (loop3): Directory bread(block 66) failed [ 109.921665][ T8946] FAT-fs (loop3): Directory bread(block 67) failed [ 109.928654][ T8946] FAT-fs (loop3): Directory bread(block 68) failed [ 109.937428][ T8946] FAT-fs (loop3): Directory bread(block 69) failed [ 109.943966][ T8946] FAT-fs (loop3): Directory bread(block 70) failed [ 109.950501][ T8946] FAT-fs (loop3): Directory bread(block 71) failed [ 109.958919][ T8946] FAT-fs (loop3): Directory bread(block 72) failed [ 109.965535][ T8946] FAT-fs (loop3): Directory bread(block 73) failed [ 110.001896][ T8957] syz.1.1349[8957] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 110.002027][ T8957] syz.1.1349[8957] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 110.021766][ T8957] syz.1.1349[8957] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 110.024189][ T162] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 110.166232][ T162] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 110.176953][ T162] bond0 (unregistering): Released all slaves [ 110.421947][ T8907] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 110.450557][ T162] hsr_slave_0: left promiscuous mode [ 110.458103][ T162] hsr_slave_1: left promiscuous mode [ 110.480326][ T162] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 110.487867][ T162] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 110.533289][ T162] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 110.540732][ T162] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 110.553662][ T162] veth1_macvtap: left promiscuous mode [ 110.559175][ T162] veth0_macvtap: left promiscuous mode [ 110.564677][ T162] veth1_vlan: left promiscuous mode [ 110.570029][ T162] veth0_vlan: left promiscuous mode [ 110.704643][ T162] team0 (unregistering): Port device team_slave_1 removed [ 110.714807][ T162] team0 (unregistering): Port device team_slave_0 removed [ 110.748626][ T8946] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1346'. [ 110.757720][ T8946] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 110.758870][ T8907] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 110.788704][ T3382] kworker/u8:7: attempt to access beyond end of device [ 110.788704][ T3382] loop3: rw=1, sector=1224, nr_sectors = 608 limit=256 [ 110.806204][ T8907] team0: Port device team_slave_0 added [ 110.812095][ T3382] kworker/u8:7: attempt to access beyond end of device [ 110.812095][ T3382] loop3: rw=1, sector=1864, nr_sectors = 9688 limit=256 [ 110.812928][ T8907] team0: Port device team_slave_1 added [ 110.846762][ T8907] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 110.847915][ T3382] kworker/u8:7: attempt to access beyond end of device [ 110.847915][ T3382] loop3: rw=1, sector=11552, nr_sectors = 14760 limit=256 [ 110.853715][ T8907] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 110.893419][ T8907] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 110.897942][ T3382] kworker/u8:7: attempt to access beyond end of device [ 110.897942][ T3382] loop3: rw=1, sector=26312, nr_sectors = 3184 limit=256 [ 110.904619][ T8907] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 110.924622][ T8907] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 110.950636][ T8907] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 110.965754][ T3382] kworker/u8:7: attempt to access beyond end of device [ 110.965754][ T3382] loop3: rw=1, sector=29496, nr_sectors = 1848 limit=256 [ 111.016283][ T8907] hsr_slave_0: entered promiscuous mode [ 111.045264][ T8907] hsr_slave_1: entered promiscuous mode [ 111.048250][ T8984] program syz.0.1356 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 111.072892][ T8984] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 111.077487][ T8907] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 111.105310][ T8907] Cannot create hsr debugfs directory [ 111.194794][ T8978] loop7: detected capacity change from 0 to 16384 [ 111.211657][ T9004] syz.0.1363[9004] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 111.257428][ T8998] program syz.1.1353 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 111.278267][ T8998] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 111.332122][ T29] kauditd_printk_skb: 584 callbacks suppressed [ 111.332136][ T29] audit: type=1326 audit(2000000024.900:4062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9006 comm="syz.2.1364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f065995dff9 code=0x7ffc0000 [ 111.361805][ T29] audit: type=1326 audit(2000000024.900:4063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9006 comm="syz.2.1364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f065995dff9 code=0x7ffc0000 [ 111.398618][ T8998] loop7: detected capacity change from 16384 to 16383 [ 111.760038][ T29] audit: type=1326 audit(2000000024.920:4064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9006 comm="syz.2.1364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f065995dff9 code=0x7ffc0000 [ 111.783850][ T29] audit: type=1326 audit(2000000024.920:4065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9006 comm="syz.2.1364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f065995dff9 code=0x7ffc0000 [ 111.807279][ T29] audit: type=1326 audit(2000000024.920:4066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9006 comm="syz.2.1364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f065995dff9 code=0x7ffc0000 [ 111.830811][ T29] audit: type=1326 audit(2000000024.920:4067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9006 comm="syz.2.1364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f065995dff9 code=0x7ffc0000 [ 111.854257][ T29] audit: type=1326 audit(2000000024.920:4068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9006 comm="syz.2.1364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f065995dff9 code=0x7ffc0000 [ 111.877608][ T29] audit: type=1326 audit(2000000024.920:4069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9006 comm="syz.2.1364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f065995dff9 code=0x7ffc0000 [ 111.900981][ T29] audit: type=1326 audit(2000000024.920:4070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9006 comm="syz.2.1364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f065995dff9 code=0x7ffc0000 [ 111.924429][ T29] audit: type=1326 audit(2000000024.920:4071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9006 comm="syz.2.1364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f065995dff9 code=0x7ffc0000 [ 111.965175][ T9009] Invalid logical block size (65472) [ 112.069762][ T8907] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 112.079053][ T8907] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 112.106553][ T8907] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 112.114334][ T9022] program syz.2.1368 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 112.158165][ T9022] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 112.169897][ T8907] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 112.179257][ T9024] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1369'. [ 112.223385][ T9032] loop1: detected capacity change from 0 to 2048 [ 112.240771][ T9032] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 112.252197][ T8907] 8021q: adding VLAN 0 to HW filter on device bond0 [ 112.290282][ T8907] 8021q: adding VLAN 0 to HW filter on device team0 [ 112.300983][ T162] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.308044][ T162] bridge0: port 1(bridge_slave_0) entered forwarding state [ 112.328038][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.335168][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 112.383654][ T8907] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 112.394066][ T8907] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 112.432427][ T9049] netlink: 'syz.0.1378': attribute type 4 has an invalid length. [ 112.475425][ T9045] dvmrp8: entered allmulticast mode [ 112.491609][ T9045] dvmrp8: left allmulticast mode [ 112.515313][ T9060] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1381'. [ 112.528880][ T8907] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 112.609263][ T9071] SELinux: Context system_u:object_r:anacron_exec_t:s0 is not valid (left unmapped). [ 112.698560][ T9078] FAULT_INJECTION: forcing a failure. [ 112.698560][ T9078] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 112.711728][ T9078] CPU: 0 UID: 0 PID: 9078 Comm: syz.3.1385 Not tainted 6.12.0-rc3-syzkaller-00044-g2f87d0916ce0 #0 [ 112.722403][ T9078] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 112.732528][ T9078] Call Trace: [ 112.735854][ T9078] [ 112.738797][ T9078] dump_stack_lvl+0xf2/0x150 [ 112.743408][ T9078] dump_stack+0x15/0x20 [ 112.747566][ T9078] should_fail_ex+0x223/0x230 [ 112.752273][ T9078] should_fail+0xb/0x10 [ 112.756494][ T9078] should_fail_usercopy+0x1a/0x20 [ 112.761878][ T9078] _copy_to_user+0x1e/0xa0 [ 112.766327][ T9078] pagemap_read+0x3af/0x610 [ 112.770211][ T8907] veth0_vlan: entered promiscuous mode [ 112.770831][ T9078] ? __pfx_pagemap_read+0x10/0x10 [ 112.778943][ T8907] veth1_vlan: entered promiscuous mode [ 112.781296][ T9078] vfs_read+0x195/0x720 [ 112.790902][ T9078] ? __fget_files+0x1d4/0x210 [ 112.795709][ T9078] ? __rcu_read_unlock+0x4e/0x70 [ 112.797533][ T8907] veth0_macvtap: entered promiscuous mode [ 112.800646][ T9078] ? __fget_files+0x1d4/0x210 [ 112.808931][ T8907] veth1_macvtap: entered promiscuous mode [ 112.811004][ T9078] __x64_sys_pread64+0xf7/0x150 [ 112.820932][ T8907] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 112.821528][ T9078] x64_sys_call+0x264d/0x2d60 [ 112.831958][ T8907] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.836561][ T9078] do_syscall_64+0xc9/0x1c0 [ 112.846396][ T8907] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 112.850841][ T9078] ? clear_bhb_loop+0x55/0xb0 [ 112.861233][ T8907] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.865863][ T9078] ? clear_bhb_loop+0x55/0xb0 [ 112.875735][ T8907] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 112.880357][ T9078] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.890749][ T8907] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.896603][ T9078] RIP: 0033:0x7fc5cf47dff9 [ 112.896620][ T9078] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 112.896659][ T9078] RSP: 002b:00007fc5ce0f1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 112.896676][ T9078] RAX: ffffffffffffffda RBX: 00007fc5cf635f80 RCX: 00007fc5cf47dff9 [ 112.906466][ T8907] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 112.906479][ T8907] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.909959][ T8907] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 112.910903][ T9078] RDX: 0000000000019000 RSI: 000000002001a240 RDI: 0000000000000003 [ 112.910919][ T9078] RBP: 00007fc5ce0f1090 R08: 0000000000000000 R09: 0000000000000000 [ 112.934769][ T8907] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 112.938875][ T9078] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 112.938890][ T9078] R13: 0000000000000000 R14: 00007fc5cf635f80 R15: 00007fffa2d665c8 [ 112.938912][ T9078] [ 112.946893][ T8907] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.025812][ T9083] loop7: detected capacity change from 0 to 16384 [ 113.029576][ T8907] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 113.046792][ T8907] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.056646][ T8907] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 113.067111][ T8907] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.076954][ T8907] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 113.087502][ T8907] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.090698][ T9086] program syz.0.1382 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 113.106780][ T9086] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 113.180301][ T8907] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 113.206073][ T9065] loop7: detected capacity change from 16384 to 16383 [ 113.221960][ T8907] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.230730][ T8907] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.239461][ T8907] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.248244][ T8907] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.295209][ T9086] Invalid logical block size (65472) [ 113.476792][ T9092] loop7: detected capacity change from 0 to 16384 [ 113.510364][ T9113] netlink: 'syz.0.1392': attribute type 4 has an invalid length. [ 113.544613][ T9096] program syz.2.1388 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 113.561783][ T9096] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 113.576267][ T9113] dvmrp8: entered allmulticast mode [ 113.589466][ T9113] dvmrp8: left allmulticast mode [ 113.633609][ T9120] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1395'. [ 113.652993][ T9120] netlink: 116 bytes leftover after parsing attributes in process `syz.4.1395'. [ 113.702087][ T9120] bridge_slave_1: left allmulticast mode [ 113.707897][ T9120] bridge_slave_1: left promiscuous mode [ 113.713517][ T9120] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.728094][ T9120] bridge_slave_0: left allmulticast mode [ 113.733769][ T9120] bridge_slave_0: left promiscuous mode [ 113.734649][ T9125] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 113.739477][ T9120] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.785218][ T9096] loop7: detected capacity change from 16384 to 16383 [ 113.802232][ T9125] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1395'. [ 113.811149][ T9125] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1395'. [ 113.825739][ T9125] ip6erspan0: entered promiscuous mode [ 113.832582][ T9129] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1398'. [ 113.855167][ T9122] Invalid logical block size (65472) [ 113.937168][ T9134] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1399'. [ 113.962078][ T9137] FAULT_INJECTION: forcing a failure. [ 113.962078][ T9137] name failslab, interval 1, probability 0, space 0, times 0 [ 113.974721][ T9137] CPU: 0 UID: 0 PID: 9137 Comm: syz.0.1401 Not tainted 6.12.0-rc3-syzkaller-00044-g2f87d0916ce0 #0 [ 113.985491][ T9137] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 113.995592][ T9137] Call Trace: [ 113.998874][ T9137] [ 114.001796][ T9137] dump_stack_lvl+0xf2/0x150 [ 114.006439][ T9137] dump_stack+0x15/0x20 [ 114.010593][ T9137] should_fail_ex+0x223/0x230 [ 114.015349][ T9137] ? selinux_bpf_prog_load+0x35/0xe0 [ 114.020640][ T9137] should_failslab+0x8f/0xb0 [ 114.025230][ T9137] __kmalloc_cache_noprof+0x4b/0x2a0 [ 114.030528][ T9137] ? should_fail+0xb/0x10 [ 114.031999][ T9138] loop2: detected capacity change from 0 to 512 [ 114.034913][ T9137] selinux_bpf_prog_load+0x35/0xe0 [ 114.034936][ T9137] security_bpf_prog_load+0x47/0x80 [ 114.051506][ T9137] bpf_prog_load+0xe81/0x1070 [ 114.056210][ T9137] ? __rcu_read_unlock+0x4e/0x70 [ 114.061151][ T9137] __sys_bpf+0x463/0x7a0 [ 114.065384][ T9137] __x64_sys_bpf+0x43/0x50 [ 114.069800][ T9137] x64_sys_call+0x2625/0x2d60 [ 114.074499][ T9137] do_syscall_64+0xc9/0x1c0 [ 114.078993][ T9137] ? clear_bhb_loop+0x55/0xb0 [ 114.083742][ T9137] ? clear_bhb_loop+0x55/0xb0 [ 114.088443][ T9137] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.094332][ T9137] RIP: 0033:0x7f333d09dff9 [ 114.098757][ T9137] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 114.118359][ T9137] RSP: 002b:00007f333bd11038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 114.126795][ T9137] RAX: ffffffffffffffda RBX: 00007f333d255f80 RCX: 00007f333d09dff9 [ 114.134761][ T9137] RDX: 0000000000000090 RSI: 00000000200001c0 RDI: 0000000000000005 [ 114.142724][ T9137] RBP: 00007f333bd11090 R08: 0000000000000000 R09: 0000000000000000 [ 114.150732][ T9137] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 114.158741][ T9137] R13: 0000000000000000 R14: 00007f333d255f80 R15: 00007ffcfd621048 [ 114.166741][ T9137] [ 114.177627][ T9032] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 114.193061][ T9032] EXT4-fs (loop1): Delayed block allocation failed for inode 19 at logical offset 0 with max blocks 4 with error 28 [ 114.205523][ T9032] EXT4-fs (loop1): This should not happen!! Data will be lost [ 114.205523][ T9032] [ 114.215496][ T9032] EXT4-fs (loop1): Total free blocks count 0 [ 114.216626][ T9141] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1402'. [ 114.221466][ T9032] EXT4-fs (loop1): Free/Dirty block details [ 114.236403][ T9032] EXT4-fs (loop1): free_blocks=2415919104 [ 114.242117][ T9032] EXT4-fs (loop1): dirty_blocks=30464 [ 114.247493][ T9032] EXT4-fs (loop1): Block reservation details [ 114.253525][ T9032] EXT4-fs (loop1): i_reserved_data_blocks=1904 [ 114.268813][ T163] EXT4-fs (loop1): Delayed block allocation failed for inode 19 at logical offset 6 with max blocks 4 with error 28 [ 114.290598][ T9138] EXT4-fs (loop2): too many log groups per flexible block group [ 114.298341][ T9138] EXT4-fs (loop2): failed to initialize mballoc (-12) [ 114.308808][ T9138] EXT4-fs (loop2): mount failed [ 114.414802][ T9156] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1409'. [ 114.424281][ T9156] unsupported nlmsg_type 40 [ 114.511861][ T9162] loop1: detected capacity change from 0 to 512 [ 114.519844][ T9162] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2 [ 114.529549][ T9162] EXT4-fs warning (device loop1): ext4_block_to_path:107: block 3279945729 > max in inode 13 [ 114.539801][ T9162] EXT4-fs warning (device loop1): ext4_block_to_path:107: block 3279945730 > max in inode 13 [ 114.550271][ T9162] EXT4-fs (loop1): 1 truncate cleaned up [ 114.556724][ T9162] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 114.571250][ T9162] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1411'. [ 114.578888][ T9165] loop3: detected capacity change from 0 to 256 [ 114.590643][ T9165] Process accounting resumed [ 114.651162][ T7027] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.701720][ T9185] loop1: detected capacity change from 0 to 512 [ 114.727176][ T9185] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 114.741708][ T9185] ext4 filesystem being mounted at /117/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 114.773194][ T7027] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.791088][ T9191] bpf_get_probe_write_proto: 5 callbacks suppressed [ 114.791099][ T9191] syz.1.1424[9191] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 114.798169][ T9191] syz.1.1424[9191] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 114.802001][ T9187] loop7: detected capacity change from 0 to 16384 [ 114.809587][ T9191] syz.1.1424[9191] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 114.853245][ T9194] syz.1.1425[9194] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 114.866506][ T9194] syz.1.1425[9194] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 114.879057][ T9194] syz.1.1425[9194] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 114.911403][ T9198] loop2: detected capacity change from 0 to 512 [ 114.931112][ T9198] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 114.940262][ T9198] EXT4-fs warning (device loop2): ext4_block_to_path:107: block 3279945729 > max in inode 13 [ 114.950555][ T9198] EXT4-fs warning (device loop2): ext4_block_to_path:107: block 3279945730 > max in inode 13 [ 114.961004][ T9198] EXT4-fs (loop2): 1 truncate cleaned up [ 114.967135][ T9198] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.069211][ T7580] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.083791][ T9209] loop3: detected capacity change from 0 to 512 [ 115.117921][ T9220] batadv0: entered promiscuous mode [ 115.128103][ T9218] loop3: detected capacity change from 0 to 512 [ 115.158829][ T9220] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 115.182002][ T9220] netlink: '+}[@': attribute type 2 has an invalid length. [ 115.236368][ T9218] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.260936][ T9218] ext4 filesystem being mounted at /111/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 115.272299][ T9226] program syz.1.1437 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 115.281673][ T9226] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 115.302330][ T7840] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.335206][ T9226] loop7: detected capacity change from 16384 to 16383 [ 115.385236][ T9238] Invalid logical block size (65472) [ 115.414056][ T9235] vhci_hcd: invalid port number 157 [ 115.419400][ T9235] vhci_hcd: default hub control req: c1ef v21ba i009d l29779 [ 115.437453][ T9235] loop2: detected capacity change from 0 to 256 [ 115.535983][ T9235] FAT-fs (loop2): Directory bread(block 64) failed [ 115.542735][ T9235] FAT-fs (loop2): Directory bread(block 65) failed [ 115.549389][ T9235] FAT-fs (loop2): Directory bread(block 66) failed [ 115.556307][ T9235] FAT-fs (loop2): Directory bread(block 67) failed [ 115.563963][ T9235] FAT-fs (loop2): Directory bread(block 68) failed [ 115.570822][ T9235] FAT-fs (loop2): Directory bread(block 69) failed [ 115.577994][ T9235] FAT-fs (loop2): Directory bread(block 70) failed [ 115.584794][ T9235] FAT-fs (loop2): Directory bread(block 71) failed [ 115.591491][ T9235] FAT-fs (loop2): Directory