last executing test programs: 6.580880511s ago: executing program 3 (id=542): r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x70, 0x101301) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) socket$can_bcm(0x1d, 0x2, 0x2) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x10) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x502}) 6.227364157s ago: executing program 3 (id=547): openat$random(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r0 = openat$random(0xffffffffffffff9c, &(0x7f0000001a00), 0x0, 0x0) r1 = io_uring_setup(0x7d98, &(0x7f00000003c0)={0x0, 0xdf07, 0x2, 0x2}) close_range(r1, 0xffffffffffffffff, 0x0) ioctl$RNDADDENTROPY(r0, 0x40085203, &(0x7f0000000040)=ANY=[]) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000003000200850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r6, 0x0, 0x7, 0x0) shutdown(r5, 0x2) socket$netlink(0x10, 0x3, 0x1c) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'veth0_macvtap\x00'}) r8 = socket$nl_route(0x10, 0x3, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065fffff53000000800395032303030"], 0x15) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x3, 0x13, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000900000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b70300000000000085000000000000bf090000000000005509010000000000852000000300000095"], 0x0, 0x8, 0x0, 0x0, 0x41100, 0x62, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r10, &(0x7f0000000300)=ANY=[], 0x15) r11 = dup(r10) write$P9_RLERRORu(r11, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r11, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r11, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r9, @ANYBLOB=',wfdno=', @ANYRESHEX=r11]) chown(&(0x7f0000000240)='./file0\x00', 0xee00, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000022c0)=ANY=[@ANYBLOB="200000006a000100000000000000ef1ea55f13fac3ea00000800010001"], 0x20}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r8, 0x8933, &(0x7f0000000000)={'wg2\x00'}) socket$igmp6(0xa, 0x3, 0x2) 6.124914919s ago: executing program 3 (id=551): syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x0, &(0x7f00000021c0), 0x1, 0x789, &(0x7f0000001240)="$eJzs3M9rG2caAOB3JlacH96VF/awe8kuJJBAiGzHl+RU91J6CQQCvabGHhvjsRUsObXdQJzeCoU0vrSlUNp7j70WQvoH9FYCLfTWQ6G0qXtoe1GRLCuJIylKYkeJ+zww1veNvpn3fWfkzzPgUQB/W/+v/0gihiLiYkQUm+vTiDjYaB2KWN8at3nv2lR9SaJWu/RzUt8sNmvF1r6S5uvRaGwS/4mIO4WI0+88GreyujY/mefZUrM/Ul24MlJZXTsztzA5m81mi2Pj50fPjY+fGx3ftVpPvHH+8K2vX9vY+OaL6s1jA2eSmGjUHc3adi3QA7aOSSEmdqxf3ItgfZT0MGbgOeQBAEB39ev8A81rs0IU40C3qzQXcAAAAPBSqg3WevVHzyMBAACAF0wS/c4AAAAA2Fvb/wew/WzvXj0H28lPr0bEcLv4A41niCMORSEijmwmDz1+kGxtBs9k/UZE3J5o8/nr5Ynm7kbvNw/vzh7Zbbfr889Eu/knbc0/0Wb+Gdj+7oRn1Hn+ux//QIf572KPMb785L+FjvFvVFbePdYuftKKn3SI/2aP8W9uvHer03u1zyJOtv37kzwUq8v3Q4zMzOXtfrVa6d7589TdzvVHHHkkfpI0oibd67/SY/1vb/46v94l/qnj3c//VvzBh7arfybeb+aRRsSt5mu9v7EjxvGFb796NHKyvh1/usPxb3/+X2/V/2mP9X//+eBKj0MBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgIY2IoUjSUqudpqVSxNGI+HccSfNypXp6pry8OF1/L2I4CunMXJ6NRkRxq5/U+2ON9v3+2R398Yj413eHt4LO5VlpqpxP97t4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAWo5GxFAkaSki0oj4rZimpVK/swIAAAB23XC/EwAAAAD2nPt/AAAA2P+e9v4/2eU8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgH3t4oUL9aW2ee/aVL0/fXV1eb589cx0VpkvLSxPlabKS1dKs+XybJ6VpsoLj9tfGhFj52N5ZaSaVaojldW1ywvl5cXq5bmFydnsclZ4LlUBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwpIYaS5KWIiJttNO0VIr4R0QMRyGZmcuz0Yj4Z0TcLRYG6/2xficNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADArqusrs1P5nm29HI3avurnJ4bkUS8AGl0aHzUPCvdxiTrEXn2Q3Nkn1JNm+GfZT9Plvz1xxyWfjf+14e5CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/qusrs1P5nm2VOl3JgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPRX+mMSEfXlZPHE0M53Dya/FxuvEfHWx5c+WJmsVpfG6ut/aa2vfthcf/aBDa8/zxoAAABg33vlSQZv36dv38cDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD0qrK6Nj+Z59nSHjbiRr+rBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnsZfAQAA//9bFLc7") r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r1, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x1db) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) writev(r2, &(0x7f0000000140)=[{&(0x7f0000001200)="10", 0x100000}], 0x1) socket$nl_generic(0x10, 0x3, 0x10) r3 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000880)='+}[@\x00') keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000180)=@keyring={'key_or_keyring:', 0x0, 0x2}) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000004c0)='setgroups\x00') writev(r5, &(0x7f0000003740)=[{&(0x7f0000001440)='deny;', 0x5}], 0x1) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000100000024000180060005004e230000060001000200000008000300ac1414aa0800060001"], 0x38}, 0x1, 0x0, 0x0, 0x4000011}, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000100)={0x14, 0x0, 0x1, 0x70bd28, 0x25dfdbfc}, 0x14}}, 0x0) 4.159072611s ago: executing program 3 (id=568): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0, 0x0, 0x7}, 0x18) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x40000, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r2, 0x0) finit_module(r2, 0x0, 0x0) (fail_nth: 2) 3.845720346s ago: executing program 3 (id=572): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0, 0x0, 0x7}, 0x18) r1 = gettid() syz_open_procfs(r1, &(0x7f0000000280)='attr/current\x00') pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r3, 0x0, 0x2, 0x0) fcntl$setstatus(r3, 0x4, 0x2000) vmsplice(r2, 0x0, 0x0, 0x0) write$binfmt_elf64(r4, 0x0, 0x18c6) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x6, &(0x7f0000000180)=0x100003) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f00000000c0)) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) r9 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCMIWAIT(r9, 0x545c, 0x0) ioctl$TIOCVHANGUP(r9, 0x5437, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x10, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffe2caac4d8c3585b30000182300006ebfbed3f3013e67ef1169ca3cc4029142f48c46778480702b66365ad72fd84c2a256b9d7fafd6b6381ebddc5e430aa70ab0fda2d21c2b62785f88", @ANYRES64=0x0, @ANYRESDEC], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) tkill(0x0, 0x7) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) 3.375919334s ago: executing program 1 (id=579): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020"], &(0x7f00000012c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x2, @perf_config_ext={0xf60, 0x2}, 0x100400, 0x5dd8, 0x3a65, 0x5, 0xd38c, 0xa, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) mkdir(0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000070000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000407b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/bus/input/devices\x00', 0x0, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f00000002c0)=""/4094, 0xffe}], 0x1, 0xf0, 0x800) 3.324787535s ago: executing program 4 (id=580): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$int_in(r0, 0x5452, &(0x7f00000000c0)=0x55) r1 = socket$inet_dccp(0x2, 0x6, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) perf_event_open(0x0, 0xffffffffffffffff, 0xdfffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) syz_clone(0x40800000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$inet_dccp_buf(r1, 0x21, 0x2, &(0x7f00000006c0)="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", 0x1000) setsockopt(r1, 0x10d, 0xf, &(0x7f00001c9fff)="03", 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe, @void, @value}, 0x90) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4005, &(0x7f0000000040)=0x81, 0x5, 0x0) set_mempolicy_home_node(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 2.359363601s ago: executing program 4 (id=584): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000240)=@framed, 0x0, 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="0107000000000000000020000000040003"], 0x1c}, 0x1, 0x0, 0x0, 0x8041}, 0x0) 2.227149343s ago: executing program 4 (id=587): r0 = socket(0x10, 0x3, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000040)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x50) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000000000)=0x4, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180500000000c800000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) ioperm(0x0, 0x3, 0x1000000002) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x200}, 0x1c) listen(r3, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r5 = accept(r3, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000d80)=ANY=[@ANYBLOB="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", @ANYRESHEX=r5, @ANYRES32, @ANYRESDEC], 0xfffffdef}, 0x1, 0x0, 0x0, 0x2400c854}, 0x0) recvfrom(r4, &(0x7f0000000280)=""/90, 0xfffffffffffffe22, 0x500, 0x0, 0x0) connect$unix(r5, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) mmap(&(0x7f0000261000/0xc00000)=nil, 0xc00000, 0x3000003, 0x31, 0xffffffffffffffff, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) write(r6, &(0x7f0000000040)="3a03000018002551075c0165ff0ffc02802000030004000500e1000c0400070080000900", 0x33a) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) write$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000140)={'full'}, 0xfffffdef) r7 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000000140)={'sit0\x00', &(0x7f0000000240)={'syztnl2\x00', 0x0, 0x0, 0x80, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @multicast2}}}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r7, 0x89f8, &(0x7f0000000700)={'syztnl2\x00', &(0x7f0000000680)={'syztnl0\x00', r8, 0x8, 0x1, 0x7de, 0xf094, {{0x5, 0x4, 0x3, 0x4, 0x14, 0x68, 0x0, 0x1, 0x29, 0x0, @multicast1, @rand_addr=0x64010100}}}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000180)={'gretap0\x00', &(0x7f0000000100)={'syztnl0\x00', 0x0, 0x40, 0x1, 0x3, 0xfff, {{0xa, 0x4, 0x2, 0x37, 0x28, 0x65, 0x0, 0x9, 0x0, 0x0, @private=0xa010100, @broadcast, {[@ra={0x94, 0x4}, @ssrr={0x89, 0xf, 0x89, [@multicast2, @remote, @rand_addr=0x64010101]}]}}}}}) 1.511706384s ago: executing program 2 (id=588): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x1, 0x6, 0xbfab, 0x8, 0x40, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00'}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r2}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) r5 = syz_open_dev$evdev(&(0x7f0000000040), 0x2, 0x0) ioctl$EVIOCGRAB(r5, 0x40044590, &(0x7f0000000200)=0x7ffffffc) ioctl$EVIOCGRAB(r5, 0x40044590, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r6}, 0x10) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg(r7, 0x0, 0x4000884) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000040), &(0x7f0000000280)='%-010d \x00'}, 0x20) r8 = io_uring_setup(0x177d, &(0x7f00000002c0)={0x0, 0x3e12, 0x2, 0x2, 0x3b1}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x8aa, 0x4}, 0x10040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000180)={0x1, &(0x7f0000000140)=[{0x6, 0x8, 0x8, 0x8}]}) seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, 0x0) close_range(r8, 0xffffffffffffffff, 0x200000000000000) 1.264994598s ago: executing program 1 (id=589): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={0x1, 0xffffffffffffffff}, 0x4) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000600)={r2, &(0x7f0000000e40)="d4001db551aa5ebf333124de608ce4eac3e7d088439d15ccd1a8e276db4ca185779e5917cebc059bd8610125c4ef2aea9373c30157c09cd17d5559ee579b3dfe9b645aa48301cca8a1e560a719f83e45f98f984b0632bfdb4687d500041ef1954bf3534d20f548e5611522f4bd9cc8b8c0e71cbc630707df1d3c67ed9605140e6ad6b5c0fa19ecc8e63116c2052109560e7b1733176a27e284b2599f4a798a9d16b480951b64888322f1838b3e1fad2bfd4c7eebbe6914ac68de6c7ec3e253317a395f54d99d5704"}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r3 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x2, 0x0) r4 = open(&(0x7f00000002c0)='./bus\x00', 0x42202, 0x0) splice(r3, 0x0, r4, 0x0, 0x114, 0x0) r5 = socket(0x40000000015, 0x5, 0x0) connect$inet6(r5, &(0x7f0000001140)={0xa, 0x4e23, 0xf, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xfffffffe}, 0x1c) getpeername$tipc(r5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000004600)={0x0, 0xc, &(0x7f0000004580)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESHEX=r1, @ANYBLOB="0000000000000000b7080000abe900007b8af8ff00000000c3f8ffffffb703000000000000b80400000000000085000000c300000095"], 0x0, 0x800000f, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x180, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x3}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000240)='./file0\x00') 1.241895699s ago: executing program 1 (id=590): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x6, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005c831, 0xffffffffffffffff, 0x0) 1.18662538s ago: executing program 1 (id=592): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1a089, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x0, 0x4}, 0x2010, 0x40000, 0x0, 0x9, 0x1000, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) epoll_create1(0x0) socket$netlink(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) (async) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) (async) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x1f) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) (async) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000202300800000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x49, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001300)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="4400000010000304016100"/20, @ANYRES32=0x0, @ANYBLOB="d3ddd1de00000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00'], 0x44}}, 0x0) 1.143427671s ago: executing program 4 (id=594): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x6, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005c831, 0xffffffffffffffff, 0x0) 1.084002891s ago: executing program 1 (id=595): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020"], &(0x7f00000012c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000240)='kfree\x00', r0}, 0x10) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r1}, 0x8) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x2, @perf_config_ext={0xf60, 0x2}, 0x100400, 0x5dd8, 0x3a65, 0x5, 0xd38c, 0xa, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) mkdir(0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000070000000010"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/bus/input/devices\x00', 0x0, 0x0) preadv(r5, &(0x7f00000015c0)=[{&(0x7f00000002c0)=""/4094, 0xffe}], 0x1, 0xf0, 0x800) 1.065384792s ago: executing program 4 (id=596): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x9}, 0x10) write(r0, &(0x7f00000000c0)="240000001e005f0214fffffffffffff8070000000100000000000000080003000b000000", 0x24) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000100)={0x10000014}) r4 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r5}, 0x10) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x401, 0x0) 960.059964ms ago: executing program 0 (id=597): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000008000000000000005000100070000000900020073797a30000000001400078008001240000000000500150004000000050005000000000005000400000000000d000300686173683a6d6163"], 0x5c}}, 0x0) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)={0x6c, 0x9, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_ADT={0x30, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e24}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x2}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz0\x00'}}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1}, @IPSET_ATTR_ADT={0x14, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_ETHER={0xa, 0x11, @local}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r4, &(0x7f0000000240)={0x0, 0xffac, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="28000000030605000000000000000000000000000500010007"], 0x28}}, 0x0) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="24000002010203000000000000000000030000ff000000006e000000000000000000000098110894ab8c0cb21adba3181182cea6ea9ff9603543d12a5d903112429966c16c439052ab4c8dfa0572a5d36eb86aa4ec4cc19ac3387cdcbb08f12717a5249f63c7be1a61fc062d3e0508b7a688b162bbe28ea3e3"], 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x48000) 513.838221ms ago: executing program 3 (id=598): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kfree\x00', r1}, 0x18) lsm_list_modules(0x0, 0x0, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x88002, 0x0) pwritev(r2, &(0x7f00000000c0)=[{&(0x7f0000000140)="de", 0x1}], 0x1, 0x0, 0x0) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r2) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000047c0)={0x60, r6, 0x405, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r7}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r7, {}, {}, {0x8, 0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x8881}, 0x0) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl2\x00', 0x0, 0x29, 0x8, 0x4, 0x7, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}, @local, 0x8, 0x40, 0xd, 0x9}}) sendmsg$ETHTOOL_MSG_RINGS_GET(r2, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x6c, r3, 0x800, 0x70bd2b, 0x25dfdbff, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x5, 0x62000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100020, 0x0, 0x0, 0x6, 0x3, 0x0, 0xa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x12) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x12) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffac, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r11}, 0x10) r12 = openat$sysfs(0xffffff9c, &(0x7f0000000200)='/sys/kernel/notes', 0x0, 0x0) preadv(r12, &(0x7f0000000180)=[{&(0x7f00000012c0)=""/112, 0x70}], 0x1, 0x0, 0x0) r13 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) fcntl$setlease(r13, 0x400, 