last executing test programs: 4.114532838s ago: executing program 1 (id=829): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/13, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) lsetxattr$security_selinux(&(0x7f0000000000)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000940), &(0x7f0000000980)='system_u:object_r:semanage_exec_t:s0\x00', 0x25, 0x1) 4.113809098s ago: executing program 1 (id=830): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f00000000c0), 0x10) sendmsg$can_bcm(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x5, 0x0, 0x1, {0x0, 0xea60}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "3fae8a9ad451a727"}}, 0x48}}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000b40)='neigh_create\x00', r4}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x55, 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x18000000000002a0, 0xe06, 0x1000000, &(0x7f0000000100)="b9ff030f6044238cb89e14f088ca1bff43052f002000636777fbac141443e000000d62079f4b4d2f87e56dca6aab845013f2325f1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0xfe, 0x60000000}, 0x2c) sendmsg$can_bcm(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="050000000808"], 0x80}}, 0x0) sendmsg$can_bcm(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={0x5, 0x0, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @can={{}, 0x1, 0x0, 0x0, 0x0, "3acf1ec7ae70bb24"}}, 0x48}}, 0x40800) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x10, &(0x7f0000000340)={[{@errors_remount}, {@dioread_lock}, {}]}, 0xfe, 0x44f, &(0x7f0000000d80)="$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") r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = syz_open_dev$mouse(&(0x7f0000000380), 0x6, 0x800201) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r7, &(0x7f0000000780)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000440)={&(0x7f0000000580)={0x200, r8, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKMODES_OURS={0xb4, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0xb0, 0x3, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, '@%$\xf5:+&\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'bsddf'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '/+@=\x00'}]}, {0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'kfree\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x10, 0x2, 'dioread_lock'}, @ETHTOOL_A_BITSET_BIT_NAME={0x10, 0x2, 'dioread_lock'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x133f}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3ff}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'bsddf'}, @ETHTOOL_A_BITSET_BIT_NAME={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'bsddf'}]}]}]}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0xa2}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0xfffffff3}, @ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x1}, @ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0x5}, @ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x2050be5a26942846}, @ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0xf8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x19, 0x4, "a83ac6329ccf98f5b1441b38eae60af39c67ba66c6"}, @ETHTOOL_A_BITSET_MASK={0x73, 0x5, "98f753d751e0c8f44d0c059692a48e16fa5939313b3dc972374cb385038e3208c7e80a0a4f96480840c22bba91710689b55d4c92ce45a89dcd73c13dafde06e9978e8c6a4303c913c03837bffdfd87ee270f5241f4d98ffdcaa88bc23c7ffbca3b199d03543d5f61b907af4ff9363d"}, @ETHTOOL_A_BITSET_VALUE={0x5c, 0x4, "9ed3a139b7ff267447b37a788da89a71edac48f0f2c7f2b3f051c9b6de28763bbd958bafb125c604922c4b8620b0347ae5b762fbf0509cc4890142ed7bf19ad0f396503ae751b9723352b0eba8f7b96320ec32550c192516"}]}]}, 0x200}, 0x1, 0x0, 0x0, 0x4008000}, 0x804) r9 = socket(0x1, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="48000000100001047fff000000000000000000008abe74ddc964d913f1cedd1270637865dea6cde5fb75840f150b15cb5f0a9d3c044bee8eaad98c5cbca678450820c09dc73f4ab729f9ca", @ANYRES32=r10, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=r10, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) 3.24607231s ago: executing program 1 (id=837): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/bus/input/devices\x00', 0x0, 0x0) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000040)) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @empty=0x1000000, @broadcast}, @timestamp_reply={0x11, 0xe0, 0x0, 0x0, 0x0, 0xd29, 0x100000}}}}}, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x101001) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000800)={0x53, 0x4bf29a7d727e30c9, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000900)="aeef12c9e843", 0x0, 0x0, 0xc, 0x0, 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) preadv(r2, &(0x7f00000015c0)=[{&(0x7f00000002c0)=""/4096, 0x1000}], 0x1, 0xf0, 0x67) sendmsg$TIPC_NL_MON_GET(r1, &(0x7f0000000500)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000005c0)={0x0, 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xb, 0x5, 0x408, 0xcf, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x10) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000800)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x35288}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x40}}, 0x4000080) 3.24452815s ago: executing program 1 (id=839): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000210081044e81f782db44b90402000000e8fe55a1180015000600142603600e1209000a0000000401a80016000a0013", 0x33}], 0x1}, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) dup(r1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$TCSETSW2(r3, 0x5425, 0x0) 3.076563561s ago: executing program 1 (id=847): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x0) recvmsg(r1, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="364000002600913e"], 0xfe33) 2.821740011s ago: executing program 1 (id=853): socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) msync(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x4b0}}, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000080000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000040008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000500)={'veth1_to_team\x00'}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000400)={'ip_vti0\x00', &(0x7f0000000640)={'ip_vti0\x00', 0x0, 0x700, 0x8000, 0x2c7b, 0xbbe2, {{0x1f, 0x4, 0x2, 0x0, 0x7c, 0x65, 0x0, 0x6, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x43}, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@rr={0x7, 0x1f, 0x97, [@broadcast, @broadcast, @multicast1, @remote, @loopback, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x28}]}, @lsrr={0x83, 0x7, 0xfe, [@initdev={0xac, 0x1e, 0x1, 0x0}]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x17, 0xe9, [@remote, @broadcast, @rand_addr=0x64010102, @loopback, @multicast1]}, @timestamp_addr={0x44, 0x24, 0x39, 0x1, 0x1, [{@local, 0xfff}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1000}, {@multicast2, 0x4e2}, {@dev={0xac, 0x14, 0x14, 0x41}, 0x4}]}, @end]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000580)={'erspan0\x00', &(0x7f0000000700)={'sit0\x00', 0x0, 0x40, 0x40, 0x1fd, 0x4, {{0x25, 0x4, 0x0, 0x3e, 0x94, 0x66, 0x0, 0xb6, 0x2f, 0x0, @remote, @multicast1, {[@timestamp_prespec={0x44, 0x54, 0x3d, 0x3, 0x0, [{@remote, 0x3}, {@multicast2}, {@broadcast, 0x101}, {@rand_addr=0x64010102, 0x5}, {@rand_addr=0x64010102, 0x1}, {@empty, 0x7fff}, {@multicast2, 0x4cf0b960}, {@dev={0xac, 0x14, 0x14, 0x19}}, {@loopback, 0x8}, {@broadcast, 0x8001}]}, @ssrr={0x89, 0x7, 0x2a, [@initdev={0xac, 0x1e, 0x0, 0x0}]}, @cipso={0x86, 0x13, 0x2, [{0x0, 0xd, "6cf6271f0a7e1e5a2ca93a"}]}, @generic={0x7, 0xd, "11c58a08c67bf8ffd4dae5"}, @noop, @end]}}}}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@ipv6_newnexthop={0x34, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x9}, @NHA_OIF={0x8}, @NHA_ENCAP={0xc, 0x8, 0x0, 0x1, @ILA_ATTR_HOOK_TYPE={0x5}}]}, 0x34}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) r6 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r6, &(0x7f0000000000)={0x1d, r5}, 0x10) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0xfff2, 0x2}}}, 0x24}}, 0x0) 2.129642974s ago: executing program 4 (id=860): prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000031c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f0000000500)={&(0x7f00000000c0)=@id={0x1e, 0x3, 0x2, {0x4e23}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x4040080) 2.098332444s ago: executing program 4 (id=861): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000380)=@framed, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r0}, 0x18) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x2, &(0x7f0000000b40)=ANY=[@ANYRES32=0x0, @ANYBLOB="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", @ANYRES32], 0xff, 0x2e7, &(0x7f0000000280)="$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") 2.069631793s ago: executing program 4 (id=862): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x0, 0xb, 0x0, 0x0, 0x7995}, 0x8, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) 2.013190254s ago: executing program 4 (id=863): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002080)={&(0x7f0000000300)='kfree\x00', r0}, 0x10) r1 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, &(0x7f0000000f00)={0x0, 0x0, 0x2, 0x1}, 0x8) 2.012890964s ago: executing program 4 (id=864): r0 = gettid() r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x29, 0x4, 0x70bd29, 0x25dfdbfb, {0x1a}, [@typed={0x8, 0x11c, 0x0, 0x0, @ipv4=@remote}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400d0}, 0x4000080) r2 = timerfd_create(0x0, 0x0) read(r2, &(0x7f0000000240)=""/123, 0x7b) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 1.257339346s ago: executing program 3 (id=880): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000600)='kmem_cache_free\x00', r1}, 0x18) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x52e, &(0x7f0000000640)="$eJzs3cFvI1cZAPBvnDib7GabFDhApZZCi7IVrJ00tI04lCIhOFVClPsSEieK4sRR7LSbqILsX4CEECBxggsXJP4AJLQSF44IqRKcQSoCIdiCBAfoINvjJDjjxFuceNf5/aTZeW/GM9/3vHnjGc/TOIAr69mIeC0i3k/T9IWImMmWF7IpDttT83XvPXh7pTklkaZv/DWJJFvW2VeSzW9km01GxFe/HPGN5HTc+v7B5nK1WtnN6uXG1k65vn9we2Nreb2yXtleXFx4eemVpZeW5gfSzpsR8eoX//i9b//kS6/+4jNv/eHOn299s5nWdLb+ZDse0vhZK9tNL16b7Npg9wMGexQ121PsVKb62+beBeYDAEBvzXP8D0XEJyPihZiJsbNPZwEAAIDHUPr56fh3EpHmm+ixHAAAAHiMFFpjYJNCKRsLMB2FQqnUHsP7kbheqNbqjU+v1fa2V9tjZWejWFjbqFbms7HCs1FMmvWFVvm4/mJXfTEinoyI785MteqllVp1ddhffgAAAMAVcaPr+v8fM+3rfwAAAGDEzA47AQAAAODCuf4HAACA0ef6HwAAAEbaV15/vTmlnd+/Xn1zf2+z9ubt1Up9s7S1t1Jaqe3ulNZrtfXWM/u2zttftVbb+Wxs790tNyr1Rrm+f3Bnq7a33bizEZOX0iAAAADglCc/fv93SUQcfm6qNTVNDDsp4FKMH5WSbJ7T+3//RHv+7iUlBVyKsT5e8+61/OXOE+DxNt69oEdfB0ZPcdgJAEOXnLO+5+CdX2fzTww2HwAAYPDmPpZ///+864GIw8IlpAdcIJ0Yrq6u+//pzLASAS5d6/5/vwN5nCzASCn2NQIQGGX/9/3/c6XpQyUEAAAM3HRrSgql7Ou96SgUSqWIm62fBSgmaxvVynxEPBERv50pXmvWF1pbJn2MEQAAAAAAAAAAAAAAAAAAAAAAAAAAovVU7iRSAAAAYKRFFP6U/LL9LP+5meenu78fmEj+1fpJ4ImIeOuHb3z/7nKjsbvQXP63o+WNH2TLXxzGNxgAAABAt851emv+z2FnAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMCoee/B2yudqY+XTw0q7l++EBGzefHHY7I1n4xiRFz/exLjJ7ZLImJsAPEP70XER/PiJ820jkLmxR/Em3BO/JjN3oW8+DcGEB+usvvN489ref2vEM+25vn9bzzif+ofVO/jXxwd/8Z69P+bfcZ46p2flXvGvxfx1Hj+8acTP+kR/7k+43/9awcHvdalP4qY63z+tI54JyMcl8qNrZ1yff/g9sbW8nplvbK9uLjw8tIrSy8tzZfXNqqV7N/cGN95+ufvn9X+67mff0mWTe/2P5+zv7zPpP+8c/fBhzuVw9Pxbz2XE/9XP85ecTp+IYvzqazcXD/XKR+2yyc989PfPHNW+1eP2198mP//W7122u1UR3m63z8dAOAC1PcPNper1cruyBaaV+mPQBoKj2DhWwPdYZqmabNP5ay6HxH97CeJAbe0kJ/PcaHnEWDYRyYAAGDQjk/6h50JAAAAAAAAAAAAAAAAAAAAXF2X8ZS17pjHj0BOBvEIbQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAgfhvAAAA//89e9P5") (fail_nth: 2) 1.189310276s ago: executing program 4 (id=882): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000002700)=@base={0xb, 0x8, 0x10001, 0x9, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x98, 0x1, 0x0, 0x0, 0x0, 0x2, 0x80088, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_config_ext={0x3, 0x12}, 0x8042, 0x0, 0x21b, 0x0, 0x2, 0xfffffffe, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_RESET(r2, 0x2403, 0x9) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000001c0)='sched_process_wait\x00', r3}, 0x10) r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r4}, 0x8) close(r5) bpf$BPF_GET_MAP_INFO(0x22, 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000680)={r5, 0x0, 0x0}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)={0x34, r6, 0x1, 0x0, 0x0, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f0000000040)={{0x1, 0x3, 0x1, 0x3, 0x4}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), r1) sendmsg$TIPC_NL_LINK_SET(r1, &(0x7f0000000500)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000cc0)={0x34c, r8, 0x300, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xfffff2db}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x80}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xb504}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}]}, @TIPC_NLA_NODE={0xa4, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x46, 0x4, {'gcm(aes)\x00', 0x1e, "12e6699a53c751b3e95b06229e344430e9c8aa991d05dbaa0370e521ec44"}}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xba7c}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7f}, @TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "8669ccd8da72a55a53ad8b256a74e035032ff8394b"}}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_LINK={0x8c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_SOCK={0xc8, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x63e4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7f}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xd20e}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x26b196f2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3ff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x292}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffff}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xad}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}]}, @TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_MEDIA={0xd8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2020}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5704}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x800}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xdb3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_MEDIA_PROP={0x4}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe5}]}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7fff}]}]}, 0x34c}, 0x1, 0x0, 0x0, 0x11}, 0x4000) connect$pppoe(0xffffffffffffffff, &(0x7f00000000c0)={0x18, 0x0, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x18}, 'vcan0\x00'}}, 0x1e) syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') 1.024233677s ago: executing program 3 (id=883): prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000031c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f0000000500)={&(0x7f00000000c0)=@id={0x1e, 0x3, 0x2, {0x4e23}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x4040080) 1.023462656s ago: executing program 3 (id=884): bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000dfff000000000900000000000000d4a0da65f6c6a2ada0b42f99381141639694836cebe822bb71523aa4251145fabe5d0ef716c7b57216bdaf1d52e10ca9dee43603e02a07fe571ebdbad2fd123a0834211c00"/112], 0x48) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='signal_generate\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0x8000000000000000}, 0x18) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)={0x28, r3, 0x301, 0x0, 0x20000000, {{}, {@val={0x8, 0x7}, @void, @val={0xc, 0x99, {0xfffffffe, 0x14}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x48045}, 0x20004000) 985.058667ms ago: executing program 3 (id=885): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x0, 0xb, 0x0, 0x0, 0x7995}, 0x8, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) 971.429667ms ago: executing program 3 (id=886): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0900000004000000e27f00000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000efc878862634b27f78584b71a50a2b00"/28], 0x48) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) readv(r1, &(0x7f00000001c0)=[{&(0x7f0000001400)=""/227, 0x10}], 0x4) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='stack\x00') r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000f"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) preadv2(r2, &(0x7f0000000380)=[{&(0x7f0000000180)=""/142, 0x8e}], 0x1, 0x9e2, 0x0, 0x0) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) bpf$PROG_LOAD(0x5, &(0x7f0000003000)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0xfffffcc8, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r6}, 0x10) set_tid_address(0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$IP_SET_OP_GET_BYNAME(r5, 0x1, 0x53, &(0x7f0000000000)={0x6, 0x7, 'syz0\x00'}, &(0x7f0000000340)=0x28) sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x3, 0x0, 0x0, {0x3}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}]}], {0x14}}, 0x90}}, 0x0) 849.685547ms ago: executing program 0 (id=890): r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r0, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) socket$netlink(0x10, 0x3, 0xb) 832.506227ms ago: executing program 0 (id=891): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000300)='./file1\x00', 0x10, &(0x7f0000000680), 0x1, 0x254, &(0x7f00000006c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) pwritev2(r0, &(0x7f0000000000)=[{&(0x7f0000000080)}], 0x1, 0x6e45, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x14a) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000001400000000000000ff000000850000000e000000850000000700000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) fallocate(r1, 0x20, 0x0, 0x8000) 727.582877ms ago: executing program 0 (id=893): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@delchain={0x23, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9}, {0x10, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_FLAGS_MASK={0x8, 0x30, 0x7fff}]}}]}, 0x3c}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) r4 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x2) r5 = dup(r4) ioctl$USBDEVFS_CONTROL(r5, 0xc0185500, &(0x7f0000000080)={0x0, 0x1, 0x1, 0x4002, 0x0, 0x5, 0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r1}, 