bread(block 72) failed [ 115.598119][ T9235] FAT-fs (loop2): Directory bread(block 73) failed [ 115.611643][ T9235] syz.2.1442: attempt to access beyond end of device [ 115.611643][ T9235] loop2: rw=524288, sector=1736, nr_sectors = 32 limit=256 [ 115.625836][ T9235] syz.2.1442: attempt to access beyond end of device [ 115.625836][ T9235] loop2: rw=0, sector=1736, nr_sectors = 8 limit=256 [ 115.694612][ T9281] xt_CT: No such helper "pptp" [ 115.823862][ T9298] bridge_slave_1: left allmulticast mode [ 115.829576][ T9298] bridge_slave_1: left promiscuous mode [ 115.835278][ T9298] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.843669][ T9298] bridge_slave_0: left allmulticast mode [ 115.849425][ T9298] bridge_slave_0: left promiscuous mode [ 115.855080][ T9298] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.893319][ T9300] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=9300 comm=syz.0.1465 [ 116.178946][ T9314] syz.0.1471[9314] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 116.179086][ T9314] syz.0.1471[9314] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 116.192066][ T9314] syz.0.1471[9314] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 116.320824][ T9317] loop7: detected capacity change from 0 to 16384 [ 116.359572][ T9317] program syz.2.1472 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 116.369868][ T9317] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 116.402370][ T29] kauditd_printk_skb: 407 callbacks suppressed [ 116.402385][ T29] audit: type=1326 audit(2000000029.980:4475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9326 comm="syz.3.1476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5cf47dff9 code=0x7ffc0000 [ 116.454045][ T29] audit: type=1326 audit(2000000029.980:4476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9326 comm="syz.3.1476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5cf47dff9 code=0x7ffc0000 [ 116.455162][ T9317] loop7: detected capacity change from 16384 to 16383 [ 116.477640][ T29] audit: type=1326 audit(2000000029.980:4477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9326 comm="syz.3.1476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=244 compat=0 ip=0x7fc5cf47dff9 code=0x7ffc0000 [ 116.507666][ T29] audit: type=1326 audit(2000000029.980:4478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9326 comm="syz.3.1476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5cf47dff9 code=0x7ffc0000 [ 116.531165][ T29] audit: type=1326 audit(2000000029.980:4479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9326 comm="syz.3.1476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5cf47dff9 code=0x7ffc0000 [ 116.567729][ T29] audit: type=1326 audit(2000000030.150:4480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9335 comm="syz.1.1479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37b0cadff9 code=0x7ffc0000 [ 116.591159][ T29] audit: type=1326 audit(2000000030.150:4481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9335 comm="syz.1.1479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37b0cadff9 code=0x7ffc0000 [ 116.625180][ T9320] Invalid logical block size (65472) [ 116.653668][ T29] audit: type=1326 audit(2000000030.150:4482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9335 comm="syz.1.1479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7f37b0cadff9 code=0x7ffc0000 [ 116.677176][ T29] audit: type=1326 audit(2000000030.150:4483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9335 comm="syz.1.1479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37b0cadff9 code=0x7ffc0000 [ 116.700768][ T29] audit: type=1326 audit(2000000030.150:4484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9335 comm="syz.1.1479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37b0cadff9 code=0x7ffc0000 [ 116.742043][ T9338] Driver unsupported XDP return value 0 on prog (id 861) dev N/A, expect packet loss! [ 116.745947][ T9329] loop7: detected capacity change from 0 to 16384 [ 116.783125][ T9329] program syz.0.1477 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 116.792526][ T9329] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 116.813141][ T9350] loop1: detected capacity change from 0 to 128 [ 116.835172][ T9329] loop7: detected capacity change from 16384 to 16383 [ 116.840147][ T9350] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 116.862518][ T9350] ext4 filesystem being mounted at /129/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 116.874952][ T9354] loop2: detected capacity change from 0 to 8192 [ 116.884970][ T9354] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 116.905250][ T9329] Invalid logical block size (65472) [ 116.931299][ T7027] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 117.132289][ T9387] syz.4.1497[9387] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 117.267368][ T9388] syz.4.1497: attempt to access beyond end of device [ 117.267368][ T9388] loop128: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 117.368084][ T9402] dvmrp8: entered allmulticast mode [ 117.374007][ T9402] dvmrp8: left allmulticast mode [ 117.496033][ T9407] loop7: detected capacity change from 0 to 16384 [ 117.552920][ T9407] program syz.2.1504 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 117.562292][ T9407] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 117.659027][ T9416] loop3: detected capacity change from 0 to 1024 [ 117.666109][ T9416] EXT4-fs: Ignoring removed orlov option [ 117.671837][ T9416] EXT4-fs: Ignoring removed bh option [ 117.696842][ T9416] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 117.715161][ T9407] loop7: detected capacity change from 16384 to 16383 [ 117.731815][ T7840] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.765246][ T9408] Invalid logical block size (65472) [ 117.779779][ T9422] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(12) [ 117.786419][ T9422] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 117.794016][ T9422] vhci_hcd vhci_hcd.0: Device attached [ 117.837031][ T9423] vhci_hcd: connection closed [ 117.837249][ T162] vhci_hcd: stop threads [ 117.846253][ T162] vhci_hcd: release socket [ 117.850655][ T162] vhci_hcd: disconnect device [ 117.876343][ T9432] __nla_validate_parse: 8 callbacks suppressed [ 117.876356][ T9432] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1513'. [ 117.907866][ T9438] netlink: 332 bytes leftover after parsing attributes in process `syz.1.1516'. [ 117.919792][ T9438] netlink: 'syz.1.1516': attribute type 9 has an invalid length. [ 117.927569][ T9438] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1516'. [ 117.936712][ T9438] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1516'. [ 117.969478][ T9435] loop7: detected capacity change from 0 to 16384 [ 117.981629][ T9436] netlink: 'syz.2.1514': attribute type 29 has an invalid length. [ 118.027395][ T9442] program syz.0.1515 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 118.059568][ T9448] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.068781][ T9442] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 118.131391][ T9446] loop4: detected capacity change from 0 to 2048 [ 118.169485][ T9448] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.190529][ T9446] Alternate GPT is invalid, using primary GPT. [ 118.197162][ T9446] loop4: p2 p3 p7 [ 118.239736][ T9448] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.250094][ T9435] loop7: detected capacity change from 16384 to 16383 [ 118.305967][ T9442] Invalid logical block size (65472) [ 118.314227][ T9448] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.397462][ T9448] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.422347][ T9448] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.443618][ T9448] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.461151][ T9464] Cannot find del_set index 0 as target [ 118.466050][ T9448] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.564846][ T9462] loop7: detected capacity change from 0 to 16384 [ 118.632706][ T9469] program syz.0.1523 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 118.642143][ T9469] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 118.710430][ T9476] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 118.765189][ T9469] loop7: detected capacity change from 16384 to 16383 [ 118.771832][ T9478] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 118.788553][ T9478] vhci_hcd: invalid port number 38 [ 118.793691][ T9478] vhci_hcd: invalid port number 38 [ 118.804734][ T9478] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1528'. [ 118.825178][ T9474] Invalid logical block size (65472) [ 118.886192][ T9476] vhci_hcd: default hub control req: 4750 v004c i0000 l0 [ 118.954874][ T9486] dvmrp8: entered allmulticast mode [ 118.961556][ T9486] dvmrp8: left allmulticast mode [ 119.077018][ T9494] loop7: detected capacity change from 0 to 16384 [ 119.134476][ T9497] program syz.3.1534 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 119.147354][ T9497] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 119.190327][ T9501] loop4: detected capacity change from 0 to 512 [ 119.217679][ T9501] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 119.234957][ T9501] EXT4-fs warning (device loop4): ext4_block_to_path:107: block 3279945729 > max in inode 13 [ 119.255215][ T9501] EXT4-fs warning (device loop4): ext4_block_to_path:107: block 3279945730 > max in inode 13 [ 119.287088][ T9501] EXT4-fs (loop4): 1 truncate cleaned up [ 119.293045][ T9501] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 119.325402][ T9494] loop7: detected capacity change from 16384 to 16383 [ 119.365183][ T9497] Invalid logical block size (65472) [ 119.388880][ T8907] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.620463][ T9514] syz.4.1540: attempt to access beyond end of device [ 119.620463][ T9514] loop128: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 119.658182][ T9509] loop7: detected capacity change from 0 to 16384 [ 119.715567][ T9516] program syz.3.1539 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 119.725022][ T9516] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 119.795279][ T9516] loop7: detected capacity change from 16384 to 16383 [ 119.881306][ T9525] loop4: detected capacity change from 0 to 512 [ 119.892753][ T9525] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 119.902252][ T9520] program syz.0.1542 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 119.911590][ T9520] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 119.922166][ T9525] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 119.925179][ T9521] Invalid logical block size (65472) [ 119.982737][ T9525] bpf_get_probe_write_proto: 11 callbacks suppressed [ 119.982774][ T9525] syz.4.1543[9525] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 119.996101][ T9525] syz.4.1543[9525] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 120.007713][ T9525] syz.4.1543[9525] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 120.049939][ T9534] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2049 sclass=netlink_route_socket pid=9534 comm=syz.3.1545 [ 120.076449][ T8907] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.102457][ T9539] loop3: detected capacity change from 0 to 512 [ 120.118030][ T9539] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 120.150244][ T9539] EXT4-fs warning (device loop3): ext4_block_to_path:107: block 3279945729 > max in inode 13 [ 120.165224][ T9539] EXT4-fs warning (device loop3): ext4_block_to_path:107: block 3279945730 > max in inode 13 [ 120.186364][ T9539] EXT4-fs (loop3): 1 truncate cleaned up [ 120.192286][ T9539] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 120.355351][ T9547] loop7: detected capacity change from 0 to 16384 [ 120.358761][ T7840] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.422567][ T9548] program syz.4.1549 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 120.438275][ T9548] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 120.615272][ T9547] loop7: detected capacity change from 16384 to 16383 [ 120.655172][ T9548] Invalid logical block size (65472) [ 120.747094][ T9554] loop7: detected capacity change from 0 to 16384 [ 120.804405][ T9556] program syz.0.1551 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 120.813835][ T9556] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 120.915199][ T9556] loop7: detected capacity change from 16384 to 16383 [ 120.935076][ T9565] loop4: detected capacity change from 0 to 128 [ 120.963380][ T9565] syz.4.1554: attempt to access beyond end of device [ 120.963380][ T9565] loop4: rw=0, sector=121, nr_sectors = 127 limit=128 [ 121.065149][ T9560] Invalid logical block size (65472) [ 121.072236][ T4756] kworker/u8:8: attempt to access beyond end of device [ 121.072236][ T4756] loop4: rw=1, sector=249, nr_sectors = 792 limit=128 [ 121.153658][ T9569] lo speed is unknown, defaulting to 1000 [ 121.159544][ T9569] lo speed is unknown, defaulting to 1000 [ 121.167191][ T9569] lo speed is unknown, defaulting to 1000 [ 121.173282][ T9569] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 121.181335][ T9569] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 121.192420][ T9569] lo speed is unknown, defaulting to 1000 [ 121.198444][ T9569] lo speed is unknown, defaulting to 1000 [ 121.204940][ T9569] lo speed is unknown, defaulting to 1000 [ 121.211030][ T9569] lo speed is unknown, defaulting to 1000 [ 121.218029][ T9569] lo speed is unknown, defaulting to 1000 [ 121.261677][ T9581] syz.3.1561[9581] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 121.261806][ T9581] syz.3.1561[9581] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 121.275229][ T9581] syz.3.1561[9581] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 121.408179][ T9581] syz.3.1561: attempt to access beyond end of device [ 121.408179][ T9581] loop128: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 121.416328][ T29] kauditd_printk_skb: 463 callbacks suppressed [ 121.416399][ T29] audit: type=1326 audit(2000000034.990:4944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9586 comm="syz.4.1564" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2c07e0dff9 code=0x0 [ 121.541837][ T9590] loop7: detected capacity change from 0 to 16384 [ 121.609612][ T9597] program syz.0.1565 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 121.619711][ T9597] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 121.655773][ T9593] program syz.3.1566 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 121.665171][ T9593] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 121.675159][ T9597] loop7: detected capacity change from 16384 to 16383 [ 121.734352][ T29] audit: type=1326 audit(2000000035.310:4945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9604 comm="syz.3.1567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5cf47dff9 code=0x7ffc0000 [ 121.757979][ T29] audit: type=1326 audit(2000000035.310:4946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9604 comm="syz.3.1567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5cf47dff9 code=0x7ffc0000 [ 121.781371][ T29] audit: type=1326 audit(2000000035.310:4947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9604 comm="syz.3.1567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc5cf47dff9 code=0x7ffc0000 [ 121.804775][ T29] audit: type=1326 audit(2000000035.310:4948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9604 comm="syz.3.1567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5cf47dff9 code=0x7ffc0000 [ 121.828255][ T29] audit: type=1326 audit(2000000035.310:4949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9604 comm="syz.3.1567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc5cf47dff9 code=0x7ffc0000 [ 121.851634][ T29] audit: type=1326 audit(2000000035.310:4950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9604 comm="syz.3.1567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5cf47dff9 code=0x7ffc0000 [ 121.875301][ T29] audit: type=1326 audit(2000000035.310:4951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9604 comm="syz.3.1567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc5cf47dff9 code=0x7ffc0000 [ 121.898876][ T29] audit: type=1326 audit(2000000035.310:4952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9604 comm="syz.3.1567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5cf47dff9 code=0x7ffc0000 [ 121.922257][ T29] audit: type=1326 audit(2000000035.310:4953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9604 comm="syz.3.1567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc5cf47dff9 code=0x7ffc0000 [ 121.945832][ T9603] Invalid logical block size (65472) [ 122.076764][ T9605] loop3: detected capacity change from 0 to 2048 [ 122.130988][ T9605] Alternate GPT is invalid, using primary GPT. [ 122.137341][ T9605] loop3: p2 p3 p7 [ 122.354591][ T9627] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1577'. [ 122.459486][ T9632] loop7: detected capacity change from 0 to 16384 [ 122.517440][ T9637] program syz.0.1579 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 122.527281][ T9637] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 122.587261][ T9636] program syz.3.1581 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 122.596733][ T9636] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 122.685331][ T9637] loop7: detected capacity change from 16384 to 16383 [ 122.735197][ T9641] Invalid logical block size (65472) [ 122.858011][ T9660] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1586'. [ 122.889457][ T9664] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1588'. [ 122.928645][ T9668] netlink: 'syz.3.1590': attribute type 3 has an invalid length. [ 122.936457][ T9668] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1590'. [ 122.959397][ T9668] lo speed is unknown, defaulting to 1000 [ 123.011357][ T9672] loop3: detected capacity change from 0 to 512 [ 123.018714][ T9672] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 123.031187][ T9672] EXT4-fs (loop3): 1 truncate cleaned up [ 123.037286][ T9672] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 123.072637][ T9673] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1591'. [ 123.342145][ T9691] loop7: detected capacity change from 0 to 16384 [ 123.435682][ T9691] program syz.0.1597 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 123.445360][ T9691] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 123.468713][ T9696] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1600'. [ 123.533229][ T9699] program syz.1.1602 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 123.561782][ T9699] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 123.745962][ T9716] loop4: detected capacity change from 0 to 512 [ 123.760741][ T9715] loop1: detected capacity change from 0 to 2048 [ 123.767703][ T9716] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 123.780641][ T9716] EXT4-fs (loop4): 1 truncate cleaned up [ 123.786696][ T9716] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 123.822703][ T9715] Alternate GPT is invalid, using primary GPT. [ 123.829039][ T9715] loop1: p2 p3 p7 [ 123.856995][ T7840] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.015362][ T9691] loop7: detected capacity change from 16384 to 16383 [ 124.175265][ T9730] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(12) [ 124.181885][ T9730] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 124.189595][ T9730] vhci_hcd vhci_hcd.0: Device attached [ 124.197283][ T9736] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1617'. [ 124.207432][ T9734] lo speed is unknown, defaulting to 1000 [ 124.241574][ T9735] vhci_hcd: connection closed [ 124.241768][ T28] vhci_hcd: stop threads [ 124.250813][ T28] vhci_hcd: release socket [ 124.255295][ T28] vhci_hcd: disconnect device [ 124.266466][ T9744] FAULT_INJECTION: forcing a failure. [ 124.266466][ T9744] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 124.279629][ T9744] CPU: 0 UID: 0 PID: 9744 Comm: syz.3.1619 Not tainted 6.12.0-rc3-syzkaller-00044-g2f87d0916ce0 #0 [ 124.290333][ T9744] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 124.300396][ T9744] Call Trace: [ 124.303678][ T9744] [ 124.306613][ T9744] dump_stack_lvl+0xf2/0x150 [ 124.311210][ T9744] dump_stack+0x15/0x20 [ 124.315367][ T9744] should_fail_ex+0x223/0x230 [ 124.320069][ T9744] should_fail+0xb/0x10 [ 124.324256][ T9744] should_fail_usercopy+0x1a/0x20 [ 124.329348][ T9744] _copy_to_user+0x1e/0xa0 [ 124.333771][ T9744] simple_read_from_buffer+0xa0/0x110 [ 124.339185][ T9744] proc_fail_nth_read+0xf9/0x140 [ 124.344200][ T9744] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 124.349793][ T9744] vfs_read+0x195/0x720 [ 124.354011][ T9744] ? __rcu_read_unlock+0x4e/0x70 [ 124.359034][ T9744] ? __fget_files+0x1d4/0x210 [ 124.363797][ T9744] ksys_read+0xeb/0x1b0 [ 124.368011][ T9744] __x64_sys_read+0x42/0x50 [ 124.372516][ T9744] x64_sys_call+0x27d3/0x2d60 [ 124.377250][ T9744] do_syscall_64+0xc9/0x1c0 [ 124.381766][ T9744] ? clear_bhb_loop+0x55/0xb0 [ 124.386524][ T9744] ? clear_bhb_loop+0x55/0xb0 [ 124.391198][ T9744] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.397176][ T9744] RIP: 0033:0x7fc5cf47ca3c [ 124.401628][ T9744] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 124.421265][ T9744] RSP: 002b:00007fc5ce0f1030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 124.429671][ T9744] RAX: ffffffffffffffda RBX: 00007fc5cf635f80 RCX: 00007fc5cf47ca3c [ 124.437635][ T9744] RDX: 000000000000000f RSI: 00007fc5ce0f10a0 RDI: 0000000000000006 [ 124.445724][ T9744] RBP: 00007fc5ce0f1090 R08: 0000000000000000 R09: 0000000000000000 [ 124.453686][ T9744] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 124.461680][ T9744] R13: 0000000000000000 R14: 00007fc5cf635f80 R15: 00007fffa2d665c8 [ 124.469717][ T9744] [ 124.489697][ T8907] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.534755][ T9748] loop4: detected capacity change from 0 to 2048 [ 124.593599][ T9748] Alternate GPT is invalid, using primary GPT. [ 124.600066][ T9748] loop4: p2 p3 p7 [ 124.763571][ T9754] loop7: detected capacity change from 0 to 7 [ 124.769785][ T9754] Buffer I/O error on dev loop7, logical block 0, async page read [ 124.777659][ T9754] Buffer I/O error on dev loop7, logical block 0, async page read [ 124.785494][ T9754] loop7: unable to read partition table [ 124.791192][ T9754] loop_reread_partitions: partition scan of loop7 (被xڬdƤݡ [ 124.791192][ T9754] ) failed (rc=-5) [ 124.823685][ T9754] syzkaller0: entered promiscuous mode [ 124.829303][ T9754] syzkaller0: entered allmulticast mode [ 124.943011][ T9761] loop7: detected capacity change from 0 to 16384 [ 124.999689][ T9768] dvmrp8: entered allmulticast mode [ 125.005680][ T9766] program syz.1.1627 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 125.012009][ T9768] dvmrp8: left allmulticast mode [ 125.014995][ T9766] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 125.096024][ T9766] loop7: detected capacity change from 16384 to 16383 [ 125.180258][ T9784] lo speed is unknown, defaulting to 1000 [ 125.326917][ T9790] syz.3.1639[9790] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 125.327009][ T9790] syz.3.1639[9790] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 125.351191][ T9790] syz.3.1639[9790] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 125.374542][ T9797] syz.3.1639: attempt to access beyond end of device [ 125.374542][ T9797] loop128: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 125.384260][ T9796] lo speed is unknown, defaulting to 1000 [ 125.507862][ T9810] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1647'. [ 125.655709][ T9805] loop7: detected capacity change from 0 to 16384 [ 125.726487][ T9820] program syz.3.1645 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 125.735850][ T9820] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 125.813568][ T9815] program syz.1.1649 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 125.835191][ T9820] loop7: detected capacity change from 16384 to 16383 [ 125.835998][ T9815] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 125.859651][ T9821] lo speed is unknown, defaulting to 1000 [ 125.925257][ T9822] Invalid logical block size (65472) [ 125.964286][ T9828] syz.1.1653[9828] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 125.964361][ T9828] syz.1.1653[9828] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 125.977519][ T9828] syz.1.1653[9828] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 126.028156][ T9828] syz.1.1653: attempt to access beyond end of device [ 126.028156][ T9828] loop128: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 126.078668][ T9830] macvtap0: entered promiscuous mode [ 126.084404][ T9830] macvtap0: left promiscuous mode [ 126.156074][ T9841] FAULT_INJECTION: forcing a failure. [ 126.156074][ T9841] name failslab, interval 1, probability 0, space 0, times 0 [ 126.168777][ T9841] CPU: 1 UID: 0 PID: 9841 Comm: syz.1.1658 Not tainted 6.12.0-rc3-syzkaller-00044-g2f87d0916ce0 #0 [ 126.179472][ T9841] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 126.189553][ T9841] Call Trace: [ 126.193074][ T9841] [ 126.196002][ T9841] dump_stack_lvl+0xf2/0x150 [ 126.200639][ T9841] dump_stack+0x15/0x20 [ 126.204817][ T9841] should_fail_ex+0x223/0x230 [ 126.209540][ T9841] ? __alloc_skb+0x10b/0x310 [ 126.214181][ T9841] should_failslab+0x8f/0xb0 [ 126.218812][ T9841] kmem_cache_alloc_node_noprof+0x51/0x2b0 [ 126.224632][ T9841] __alloc_skb+0x10b/0x310 [ 126.229174][ T9841] pfkey_sendmsg+0x10d/0x970 [ 126.233838][ T9841] ? avc_has_perm+0xd4/0x160 [ 126.238439][ T9841] ? selinux_socket_sendmsg+0x19c/0x1d0 [ 126.244085][ T9841] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 126.249244][ T9841] __sock_sendmsg+0x140/0x180 [ 126.253927][ T9841] ____sys_sendmsg+0x312/0x410 [ 126.258711][ T9841] __sys_sendmsg+0x1d9/0x270 [ 126.263322][ T9841] __x64_sys_sendmsg+0x46/0x50 [ 126.268097][ T9841] x64_sys_call+0x2689/0x2d60 [ 126.272832][ T9841] do_syscall_64+0xc9/0x1c0 [ 126.277331][ T9841] ? clear_bhb_loop+0x55/0xb0 [ 126.282026][ T9841] ? clear_bhb_loop+0x55/0xb0 [ 126.286712][ T9841] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.292618][ T9841] RIP: 0033:0x7f37b0cadff9 [ 126.297033][ T9841] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 126.316640][ T9841] RSP: 002b:00007f37af927038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 126.325062][ T9841] RAX: ffffffffffffffda RBX: 00007f37b0e65f80 RCX: 00007f37b0cadff9 [ 126.333149][ T9841] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000006 [ 126.341126][ T9841] RBP: 00007f37af927090 R08: 0000000000000000 R09: 0000000000000000 [ 126.349109][ T9841] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 126.357088][ T9841] R13: 0000000000000000 R14: 00007f37b0e65f80 R15: 00007ffc98340ce8 [ 126.365111][ T9841] [ 126.491300][ T9847] lo speed is unknown, defaulting to 1000 [ 126.615132][ T29] kauditd_printk_skb: 755 callbacks suppressed [ 126.615150][ T29] audit: type=1326 audit(2000000040.170:5709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9843 comm="syz.1.1659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37b0cadff9 code=0x7ffc0000 [ 126.644848][ T29] audit: type=1326 audit(2000000040.170:5710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9843 comm="syz.1.1659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37b0cadff9 code=0x7ffc0000 [ 126.777067][ T9857] syz.0.1665[9857] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 126.777126][ T9857] syz.0.1665[9857] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 126.790864][ T9857] syz.0.1665[9857] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 126.811869][ T9857] syz.0.1665: attempt to access beyond end of device [ 126.811869][ T9857] loop128: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 126.844495][ T29] audit: type=1326 audit(2000000040.420:5711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9858 comm="syz.4.1666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c07e0dff9 code=0x7ffc0000 [ 126.868002][ T29] audit: type=1326 audit(2000000040.420:5712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9858 comm="syz.4.1666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c07e0dff9 code=0x7ffc0000 [ 126.891450][ T29] audit: type=1326 audit(2000000040.420:5713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9858 comm="syz.4.1666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7f2c07e0dff9 code=0x7ffc0000 [ 126.914868][ T29] audit: type=1326 audit(2000000040.420:5714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9858 comm="syz.4.1666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c07e0dff9 code=0x7ffc0000 [ 126.989085][ T9864] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(12) [ 126.995699][ T9864] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 127.003323][ T9864] vhci_hcd vhci_hcd.0: Device attached [ 127.040432][ T9870] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1670'. [ 127.061074][ T9866] vhci_hcd: connection closed [ 127.061791][ T50] vhci_hcd: stop threads [ 127.070760][ T50] vhci_hcd: release socket [ 127.075217][ T50] vhci_hcd: disconnect device [ 127.096273][ T9854] loop7: detected capacity change from 0 to 16384 [ 127.103790][ T9863] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(12) [ 127.110410][ T9863] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 127.118084][ T9863] vhci_hcd vhci_hcd.0: Device attached [ 127.165135][ T9873] vhci_hcd: connection closed [ 127.165954][ T28] vhci_hcd: stop threads [ 127.174877][ T28] vhci_hcd: release socket [ 127.179344][ T28] vhci_hcd: disconnect device [ 127.184498][ T9871] program syz.1.1663 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 127.193838][ T9871] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 127.315172][ T9871] loop7: detected capacity change from 16384 to 16383 [ 127.365230][ T9875] Invalid logical block size (65472) [ 127.527572][ T9890] lo speed is unknown, defaulting to 1000 [ 127.571005][ T9892] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1676'. [ 127.623638][ T29] audit: type=1326 audit(2000000041.190:5715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9896 comm="syz.3.1677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5cf47dff9 code=0x7ffc0000 [ 127.647458][ T29] audit: type=1326 audit(2000000041.190:5716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9896 comm="syz.3.1677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7fc5cf47dff9 code=0x7ffc0000 [ 127.671186][ T29] audit: type=1326 audit(2000000041.190:5717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9896 comm="syz.3.1677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5cf47dff9 code=0x7ffc0000 [ 127.728783][ T9909] FAULT_INJECTION: forcing a failure. [ 127.728783][ T9909] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 127.741944][ T9909] CPU: 0 UID: 0 PID: 9909 Comm: syz.3.1683 Not tainted 6.12.0-rc3-syzkaller-00044-g2f87d0916ce0 #0 [ 127.752621][ T9909] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 127.762744][ T9909] Call Trace: [ 127.766014][ T9909] [ 127.768935][ T9909] dump_stack_lvl+0xf2/0x150 [ 127.773589][ T9909] dump_stack+0x15/0x20 [ 127.777808][ T9909] should_fail_ex+0x223/0x230 [ 127.782521][ T9909] should_fail+0xb/0x10 [ 127.786675][ T9909] should_fail_usercopy+0x1a/0x20 [ 127.791697][ T9909] _copy_to_iter+0x246/0xd20 [ 127.796287][ T9909] ? input_devices_seq_next+0x24/0x30 [ 127.801763][ T9909] ? traverse+0x397/0x3c0 [ 127.806096][ T9909] ? __virt_addr_valid+0x1ed/0x250 [ 127.811229][ T9909] ? __check_object_size+0x364/0x520 [ 127.816511][ T9909] seq_read_iter+0x1db/0x930 [ 127.821212][ T9909] ? _parse_integer_limit+0x167/0x180 [ 127.826602][ T9909] seq_read+0x1ed/0x230 [ 127.830754][ T9909] ? __pfx_seq_read+0x10/0x10 [ 127.835442][ T9909] proc_reg_read+0x13f/0x1d0 [ 127.840067][ T9909] vfs_readv+0x3e2/0x660 [ 127.844314][ T9909] ? __pfx_proc_reg_read+0x10/0x10 [ 127.849522][ T9909] __x64_sys_preadv+0x100/0x1c0 [ 127.854442][ T9909] x64_sys_call+0x1d5c/0x2d60 [ 127.859123][ T9909] do_syscall_64+0xc9/0x1c0 [ 127.863734][ T9909] ? clear_bhb_loop+0x55/0xb0 [ 127.868412][ T9909] ? clear_bhb_loop+0x55/0xb0 [ 127.873208][ T9909] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.879142][ T9909] RIP: 0033:0x7fc5cf47dff9 [ 127.883545][ T9909] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 127.903182][ T9909] RSP: 002b:00007fc5ce0f1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 127.911587][ T9909] RAX: ffffffffffffffda RBX: 00007fc5cf635f80 RCX: 00007fc5cf47dff9 [ 127.919547][ T9909] RDX: 0000000000000001 RSI: 00000000200015c0 RDI: 0000000000000006 [ 127.927541][ T9909] RBP: 00007fc5ce0f1090 R08: 0000000000000067 R09: 0000000000000000 [ 127.935504][ T9909] R10: 0000000000000009 R11: 0000000000000246 R12: 0000000000000001 [ 127.943511][ T9909] R13: 0000000000000000 R14: 00007fc5cf635f80 R15: 00007fffa2d665c8 [ 127.951480][ T9909] [ 127.956848][ T29] audit: type=1326 audit(2000000041.290:5718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9903 comm="syz.4.1681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c07e0dff9 code=0x7ffc0000 [ 127.975322][ T9906] FAULT_INJECTION: forcing a failure. [ 127.975322][ T9906] name failslab, interval 1, probability 0, space 0, times 0 [ 127.992929][ T9906] CPU: 1 UID: 0 PID: 9906 Comm: syz.0.1682 Not tainted 6.12.0-rc3-syzkaller-00044-g2f87d0916ce0 #0 [ 128.003604][ T9906] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 128.013659][ T9906] Call Trace: [ 128.017070][ T9906] [ 128.019993][ T9906] dump_stack_lvl+0xf2/0x150 [ 128.024652][ T9906] dump_stack+0x15/0x20 [ 128.028804][ T9906] should_fail_ex+0x223/0x230 [ 128.033538][ T9906] ? skb_clone+0x154/0x1f0 [ 128.038034][ T9906] should_failslab+0x8f/0xb0 [ 128.042686][ T9906] kmem_cache_alloc_noprof+0x4c/0x290 [ 128.048060][ T9906] skb_clone+0x154/0x1f0 [ 128.052429][ T9906] __netlink_deliver_tap+0x2bd/0x4c0 [ 128.057718][ T9906] netlink_unicast+0x64a/0x670 [ 128.062568][ T9906] netlink_sendmsg+0x5cc/0x6e0 [ 128.067334][ T9906] ? __pfx_netlink_sendmsg+0x10/0x10 [ 128.072695][ T9906] __sock_sendmsg+0x140/0x180 [ 128.077399][ T9906] ____sys_sendmsg+0x312/0x410 [ 128.082229][ T9906] __sys_sendmsg+0x1d9/0x270 [ 128.086848][ T9906] __x64_sys_sendmsg+0x46/0x50 [ 128.091624][ T9906] x64_sys_call+0x2689/0x2d60 [ 128.096339][ T9906] do_syscall_64+0xc9/0x1c0 [ 128.100839][ T9906] ? clear_bhb_loop+0x55/0xb0 [ 128.105533][ T9906] ? clear_bhb_loop+0x55/0xb0 [ 128.110264][ T9906] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.116403][ T9906] RIP: 0033:0x7f333d09dff9 [ 128.120840][ T9906] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 128.140504][ T9906] RSP: 002b:00007f333bd11038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 128.148906][ T9906] RAX: ffffffffffffffda RBX: 00007f333d255f80 RCX: 00007f333d09dff9 [ 128.156917][ T9906] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000006 [ 128.164927][ T9906] RBP: 00007f333bd11090 R08: 0000000000000000 R09: 0000000000000000 [ 128.172889][ T9906] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 128.180851][ T9906] R13: 0000000000000000 R14: 00007f333d255f80 R15: 00007ffcfd621048 [ 128.188859][ T9906] [ 128.246084][ T9915] siw: device registration error -23 [ 128.298892][ T9920] loop7: detected capacity change from 0 to 16384 [ 128.307528][ T9910] loop4: detected capacity change from 0 to 2048 [ 128.351902][ T9910] Alternate GPT is invalid, using primary GPT. [ 128.358382][ T9910] loop4: p2 p3 p7 [ 128.362452][ T9920] program syz.1.1679 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 128.372057][ T9920] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 128.458689][ T9916] lo speed is unknown, defaulting to 1000 [ 128.485244][ T9920] loop7: detected capacity change from 16384 to 16383 [ 128.493333][ T9914] program syz.3.1686 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 128.505162][ T9914] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 128.550401][ T9935] dvmrp8: entered allmulticast mode [ 128.559215][ T9916] chnl_net:caif_netlink_parms(): no params data found [ 128.585230][ T9928] Invalid logical block size (65472) [ 128.601448][ T9935] dvmrp8: left allmulticast mode [ 128.623659][ T9916] bridge0: port 1(bridge_slave_0) entered blocking state [ 128.630772][ T9916] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.639958][ T9916] bridge_slave_0: entered allmulticast mode [ 128.646894][ T9916] bridge_slave_0: entered promiscuous mode [ 128.655428][ T9916] bridge0: port 2(bridge_slave_1) entered blocking state [ 128.662477][ T9916] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.670130][ T9916] bridge_slave_1: entered allmulticast mode [ 128.676578][ T9916] bridge_slave_1: entered promiscuous mode [ 128.685078][ T9942] lo speed is unknown, defaulting to 1000 [ 128.686888][ T9953] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(12) [ 128.697645][ T9953] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 128.705280][ T9953] vhci_hcd vhci_hcd.0: Device attached [ 128.737161][ T28] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.750183][ T9954] vhci_hcd: connection closed [ 128.750459][ T163] vhci_hcd: stop threads [ 128.759533][ T163] vhci_hcd: release socket [ 128.763983][ T163] vhci_hcd: disconnect device [ 128.801509][ T9916] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 128.836048][ T28] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.848223][ T9959] loop7: detected capacity change from 0 to 16384 [ 128.848661][ T9916] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 128.885921][ T9916] team0: Port device team_slave_0 added [ 128.900858][ T9916] team0: Port device team_slave_1 added [ 128.915240][ T28] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.926322][ T9966] program syz.4.1695 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 128.936072][ T9966] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 128.971096][ T9916] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 128.978110][ T9916] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 129.004050][ T9916] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 129.016260][ T9916] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 129.023216][ T9916] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 129.049259][ T9916] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 129.073761][ T28] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.091924][ T9916] hsr_slave_0: entered promiscuous mode [ 129.099024][ T9916] hsr_slave_1: entered promiscuous mode [ 129.105063][ T9916] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 129.113150][ T9916] Cannot create hsr debugfs directory [ 129.137992][ T9970] program syz.1.1700 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 129.147370][ T9970] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 129.156302][ T28] bridge_slave_1: left allmulticast mode [ 129.161997][ T28] bridge_slave_1: left promiscuous mode [ 129.167815][ T28] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.175282][ T9959] loop7: detected capacity change from 16384 to 16383 [ 129.198216][ T28] bridge_slave_0: left allmulticast mode [ 129.203881][ T28] bridge_slave_0: left promiscuous mode [ 129.209707][ T28] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.235740][ T9966] Invalid logical block size (65472) [ 129.334336][ T28] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 129.353806][ T28] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 129.364494][ T28] bond0 (unregistering): Released all slaves [ 129.373474][ T28] bond1 (unregistering): Released all slaves [ 129.382937][ T9987] netlink: 'syz.0.1707': attribute type 1 has an invalid length. [ 129.402905][ T9987] bond1: entered promiscuous mode [ 129.414918][ T9980] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1704'. [ 129.426693][ T9995] team_slave_1: entered promiscuous mode [ 129.435318][ T9995] team0: Port device team_slave_1 removed [ 129.443246][ T9995] bond1: (slave team_slave_1): making interface the new active one [ 129.452209][ T9995] bond1: (slave team_slave_1): Enslaving as an active interface with an up link [ 129.469745][T10000] dvmrp8: entered allmulticast mode [ 129.475905][ T9993] netlink: 'syz.1.1704': attribute type 10 has an invalid length. [ 129.487560][ T9993] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 129.501290][ T28] hsr_slave_0: left promiscuous mode [ 129.507289][ T28] hsr_slave_1: left promiscuous mode [ 129.513092][ T28] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 129.520544][ T28] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 129.534738][ T28] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 129.542239][ T28] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 129.558029][ T28] veth1_macvtap: left promiscuous mode [ 129.563544][ T28] veth0_macvtap: left promiscuous mode [ 129.569303][ T28] veth1_vlan: left promiscuous mode [ 129.574750][ T28] veth0_vlan: left promiscuous mode [ 129.679611][ T28] team0 (unregistering): Port device team_slave_1 removed [ 129.704656][T10010] loop7: detected capacity change from 0 to 16384 [ 129.711435][ T28] team0 (unregistering): Port device team_slave_0 removed [ 129.722240][T10008] program syz.4.1713 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 129.757276][T10008] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 129.761995][ T9982] dvmrp8: left allmulticast mode [ 129.771224][T10015] program syz.0.1714 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 129.780847][T10015] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 129.865356][T10015] loop7: detected capacity change from 16384 to 16383 [ 129.895291][T10017] Invalid logical block size (65472) [ 129.974915][T10030] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1722'. [ 130.097859][T10041] loop3: detected capacity change from 0 to 128 [ 130.159816][T10044] FAULT_INJECTION: forcing a failure. [ 130.159816][T10044] name failslab, interval 1, probability 0, space 0, times 0 [ 130.172452][T10044] CPU: 1 UID: 0 PID: 10044 Comm: syz.4.1723 Not tainted 6.12.0-rc3-syzkaller-00044-g2f87d0916ce0 #0 [ 130.183289][T10044] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 130.193410][T10044] Call Trace: [ 130.196682][T10044] [ 130.199657][T10044] dump_stack_lvl+0xf2/0x150 [ 130.204256][T10044] dump_stack+0x15/0x20 [ 130.208412][T10044] should_fail_ex+0x223/0x230 [ 130.213111][T10044] ? kstrdup_const+0x3e/0x50 [ 130.217752][T10044] should_failslab+0x8f/0xb0 [ 130.222343][T10044] __kmalloc_node_track_caller_noprof+0xa6/0x380 [ 130.228749][T10044] kstrdup+0x3a/0x80 [ 130.232769][T10044] kstrdup_const+0x3e/0x50 [ 130.237248][T10044] alloc_vfsmnt+0xa9/0x300 [ 130.241668][T10044] clone_mnt+0x45/0x7a0 [ 130.245829][T10044] ? is_subdir+0x79/0x170 [ 130.250159][T10044] copy_tree+0x2df/0x7f0 [ 130.254443][T10044] copy_mnt_ns+0x11e/0x5c0 [ 130.258927][T10044] ? create_new_namespaces+0x3c/0x430 [ 130.264328][T10044] ? kmem_cache_alloc_noprof+0x1a6/0x290 [ 130.270023][T10044] create_new_namespaces+0x89/0x430 [ 130.275312][T10044] ? security_capable+0x81/0x90 [ 130.280263][T10044] unshare_nsproxy_namespaces+0xe6/0x120 [ 130.285968][T10044] ksys_unshare+0x3c9/0x6e0 [ 130.290474][T10044] __x64_sys_unshare+0x1f/0x30 [ 130.295232][T10044] x64_sys_call+0x2c8d/0x2d60 [ 130.299907][T10044] do_syscall_64+0xc9/0x1c0 [ 130.304481][T10044] ? clear_bhb_loop+0x55/0xb0 [ 130.309166][T10044] ? clear_bhb_loop+0x55/0xb0 [ 130.313971][T10044] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.319880][T10044] RIP: 0033:0x7f2c07e0dff9 [ 130.324294][T10044] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 130.343971][T10044] RSP: 002b:00007f2c06a45038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 130.352418][T10044] RAX: ffffffffffffffda RBX: 00007f2c07fc6130 RCX: 00007f2c07e0dff9 [ 130.360527][T10044] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040020000 [ 130.368571][T10044] RBP: 00007f2c06a45090 R08: 0000000000000000 R09: 0000000000000000 [ 130.370696][T10041] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 130.376526][T10044] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 130.376623][T10044] R13: 0000000000000000 R14: 00007f2c07fc6130 R15: 00007fff5300c1b8 [ 130.390762][T10041] ext4 filesystem being mounted at /188/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 130.396540][T10044] [ 130.457413][T10043] loop7: detected capacity change from 0 to 16384 [ 130.478768][ T9916] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 130.487657][ T9916] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 130.498747][ T9916] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 130.507504][T10041] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks [ 130.516412][T10047] program syz.0.1727 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 130.525929][T10047] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 130.528293][ T9916] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 130.588597][ T9916] 8021q: adding VLAN 0 to HW filter on device bond0 [ 130.602251][ T9916] 8021q: adding VLAN 0 to HW filter on device team0 [ 130.613369][ T163] bridge0: port 1(bridge_slave_0) entered blocking state [ 130.620454][ T163] bridge0: port 1(bridge_slave_0) entered forwarding state [ 130.625182][T10047] loop7: detected capacity change from 16384 to 16383 [ 130.631487][ T163] bridge0: port 2(bridge_slave_1) entered blocking state [ 130.641578][ T163] bridge0: port 2(bridge_slave_1) entered forwarding state [ 130.651780][ T7840] EXT4-fs error (device loop3): ext4_readdir:221: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 1024 [ 130.666015][T10049] Invalid logical block size (65472) [ 130.666646][ T7840] EXT4-fs error (device loop3): ext4_readdir:221: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 8192 [ 130.686827][ T7840] EXT4-fs error (device loop3): ext4_empty_dir:3117: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 130.700253][ T7840] EXT4-fs error (device loop3): ext4_readdir:221: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 1024 [ 130.717253][ T7840] EXT4-fs error (device loop3): ext4_readdir:221: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 8192 [ 130.731861][ T7840] EXT4-fs error (device loop3): ext4_empty_dir:3117: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 130.746026][ T7840] EXT4-fs error (device loop3): ext4_readdir:221: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 1024 [ 130.772883][ T9916] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 130.788509][ T7840] EXT4-fs error (device loop3): ext4_readdir:221: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 8192 [ 130.812111][ T7840] EXT4-fs error (device loop3): ext4_empty_dir:3117: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 130.884703][ T7840] EXT4-fs error (device loop3): ext4_readdir:221: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 1024 [ 130.915424][T10066] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1733'. [ 130.947480][ T9916] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 130.958629][T10057] dvmrp8: entered allmulticast mode [ 130.968489][T10057] dvmrp8: left allmulticast mode [ 131.078329][T10086] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(12) [ 131.084955][T10086] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 131.092592][T10086] vhci_hcd vhci_hcd.0: Device attached [ 131.101273][ T9916] veth0_vlan: entered promiscuous mode [ 131.116640][ T9916] veth1_vlan: entered promiscuous mode [ 131.162663][ T9916] veth0_macvtap: entered promiscuous mode [ 131.171616][T10088] loop7: detected capacity change from 0 to 16384 [ 131.199277][ T9916] veth1_macvtap: entered promiscuous mode [ 131.207676][T10089] vhci_hcd: connection closed [ 131.208119][ T4756] vhci_hcd: stop threads [ 131.212604][ T9916] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 131.212794][ T4756] vhci_hcd: release socket [ 131.212803][ T4756] vhci_hcd: disconnect device [ 131.217077][ T9916] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.246951][ T9916] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 131.257380][ T9916] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.267406][ T9916] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 131.278002][ T9916] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.285554][T10099] program syz.0.1738 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 131.287804][ T9916] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 131.297219][T10099] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 131.307387][ T9916] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.308987][ T9916] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 131.358856][ T9916] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 131.369373][ T9916] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.379194][ T9916] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 131.389706][ T9916] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.399699][ T9916] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 131.410211][ T9916] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.420039][ T9916] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 131.430461][ T9916] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.441563][ T9916] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 131.451448][ T9916] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.460206][ T9916] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.468934][ T9916] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.477617][ T9916] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.505387][T10094] loop7: detected capacity change from 16384 to 16383 [ 131.565186][T10099] Invalid logical block size (65472) [ 131.573281][T10111] loop2: detected capacity change from 0 to 1024 [ 131.594054][T10111] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1684'. [ 131.603123][T10111] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 131.610541][T10111] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 131.618371][ T7840] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 131.633101][T10111] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 131.640571][T10111] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 131.696200][ T29] kauditd_printk_skb: 239 callbacks suppressed [ 131.696214][ T29] audit: type=1400 audit(2000000045.280:5956): avc: denied { audit_write } for pid=10109 comm="syz.2.1684" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 131.723674][ T29] audit: type=1107 audit(2000000045.280:5957): pid=10109 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 131.741155][ T3382] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.772032][T10118] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 131.800440][ T29] audit: type=1326 audit(2000000045.380:5958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10127 comm="syz.4.1748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c07e0dff9 code=0x7ffc0000 [ 131.827602][ T29] audit: type=1326 audit(2000000045.380:5959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10127 comm="syz.4.1748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f2c07e0dff9 code=0x7ffc0000 [ 131.846567][T10126] dvmrp8: entered allmulticast mode [ 131.859431][T10126] dvmrp8: left allmulticast mode [ 131.870600][ T3382] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.882749][ T29] audit: type=1326 audit(2000000045.460:5960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10127 comm="syz.4.1748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c07e0dff9 code=0x7ffc0000 [ 131.893075][T10121] lo speed is unknown, defaulting to 1000 [ 131.906392][ T29] audit: type=1326 audit(2000000045.460:5961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10127 comm="syz.4.1748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c07e0dff9 code=0x7ffc0000 [ 131.949806][T10140] netlink: 168 bytes leftover after parsing attributes in process `syz.4.1749'. [ 131.972437][ T3382] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.987238][T10121] chnl_net:caif_netlink_parms(): no params data found [ 132.025483][T10121] bridge0: port 1(bridge_slave_0) entered blocking state [ 132.032612][T10121] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.039896][T10121] bridge_slave_0: entered allmulticast mode [ 132.046770][T10121] bridge_slave_0: entered promiscuous mode [ 132.053936][T10121] bridge0: port 2(bridge_slave_1) entered blocking state [ 132.061114][T10121] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.072141][T10121] bridge_slave_1: entered allmulticast mode [ 132.078730][T10121] bridge_slave_1: entered promiscuous mode [ 132.080072][ T29] audit: type=1326 audit(2000000045.670:5962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10152 comm="syz.4.1753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c07e0dff9 code=0x7ffc0000 [ 132.108142][ T29] audit: type=1326 audit(2000000045.670:5963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10152 comm="syz.4.1753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c07e0dff9 