0x1) close(r13) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) 512.584721ms ago: executing program 2 (id=599): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0x80000001}, 0x18) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, "810000cc2b000000000000fa25ffff00ffffff"}) syz_open_pts(r2, 0x141601) close_range(r1, 0xffffffffffffffff, 0x0) 436.971562ms ago: executing program 2 (id=600): r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x5, 0x62000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100020, 0x0, 0x0, 0x6, 0x3, 0x0, 0xa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x44) sendfile(r1, r1, 0x0, 0x800000009) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a48500000004000000850000000f00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000380)='percpu_alloc_percpu\x00', r2}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000017c0)={0x0, 0xc, &(0x7f0000000540)=ANY=[@ANYRESOCT=r2, @ANYRES8=r0, @ANYRESHEX=r2, @ANYRESHEX=r0, @ANYBLOB="c6c28e9f67d73820cf89eb946a99b519368d738e7bff067d3d648ad314ec0201224a5bd65574ebea6ac26caae2b4"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r3}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000300)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r4}, 0x10) r5 = socket$tipc(0x1e, 0x5, 0x0) flock(r5, 0x2) close(r5) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x8, 0x10001, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000040)='sys_exit\x00', r7}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{r6}, &(0x7f0000000200), &(0x7f0000000740)}, 0x20) r8 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0) ioctl$USBDEVFS_FREE_STREAMS(r8, 0x8008551d, &(0x7f0000000380)=ANY=[@ANYBLOB="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"]) unlinkat(0xffffffffffffff9c, 0x0, 0x0) pipe2$9p(&(0x7f00000001c0), 0x800) syz_clone(0x3f79af34f4714b6f, &(0x7f00000007c0)="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", 0x1000, &(0x7f00000005c0), &(0x7f0000000600), &(0x7f0000000640)="8e07deb9e8497d4fe5dde8577314522d7582060321277423b8c69294765c09bf373256ffdfd1820127239c66899da4f372f009d2cc2874d2770dceb3ed12f4fa57aab8b0cfe09844ff586e07f00e198f4866eaf4cc9242332ce1042008541a9915fa8c43c59be9ef9d801b4b0d05b77a5b638850c50c7135744c0a4c4c1791b9d1fe7fe26cbccba3c7") 434.721562ms ago: executing program 0 (id=601): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0x80000001}, 0x18) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, "810000cc2b000000000000fa25ffff00ffffff"}) syz_open_pts(r2, 0x141601) close_range(r1, 0xffffffffffffffff, 0x0) 392.292863ms ago: executing program 0 (id=602): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r0, 0x0, 0x318a054d}, 0x18) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = epoll_create(0x8) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) 318.944474ms ago: executing program 0 (id=603): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x6, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005c831, 0xffffffffffffffff, 0x0) 269.300585ms ago: executing program 2 (id=604): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0x80000001}, 0x18) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, "810000cc2b000000000000fa25ffff00ffffff"}) syz_open_pts(r2, 0x141601) close_range(r1, 0xffffffffffffffff, 0x0) 268.566365ms ago: executing program 0 (id=605): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r0, 0x0, 0x318a054d}, 0x18) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = epoll_create(0x8) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) 222.886086ms ago: executing program 0 (id=606): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x2008002, &(0x7f00000000c0)={[{@nojournal_checksum}, {@nodiscard}, {@quota}]}, 0x1, 0x558, &(0x7f0000000680)="$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") bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00"/11], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00'}, 0x10) shmdt(0x0) r0 = syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x2029c1b, 0x0, 0x1, 0x0, &(0x7f00000007c0)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xb, &(0x7f00000006c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r1, 0x0, 0x200ffff}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat(r0, 0x0, 0x100, 0x14) connect$rxrpc(0xffffffffffffffff, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) pwrite64(r2, &(0x7f00000005c0)='\"', 0x1, 0x4fed0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x14a) fallocate(r3, 0x20, 0x4000, 0x8000) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000001280)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x141042, 0x0) pwritev2(r4, &(0x7f00000001c0)=[{&(0x7f0000000400)="ba", 0xfdef}], 0x1, 0xe7b, 0x0, 0x1) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="440000001000030429bd7000000000000000a4f066fef5c5a5900835799d1c234a80f8b765eeb531d96338464a938404dd6e078f10d144e1502071b7be05026d813578a49087fda00429947e37470a390c667c60b9c8d36306de8fa51118b8d6aa2894c4370f2b992fa9f95d9b45c9edc65acd9d4221cc77b9e8790e53a33725df0f872c22a43202fc382230523973caffbedc2728f8de5792c27183e6951380ccf1a993a231a7dc8402e6f82e283d61d83ae29ecd14fc831bd44b210805016031f48fa43a36bbfc05f580a8901f4878ca07eb2037d9ee3c791d2d907cbc5110df5b9acd", @ANYRES32=0x0, @ANYBLOB="a5fdad8800000000240012800b00010067656e65766500001400028005000800000000000500090000000000"], 0x44}}, 0x0) syz_emit_ethernet(0x91, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaa0380c200000088a811008100200008004500007b0000000000069078ac141400ac1e000100000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="500800009078000055203188f5d4ecff6fd4ff01000000000000996fc0c5366187fcc8f2bae70e3492c9e1c707314beafeffe0b6d10a25b280efa93d7f83c68ec518347e73bfd72a9eb4a4eec687f39419a7dfe2a5cad7844f7ee0"], 0x0) 218.104066ms ago: executing program 1 (id=607): syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000f"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)='GPL\x00', 0x1ff, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) r3 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$restrict_keyring(0xa, r3, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000100)='e\'.\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x84}, 0x18) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fchown(r4, 0x0, 0xee01) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) setreuid(0xee01, 0xee00) openat(r4, &(0x7f00000000c0)='.\x00', 0x515401, 0x408) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000200), 0x42082) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYRES16=0x0], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4f, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x12, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) pipe2(&(0x7f00000001c0), 0x4000) r5 = syz_io_uring_setup(0x10c, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x315}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[], 0x128}, 0x0) recvmsg$unix(r8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r10, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x12, r10, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080), 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000040)=@IORING_OP_WRITE={0x17, 0x10, 0x4007, @fd_index=0x8000000, 0x2, 0x0}) io_uring_enter(r5, 0x3f70, 0x0, 0x0, 0x0, 0x0) setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd2, &(0x7f00000000c0)={@rand_addr=0x64010102, @local, 0x1, "b8c4eb3a2eae49b39a849982fc84616bf56e11d277ea487d2c665931c252829f", 0xcf84b2, 0x40, 0x3, 0x6}, 0x3c) 210.739716ms ago: executing program 2 (id=608): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000a50000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x18) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x6, 0x0, @buffer={0x2, 0x0, 0x0}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0xfdfdffff, 0x0, 0x0}) 71.524679ms ago: executing program 4 (id=609): syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, &(0x7f0000000040)}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) vmsplice(r0, &(0x7f0000000540), 0x41, 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r1}, &(0x7f0000000040), &(0x7f0000000280)='%pS \x00'}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) r4 = dup(r3) ioctl$PTP_EXTTS_REQUEST2(r4, 0x43403d05, 0x0) syncfs(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ec0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x7101}) close(0xffffffffffffffff) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, 0x0, 0x40004) socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x3, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE={0x8, 0x2, @empty}]}}}]}, 0x3c}, 0x1, 0x2}, 0x0) 0s ago: executing program 2 (id=610): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000280), r0) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f00000004c0)={'wpan0\x00', 0x0}) mknod$loop(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0xc9028ba210c11fc1) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)=ANY=[@ANYRES8=r2, @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000b0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b704000008000000850000009500000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6e, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r5}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000640)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e23, @empty}}, 0xe4b, 0x8, 0x8000, 0x4, 0x10, 0x1, 0xe}, 0x9c) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @multicast1}]}, &(0x7f0000000100)=0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r7 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x800048, &(0x7f0000000380)={[], [{@seclabel}]}) fgetxattr(r7, &(0x7f0000000080)=@known='system.posix_acl_access\x00', &(0x7f0000000280)=""/18, 0x12) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000000)={'\x00', 0x8, 0x4, 0x80400, 0x2004, 0x7fc}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) poll(0x0, 0x0, 0x9) r8 = syz_clone(0x4200000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x2, 0x0, 0x0, 0x4, &(0x7f00000004c0)) wait4(r8, 0x0, 0x40000000, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x143c62, 0x0) kernel console output (not intermixed with test programs): se data=ordered instead of data journaling mode [ 43.979668][ T4009] netlink: 4 bytes leftover after parsing attributes in process `syz.2.169'. [ 44.003064][ T4008] EXT4-fs (loop3): 1 truncate cleaned up [ 44.009630][ T4008] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.136186][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.162329][ T4013] loop3: detected capacity change from 0 to 512 [ 44.169297][ T4013] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 44.181106][ T4013] EXT4-fs (loop3): 1 truncate cleaned up [ 44.187772][ T4013] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.342667][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.418613][ T4018] loop1: detected capacity change from 0 to 512 [ 44.426041][ T4018] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 44.438375][ T4018] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 44.451743][ T4018] EXT4-fs (loop1): 1 truncate cleaned up [ 44.466621][ T4018] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.503168][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.585412][ T4024] loop1: detected capacity change from 0 to 512 [ 44.596519][ T4024] EXT4-fs: EXT4-fs: inode_readahead_blks must be 0 or a power of 2 smaller than 2^31 [ 44.624121][ T4024] loop1: detected capacity change from 0 to 512 [ 44.634757][ T4024] EXT4-fs: EXT4-fs: inode_readahead_blks must be 0 or a power of 2 smaller than 2^31 [ 44.677939][ T4030] loop1: detected capacity change from 0 to 1024 [ 44.688079][ T4030] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 44.699032][ T4030] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (14919!=20869) [ 44.710384][ T4030] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 44.721622][ T4030] EXT4-fs (loop1): invalid journal inode [ 44.728543][ T4030] EXT4-fs (loop1): can't get journal size [ 44.734760][ T4030] EXT4-fs error (device loop1): ext4_protect_reserved_inode:182: inode #3: comm syz.1.176: blocks 2-2 from inode overlap system zone [ 44.749448][ T4030] EXT4-fs (loop1): failed to initialize system zone (-117) [ 44.756766][ T4030] EXT4-fs (loop1): mount failed [ 44.765876][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.849047][ T4044] netlink: 100 bytes leftover after parsing attributes in process `syz.3.180'. [ 45.087781][ T4048] loop3: detected capacity change from 0 to 8192 [ 45.099041][ T4053] loop4: detected capacity change from 0 to 512 [ 45.145717][ T4053] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 45.160039][ T4053] ext4 filesystem being mounted at /33/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 45.161885][ T4048] bond1: entered promiscuous mode [ 45.177562][ T4048] bond1: entered allmulticast mode [ 45.183668][ T4048] 8021q: adding VLAN 0 to HW filter on device bond1 [ 45.199872][ T4048] bond1 (unregistering): Released all slaves [ 45.350683][ T4093] xt_connbytes: Forcing CT accounting to be enabled [ 45.362043][ T4093] Cannot find set identified by id 0 to match [ 45.382164][ T4097] FAULT_INJECTION: forcing a failure. [ 45.382164][ T4097] name failslab, interval 1, probability 0, space 0, times 0 [ 45.395608][ T4097] CPU: 1 UID: 0 PID: 4097 Comm: syz.2.192 Not tainted 6.15.0-rc2-syzkaller-00048-gc62f4b82d571 #0 PREEMPT(voluntary) [ 45.395641][ T4097] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 45.395662][ T4097] Call Trace: [ 45.395745][ T4097] [ 45.395755][ T4097] dump_stack_lvl+0xf6/0x150 [ 45.395784][ T4097] dump_stack+0x15/0x1a [ 45.395800][ T4097] should_fail_ex+0x261/0x270 [ 45.395913][ T4097] should_failslab+0x8f/0xb0 [ 45.395952][ T4097] kmem_cache_alloc_node_noprof+0x5c/0x340 [ 45.396035][ T4097] ? __alloc_skb+0x10d/0x320 [ 45.396067][ T4097] __alloc_skb+0x10d/0x320 [ 45.396097][ T4097] netlink_alloc_large_skb+0xad/0xe0 [ 45.396124][ T4097] netlink_sendmsg+0x3da/0x720 [ 45.396160][ T4097] ? __pfx_netlink_sendmsg+0x10/0x10 [ 45.396244][ T4097] __sock_sendmsg+0x140/0x180 [ 45.396267][ T4097] sock_write_iter+0x186/0x1c0 [ 45.396311][ T4097] do_iter_readv_writev+0x40d/0x4b0 [ 45.396461][ T4097] vfs_writev+0x2da/0x880 [ 45.396486][ T4097] ? get_pid_task+0x94/0xd0 [ 45.396529][ T4097] do_writev+0xf7/0x230 [ 45.396557][ T4097] __x64_sys_writev+0x45/0x50 [ 45.396606][ T4097] x64_sys_call+0x1d68/0x2e10 [ 45.396633][ T4097] do_syscall_64+0xc9/0x1c0 [ 45.396678][ T4097] ? clear_bhb_loop+0x25/0x80 [ 45.396762][ T4097] ? clear_bhb_loop+0x25/0x80 [ 45.396790][ T4097] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 45.396821][ T4097] RIP: 0033:0x7f37f826e169 [ 45.396835][ T4097] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 45.396857][ T4097] RSP: 002b:00007f37f68d7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 45.396875][ T4097] RAX: ffffffffffffffda RBX: 00007f37f8495fa0 RCX: 00007f37f826e169 [ 45.396909][ T4097] RDX: 0000000000000001 RSI: 0000200000000040 RDI: 0000000000000003 [ 45.396923][ T4097] RBP: 00007f37f68d7090 R08: 0000000000000000 R09: 0000000000000000 [ 45.396937][ T4097] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 45.396950][ T4097] R13: 0000000000000000 R14: 00007f37f8495fa0 R15: 00007fffe3450a58 [ 45.396973][ T4097] [ 45.652446][ T4118] netlink: 100 bytes leftover after parsing attributes in process `syz.2.194'. [ 45.878339][ T4173] netlink: 76 bytes leftover after parsing attributes in process `syz.0.200'. [ 45.911910][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 45.922043][ T4177] wireguard0: entered promiscuous mode [ 45.927663][ T4177] wireguard0: entered allmulticast mode [ 45.962257][ T4180] FAULT_INJECTION: forcing a failure. [ 45.962257][ T4180] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 45.975382][ T4180] CPU: 0 UID: 0 PID: 4180 Comm: syz.4.204 Not tainted 6.15.0-rc2-syzkaller-00048-gc62f4b82d571 #0 PREEMPT(voluntary) [ 45.975417][ T4180] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 45.975436][ T4180] Call Trace: [ 45.975444][ T4180] [ 45.975453][ T4180] dump_stack_lvl+0xf6/0x150 [ 45.975524][ T4180] dump_stack+0x15/0x1a [ 45.975542][ T4180] should_fail_ex+0x261/0x270 [ 45.975638][ T4180] should_fail+0xb/0x10 [ 45.975704][ T4180] should_fail_usercopy+0x1a/0x20 [ 45.975733][ T4180] _copy_to_user+0x20/0xa0 [ 45.975766][ T4180] simple_read_from_buffer+0xb2/0x130 [ 45.975804][ T4180] proc_fail_nth_read+0x103/0x140 [ 45.975828][ T4180] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 45.975960][ T4180] vfs_read+0x1b2/0x710 [ 45.975985][ T4180] ? __rcu_read_unlock+0x4e/0x70 [ 45.976090][ T4180] ? __fget_files+0x186/0x1c0 [ 45.976112][ T4180] ksys_read+0xeb/0x1b0 [ 45.976141][ T4180] __x64_sys_read+0x42/0x50 [ 45.976206][ T4180] x64_sys_call+0x2a3b/0x2e10 [ 45.976231][ T4180] do_syscall_64+0xc9/0x1c0 [ 45.976260][ T4180] ? clear_bhb_loop+0x25/0x80 [ 45.976281][ T4180] ? clear_bhb_loop+0x25/0x80 [ 45.976426][ T4180] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 45.976499][ T4180] RIP: 0033:0x7ff37520cb7c [ 45.976514][ T4180] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 45.976533][ T4180] RSP: 002b:00007ff373877030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 45.976555][ T4180] RAX: ffffffffffffffda RBX: 00007ff375435fa0 RCX: 00007ff37520cb7c [ 45.976569][ T4180] RDX: 000000000000000f RSI: 00007ff3738770a0 RDI: 0000000000000004 [ 45.976583][ T4180] RBP: 00007ff373877090 R08: 0000000000000000 R09: 0000000000000000 [ 45.976597][ T4180] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 45.976608][ T4180] R13: 0000000000000000 R14: 00007ff375435fa0 R15: 00007fff9df82b68 [ 45.976625][ T4180] [ 46.412150][ T4193] loop4: detected capacity change from 0 to 512 [ 46.427096][ T4193] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 46.438534][ T4196] netlink: 100 bytes leftover after parsing attributes in process `syz.3.208'. [ 46.455826][ T4193] EXT4-fs (loop4): 1 truncate cleaned up [ 46.462890][ T4193] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.514695][ T4199] loop3: detected capacity change from 0 to 512 [ 46.595175][ T4201] loop1: detected capacity change from 0 to 2048 [ 46.606154][ T4199] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c119, mo2=0002] [ 46.614836][ T4199] System zones: 0-2, 18-18, 34-35 [ 46.633528][ T4201] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.649151][ T4199] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.675489][ T4199] ext4 filesystem being mounted at /55/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 46.728069][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.820233][ T4207] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4207 comm=syz.1.211 [ 46.844347][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.863974][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.917924][ T4218] netlink: 'syz.2.214': attribute type 10 has an invalid length. [ 46.930848][ T4218] batman_adv: batadv0: Adding interface: team0 [ 46.937886][ T4218] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.963544][ T4218] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 46.977135][ T4222] netlink: 16 bytes leftover after parsing attributes in process `+}[@'. [ 47.054237][ T4230] syz.4.219: attempt to access beyond end of device [ 47.054237][ T4230] loop4: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 47.136518][ T29] kauditd_printk_skb: 188 callbacks suppressed [ 47.136538][ T29] audit: type=1400 audit(1744861196.688:741): avc: denied { mounton } for pid=4228 comm="syz.4.219" path="/syzcgroup/unified/syz4" dev="cgroup2" ino=119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 47.164777][ T4230] EXT4-fs (loop4): unable to read superblock [ 47.214144][ T4231] loop3: detected capacity change from 0 to 4096 [ 47.302638][ T4239] loop1: detected capacity change from 0 to 512 [ 47.359760][ T4239] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 47.469378][ T4231] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.491239][ T4239] EXT4-fs (loop1): 1 truncate cleaned up [ 47.562881][ T4239] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.592162][ T29] audit: type=1326 audit(1744861197.228:742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4248 comm="syz.4.225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff37520e169 code=0x7ffc0000 [ 47.616687][ T29] audit: type=1326 audit(1744861197.228:743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4248 comm="syz.4.225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff37520e169 code=0x7ffc0000 [ 47.640912][ T29] audit: type=1326 audit(1744861197.228:744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4248 comm="syz.4.225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7ff37520e169 code=0x7ffc0000 [ 47.649356][ T4220] FAULT_INJECTION: forcing a failure. [ 47.649356][ T4220] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 47.664162][ T29] audit: type=1326 audit(1744861197.228:745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4248 comm="syz.4.225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff37520e169 code=0x7ffc0000 [ 47.678742][ T4220] CPU: 1 UID: 0 PID: 4220 Comm: syz.3.216 Not tainted 6.15.0-rc2-syzkaller-00048-gc62f4b82d571 #0 PREEMPT(voluntary) [ 47.678778][ T4220] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 47.678795][ T4220] Call Trace: [ 47.678820][ T4220] [ 47.678830][ T4220] dump_stack_lvl+0xf6/0x150 [ 47.678860][ T4220] dump_stack+0x15/0x1a [ 47.678960][ T4220] should_fail_ex+0x261/0x270 [ 47.678995][ T4220] should_fail+0xb/0x10 [ 47.679025][ T4220] should_fail_usercopy+0x1a/0x20 [ 47.679183][ T4220] _copy_to_iter+0x24e/0xd10 [ 47.679222][ T4220] ? __virt_addr_valid+0x1ed/0x250 [ 47.679249][ T4220] ? __check_object_size+0x367/0x510 [ 47.679296][ T4220] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 47.679334][ T4220] __skb_datagram_iter+0xcd/0x640 [ 47.679430][ T4220] skb_copy_datagram_iter+0x41/0x130 [ 47.679468][ T4220] tun_do_read+0xd63/0x11a0 [ 47.679501][ T4220] ? __pfx_default_wake_function+0x10/0x10 [ 47.679548][ T4220] tun_chr_read_iter+0x181/0x260 [ 47.679576][ T4220] do_iter_readv_writev+0x40d/0x4b0 [ 47.679660][ T4220] vfs_readv+0x1e1/0x660 [ 47.679684][ T4220] ? proc_fail_nth_write+0x12d/0x160 [ 47.679718][ T4220] do_readv+0xf7/0x230 [ 47.679746][ T4220] __x64_sys_readv+0x45/0x50 [ 47.679783][ T4220] x64_sys_call+0x2833/0x2e10 [ 47.679873][ T4220] do_syscall_64+0xc9/0x1c0 [ 47.679911][ T4220] ? clear_bhb_loop+0x25/0x80 [ 47.679937][ T4220] ? clear_bhb_loop+0x25/0x80 [ 47.679992][ T4220] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 47.680019][ T4220] RIP: 0033:0x7f05820de169 [ 47.680038][ T4220] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 47.680060][ T4220] RSP: 002b:00007f0580747038 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 47.680084][ T4220] RAX: ffffffffffffffda RBX: 00007f0582305fa0 RCX: 00007f05820de169 [ 47.680101][ T4220] RDX: 0000000000000004 RSI: 00002000000001c0 RDI: 0000000000000003 [ 47.680116][ T4220] RBP: 00007f0580747090 R08: 0000000000000000 R09: 0000000000000000 [ 47.680205][ T4220] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 47.680260][ T4220] R13: 0000000000000000 R14: 00007f0582305fa0 R15: 00007ffd9ac66f28 [ 47.680282][ T4220] [ 47.936137][ T29] audit: type=1326 audit(1744861197.228:746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4248 comm="syz.4.225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff37520e169 code=0x7ffc0000 [ 47.959479][ T29] audit: type=1326 audit(1744861197.228:747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4248 comm="syz.4.225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff37520e169 code=0x7ffc0000 [ 47.982934][ T29] audit: type=1326 audit(1744861197.228:748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4248 comm="syz.4.225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff37520e169 code=0x7ffc0000 [ 48.006287][ T29] audit: type=1326 audit(1744861197.228:749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4248 comm="syz.4.225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff37520e169 code=0x7ffc0000 [ 48.029625][ T29] audit: type=1326 audit(1744861197.238:750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4248 comm="syz.4.225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=90 compat=0 ip=0x7ff37520e169 code=0x7ffc0000 [ 48.193950][ T4259] FAULT_INJECTION: forcing a failure. [ 48.193950][ T4259] name failslab, interval 1, probability 0, space 0, times 0 [ 48.206631][ T4259] CPU: 0 UID: 0 PID: 4259 Comm: syz.0.226 Not tainted 6.15.0-rc2-syzkaller-00048-gc62f4b82d571 #0 PREEMPT(voluntary) [ 48.206657][ T4259] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 48.206684][ T4259] Call Trace: [ 48.206691][ T4259] [ 48.206698][ T4259] dump_stack_lvl+0xf6/0x150 [ 48.206726][ T4259] dump_stack+0x15/0x1a [ 48.206746][ T4259] should_fail_ex+0x261/0x270 [ 48.206784][ T4259] should_failslab+0x8f/0xb0 [ 48.206820][ T4259] kmem_cache_alloc_noprof+0x59/0x340 [ 48.206857][ T4259] ? __proc_create+0x25f/0x4b0 [ 48.206901][ T4259] __proc_create+0x25f/0x4b0 [ 48.206970][ T4259] proc_mkdir+0x41/0xc0 [ 48.206998][ T4259] register_handler_proc+0x1b6/0x210 [ 48.207032][ T4259] __setup_irq+0x9b2/0x1240 [ 48.207068][ T4259] request_threaded_irq+0x235/0x2d0 [ 48.207118][ T4259] ? __pfx_serial8250_interrupt+0x10/0x10 [ 48.207149][ T4259] univ8250_setup_irq+0x285/0x2e0 [ 48.207175][ T4259] serial8250_do_startup+0xc73/0x1ea0 [ 48.207215][ T4259] serial8250_startup+0x40/0x50 [ 48.207246][ T4259] uart_startup+0x481/0x9b0 [ 48.207291][ T4259] uart_ioctl+0xc77/0xe70 [ 48.207314][ T4259] ? ioctl_has_perm+0x292/0x2f0 [ 48.207360][ T4259] ? do_vfs_ioctl+0x977/0x1570 [ 48.207394][ T4259] ? tty_jobctrl_ioctl+0x2ab/0x810 [ 48.207435][ T4259] tty_ioctl+0x813/0xbd0 [ 48.207466][ T4259] ? __pfx_tty_ioctl+0x10/0x10 [ 48.207489][ T4259] __se_sys_ioctl+0xc9/0x140 [ 48.207519][ T4259] __x64_sys_ioctl+0x43/0x50 [ 48.207549][ T4259] x64_sys_call+0x168d/0x2e10 [ 48.207630][ T4259] do_syscall_64+0xc9/0x1c0 [ 48.207680][ T4259] ? clear_bhb_loop+0x25/0x80 [ 48.207706][ T4259] ? clear_bhb_loop+0x25/0x80 [ 48.207731][ T4259] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 48.207802][ T4259] RIP: 0033:0x7fbc93f9e169 [ 48.207820][ T4259] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 48.207841][ T4259] RSP: 002b:00007fbc92607038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 48.207862][ T4259] RAX: ffffffffffffffda RBX: 00007fbc941c5fa0 RCX: 00007fbc93f9e169 [ 48.207877][ T4259] RDX: 0000000000000000 RSI: 0000000000005453 RDI: 0000000000000007 [ 48.207891][ T4259] RBP: 00007fbc92607090 R08: 0000000000000000 R09: 0000000000000000 [ 48.207904][ T4259] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 48.207916][ T4259] R13: 0000000000000000 R14: 00007fbc941c5fa0 R15: 00007fff14545fe8 [ 48.207934][ T4259] [ 48.269922][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.553663][ T4268] __nla_validate_parse: 1 callbacks suppressed [ 48.553680][ T4268] netlink: 100 bytes leftover after parsing attributes in process `syz.2.231'. [ 48.580155][ T4269] FAULT_INJECTION: forcing a failure. [ 48.580155][ T4269] name failslab, interval 1, probability 0, space 0, times 0 [ 48.593559][ T4269] CPU: 1 UID: 0 PID: 4269 Comm: syz.0.230 Not tainted 6.15.0-rc2-syzkaller-00048-gc62f4b82d571 #0 PREEMPT(voluntary) [ 48.593594][ T4269] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 48.593656][ T4269] Call Trace: [ 48.593664][ T4269] [ 48.593673][ T4269] dump_stack_lvl+0xf6/0x150 [ 48.593700][ T4269] dump_stack+0x15/0x1a [ 48.593720][ T4269] should_fail_ex+0x261/0x270 [ 48.593751][ T4269] should_failslab+0x8f/0xb0 [ 48.593884][ T4269] kmem_cache_alloc_noprof+0x59/0x340 [ 48.593927][ T4269] ? skb_clone+0x154/0x1f0 [ 48.593960][ T4269] skb_clone+0x154/0x1f0 [ 48.593991][ T4269] nfnetlink_rcv+0x30b/0x1610 [ 48.594025][ T4269] ? __kfree_skb+0x102/0x150 [ 48.594093][ T4269] ? nlmon_xmit+0x51/0x60 [ 48.594126][ T4269] ? __kfree_skb+0x102/0x150 [ 48.594148][ T4269] ? consume_skb+0x49/0x160 [ 48.594184][ T4269] ? nlmon_xmit+0x51/0x60 [ 48.594218][ T4269] ? dev_hard_start_xmit+0x3d1/0x400 [ 48.594287][ T4269] ? __dev_queue_xmit+0xb76/0x20b0 [ 48.594322][ T4269] ? should_fail_ex+0xd7/0x270 [ 48.594351][ T4269] ? ref_tracker_free+0x3b8/0x420 [ 48.594395][ T4269] netlink_unicast+0x605/0x6c0 [ 48.594451][ T4269] netlink_sendmsg+0x609/0x720 [ 48.594556][ T4269] ? __pfx_netlink_sendmsg+0x10/0x10 [ 48.594581][ T4269] __sock_sendmsg+0x140/0x180 [ 48.594598][ T4269] ____sys_sendmsg+0x350/0x4e0 [ 48.594632][ T4269] __sys_sendmsg+0x1a0/0x240 [ 48.594683][ T4269] __x64_sys_sendmsg+0x46/0x50 [ 48.594780][ T4269] x64_sys_call+0x26f3/0x2e10 [ 48.594802][ T4269] do_syscall_64+0xc9/0x1c0 [ 48.594913][ T4269] ? clear_bhb_loop+0x25/0x80 [ 48.594940][ T4269] ? clear_bhb_loop+0x25/0x80 [ 48.594967][ T4269] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 48.594992][ T4269] RIP: 0033:0x7fbc93f9e169 [ 48.595010][ T4269] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 48.595095][ T4269] RSP: 002b:00007fbc92607038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 48.595117][ T4269] RAX: ffffffffffffffda RBX: 00007fbc941c5fa0 RCX: 00007fbc93f9e169 [ 48.595131][ T4269] RDX: 0000000000000004 RSI: 0000200000000040 RDI: 0000000000000003 [ 48.595145][ T4269] RBP: 00007fbc92607090 R08: 0000000000000000 R09: 0000000000000000 [ 48.595159][ T4269] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 48.595173][ T4269] R13: 0000000000000000 R14: 00007fbc941c5fa0 R15: 00007fff14545fe8 [ 48.595195][ T4269] [ 48.601124][ T4272] FAULT_INJECTION: forcing a failure. [ 48.601124][ T4272] name failslab, interval 1, probability 0, space 0, times 0 [ 48.650138][ T4275] x_tables: duplicate underflow at hook 3 [ 48.693547][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.697367][ T4272] CPU: 0 UID: 0 PID: 4272 Comm: syz.2.233 Not tainted 6.15.0-rc2-syzkaller-00048-gc62f4b82d571 #0 PREEMPT(voluntary) [ 48.697403][ T4272] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 48.697418][ T4272] Call Trace: [ 48.697426][ T4272] [ 48.697436][ T4272] dump_stack_lvl+0xf6/0x150 [ 48.697478][ T4272] dump_stack+0x15/0x1a [ 48.697510][ T4272] should_fail_ex+0x261/0x270 [ 48.697545][ T4272] should_failslab+0x8f/0xb0 [ 48.697584][ T4272] __kvmalloc_node_noprof+0x12c/0x520 [ 48.697613][ T4272] ? nf_hook_entries_grow+0x1c0/0x4a0 [ 48.697716][ T4272] nf_hook_entries_grow+0x1c0/0x4a0 [ 48.697748][ T4272] __nf_register_net_hook+0x16b/0x490 [ 48.697779][ T4272] nf_register_net_hook+0x88/0x130 [ 48.697807][ T4272] nf_register_net_hooks+0x41/0x140 [ 48.697878][ T4272] nf_ct_netns_do_get+0x2af/0x370 [ 48.697907][ T4272] nf_ct_netns_get+0x83/0xb0 [ 48.697930][ T4272] helper_mt_check+0x42/0xc0 [ 48.697958][ T4272] xt_check_match+0x265/0x4d0 [ 48.698097][ T4272] ? xt_find_match+0x1d2/0x210 [ 48.698146][ T4272] ? xt_find_match+0x1b3/0x210 [ 48.698236][ T4272] translate_table+0xadb/0xfe0 [ 48.698288][ T4272] ? _copy_from_user+0x89/0xa0 [ 48.698408][ T4272] do_ipt_set_ctl+0x7ac/0x8a0 [ 48.698430][ T4272] ? _raw_spin_unlock_bh+0x36/0x40 [ 48.698454][ T4272] ? tcp_release_cb+0x108/0x390 [ 48.698487][ T4272] nf_setsockopt+0x195/0x1b0 [ 48.698596][ T4272] ip_setsockopt+0xea/0x100 [ 48.698620][ T4272] tcp_setsockopt+0x93/0xb0 [ 48.698648][ T4272] sock_common_setsockopt+0x64/0x80 [ 48.698674][ T4272] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 48.698741][ T4272] __sys_setsockopt+0x187/0x200 [ 48.698776][ T4272] __x64_sys_setsockopt+0x66/0x80 [ 48.698810][ T4272] x64_sys_call+0x2a09/0x2e10 [ 48.698910][ T4272] do_syscall_64+0xc9/0x1c0 [ 48.699035][ T4272] ? clear_bhb_loop+0x25/0x80 [ 48.699061][ T4272] ? clear_bhb_loop+0x25/0x80 [ 48.699088][ T4272] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 48.699121][ T4272] RIP: 0033:0x7f37f826e169 [ 48.699140][ T4272] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 48.699239][ T4272] RSP: 002b:00007f37f68d7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 48.699262][ T4272] RAX: ffffffffffffffda RBX: 00007f37f8495fa0 RCX: 00007f37f826e169 [ 48.699323][ T4272] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000005 [ 48.699336][ T4272] RBP: 00007f37f68d7090 R08: 0000000000000410 R09: 0000000000000000 [ 48.699351][ T4272] R10: 0000200000000580 R11: 0000000000000246 R12: 0000000000000002 [ 48.699366][ T4272] R13: 0000000000000000 R14: 00007f37f8495fa0 R15: 00007fffe3450a58 [ 48.699389][ T4272] [ 48.710203][ T4275] block device autoloading is deprecated and will be removed. [ 48.776352][ T4272] xt_helper: cannot load conntrack support for proto=2 [ 48.803045][ T4275] syz.1.235: attempt to access beyond end of device [ 48.803045][ T4275] md30: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 49.095791][ T4285] loop3: detected capacity change from 0 to 512 [ 49.205817][ T4285] ======================================================= [ 49.205817][ T4285] WARNING: The mand mount option has been deprecated and [ 49.205817][ T4285] and is ignored by this kernel. Remove the mand [ 49.205817][ T4285] option from the mount to silence this warning. [ 49.205817][ T4285] ======================================================= [ 49.355857][ T4302] netlink: 100 bytes leftover after parsing attributes in process `syz.0.244'. [ 49.384342][ T4305] IPv6: NLM_F_CREATE should be specified when creating new route [ 49.393021][ T4305] FAULT_INJECTION: forcing a failure. [ 49.393021][ T4305] name failslab, interval 1, probability 0, space 0, times 0 [ 49.405769][ T4305] CPU: 1 UID: 0 PID: 4305 Comm: syz.0.247 Not tainted 6.15.0-rc2-syzkaller-00048-gc62f4b82d571 #0 PREEMPT(voluntary) [ 49.405799][ T4305] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 49.405814][ T4305] Call Trace: [ 49.405822][ T4305] [ 49.405831][ T4305] dump_stack_lvl+0xf6/0x150 [ 49.405931][ T4305] dump_stack+0x15/0x1a [ 49.405947][ T4305] should_fail_ex+0x261/0x270 [ 49.405981][ T4305] should_failslab+0x8f/0xb0 [ 49.406019][ T4305] __kmalloc_cache_noprof+0x55/0x320 [ 49.406054][ T4305] ? fib6_new_table+0x9c/0x1c0 [ 49.406079][ T4305] fib6_new_table+0x9c/0x1c0 [ 49.406110][ T4305] ip6_route_info_create+0x322/0xa90 [ 49.406149][ T4305] ? bpf_trace_vprintk+0x106/0x200 [ 49.406177][ T4305] inet6_rtm_newroute+0x3ba/0x1270 [ 49.406197][ T4305] ? __rcu_read_unlock+0x4e/0x70 [ 49.406228][ T4305] ? __kfree_skb+0x102/0x150 [ 49.406340][ T4305] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 49.406364][ T4305] rtnetlink_rcv_msg+0x6b7/0x740 [ 49.406470][ T4305] ? ref_tracker_free+0x3b8/0x420 [ 49.406519][ T4305] netlink_rcv_skb+0x12f/0x230 [ 49.406542][ T4305] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 49.406599][ T4305] rtnetlink_rcv+0x1c/0x30 [ 49.406633][ T4305] netlink_unicast+0x605/0x6c0 [ 49.406706][ T4305] netlink_sendmsg+0x609/0x720 [ 49.406735][ T4305] ? __pfx_netlink_sendmsg+0x10/0x10 [ 49.406760][ T4305] __sock_sendmsg+0x140/0x180 [ 49.406794][ T4305] ____sys_sendmsg+0x350/0x4e0 [ 49.406832][ T4305] __sys_sendmsg+0x1a0/0x240 [ 49.406892][ T4305] __x64_sys_sendmsg+0x46/0x50 [ 49.406920][ T4305] x64_sys_call+0x26f3/0x2e10 [ 49.406945][ T4305] do_syscall_64+0xc9/0x1c0 [ 49.406987][ T4305] ? clear_bhb_loop+0x25/0x80 [ 49.407035][ T4305] ? clear_bhb_loop+0x25/0x80 [ 49.407060][ T4305] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 49.407086][ T4305] RIP: 0033:0x7fbc93f9e169 [ 49.407112][ T4305] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 49.407133][ T4305] RSP: 002b:00007fbc92607038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 49.407156][ T4305] RAX: ffffffffffffffda RBX: 00007fbc941c5fa0 RCX: 00007fbc93f9e169 [ 49.407171][ T4305] RDX: 0000000000000000 RSI: 0000200000000380 