0x18) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[], 0x58}}, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="2200e2bdda", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r7}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000700)={{r6}, &(0x7f0000000680), &(0x7f00000006c0)='%+9llu \x00'}, 0x20) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x418484, &(0x7f0000000440), 0x1, 0x775, &(0x7f0000001180)="$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") r8 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r9 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r9, 0x0) fallocate(r8, 0x0, 0x0, 0x1000f4) r10 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) sendmsg$nl_route_sched(r10, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000a00)=@newtaction={0x88c, 0x30, 0x12f, 0x4000, 0x0, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x7c3, 0x2, 0x3, 0xffffff81, 0x10, 0xc, 0x2, 0x3, 0x40, 0x200, 0x8, 0x9, 0x6, 0x1, 0xaa21, 0x8, 0xa, 0x6, 0x200, 0x1, 0x4, 0xcc37, 0x5, 0xb5, 0x649f, 0x4, 0x0, 0x4, 0xfb1, 0x72a4, 0xd, 0x7fff, 0x5, 0x3, 0x0, 0x3, 0x7, 0x28d, 0x4, 0xc, 0x0, 0xaf, 0x1, 0x6, 0x5, 0xfffffffd, 0x5, 0x80, 0xe, 0x2, 0x7, 0x6, 0x7, 0x1991, 0x8, 0xfffffe29, 0x5, 0x3, 0x101, 0xfff, 0x4, 0x5, 0x8000, 0x4, 0x7, 0x3, 0x0, 0xfffffff3, 0x1, 0x4, 0x80000001, 0x2, 0x3, 0x5, 0x101, 0x1, 0xfffffffc, 0x6, 0xfffffffb, 0x200, 0x1, 0x7329, 0x6, 0x3, 0x100, 0x2, 0x3, 0x6d3, 0x224, 0x7ff, 0x0, 0x6, 0x8, 0xfffff001, 0x6, 0x7ed8, 0x3, 0xffff, 0x0, 0x5, 0x249, 0x5, 0x2fbf, 0x2, 0x8000, 0x7, 0x25fe9fd5, 0x1, 0x9, 0x1, 0xe, 0x9, 0x0, 0x3, 0x4f, 0xffffffff, 0x8, 0x1, 0x119203c5, 0xd0, 0x7, 0x80000001, 0x3226, 0x8, 0x3, 0x4, 0xc64f, 0xffffff6d, 0x5, 0x6, 0x6, 0xfffffff7, 0x6, 0x7, 0x5, 0xc, 0xe, 0x7, 0x200, 0x60459141, 0x1, 0x5, 0x6, 0x84, 0x0, 0x1, 0x5, 0x6, 0x29dc, 0x0, 0x2d5, 0x7, 0xfffffffa, 0x1000, 0x6, 0x94, 0x15a, 0x4, 0x6, 0x2, 0x2, 0x2, 0x4, 0xfff, 0x5, 0x1, 0x3, 0x3, 0x80, 0x7a5b054a, 0x8, 0xffffff80, 0x4b1, 0xfff, 0x3, 0xb, 0x8, 0x3, 0x4, 0x2, 0x6, 0xf, 0x2, 0x7, 0x1, 0x77, 0x9, 0x274d, 0x6, 0x40, 0xfffffffe, 0xb, 0x7, 0x1, 0x9ab, 0x7, 0xffffffc0, 0x200, 0x8, 0x3c, 0x2c7, 0x7, 0x8, 0x4, 0x0, 0x99f, 0x5, 0x800, 0x6, 0x31e1, 0x4, 0x4, 0xb, 0x7ff, 0x1e, 0x3, 0xe49, 0x56, 0x9, 0x1, 0x6, 0x2, 0x6a1c, 0x9, 0x8, 0x4dbda2da, 0x7fff, 0x5, 0x5, 0x0, 0x7, 0x8, 0x7fff, 0xed, 0x7fff, 0x1000, 0xcbe, 0x7ff, 0x6, 0x8, 0xb, 0xff, 0x5, 0x0, 0x7, 0x9, 0x0, 0x8, 0x5, 0x4, 0xfffffffd, 0x2, 0xeffe, 0xef4, 0xfffffffa]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x6, 0x3a40da20, 0x9, 0x6, 0x4, 0x8000, 0x7fffffff, 0x2, 0x1, 0x7fff, 0x86, 0x10000, 0x2, 0x40, 0x2, 0x99d, 0x6, 0xffffff92, 0xe9c, 0x3ff, 0x3, 0x10001, 0xa, 0xfffff000, 0x7f, 0x5, 0x0, 0x81, 0x6f0, 0x18e, 0x8, 0x4, 0x3, 0x4, 0x2, 0xffffffff, 0x0, 0x80000000, 0x3, 0x9, 0x10000, 0x2, 0xd, 0x3, 0x5, 0x1, 0x4, 0x8, 0x7, 0x2, 0xd92b, 0x7fffffff, 0x3, 0x90, 0xc0, 0x5b, 0x1, 0x48000, 0x40, 0x5, 0x1000, 0x3, 0x10, 0x0, 0x5, 0x4, 0x6, 0x100, 0xf3, 0x1, 0xa92, 0x0, 0x6, 0x7, 0x0, 0x8, 0x8, 0x10000, 0x3, 0x3, 0x0, 0xa, 0x5, 0x1, 0xee7e, 0x800, 0xd1, 0x7fff, 0x1, 0x4, 0x5, 0x4, 0xffffff89, 0x7, 0xfffffff3, 0x2, 0x2, 0x9, 0x5, 0x2, 0x101, 0x7fffffff, 0xfffff001, 0x64, 0x4, 0xffffffff, 0x5, 0x9, 0x1, 0x0, 0xb3e, 0x8, 0x3, 0x401, 0x401, 0xb, 0x8, 0x2, 0xb, 0x0, 0x0, 0x9, 0xffffffff, 0x25f, 0x7, 0x5, 0x0, 0x9, 0xfffffff9, 0x3, 0xe2, 0x8, 0x1, 0x8, 0x9, 0x0, 0x9, 0x2, 0x1, 0x9, 0x80, 0x5, 0xd3c3, 0x5, 0x2, 0x1, 0x472a8800, 0xc, 0xfffffff0, 0xfffffff8, 0x9, 0x8, 0xfffffffc, 0x9, 0x5, 0x9, 0x5, 0x6, 0x6, 0x7, 0x87f, 0x59, 0x4fedcacd, 0x1, 0x4, 0x7f, 0x2, 0x7, 0x5, 0xfff, 0x3828, 0x0, 0x1, 0x7, 0x401, 0x7f, 0x4, 0x7, 0x2120, 0xfffffffb, 0x80, 0x3, 0xdbff, 0x52b6, 0xfffffffa, 0x49, 0x70, 0x0, 0xe1, 0x401, 0x631, 0x101, 0x3ff, 0x101, 0x0, 0x7fff, 0x80000000, 0x3, 0xfffffff7, 0x3, 0x1, 0x7514, 0x7, 0x3, 0x1, 0x4, 0x2, 0x9, 0x4, 0x10000, 0x3ff, 0x0, 0x100, 0x7ef2, 0x0, 0x1, 0xe, 0xd, 0x4, 0x6, 0x8, 0x4, 0x10001, 0x6, 0x400, 0x436, 0x3, 0x202, 0x0, 0xffff76a6, 0x0, 0xbc, 0xa5, 0x0, 0x6, 0x7, 0x1, 0x81, 0x3, 0x2, 0x3, 0x4, 0x6, 0x2445c87b, 0x6, 0xd, 0x9, 0x2, 0x10, 0x4, 0x7, 0x57, 0x5, 0xd, 0x1000, 0x3]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x400, 0x8, 0x3, 0x7b2, 0x400, {0x1, 0x2, 0x8, 0x624, 0x0, 0xfffffff8}, {0x9, 0x2, 0x7, 0x7ff, 0xff01, 0x4}, 0x6, 0x4, 0x923}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x88c}}, 0x20000800) io_setup(0x5ff, &(0x7f0000000040)=0x0) io_submit(r11, 0x2, &(0x7f0000001d00)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r9, &(0x7f0000000000)="96", 0xffffff20, 0x0, 0x0, 0x0, r9}, &(0x7f0000000740)={0x0, 0x0, 0x41, 0x3, 0x0, r8, 0x0, 0x0, 0xffffffffffffffff}]) 727.329558ms ago: executing program 3 (id=894): syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000040)='./file2\x00', 0x101080e, &(0x7f00000001c0)=ANY=[@ANYBLOB="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", @ANYRES16, @ANYRESOCT], 0x1, 0x67e, &(0x7f0000001600)="$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") bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000580)='kmem_cache_free\x00', r0}, 0x10) r1 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000268000/0x4000)=nil, 0x4000, 0x1000002, 0x4016012, r1, 0x0) 635.505618ms ago: executing program 2 (id=895): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='signal_generate\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0x8000000000000000}, 0x18) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)={0x28, r3, 0x301, 0x0, 0x20000000, {{}, {@val={0x8, 0x7}, @void, @val={0xc, 0x99, {0xfffffffe, 0x14}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x48045}, 0x20004000) 512.155858ms ago: executing program 2 (id=896): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{}, &(0x7f00000001c0), &(0x7f0000000300)}, 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0xa1ff) 411.902449ms ago: executing program 2 (id=897): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x0, 0xb, 0x0, 0x0, 0x7995}, 0x8, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) 411.528559ms ago: executing program 2 (id=898): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000210081044e81f782db44b90402000000e8fe55a1180015000600142603600e1209000a0000000401a80016000a0013", 0x33}], 0x1}, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) dup(r1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$TCSETSW2(r3, 0x5425, 0x0) 340.030179ms ago: executing program 0 (id=899): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002080)={&(0x7f0000000300)='kfree\x00', r0}, 0x10) r1 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, &(0x7f0000000f00)={0x0, 0x0, 0x2, 0x1}, 0x8) 299.744789ms ago: executing program 0 (id=900): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) (async) syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x3385c8a, 0x0, 0x1, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000006"], 0x48) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)) (async) r2 = socket$netlink(0x10, 0x3, 0x4) writev(r2, &(0x7f0000000080)=[{&(0x7f0000000140)="580000001400192340834b80040d8c560a11820fffff5bab4e210000000058000b4824ca945f6400940f6a0325010ebc000000000000008007f0fffeffe809005300fff5dd00000010000100050c100000000000224e0000", 0x58}], 0x1) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r1}, &(0x7f0000000800), &(0x7f0000000840)}, 0x20) (async) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x2000000) (async) close(r0) (async) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/raw\x00') (async) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000001180)=ANY=[@ANYBLOB="6c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000004c00128009000100626f6e64000000003c000280080014000000000008000700", @ANYRES32=0x0, @ANYBLOB="08001e00", @ANYBLOB="0500"], 0x6c}, 0x1, 0xba01}, 0x0) (async) pread64(r4, &(0x7f0000000200)=""/224, 0xe0, 0x73) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000740)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xd4, 0xd4, 0x3, [@type_tag={0xc, 0x0, 0x0, 0x12, 0x5}, @restrict={0x9, 0x0, 0x0, 0xb, 0x1}, @type_tag={0x10, 0x0, 0x0, 0x12, 0x2}, @var={0x3, 0x0, 0x0, 0xe, 0x4, 0x1}, @enum={0x9, 0x1, 0x0, 0x6, 0x4, [{0xb, 0x9}]}, @enum64={0xf, 0x1, 0x0, 0x13, 0x1, 0xf, [{0xf, 0x2, 0xffff}]}, @enum={0xb, 0x6, 0x0, 0x6, 0x4, [{0x6}, {0x1, 0x7c}, {0xc}, {0xe, 0xa}, {0x7, 0x8}, {0x10}]}, @struct={0x7, 0x1, 0x0, 0x4, 0x0, 0x8, [{0x10, 0x2, 0x2461}]}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x3, 0x5}]}, @typedef={0x4, 0x0, 0x0, 0x8, 0x1}]}, {0x0, [0x5f]}}, &(0x7f0000000840)=""/4096, 0xef, 0x1000, 0x1, 0x0, 0x10000, @value=r4}, 0x28) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) r6 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x89, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x16858, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x40082406, &(0x7f0000000000)='cpu~\t\t') getsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f0000000100)={@ipv4={""/10, ""/2, @remote}, 0x0}, &(0x7f0000000180)=0x14) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000001840)=ANY=[@ANYBLOB="0e000000ff7f0000ff000000ff01000000400000", @ANYRES32=r0, @ANYBLOB="0500"/20, @ANYRES32=r7, @ANYRES32=r4, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r8, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r8, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000005000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='ext4_ext_show_extent\x00', r10}, 0x18) (async) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x0, &(0x7f0000000080), 0x64, 0x518, &(0x7f0000000200)="$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") 116.525869ms ago: executing program 2 (id=901): socket$inet(0x2, 0x5, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0}, &(0x7f0000000380), &(0x7f00000003c0)}, 0x20) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_IOC_FAIL(r1, 0x4c80, 0xffffffffffffffb6) 46.07222ms ago: executing program 2 (id=902): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000e8f4fbff000000004000001d8500000007000000440000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) socket$inet6_dccp(0xa, 0x6, 0x0) syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000000)='./file1\x00', 0x844, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], 0x1, 0x253, &(0x7f00000004c0)="$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") execve(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001200)=@newtaction={0x19c, 0x30, 0x48b, 0x0, 0x0, {}, [{0x188, 0x1, [@m_connmark={0x130, 0x15, 0x0, 0x0, {{0xd}, {0xfffffffffffffdc6}, {0xffffffffffffff2c, 0x6, "7f6070873ab9799a2d1123d692ecf497bd3fc436ef7334062993828a73bb77f834e01e91cb0797a2496e6f21ae71a4d2c53b9a9a94132d0317e7c976e47d78e241340c466209a30065a39bbfbd56b503749866d96c1208228a381bd5d8918c69cab4c04853aa53260e11d2f812bd09daa722cacfdb87959e981fd7103f65eb15db05c9aaff2bdde08c7d5a802d8e9927cd4c116da0643e661ef53e1d4820617aad0d392667b6146677fbf1eb0043a36a7ce229bc21e8e197cce23e13fafd5fa60ea8084c1735e6c56f07e7b9fdb29d937e51cabf5e58acbe3e338b2aa5f3fc72715a9c51187a19ed36557eddfebaa43ab6ef631f27fca20393"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c}, {0x4}, {0xc}, {0xc}}}]}]}, 0x19c}, 0x1, 0x0, 0x0, 0x4890}, 0x20000000) 0s ago: executing program 0 (id=903): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000280), 0x1, 0x798, &(0x7f0000002380)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000840)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fcae68da850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5405, 0x0, 0x0) kernel console output (not intermixed with test programs): l too high, forcing read-only mode [ 52.338686][ T4726] EXT4-fs (loop2): orphan cleanup on readonly fs [ 52.349104][ T4726] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.454: Invalid block bitmap block 0 in block_group 0 [ 52.391075][ T4726] EXT4-fs (loop2): Remounting filesystem read-only [ 52.427489][ T4726] EXT4-fs (loop2): 1 orphan inode deleted [ 52.470019][ T4726] SELinux: (dev loop2, type ext4) getxattr errno 5 [ 52.532476][ T4738] bridge_slave_1: left allmulticast mode [ 52.538208][ T4738] bridge_slave_1: left promiscuous mode [ 52.543914][ T4738] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.564480][ T4738] bridge_slave_0: left allmulticast mode [ 52.570184][ T4738] bridge_slave_0: left promiscuous mode [ 52.575914][ T4738] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.646355][ T4743] gretap0: refused to change device tx_queue_len [ 52.655976][ T4743] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 52.732199][ T4755] FAULT_INJECTION: forcing a failure. [ 52.732199][ T4755] name failslab, interval 1, probability 0, space 0, times 0 [ 52.741096][ T4756] loop4: detected capacity change from 0 to 512 [ 52.745215][ T4755] CPU: 1 UID: 0 PID: 4755 Comm: syz.0.465 Not tainted 6.12.0-rc7-syzkaller #0 [ 52.760147][ T4755] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 52.770433][ T4755] Call Trace: [ 52.773727][ T4755] [ 52.776660][ T4755] dump_stack_lvl+0xf2/0x150 [ 52.781326][ T4755] dump_stack+0x15/0x20 [ 52.785494][ T4755] should_fail_ex+0x223/0x230 [ 52.790236][ T4755] ? getname_flags+0x81/0x3b0 [ 52.794928][ T4755] should_failslab+0x8f/0xb0 [ 52.795929][ T4756] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.464: bg 0: block 393: padding at end of block bitmap is not set [ 52.799519][ T4755] kmem_cache_alloc_noprof+0x4c/0x290 [ 52.816499][ T4756] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 52.819057][ T4755] getname_flags+0x81/0x3b0 [ 52.828344][ T4756] EXT4-fs (loop4): 2 truncates cleaned up [ 52.832136][ T4755] user_path_at+0x26/0x110 [ 52.842254][ T4755] __se_sys_mount+0x248/0x2d0 [ 52.846993][ T4755] __x64_sys_mount+0x67/0x80 [ 52.851647][ T4755] x64_sys_call+0x203e/0x2d60 [ 52.856389][ T4755] do_syscall_64+0xc9/0x1c0 [ 52.860885][ T4755] ? clear_bhb_loop+0x55/0xb0 [ 52.865565][ T4755] ? clear_bhb_loop+0x55/0xb0 [ 52.870235][ T4755] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.876138][ T4755] RIP: 0033:0x7f8512fce719 [ 52.880542][ T4755] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 52.900150][ T4755] RSP: 002b:00007f8511c47038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 52.908693][ T4755] RAX: ffffffffffffffda RBX: 00007f8513185f80 RCX: 00007f8512fce719 [ 52.916655][ T4755] RDX: 00000000200000c0 RSI: 0000000020000080 RDI: 0000000000000000 [ 52.924619][ T4755] RBP: 00007f8511c47090 R08: 0000000020000100 R09: 0000000000000000 [ 52.932589][ T4755] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 52.940574][ T4755] R13: 0000000000000001 R14: 00007f8513185f80 R15: 00007ffdcfebdfa8 [ 52.948587][ T4755] [ 52.966745][ T29] kauditd_printk_skb: 431 callbacks suppressed [ 52.966761][ T29] audit: type=1326 audit(1731359400.302:1758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4757 comm="syz.3.467" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ffb23ece719 code=0x0 [ 53.002577][ T29] audit: type=1400 audit(1731359400.332:1759): avc: denied { nlmsg_write } for pid=4753 comm="syz.4.464" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 53.017788][ T4771] vhci_hcd: invalid port number 255 [ 53.028580][ T4771] vhci_hcd: default hub control req: 801a v087e i00ff l0 [ 53.037915][ T29] audit: type=1400 audit(1731359400.372:1760): avc: denied { create } for pid=4753 comm="syz.4.464" name=E91F7189591E9233614B scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=sock_file permissive=1 [ 53.059759][ T4771] FAULT_INJECTION: forcing a failure. [ 53.059759][ T4771] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 53.059784][ T4771] CPU: 1 UID: 0 PID: 4771 Comm: syz.1.470 Not tainted 6.12.0-rc7-syzkaller #0 [ 53.081683][ T4771] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 53.091740][ T4771] Call Trace: [ 53.095012][ T4771] [ 53.097932][ T4771] dump_stack_lvl+0xf2/0x150 [ 53.102521][ T4771] dump_stack+0x15/0x20 [ 53.106715][ T4771] should_fail_ex+0x223/0x230 [ 53.111418][ T4771] should_fail+0xb/0x10 [ 53.115615][ T4771] should_fail_usercopy+0x1a/0x20 [ 53.120712][ T4771] _copy_to_user+0x20/0xa0 [ 53.125123][ T4771] simple_read_from_buffer+0xa0/0x110 [ 53.130535][ T4771] proc_fail_nth_read+0xf9/0x140 [ 53.135507][ T4771] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 53.141166][ T4771] vfs_read+0x1a2/0x700 [ 53.145345][ T4771] ? selinux_file_ioctl+0x2f7/0x380 [ 53.150570][ T4771] ? xfd_validate_state+0x46/0xf0 [ 53.155591][ T4771] ksys_read+0xeb/0x1b0 [ 53.159819][ T4771] __x64_sys_read+0x42/0x50 [ 53.164422][ T4771] x64_sys_call+0x27d3/0x2d60 [ 53.169119][ T4771] do_syscall_64+0xc9/0x1c0 [ 53.173657][ T4771] ? clear_bhb_loop+0x55/0xb0 [ 53.178331][ T4771] ? clear_bhb_loop+0x55/0xb0 [ 53.183031][ T4771] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.188967][ T4771] RIP: 0033:0x7f09222ed15c [ 53.193409][ T4771] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 53.213193][ T4771] RSP: 002b:00007f0920f67030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 53.221603][ T4771] RAX: ffffffffffffffda RBX: 00007f09224a5f80 RCX: 00007f09222ed15c [ 53.229606][ T4771] RDX: 000000000000000f RSI: 00007f0920f670a0 RDI: 0000000000000004 [ 53.237565][ T4771] RBP: 00007f0920f67090 R08: 0000000000000000 R09: 0000000000000000 [ 53.245528][ T4771] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 53.253497][ T4771] R13: 0000000000000000 R14: 00007f09224a5f80 R15: 00007ffd1904a0d8 [ 53.261482][ T4771] [ 53.380417][ T4791] FAULT_INJECTION: forcing a failure. [ 53.380417][ T4791] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 53.393533][ T4791] CPU: 0 UID: 0 PID: 4791 Comm: syz.0.479 Not tainted 6.12.0-rc7-syzkaller #0 [ 53.402411][ T4791] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 53.412475][ T4791] Call Trace: [ 53.415894][ T4791] [ 53.418885][ T4791] dump_stack_lvl+0xf2/0x150 [ 53.423618][ T4791] dump_stack+0x15/0x20 [ 53.427832][ T4791] should_fail_ex+0x223/0x230 [ 53.432551][ T4791] should_fail+0xb/0x10 [ 53.436741][ T4791] should_fail_usercopy+0x1a/0x20 [ 53.441769][ T4791] _copy_to_user+0x20/0xa0 [ 53.446192][ T4791] simple_read_from_buffer+0xa0/0x110 [ 53.451585][ T4791] proc_fail_nth_read+0xf9/0x140 [ 53.456537][ T4791] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 53.462097][ T4791] vfs_read+0x1a2/0x700 [ 53.466266][ T4791] ? __fget_files+0x1d4/0x210 [ 