code=0x7ffc0000 [ 132.131641][ T29] audit: type=1326 audit(2000000045.670:5964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10152 comm="syz.4.1753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7f2c07e0dff9 code=0x7ffc0000 [ 132.155233][ T29] audit: type=1326 audit(2000000045.670:5965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10152 comm="syz.4.1753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c07e0dff9 code=0x7ffc0000 [ 132.187994][ T3382] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.210464][T10121] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 132.232659][T10121] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 132.274282][T10121] team0: Port device team_slave_0 added [ 132.289681][T10121] team0: Port device team_slave_1 added [ 132.314591][T10121] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 132.321615][T10121] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 132.347542][T10121] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 132.366285][T10161] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1756'. [ 132.376168][T10161] netlink: 'syz.0.1756': attribute type 10 has an invalid length. [ 132.388391][T10161] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 132.397231][T10121] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 132.404165][T10121] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 132.430099][T10121] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 132.444693][T10159] loop7: detected capacity change from 0 to 16384 [ 132.458752][ T3382] team0: left allmulticast mode [ 132.463642][ T3382] team_slave_0: left allmulticast mode [ 132.469165][ T3382] team_slave_1: left allmulticast mode [ 132.474759][ T3382] bridge0: port 3(team0) entered disabled state [ 132.483035][T10156] program syz.4.1755 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 132.483076][ T3382] bridge_slave_1: left allmulticast mode [ 132.498084][ T3382] bridge_slave_1: left promiscuous mode [ 132.503839][ T3382] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.505449][T10156] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 132.519831][ T3382] bridge_slave_0: left allmulticast mode [ 132.525576][ T3382] bridge_slave_0: left promiscuous mode [ 132.531235][ T3382] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.538986][T10165] program syz.1.1757 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 132.548420][T10165] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 132.656365][T10176] syz.4.1760[10176] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 132.656493][T10176] syz.4.1760[10176] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 132.668339][T10176] syz.4.1760[10176] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 132.683769][T10176] syz.4.1760: attempt to access beyond end of device [ 132.683769][T10176] loop128: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 132.685570][T10165] loop7: detected capacity change from 16384 to 16383 [ 132.733260][ T3382] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 132.744418][ T3382] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 132.754423][ T3382] bond0 (unregistering): Released all slaves [ 132.770219][T10178] dvmrp8: entered allmulticast mode [ 132.775171][T10173] Invalid logical block size (65472) [ 132.775612][T10180] netlink: 168 bytes leftover after parsing attributes in process `syz.4.1761'. [ 132.791363][T10181] dvmrp8: left allmulticast mode [ 132.840427][T10183] loop4: detected capacity change from 0 to 512 [ 132.855525][T10183] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 132.870017][T10183] EXT4-fs (loop4): 1 truncate cleaned up [ 132.877211][T10183] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 132.896346][T10121] hsr_slave_0: entered promiscuous mode [ 132.919757][T10121] hsr_slave_1: entered promiscuous mode [ 132.927443][T10121] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 132.935000][T10121] Cannot create hsr debugfs directory [ 132.942836][ T3382] hsr_slave_0: left promiscuous mode [ 132.958611][ T3382] hsr_slave_1: left promiscuous mode [ 132.964500][T10187] siw: device registration error -23 [ 132.970132][ T3382] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 132.977613][ T3382] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 132.990892][ T3382] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 132.998356][ T3382] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 133.015891][ T3382] veth1_vlan: left promiscuous mode [ 133.021253][ T3382] veth0_vlan: left promiscuous mode [ 133.049025][T10191] Process accounting resumed [ 133.103393][ T3382] team_slave_1 (unregistering): left promiscuous mode [ 133.112595][ T3382] team0 (unregistering): Port device team_slave_1 removed [ 133.122543][ T3382] team_slave_0 (unregistering): left promiscuous mode [ 133.130479][ T3382] team0 (unregistering): Port device team_slave_0 removed [ 133.465191][T10212] loop7: detected capacity change from 0 to 16384 [ 133.522671][T10213] program syz.0.1770 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 133.532053][T10213] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 133.572103][T10121] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 133.589773][T10121] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 133.601301][T10121] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 133.614027][T10121] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 133.668549][T10121] 8021q: adding VLAN 0 to HW filter on device bond0 [ 133.675394][T10213] loop7: detected capacity change from 16384 to 16383 [ 133.702062][T10121] 8021q: adding VLAN 0 to HW filter on device team0 [ 133.723462][ T3382] bridge0: port 1(bridge_slave_0) entered blocking state [ 133.730657][ T3382] bridge0: port 1(bridge_slave_0) entered forwarding state [ 133.743433][ T3382] bridge0: port 2(bridge_slave_1) entered blocking state [ 133.750531][ T3382] bridge0: port 2(bridge_slave_1) entered forwarding state [ 133.758258][T10214] Invalid logical block size (65472) [ 133.886810][T10121] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 133.897263][T10121] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 134.019968][T10223] loop7: detected capacity change from 0 to 16384 [ 134.028630][T10121] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 134.077660][T10230] program syz.0.1774 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 134.087200][T10230] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 134.134980][T10121] veth0_vlan: entered promiscuous mode [ 134.149252][T10121] veth1_vlan: entered promiscuous mode [ 134.173338][T10121] veth0_macvtap: entered promiscuous mode [ 134.183031][T10121] veth1_macvtap: entered promiscuous mode [ 134.192279][T10121] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 134.202754][T10121] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.212651][T10121] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 134.223118][T10121] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.232958][T10121] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 134.243423][T10121] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.253338][T10230] loop7: detected capacity change from 16384 to 16383 [ 134.254722][T10121] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 134.270429][T10121] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 134.280910][T10121] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.290767][T10121] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 134.301287][T10121] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.311106][T10121] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 134.321543][T10121] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.341875][T10121] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 134.357049][T10247] program syz.1.1785 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 134.366523][T10247] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 134.376532][T10121] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.385337][T10121] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.394099][T10121] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.402821][T10121] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.411612][T10242] Invalid logical block size (65472) [ 134.619407][T10258] siw: device registration error -23 [ 134.755660][T10253] lo speed is unknown, defaulting to 1000 [ 134.786530][T10267] loop7: detected capacity change from 0 to 16384 [ 134.844483][T10269] program syz.1.1784 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 134.854011][T10269] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 134.955198][T10269] loop7: detected capacity change from 16384 to 16383 [ 134.999899][T10271] ================================================================== [ 135.008018][T10271] BUG: KCSAN: data-race in has_bh_in_lru / invalidate_bh_lrus_cpu [ 135.015836][T10271] [ 135.018150][T10271] write to 0xffff888237d2bb10 of 8 bytes by task 979 on cpu 1: [ 135.025685][T10271] invalidate_bh_lrus_cpu+0x85/0xc0 [ 135.030896][T10271] lru_add_drain_per_cpu+0x62/0x80 [ 135.036009][T10271] process_scheduled_works+0x483/0x9a0 [ 135.041909][T10271] worker_thread+0x51d/0x6f0 [ 135.046491][T10271] kthread+0x1d1/0x210 [ 135.050560][T10271] ret_from_fork+0x4b/0x60 [ 135.054975][T10271] ret_from_fork_asm+0x1a/0x30 [ 135.059827][T10271] [ 135.062140][T10271] read to 0xffff888237d2bb10 of 8 bytes by task 10271 on cpu 0: [ 135.069769][T10271] has_bh_in_lru+0x35/0x1f0 [ 135.074272][T10271] smp_call_function_many_cond+0x2d5/0xc20 [ 135.080078][T10271] on_each_cpu_cond_mask+0x3c/0x90 [ 135.085186][T10271] invalidate_bh_lrus+0x2a/0x30 [ 135.090034][T10271] invalidate_bdev+0x42/0x70 [ 135.094625][T10271] lo_ioctl+0xb38/0x11c0 [ 135.098873][T10271] blkdev_ioctl+0x359/0x450 [ 135.103369][T10271] __se_sys_ioctl+0xcd/0x140 [ 135.107968][T10271] __x64_sys_ioctl+0x43/0x50 [ 135.112555][T10271] x64_sys_call+0x15cc/0x2d60 [ 135.117232][T10271] do_syscall_64+0xc9/0x1c0 [ 135.121726][T10271] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.127622][T10271] [ 135.129933][T10271] value changed: 0x0000000000000000 -> 0xffff88811f0a5c30 [ 135.137462][T10271] [ 135.139775][T10271] Reported by Kernel Concurrency Sanitizer on: [ 135.145918][T10271] CPU: 0 UID: 0 PID: 10271 Comm: syz.1.1784 Not tainted 6.12.0-rc3-syzkaller-00044-g2f87d0916ce0 #0 [ 135.156681][T10271] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 135.166730][T10271] ================================================================== [ 135.205304][T10271] Invalid logical block size (65472)