53.470951][ T4791] ksys_read+0xeb/0x1b0 [ 53.475135][ T4791] __x64_sys_read+0x42/0x50 [ 53.479712][ T4791] x64_sys_call+0x27d3/0x2d60 [ 53.484466][ T4791] do_syscall_64+0xc9/0x1c0 [ 53.489030][ T4791] ? clear_bhb_loop+0x55/0xb0 [ 53.493699][ T4791] ? clear_bhb_loop+0x55/0xb0 [ 53.498369][ T4791] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.504424][ T4791] RIP: 0033:0x7f8512fcd15c [ 53.508830][ T4791] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 53.528441][ T4791] RSP: 002b:00007f8511c47030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 53.536938][ T4791] RAX: ffffffffffffffda RBX: 00007f8513185f80 RCX: 00007f8512fcd15c [ 53.544906][ T4791] RDX: 000000000000000f RSI: 00007f8511c470a0 RDI: 0000000000000006 [ 53.552979][ T4791] RBP: 00007f8511c47090 R08: 0000000000000000 R09: 0000000000000000 [ 53.560941][ T4791] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 53.568932][ T4791] R13: 0000000000000000 R14: 00007f8513185f80 R15: 00007ffdcfebdfa8 [ 53.576983][ T4791] [ 53.617283][ T4799] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.627782][ T4801] loop1: detected capacity change from 0 to 1024 [ 53.634640][ T4801] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 53.644558][ T4803] FAULT_INJECTION: forcing a failure. [ 53.644558][ T4803] name failslab, interval 1, probability 0, space 0, times 0 [ 53.654661][ T29] audit: type=1326 audit(1731359400.972:1761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4802 comm="syz.0.484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8512fce719 code=0x7ffc0000 [ 53.657188][ T4803] CPU: 0 UID: 0 PID: 4803 Comm: syz.0.484 Not tainted 6.12.0-rc7-syzkaller #0 [ 53.680433][ T29] audit: type=1326 audit(1731359400.972:1762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4802 comm="syz.0.484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8512fce719 code=0x7ffc0000 [ 53.689218][ T4803] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 53.689230][ T4803] Call Trace: [ 53.689244][ T4803] [ 53.689251][ T4803] dump_stack_lvl+0xf2/0x150 [ 53.689275][ T4803] dump_stack+0x15/0x20 [ 53.712578][ T29] audit: type=1326 audit(1731359400.972:1763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4802 comm="syz.0.484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8512fcd0b0 code=0x7ffc0000 [ 53.722668][ T4803] should_fail_ex+0x223/0x230 [ 53.725960][ T29] audit: type=1326 audit(1731359400.982:1764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4802 comm="syz.0.484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f8512fcd1ff code=0x7ffc0000 [ 53.728856][ T4803] ? sidtab_sid2str_get+0xb8/0x140 [ 53.733420][ T29] audit: type=1326 audit(1731359400.982:1765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4802 comm="syz.0.484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=163 compat=0 ip=0x7f8512fce719 code=0x7ffc0000 [ 53.737538][ T4803] should_failslab+0x8f/0xb0 [ 53.737561][ T4803] __kmalloc_node_track_caller_noprof+0xa6/0x380 [ 53.828346][ T4803] kmemdup_noprof+0x2a/0x60 [ 53.832850][ T4803] sidtab_sid2str_get+0xb8/0x140 [ 53.837810][ T4803] security_sid_to_context_core+0x1eb/0x2f0 [ 53.843785][ T4803] security_sid_to_context+0x27/0x30 [ 53.849068][ T4803] selinux_secid_to_secctx+0x22/0x30 [ 53.854342][ T4803] security_secid_to_secctx+0x48/0x90 [ 53.859772][ T4803] audit_log_task_context+0x8c/0x1b0 [ 53.865051][ T4803] audit_log_task+0xfb/0x180 [ 53.869634][ T4803] audit_seccomp+0x68/0x130 [ 53.874133][ T4803] __seccomp_filter+0x6fa/0x1180 [ 53.879110][ T4803] ? selinux_capable+0x1f2/0x260 [ 53.884068][ T4803] __secure_computing+0x9f/0x1c0 [ 53.889208][ T4803] syscall_trace_enter+0xd1/0x1f0 [ 53.894304][ T4803] ? fpregs_assert_state_consistent+0x83/0xa0 [ 53.900373][ T4803] do_syscall_64+0xaa/0x1c0 [ 53.904928][ T4803] ? clear_bhb_loop+0x55/0xb0 [ 53.909629][ T4803] ? clear_bhb_loop+0x55/0xb0 [ 53.914379][ T4803] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.920272][ T4803] RIP: 0033:0x7f8512fcd15c [ 53.924676][ T4803] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 53.944273][ T4803] RSP: 002b:00007f8511c47030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 53.952674][ T4803] RAX: ffffffffffffffda RBX: 00007f8513185f80 RCX: 00007f8512fcd15c [ 53.960670][ T4803] RDX: 000000000000000f RSI: 00007f8511c470a0 RDI: 0000000000000003 [ 53.968636][ T4803] RBP: 00007f8511c47090 R08: 0000000000000000 R09: 0000000000000000 [ 53.976606][ T4803] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 53.984566][ T4803] R13: 0000000000000000 R14: 00007f8513185f80 R15: 00007ffdcfebdfa8 [ 53.992533][ T4803] [ 53.995749][ T4803] audit: error in audit_log_task_context [ 54.000792][ T29] audit: type=1400 audit(1731359401.332:1767): avc: denied { ioctl } for pid=4806 comm="syz.4.488" path="socket:[8160]" dev="sockfs" ino=8160 ioctlcmd=0x89fc scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 54.066812][ T4799] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.082628][ T4812] syz.1.489[4812] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 54.082690][ T4812] syz.1.489[4812] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 54.094067][ T4812] syz.1.489[4812] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 54.108293][ T4818] usb usb5: usbfs: process 4818 (syz.4.492) did not claim interface 0 before use [ 54.131949][ T4818] vhci_hcd: invalid port number 255 [ 54.137231][ T4818] vhci_hcd: default hub control req: 801a v087e i00ff l0 [ 54.170689][ T4821] loop3: detected capacity change from 0 to 2048 [ 54.181697][ T4824] loop4: detected capacity change from 0 to 512 [ 54.189786][ T4824] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 54.206878][ T4799] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.225736][ T4824] EXT4-fs error (device loop4): ext4_ext_check_inode:524: inode #3: comm syz.4.495: pblk 0 bad header/extent: too large eh_max - magic f30a, entries 1, max 48834(4), depth 0(0) [ 54.252584][ T4821] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.494: bg 0: block 274: padding at end of block bitmap is not set [ 54.276523][ T4799] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.277520][ T4821] EXT4-fs (loop3): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 16 with error 117 [ 54.286875][ T4824] EXT4-fs error (device loop4): ext4_quota_enable:7056: comm syz.4.495: Bad quota inode: 3, type: 0 [ 54.299342][ T4821] EXT4-fs (loop3): This should not happen!! Data will be lost [ 54.299342][ T4821] [ 54.328295][ T4824] EXT4-fs warning (device loop4): ext4_enable_quotas:7097: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 54.344020][ T4824] EXT4-fs (loop4): mount failed [ 54.371631][ T4843] loop1: detected capacity change from 0 to 2048 [ 54.377447][ T4799] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.390387][ T4824] loop4: detected capacity change from 0 to 2048 [ 54.396091][ T4845] loop0: detected capacity change from 0 to 1024 [ 54.406158][ T4799] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.408078][ T4845] ext4: Unknown parameter 'noacl' [ 54.436587][ T4799] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.446203][ T4824] loop4: p1 < > p4 [ 54.451732][ T4824] loop4: p4 size 8388608 extends beyond EOD, truncated [ 54.463645][ T4843] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.502: bg 0: block 274: padding at end of block bitmap is not set [ 54.499941][ T4799] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.508558][ T4843] EXT4-fs (loop1): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 16 with error 117 [ 54.521135][ T4843] EXT4-fs (loop1): This should not happen!! Data will be lost [ 54.521135][ T4843] [ 54.545986][ T3481] udevd[3481]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 54.551642][ T3307] udevd[3307]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 54.592690][ T4852] syz.3.504[4852] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 54.624076][ T4855] loop2: detected capacity change from 0 to 512 [ 54.650439][ T4855] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 54.662029][ T4855] EXT4-fs (loop2): orphan cleanup on readonly fs [ 54.669356][ T4855] EXT4-fs warning (device loop2): ext4_enable_quotas:7097: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 54.684372][ T4860] FAULT_INJECTION: forcing a failure. [ 54.684372][ T4860] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 54.697778][ T4860] CPU: 1 UID: 0 PID: 4860 Comm: syz.3.508 Not tainted 6.12.0-rc7-syzkaller #0 [ 54.706638][ T4860] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 54.716701][ T4860] Call Trace: [ 54.719994][ T4860] [ 54.722950][ T4860] dump_stack_lvl+0xf2/0x150 [ 54.727563][ T4860] dump_stack+0x15/0x20 [ 54.731725][ T4860] should_fail_ex+0x223/0x230 [ 54.736492][ T4860] should_fail+0xb/0x10 [ 54.740783][ T4860] should_fail_usercopy+0x1a/0x20 [ 54.745901][ T4860] set_fd_set+0x29/0x90 [ 54.750195][ T4860] core_sys_select+0x3ff/0x530 [ 54.754997][ T4860] ? set_user_sigmask+0x83/0x190 [ 54.759953][ T4860] __se_sys_pselect6+0x20d/0x270 [ 54.764931][ T4860] __x64_sys_pselect6+0x78/0x90 [ 54.769794][ T4860] x64_sys_call+0x26f7/0x2d60 [ 54.774558][ T4860] do_syscall_64+0xc9/0x1c0 [ 54.779119][ T4860] ? clear_bhb_loop+0x55/0xb0 [ 54.783894][ T4860] ? clear_bhb_loop+0x55/0xb0 [ 54.788584][ T4860] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 54.794536][ T4860] RIP: 0033:0x7ffb23ece719 [ 54.798944][ T4860] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 54.818545][ T4860] RSP: 002b:00007ffb22b41038 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 54.826998][ T4860] RAX: ffffffffffffffda RBX: 00007ffb24085f80 RCX: 00007ffb23ece719 [ 54.834978][ T4860] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000040 [ 54.842984][ T4860] RBP: 00007ffb22b41090 R08: 0000000020000280 R09: 0000000000000000 [ 54.850953][ T4860] R10: 0000000020000240 R11: 0000000000000246 R12: 0000000000000001 [ 54.859002][ T4860] R13: 0000000000000000 R14: 00007ffb24085f80 R15: 00007ffe02005008 [ 54.866979][ T4860] [ 54.878610][ T4855] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 54.887068][ T4855] EXT4-fs error (device loop2): ext4_ext_check_inode:524: inode #13: comm syz.2.507: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 54.913252][ T4855] EXT4-fs error (device loop2): ext4_orphan_get:1393: comm syz.2.507: couldn't read orphan inode 13 (err -117) [ 54.933130][ T4879] FAULT_INJECTION: forcing a failure. [ 54.933130][ T4879] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 54.946712][ T4879] CPU: 0 UID: 0 PID: 4879 Comm: syz.3.513 Not tainted 6.12.0-rc7-syzkaller #0 [ 54.955594][ T4879] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 54.965685][ T4879] Call Trace: [ 54.968996][ T4879] [ 54.971968][ T4879] dump_stack_lvl+0xf2/0x150 [ 54.976603][ T4879] dump_stack+0x15/0x20 [ 54.980809][ T4879] should_fail_ex+0x223/0x230 [ 54.985531][ T4879] should_fail+0xb/0x10 [ 54.989697][ T4879] should_fail_usercopy+0x1a/0x20 [ 54.994724][ T4879] _copy_to_user+0x20/0xa0 [ 54.999129][ T4879] simple_read_from_buffer+0xa0/0x110 [ 55.004498][ T4879] proc_fail_nth_read+0xf9/0x140 [ 55.009500][ T4879] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 55.015041][ T4879] vfs_read+0x1a2/0x700 [ 55.019213][ T4879] ? __fget_files+0x1d4/0x210 [ 55.023976][ T4879] ksys_read+0xeb/0x1b0 [ 55.028128][ T4879] __x64_sys_read+0x42/0x50 [ 55.032621][ T4879] x64_sys_call+0x27d3/0x2d60 [ 55.037311][ T4879] do_syscall_64+0xc9/0x1c0 [ 55.041842][ T4879] ? clear_bhb_loop+0x55/0xb0 [ 55.046509][ T4879] ? clear_bhb_loop+0x55/0xb0 [ 55.051273][ T4879] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 55.057246][ T4879] RIP: 0033:0x7ffb23ecd15c [ 55.061740][ T4879] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 55.081345][ T4879] RSP: 002b:00007ffb22b41030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 55.089769][ T4879] RAX: ffffffffffffffda RBX: 00007ffb24085f80 RCX: 00007ffb23ecd15c [ 55.097743][ T4879] RDX: 000000000000000f RSI: 00007ffb22b410a0 RDI: 0000000000000003 [ 55.105715][ T4879] RBP: 00007ffb22b41090 R08: 0000000000000000 R09: 0000000000000000 [ 55.113708][ T4879] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 55.121710][ T4879] R13: 0000000000000001 R14: 00007ffb24085f80 R15: 00007ffe02005008 [ 55.129678][ T4879] [ 55.136215][ T4855] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 55.152431][ T4855] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 55.184823][ T4855] EXT4-fs warning (device loop2): ext4_enable_quotas:7097: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 55.224670][ T4892] __nla_validate_parse: 11 callbacks suppressed [ 55.224688][ T4892] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.514'. [ 55.247811][ T4891] loop1: detected capacity change from 0 to 2048 [ 55.255546][ T4884] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.514'. [ 55.278353][ T4891] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.518: bg 0: block 274: padding at end of block bitmap is not set [ 55.293926][ T4894] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.297335][ T4891] EXT4-fs (loop1): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 16 with error 117 [ 55.316632][ T4891] EXT4-fs (loop1): This should not happen!! Data will be lost [ 55.316632][ T4891] [ 55.322295][ T4898] FAULT_INJECTION: forcing a failure. [ 55.322295][ T4898] name failslab, interval 1, probability 0, space 0, times 0 [ 55.338972][ T4898] CPU: 0 UID: 0 PID: 4898 Comm: syz.3.520 Not tainted 6.12.0-rc7-syzkaller #0 [ 55.347822][ T4898] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 55.357896][ T4898] Call Trace: [ 55.361165][ T4898] [ 55.364181][ T4898] dump_stack_lvl+0xf2/0x150 [ 55.368781][ T4898] dump_stack+0x15/0x20 [ 55.372929][ T4898] should_fail_ex+0x223/0x230 [ 55.377661][ T4898] ? __alloc_skb+0x10b/0x310 [ 55.382283][ T4898] should_failslab+0x8f/0xb0 [ 55.386872][ T4898] kmem_cache_alloc_node_noprof+0x51/0x2b0 [ 55.392723][ T4898] __alloc_skb+0x10b/0x310 [ 55.397196][ T4898] sock_omalloc+0x7e/0xe0 [ 55.401582][ T4898] msg_zerocopy_realloc+0x83/0x3c0 [ 55.406722][ T4898] __ip_append_data+0x664/0x2350 [ 55.411688][ T4898] ? dst_alloc+0xe2/0x100 [ 55.416021][ T4898] ? udp_sendmsg+0xe5d/0x12f0 [ 55.420718][ T4898] ? __sock_sendmsg+0x102/0x180 [ 55.425569][ T4898] ? do_syscall_64+0xc9/0x1c0 [ 55.430247][ T4898] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 55.435874][ T4898] ? should_fail_ex+0xd7/0x230 [ 55.440671][ T4898] ? ip_setup_cork+0x188/0x410 [ 55.445497][ T4898] ? __kmalloc_cache_noprof+0x10b/0x2a0 [ 55.451106][ T4898] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 55.456669][ T4898] ip_append_data+0x11f/0x150 [ 55.461437][ T4898] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 55.467054][ T4898] udp_sendmsg+0x281/0x12f0 [ 55.471562][ T4898] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 55.477109][ T4898] ? __rcu_read_unlock+0x4e/0x70 [ 55.482062][ T4898] ? ip4_datagram_release_cb+0x3f9/0x430 [ 55.487794][ T4898] ? __pfx_udp_sendmsg+0x10/0x10 [ 55.492817][ T4898] inet_sendmsg+0xaf/0xd0 [ 55.497145][ T4898] __sock_sendmsg+0x102/0x180 [ 55.501841][ T4898] ____sys_sendmsg+0x312/0x410 [ 55.506635][ T4898] __sys_sendmmsg+0x259/0x500 [ 55.511324][ T4898] __x64_sys_sendmmsg+0x57/0x70 [ 55.516324][ T4898] x64_sys_call+0xa49/0x2d60 [ 55.520949][ T4898] do_syscall_64+0xc9/0x1c0 [ 55.525450][ T4898] ? clear_bhb_loop+0x55/0xb0 [ 55.530136][ T4898] ? clear_bhb_loop+0x55/0xb0 [ 55.534825][ T4898] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 55.540736][ T4898] RIP: 0033:0x7ffb23ece719 [ 55.545142][ T4898] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 55.564829][ T4898] RSP: 002b:00007ffb22b41038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 55.573288][ T4898] RAX: ffffffffffffffda RBX: 00007ffb24085f80 RCX: 00007ffb23ece719 [ 55.581267][ T4898] RDX: 0000000000000001 RSI: 0000000020000780 RDI: 0000000000000003 [ 55.589284][ T4898] RBP: 00007ffb22b41090 R08: 0000000000000000 R09: 0000000000000000 [ 55.597250][ T4898] R10: 0000000004008804 R11: 0000000000000246 R12: 0000000000000001 [ 55.605272][ T4898] R13: 0000000000000000 R14: 00007ffb24085f80 R15: 00007ffe02005008 [ 55.613242][ T4898] [ 55.633492][ T4900] bpf_get_probe_write_proto: 2 callbacks suppressed [ 55.633508][ T4900] syz.0.519[4900] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 55.640421][ T4900] syz.0.519[4900] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 55.653923][ T4900] syz.0.519[4900] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 55.675929][ T4894] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.698416][ T4900] loop0: detected capacity change from 0 to 128 [ 55.708090][ T4905] loop4: detected capacity change from 0 to 512 [ 55.723673][ T4908] loop1: detected capacity change from 0 to 512 [ 55.730885][ T4908] EXT4-fs: quotafile must be on filesystem root [ 55.753751][ T4900] ext4 filesystem being mounted at /95/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 55.788104][ T4905] ext4 filesystem being mounted at /108/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 55.800050][ T4913] loop3: detected capacity change from 0 to 512 [ 55.810813][ T4913] EXT4-fs: Ignoring removed i_version option [ 55.816932][ T4913] EXT4-fs: Ignoring removed nobh option [ 55.824649][ T4894] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.842120][ T4913] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 55.865369][ T4905] netlink: 56 bytes leftover after parsing attributes in process `syz.4.522'. [ 55.866734][ T4913] EXT4-fs (loop3): 1 truncate cleaned up [ 55.874675][ T4905] netlink: 24 bytes leftover after parsing attributes in process `syz.4.522'. [ 55.897932][ T4894] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.924879][ T4925] loop4: detected capacity change from 0 to 128 [ 55.950288][ T4925] FAULT_INJECTION: forcing a failure. [ 55.950288][ T4925] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 55.963542][ T4925] CPU: 1 UID: 0 PID: 4925 Comm: syz.4.529 Not tainted 6.12.0-rc7-syzkaller #0 [ 55.972480][ T4925] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 55.982531][ T4925] Call Trace: [ 55.985801][ T4925] [ 55.988722][ T4925] dump_stack_lvl+0xf2/0x150 [ 55.993332][ T4925] dump_stack+0x15/0x20 [ 55.997480][ T4925] should_fail_ex+0x223/0x230 [ 56.002212][ T4925] should_fail+0xb/0x10 [ 56.006394][ T4925] should_fail_usercopy+0x1a/0x20 [ 56.011493][ T4925] strncpy_from_user+0x25/0x210 [ 56.016436][ T4925] ? kmem_cache_alloc_noprof+0x10c/0x290 [ 56.022163][ T4925] getname_flags+0xb0/0x3b0 [ 56.026670][ T4925] getname+0x17/0x20 [ 56.030593][ T4925] do_sys_openat2+0x67/0x120 [ 56.035241][ T4925] __x64_sys_openat+0xf3/0x120 [ 56.040067][ T4925] x64_sys_call+0x1025/0x2d60 [ 56.044808][ T4925] do_syscall_64+0xc9/0x1c0 [ 56.049479][ T4925] ? clear_bhb_loop+0x55/0xb0 [ 56.054182][ T4925] ? clear_bhb_loop+0x55/0xb0 [ 56.058955][ T4925] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 56.064854][ T4925] RIP: 0033:0x7f4b9aa6e719 [ 56.069397][ T4925] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 56.088995][ T4925] RSP: 002b:00007f4b996e1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 56.097478][ T4925] RAX: ffffffffffffffda RBX: 00007f4b9ac25f80 RCX: 00007f4b9aa6e719 [ 56.105518][ T4925] RDX: 000000000000275a RSI: 0000000020000000 RDI: ffffffffffffff9c [ 56.113533][ T4925] RBP: 00007f4b996e1090 R08: 0000000000000000 R09: 0000000000000000 [ 56.121553][ T4925] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 56.129623][ T4925] R13: 0000000000000000 R14: 00007f4b9ac25f80 R15: 00007ffe1fd03658 [ 56.137609][ T4925] [ 56.152568][ T11] bio_check_eod: 29053 callbacks suppressed [ 56.152578][ T11] kworker/u8:0: attempt to access beyond end of device [ 56.152578][ T11] loop4: rw=1, sector=145, nr_sectors = 896 limit=128 [ 56.213246][ T4929] netlink: 60 bytes leftover after parsing attributes in process `syz.3.531'. [ 56.222594][ T4929] netlink: 60 bytes leftover after parsing attributes in process `syz.3.531'. [ 56.240974][ T4929] netlink: 60 bytes leftover after parsing attributes in process `syz.3.531'. [ 56.250475][ T4929] netlink: 60 bytes leftover after parsing attributes in process `syz.3.531'. [ 56.279152][ T4929] netlink: 60 bytes leftover after parsing attributes in process `syz.3.531'. [ 56.288240][ T4929] netlink: 60 bytes leftover after parsing attributes in process `syz.3.531'. [ 56.596725][ T4945] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 56.658602][ T4954] loop1: detected capacity change from 0 to 128 [ 56.667602][ T4954] ext4 filesystem being mounted at /102/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 56.716028][ T4956] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 56.724835][ T4956] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 56.860765][ T4968] loop1: detected capacity change from 0 to 164 [ 56.869874][ T4968] syz.1.545: attempt to access beyond end of device [ 56.869874][ T4968] loop1: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 56.883846][ T4968] syz.1.545: attempt to access beyond end of device [ 56.883846][ T4968] loop1: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 56.897287][ T4968] syz.1.545: attempt to access beyond end of device [ 56.897287][ T4968] loop1: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 56.910702][ T4968] syz.1.545: attempt to access beyond end of device [ 56.910702][ T4968] loop1: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 56.924207][ T4968] syz.1.545: attempt to access beyond end of device [ 56.924207][ T4968] loop1: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 56.937687][ T4968] syz.1.545: attempt to access beyond end of device [ 56.937687][ T4968] loop1: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 56.951451][ T4968] syz.1.545: attempt to access beyond end of device [ 56.951451][ T4968] loop1: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 56.965068][ T4968] syz.1.545: attempt to access beyond end of device [ 56.965068][ T4968] loop1: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 56.978510][ T4968] syz.1.545: attempt to access beyond end of device [ 56.978510][ T4968] loop1: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 57.129592][ T4970] loop4: detected capacity change from 0 to 4096 [ 57.448175][ T4983] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.458727][ T4983] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.468707][ T4983] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.479350][ T4983] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.489285][ T4983] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.499959][ T4983] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.510374][ T4983] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 57.518131][ T4983] batadv_slave_0: entered promiscuous mode [ 57.735536][ T4986] loop0: detected capacity change from 0 to 256 [ 57.749905][ T4986] FAT-fs (loop0): Directory bread(block 64) failed [ 57.756802][ T4986] FAT-fs (loop0): Directory bread(block 65) failed [ 57.763600][ T4986] FAT-fs (loop0): Directory bread(block 66) failed [ 57.771269][ T4986] FAT-fs (loop0): Directory bread(block 67) failed [ 57.778503][ T4986] FAT-fs (loop0): Directory bread(block 68) failed [ 57.786178][ T4986] FAT-fs (loop0): Directory bread(block 69) failed [ 57.793034][ T4986] FAT-fs (loop0): Directory bread(block 70) failed [ 57.799736][ T4986] FAT-fs (loop0): Directory bread(block 71) failed [ 57.807175][ T4986] FAT-fs (loop0): Directory bread(block 72) failed [ 57.813862][ T4986] FAT-fs (loop0): Directory bread(block 73) failed [ 57.905305][ T5007] loop0: detected capacity change from 0 to 2048 [ 57.919414][ T5007] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.560: bg 0: block 274: padding at end of block bitmap is not set [ 57.920002][ T5009] loop5: detected capacity change from 0 to 7 [ 57.940007][ T5009] Buffer I/O error on dev loop5, logical block 0, async page read [ 57.945337][ T5007] EXT4-fs (loop0): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 16 with error 117 [ 57.948198][ T5009] Buffer I/O error on dev loop5, logical block 0, async page read [ 57.960260][ T5007] EXT4-fs (loop0): This should not happen!! Data will be lost [ 57.960260][ T5007] [ 57.968078][ T5009] loop5: unable to read partition table [ 57.983510][ T5009] loop_reread_partitions: partition scan of loop5 (þ被xüŸÑø éÚ¬§½dƤ´à–ƒÝ¡¯¨â·û [ 57.983510][ T5009] ) failed (rc=-5) [ 58.032359][ T5016] loop1: detected capacity change from 0 to 512 [ 58.057082][ T5016] ext4 filesystem being mounted at /108/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 58.125505][ T29] kauditd_printk_skb: 420 callbacks suppressed [ 58.125521][ T29] audit: type=1400 audit(1731359405.452:2187): avc: denied { create } for pid=5024 comm="syz.0.566" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 58.182338][ T29] audit: type=1400 audit(1731359405.492:2188): avc: denied { read } for pid=5024 comm="syz.0.566" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 58.207433][ T29] audit: type=1326 audit(1731359405.542:2189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5026 comm="syz.0.568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8512fce719 code=0x7ffc0000 [ 58.243244][ T29] audit: type=1326 audit(1731359405.572:2190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5026 comm="syz.0.568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8512fce719 code=0x7ffc0000 [ 58.266579][ T29] audit: type=1326 audit(1731359405.572:2191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5026 comm="syz.0.568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8512fce719 code=0x7ffc0000 [ 58.290003][ T29] audit: type=1326 audit(1731359405.572:2192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5026 comm="syz.0.568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8512fce719 code=0x7ffc0000 [ 58.313371][ T29] audit: type=1326 audit(1731359405.572:2193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5026 comm="syz.0.568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f8512fce719 code=0x7ffc0000 [ 58.336800][ T29] audit: type=1326 audit(1731359405.572:2194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5026 comm="syz.0.568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8512fce719 code=0x7ffc0000 [ 58.343692][ T5031] syzkaller0: entered promiscuous mode [ 58.360186][ T29] audit: type=1326 audit(1731359405.572:2195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5026 comm="syz.0.568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8512fce719 code=0x7ffc0000 [ 58.365626][ T5031] syzkaller0: entered allmulticast mode [ 58.394537][ T29] audit: type=1326 audit(1731359405.572:2196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5026 comm="syz.0.568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f8512fce719 code=0x7ffc0000 [ 58.421457][ T5027] loop0: detected capacity change from 0 to 256 [ 58.435616][ T5027] FAT-fs (loop0): Directory bread(block 64) failed [ 58.442171][ T5027] FAT-fs (loop0): Directory bread(block 65) failed [ 58.448723][ T5027] FAT-fs (loop0): Directory bread(block 66) failed [ 58.455318][ T5027] FAT-fs (loop0): Directory bread(block 67) failed [ 58.455946][ T5036] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 58.461947][ T5027] FAT-fs (loop0): Directory bread(block 68) failed [ 58.478813][ T5027] FAT-fs (loop0): Directory bread(block 69) failed [ 58.485537][ T5027] FAT-fs (loop0): Directory bread(block 70) failed [ 58.492084][ T5027] FAT-fs (loop0): Directory bread(block 71) failed [ 58.499998][ T5027] FAT-fs (loop0): Directory bread(block 72) failed [ 58.506662][ T5027] FAT-fs (loop0): Directory bread(block 73) failed [ 58.565787][ T5044] FAULT_INJECTION: forcing a failure. [ 58.565787][ T5044] name failslab, interval 1, probability 0, space 0, times 0 [ 58.566344][ T5042] loop5: detected capacity change from 0 to 7 [ 58.578622][ T5044] CPU: 1 UID: 0 PID: 5044 Comm: syz.0.573 Not tainted 6.12.0-rc7-syzkaller #0 [ 58.585583][ T5042] Buffer I/O error on dev loop5, logical block 0, async page read [ 58.593475][ T5044] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 58.593500][ T5044] Call Trace: [ 58.601842][ T5042] Buffer I/O error on dev loop5, logical block 0, async page read [ 58.611303][ T5044] [ 58.611313][ T5044] dump_stack_lvl+0xf2/0x150 [ 58.611348][ T5044] dump_stack+0x15/0x20 [ 58.614653][ T5042] loop5: unable to read partition table [ 58.622389][ T5044] should_fail_ex+0x223/0x230 [ 58.625868][ T5042] loop_reread_partitions: partition scan of loop5 (þ被xüŸÑø éÚ¬§½dƤ´à–ƒÝ¡¯¨â·û [ 58.625868][ T5042] ) failed (rc=-5) [ 58.629880][ T5044] ? audit_log_d_path+0x96/0x250 [ 58.662648][ T5044] should_failslab+0x8f/0xb0 [ 58.667413][ T5044] __kmalloc_cache_noprof+0x4b/0x2a0 [ 58.672701][ T5044] audit_log_d_path+0x96/0x250 [ 58.677643][ T5044] ? get_file_rcu+0xeb/0x100 [ 58.682273][ T5044] ? __rcu_read_unlock+0x4e/0x70 [ 58.687270][ T5044] audit_log_d_path_exe+0x42/0x70 [ 58.692289][ T5044] audit_log_task+0x155/0x180 [ 58.696959][ T5044] audit_seccomp+0x68/0x130 [ 58.701455][ T5044] __seccomp_filter+0x6fa/0x1180 [ 58.706402][ T5044] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 58.712127][ T5044] ? vfs_write+0x596/0x920 [ 58.716580][ T5044] ? __rcu_read_unlock+0x4e/0x70 [ 58.721531][ T5044] ? __fget_files+0x1d4/0x210 [ 58.726207][ T5044] __secure_computing+0x9f/0x1c0 [ 58.731171][ T5044] syscall_trace_enter+0xd1/0x1f0 [ 58.736231][ T5044] ? fpregs_assert_state_consistent+0x83/0xa0 [ 58.742412][ T5044] do_syscall_64+0xaa/0x1c0 [ 58.746985][ T5044] ? clear_bhb_loop+0x55/0xb0 [ 58.751659][ T5044] ? clear_bhb_loop+0x55/0xb0 [ 58.756371][ T5044] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 58.762312][ T5044] RIP: 0033:0x7f8512fce719 [ 58.766729][ T5044] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 58.786333][ T5044] RSP: 002b:00007f8511c47038 EFLAGS: 00000246 ORIG_RAX: 0000000000000096 [ 58.794767][ T5044] RAX: ffffffffffffffda RBX: 00007f8513185f80 RCX: 00007f8512fce719 [ 58.802845][ T5044] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000000020ffb000 [ 58.810812][ T5044] RBP: 00007f8511c47090 R08: 0000000000000000 R09: 0000000000000000 [ 58.818850][ T5044] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 58.826998][ T5044] R13: 0000000000000000 R14: 00007f8513185f80 R15: 00007ffdcfebdfa8 [ 58.835031][ T5044] [ 58.868325][ T5046] loop0: detected capacity change from 0 to 2048 [ 58.899321][ T5046] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.574: bg 0: block 274: padding at end of block bitmap is not set [ 58.910139][ T5054] loop4: detected capacity change from 0 to 512 [ 58.921037][ T5046] EXT4-fs (loop0): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 16 with error 117 [ 58.933608][ T5046] EXT4-fs (loop0): This should not happen!! Data will be lost [ 58.933608][ T5046] [ 58.955861][ T5054] ext4 filesystem being mounted at /130/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 58.982994][ T5058] FAULT_INJECTION: forcing a failure. [ 58.982994][ T5058] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 58.996158][ T5058] CPU: 0 UID: 0 PID: 5058 Comm: syz.0.578 Not tainted 6.12.0-rc7-syzkaller #0 [ 59.005097][ T5058] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 59.015147][ T5058] Call Trace: [ 59.018422][ T5058] [ 59.021345][ T5058] dump_stack_lvl+0xf2/0x150 [ 59.025937][ T5058] dump_stack+0x15/0x20 [ 59.030166][ T5058] should_fail_ex+0x223/0x230 [ 59.034850][ T5058] should_fail+0xb/0x10 [ 59.039005][ T5058] should_fail_usercopy+0x1a/0x20 [ 59.044021][ T5058] strncpy_from_user+0x25/0x210 [ 59.048955][ T5058] strncpy_from_user_nofault+0x66/0xe0 [ 59.054437][ T5058] bpf_probe_read_compat_str+0xb3/0x130 [ 59.059979][ T5058] bpf_prog_5e0791613c78f632+0x3e/0x40 [ 59.065437][ T5058] bpf_trace_run3+0x10c/0x1d0 [ 59.070152][ T5058] ? _raw_spin_unlock_irqrestore+0x2b/0x60 [ 59.075958][ T5058] ? audit_log_end+0x1d0/0x1e0 [ 59.080756][ T5058] ? audit_log_end+0x1d0/0x1e0 [ 59.085625][ T5058] kmem_cache_free+0x237/0x2d0 [ 59.090425][ T5058] audit_log_end+0x1d0/0x1e0 [ 59.095041][ T5058] audit_seccomp+0x107/0x130 [ 59.099743][ T5058] __seccomp_filter+0x6fa/0x1180 [ 59.104717][ T5058] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 59.110379][ T5058] ? vfs_write+0x596/0x920 [ 59.114796][ T5058] ? __rcu_read_unlock+0x4e/0x70 [ 59.119733][ T5058] ? __fget_files+0x1d4/0x210 [ 59.124403][ T5058] __secure_computing+0x9f/0x1c0 [ 59.129377][ T5058] syscall_trace_enter+0xd1/0x1f0 [ 59.134433][ T5058] ? fpregs_assert_state_consistent+0x83/0xa0 [ 59.140554][ T5058] do_syscall_64+0xaa/0x1c0 [ 59.145052][ T5058] ? clear_bhb_loop+0x55/0xb0 [ 59.149721][ T5058] ? clear_bhb_loop+0x55/0xb0 [ 59.154393][ T5058] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 59.160295][ T5058] RIP: 0033:0x7f8512fce719 [ 59.164711][ T5058] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 59.184311][ T5058] RSP: 002b:00007f8511c47038 EFLAGS: 00000246 ORIG_RAX: 0000000000000071 [ 59.192719][ T5058] RAX: ffffffffffffffda RBX: 00007f8513185f80 RCX: 00007f8512fce719 [ 59.200734][ T5058] RDX: 0000000000000000 RSI: 000000000000ee01 RDI: 0000000000000000 [ 59.208766][ T5058] RBP: 00007f8511c47090 R08: 0000000000000000 R09: 0000000000000000 [ 59.216732][ T5058] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 59.224694][ T5058] R13: 0000000000000000 R14: 00007f8513185f80 R15: 00007ffdcfebdfa8 [ 59.232710][ T5058] [ 59.257414][ T5060] loop0: detected capacity change from 0 to 128 [ 59.277122][ T5060] ext4 filesystem being mounted at /109/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 59.279299][ T4894] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.326932][ T4894] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.338043][ T4894] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.349241][ T4894] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.376893][ T5066] loop0: detected capacity change from 0 to 128 [ 59.445710][ T5078] loop0: detected capacity change from 0 to 128 [ 59.486598][ T5085] loop0: detected capacity change from 0 to 512 [ 59.525870][ T5085] ext4 filesystem being mounted at /112/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 59.573048][ T5072] loop4: detected capacity change from 0 to 256 [ 59.585027][ T5095] syz.1.593[5095] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 59.585116][ T5095] syz.1.593[5095] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 59.591397][ T5072] FAT-fs (loop4): Directory bread(block 64) failed [ 59.598305][ T5095] syz.1.593[5095] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 59.608063][ T5072] FAT-fs (loop4): Directory bread(block 65) failed [ 59.632778][ T5072] FAT-fs (loop4): Directory bread(block 66) failed [ 59.647296][ T5072] FAT-fs (loop4): Directory bread(block 67) failed [ 59.677417][ T5072] FAT-fs (loop4): Directory bread(block 68) failed [ 59.684351][ T5101] loop0: detected capacity change from 0 to 1024 [ 59.694058][ T5101] ext4: Unknown parameter 'noacl' [ 59.699034][ T5072] FAT-fs (loop4): Directory bread(block 69) failed [ 59.714763][ T5072] FAT-fs (loop4): Directory bread(block 70) failed [ 59.721425][ T5072] FAT-fs (loop4): Directory bread(block 71) failed [ 59.733061][ T5072] FAT-fs (loop4): Directory bread(block 72) failed [ 59.737657][ T5105] loop2: detected capacity change from 0 to 2048 [ 59.739760][ T5072] FAT-fs (loop4): Directory bread(block 73) failed [ 59.815973][ T5117] loop1: detected capacity change from 0 to 128 [ 59.837994][ T5117] ext4 filesystem being mounted at /117/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 59.878479][ T5123] loop5: detected capacity change from 0 to 7 [ 59.884959][ T5123] Buffer I/O error on dev loop5, logical block 0, async page read [ 59.893132][ T5123] Buffer I/O error on dev loop5, logical block 0, async page read [ 59.901063][ T5123] loop5: unable to read partition table [ 59.901432][ T5125] loop2: detected capacity change from 0 to 164 [ 59.910217][ T5123] loop_reread_partitions: partition scan of loop5 (þ被xüŸÑø éÚ¬§½dƤ´à–ƒÝ¡¯¨â·û [ 59.910217][ T5123] ) failed (rc=-5) [ 60.012603][ T5131] loop4: detected capacity change from 0 to 2048 [ 60.032723][ T5131] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.606: bg 0: block 274: padding at end of block bitmap is not set [ 60.048306][ T5131] EXT4-fs (loop4): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 16 with error 117 [ 60.060810][ T5131] EXT4-fs (loop4): This should not happen!! Data will be lost [ 60.060810][ T5131] [ 60.132350][ T5145] loop1: detected capacity change from 0 to 128 [ 60.144329][ T5145] ext4 filesystem being mounted at /121/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 60.289053][ T5155] loop1: detected capacity change from 0 to 8192 [ 60.295772][ T5155] vfat: Unknown parameter 'ÿÿÿÿ00000000000000000004' [ 60.312595][ T5155] 9pnet_fd: Insufficient options for proto=fd [ 60.387653][ T5162] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 60.519592][ T5159] loop4: detected capacity change from 0 to 256 [ 60.572611][ T5159] FAT-fs (loop4): Directory bread(block 64) failed [ 60.588971][ T5159] FAT-fs (loop4): Directory bread(block 65) failed [ 60.601415][ T5159] FAT-fs (loop4): Directory bread(block 66) failed [ 60.609144][ T5171] __nla_validate_parse: 17 callbacks suppressed [ 60.609158][ T5171] netlink: 4 bytes leftover after parsing attributes in process `syz.3.621'. [ 60.622617][ T5159] FAT-fs (loop4): Directory bread(block 67) failed [ 60.634236][ T5159] FAT-fs (loop4): Directory bread(block 68) failed [ 60.651042][ T5159] FAT-fs (loop4): Directory bread(block 69) failed [ 60.657803][ T5179] loop3: detected capacity change from 0 to 128 [ 60.664119][ T5159] FAT-fs (loop4): Directory bread(block 70) failed [ 60.671318][ T5159] FAT-fs (loop4): Directory bread(block 71) failed [ 60.679025][ T5179] ext4 filesystem being mounted at /117/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 60.684190][ T5159] FAT-fs (loop4): Directory bread(block 72) failed [ 60.704173][ T5159] FAT-fs (loop4): Directory bread(block 73) failed [ 60.744535][ T5186] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.625'. [ 60.762636][ T5182] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.625'. [ 60.783828][ T5190] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.626'. [ 60.794089][ T5187] loop4: detected capacity change from 0 to 512 [ 60.794405][ T5184] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.626'. [ 60.806960][ T5187] EXT4-fs: Ignoring removed i_version option [ 60.815760][ T5187] EXT4-fs: Ignoring removed nobh option [ 60.835796][ T5187] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 60.847418][ T5192] loop0: detected capacity change from 0 to 1024 [ 60.854093][ T5192] ext4: Unknown parameter 'noacl' [ 60.864714][ T5187] EXT4-fs (loop4): 1 truncate cleaned up [ 60.948996][ T5200] Cannot find add_set index 0 as target [ 61.060481][ T5202] tipc: Trying to set illegal importance in message [ 61.106041][ T5202] pim6reg1: entered promiscuous mode [ 61.111387][ T5202] pim6reg1: entered allmulticast mode [ 61.129478][ T5206] netlink: 4 bytes leftover after parsing attributes in process `syz.4.634'. [ 61.190141][ T5210] loop5: detected capacity change from 0 to 7 [ 61.197834][ T5210] Buffer I/O error on dev loop5, logical block 0, async page read [ 61.207309][ T5210] Buffer I/O error on dev loop5, logical block 0, async page read [ 61.211428][ T5214] loop4: detected capacity change from 0 to 128 [ 61.215167][ T5210] loop5: unable to read partition table [ 61.228665][ T5210] loop_reread_partitions: partition scan of loop5 (þ被xüŸÑø éÚ¬§½dƤ´à–ƒÝ¡¯¨â·û [ 61.228665][ T5210] ) failed (rc=-5) [ 61.231325][ T5214] ext4 filesystem being mounted at /146/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 61.335619][ T5227] loop1: detected capacity change from 0 to 512 [ 61.342415][ T5227] EXT4-fs: Ignoring removed i_version option [ 61.348591][ T5227] EXT4-fs: Ignoring removed nobh option [ 61.354675][ T5227] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 61.355027][ T5228] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.640'. [ 61.366355][ T5227] EXT4-fs (loop1): 1 truncate cleaned up [ 61.374618][ T5221] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.640'. [ 61.405540][ T5231] netlink: 4 bytes leftover after parsing attributes in process `syz.4.644'. [ 61.414677][ T5231] bridge_slave_1: left allmulticast mode [ 61.420405][ T5231] bridge_slave_1: left promiscuous mode [ 61.426244][ T5231] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.434035][ T5231] bridge_slave_0: left allmulticast mode [ 61.439751][ T5231] bridge_slave_0: left promiscuous mode [ 61.445481][ T5231] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.612573][ T5241] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 61.622173][ T5240] loop1: detected capacity change from 0 to 2048 [ 61.649154][ T5240] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.648: bg 0: block 274: padding at end of block bitmap is not set [ 61.664101][ T5240] EXT4-fs (loop1): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 16 with error 117 [ 61.676643][ T5240] EXT4-fs (loop1): This should not happen!! Data will be lost [ 61.676643][ T5240] [ 61.719511][ T5249] loop0: detected capacity change from 0 to 128 [ 61.728971][ T5249] ext4 filesystem being mounted at /119/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 61.840225][ T5264] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.654'. [ 61.878481][ T5266] loop1: detected capacity change from 0 to 512 [ 61.894605][ T5266] EXT4-fs: Ignoring removed i_version option [ 61.900656][ T5266] EXT4-fs: Ignoring removed nobh option [ 61.907205][ T5272] loop5: detected capacity change from 0 to 7 [ 61.913660][ T5266] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 61.918487][ T5272] Buffer I/O error on dev loop5, logical block 0, async page read [ 61.933515][ T5272] Buffer I/O error on dev loop5, logical block 0, async page read [ 61.936668][ T5266] EXT4-fs (loop1): 1 truncate cleaned up [ 61.941454][ T5272] loop5: unable to read partition table [ 61.953000][ T5272] loop_reread_partitions: partition scan of loop5 (þ被xüŸÑø éÚ¬§½dƤ´à–ƒÝ¡¯¨â·û [ 61.953000][ T5272] ) failed (rc=-5) [ 61.984118][ T5278] loop2: detected capacity change from 0 to 128 [ 62.036022][ T5284] loop5: detected capacity change from 0 to 7 [ 62.042341][ T5284] loop5: unable to read partition table [ 62.048146][ T5284] loop_reread_partitions: partition scan of loop5 (þ被xüŸÑø éÚ¬§½dƤ´à–ƒÝ¡¯¨â·û [ 62.048146][ T5284] ) failed (rc=-5) [ 62.078066][ T5286] loop2: detected capacity change from 0 to 512 [ 62.084642][ T5286] EXT4-fs: quotafile must be on filesystem root [ 62.092623][ T5286] netlink: 'syz.2.665': attribute type 6 has an invalid length. [ 62.100319][ T5286] netlink: 'syz.2.665': attribute type 5 has an invalid length. [ 62.114946][ T5286] ref_ctr increment failed for inode: 0x2ea offset: 0x9 ref_ctr_offset: 0x82 of mm: 0xffff88810aa45f80 [ 62.126414][ T5285] uprobe: syz.2.665:5285 failed to unregister, leaking uprobe [ 62.145527][ T5291] FAULT_INJECTION: forcing a failure. [ 62.145527][ T5291] name failslab, interval 1, probability 0, space 0, times 0 [ 62.158229][ T5291] CPU: 1 UID: 0 PID: 5291 Comm: syz.0.667 Not tainted 6.12.0-rc7-syzkaller #0 [ 62.167098][ T5291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 62.177151][ T5291] Call Trace: [ 62.180437][ T5291] [ 62.183365][ T5291] dump_stack_lvl+0xf2/0x150 [ 62.187982][ T5291] dump_stack+0x15/0x20 [ 62.192195][ T5291] should_fail_ex+0x223/0x230 [ 62.196927][ T5291] ? tcp_sendmsg_fastopen+0x163/0x4f0 [ 62.202296][ T5291] should_failslab+0x8f/0xb0 [ 62.206881][ T5291] __kmalloc_cache_noprof+0x4b/0x2a0 [ 62.212168][ T5291] tcp_sendmsg_fastopen+0x163/0x4f0 [ 62.217489][ T5291] tcp_sendmsg_locked+0x2513/0x2700 [ 62.222687][ T5291] ? mntput+0x49/0x70 [ 62.226667][ T5291] ? __rcu_read_unlock+0x4e/0x70 [ 62.231641][ T5291] ? avc_has_perm_noaudit+0x1cc/0x210 [ 62.237063][ T5291] ? avc_has_perm+0xd4/0x160 [ 62.241660][ T5291] ? _raw_spin_unlock_bh+0x36/0x40 [ 62.246778][ T5291] ? __pfx_tcp_sendmsg+0x10/0x10 [ 62.251765][ T5291] tcp_sendmsg+0x30/0x50 [ 62.256007][ T5291] inet_sendmsg+0x77/0xd0 [ 62.260394][ T5291] __sock_sendmsg+0x102/0x180 [ 62.265127][ T5291] __sys_sendto+0x1d6/0x260 [ 62.269709][ T5291] __x64_sys_sendto+0x78/0x90 [ 62.274390][ T5291] x64_sys_call+0x2959/0x2d60 [ 62.279067][ T5291] do_syscall_64+0xc9/0x1c0 [ 62.283626][ T5291] ? clear_bhb_loop+0x55/0xb0 [ 62.288322][ T5291] ? clear_bhb_loop+0x55/0xb0 [ 62.292989][ T5291] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 62.298889][ T5291] RIP: 0033:0x7f8512fce719 [ 62.303358][ T5291] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 62.322959][ T5291] RSP: 002b:00007f8511c47038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 62.331454][ T5291] RAX: ffffffffffffffda RBX: 00007f8513185f80 RCX: 00007f8512fce719 [ 62.339560][ T5291] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 62.347529][ T5291] RBP: 00007f8511c47090 R08: 0000000020000080 R09: 0000000000000010 [ 62.355497][ T5291] R10: 0000000020000800 R11: 0000000000000246 R12: 0000000000000001 [ 62.363472][ T5291] R13: 0000000000000000 R14: 00007f8513185f80 R15: 00007ffdcfebdfa8 [ 62.371441][ T5291] [ 62.419745][ T5300] loop5: detected capacity change from 0 to 7 [ 62.427963][ T5300] loop5: unable to read partition table [ 62.433638][ T5300] loop_reread_partitions: partition scan of loop5 (þ被xüŸÑø éÚ¬§½dƤ´à–ƒÝ¡¯¨â·û [ 62.433638][ T5300] ) failed (rc=-5) [ 62.469576][ T5307] loop2: detected capacity change from 0 to 128 [ 62.519802][ T5318] FAULT_INJECTION: forcing a failure. [ 62.519802][ T5318] name failslab, interval 1, probability 0, space 0, times 0 [ 62.532492][ T5318] CPU: 1 UID: 0 PID: 5318 Comm: syz.4.679 Not tainted 6.12.0-rc7-syzkaller #0 [ 62.533113][ T5319] loop1: detected capacity change from 0 to 256 [ 62.541409][ T5318] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 62.541445][ T5318] Call Trace: [ 62.541452][ T5318] [ 62.541460][ T5318] dump_stack_lvl+0xf2/0x150 [ 62.568483][ T5318] dump_stack+0x15/0x20 [ 62.572709][ T5318] should_fail_ex+0x223/0x230 [ 62.577479][ T5318] ? sidtab_sid2str_get+0xb8/0x140 [ 62.582636][ T5318] should_failslab+0x8f/0xb0 [ 62.587220][ T5318] __kmalloc_node_track_caller_noprof+0xa6/0x380 [ 62.593567][ T5318] ? vsnprintf+0xdd8/0xe30 [ 62.597973][ T5318] kmemdup_noprof+0x2a/0x60 [ 62.602505][ T5318] sidtab_sid2str_get+0xb8/0x140 [ 62.607437][ T5318] security_sid_to_context_core+0x1eb/0x2f0 [ 62.613336][ T5318] security_sid_to_context+0x27/0x30 [ 62.618727][ T5318] selinux_secid_to_secctx+0x22/0x30 [ 62.624005][ T5318] security_secid_to_secctx+0x48/0x90 [ 62.629465][ T5318] audit_log_task_context+0x8c/0x1b0 [ 62.634744][ T5318] audit_log_task+0xfb/0x180 [ 62.639371][ T5318] audit_seccomp+0x68/0x130 [ 62.643867][ T5318] __seccomp_filter+0x6fa/0x1180 [ 62.648833][ T5318] ? selinux_capable+0x1f2/0x260 [ 62.653848][ T5318] __secure_computing+0x9f/0x1c0 [ 62.658799][ T5318] syscall_trace_enter+0xd1/0x1f0 [ 62.663862][ T5318] ? fpregs_assert_state_consistent+0x83/0xa0 [ 62.669933][ T5318] do_syscall_64+0xaa/0x1c0 [ 62.674433][ T5318] ? clear_bhb_loop+0x55/0xb0 [ 62.679099][ T5318] ? clear_bhb_loop+0x55/0xb0 [ 62.683765][ T5318] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 62.689797][ T5318] RIP: 0033:0x7f4b9aa6d15c [ 62.694197][ T5318] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 62.713795][ T5318] RSP: 002b:00007f4b996e1030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 62.722199][ T5318] RAX: ffffffffffffffda RBX: 00007f4b9ac25f80 RCX: 00007f4b9aa6d15c [ 62.730160][ T5318] RDX: 000000000000000f RSI: 00007f4b996e10a0 RDI: 0000000000000003 [ 62.738134][ T5318] RBP: 00007f4b996e1090 R08: 0000000000000000 R09: 0000000000000000 [ 62.746103][ T5318] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 62.754114][ T5318] R13: 0000000000000000 R14: 00007f4b9ac25f80 R15: 00007ffe1fd03658 [ 62.762097][ T5318] [ 62.855996][ T5326] loop4: detected capacity change from 0 to 128 [ 62.877746][ T5327] loop0: detected capacity change from 0 to 512 [ 62.900770][ T5327] EXT4-fs: Ignoring removed i_version option [ 62.906450][ T5326] ext4 filesystem being mounted at /155/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 62.906801][ T5327] EXT4-fs: Ignoring removed nobh option [ 62.932779][ T5327] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 62.933584][ T5319] FAT-fs (loop1): Directory bread(block 64) failed [ 62.944344][ T5327] EXT4-fs (loop0): 1 truncate cleaned up [ 62.949671][ T5319] FAT-fs (loop1): Directory bread(block 65) failed [ 62.962121][ T5319] FAT-fs (loop1): Directory bread(block 66) failed [ 62.966788][ T5335] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 62.973337][ T5319] FAT-fs (loop1): Directory bread(block 67) failed [ 62.993449][ T5319] FAT-fs (loop1): Directory bread(block 68) failed [ 63.002112][ T5319] FAT-fs (loop1): Directory bread(block 69) failed [ 63.010264][ T5319] FAT-fs (loop1): Directory bread(block 70) failed [ 63.014543][ T5339] loop5: detected capacity change from 0 to 7 [ 63.022949][ T5339] buffer_io_error: 4 callbacks suppressed [ 63.022961][ T5339] Buffer I/O error on dev loop5, logical block 0, async page read [ 63.030289][ T5319] FAT-fs (loop1): Directory bread(block 71) failed [ 63.036704][ T5339] Buffer I/O error on dev loop5, logical block 0, async page read [ 63.051052][ T5339] loop5: unable to read partition table [ 63.056430][ T5319] FAT-fs (loop1): Directory bread(block 72) failed [ 63.057596][ T5339] loop_reread_partitions: partition scan of loop5 (þ被xüŸÑø éÚ¬§½dƤ´à–ƒÝ¡¯¨â·û [ 63.057596][ T5339] ) failed (rc=-5) [ 63.063657][ T5319] FAT-fs (loop1): Directory bread(block 73) failed [ 63.106740][ T5319] bio_check_eod: 49175 callbacks suppressed [ 63.106753][ T5319] syz.1.670: attempt to access beyond end of device [ 63.106753][ T5319] loop1: rw=524288, sector=1736, nr_sectors = 32 limit=256 [ 63.131534][ T5319] syz.1.670: attempt to access beyond end of device [ 63.131534][ T5319] loop1: rw=0, sector=1736, nr_sectors = 8 limit=256 [ 63.157353][ T29] kauditd_printk_skb: 312 callbacks suppressed [ 63.157367][ T29] audit: type=1326 audit(1731359410.492:2508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5323 comm="syz.0.681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8512fce719 code=0x7ffc0000 [ 63.187201][ T29] audit: type=1326 audit(1731359410.492:2509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5323 comm="syz.0.681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8512fce719 code=0x7ffc0000 [ 63.315051][ T5361] loop1: detected capacity change from 0 to 128 [ 63.325224][ T5361] ext4 filesystem being mounted at /140/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 63.345150][ T5365] loop0: detected capacity change from 0 to 512 [ 63.353946][ T5365] EXT4-fs error (device loop0): ext4_orphan_get:1388: inode #17: comm syz.0.697: iget: bogus i_mode (0) [ 63.365720][ T5365] EXT4-fs error (device loop0): ext4_orphan_get:1393: comm syz.0.697: couldn't read orphan inode 17 (err -117) [ 63.379545][ T29] audit: type=1400 audit(1731359410.712:2510): avc: denied { create } for pid=5364 comm="syz.0.697" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=chr_file permissive=1 [ 63.383820][ T5365] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz.0.697: bg 0: block 7: invalid block bitmap [ 63.439918][ T5372] loop4: detected capacity change from 0 to 164 [ 63.549277][ T5379] veth1_macvtap: left promiscuous mode [ 63.554903][ T5379] macsec0: entered promiscuous mode [ 63.568293][ T29] audit: type=1400 audit(1731359410.902:2511): avc: denied { create } for pid=5375 comm="syz.1.701" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 63.644471][ T29] audit: type=1326 audit(1731359410.972:2512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5373 comm="syz.4.700" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4b9aa6e719 code=0x0 [ 63.673380][ T5381] Cannot find add_set index 0 as target [ 63.717483][ T29] audit: type=1326 audit(1731359411.052:2513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5385 comm="syz.0.704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8512fce719 code=0x7ffc0000 [ 63.741128][ T29] audit: type=1326 audit(1731359411.052:2514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5385 comm="syz.0.704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8512fce719 code=0x7ffc0000 [ 63.764637][ T29] audit: type=1326 audit(1731359411.052:2515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5385 comm="syz.0.704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8512fce719 code=0x7ffc0000 [ 63.787997][ T29] audit: type=1326 audit(1731359411.052:2516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5385 comm="syz.0.704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8512fce719 code=0x7ffc0000 [ 63.793510][ T5388] tipc: Trying to set illegal importance in message [ 63.811354][ T29] audit: type=1326 audit(1731359411.052:2517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5385 comm="syz.0.704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f8512fce719 code=0x7ffc0000 [ 63.871283][ T5392] loop0: detected capacity change from 0 to 256 [ 63.885103][ T5388] pim6reg1: entered promiscuous mode [ 63.890445][ T5388] pim6reg1: entered allmulticast mode [ 63.909564][ T5392] FAT-fs (loop0): Directory bread(block 64) failed [ 63.925409][ T5392] FAT-fs (loop0): Directory bread(block 65) failed [ 63.964356][ T5392] FAT-fs (loop0): Directory bread(block 66) failed [ 63.980787][ T5392] FAT-fs (loop0): Directory bread(block 67) failed [ 63.983089][ T5402] loop2: detected capacity change from 0 to 512 [ 64.000345][ T5392] FAT-fs (loop0): Directory bread(block 68) failed [ 64.011894][ T5392] FAT-fs (loop0): Directory bread(block 69) failed [ 64.019008][ T5392] FAT-fs (loop0): Directory bread(block 70) failed [ 64.025808][ T5392] FAT-fs (loop0): Directory bread(block 71) failed [ 64.032450][ T5392] FAT-fs (loop0): Directory bread(block 72) failed [ 64.040045][ T5392] FAT-fs (loop0): Directory bread(block 73) failed [ 64.052757][ T5392] syz.0.704: attempt to access beyond end of device [ 64.052757][ T5392] loop0: rw=524288, sector=1736, nr_sectors = 32 limit=256 [ 64.066509][ T5392] syz.0.704: attempt to access beyond end of device [ 64.066509][ T5392] loop0: rw=0, sector=1736, nr_sectors = 8 limit=256 [ 64.163772][ T5411] loop2: detected capacity change from 0 to 764 [ 64.171217][ T5411] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 64.276791][ T5420] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 64.358298][ T5422] loop3: detected capacity change from 0 to 2048 [ 64.380604][ T5422] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 6 with max blocks 4 with error 28 [ 64.392899][ T5422] EXT4-fs (loop3): This should not happen!! Data will be lost [ 64.392899][ T5422] [ 64.402629][ T5422] EXT4-fs (loop3): Total free blocks count 0 [ 64.408682][ T5422] EXT4-fs (loop3): Free/Dirty block details [ 64.414638][ T5422] EXT4-fs (loop3): free_blocks=0 [ 64.419571][ T5422] EXT4-fs (loop3): dirty_blocks=0 [ 64.424759][ T5422] EXT4-fs (loop3): Block reservation details [ 64.430757][ T5422] EXT4-fs (loop3): i_reserved_data_blocks=0 [ 64.460501][ T5426] FAULT_INJECTION: forcing a failure. [ 64.460501][ T5426] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 64.473676][ T5426] CPU: 1 UID: 0 PID: 5426 Comm: syz.4.718 Not tainted 6.12.0-rc7-syzkaller #0 [ 64.482574][ T5426] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 64.492674][ T5426] Call Trace: [ 64.495961][ T5426] [ 64.498978][ T5426] dump_stack_lvl+0xf2/0x150 [ 64.503630][ T5426] dump_stack+0x15/0x20 [ 64.507795][ T5426] should_fail_ex+0x223/0x230 [ 64.512563][ T5426] should_fail+0xb/0x10 [ 64.516798][ T5426] should_fail_usercopy+0x1a/0x20 [ 64.521980][ T5426] strncpy_from_user+0x25/0x210 [ 64.526857][ T5426] path_removexattr+0x6c/0x290 [ 64.531641][ T5426] __x64_sys_lremovexattr+0x33/0x40 [ 64.536902][ T5426] x64_sys_call+0x1bbe/0x2d60 [ 64.541619][ T5426] do_syscall_64+0xc9/0x1c0 [ 64.546128][ T5426] ? clear_bhb_loop+0x55/0xb0 [ 64.550910][ T5426] ? clear_bhb_loop+0x55/0xb0 [ 64.555592][ T5426] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 64.561563][ T5426] RIP: 0033:0x7f4b9aa6e719 [ 64.565978][ T5426] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 64.585734][ T5426] RSP: 002b:00007f4b996e1038 EFLAGS: 00000246 ORIG_RAX: 00000000000000c6 [ 64.594152][ T5426] RAX: ffffffffffffffda RBX: 00007f4b9ac25f80 RCX: 00007f4b9aa6e719 [ 64.602159][ T5426] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000200000c0 [ 64.610343][ T5426] RBP: 00007f4b996e1090 R08: 0000000000000000 R09: 0000000000000000 [ 64.618320][ T5426] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 64.626379][ T5426] R13: 0000000000000000 R14: 00007f4b9ac25f80 R15: 00007ffe1fd03658 [ 64.634408][ T5426] [ 64.676279][ T5432] loop4: detected capacity change from 0 to 128 [ 64.736032][ T5444] loop1: detected capacity change from 0 to 2048 [ 64.758167][ T5444] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.725: bg 0: block 274: padding at end of block bitmap is not set [ 64.773443][ T5444] EXT4-fs (loop1): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 16 with error 117 [ 64.786073][ T5444] EXT4-fs (loop1): This should not happen!! Data will be lost [ 64.786073][ T5444] [ 64.830070][ T5459] Cannot find add_set index 0 as target [ 64.953775][ T5463] tipc: Trying to set illegal importance in message [ 64.968902][ T5463] pim6reg1: entered promiscuous mode [ 64.974266][ T5463] pim6reg1: entered allmulticast mode [ 65.093033][ T5473] loop2: detected capacity change from 0 to 512 [ 65.106157][ T5473] EXT4-fs mount: 95 callbacks suppressed [ 65.106178][ T5473] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 65.124744][ T5473] ext4 filesystem being mounted at /149/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 65.152313][ T5477] loop0: detected capacity change from 0 to 256 [ 65.166754][ T5477] FAT-fs (loop0): Directory bread(block 64) failed [ 65.173506][ T5477] FAT-fs (loop0): Directory bread(block 65) failed [ 65.180220][ T5477] FAT-fs (loop0): Directory bread(block 66) failed [ 65.186858][ T5477] FAT-fs (loop0): Directory bread(block 67) failed [ 65.193521][ T5477] FAT-fs (loop0): Directory bread(block 68) failed [ 65.200218][ T5477] FAT-fs (loop0): Directory bread(block 69) failed [ 65.206817][ T5477] FAT-fs (loop0): Directory bread(block 70) failed [ 65.213480][ T5477] FAT-fs (loop0): Directory bread(block 71) failed [ 65.215899][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.220124][ T5477] FAT-fs (loop0): Directory bread(block 72) failed [ 65.235541][ T5477] FAT-fs (loop0): Directory bread(block 73) failed [ 65.251699][ T5477] syz.0.730: attempt to access beyond end of device [ 65.251699][ T5477] loop0: rw=524288, sector=1736, nr_sectors = 32 limit=256 [ 65.266977][ T5477] syz.0.730: attempt to access beyond end of device [ 65.266977][ T5477] loop0: rw=0, sector=1736, nr_sectors = 8 limit=256 [ 65.315712][ T5483] loop2: detected capacity change from 0 to 512 [ 65.327516][ T5483] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 65.340145][ T5483] ext4 filesystem being mounted at /151/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 65.408466][ T5486] TCP: request_sock_TCP: Possible SYN flooding on port 0.0.0.0:20002. Sending cookies. [ 65.570275][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.570344][ T5488] loop4: detected capacity change from 0 to 128 [ 65.634619][ T5497] __nla_validate_parse: 23 callbacks suppressed [ 65.634640][ T5497] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.738'. [ 65.650465][ T5490] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.738'. [ 65.660067][ T5498] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.737'. [ 65.674609][ T5493] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.737'. [ 65.718991][ T5504] loop2: detected capacity change from 0 to 128 [ 65.727645][ T5504] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 65.740532][ T5506] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 65.740806][ T5504] ext4 filesystem being mounted at /154/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 65.774011][ T3315] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 65.819548][ T5516] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.744'. [ 65.830328][ T5508] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.744'. [ 65.929789][ T5533] loop0: detected capacity change from 0 to 128 [ 65.939853][ T5533] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 65.950073][ T5534] loop4: detected capacity change from 0 to 2048 [ 65.954755][ T5536] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.752'. [ 65.968706][ T5537] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.751'. [ 65.978206][ T5533] ext4 filesystem being mounted at /138/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 65.983320][ T5526] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.751'. [ 65.999555][ T5534] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 66.006193][ T5525] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.752'. [ 66.036395][ T3316] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 66.062795][ T40] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 6 with max blocks 4 with error 28 [ 66.075083][ T40] EXT4-fs (loop4): This should not happen!! Data will be lost [ 66.075083][ T40] [ 66.075241][ T5548] loop2: detected capacity change from 0 to 1024 [ 66.084759][ T40] EXT4-fs (loop4): Total free blocks count 0 [ 66.091584][ T5548] ext4: Unknown parameter 'dont_hash' [ 66.097091][ T40] EXT4-fs (loop4): Free/Dirty block details [ 66.108389][ T40] EXT4-fs (loop4): free_blocks=0 [ 66.110040][ T5548] loop2: detected capacity change from 0 to 1024 [ 66.113314][ T40] EXT4-fs (loop4): dirty_blocks=0 [ 66.113327][ T40] EXT4-fs (loop4): Block reservation details [ 66.120664][ T5551] netlink: 'syz.1.759': attribute type 5 has an invalid length. [ 66.124771][ T40] EXT4-fs (loop4): i_reserved_data_blocks=0 [ 66.127528][ T5548] ext4: Unknown parameter 'dont_hash' [ 66.153246][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.164723][ T5553] loop0: detected capacity change from 0 to 128 [ 66.198091][ T5548] loop2: detected capacity change from 0 to 1024 [ 66.216105][ T5548] ext4: Unknown parameter 'dont_hash' [ 66.229703][ T5547] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(10) [ 66.236321][ T5547] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 66.243855][ T5547] vhci_hcd vhci_hcd.0: Device attached [ 66.254980][ T5556] usbip_core: unknown command [ 66.259675][ T5556] vhci_hcd: unknown pdu 75816550 [ 66.264655][ T5556] usbip_core: unknown command [ 66.270599][ T40] vhci_hcd: stop threads [ 66.274922][ T40] vhci_hcd: release socket [ 66.276555][ T5548] loop2: detected capacity change from 0 to 1024 [ 66.279368][ T40] vhci_hcd: disconnect device [ 66.319551][ T5548] ext4: Unknown parameter 'dont_hash' [ 66.343323][ T5548] loop2: detected capacity change from 0 to 1024 [ 66.352230][ T5548] ext4: Unknown parameter 'dont_hash' [ 66.374958][ T5548] loop2: detected capacity change from 0 to 1024 [ 66.382731][ T5548] ext4: Unknown parameter 'dont_hash' [ 66.407411][ T5548] loop2: detected capacity change from 0 to 1024 [ 66.416283][ T5548] ext4: Unknown parameter 'dont_hash' [ 66.436964][ T5548] loop2: detected capacity change from 0 to 1024 [ 66.443507][ T5548] ext4: Unknown parameter 'dont_hash' [ 66.454754][ T5548] loop2: detected capacity change from 0 to 1024 [ 66.461504][ T5548] ext4: Unknown parameter 'dont_hash' [ 66.472691][ T5548] loop2: detected capacity change from 0 to 1024 [ 66.479376][ T5548] ext4: Unknown parameter 'dont_hash' [ 66.491172][ T5548] loop2: detected capacity change from 0 to 1024 [ 66.497826][ T5548] ext4: Unknown parameter 'dont_hash' [ 66.510636][ T5548] loop2: detected capacity change from 0 to 1024 [ 66.517514][ T5548] ext4: Unknown parameter 'dont_hash' [ 66.529661][ T5548] loop2: detected capacity change from 0 to 1024 [ 66.536448][ T5548] ext4: Unknown parameter 'dont_hash' [ 66.551798][ T5548] loop2: detected capacity change from 0 to 1024 [ 66.558744][ T5548] ext4: Unknown parameter 'dont_hash' [ 66.570154][ T5548] loop2: detected capacity change from 0 to 1024 [ 66.577252][ T5548] ext4: Unknown parameter 'dont_hash' [ 66.593073][ T5548] loop2: detected capacity change from 0 to 1024 [ 66.601297][ T5548] ext4: Unknown parameter 'dont_hash' [ 66.605259][ T5570] loop0: detected capacity change from 0 to 128 [ 66.623402][ T5548] loop2: detected capacity change from 0 to 1024 [ 66.626323][ T5570] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 66.629911][ T5548] ext4: Unknown parameter 'dont_hash' [ 66.652717][ T5548] loop2: detected capacity change from 0 to 1024 [ 66.658603][ T5570] ext4 filesystem being mounted at /142/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 66.661026][ T5548] ext4: Unknown parameter 'dont_hash' [ 66.681196][ T5548] loop2: detected capacity change from 0 to 1024 [ 66.687678][ T5548] ext4: Unknown parameter 'dont_hash' [ 66.698829][ T5548] loop2: detected capacity change from 0 to 1024 [ 66.707971][ T5548] ext4: Unknown parameter 'dont_hash' [ 66.719458][ T5548] loop2: detected capacity change from 0 to 1024 [ 66.726088][ T5548] ext4: Unknown parameter 'dont_hash' [ 66.736890][ T5548] loop2: detected capacity change from 0 to 1024 [ 66.743398][ T5548] ext4: Unknown parameter 'dont_hash' [ 66.754208][ T5548] loop2: detected capacity change from 0 to 1024 [ 66.774323][ T5548] ext4: Unknown parameter 'dont_hash' [ 66.797541][ T5581] FAULT_INJECTION: forcing a failure. [ 66.797541][ T5581] name failslab, interval 1, probability 0, space 0, times 0 [ 66.810231][ T5581] CPU: 1 UID: 0 PID: 5581 Comm: syz.1.771 Not tainted 6.12.0-rc7-syzkaller #0 [ 66.819094][ T5581] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 66.829586][ T5581] Call Trace: [ 66.832948][ T5581] [ 66.835910][ T5581] dump_stack_lvl+0xf2/0x150 [ 66.840504][ T5581] dump_stack+0x15/0x20 [ 66.844687][ T5581] should_fail_ex+0x223/0x230 [ 66.849368][ T5581] ? do_proc_control+0x1c4/0x850 [ 66.854313][ T5581] should_failslab+0x8f/0xb0 [ 66.858983][ T5581] __kmalloc_cache_noprof+0x4b/0x2a0 [ 66.864292][ T5581] do_proc_control+0x1c4/0x850 [ 66.869082][ T5581] ? should_fail_ex+0xd7/0x230 [ 66.873852][ T5581] usbdev_ioctl+0x283f/0x3e00 [ 66.878550][ T5581] ? do_vfs_ioctl+0x96e/0x1530 [ 66.883310][ T5581] ? selinux_file_ioctl+0x2f7/0x380 [ 66.888526][ T5581] ? __fget_files+0x1d4/0x210 [ 66.893232][ T5581] ? __pfx_usbdev_ioctl+0x10/0x10 [ 66.898328][ T5581] __se_sys_ioctl+0xcd/0x140 [ 66.902989][ T5581] __x64_sys_ioctl+0x43/0x50 [ 66.907574][ T5581] x64_sys_call+0x15cc/0x2d60 [ 66.912322][ T5581] do_syscall_64+0xc9/0x1c0 [ 66.916852][ T5581] ? clear_bhb_loop+0x55/0xb0 [ 66.921600][ T5581] ? clear_bhb_loop+0x55/0xb0 [ 66.926267][ T5581] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 66.932240][ T5581] RIP: 0033:0x7f09222ee719 [ 66.936679][ T5581] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 66.956534][ T5581] RSP: 002b:00007f0920f67038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 66.964936][ T5581] RAX: ffffffffffffffda RBX: 00007f09224a5f80 RCX: 00007f09222ee719 [ 66.972899][ T5581] RDX: 0000000020000040 RSI: 00000000c0105500 RDI: 0000000000000003 [ 66.980966][ T5581] RBP: 00007f0920f67090 R08: 0000000000000000 R09: 0000000000000000 [ 66.988927][ T5581] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 66.996928][ T5581] R13: 0000000000000000 R14: 00007f09224a5f80 R15: 00007ffd1904a0d8 [ 67.004895][ T5581] [ 67.030703][ T5583] Invalid ELF header magic: != ELF [ 67.055803][ T5585] loop3: detected capacity change from 0 to 164 [ 67.065791][ T5587] loop2: detected capacity change from 0 to 128 [ 67.074038][ T3316] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 67.109066][ T5585] syz.3.774: attempt to access beyond end of device [ 67.109066][ T5585] loop3: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 67.139094][ T5585] syz.3.774: attempt to access beyond end of device [ 67.139094][ T5585] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 67.161796][ T5594] loop0: detected capacity change from 0 to 2048 [ 67.171407][ T5585] syz.3.774: attempt to access beyond end of device [ 67.171407][ T5585] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 67.171767][ T5585] syz.3.774: attempt to access beyond end of device [ 67.171767][ T5585] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 67.198764][ T5594] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 67.205427][ T5594] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.778: bg 0: block 274: padding at end of block bitmap is not set [ 67.243916][ T5594] EXT4-fs (loop0): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 16 with error 117 [ 67.256401][ T5594] EXT4-fs (loop0): This should not happen!! Data will be lost [ 67.256401][ T5594] [ 67.260920][ T5602] loop4: detected capacity change from 0 to 512 [ 67.295851][ T5602] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.308958][ T5602] ext4 filesystem being mounted at /172/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 67.309534][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.401435][ T5613] vhci_hcd: invalid port number 255 [ 67.406733][ T5613] vhci_hcd: default hub control req: 801a v087e i00ff l0 [ 67.428947][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.521817][ T5619] loop4: detected capacity change from 0 to 512 [ 67.557844][ T5619] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.573380][ T5619] ext4 filesystem being mounted at /173/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 67.602740][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.612427][ T5623] tipc: Trying to set illegal importance in message [ 67.638668][ T5625] loop4: detected capacity change from 0 to 1024 [ 67.645521][ T5625] EXT4-fs: Ignoring removed i_version option [ 67.665720][ T5625] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 67.671438][ T5623] pim6reg1: entered promiscuous mode [ 67.683302][ T5623] pim6reg1: entered allmulticast mode [ 67.721840][ T5625] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 67.745773][ T5625] EXT4-fs (loop4): Remounting filesystem read-only [ 67.752351][ T5625] EXT4-fs (loop4): error restoring inline_data for inode -- potential data loss! (inode 12, error -5) [ 67.784877][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.803486][ T5631] loop4: detected capacity change from 0 to 128 [ 67.822635][ T5631] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 67.836135][ T5631] ext4 filesystem being mounted at /175/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 67.859016][ T3320] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 67.903775][ T5636] loop4: detected capacity change from 0 to 128 [ 67.912219][ T5636] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 67.925610][ T5636] ext4 filesystem being mounted at /177/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 67.971982][ T3320] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 68.044065][ T5649] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.075315][ T5651] loop4: detected capacity change from 0 to 1024 [ 68.083425][ T5651] ext4: Unknown parameter 'noacl' [ 68.116911][ T5649] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.147303][ T5658] vhci_hcd: invalid port number 255 [ 68.152608][ T5658] vhci_hcd: default hub control req: 801a v087e i00ff l0 [ 68.160092][ T5658] FAULT_INJECTION: forcing a failure. [ 68.160092][ T5658] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 68.173222][ T5658] CPU: 1 UID: 0 PID: 5658 Comm: syz.2.797 Not tainted 6.12.0-rc7-syzkaller #0 [ 68.182172][ T5658] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 68.192217][ T5658] Call Trace: [ 68.195484][ T5658] [ 68.198430][ T5658] dump_stack_lvl+0xf2/0x150 [ 68.203062][ T5658] dump_stack+0x15/0x20 [ 68.207261][ T5658] should_fail_ex+0x223/0x230 [ 68.211951][ T5658] should_fail+0xb/0x10 [ 68.216142][ T5658] should_fail_usercopy+0x1a/0x20 [ 68.221170][ T5658] _copy_to_user+0x20/0xa0 [ 68.225596][ T5658] simple_read_from_buffer+0xa0/0x110 [ 68.230970][ T5658] proc_fail_nth_read+0xf9/0x140 [ 68.235898][ T5658] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 68.241563][ T5658] vfs_read+0x1a2/0x700 [ 68.245740][ T5658] ? __fget_files+0x1d4/0x210 [ 68.250472][ T5658] ksys_read+0xeb/0x1b0 [ 68.254623][ T5658] __x64_sys_read+0x42/0x50 [ 68.259206][ T5658] x64_sys_call+0x27d3/0x2d60 [ 68.263991][ T5658] do_syscall_64+0xc9/0x1c0 [ 68.268518][ T5658] ? clear_bhb_loop+0x55/0xb0 [ 68.273251][ T5658] ? clear_bhb_loop+0x55/0xb0 [ 68.277911][ T5658] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.283825][ T5658] RIP: 0033:0x7fea5942d15c [ 68.288240][ T5658] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 68.307846][ T5658] RSP: 002b:00007fea580a1030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 68.316396][ T5658] RAX: ffffffffffffffda RBX: 00007fea595e5f80 RCX: 00007fea5942d15c [ 68.324389][ T5658] RDX: 000000000000000f RSI: 00007fea580a10a0 RDI: 0000000000000007 [ 68.332357][ T5658] RBP: 00007fea580a1090 R08: 0000000000000000 R09: 0000000000000000 [ 68.340362][ T5658] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 68.348345][ T5658] R13: 0000000000000000 R14: 00007fea595e5f80 R15: 00007fff442064f8 [ 68.356321][ T5658] [ 68.362566][ T5649] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.406355][ T5665] loop2: detected capacity change from 0 to 164 [ 68.416061][ T5665] bio_check_eod: 21242 callbacks suppressed [ 68.416073][ T5665] syz.2.800: attempt to access beyond end of device [ 68.416073][ T5665] loop2: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 68.435931][ T5665] syz.2.800: attempt to access beyond end of device [ 68.435931][ T5665] loop2: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 68.437874][ T5649] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.449410][ T5665] syz.2.800: attempt to access beyond end of device [ 68.449410][ T5665] loop2: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 68.472590][ T5665] syz.2.800: attempt to access beyond end of device [ 68.472590][ T5665] loop2: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 68.486590][ T5665] syz.2.800: attempt to access beyond end of device [ 68.486590][ T5665] loop2: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 68.500348][ T5665] syz.2.800: attempt to access beyond end of device [ 68.500348][ T5665] loop2: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 68.514340][ T5665] syz.2.800: attempt to access beyond end of device [ 68.514340][ T5665] loop2: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 68.527953][ T5665] syz.2.800: attempt to access beyond end of device [ 68.527953][ T5665] loop2: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 68.542131][ T5665] syz.2.800: attempt to access beyond end of device [ 68.542131][ T5665] loop2: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 68.555773][ T5665] syz.2.800: attempt to access beyond end of device [ 68.555773][ T5665] loop2: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 68.562187][ T5649] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.585984][ T5649] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.600988][ T5649] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.611925][ T5649] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.678349][ T5671] loop0: detected capacity change from 0 to 2048 [ 68.706059][ T5671] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 68.720654][ T5671] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.803: bg 0: block 234: padding at end of block bitmap is not set [ 68.736005][ T29] kauditd_printk_skb: 267 callbacks suppressed [ 68.736018][ T29] audit: type=1400 audit(1731359416.052:2783): avc: denied { ioctl } for pid=5670 comm="syz.0.803" path="/150/file0/cgroup.events" dev="loop0" ino=18 ioctlcmd=0x582b scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 68.795588][ T5671] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 3 with error 28 [ 68.807864][ T5671] EXT4-fs (loop0): This should not happen!! Data will be lost [ 68.807864][ T5671] [ 68.817675][ T5671] EXT4-fs (loop0): Total free blocks count 0 [ 68.823718][ T5671] EXT4-fs (loop0): Free/Dirty block details [ 68.829753][ T5671] EXT4-fs (loop0): free_blocks=0 [ 68.834766][ T5671] EXT4-fs (loop0): dirty_blocks=16 [ 68.839877][ T5671] EXT4-fs (loop0): Block reservation details [ 68.845921][ T5671] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 68.893168][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.936804][ T5682] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 68.960285][ T5684] loop0: detected capacity change from 0 to 2048 [ 68.980493][ T5681] loop4: detected capacity change from 0 to 512 [ 68.990287][ T5681] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 69.002879][ T5684] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.023084][ T5684] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.807: bg 0: block 274: padding at end of block bitmap is not set [ 69.039348][ T5681] EXT4-fs (loop4): 1 truncate cleaned up [ 69.045310][ T5684] EXT4-fs (loop0): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 16 with error 117 [ 69.057794][ T5684] EXT4-fs (loop0): This should not happen!! Data will be lost [ 69.057794][ T5684] [ 69.069448][ T5681] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.101443][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.115340][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.165323][ T29] audit: type=1400 audit(1731359416.502:2784): avc: denied { audit_write } for pid=5688 comm="syz.0.809" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 69.187867][ T29] audit: type=1107 audit(1731359416.522:2785): pid=5688 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 69.254769][ T5693] loop4: detected capacity change from 0 to 2048 [ 69.286644][ T5693] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.305074][ T5697] loop0: detected capacity change from 0 to 512 [ 69.319870][ T5697] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.332853][ T5697] ext4 filesystem being mounted at /154/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 69.386526][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.408865][ T29] audit: type=1326 audit(1731359416.742:2786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5707 comm="syz.0.816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8512fce719 code=0x7ffc0000 [ 69.432355][ T29] audit: type=1326 audit(1731359416.742:2787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5707 comm="syz.0.816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8512fce719 code=0x7ffc0000 [ 69.457066][ T29] audit: type=1326 audit(1731359416.742:2788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5707 comm="syz.0.816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=99 compat=0 ip=0x7f8512fce719 code=0x7ffc0000 [ 69.480464][ T29] audit: type=1326 audit(1731359416.742:2789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5707 comm="syz.0.816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8512fce719 code=0x7ffc0000 [ 69.503830][ T29] audit: type=1326 audit(1731359416.742:2790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5707 comm="syz.0.816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=149 compat=0 ip=0x7f8512fce719 code=0x7ffc0000 [ 69.523134][ T29] audit: type=1326 audit(1731359416.832:2791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5707 comm="syz.0.816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8512fce719 code=0x7ffc0000 [ 69.530529][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.552987][ T29] audit: type=1326 audit(1731359416.892:2792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5707 comm="syz.0.816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8512fce719 code=0x7ffc0000 [ 69.612746][ T5711] FAULT_INJECTION: forcing a failure. [ 69.612746][ T5711] name failslab, interval 1, probability 0, space 0, times 0 [ 69.625539][ T5711] CPU: 0 UID: 0 PID: 5711 Comm: syz.1.818 Not tainted 6.12.0-rc7-syzkaller #0 [ 69.634395][ T5711] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 69.644480][ T5711] Call Trace: [ 69.647826][ T5711] [ 69.650826][ T5711] dump_stack_lvl+0xf2/0x150 [ 69.655434][ T5711] dump_stack+0x15/0x20 [ 69.659596][ T5711] should_fail_ex+0x223/0x230 [ 69.664319][ T5711] ? audit_log_start+0x34c/0x6b0 [ 69.669266][ T5711] should_failslab+0x8f/0xb0 [ 69.673862][ T5711] kmem_cache_alloc_noprof+0x4c/0x290 [ 69.679288][ T5711] audit_log_start+0x34c/0x6b0 [ 69.684123][ T5711] ? llist_add_batch+0xab/0x150 [ 69.688995][ T5711] audit_seccomp+0x4b/0x130 [ 69.693504][ T5711] __seccomp_filter+0x6fa/0x1180 [ 69.698502][ T5711] ? _raw_spin_unlock+0x14/0x50 [ 69.703488][ T5711] __secure_computing+0x9f/0x1c0 [ 69.708439][ T5711] syscall_trace_enter+0xd1/0x1f0 [ 69.713519][ T5711] ? fpregs_restore_userregs+0xc2/0x1b0 [ 69.719263][ T5711] do_syscall_64+0xaa/0x1c0 [ 69.723867][ T5711] ? clear_bhb_loop+0x55/0xb0 [ 69.728552][ T5711] ? clear_bhb_loop+0x55/0xb0 [ 69.733261][ T5711] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.739273][ T5711] RIP: 0033:0x7f09222ee719 [ 69.743692][ T5711] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 69.763421][ T5711] RSP: 002b:00007f0920f67038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 69.771832][ T5711] RAX: ffffffffffffffda RBX: 00007f09224a5f80 RCX: 00007f09222ee719 [ 69.779883][ T5711] RDX: 0000000000000000 RSI: 0000000020000300 RDI: 0000000000000009 [ 69.787896][ T5711] RBP: 00007f0920f67090 R08: 0000000000000000 R09: 0000000000000000 [ 69.795885][ T5711] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 69.803872][ T5711] R13: 0000000000000000 R14: 00007f09224a5f80 R15: 00007ffd1904a0d8 [ 69.811937][ T5711] [ 69.812841][ T5727] loop2: detected capacity change from 0 to 164 [ 69.821587][ T5711] lo speed is unknown, defaulting to 1000 [ 69.830379][ T5711] lo speed is unknown, defaulting to 1000 [ 69.836742][ T5728] loop4: detected capacity change from 0 to 2048 [ 69.840445][ T5711] lo speed is unknown, defaulting to 1000 [ 69.851558][ T5711] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 69.865829][ T5711] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 69.887389][ T5711] lo speed is unknown, defaulting to 1000 [ 69.888091][ T5728] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.903401][ T5711] lo speed is unknown, defaulting to 1000 [ 69.912429][ T5711] lo speed is unknown, defaulting to 1000 [ 69.917248][ T5728] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.820: bg 0: block 274: padding at end of block bitmap is not set [ 69.926304][ T5711] lo speed is unknown, defaulting to 1000 [ 69.946059][ T5728] EXT4-fs (loop4): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 16 with error 117 [ 69.947993][ T5711] lo speed is unknown, defaulting to 1000 [ 69.958596][ T5728] EXT4-fs (loop4): This should not happen!! Data will be lost [ 69.958596][ T5728] [ 69.989676][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.119337][ T5748] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 70.129192][ T5748] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.218341][ T5748] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 70.228225][ T5748] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.277640][ T5748] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 70.287483][ T5748] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.299831][ T5753] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 70.329183][ T5743] loop1: detected capacity change from 0 to 512 [ 70.349250][ T5743] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.830: bg 0: block 35: padding at end of block bitmap is not set [ 70.367374][ T5748] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 70.377226][ T5748] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.390069][ T5743] EXT4-fs (loop1): Remounting filesystem read-only [ 70.402297][ T5743] EXT4-fs (loop1): 1 truncate cleaned up [ 70.426532][ T5743] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.442184][ T5743] SELinux: (dev loop1, type ext4) getxattr errno 5 [ 70.452653][ T5760] loop0: detected capacity change from 0 to 128 [ 70.468884][ T5743] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.487070][ T5748] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 70.495394][ T5748] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.528143][ T5748] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 70.536481][ T5748] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.558905][ T5762] loop0: detected capacity change from 0 to 512 [ 70.562792][ T5748] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 70.573441][ T5748] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.574820][ T5762] EXT4-fs: Ignoring removed i_version option [ 70.585577][ T5748] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 70.587704][ T5762] EXT4-fs: Ignoring removed nobh option [ 70.595853][ T5748] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.613578][ T5762] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 70.632939][ T5764] capability: warning: `syz.1.837' uses 32-bit capabilities (legacy support in use) [ 70.643948][ T5762] EXT4-fs (loop0): 1 truncate cleaned up [ 70.653792][ T5762] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.703531][ T5767] __nla_validate_parse: 9 callbacks suppressed [ 70.703546][ T5767] netlink: 4 bytes leftover after parsing attributes in process `syz.4.838'. [ 70.743507][ T5778] loop4: detected capacity change from 0 to 256 [ 70.758672][ T5781] FAULT_INJECTION: forcing a failure. [ 70.758672][ T5781] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 70.765269][ T5778] FAT-fs (loop4): Directory bread(block 64) failed [ 70.771811][ T5781] CPU: 1 UID: 0 PID: 5781 Comm: syz.2.843 Not tainted 6.12.0-rc7-syzkaller #0 [ 70.778655][ T5778] FAT-fs (loop4): Directory bread(block 65) failed [ 70.787181][ T5781] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 70.787194][ T5781] Call Trace: [ 70.787201][ T5781] [ 70.787209][ T5781] dump_stack_lvl+0xf2/0x150 [ 70.787237][ T5781] dump_stack+0x15/0x20 [ 70.793984][ T5778] FAT-fs (loop4): Directory bread(block 66) failed [ 70.803759][ T5781] should_fail_ex+0x223/0x230 [ 70.803795][ T5781] should_fail+0xb/0x10 [ 70.807220][ T5778] FAT-fs (loop4): Directory bread(block 67) failed [ 70.809980][ T5781] should_fail_usercopy+0x1a/0x20 [ 70.814671][ T5778] FAT-fs (loop4): Directory bread(block 68) failed [ 70.818750][ T5781] _copy_from_iter+0xd5/0xd00 [ 70.818774][ T5781] ? kmalloc_reserve+0x16e/0x190 [ 70.825394][ T5778] FAT-fs (loop4): Directory bread(block 69) failed [ 70.829997][ T5781] ? __build_skb_around+0x196/0x1f0 [ 70.834325][ T5778] FAT-fs (loop4): Directory bread(block 70) failed [ 70.840630][ T5781] ? __alloc_skb+0x21f/0x310 [ 70.840664][ T5781] ? __virt_addr_valid+0x1ed/0x250 [ 70.845972][ T5778] FAT-fs (loop4): Directory bread(block 71) failed [ 70.852142][ T5781] ? __check_object_size+0x364/0x520 [ 70.856983][ T5778] FAT-fs (loop4): Directory bread(block 72) failed [ 70.861720][ T5781] netlink_sendmsg+0x460/0x6e0 [ 70.868524][ T5778] FAT-fs (loop4): Directory bread(block 73) failed [ 70.873402][ T5781] ? __pfx_netlink_sendmsg+0x10/0x10 [ 70.924743][ T5781] __sock_sendmsg+0x140/0x180 [ 70.929472][ T5781] ____sys_sendmsg+0x312/0x410 [ 70.934310][ T5781] __sys_sendmsg+0x1d9/0x270 [ 70.938984][ T5781] __x64_sys_sendmsg+0x46/0x50 [ 70.943744][ T5781] x64_sys_call+0x2689/0x2d60 [ 70.948427][ T5781] do_syscall_64+0xc9/0x1c0 [ 70.952946][ T5781] ? clear_bhb_loop+0x55/0xb0 [ 70.957611][ T5781] ? clear_bhb_loop+0x55/0xb0 [ 70.962278][ T5781] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 70.968263][ T5781] RIP: 0033:0x7fea5942e719 [ 70.972719][ T5781] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 70.992340][ T5781] RSP: 002b:00007fea580a1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 71.000817][ T5781] RAX: ffffffffffffffda RBX: 00007fea595e5f80 RCX: 00007fea5942e719 [ 71.008774][ T5781] RDX: 0000000000000000 RSI: 0000000020001ac0 RDI: 0000000000000004 [ 71.016804][ T5781] RBP: 00007fea580a1090 R08: 0000000000000000 R09: 0000000000000000 [ 71.024874][ T5781] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 71.032931][ T5781] R13: 0000000000000000 R14: 00007fea595e5f80 R15: 00007fff442064f8 [ 71.040967][ T5781] [ 71.072518][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.092537][ T5787] loop3: detected capacity change from 0 to 128 [ 71.092928][ T5789] loop0: detected capacity change from 0 to 164 [ 71.176544][ T5802] loop4: detected capacity change from 0 to 164 [ 71.209894][ T5804] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.223215][ T5807] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.847'. [ 71.242534][ T5801] netlink: 4 bytes leftover after parsing attributes in process `syz.3.850'. [ 71.251384][ T5796] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.847'. [ 71.263201][ T5804] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.310858][ T5804] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.339520][ T5812] netlink: 4 bytes leftover after parsing attributes in process `syz.1.853'. [ 71.366310][ T5810] loop3: detected capacity change from 0 to 2048 [ 71.393139][ T5804] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.416193][ T5810] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.451951][ T5810] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 6 with max blocks 2 with error 28 [ 71.464202][ T5810] EXT4-fs (loop3): This should not happen!! Data will be lost [ 71.464202][ T5810] [ 71.473886][ T5810] EXT4-fs (loop3): Total free blocks count 0 [ 71.479905][ T5810] EXT4-fs (loop3): Free/Dirty block details [ 71.485823][ T5810] EXT4-fs (loop3): free_blocks=0 [ 71.490759][ T5810] EXT4-fs (loop3): dirty_blocks=0 [ 71.495813][ T5810] EXT4-fs (loop3): Block reservation details [ 71.501847][ T5810] EXT4-fs (loop3): i_reserved_data_blocks=0 [ 71.529372][ T5804] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.551928][ T5804] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.575274][ T5804] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.601928][ T5804] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.671809][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.711469][ T5818] netlink: 12 bytes leftover after parsing attributes in process `syz.3.856'. [ 71.720473][ T5818] netlink: 8 bytes leftover after parsing attributes in process `syz.3.856'. [ 71.746484][ T5816] loop2: detected capacity change from 0 to 256 [ 71.775332][ T5816] FAT-fs (loop2): Directory bread(block 64) failed [ 71.782124][ T5816] FAT-fs (loop2): Directory bread(block 65) failed [ 71.796541][ T5816] FAT-fs (loop2): Directory bread(block 66) failed [ 71.813418][ T5816] FAT-fs (loop2): Directory bread(block 67) failed [ 71.829319][ T5816] FAT-fs (loop2): Directory bread(block 68) failed [ 71.843607][ T5816] FAT-fs (loop2): Directory bread(block 69) failed [ 71.858437][ T5816] FAT-fs (loop2): Directory bread(block 70) failed [ 71.872825][ T5816] FAT-fs (loop2): Directory bread(block 71) failed [ 71.886793][ T5816] FAT-fs (loop2): Directory bread(block 72) failed [ 71.900655][ T5816] FAT-fs (loop2): Directory bread(block 73) failed [ 71.907250][ T5820] loop3: detected capacity change from 0 to 512 [ 71.927619][ T5820] EXT4-fs: Ignoring removed i_version option [ 71.933699][ T5820] EXT4-fs: Ignoring removed nobh option [ 71.944439][ T5820] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 71.975401][ T5820] EXT4-fs (loop3): 1 truncate cleaned up [ 71.981529][ T5820] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.031518][ T5828] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 72.052376][ T5826] pim6reg1: entered promiscuous mode [ 72.053839][ T5830] loop4: detected capacity change from 0 to 128 [ 72.057800][ T5826] pim6reg1: entered allmulticast mode [ 72.154896][ T5840] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.208234][ T5840] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.219528][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.252626][ T5846] loop3: detected capacity change from 0 to 512 [ 72.261645][ T5840] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.275871][ T5846] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.288806][ T5846] ext4 filesystem being mounted at /156/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 72.301757][ T5840] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.312713][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.334850][ T5850] loop3: detected capacity change from 0 to 256 [ 72.347565][ T5850] FAT-fs (loop3): Directory bread(block 64) failed [ 72.352588][ T5840] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.354108][ T5850] FAT-fs (loop3): Directory bread(block 65) failed [ 72.366546][ T5840] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.370116][ T5850] FAT-fs (loop3): Directory bread(block 66) failed [ 72.381019][ T5840] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.383736][ T5850] FAT-fs (loop3): Directory bread(block 67) failed [ 72.395809][ T5840] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.399481][ T5850] FAT-fs (loop3): Directory bread(block 68) failed [ 72.413168][ T5850] FAT-fs (loop3): Directory bread(block 69) failed [ 72.419797][ T5850] FAT-fs (loop3): Directory bread(block 70) failed [ 72.426365][ T5850] FAT-fs (loop3): Directory bread(block 71) failed [ 72.432939][ T5850] FAT-fs (loop3): Directory bread(block 72) failed [ 72.439881][ T5850] FAT-fs (loop3): Directory bread(block 73) failed [ 72.485456][ T5853] loop3: detected capacity change from 0 to 512 [ 72.508820][ T5853] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.521772][ T5853] ext4 filesystem being mounted at /158/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 72.527664][ T5862] FAULT_INJECTION: forcing a failure. [ 72.527664][ T5862] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 72.545714][ T5862] CPU: 0 UID: 0 PID: 5862 Comm: syz.0.874 Not tainted 6.12.0-rc7-syzkaller #0 [ 72.554599][ T5862] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 72.564747][ T5862] Call Trace: [ 72.568014][ T5862] [ 72.570935][ T5862] dump_stack_lvl+0xf2/0x150 [ 72.575595][ T5862] dump_stack+0x15/0x20 [ 72.579793][ T5862] should_fail_ex+0x223/0x230 [ 72.584479][ T5862] should_fail_alloc_page+0xfd/0x110 [ 72.589837][ T5862] __alloc_pages_noprof+0x109/0x340 [ 72.595051][ T5862] alloc_pages_mpol_noprof+0xb1/0x1e0 [ 72.600417][ T5862] folio_alloc_mpol_noprof+0x36/0x70 [ 72.605770][ T5862] shmem_get_folio_gfp+0x3d1/0xd90 [ 72.610895][ T5862] shmem_fallocate+0x593/0x860 [ 72.615852][ T5862] vfs_fallocate+0x368/0x3b0 [ 72.620657][ T5862] __x64_sys_fallocate+0x79/0xc0 [ 72.625668][ T5862] x64_sys_call+0x2783/0x2d60 [ 72.630331][ T5862] do_syscall_64+0xc9/0x1c0 [ 72.634823][ T5862] ? clear_bhb_loop+0x55/0xb0 [ 72.639539][ T5862] ? clear_bhb_loop+0x55/0xb0 [ 72.644219][ T5862] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 72.650291][ T5862] RIP: 0033:0x7f8512fce719 [ 72.654749][ T5862] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 72.674407][ T5862] RSP: 002b:00007f8511c47038 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 72.682862][ T5862] RAX: ffffffffffffffda RBX: 00007f8513185f80 RCX: 00007f8512fce719 [ 72.690818][ T5862] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 72.698797][ T5862] RBP: 00007f8511c47090 R08: 0000000000000000 R09: 0000000000000000 [ 72.706810][ T5862] R10: 00000000001000f4 R11: 0000000000000246 R12: 0000000000000001 [ 72.714769][ T5862] R13: 0000000000000000 R14: 00007f8513185f80 R15: 00007ffdcfebdfa8 [ 72.722772][ T5862] [ 72.729973][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.771713][ T5869] loop3: detected capacity change from 0 to 2048 [ 72.783998][ T5870] loop0: detected capacity change from 0 to 512 [ 72.791179][ T5870] EXT4-fs: Ignoring removed i_version option [ 72.797271][ T5870] EXT4-fs: Ignoring removed nobh option [ 72.799332][ T5869] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.803583][ T5870] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 72.839179][ T5875] loop2: detected capacity change from 0 to 128 [ 72.848536][ T5875] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 72.848882][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.866907][ T5875] ext4 filesystem being mounted at /184/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 72.870181][ T5870] EXT4-fs (loop0): 1 truncate cleaned up [ 72.888071][ T5870] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.901765][ T3315] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 72.913206][ T5878] FAULT_INJECTION: forcing a failure. [ 72.913206][ T5878] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 72.926369][ T5878] CPU: 1 UID: 0 PID: 5878 Comm: syz.3.880 Not tainted 6.12.0-rc7-syzkaller #0 [ 72.935261][ T5878] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 72.945320][ T5878] Call Trace: [ 72.948690][ T5878] [ 72.951623][ T5878] dump_stack_lvl+0xf2/0x150 [ 72.956283][ T5878] dump_stack+0x15/0x20 [ 72.960472][ T5878] should_fail_ex+0x223/0x230 [ 72.965188][ T5878] should_fail+0xb/0x10 [ 72.969369][ T5878] should_fail_usercopy+0x1a/0x20 [ 72.974503][ T5878] _copy_from_user+0x1e/0xb0 [ 72.979128][ T5878] __se_sys_memfd_create+0x26b/0x5c0 [ 72.984457][ T5878] __x64_sys_memfd_create+0x31/0x40 [ 72.989668][ T5878] x64_sys_call+0x2891/0x2d60 [ 72.994331][ T5878] do_syscall_64+0xc9/0x1c0 [ 72.998848][ T5878] ? clear_bhb_loop+0x55/0xb0 [ 73.003549][ T5878] ? clear_bhb_loop+0x55/0xb0 [ 73.008284][ T5878] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 73.014211][ T5878] RIP: 0033:0x7ffb23ece719 [ 73.018609][ T5878] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 73.038307][ T5878] RSP: 002b:00007ffb22b40e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 73.046718][ T5878] RAX: ffffffffffffffda RBX: 000000000000052e RCX: 00007ffb23ece719 [ 73.054679][ T5878] RDX: 00007ffb22b40ef0 RSI: 0000000000000000 RDI: 00007ffb23f41c0a [ 73.062677][ T5878] RBP: 0000000020000640 R08: 00007ffb22b40bb7 R09: 00007ffb22b40e40 [ 73.070637][ T5878] R10: 000000000000000a R11: 0000000000000202 R12: 0000000020000000 [ 73.078601][ T5878] R13: 00007ffb22b40ef0 R14: 00007ffb22b40eb0 R15: 00000000200001c0 [ 73.086737][ T5878] [ 73.107524][ T5883] loop2: detected capacity change from 0 to 256 [ 73.122140][ T5880] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 73.132064][ T5880] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.151577][ T5883] FAT-fs (loop2): Directory bread(block 64) failed [ 73.158490][ T5883] FAT-fs (loop2): Directory bread(block 65) failed [ 73.165188][ T5883] FAT-fs (loop2): Directory bread(block 66) failed [ 73.171932][ T5883] FAT-fs (loop2): Directory bread(block 67) failed [ 73.178511][ T5883] FAT-fs (loop2): Directory bread(block 68) failed [ 73.185239][ T5883] FAT-fs (loop2): Directory bread(block 69) failed [ 73.191804][ T5883] FAT-fs (loop2): Directory bread(block 70) failed [ 73.201509][ T5883] FAT-fs (loop2): Directory bread(block 71) failed [ 73.208840][ T5883] FAT-fs (loop2): Directory bread(block 72) failed [ 73.210099][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.215849][ T5883] FAT-fs (loop2): Directory bread(block 73) failed [ 73.234844][ T5880] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 73.244825][ T5880] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.285907][ T5880] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 73.295727][ T5880] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.317303][ T5903] loop0: detected capacity change from 0 to 128 [ 73.332428][ T5903] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 73.349712][ T5903] ext4 filesystem being mounted at /174/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 73.351840][ T5906] lo speed is unknown, defaulting to 1000 [ 73.380286][ T5880] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 73.390198][ T5880] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.392308][ T3316] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 73.405860][ T5907] loop2: detected capacity change from 0 to 512 [ 73.414181][ T5909] loop3: detected capacity change from 0 to 164 [ 73.418538][ T5907] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 73.437074][ T5909] bio_check_eod: 81020 callbacks suppressed [ 73.437089][ T5909] syz.3.894: attempt to access beyond end of device [ 73.437089][ T5909] loop3: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 73.443402][ T5907] EXT4-fs (loop2): 1 truncate cleaned up [ 73.457214][ T5909] syz.3.894: attempt to access beyond end of device [ 73.457214][ T5909] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 73.471990][ T5907] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.503595][ T5912] loop0: detected capacity change from 0 to 2048 [ 73.507955][ T5909] syz.3.894: attempt to access beyond end of device [ 73.507955][ T5909] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 73.523701][ T5909] syz.3.894: attempt to access beyond end of device [ 73.523701][ T5909] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 73.526504][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.539777][ T5909] syz.3.894: attempt to access beyond end of device [ 73.539777][ T5909] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 73.559693][ T5909] syz.3.894: attempt to access beyond end of device [ 73.559693][ T5909] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 73.573499][ T5909] syz.3.894: attempt to access beyond end of device [ 73.573499][ T5909] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 73.587779][ T5909] syz.3.894: attempt to access beyond end of device [ 73.587779][ T5909] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 73.601741][ T5909] syz.3.894: attempt to access beyond end of device [ 73.601741][ T5909] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 73.617629][ T5909] syz.3.894: attempt to access beyond end of device [ 73.617629][ T5909] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 73.641820][ T5912] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.662115][ T5912] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 6 with max blocks 2 with error 28 [ 73.674356][ T5912] EXT4-fs (loop0): This should not happen!! Data will be lost [ 73.674356][ T5912] [ 73.683975][ T5912] EXT4-fs (loop0): Total free blocks count 0 [ 73.690050][ T5912] EXT4-fs (loop0): Free/Dirty block details [ 73.695979][ T5912] EXT4-fs (loop0): free_blocks=0 [ 73.700912][ T5912] EXT4-fs (loop0): dirty_blocks=0 [ 73.705956][ T5912] EXT4-fs (loop0): Block reservation details [ 73.711946][ T5912] EXT4-fs (loop0): i_reserved_data_blocks=0 [ 73.805121][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.857070][ T29] kauditd_printk_skb: 209 callbacks suppressed [ 73.857082][ T29] audit: type=1326 audit(1731359421.192:3000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5925 comm="syz.0.900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8512fce719 code=0x7ffc0000 [ 73.886673][ T29] audit: type=1326 audit(1731359421.192:3001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5925 comm="syz.0.900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8512fce719 code=0x7ffc0000 [ 73.910100][ T29] audit: type=1326 audit(1731359421.192:3002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5925 comm="syz.0.900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=126 compat=0 ip=0x7f8512fce719 code=0x7ffc0000 [ 73.933481][ T29] audit: type=1326 audit(1731359421.192:3003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5925 comm="syz.0.900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8512fce719 code=0x7ffc0000 [ 73.956940][ T29] audit: type=1326 audit(1731359421.192:3004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5925 comm="syz.0.900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8512fce719 code=0x7ffc0000 [ 73.982902][ T29] audit: type=1400 audit(1731359421.192:3005): avc: denied { create } for pid=5925 comm="syz.0.900" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 74.003396][ T29] audit: type=1326 audit(1731359421.312:3006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5925 comm="syz.0.900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7f8512fce719 code=0x7ffc0000 [ 74.026922][ T29] audit: type=1326 audit(1731359421.312:3007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5925 comm="syz.0.900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8512fce719 code=0x7ffc0000 [ 74.050433][ T29] audit: type=1326 audit(1731359421.312:3008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5925 comm="syz.0.900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f8512fce719 code=0x7ffc0000 [ 74.073674][ T29] audit: type=1326 audit(1731359421.312:3009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5925 comm="syz.0.900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8512fce719 code=0x7ffc0000 [ 74.119070][ T5933] loop2: detected capacity change from 0 to 256 [ 74.123635][ T5935] loop0: detected capacity change from 0 to 2048 [ 74.141407][ T5935] ================================================================== [ 74.143746][ T5933] FAT-fs (loop2): Directory bread(block 64) failed [ 74.149501][ T5935] BUG: KCSAN: data-race in __find_get_block / has_bh_in_lru [ 74.149535][ T5935] [ 74.149541][ T5935] read-write to 0xffff888237c2bb10 of 8 bytes by task 5933 on cpu 0: [ 74.158554][ T5933] FAT-fs (loop2): Directory bread(block 65) failed [ 74.163300][ T5935] __find_get_block+0x434/0x8a0 [ 74.175200][ T5933] FAT-fs (loop2): Directory bread(block 66) failed [ 74.180106][ T5935] bdev_getblk+0x139/0x3b0 [ 74.190590][ T5933] FAT-fs (loop2): Directory bread(block 67) failed [ 74.191405][ T5935] __bread_gfp+0x52/0x280 [ 74.191431][ T5935] fat_get_entry+0x482/0x5f0 [ 74.200233][ T5933] FAT-fs (loop2): Directory bread(block 68) failed [ 74.202307][ T5935] fat_subdirs+0xfa/0x190 [ 74.215047][ T5933] FAT-fs (loop2): Directory bread(block 69) failed [ 74.217666][ T5935] fat_read_root+0x2d3/0x310 [ 74.222237][ T5933] FAT-fs (loop2): Directory bread(block 70) failed [ 74.228451][ T5935] fat_fill_super+0x14f5/0x1bf0 [ 74.228482][ T5935] vfat_fill_super+0x24/0x30 [ 74.228499][ T5935] get_tree_bdev_flags+0x29f/0x310 [ 74.228525][ T5935] get_tree_bdev+0x1f/0x30 [ 74.237186][ T5933] FAT-fs (loop2): Directory bread(block 71) failed [ 74.239569][ T5935] vfat_get_tree+0x1c/0x30 [ 74.250054][ T5933] FAT-fs (loop2): Directory bread(block 72) failed [ 74.254069][ T5935] vfs_get_tree+0x56/0x1e0 [ 74.264906][ T5933] FAT-fs (loop2): Directory bread(block 73) failed [ 74.264939][ T5935] do_new_mount+0x227/0x690 [ 74.291354][ T5935] path_mount+0x49b/0xb30 [ 74.295691][ T5935] __se_sys_mount+0x27c/0x2d0 [ 74.300371][ T5935] __x64_sys_mount+0x67/0x80 [ 74.305484][ T5935] x64_sys_call+0x203e/0x2d60 [ 74.310168][ T5935] do_syscall_64+0xc9/0x1c0 [ 74.314669][ T5935] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.320568][ T5935] [ 74.322881][ T5935] read to 0xffff888237c2bb10 of 8 bytes by task 5935 on cpu 1: [ 74.330414][ T5935] has_bh_in_lru+0x35/0x1f0 [ 74.334913][ T5935] smp_call_function_many_cond+0x2d5/0xc20 [ 74.340721][ T5935] on_each_cpu_cond_mask+0x3c/0x90 [ 74.345831][ T5935] invalidate_bh_lrus+0x2a/0x30 [ 74.350938][ T5935] set_blocksize+0x24c/0x270 [ 74.355528][ T5935] sb_min_blocksize+0x63/0xe0 [ 74.360204][ T5935] ext4_fill_super+0x38b/0x3a10 [ 74.365056][ T5935] get_tree_bdev_flags+0x29f/0x310 [ 74.370172][ T5935] get_tree_bdev+0x1f/0x30 [ 74.374596][ T5935] ext4_get_tree+0x1c/0x30 [ 74.379009][ T5935] vfs_get_tree+0x56/0x1e0 [ 74.383502][ T5935] do_new_mount+0x227/0x690 [ 74.388005][ T5935] path_mount+0x49b/0xb30 [ 74.392340][ T5935] __se_sys_mount+0x27c/0x2d0 [ 74.397038][ T5935] __x64_sys_mount+0x67/0x80 [ 74.401630][ T5935] x64_sys_call+0x203e/0x2d60 [ 74.406304][ T5935] do_syscall_64+0xc9/0x1c0 [ 74.410812][ T5935] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.416709][ T5935] [ 74.419026][ T5935] value changed: 0xffff888106f9ad00 -> 0xffff888106f9ae38 [ 74.426123][ T5935] [ 74.428436][ T5935] Reported by Kernel Concurrency Sanitizer on: [ 74.434569][ T5935] CPU: 1 UID: 0 PID: 5935 Comm: syz.0.903 Not tainted 6.12.0-rc7-syzkaller #0 [ 74.443422][ T5935] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 74.453475][ T5935] ================================================================== [ 74.477210][ T5935] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.493606][ T5935] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.903: bg 0: block 274: padding at end of block bitmap is not set [ 74.508288][ T5935] EXT4-fs (loop0): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 16 with error 117 [ 74.521296][ T5935] EXT4-fs (loop0): This should not happen!! Data will be lost [ 74.521296][ T5935] [ 74.538314][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.868905][ T5880] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 75.877120][ T5880] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.887932][ T5880] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 75.896188][ T5880] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.906846][ T5880] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 75.915030][ T5880] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.925531][ T5880] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 75.933787][ T5880] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0