RDI: 0000000000000005 [ 49.407306][ T4305] RBP: 00007fbc92607090 R08: 0000000000000000 R09: 0000000000000000 [ 49.407320][ T4305] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 49.407335][ T4305] R13: 0000000000000000 R14: 00007fbc941c5fa0 R15: 00007fff14545fe8 [ 49.407357][ T4305] [ 49.683944][ T4309] FAULT_INJECTION: forcing a failure. [ 49.683944][ T4309] name failslab, interval 1, probability 0, space 0, times 0 [ 49.696835][ T4309] CPU: 0 UID: 0 PID: 4309 Comm: syz.4.248 Not tainted 6.15.0-rc2-syzkaller-00048-gc62f4b82d571 #0 PREEMPT(voluntary) [ 49.696897][ T4309] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 49.696912][ T4309] Call Trace: [ 49.696919][ T4309] [ 49.696929][ T4309] dump_stack_lvl+0xf6/0x150 [ 49.696957][ T4309] dump_stack+0x15/0x1a [ 49.696982][ T4309] should_fail_ex+0x261/0x270 [ 49.697014][ T4309] should_failslab+0x8f/0xb0 [ 49.697074][ T4309] kmem_cache_alloc_noprof+0x59/0x340 [ 49.697099][ T4309] ? security_file_alloc+0x32/0x100 [ 49.697165][ T4309] security_file_alloc+0x32/0x100 [ 49.697188][ T4309] init_file+0x5e/0x1e0 [ 49.697214][ T4309] alloc_file_pseudo_noaccount+0xfe/0x210 [ 49.697248][ T4309] bdev_file_open_by_dev+0x187/0x230 [ 49.697273][ T4309] swsusp_check+0x3f/0x260 [ 49.697312][ T4309] software_resume+0x43/0x2d0 [ 49.697368][ T4309] resume_store+0x353/0x3a0 [ 49.697404][ T4309] ? __pfx_resume_store+0x10/0x10 [ 49.697511][ T4309] kobj_attr_store+0x47/0x70 [ 49.697533][ T4309] ? __pfx_kobj_attr_store+0x10/0x10 [ 49.697558][ T4309] sysfs_kf_write+0xf3/0x110 [ 49.697592][ T4309] ? __pfx_sysfs_kf_write+0x10/0x10 [ 49.697644][ T4309] kernfs_fop_write_iter+0x1cd/0x2d0 [ 49.697673][ T4309] vfs_write+0x79b/0x950 [ 49.697777][ T4309] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 49.697874][ T4309] ksys_write+0xeb/0x1b0 [ 49.697906][ T4309] __x64_sys_write+0x42/0x50 [ 49.697937][ T4309] x64_sys_call+0x2a45/0x2e10 [ 49.697963][ T4309] do_syscall_64+0xc9/0x1c0 [ 49.698034][ T4309] ? clear_bhb_loop+0x25/0x80 [ 49.698061][ T4309] ? clear_bhb_loop+0x25/0x80 [ 49.698085][ T4309] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 49.698108][ T4309] RIP: 0033:0x7ff37520e169 [ 49.698135][ T4309] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 49.698154][ T4309] RSP: 002b:00007ff373877038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 49.698174][ T4309] RAX: ffffffffffffffda RBX: 00007ff375435fa0 RCX: 00007ff37520e169 [ 49.698187][ T4309] RDX: 0000000000000012 RSI: 0000200000000000 RDI: 0000000000000006 [ 49.698199][ T4309] RBP: 00007ff373877090 R08: 0000000000000000 R09: 0000000000000000 [ 49.698211][ T4309] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 49.698257][ T4309] R13: 0000000000000000 R14: 00007ff375435fa0 R15: 00007fff9df82b68 [ 49.698277][ T4309] [ 49.951332][ T4296] loop2: detected capacity change from 0 to 128 [ 49.958434][ T4300] loop1: detected capacity change from 0 to 2048 [ 50.014061][ T4317] IPv6: NLM_F_CREATE should be specified when creating new route [ 50.023149][ T4318] ieee802154 phy0 wpan0: encryption failed: -22 [ 50.041507][ T4285] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.042791][ T4300] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.069432][ T4285] ext4 filesystem being mounted at /58/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 50.118730][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.153472][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.179045][ T4329] netlink: 100 bytes leftover after parsing attributes in process `syz.2.257'. [ 50.391589][ T4357] netlink: 8 bytes leftover after parsing attributes in process `syz.2.265'. [ 50.421170][ T4361] dvmrp5: entered allmulticast mode [ 50.563907][ T4379] FAULT_INJECTION: forcing a failure. [ 50.563907][ T4379] name failslab, interval 1, probability 0, space 0, times 0 [ 50.578181][ T4379] CPU: 0 UID: 0 PID: 4379 Comm: syz.0.273 Not tainted 6.15.0-rc2-syzkaller-00048-gc62f4b82d571 #0 PREEMPT(voluntary) [ 50.578209][ T4379] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 50.578223][ T4379] Call Trace: [ 50.578297][ T4379] [ 50.578306][ T4379] dump_stack_lvl+0xf6/0x150 [ 50.578341][ T4379] dump_stack+0x15/0x1a [ 50.578361][ T4379] should_fail_ex+0x261/0x270 [ 50.578394][ T4379] should_failslab+0x8f/0xb0 [ 50.578463][ T4379] __kmalloc_cache_noprof+0x55/0x320 [ 50.578521][ T4379] ? rdma_restrack_init+0x31/0x220 [ 50.578555][ T4379] rdma_restrack_init+0x31/0x220 [ 50.578585][ T4379] _ib_alloc_device+0x47/0x430 [ 50.578610][ T4379] siw_newlink+0xb4/0x6d0 [ 50.578632][ T4379] nldev_newlink+0x36c/0x3f0 [ 50.578708][ T4379] ? __pfx_nldev_newlink+0x10/0x10 [ 50.578726][ T4379] rdma_nl_rcv+0x48a/0x5b0 [ 50.578823][ T4379] ? should_fail_ex+0xd7/0x270 [ 50.578919][ T4379] netlink_unicast+0x605/0x6c0 [ 50.578949][ T4379] netlink_sendmsg+0x609/0x720 [ 50.578984][ T4379] ? __pfx_netlink_sendmsg+0x10/0x10 [ 50.579008][ T4379] __sock_sendmsg+0x140/0x180 [ 50.579050][ T4379] ____sys_sendmsg+0x350/0x4e0 [ 50.579089][ T4379] __sys_sendmsg+0x1a0/0x240 [ 50.579140][ T4379] __x64_sys_sendmsg+0x46/0x50 [ 50.579273][ T4379] x64_sys_call+0x26f3/0x2e10 [ 50.579295][ T4379] do_syscall_64+0xc9/0x1c0 [ 50.579360][ T4379] ? clear_bhb_loop+0x25/0x80 [ 50.579462][ T4379] ? clear_bhb_loop+0x25/0x80 [ 50.579483][ T4379] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.579503][ T4379] RIP: 0033:0x7fbc93f9e169 [ 50.579518][ T4379] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 50.579613][ T4379] RSP: 002b:00007fbc92607038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 50.579631][ T4379] RAX: ffffffffffffffda RBX: 00007fbc941c5fa0 RCX: 00007fbc93f9e169 [ 50.579642][ T4379] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000009 [ 50.579714][ T4379] RBP: 00007fbc92607090 R08: 0000000000000000 R09: 0000000000000000 [ 50.579725][ T4379] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 50.579736][ T4379] R13: 0000000000000000 R14: 00007fbc941c5fa0 R15: 00007fff14545fe8 [ 50.579754][ T4379] [ 50.911357][ T4385] netlink: 'syz.3.276': attribute type 3 has an invalid length. [ 50.940705][ T4393] loop1: detected capacity change from 0 to 1024 [ 51.004676][ T4393] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.022037][ T4393] ext4 filesystem being mounted at /58/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 51.109587][ T4403] netlink: 'syz.0.281': attribute type 3 has an invalid length. [ 51.119394][ T4405] netlink: 'syz.3.282': attribute type 1 has an invalid length. [ 51.127856][ T4405] netlink: 8 bytes leftover after parsing attributes in process `syz.3.282'. [ 51.151769][ T4393] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.278: bg 0: block 393: padding at end of block bitmap is not set [ 51.173567][ T4393] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 51.230900][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.309285][ T4425] loop4: detected capacity change from 0 to 512 [ 51.431462][ T4425] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 51.439136][ T4428] loop1: detected capacity change from 0 to 512 [ 51.456958][ T4428] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 51.479624][ T4428] EXT4-fs (loop1): 1 truncate cleaned up [ 51.479839][ T4425] EXT4-fs (loop4): 1 truncate cleaned up [ 51.485815][ T4428] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.505000][ T4425] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.520381][ T4409] loop3: detected capacity change from 0 to 512 [ 51.588917][ T4409] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.653428][ T4409] ext4 filesystem being mounted at /65/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 51.742439][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.837989][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.847316][ T4437] netlink: 4 bytes leftover after parsing attributes in process `syz.4.291'. [ 51.877651][ T4437] loop4: detected capacity change from 0 to 1024 [ 51.886449][ T4437] EXT4-fs: Ignoring removed oldalloc option [ 51.904061][ T4448] netlink: 'syz.0.292': attribute type 7 has an invalid length. [ 51.988003][ T4437] EXT4-fs: Ignoring removed orlov option [ 52.004204][ T4437] EXT4-fs (loop4): Filesystem with casefold feature cannot be mounted without CONFIG_UNICODE [ 52.043501][ T4437] netlink: 8 bytes leftover after parsing attributes in process `syz.4.291'. [ 52.054805][ T4452] netlink: 100 bytes leftover after parsing attributes in process `syz.0.295'. [ 52.162001][ T4458] netlink: 'syz.4.298': attribute type 3 has an invalid length. [ 52.170235][ T4460] netlink: 76 bytes leftover after parsing attributes in process `syz.1.299'. [ 52.179293][ T4460] netlink: 72 bytes leftover after parsing attributes in process `syz.1.299'. [ 52.189118][ T4460] netlink: 'syz.1.299': attribute type 3 has an invalid length. [ 52.208011][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.272535][ T29] kauditd_printk_skb: 110 callbacks suppressed [ 52.278819][ T29] audit: type=1400 audit(1744861201.918:861): avc: denied { lock } for pid=4459 comm="syz.1.299" path="socket:[7614]" dev="sockfs" ino=7614 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 52.308421][ T4468] loop1: detected capacity change from 0 to 1024 [ 52.315106][ T4468] EXT4-fs: test_dummy_encryption option not supported [ 52.342653][ T4474] loop3: detected capacity change from 0 to 764 [ 52.499080][ T4482] netlink: 'syz.0.305': attribute type 1 has an invalid length. [ 52.565797][ T4482] bridge0: entered promiscuous mode [ 52.578795][ T4482] bridge0: port 3(macsec1) entered blocking state [ 52.585420][ T4482] bridge0: port 3(macsec1) entered disabled state [ 52.612292][ T4482] macsec1: entered allmulticast mode [ 52.617652][ T4482] bridge0: entered allmulticast mode [ 52.639159][ T4482] macsec1: left allmulticast mode [ 52.644285][ T4482] bridge0: left allmulticast mode [ 52.671599][ T4491] 9pnet_fd: Insufficient options for proto=fd [ 52.683163][ T4482] bridge0: left promiscuous mode [ 52.751232][ T29] audit: type=1326 audit(1744861202.398:862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4494 comm="syz.4.311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff37520e169 code=0x7ffc0000 [ 52.775480][ T29] audit: type=1326 audit(1744861202.398:863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4494 comm="syz.4.311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff37520e169 code=0x7ffc0000 [ 52.808462][ T29] audit: type=1326 audit(1744861202.458:864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4494 comm="syz.4.311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff37520e169 code=0x7ffc0000 [ 52.831883][ T29] audit: type=1326 audit(1744861202.458:865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4494 comm="syz.4.311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff37520e169 code=0x7ffc0000 [ 52.855790][ T29] audit: type=1326 audit(1744861202.458:866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4494 comm="syz.4.311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff37520e169 code=0x7ffc0000 [ 52.880403][ T29] audit: type=1326 audit(1744861202.458:867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4494 comm="syz.4.311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff37520e169 code=0x7ffc0000 [ 52.904142][ T29] audit: type=1326 audit(1744861202.458:868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4494 comm="syz.4.311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff37520e169 code=0x7ffc0000 [ 52.927623][ T29] audit: type=1326 audit(1744861202.458:869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4494 comm="syz.4.311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=265 compat=0 ip=0x7ff37520e169 code=0x7ffc0000 [ 52.950991][ T29] audit: type=1326 audit(1744861202.458:870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4494 comm="syz.4.311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff37520e169 code=0x7ffc0000 [ 52.983978][ T4500] FAULT_INJECTION: forcing a failure. [ 52.983978][ T4500] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 52.997453][ T4500] CPU: 0 UID: 0 PID: 4500 Comm: syz.0.312 Not tainted 6.15.0-rc2-syzkaller-00048-gc62f4b82d571 #0 PREEMPT(voluntary) [ 52.997485][ T4500] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 52.997499][ T4500] Call Trace: [ 52.997507][ T4500] [ 52.997517][ T4500] dump_stack_lvl+0xf6/0x150 [ 52.997596][ T4500] dump_stack+0x15/0x1a [ 52.997613][ T4500] should_fail_ex+0x261/0x270 [ 52.997703][ T4500] should_fail_alloc_page+0xfd/0x110 [ 52.997744][ T4500] __alloc_frozen_pages_noprof+0x11d/0x360 [ 52.997783][ T4500] alloc_pages_mpol+0xb6/0x260 [ 52.997829][ T4500] alloc_pages_noprof+0xe8/0x130 [ 52.997860][ T4500] __pud_alloc+0x4d/0x450 [ 52.997876][ T4500] ? down_read+0x173/0x4c0 [ 52.997971][ T4500] huge_pte_alloc+0x31f/0x3b0 [ 52.998003][ T4500] ? __rcu_read_unlock+0x4e/0x70 [ 52.998110][ T4500] hugetlb_fault+0x2fb/0x1b10 [ 52.998195][ T4500] handle_mm_fault+0x1724/0x2e80 [ 52.998235][ T4500] ? mt_find+0x735/0x8a0 [ 52.998418][ T4500] ? down_read+0x173/0x4c0 [ 52.998453][ T4500] ? hugetlb_vma_unlock_read+0x86/0xa0 [ 52.998481][ T4500] __get_user_pages+0xf4e/0x2340 [ 52.998520][ T4500] ? find_vma_intersection+0x7a/0xb0 [ 52.998557][ T4500] __mm_populate+0x25d/0x3c0 [ 52.998642][ T4500] vm_mmap_pgoff+0x224/0x2d0 [ 52.998680][ T4500] ksys_mmap_pgoff+0x2e2/0x340 [ 52.998764][ T4500] x64_sys_call+0x1945/0x2e10 [ 52.998826][ T4500] do_syscall_64+0xc9/0x1c0 [ 52.998855][ T4500] ? clear_bhb_loop+0x25/0x80 [ 52.998954][ T4500] ? clear_bhb_loop+0x25/0x80 [ 52.999061][ T4500] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.999155][ T4500] RIP: 0033:0x7fbc93f9e169 [ 52.999231][ T4500] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 52.999252][ T4500] RSP: 002b:00007fbc92607038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 52.999308][ T4500] RAX: ffffffffffffffda RBX: 00007fbc941c5fa0 RCX: 00007fbc93f9e169 [ 52.999322][ T4500] RDX: 0000000000000002 RSI: 0000000000ff5000 RDI: 0000200000000000 [ 52.999335][ T4500] RBP: 00007fbc92607090 R08: ffffffffffffffff R09: 0000000000000000 [ 52.999346][ T4500] R10: 000000000004c831 R11: 0000000000000246 R12: 0000000000000002 [ 52.999357][ T4500] R13: 0000000000000001 R14: 00007fbc941c5fa0 R15: 00007fff14545fe8 [ 52.999377][ T4500] [ 53.284914][ T4507] loop1: detected capacity change from 0 to 512 [ 53.307290][ T4506] loop4: detected capacity change from 0 to 512 [ 53.311945][ T4507] EXT4-fs error (device loop1): ext4_get_journal_inode:5798: inode #32: comm syz.1.315: iget: special inode unallocated [ 53.333009][ T4507] EXT4-fs (loop1): Remounting filesystem read-only [ 53.340431][ T4507] EXT4-fs (loop1): no journal found [ 53.345659][ T4507] EXT4-fs (loop1): can't get journal size [ 53.377217][ T4507] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 53.391473][ T4507] EXT4-fs (loop1): failed to initialize system zone (-117) [ 53.402129][ T4506] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.420532][ T4507] EXT4-fs (loop1): mount failed [ 53.436917][ T4506] ext4 filesystem being mounted at /65/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 53.452439][ T4516] FAULT_INJECTION: forcing a failure. [ 53.452439][ T4516] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 53.466256][ T4516] CPU: 1 UID: 0 PID: 4516 Comm: syz.3.319 Not tainted 6.15.0-rc2-syzkaller-00048-gc62f4b82d571 #0 PREEMPT(voluntary) [ 53.466307][ T4516] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 53.466322][ T4516] Call Trace: [ 53.466337][ T4516] [ 53.466346][ T4516] dump_stack_lvl+0xf6/0x150 [ 53.466370][ T4516] dump_stack+0x15/0x1a [ 53.466386][ T4516] should_fail_ex+0x261/0x270 [ 53.466432][ T4516] should_fail+0xb/0x10 [ 53.466533][ T4516] should_fail_usercopy+0x1a/0x20 [ 53.466572][ T4516] _copy_to_iter+0xd8/0xd10 [ 53.466609][ T4516] ? __virt_addr_valid+0x1ed/0x250 [ 53.466630][ T4516] ? __check_object_size+0x367/0x510 [ 53.466654][ T4516] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 53.466767][ T4516] __skb_datagram_iter+0xcd/0x640 [ 53.466799][ T4516] ? tipc_wait_for_rcvmsg+0x2f0/0x350 [ 53.466848][ T4516] skb_copy_datagram_iter+0x41/0x130 [ 53.466895][ T4516] tipc_recvstream+0x2e1/0x7e0 [ 53.466937][ T4516] ? __pfx_tipc_recvstream+0x10/0x10 [ 53.467015][ T4516] sock_recvmsg+0x13f/0x170 [ 53.467037][ T4516] ____sys_recvmsg+0xfb/0x290 [ 53.467080][ T4516] __sys_recvmsg+0x1c7/0x270 [ 53.467118][ T4516] __x64_sys_recvmsg+0x46/0x50 [ 53.467215][ T4516] x64_sys_call+0xc6d/0x2e10 [ 53.467290][ T4516] do_syscall_64+0xc9/0x1c0 [ 53.467342][ T4516] ? clear_bhb_loop+0x25/0x80 [ 53.467365][ T4516] ? clear_bhb_loop+0x25/0x80 [ 53.467392][ T4516] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.467416][ T4516] RIP: 0033:0x7f05820de169 [ 53.467434][ T4516] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 53.467502][ T4516] RSP: 002b:00007f0580747038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 53.467520][ T4516] RAX: ffffffffffffffda RBX: 00007f0582305fa0 RCX: 00007f05820de169 [ 53.467537][ T4516] RDX: 0000000000001f00 RSI: 0000200000000500 RDI: 0000000000000007 [ 53.467551][ T4516] RBP: 00007f0580747090 R08: 0000000000000000 R09: 0000000000000000 [ 53.467611][ T4516] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 53.467622][ T4516] R13: 0000000000000000 R14: 00007f0582305fa0 R15: 00007ffd9ac66f28 [ 53.467641][ T4516] [ 53.719765][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.924236][ T4534] FAULT_INJECTION: forcing a failure. [ 53.924236][ T4534] name failslab, interval 1, probability 0, space 0, times 0 [ 53.936930][ T4534] CPU: 1 UID: 0 PID: 4534 Comm: syz.4.326 Not tainted 6.15.0-rc2-syzkaller-00048-gc62f4b82d571 #0 PREEMPT(voluntary) [ 53.936956][ T4534] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 53.936968][ T4534] Call Trace: [ 53.936975][ T4534] [ 53.936982][ T4534] dump_stack_lvl+0xf6/0x150 [ 53.937151][ T4534] dump_stack+0x15/0x1a [ 53.937179][ T4534] should_fail_ex+0x261/0x270 [ 53.937276][ T4534] should_failslab+0x8f/0xb0 [ 53.937311][ T4534] kmem_cache_alloc_lru_noprof+0x5e/0x330 [ 53.937350][ T4534] ? __d_alloc+0x3d/0x350 [ 53.937420][ T4534] __d_alloc+0x3d/0x350 [ 53.937441][ T4534] ? __kmalloc_cache_noprof+0x18d/0x320 [ 53.937464][ T4534] ? autofs_init_fs_context+0xcd/0x250 [ 53.937488][ T4534] d_alloc_pseudo+0x1e/0x80 [ 53.937515][ T4534] alloc_file_pseudo+0x75/0x160 [ 53.937560][ T4534] anon_inode_getfd+0xc2/0x170 [ 53.937591][ T4534] __se_sys_fsopen+0x174/0x1c0 [ 53.937613][ T4534] __x64_sys_fsopen+0x31/0x40 [ 53.937632][ T4534] x64_sys_call+0x294b/0x2e10 [ 53.937691][ T4534] do_syscall_64+0xc9/0x1c0 [ 53.937725][ T4534] ? clear_bhb_loop+0x25/0x80 [ 53.937758][ T4534] ? clear_bhb_loop+0x25/0x80 [ 53.937783][ T4534] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.937807][ T4534] RIP: 0033:0x7ff37520e169 [ 53.937887][ T4534] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 53.937905][ T4534] RSP: 002b:00007ff373877038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 53.937923][ T4534] RAX: ffffffffffffffda RBX: 00007ff375435fa0 RCX: 00007ff37520e169 [ 53.937936][ T4534] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000400 [ 53.938005][ T4534] RBP: 00007ff373877090 R08: 0000000000000000 R09: 0000000000000000 [ 53.938018][ T4534] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 53.938030][ T4534] R13: 0000000000000001 R14: 00007ff375435fa0 R15: 00007fff9df82b68 [ 53.938051][ T4534] [ 54.355642][ T4545] __nla_validate_parse: 5 callbacks suppressed [ 54.355658][ T4545] netlink: 100 bytes leftover after parsing attributes in process `syz.4.330'. [ 54.528527][ T4565] FAULT_INJECTION: forcing a failure. [ 54.528527][ T4565] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 54.542778][ T4565] CPU: 1 UID: 0 PID: 4565 Comm: syz.2.339 Not tainted 6.15.0-rc2-syzkaller-00048-gc62f4b82d571 #0 PREEMPT(voluntary) [ 54.542807][ T4565] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 54.542818][ T4565] Call Trace: [ 54.542825][ T4565] [ 54.542832][ T4565] dump_stack_lvl+0xf6/0x150 [ 54.542861][ T4565] dump_stack+0x15/0x1a [ 54.542881][ T4565] should_fail_ex+0x261/0x270 [ 54.542914][ T4565] should_fail_alloc_page+0xfd/0x110 [ 54.542968][ T4565] __alloc_frozen_pages_noprof+0x11d/0x360 [ 54.543006][ T4565] alloc_pages_mpol+0xb6/0x260 [ 54.543042][ T4565] vma_alloc_folio_noprof+0x19c/0x300 [ 54.543125][ T4565] handle_mm_fault+0xdda/0x2e80 [ 54.543160][ T4565] ? __rcu_read_lock+0x36/0x50 [ 54.543190][ T4565] ? __pte_offset_map_lock+0x1d3/0x290 [ 54.543241][ T4565] __get_user_pages+0xf4e/0x2340 [ 54.543277][ T4565] __mm_populate+0x25d/0x3c0 [ 54.543334][ T4565] do_mlock+0x4d7/0x580 [ 54.543366][ T4565] ? __bpf_trace_sys_enter+0x10/0x30 [ 54.543452][ T4565] ? trace_sys_enter+0xcd/0x110 [ 54.543482][ T4565] __x64_sys_mlock2+0x72/0x90 [ 54.543517][ T4565] x64_sys_call+0x2671/0x2e10 [ 54.543543][ T4565] do_syscall_64+0xc9/0x1c0 [ 54.543642][ T4565] ? clear_bhb_loop+0x25/0x80 [ 54.543663][ T4565] ? clear_bhb_loop+0x25/0x80 [ 54.543683][ T4565] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 54.543703][ T4565] RIP: 0033:0x7f37f826e169 [ 54.543719][ T4565] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 54.543807][ T4565] RSP: 002b:00007f37f68d7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000145 [ 54.543829][ T4565] RAX: ffffffffffffffda RBX: 00007f37f8495fa0 RCX: 00007f37f826e169 [ 54.543844][ T4565] RDX: 0000000000000000 RSI: 0000000000009000 RDI: 0000200000ff5000 [ 54.543858][ T4565] RBP: 00007f37f68d7090 R08: 0000000000000000 R09: 0000000000000000 [ 54.543872][ T4565] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 54.543883][ T4565] R13: 0000000000000000 R14: 00007f37f8495fa0 R15: 00007fffe3450a58 [ 54.543978][ T4565] [ 54.545078][ T4559] block device autoloading is deprecated and will be removed. [ 54.778350][ T4571] FAULT_INJECTION: forcing a failure. [ 54.778350][ T4571] name failslab, interval 1, probability 0, space 0, times 0 [ 54.791269][ T4571] CPU: 1 UID: 0 PID: 4571 Comm: syz.3.340 Not tainted 6.15.0-rc2-syzkaller-00048-gc62f4b82d571 #0 PREEMPT(voluntary) [ 54.791301][ T4571] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 54.791315][ T4571] Call Trace: [ 54.791324][ T4571] [ 54.791332][ T4571] dump_stack_lvl+0xf6/0x150 [ 54.791359][ T4571] dump_stack+0x15/0x1a [ 54.791478][ T4571] should_fail_ex+0x261/0x270 [ 54.791509][ T4571] should_failslab+0x8f/0xb0 [ 54.791619][ T4571] kmem_cache_alloc_noprof+0x59/0x340 [ 54.791695][ T4571] ? security_inode_alloc+0x37/0x100 [ 54.791777][ T4571] security_inode_alloc+0x37/0x100 [ 54.791813][ T4571] inode_init_always_gfp+0x4a2/0x4f0 [ 54.791854][ T4571] ? __pfx_proc_alloc_inode+0x10/0x10 [ 54.791879][ T4571] alloc_inode+0x86/0x170 [ 54.791982][ T4571] new_inode+0x1e/0xe0 [ 54.791999][ T4571] proc_get_inode+0x1f/0x380 [ 54.792025][ T4571] proc_lookup_de+0x19b/0x210 [ 54.792053][ T4571] ? __pfx_proc_tgid_net_lookup+0x10/0x10 [ 54.792126][ T4571] proc_tgid_net_lookup+0x42/0xc0 [ 54.792155][ T4571] path_openat+0xd76/0x2000 [ 54.792198][ T4571] do_filp_open+0x115/0x240 [ 54.792308][ T4571] ? __pfx_kfree_link+0x10/0x10 [ 54.792352][ T4571] do_sys_openat2+0xaa/0x110 [ 54.792421][ T4571] __x64_sys_openat+0xf8/0x120 [ 54.792444][ T4571] x64_sys_call+0x1ac/0x2e10 [ 54.792465][ T4571] do_syscall_64+0xc9/0x1c0 [ 54.792495][ T4571] ? clear_bhb_loop+0x25/0x80 [ 54.792521][ T4571] ? clear_bhb_loop+0x25/0x80 [ 54.792585][ T4571] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 54.792606][ T4571] RIP: 0033:0x7f05820dcad0 [ 54.792623][ T4571] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44 [ 54.792644][ T4571] RSP: 002b:00007f0580746f10 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 54.792744][ T4571] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f05820dcad0 [ 54.792828][ T4571] RDX: 0000000000000002 RSI: 00007f0580746fa0 RDI: 00000000ffffff9c [ 54.792843][ T4571] RBP: 00007f0580746fa0 R08: 0000000000000000 R09: 0000000000000000 [ 54.792860][ T4571] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 54.792874][ T4571] R13: 0000000000000000 R14: 00007f0582305fa0 R15: 00007ffd9ac66f28 [ 54.792896][ T4571] [ 55.037113][ T4559] syz.0.336: attempt to access beyond end of device [ 55.037113][ T4559] md34: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 55.269860][ T4580] loop1: detected capacity change from 0 to 8192 [ 55.467072][ T4585] SELinux: syz.3.344 (4585) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 55.491340][ T4580] netlink: 'syz.1.343': attribute type 13 has an invalid length. [ 55.859325][ T4580] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.869228][ T4580] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.879291][ T4580] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.888606][ T4580] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.091572][ T4591] Cannot find set identified by id 0 to match [ 56.113867][ T4593] netlink: 100 bytes leftover after parsing attributes in process `syz.3.347'. [ 56.157136][ T4597] sch_tbf: burst 3092 is lower than device lo mtu (65550) ! [ 56.220680][ T4597] netlink: 68 bytes leftover after parsing attributes in process `syz.1.349'. [ 56.276131][ T4603] xt_hashlimit: max too large, truncated to 1048576 [ 56.364404][ T4607] block device autoloading is deprecated and will be removed. [ 56.392173][ T10] hid-generic CDD7:0003:0040.0001: unknown main item tag 0x2 [ 56.399752][ T10] hid-generic CDD7:0003:0040.0001: unexpected long global item [ 56.417813][ T4607] syz.2.354: attempt to access beyond end of device [ 56.417813][ T4607] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 56.425854][ T10] hid-generic CDD7:0003:0040.0001: probe with driver hid-generic failed with error -22 [ 56.908615][ T4634] loop1: detected capacity change from 0 to 512 [ 56.962753][ T4634] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.993219][ T4634] ext4 filesystem being mounted at /79/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 57.216698][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.469054][ T4650] loop3: detected capacity change from 0 to 512 [ 57.543794][ T4650] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 57.631488][ T4654] netlink: 'syz.4.368': attribute type 3 has an invalid length. [ 57.691393][ T4650] EXT4-fs (loop3): 1 truncate cleaned up [ 57.708797][ T4650] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 57.725338][ T4658] loop4: detected capacity change from 0 to 512 [ 57.732232][ T4658] EXT4-fs: inline encryption not supported [ 57.743119][ T4658] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 57.751701][ T4658] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 57.760895][ T4658] EXT4-fs (loop4): blocks per group (39) and clusters per group (32768) inconsistent [ 57.840819][ T4663] netlink: 'syz.0.371': attribute type 3 has an invalid length. [ 57.864196][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.909261][ T29] kauditd_printk_skb: 250 callbacks suppressed [ 57.915868][ T29] audit: type=1400 audit(1744861207.558:1121): avc: denied { egress } for pid=23 comm="kworker/1:0" saddr=fe80::1c daddr=ff02::2 netif=gretap0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 57.924226][ T4668] netlink: 100 bytes leftover after parsing attributes in process `syz.3.373'. [ 57.940540][ T29] audit: type=1400 audit(1744861207.558:1122): avc: denied { sendto } for pid=23 comm="kworker/1:0" saddr=fe80::1c daddr=ff02::2 netif=gretap0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 57.972384][ T4669] loop0: detected capacity change from 0 to 512 [ 57.972673][ T4669] EXT4-fs: inline encryption not supported [ 57.979783][ T4669] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 57.993532][ T4669] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 58.002686][ T4669] EXT4-fs (loop0): blocks per group (39) and clusters per group (32768) inconsistent [ 58.028796][ T4669] FAULT_INJECTION: forcing a failure. [ 58.028796][ T4669] name failslab, interval 1, probability 0, space 0, times 0 [ 58.042321][ T4669] CPU: 1 UID: 0 PID: 4669 Comm: syz.0.371 Not tainted 6.15.0-rc2-syzkaller-00048-gc62f4b82d571 #0 PREEMPT(voluntary) [ 58.042353][ T4669] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 58.042368][ T4669] Call Trace: [ 58.042376][ T4669] [ 58.042384][ T4669] dump_stack_lvl+0xf6/0x150 [ 58.042436][ T4669] dump_stack+0x15/0x1a [ 58.042514][ T4669] should_fail_ex+0x261/0x270 [ 58.042543][ T4669] should_failslab+0x8f/0xb0 [ 58.042580][ T4669] __kmalloc_cache_noprof+0x55/0x320 [ 58.042602][ T4669] ? copy_cgroup_ns+0x167/0x370 [ 58.042653][ T4669] copy_cgroup_ns+0x167/0x370 [ 58.042681][ T4669] create_new_namespaces+0x1d8/0x430 [ 58.042709][ T4669] unshare_nsproxy_namespaces+0xe6/0x120 [ 58.042736][ T4669] ksys_unshare+0x3d3/0x700 [ 58.042778][ T4669] __x64_sys_unshare+0x1f/0x30 [ 58.042806][ T4669] x64_sys_call+0x2c93/0x2e10 [ 58.042829][ T4669] do_syscall_64+0xc9/0x1c0 [ 58.042861][ T4669] ? clear_bhb_loop+0x25/0x80 [ 58.042934][ T4669] ? clear_bhb_loop+0x25/0x80 [ 58.042954][ T4669] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 58.042974][ T4669] RIP: 0033:0x7fbc93f9e169 [ 58.042988][ T4669] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 58.043085][ T4669] RSP: 002b:00007fbc925c5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 58.043103][ T4669] RAX: ffffffffffffffda RBX: 00007fbc941c6160 RCX: 00007fbc93f9e169 [ 58.043114][ T4669] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000042000000 [ 58.043125][ T4669] RBP: 00007fbc925c5090 R08: 0000000000000000 R09: 0000000000000000 [ 58.043137][ T4669] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 58.043148][ T4669] R13: 0000000000000000 R14: 00007fbc941c6160 R15: 00007fff14545fe8 [ 58.043165][ T4669] [ 58.366805][ T4671] netlink: 100 bytes leftover after parsing attributes in process `syz.2.374'. [ 58.566030][ T4675] loop4: detected capacity change from 0 to 512 [ 58.639953][ T4675] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 58.840761][ T4675] EXT4-fs (loop4): 1 truncate cleaned up [ 59.148110][ T4675] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 59.161910][ T4683] loop3: detected capacity change from 0 to 1024 [ 59.247823][ T4683] EXT4-fs (loop3): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 59.382638][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.396525][ T29] audit: type=1400 audit(1744861209.028:1123): avc: denied { recv } for pid=4662 comm="syz.0.371" saddr=10.128.0.163 src=30030 daddr=10.128.1.116 dest=45512 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 59.422004][ T29] audit: type=1400 audit(1744861209.028:1124): avc: denied { unmount } for pid=3302 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 59.441701][ T29] audit: type=1400 audit(1744861209.048:1125): avc: denied { read } for pid=2986 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 59.463766][ T29] audit: type=1400 audit(1744861209.048:1126): avc: denied { search } for pid=2986 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 59.485389][ T29] audit: type=1400 audit(1744861209.048:1127): avc: denied { append } for pid=2986 comm="syslogd" name="messages" dev="tmpfs" ino=6 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 59.507840][ T29] audit: type=1400 audit(1744861209.048:1128): avc: denied { open } for pid=2986 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=6 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 59.531155][ T29] audit: type=1400 audit(1744861209.048:1129): avc: denied { getattr } for pid=2986 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=6 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 59.625057][ T29] audit: type=1400 audit(1744861209.228:1130): avc: denied { read write } for pid=3308 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 59.664129][ T4683] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 59.893358][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.144269][ T4711] netlink: 148 bytes leftover after parsing attributes in process `syz.0.386'. [ 60.153718][ T4711] unsupported nlmsg_type 40 [ 60.221092][ T4713] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 60.322200][ T4716] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1795 sclass=netlink_route_socket pid=4716 comm=syz.0.386 [ 60.450899][ T4730] loop4: detected capacity change from 0 to 128 [ 60.492366][ T4730] FAULT_INJECTION: forcing a failure. [ 60.492366][ T4730] name failslab, interval 1, probability 0, space 0, times 0 [ 60.508526][ T4730] CPU: 1 UID: 0 PID: 4730 Comm: syz.4.393 Not tainted 6.15.0-rc2-syzkaller-00048-gc62f4b82d571 #0 PREEMPT(voluntary) [ 60.508557][ T4730] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 60.508569][ T4730] Call Trace: [ 60.508575][ T4730] [ 60.508608][ T4730] dump_stack_lvl+0xf6/0x150 [ 60.508634][ T4730] dump_stack+0x15/0x1a [ 60.508731][ T4730] should_fail_ex+0x261/0x270 [ 60.508758][ T4730] should_failslab+0x8f/0xb0 [ 60.508795][ T4730] __kmalloc_cache_noprof+0x55/0x320 [ 60.508823][ T4730] ? ip_ra_control+0xd0/0x2c0 [ 60.508857][ T4730] ? _parse_integer_limit+0x167/0x180 [ 60.508900][ T4730] ? __pfx_mrtsock_destruct+0x10/0x10 [ 60.508973][ T4730] ip_ra_control+0xd0/0x2c0 [ 60.509004][ T4730] ? __pfx_mrtsock_destruct+0x10/0x10 [ 60.509033][ T4730] ip_mroute_setsockopt+0x370/0x950 [ 60.509068][ T4730] do_ip_setsockopt+0xd06/0x22a0 [ 60.509193][ T4730] ip_setsockopt+0x63/0x100 [ 60.509211][ T4730] raw_setsockopt+0x10f/0x170 [ 60.509235][ T4730] sock_common_setsockopt+0x64/0x80 [ 60.509299][ T4730] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 60.509325][ T4730] __sys_setsockopt+0x187/0x200 [ 60.509393][ T4730] __x64_sys_setsockopt+0x66/0x80 [ 60.509447][ T4730] x64_sys_call+0x2a09/0x2e10 [ 60.509474][ T4730] do_syscall_64+0xc9/0x1c0 [ 60.509591][ T4730] ? clear_bhb_loop+0x25/0x80 [ 60.509617][ T4730] ? clear_bhb_loop+0x25/0x80 [ 60.509642][ T4730] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 60.509702][ T4730] RIP: 0033:0x7ff37520e169 [ 60.509720][ T4730] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 60.509740][ T4730] RSP: 002b:00007ff373877038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 60.509835][ T4730] RAX: ffffffffffffffda RBX: 00007ff375435fa0 RCX: 00007ff37520e169 [ 60.509846][ T4730] RDX: 00000000000000c8 RSI: 0000000000000000 RDI: 0000000000000009 [ 60.509857][ T4730] RBP: 00007ff373877090 R08: 0000000000000004 R09: 0000000000000000 [ 60.509871][ T4730] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000001 [ 60.509918][ T4730] R13: 0000000000000000 R14: 00007ff375435fa0 R15: 00007fff9df82b68 [ 60.509936][ T4730] [ 60.515303][ T4734] loop3: detected capacity change from 0 to 2048 [ 60.758566][ T4734] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 60.774198][ T4734] ext4 filesystem being mounted at /86/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 60.796832][ T4745] netlink: 100 bytes leftover after parsing attributes in process `syz.4.397'. [ 60.890036][ T4752] loop1: detected capacity change from 0 to 512 [ 60.925933][ T4755] FAULT_INJECTION: forcing a failure. [ 60.925933][ T4755] name failslab, interval 1, probability 0, space 0, times 0 [ 60.939635][ T4755] CPU: 1 UID: 0 PID: 4755 Comm: syz.0.402 Not tainted 6.15.0-rc2-syzkaller-00048-gc62f4b82d571 #0 PREEMPT(voluntary) [ 60.939665][ T4755] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 60.939680][ T4755] Call Trace: [ 60.939719][ T4755] [ 60.939726][ T4755] dump_stack_lvl+0xf6/0x150 [ 60.939753][ T4755] dump_stack+0x15/0x1a [ 60.939773][ T4755] should_fail_ex+0x261/0x270 [ 60.939802][ T4755] should_failslab+0x8f/0xb0 [ 60.939978][ T4755] kmem_cache_alloc_noprof+0x59/0x340 [ 60.940003][ T4755] ? alloc_empty_file+0x78/0x200 [ 60.940029][ T4755] ? _raw_spin_unlock+0x26/0x50 [ 60.940054][ T4755] alloc_empty_file+0x78/0x200 [ 60.940135][ T4755] alloc_file_pseudo+0xcb/0x160 [ 60.940159][ T4755] anon_inode_getfile_fmode+0xa5/0x150 [ 60.940186][ T4755] do_eventfd+0x110/0x1a0 [ 60.940278][ T4755] __x64_sys_eventfd2+0x2d/0x40 [ 60.940314][ T4755] x64_sys_call+0x123c/0x2e10 [ 60.940362][ T4755] do_syscall_64+0xc9/0x1c0 [ 60.940429][ T4755] ? clear_bhb_loop+0x25/0x80 [ 60.940498][ T4755] ? clear_bhb_loop+0x25/0x80 [ 60.940524][ T4755] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 60.940549][ T4755] RIP: 0033:0x7fbc93f9e169 [ 60.940566][ T4755] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 60.940651][ T4755] RSP: 002b:00007fbc92607038 EFLAGS: 00000246 ORIG_RAX: 0000000000000122 [ 60.940672][ T4755] RAX: ffffffffffffffda RBX: 00007fbc941c5fa0 RCX: 00007fbc93f9e169 [ 60.940684][ T4755] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 60.940728][ T4755] RBP: 00007fbc92607090 R08: 0000000000000000 R09: 0000000000000000 [ 60.940742][ T4755] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 60.940755][ T4755] R13: 0000000000000000 R14: 00007fbc941c5fa0 R15: 00007fff14545fe8 [ 60.940776][ T4755] [ 61.143331][ T4752] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 61.219998][ T4752] EXT4-fs (loop1): 1 truncate cleaned up [ 61.240168][ T4764] netlink: 8 bytes leftover after parsing attributes in process `syz.2.405'. [ 61.254738][ T4752] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 61.280485][ T51] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm kworker/u8:3: bg 0: block 345: padding at end of block bitmap is not set [ 61.299327][ T51] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 493 with error 117 [ 61.311963][ T51] EXT4-fs (loop3): This should not happen!! Data will be lost [ 61.311963][ T51] [ 61.336185][ T4771] loop2: detected capacity change from 0 to 512 [ 61.378908][ T4775] FAULT_INJECTION: forcing a failure. [ 61.378908][ T4775] name failslab, interval 1, probability 0, space 0, times 0 [ 61.391812][ T4775] CPU: 0 UID: 0 PID: 4775 Comm: syz.0.410 Not tainted 6.15.0-rc2-syzkaller-00048-gc62f4b82d571 #0 PREEMPT(voluntary) [ 61.391839][ T4775] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 61.391855][ T4775] Call Trace: [ 61.391863][ T4775] [ 61.391872][ T4775] dump_stack_lvl+0xf6/0x150 [ 61.391902][ T4775] dump_stack+0x15/0x1a [ 61.391980][ T4775] should_fail_ex+0x261/0x270 [ 61.392007][ T4775] should_failslab+0x8f/0xb0 [ 61.392099][ T4775] kmem_cache_alloc_lru_noprof+0x5e/0x330 [ 61.392167][ T4775] ? __d_alloc+0x3d/0x350 [ 61.392192][ T4775] __d_alloc+0x3d/0x350 [ 61.392215][ T4775] d_alloc_pseudo+0x1e/0x80 [ 61.392240][ T4775] alloc_file_pseudo+0x75/0x160 [ 61.392271][ T4775] anon_inode_getfd+0xc2/0x170 [ 61.392368][ T4775] btf_new_fd+0x68e/0x7c0 [ 61.392396][ T4775] bpf_btf_load+0x115/0x130 [ 61.392426][ T4775] __sys_bpf+0x695/0x800 [ 61.392525][ T4775] __x64_sys_bpf+0x43/0x50 [ 61.392547][ T4775] x64_sys_call+0x23da/0x2e10 [ 61.392573][ T4775] do_syscall_64+0xc9/0x1c0 [ 61.392626][ T4775] ? clear_bhb_loop+0x25/0x80 [ 61.392647][ T4775] ? clear_bhb_loop+0x25/0x80 [ 61.392668][ T4775] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 61.392692][ T4775] RIP: 0033:0x7fbc93f9e169 [ 61.392732][ T4775] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 61.392752][ T4775] RSP: 002b:00007fbc92607038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 61.392772][ T4775] RAX: ffffffffffffffda RBX: 00007fbc941c5fa0 RCX: 00007fbc93f9e169 [ 61.392862][ T4775] RDX: 0000000000000028 RSI: 00002000000002c0 RDI: 0000000000000012 [ 61.392874][ T4775] RBP: 00007fbc92607090 R08: 0000000000000000 R09: 0000000000000000 [ 61.392886][ T4775] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 61.392899][ T4775] R13: 0000000000000000 R14: 00007fbc941c5fa0 R15: 00007fff14545fe8 [ 61.392965][ T4775] [ 61.615738][ T51] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 509 with max blocks 2 with error 117 [ 61.629210][ T51] EXT4-fs (loop3): This should not happen!! Data will be lost [ 61.629210][ T51] [ 61.701282][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.825523][ T4786] loop4: detected capacity change from 0 to 512 [ 61.885635][ T4786] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 61.926369][ T4796] syz.1.416: attempt to access beyond end of device [ 61.926369][ T4796] loop1: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 61.940766][ T4796] EXT4-fs (loop1): unable to read superblock [ 62.040411][ T4806] FAULT_INJECTION: forcing a failure. [ 62.040411][ T4806] name failslab, interval 1, probability 0, space 0, times 0 [ 62.053785][ T4806] CPU: 1 UID: 0 PID: 4806 Comm: syz.1.418 Not tainted 6.15.0-rc2-syzkaller-00048-gc62f4b82d571 #0 PREEMPT(voluntary) [ 62.053818][ T4806] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 62.053831][ T4806] Call Trace: [ 62.053839][ T4806] [ 62.053882][ T4806] dump_stack_lvl+0xf6/0x150 [ 62.053912][ T4806] dump_stack+0x15/0x1a [ 62.053933][ T4806] should_fail_ex+0x261/0x270 [ 62.053963][ T4806] should_failslab+0x8f/0xb0 [ 62.054001][ T4806] __kmalloc_cache_noprof+0x55/0x320 [ 62.054101][ T4806] ? nl80211_dump_wiphy_parse+0x4f/0x2f0 [ 62.054137][ T4806] nl80211_dump_wiphy_parse+0x4f/0x2f0 [ 62.054215][ T4806] ? nl80211_dump_wiphy+0x8a/0x4b0 [ 62.054245][ T4806] nl80211_dump_wiphy+0xb4/0x4b0 [ 62.054300][ T4806] ? __alloc_skb+0x1bd/0x320 [ 62.054321][ T4806] ? kmalloc_reserve+0x16e/0x190 [ 62.054347][ T4806] ? __build_skb_around+0x199/0x1f0 [ 62.054378][ T4806] genl_dumpit+0xa4/0x100 [ 62.054485][ T4806] netlink_dump+0x3a6/0x810 [ 62.054587][ T4806] __netlink_dump_start+0x433/0x520 [ 62.054617][ T4806] genl_rcv_msg+0x55e/0x6f0 [ 62.054654][ T4806] ? __pfx_nl80211_dump_wiphy+0x10/0x10 [ 62.054684][ T4806] ? __pfx_nl80211_dump_wiphy_done+0x10/0x10 [ 62.054775][ T4806] ? __pfx_genl_start+0x10/0x10 [ 62.054809][ T4806] ? __pfx_genl_dumpit+0x10/0x10 [ 62.054960][ T4806] ? __pfx_genl_done+0x10/0x10 [ 62.055002][ T4806] netlink_rcv_skb+0x12f/0x230 [ 62.055026][ T4806] ? __pfx_genl_rcv_msg+0x10/0x10 [ 62.055146][ T4806] genl_rcv+0x28/0x40 [ 62.055180][ T4806] netlink_unicast+0x605/0x6c0 [ 62.055210][ T4806] netlink_sendmsg+0x609/0x720 [ 62.055244][ T4806] ? __pfx_netlink_sendmsg+0x10/0x10 [ 62.055306][ T4806] __sock_sendmsg+0x140/0x180 [ 62.055399][ T4806] ____sys_sendmsg+0x350/0x4e0 [ 62.055449][ T4806] __sys_sendmsg+0x1a0/0x240 [ 62.055545][ T4806] __x64_sys_sendmsg+0x46/0x50 [ 62.055575][ T4806] x64_sys_call+0x26f3/0x2e10 [ 62.055601][ T4806] do_syscall_64+0xc9/0x1c0 [ 62.055637][ T4806] ? clear_bhb_loop+0x25/0x80 [ 62.055737][ T4806] ? clear_bhb_loop+0x25/0x80 [ 62.055763][ T4806] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 62.055787][ T4806] RIP: 0033:0x7f575296e169 [ 62.055804][ T4806] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 62.055822][ T4806] RSP: 002b:00007f5750fd7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 62.055843][ T4806] RAX: ffffffffffffffda RBX: 00007f5752b95fa0 RCX: 00007f575296e169 [ 62.055921][ T4806] RDX: 0000000000000040 RSI: 00002000000007c0 RDI: 0000000000000003 [ 62.055935][ T4806] RBP: 00007f5750fd7090 R08: 0000000000000000 R09: 0000000000000000 [ 62.055949][ T4806] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 62.055962][ T4806] R13: 0000000000000000 R14: 00007f5752b95fa0 R15: 00007ffdd7665008 [ 62.055992][ T4806] [ 62.156252][ T4809] vhci_hcd: invalid port number 15 [ 62.234780][ T4734] syz.3.395 (4734) used greatest stack depth: 6976 bytes left [ 62.238540][ T4809] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 62.368766][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.380341][ T4808] loop2: detected capacity change from 0 to 512 [ 62.451621][ T4808] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e0ac, mo2=0002] [ 62.470189][ T4825] sch_tbf: burst 3092 is lower than device lo mtu (65550) ! [ 62.503998][ T4808] System zones: 1-12 [ 62.545159][ T4808] EXT4-fs error (device loop2): __ext4_iget:5025: inode #13: block 7: comm syz.2.419: invalid block [ 62.569454][ T4829] xt_hashlimit: max too large, truncated to 1048576 [ 62.579895][ T4808] EXT4-fs (loop2): Remounting filesystem read-only [ 62.600301][ T4808] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 62.654574][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.694693][ T4843] loop2: detected capacity change from 0 to 512 [ 62.717192][ T4843] EXT4-fs: Ignoring removed nobh option [ 62.741884][ T4851] loop1: detected capacity change from 0 to 512 [ 62.760399][ T4843] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 62.761235][ T4851] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 62.781238][ T4843] EXT4-fs error (device loop2): ext4_orphan_get:1390: inode #13: comm syz.2.434: casefold flag without casefold feature [ 62.801252][ T4851] EXT4-fs (loop1): 1 truncate cleaned up [ 62.802412][ T4843] EXT4-fs error (device loop2): ext4_orphan_get:1395: comm syz.2.434: couldn't read orphan inode 13 (err -117) [ 62.820546][ T4843] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 62.844075][ T4858] netlink: 4 bytes leftover after parsing attributes in process `syz.0.441'. [ 62.847533][ T4851] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 62.868640][ T4858] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4858 comm=syz.0.441 [ 62.899082][ T4861] FAULT_INJECTION: forcing a failure. [ 62.899082][ T4861] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 62.899561][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.912326][ T4861] CPU: 0 UID: 0 PID: 4861 Comm: syz.4.442 Not tainted 6.15.0-rc2-syzkaller-00048-gc62f4b82d571 #0 PREEMPT(voluntary) [ 62.912358][ T4861] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 62.912373][ T4861] Call Trace: [ 62.912380][ T4861] [ 62.912389][ T4861] dump_stack_lvl+0xf6/0x150 [ 62.912417][ T4861] dump_stack+0x15/0x1a [ 62.912444][ T4861] should_fail_ex+0x261/0x270 [ 62.912477][ T4861] should_fail+0xb/0x10 [ 62.912501][ T4861] should_fail_usercopy+0x1a/0x20 [ 62.912609][ T4861] _copy_to_user+0x20/0xa0 [ 62.912649][ T4861] simple_read_from_buffer+0xb2/0x130 [ 62.912753][ T4861] proc_fail_nth_read+0x103/0x140 [ 62.912852][ T4861] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 62.912873][ T4861] vfs_read+0x1b2/0x710 [ 62.912905][ T4861] ? __rcu_read_unlock+0x4e/0x70 [ 62.912974][ T4861] ? __fget_files+0x186/0x1c0 [ 62.913006][ T4861] ksys_read+0xeb/0x1b0 [ 62.913055][ T4861] __x64_sys_read+0x42/0x50 [ 62.913092][ T4861] x64_sys_call+0x2a3b/0x2e10 [ 62.913118][ T4861] do_syscall_64+0xc9/0x1c0 [ 62.913164][ T4861] ? clear_bhb_loop+0x25/0x80 [ 62.913240][ T4861] ? clear_bhb_loop+0x25/0x80 [ 62.913267][ T4861] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 62.913293][ T4861] RIP: 0033:0x7ff37520cb7c [ 62.913319][ T4861] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 62.913365][ T4861] RSP: 002b:00007ff373877030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 62.913418][ T4861] RAX: ffffffffffffffda RBX: 00007ff375435fa0 RCX: 00007ff37520cb7c [ 62.913433][ T4861] RDX: 000000000000000f RSI: 00007ff3738770a0 RDI: 0000000000000004 [ 62.913447][ T4861] RBP: 00007ff373877090 R08: 0000000000000000 R09: 0000000000000000 [ 62.913461][ T4861] R10: 0000000080000000 R11: 0000000000000246 R12: 0000000000000002 [ 62.913475][ T4861] R13: 0000000000000000 R14: 00007ff375435fa0 R15: 00007fff9df82b68 [ 62.913500][ T4861] [ 62.936924][ T29] kauditd_printk_skb: 217 callbacks suppressed [ 62.936943][ T29] audit: type=1326 audit(1744861212.568:1348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4860 comm="syz.4.442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7ff37520cc1f code=0x7ffc0000 [ 63.005728][ T4869] netlink: 100 bytes leftover after parsing attributes in process `syz.4.445'. [ 63.006904][ T29] audit: type=1326 audit(1744861212.568:1349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4860 comm="syz.4.442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7ff37520cc1f code=0x7ffc0000 [ 63.006938][ T29] audit: type=1326 audit(1744861212.568:1350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4860 comm="syz.4.442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7ff37520e169 code=0x7ffc0000 [ 63.006980][ T29] audit: type=1400 audit(1744861212.578:1351): avc: denied { read } for pid=4862 comm="syz.4.444" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 63.007011][ T29] audit: type=1400 audit(1744861212.578:1352): avc: denied { open } for pid=4862 comm="syz.4.444" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 63.007187][ T29] audit: type=1400 audit(1744861212.578:1353): avc: denied { ioctl } for pid=4862 comm="syz.4.444" path="/dev/autofs" dev="devtmpfs" ino=91 ioctlcmd=0x9374 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 63.038418][ T29] audit: type=1400 audit(1744861212.688:1354): avc: denied { mounton } for pid=4870 comm="syz.3.447" path="/92/file0" dev="tmpfs" ino=507 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 63.093882][ T4873] netlink: 108 bytes leftover after parsing attributes in process `syz.0.446'. [ 63.165260][ T4875] hub 2-0:1.0: USB hub found [ 63.168545][ T4873] netlink: 108 bytes leftover after parsing attributes in process `syz.0.446'. [ 63.168564][ T4873] netlink: 108 bytes leftover after parsing attributes in process `syz.0.446'. [ 63.195007][ T4875] hub 2-0:1.0: 8 ports detected [ 63.234681][ T29] audit: type=1400 audit(1744861212.808:1355): avc: denied { create } for pid=4874 comm="syz.2.443" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 63.372599][ T29] audit: type=1400 audit(1744861212.808:1356): avc: denied { write } for pid=4874 comm="syz.2.443" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 63.393422][ T29] audit: type=1326 audit(1744861212.988:1357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4880 comm="syz.2.451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37f826e169 code=0x7ffc0000 [ 63.394120][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.522950][ T4897] 8021q: VLANs not supported on vcan0 [ 63.629310][ T4906] syz.3.458: attempt to access beyond end of device [ 63.629310][ T4906] loop3: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 63.633258][ T4907] syz.4.459: attempt to access beyond end of device [ 63.633258][ T4907] loop4: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 63.643891][ T4906] EXT4-fs (loop3): unable to read superblock [ 63.702995][ T4917] loop0: detected capacity change from 0 to 512 [ 63.712619][ T4917] EXT4-fs: Ignoring removed nobh option [ 63.726273][ T4907] EXT4-fs (loop4): unable to read superblock [ 63.746384][ T4913] loop1: detected capacity change from 0 to 128 [ 63.774479][ T4919] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 63.812760][ T4917] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -117 [ 63.887234][ T4917] EXT4-fs error (device loop0): ext4_orphan_get:1390: inode #13: comm syz.0.463: casefold flag without casefold feature [ 63.923511][ T4917] EXT4-fs error (device loop0): ext4_orphan_get:1395: comm syz.0.463: couldn't read orphan inode 13 (err -117) [ 63.969789][ T4917] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 64.403509][ T4925] netlink: 24 bytes leftover after parsing attributes in process `syz.1.466'. [ 64.545773][ T4931] FAULT_INJECTION: forcing a failure. [ 64.545773][ T4931] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 64.559042][ T4931] CPU: 0 UID: 0 PID: 4931 Comm: syz.1.469 Not tainted 6.15.0-rc2-syzkaller-00048-gc62f4b82d571 #0 PREEMPT(voluntary) [ 64.559127][ T4931] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 64.559141][ T4931] Call Trace: [ 64.559147][ T4931] [ 64.559155][ T4931] dump_stack_lvl+0xf6/0x150 [ 64.559250][ T4931] dump_stack+0x15/0x1a [ 64.559266][ T4931] should_fail_ex+0x261/0x270 [ 64.559295][ T4931] should_fail+0xb/0x10 [ 64.559417][ T4931] should_fail_usercopy+0x1a/0x20 [ 64.559452][ T4931] _copy_from_iter+0xd8/0xd10 [ 64.559512][ T4931] ? __alloc_skb+0x1bd/0x320 [ 64.559538][ T4931] ? kmalloc_reserve+0x16e/0x190 [ 64.559565][ T4931] ? __build_skb_around+0x199/0x1f0 [ 64.559591][ T4931] ? __alloc_skb+0x227/0x320 [ 64.559688][ T4931] ? __virt_addr_valid+0x1ed/0x250 [ 64.559714][ T4931] ? __check_object_size+0x367/0x510 [ 64.559753][ T4931] netlink_sendmsg+0x492/0x720 [ 64.559789][ T4931] ? __pfx_netlink_sendmsg+0x10/0x10 [ 64.559816][ T4931] __sock_sendmsg+0x140/0x180 [ 64.559838][ T4931] ____sys_sendmsg+0x350/0x4e0 [ 64.559927][ T4931] __sys_sendmsg+0x1a0/0x240 [ 64.559982][ T4931] __x64_sys_sendmsg+0x46/0x50 [ 64.560062][ T4931] x64_sys_call+0x26f3/0x2e10 [ 64.560088][ T4931] do_syscall_64+0xc9/0x1c0 [ 64.560125][ T4931] ? clear_bhb_loop+0x25/0x80 [ 64.560146][ T4931] ? clear_bhb_loop+0x25/0x80 [ 64.560166][ T4931] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 64.560186][ T4931] RIP: 0033:0x7f575296e169 [ 64.560202][ T4931] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 64.560254][ T4931] RSP: 002b:00007f5750fd7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 64.560273][ T4931] RAX: ffffffffffffffda RBX: 00007f5752b95fa0 RCX: 00007f575296e169 [ 64.560288][ T4931] RDX: 0000000000000000 RSI: 0000200000001200 RDI: 0000000000000006 [ 64.560300][ T4931] RBP: 00007f5750fd7090 R08: 0000000000000000 R09: 0000000000000000 [ 64.560311][ T4931] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 64.560322][ T4931] R13: 0000000000000000 R14: 00007f5752b95fa0 R15: 00007ffdd7665008 [ 64.560342][ T4931] [ 64.834059][ T4935] FAULT_INJECTION: forcing a failure. [ 64.834059][ T4935] name failslab, interval 1, probability 0, space 0, times 0 [ 64.846706][ T4935] CPU: 0 UID: 0 PID: 4935 Comm: syz.4.471 Not tainted 6.15.0-rc2-syzkaller-00048-gc62f4b82d571 #0 PREEMPT(voluntary) [ 64.846738][ T4935] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 64.846764][ T4935] Call Trace: [ 64.846772][ T4935] [ 64.846781][ T4935] dump_stack_lvl+0xf6/0x150 [ 64.846806][ T4935] dump_stack+0x15/0x1a [ 64.846825][ T4935] should_fail_ex+0x261/0x270 [ 64.846857][ T4935] should_failslab+0x8f/0xb0 [ 64.846944][ T4935] __kmalloc_noprof+0xad/0x410 [ 64.846970][ T4935] ? sidtab_sid2str_put+0xee/0x370 [ 64.847005][ T4935] sidtab_sid2str_put+0xee/0x370 [ 64.847029][ T4935] security_sid_to_context_core+0x259/0x2f0 [ 64.847137][ T4935] security_sid_to_context+0x27/0x30 [ 64.847163][ T4935] avc_audit_post_callback+0x10f/0x540 [ 64.847196][ T4935] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 64.847248][ T4935] common_lsm_audit+0x1c6/0x230 [ 64.847268][ T4935] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 64.847354][ T4935] slow_avc_audit+0xff/0x140 [ 64.847400][ T4935] audit_inode_permission+0x116/0x160 [ 64.847433][ T4935] selinux_inode_permission+0x3f2/0x430 [ 64.847527][ T4935] security_inode_permission+0x76/0xc0 [ 64.847568][ T4935] inode_permission+0xbf/0x300 [ 64.847594][ T4935] may_open+0x252/0x350 [ 64.847625][ T4935] path_openat+0x1a04/0x2000 [ 64.847731][ T4935] ? _parse_integer_limit+0x167/0x180 [ 64.847771][ T4935] do_filp_open+0x115/0x240 [ 64.847813][ T4935] do_sys_openat2+0xaa/0x110 [ 64.847841][ T4935] __x64_sys_openat+0xf8/0x120 [ 64.847887][ T4935] x64_sys_call+0x1ac/0x2e10 [ 64.847908][ T4935] do_syscall_64+0xc9/0x1c0 [ 64.847948][ T4935] ? clear_bhb_loop+0x25/0x80 [ 64.847974][ T4935] ? clear_bhb_loop+0x25/0x80 [ 64.848000][ T4935] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 64.848087][ T4935] RIP: 0033:0x7ff37520e169 [ 64.848104][ T4935] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 64.848125][ T4935] RSP: 002b:00007ff373877038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 64.848148][ T4935] RAX: ffffffffffffffda RBX: 00007ff375435fa0 RCX: 00007ff37520e169 [ 64.848160][ T4935] RDX: 0000000000000401 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 64.848171][ T4935] RBP: 00007ff373877090 R08: 0000000000000000 R09: 0000000000000000 [ 64.848182][ T4935] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 64.848230][ T4935] R13: 0000000000000000 R14: 00007ff375435fa0 R15: 00007fff9df82b68 [ 64.848247][ T4935] [ 65.100401][ T4936] netlink: 4 bytes leftover after parsing attributes in process `syz.3.470'. [ 65.115532][ T4935] random: crng reseeded on system resumption [ 65.259417][ T4947] netlink: 'syz.4.475': attribute type 3 has an invalid length. [ 65.272309][ T4944] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode broadcast(3) [ 65.513438][ T4963] syz.0.480: attempt to access beyond end of device [ 65.513438][ T4963] loop0: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 65.571792][ T4963] EXT4-fs (loop0): unable to read superblock [ 65.968511][ T4976] sch_tbf: burst 3092 is lower than device lo mtu (65550) ! [ 65.993862][ T4982] netlink: 'syz.4.486': attribute type 3 has an invalid length. [ 66.053798][ T4987] FAULT_INJECTION: forcing a failure. [ 66.053798][ T4987] name failslab, interval 1, probability 0, space 0, times 0 [ 66.088472][ T4987] CPU: 1 UID: 0 PID: 4987 Comm: syz.4.488 Not tainted 6.15.0-rc2-syzkaller-00048-gc62f4b82d571 #0 PREEMPT(voluntary) [ 66.088566][ T4987] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 66.088580][ T4987] Call Trace: [ 66.088588][ T4987] [ 66.088597][ T4987] dump_stack_lvl+0xf6/0x150 [ 66.088624][ T4987] dump_stack+0x15/0x1a [ 66.088682][ T4987] should_fail_ex+0x261/0x270 [ 66.088713][ T4987] should_failslab+0x8f/0xb0 [ 66.088747][ T4987] kmem_cache_alloc_noprof+0x59/0x340 [ 66.088772][ T4987] ? __kernfs_new_node+0x6d/0x380 [ 66.088805][ T4987] ? kstrdup+0x87/0xd0 [ 66.088830][ T4987] __kernfs_new_node+0x6d/0x380 [ 66.088853][ T4987] ? __kernfs_create_file+0x24/0x180 [ 66.088884][ T4987] kernfs_new_node+0xd7/0x150 [ 66.088919][ T4987] __kernfs_create_file+0x49/0x180 [ 66.089015][ T4987] cgroup_addrm_files+0x514/0x680 [ 66.089049][ T4987] ? up_write+0x35/0xf0 [ 66.089090][ T4987] css_populate_dir+0x1ad/0x200 [ 66.089154][ T4987] ? kernfs_get+0x2f/0x50 [ 66.089190][ T4987] cgroup_mkdir+0xb53/0xc60 [ 66.089225][ T4987] ? __pfx_cgroup_mkdir+0x10/0x10 [ 66.089286][ T4987] kernfs_iop_mkdir+0x12d/0x1d0 [ 66.089311][ T4987] vfs_mkdir+0x214/0x350 [ 66.089341][ T4987] do_mkdirat+0x13c/0x2e0 [ 66.089373][ T4987] __x64_sys_mkdirat+0x4e/0x60 [ 66.089472][ T4987] x64_sys_call+0x2ce3/0x2e10 [ 66.089495][ T4987] do_syscall_64+0xc9/0x1c0 [ 66.089530][ T4987] ? clear_bhb_loop+0x25/0x80 [ 66.089629][ T4987] ? clear_bhb_loop+0x25/0x80 [ 66.089650][ T4987] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 66.089670][ T4987] RIP: 0033:0x7ff37520e169 [ 66.089687][ T4987] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 66.089707][ T4987] RSP: 002b:00007ff373877038 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 66.089728][ T4987] RAX: ffffffffffffffda RBX: 00007ff375435fa0 RCX: 00007ff37520e169 [ 66.089845][ T4987] RDX: 00000000000001ff RSI: 0000200000000000 RDI: ffffffffffffff9c [ 66.089859][ T4987] RBP: 00007ff373877090 R08: 0000000000000000 R09: 0000000000000000 [ 66.089870][ T4987] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 66.089881][ T4987] R13: 0000000000000000 R14: 00007ff375435fa0 R15: 00007fff9df82b68 [ 66.089899][ T4987] [ 66.090072][ T4987] cgroup: cgroup_addrm_files: failed to add cgroup.procs, err=-12 [ 66.275096][ T5001] pimreg: entered allmulticast mode [ 66.426243][ T5002] pimreg: left allmulticast mode [ 66.440176][ T5012] loop1: detected capacity change from 0 to 512 [ 66.447939][ T5004] random: crng reseeded on system resumption [ 66.455203][ T10] Process accounting resumed [ 66.523934][ T5014] sch_tbf: burst 3092 is lower than device lo mtu (65550) ! [ 66.534554][ T5019] vlan2: entered allmulticast mode [ 66.540776][ T5019] bridge_slave_0: entered allmulticast mode [ 66.564642][ T5022] netlink: 'syz.4.498': attribute type 3 has an invalid length. [ 66.610762][ T5026] xt_hashlimit: max too large, truncated to 1048576 [ 66.623334][ T5028] __nla_validate_parse: 1 callbacks suppressed [ 66.623352][ T5028] netlink: 148 bytes leftover after parsing attributes in process `syz.4.500'. [ 66.660647][ T5031] loop1: detected capacity change from 0 to 128 [ 66.669126][ T5031] vfat: Unknown parameter 's`ortname' [ 66.723923][ T5039] FAULT_INJECTION: forcing a failure. [ 66.723923][ T5039] name failslab, interval 1, probability 0, space 0, times 0 [ 66.737523][ T5039] CPU: 1 UID: 0 PID: 5039 Comm: syz.1.505 Not tainted 6.15.0-rc2-syzkaller-00048-gc62f4b82d571 #0 PREEMPT(voluntary) [ 66.737551][ T5039] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 66.737563][ T5039] Call Trace: [ 66.737570][ T5039] [ 66.737577][ T5039] dump_stack_lvl+0xf6/0x150 [ 66.737602][ T5039] dump_stack+0x15/0x1a [ 66.737622][ T5039] should_fail_ex+0x261/0x270 [ 66.737720][ T5039] should_failslab+0x8f/0xb0 [ 66.737758][ T5039] kmem_cache_alloc_noprof+0x59/0x340 [ 66.737785][ T5039] ? audit_log_start+0x37f/0x6e0 [ 66.737859][ T5039] audit_log_start+0x37f/0x6e0 [ 66.737890][ T5039] audit_seccomp+0x4b/0x130 [ 66.737914][ T5039] __seccomp_filter+0x694/0x10e0 [ 66.737949][ T5039] ? bpf_trace_run3+0x134/0x1d0 [ 66.738048][ T5039] ? getname_flags+0x2b9/0x3b0 [ 66.738083][ T5039] ? getname_flags+0x2b9/0x3b0 [ 66.738110][ T5039] __secure_computing+0x7e/0x160 [ 66.738187][ T5039] syscall_trace_enter+0xcf/0x1f0 [ 66.738302][ T5039] ? fpregs_assert_state_consistent+0x83/0xa0 [ 66.738336][ T5039] do_syscall_64+0xaa/0x1c0 [ 66.738366][ T5039] ? clear_bhb_loop+0x25/0x80 [ 66.738387][ T5039] ? clear_bhb_loop+0x25/0x80 [ 66.738461][ T5039] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 66.738568][ T5039] RIP: 0033:0x7f575296cb7c [ 66.738582][ T5039] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 66.738600][ T5039] RSP: 002b:00007f5750fd7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 66.738698][ T5039] RAX: ffffffffffffffda RBX: 00007f5752b95fa0 RCX: 00007f575296cb7c [ 66.738709][ T5039] RDX: 000000000000000f RSI: 00007f5750fd70a0 RDI: 0000000000000005 [ 66.738720][ T5039] RBP: 00007f5750fd7090 R08: 0000000000000000 R09: 0000000000000000 [ 66.738731][ T5039] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 66.738743][ T5039] R13: 0000000000000000 R14: 00007f5752b95fa0 R15: 00007ffdd7665008 [ 66.738762][ T5039] [ 66.976595][ T5047] sch_tbf: burst 3092 is lower than device lo mtu (65550) ! [ 67.013267][ T5051] netlink: 'syz.4.510': attribute type 3 has an invalid length. [ 67.022539][ T5049] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 67.030841][ T5049] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 67.035026][ T5053] loop0: detected capacity change from 0 to 512 [ 67.111666][ T5053] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 67.128712][ T5053] EXT4-fs (loop0): 1 truncate cleaned up [ 67.138503][ T5053] EXT4-fs error (device loop0): mb_free_blocks:1948: group 0, inode 16: block 33:freeing already freed block (bit 32); block bitmap corrupt. [ 67.153855][ T5053] EXT4-fs (loop0): Remounting filesystem read-only [ 67.175019][ T5058] FAULT_INJECTION: forcing a failure. [ 67.175019][ T5058] name failslab, interval 1, probability 0, space 0, times 0 [ 67.187710][ T5058] CPU: 0 UID: 0 PID: 5058 Comm: syz.4.513 Not tainted 6.15.0-rc2-syzkaller-00048-gc62f4b82d571 #0 PREEMPT(voluntary) [ 67.187760][ T5058] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 67.187773][ T5058] Call Trace: [ 67.187787][ T5058] [ 67.187795][ T5058] dump_stack_lvl+0xf6/0x150 [ 67.187823][ T5058] dump_stack+0x15/0x1a [ 67.187842][ T5058] should_fail_ex+0x261/0x270 [ 67.187893][ T5058] should_failslab+0x8f/0xb0 [ 67.187929][ T5058] kmem_cache_alloc_bulk_noprof+0x60/0x4a0 [ 67.188024][ T5058] ? bpf_test_run_xdp_live+0x74d/0x1050 [ 67.188052][ T5058] bpf_test_run_xdp_live+0xd00/0x1050 [ 67.188080][ T5058] ? synchronize_rcu_expedited+0x70f/0x790 [ 67.188113][ T5058] ? bpf_test_run_xdp_live+0x2b3/0x1050 [ 67.188221][ T5058] bpf_prog_test_run_xdp+0x526/0x8e0 [ 67.188248][ T5058] ? __rcu_read_unlock+0x4e/0x70 [ 67.188277][ T5058] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 67.188316][ T5058] bpf_prog_test_run+0x20e/0x3a0 [ 67.188370][ T5058] __sys_bpf+0x440/0x800 [ 67.188397][ T5058] __x64_sys_bpf+0x43/0x50 [ 67.188474][ T5058] x64_sys_call+0x23da/0x2e10 [ 67.188497][ T5058] do_syscall_64+0xc9/0x1c0 [ 67.188600][ T5058] ? clear_bhb_loop+0x25/0x80 [ 67.188626][ T5058] ? clear_bhb_loop+0x25/0x80 [ 67.188669][ T5058] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 67.188723][ T5058] RIP: 0033:0x7ff37520e169 [ 67.188740][ T5058] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 67.188828][ T5058] RSP: 002b:00007ff373877038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 67.188850][ T5058] RAX: ffffffffffffffda RBX: 00007ff375435fa0 RCX: 00007ff37520e169 [ 67.188864][ T5058] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 67.188878][ T5058] RBP: 00007ff373877090 R08: 0000000000000000 R09: 0000000000000000 [ 67.188892][ T5058] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 67.188906][ T5058] R13: 0000000000000000 R14: 00007ff375435fa0 R15: 00007fff9df82b68 [ 67.188929][ T5058] [ 67.435187][ T5067] FAULT_INJECTION: forcing a failure. [ 67.435187][ T5067] name failslab, interval 1, probability 0, space 0, times 0 [ 67.448661][ T5067] CPU: 1 UID: 0 PID: 5067 Comm: syz.1.516 Not tainted 6.15.0-rc2-syzkaller-00048-gc62f4b82d571 #0 PREEMPT(voluntary) [ 67.448688][ T5067] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 67.448700][ T5067] Call Trace: [ 67.448707][ T5067] [ 67.448716][ T5067] dump_stack_lvl+0xf6/0x150 [ 67.448745][ T5067] dump_stack+0x15/0x1a [ 67.448842][ T5067] should_fail_ex+0x261/0x270 [ 67.448870][ T5067] should_failslab+0x8f/0xb0 [ 67.448945][ T5067] kmem_cache_alloc_noprof+0x59/0x340 [ 67.448980][ T5067] ? prepare_creds+0x39/0x4e0 [ 67.449016][ T5067] prepare_creds+0x39/0x4e0 [ 67.449046][ T5067] prepare_exec_creds+0x14/0xe0 [ 67.449073][ T5067] bprm_execve+0x74/0x9c0 [ 67.449117][ T5067] ? copy_string_kernel+0x2be/0x2f0 [ 67.449151][ T5067] do_execveat_common+0x766/0x7e0 [ 67.449186][ T5067] __x64_sys_execve+0x5c/0x70 [ 67.449265][ T5067] x64_sys_call+0x1362/0x2e10 [ 67.449293][ T5067] do_syscall_64+0xc9/0x1c0 [ 67.449385][ T5067] ? clear_bhb_loop+0x25/0x80 [ 67.449409][ T5067] ? clear_bhb_loop+0x25/0x80 [ 67.449431][ T5067] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 67.449452][ T5067] RIP: 0033:0x7f575296e169 [ 67.449467][ T5067] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 67.449550][ T5067] RSP: 002b:00007f5750fd7038 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 67.449574][ T5067] RAX: ffffffffffffffda RBX: 00007f5752b95fa0 RCX: 00007f575296e169 [ 67.449588][ T5067] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000400 [ 67.449603][ T5067] RBP: 00007f5750fd7090 R08: 0000000000000000 R09: 0000000000000000 [ 67.449615][ T5067] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 67.449631][ T5067] R13: 0000000000000000 R14: 00007f5752b95fa0 R15: 00007ffdd7665008 [ 67.449655][ T5067] [ 67.716648][ T5076] loop2: detected capacity change from 0 to 512 [ 67.728210][ T5085] sch_tbf: burst 3092 is lower than device lo mtu (65550) ! [ 67.735661][ T5076] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 67.774772][ T5088] IPv6: Can't replace route, no match found [ 67.790021][ T5076] EXT4-fs (loop2): 1 truncate cleaned up [ 67.866182][ T5099] netlink: 12 bytes leftover after parsing attributes in process `syz.4.525'. [ 67.908747][ T5099] netlink: 100 bytes leftover after parsing attributes in process `syz.4.525'. [ 68.002997][ T5105] syz.0.528: attempt to access beyond end of device [ 68.002997][ T5105] loop0: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 68.019959][ T5105] EXT4-fs (loop0): unable to read superblock [ 68.036674][ T5109] capability: warning: `syz.3.530' uses deprecated v2 capabilities in a way that may be insecure [ 68.172766][ T3308] EXT4-fs unmount: 4 callbacks suppressed [ 68.172785][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.233141][ T5132] netlink: 12 bytes leftover after parsing attributes in process `syz.3.539'. [ 68.256283][ T5081] netlink: 8 bytes leftover after parsing attributes in process `syz.1.519'. [ 68.265921][ T5081] netlink: 12 bytes leftover after parsing attributes in process `syz.1.519'. [ 68.279633][ T5136] loop2: detected capacity change from 0 to 256 [ 68.321127][ T5130] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 68.329655][ T5130] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 68.339577][ T5132] netlink: 100 bytes leftover after parsing attributes in process `syz.3.539'. [ 68.367641][ T5130] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 68.390582][ T5141] netlink: 'syz.0.541': attribute type 3 has an invalid length. [ 68.445807][ T29] kauditd_printk_skb: 264 callbacks suppressed [ 68.445824][ T29] audit: type=1326 audit(1744861218.088:1620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5147 comm="syz.0.543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc93f9e169 code=0x7ffc0000 [ 68.484662][ T29] audit: type=1326 audit(1744861218.128:1621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5147 comm="syz.0.543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc93f9e169 code=0x7ffc0000 [ 68.508653][ T29] audit: type=1326 audit(1744861218.128:1622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5147 comm="syz.0.543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbc93f9e169 code=0x7ffc0000 [ 68.532178][ T29] audit: type=1326 audit(1744861218.128:1623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5147 comm="syz.0.543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc93f9e169 code=0x7ffc0000 [ 68.555695][ T29] audit: type=1326 audit(1744861218.128:1624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5147 comm="syz.0.543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbc93f9e169 code=0x7ffc0000 [ 68.579158][ T29] audit: type=1326 audit(1744861218.128:1625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5147 comm="syz.0.543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc93f9e169 code=0x7ffc0000 [ 68.602637][ T29] audit: type=1326 audit(1744861218.128:1626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5147 comm="syz.0.543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbc93f9e169 code=0x7ffc0000 [ 68.626008][ T29] audit: type=1326 audit(1744861218.128:1627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5147 comm="syz.0.543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc93f9e169 code=0x7ffc0000 [ 68.649605][ T29] audit: type=1326 audit(1744861218.128:1628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5147 comm="syz.0.543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc93f9e169 code=0x7ffc0000 [ 68.672950][ T29] audit: type=1326 audit(1744861218.128:1629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5147 comm="syz.0.543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbc93f9e169 code=0x7ffc0000 [ 68.760889][ T5163] loop1: detected capacity change from 0 to 2048 [ 68.813150][ T5169] loop2: detected capacity change from 0 to 2048 [ 68.820199][ T3293] loop1: p1 < > p4 [ 68.824686][ T3293] loop1: p4 size 8388608 extends beyond EOD, truncated [ 68.832302][ T5169] loop2: p1 < > p4 [ 68.838133][ T5169] loop2: p4 size 8388608 extends beyond EOD, truncated [ 68.852074][ T5170] hub 2-0:1.0: USB hub found [ 68.856997][ T5170] hub 2-0:1.0: 8 ports detected [ 68.857294][ T5163] loop1: p1 < > p4 [ 68.862133][ T3004] loop2: p1 < > p4 [ 68.870958][ T3004] loop2: p4 size 8388608 extends beyond EOD, truncated [ 68.881886][ T5163] loop1: p4 size 8388608 extends beyond EOD, truncated [ 68.884688][ T5173] loop3: detected capacity change from 0 to 2048 [ 68.896066][ T5169] FAULT_INJECTION: forcing a failure. [ 68.896066][ T5169] name failslab, interval 1, probability 0, space 0, times 0 [ 68.908760][ T5169] CPU: 0 UID: 0 PID: 5169 Comm: syz.2.550 Not tainted 6.15.0-rc2-syzkaller-00048-gc62f4b82d571 #0 PREEMPT(voluntary) [ 68.908788][ T5169] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 68.908800][ T5169] Call Trace: [ 68.908806][ T5169] [ 68.908813][ T5169] dump_stack_lvl+0xf6/0x150 [ 68.908840][ T5169] dump_stack+0x15/0x1a [ 68.908859][ T5169] should_fail_ex+0x261/0x270 [ 68.908890][ T5169] should_failslab+0x8f/0xb0 [ 68.908926][ T5169] kmem_cache_alloc_noprof+0x59/0x340 [ 68.908951][ T5169] ? vm_area_alloc+0x2c/0xb0 [ 68.908970][ T5169] ? vma_merge_new_range+0x2df/0x340 [ 68.909002][ T5169] vm_area_alloc+0x2c/0xb0 [ 68.909026][ T5169] mmap_region+0x83e/0x1490 [ 68.909077][ T5169] do_mmap+0x9ef/0xc80 [ 68.909117][ T5169] vm_mmap_pgoff+0x16d/0x2d0 [ 68.909151][ T5169] ksys_mmap_pgoff+0xd0/0x340 [ 68.909185][ T5169] ? syscall_trace_enter+0x102/0x1f0 [ 68.909219][ T5169] ? fpregs_assert_state_consistent+0x83/0xa0 [ 68.909257][ T5169] x64_sys_call+0x1945/0x2e10 [ 68.909283][ T5169] do_syscall_64+0xc9/0x1c0 [ 68.909317][ T5169] ? clear_bhb_loop+0x25/0x80 [ 68.909339][ T5169] ? clear_bhb_loop+0x25/0x80 [ 68.909359][ T5169] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.909383][ T5169] RIP: 0033:0x7f37f826e1a3 [ 68.909405][ T5169] Code: f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 41 89 ca 41 f7 c1 ff 0f 00 00 75 14 b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 25 c3 0f 1f 40 00 48 c7 c0 a8 ff ff ff 64 c7 [ 68.909422][ T5169] RSP: 002b:00007f37f68d6e18 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 68.909440][ T5169] RAX: ffffffffffffffda RBX: 0000000000000ba4 RCX: 00007f37f826e1a3 [ 68.909452][ T5169] RDX: 0000000000000003 RSI: 0000000008400000 RDI: 0000000000000000 [ 68.909463][ T5169] RBP: 0000200000000c02 R08: 00000000ffffffff R09: 0000000000000000 [ 68.909474][ T5169] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000000000006 [ 68.909485][ T5169] R13: 00007f37f68d6ef0 R14: 00007f37f68d6eb0 R15: 0000200000000080 [ 68.909503][ T5169] [ 69.124304][ T3004] loop1: p1 < > p4 [ 69.124715][ T5173] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.141847][ T3004] loop1: p4 size 8388608 extends beyond EOD, truncated [ 69.146785][ T5173] ext4 filesystem being mounted at /114/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 69.191965][ T3548] udevd[3548]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 69.216828][ T5180] udevd[5180]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 69.236898][ T3293] udevd[3293]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 69.306705][ T3296] udevd[3296]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 69.318576][ T3293] udevd[3293]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 69.331601][ T5185] team0: Port device bridge0 added [ 69.343311][ T3296] udevd[3296]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 69.344312][ T3293] udevd[3293]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 69.362263][ T5186] team0: Port device bridge1 added [ 69.481790][ T51] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm kworker/u8:3: bg 0: block 345: padding at end of block bitmap is not set [ 69.498398][ T51] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 463 with error 117 [ 69.511956][ T51] EXT4-fs (loop3): This should not happen!! Data will be lost [ 69.511956][ T51] [ 69.565778][ T5200] sch_tbf: burst 3092 is lower than device lo mtu (65550) ! [ 69.591523][ T51] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 479 with max blocks 1 with error 117 [ 69.604940][ T51] EXT4-fs (loop3): This should not happen!! Data will be lost [ 69.604940][ T51] [ 69.669755][ T5204] random: crng reseeded on system resumption [ 69.743387][ T3378] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x1 [ 69.751326][ T3378] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 69.759573][ T3378] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 69.766783][ T5204] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 69.768390][ T3378] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 69.778337][ T5204] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 69.784643][ T3378] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 69.802754][ T3378] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 69.811014][ T3378] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 69.819275][ T3378] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 69.827948][ T3378] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x2 [ 69.836015][ T3378] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 69.844090][ T3378] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 69.852204][ T3378] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 69.861240][ T3378] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 69.869161][ T3378] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 69.877121][ T3378] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x2 [ 69.885046][ T3378] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 69.893616][ T3378] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 69.901490][ T3378] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 69.909284][ T3378] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 69.917807][ T3378] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 69.925765][ T3378] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 69.933637][ T3378] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 69.941524][ T3378] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 69.950082][ T3378] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 69.957895][ T3378] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 69.965968][ T3378] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 69.974484][ T3378] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 69.983240][ T3378] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 69.991315][ T3378] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 69.999119][ T3378] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 70.007605][ T3378] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 70.015426][ T3378] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 70.023260][ T3378] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 70.031105][ T3378] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 70.039697][ T3378] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 70.047482][ T3378] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 70.091045][ T3378] hid-generic 0000:007F:FFFFFFFE.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 70.616429][ T5214] loop0: detected capacity change from 0 to 1024 [ 70.623362][ T5214] EXT4-fs: Ignoring removed nobh option [ 70.629829][ T5214] EXT4-fs: Ignoring removed bh option [ 70.703887][ T5214] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.744596][ T5214] EXT4-fs: Ignoring removed orlov option [ 70.752661][ T5214] EXT4-fs (loop0): can't enable nombcache during remount [ 70.764288][ T5214] EXT4-fs: Ignoring removed orlov option [ 70.771810][ T5214] EXT4-fs (loop0): can't enable nombcache during remount [ 70.817703][ T5226] FAULT_INJECTION: forcing a failure. [ 70.817703][ T5226] name failslab, interval 1, probability 0, space 0, times 0 [ 70.831098][ T5226] CPU: 1 UID: 0 PID: 5226 Comm: syz.1.567 Not tainted 6.15.0-rc2-syzkaller-00048-gc62f4b82d571 #0 PREEMPT(voluntary) [ 70.831156][ T5226] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 70.831168][ T5226] Call Trace: [ 70.831174][ T5226] [ 70.831181][ T5226] dump_stack_lvl+0xf6/0x150 [ 70.831208][ T5226] dump_stack+0x15/0x1a [ 70.831227][ T5226] should_fail_ex+0x261/0x270 [ 70.831257][ T5226] should_failslab+0x8f/0xb0 [ 70.831339][ T5226] __kmalloc_cache_noprof+0x55/0x320 [ 70.831365][ T5226] ? do_proc_control+0x1cc/0x890 [ 70.831404][ T5226] do_proc_control+0x1cc/0x890 [ 70.831435][ T5226] ? should_fail_ex+0xd7/0x270 [ 70.831506][ T5226] usbdev_ioctl+0x1def/0x3e70 [ 70.831543][ T5226] ? do_vfs_ioctl+0x977/0x1570 [ 70.831608][ T5226] ? selinux_file_ioctl+0x2f9/0x380 [ 70.831633][ T5226] ? __fget_files+0x186/0x1c0 [ 70.831652][ T5226] ? __pfx_usbdev_ioctl+0x10/0x10 [ 70.831726][ T5226] __se_sys_ioctl+0xc9/0x140 [ 70.831753][ T5226] __x64_sys_ioctl+0x43/0x50 [ 70.831780][ T5226] x64_sys_call+0x168d/0x2e10 [ 70.831805][ T5226] do_syscall_64+0xc9/0x1c0 [ 70.831838][ T5226] ? clear_bhb_loop+0x25/0x80 [ 70.831923][ T5226] ? clear_bhb_loop+0x25/0x80 [ 70.832015][ T5226] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 70.832036][ T5226] RIP: 0033:0x7f575296e169 [ 70.832052][ T5226] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 70.832074][ T5226] RSP: 002b:00007f5750fd7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 70.832092][ T5226] RAX: ffffffffffffffda RBX: 00007f5752b95fa0 RCX: 00007f575296e169 [ 70.832106][ T5226] RDX: 0000200000000000 RSI: 00000000c0185500 RDI: 0000000000000004 [ 70.832120][ T5226] RBP: 00007f5750fd7090 R08: 0000000000000000 R09: 0000000000000000 [ 70.832190][ T5226] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 70.832201][ T5226] R13: 0000000000000000 R14: 00007f5752b95fa0 R15: 00007ffdd7665008 [ 70.832222][ T5226] [ 71.044664][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.079080][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.159213][ T5241] netlink: 'syz.0.573': attribute type 3 has an invalid length. [ 71.264192][ T5248] batadv0: mtu less than device minimum [ 71.324142][ T5250] FAULT_INJECTION: forcing a failure. [ 71.324142][ T5250] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 71.337971][ T5250] CPU: 1 UID: 0 PID: 5250 Comm: syz.2.576 Not tainted 6.15.0-rc2-syzkaller-00048-gc62f4b82d571 #0 PREEMPT(voluntary) [ 71.338069][ T5250] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 71.338082][ T5250] Call Trace: [ 71.338088][ T5250] [ 71.338097][ T5250] dump_stack_lvl+0xf6/0x150 [ 71.338123][ T5250] dump_stack+0x15/0x1a [ 71.338218][ T5250] should_fail_ex+0x261/0x270 [ 71.338252][ T5250] should_fail+0xb/0x10 [ 71.338280][ T5250] should_fail_usercopy+0x1a/0x20 [ 71.338310][ T5250] _copy_from_iter+0xd8/0xd10 [ 71.338379][ T5250] ? kmalloc_reserve+0x16e/0x190 [ 71.338406][ T5250] ? __build_skb_around+0x199/0x1f0 [ 71.338435][ T5250] ? __alloc_skb+0x227/0x320 [ 71.338456][ T5250] ? __virt_addr_valid+0x1ed/0x250 [ 71.338503][ T5250] ? __check_object_size+0x367/0x510 [ 71.338639][ T5250] netlink_sendmsg+0x492/0x720 [ 71.338670][ T5250] ? __pfx_netlink_sendmsg+0x10/0x10 [ 71.338742][ T5250] __sock_sendmsg+0x140/0x180 [ 71.338766][ T5250] ____sys_sendmsg+0x350/0x4e0 [ 71.338819][ T5250] __sys_sendmsg+0x1a0/0x240 [ 71.338931][ T5250] __x64_sys_sendmsg+0x46/0x50 [ 71.338963][ T5250] x64_sys_call+0x26f3/0x2e10 [ 71.338990][ T5250] do_syscall_64+0xc9/0x1c0 [ 71.339027][ T5250] ? clear_bhb_loop+0x25/0x80 [ 71.339086][ T5250] ? clear_bhb_loop+0x25/0x80 [ 71.339113][ T5250] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 71.339146][ T5250] RIP: 0033:0x7f37f826e169 [ 71.339161][ T5250] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 71.339192][ T5250] RSP: 002b:00007f37f68d7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 71.339210][ T5250] RAX: ffffffffffffffda RBX: 00007f37f8495fa0 RCX: 00007f37f826e169 [ 71.339222][ T5250] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000003 [ 71.339236][ T5250] RBP: 00007f37f68d7090 R08: 0000000000000000 R09: 0000000000000000 [ 71.339250][ T5250] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 71.339264][ T5250] R13: 0000000000000000 R14: 00007f37f8495fa0 R15: 00007fffe3450a58 [ 71.339288][ T5250] [ 71.648864][ T5259] __nla_validate_parse: 7 callbacks suppressed [ 71.648896][ T5259] netlink: 100 bytes leftover after parsing attributes in process `syz.0.577'. [ 72.515927][ T5276] loop2: detected capacity change from 0 to 512 [ 72.558918][ T5276] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 72.609044][ T5276] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002] [ 72.716792][ T5279] netlink: 'syz.4.584': attribute type 3 has an invalid length. [ 72.721033][ T5281] sctp: [Deprecated]: syz.0.585 (pid 5281) Use of struct sctp_assoc_value in delayed_ack socket option. [ 72.721033][ T5281] Use struct sctp_sack_info instead [ 72.864920][ T5276] EXT4-fs error (device loop2): ext4_iget_extra_inode:4693: inode #15: comm syz.2.583: corrupted in-inode xattr: e_value size too large [ 72.938079][ T5276] EXT4-fs error (device loop2): ext4_orphan_get:1395: comm syz.2.583: couldn't read orphan inode 15 (err -117) [ 72.963555][ T5276] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.006158][ T5290] netlink: 666 bytes leftover after parsing attributes in process `syz.4.587'. [ 73.451957][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.544439][ T29] kauditd_printk_skb: 140 callbacks suppressed [ 73.544453][ T29] audit: type=1400 audit(1744861223.188:1770): avc: denied { read } for pid=5295 comm="syz.2.588" name="event2" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 73.645831][ T29] audit: type=1400 audit(1744861223.228:1771): avc: denied { open } for pid=5295 comm="syz.2.588" path="/dev/input/event2" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 73.669984][ T29] audit: type=1400 audit(1744861223.228:1772): avc: denied { ioctl } for pid=5295 comm="syz.2.588" path="/dev/input/event2" dev="devtmpfs" ino=245 ioctlcmd=0x4590 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 73.695538][ T29] audit: type=1326 audit(1744861223.248:1773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5295 comm="syz.2.588" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f37f826e169 code=0x0 [ 73.885876][ T5311] loop0: detected capacity change from 0 to 2048 [ 73.997198][ T5311] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.036050][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.249415][ T5322] random: crng reseeded on system resumption [ 74.450618][ T5324] netlink: 12 bytes leftover after parsing attributes in process `syz.0.597'. [ 74.473788][ T5326] team0: No ports can be present during mode change [ 74.482084][ T5326] netlink: 4 bytes leftover after parsing attributes in process `syz.3.598'. [ 74.491242][ T29] audit: type=1400 audit(1744861224.118:1774): avc: denied { ioctl } for pid=5325 comm="syz.3.598" path="socket:[10645]" dev="sockfs" ino=10645 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 74.540377][ T5326] team0 (unregistering): Port device team_slave_0 removed [ 74.577792][ T5326] team0 (unregistering): Port device team_slave_1 removed [ 74.634738][ T29] audit: type=1400 audit(1744861224.278:1775): avc: denied { lock } for pid=5334 comm="syz.2.600" path="socket:[10654]" dev="sockfs" ino=10654 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 74.818466][ T5347] loop0: detected capacity change from 0 to 512 [ 74.846944][ T29] audit: type=1400 audit(1744861224.488:1776): avc: denied { read } for pid=5348 comm="syz.2.608" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 74.870929][ T29] audit: type=1400 audit(1744861224.488:1777): avc: denied { open } for pid=5348 comm="syz.2.608" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 74.895834][ T29] audit: type=1400 audit(1744861224.488:1778): avc: denied { ioctl } for pid=5348 comm="syz.2.608" path="/dev/sg0" dev="devtmpfs" ino=135 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 74.973290][ T5347] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.002965][ T5347] ext4 filesystem being mounted at /121/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 75.002958][ T29] audit: type=1326 audit(1744861224.648:1779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5355 comm="syz.2.610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37f826e169 code=0x7ffc0000 [ 75.003091][ T5347] ================================================================== [ 75.003118][ T5347] BUG: KCSAN: data-race in data_push_tail / string [ 75.003151][ T5347] [ 75.003160][ T5347] write to 0xffffffff88e3d730 of 1 bytes by task 29 on cpu 0: [ 75.003189][ T5347] string+0x17d/0x210 [ 75.003214][ T5347] vsnprintf+0x539/0x8a0 [ 75.003238][ T5347] vscnprintf+0x42/0x90 [ 75.003263][ T5347] printk_sprint+0x30/0x2d0 [ 75.003293][ T5347] vprintk_store+0x583/0x860 [ 75.003323][ T5347] vprintk_emit+0x1a0/0x6c0 [ 75.003352][ T5347] vprintk_default+0x26/0x30 [ 75.003376][ T5347] vprintk+0x1d/0x30 [ 75.003406][ T5347] _printk+0x7f/0xb0 [ 75.003428][ T5347] kauditd_hold_skb+0x1a3/0x1b0 [ 75.003460][ T5347] kauditd_send_queue+0x288/0x2e0 [ 75.003493][ T5347] kauditd_thread+0x432/0x640 [ 75.003518][ T5347] kthread+0x4b7/0x540 [ 75.003542][ T5347] ret_from_fork+0x4b/0x60 [ 75.003563][ T5347] ret_from_fork_asm+0x1a/0x30 [ 75.003591][ T5347] [ 75.003600][ T5347] read to 0xffffffff88e3d730 of 8 bytes by task 5347 on cpu 1: [ 75.003619][ T5347] data_push_tail+0x107/0x440 [ 75.003642][ T5347] data_alloc+0xbd/0x2c0 [ 75.003661][ T5347] prb_reserve+0x86a/0xb80 [ 75.003684][ T5347] vprintk_store+0x552/0x860 [ 75.003710][ T5347] vprintk_emit+0x1a0/0x6c0 [ 75.003737][ T5347] vprintk_default+0x26/0x30 [ 75.003761][ T5347] vprintk+0x1d/0x30 [ 75.003791][ T5347] _printk+0x7f/0xb0 [ 75.003817][ T5347] mnt_warn_timestamp_expiry+0x1cd/0x210 [ 75.003850][ T5347] do_new_mount+0x32c/0x6b0 [ 75.003886][ T5347] path_mount+0x49b/0xb30 [ 75.003923][ T5347] __se_sys_mount+0x28f/0x2e0 [ 75.003970][ T5347] __x64_sys_mount+0x67/0x80 [ 75.004004][ T5347] x64_sys_call+0xd11/0x2e10 [ 75.004029][ T5347] do_syscall_64+0xc9/0x1c0 [ 75.004062][ T5347] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.004084][ T5347] [ 75.004091][ T5347] value changed: 0x00000000ffffe0c5 -> 0x303d64696720303d [ 75.004104][ T5347] [ 75.004110][ T5347] Reported by Kernel Concurrency Sanitizer on: [ 75.004127][ T5347] CPU: 1 UID: 0 PID: 5347 Comm: syz.0.606 Not tainted 6.15.0-rc2-syzkaller-00048-gc62f4b82d571 #0 PREEMPT(voluntary) [ 75.004162][ T5347] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 75.004189][ T5347] ================================================================== [ 75.275027][ T5347] EXT4-fs error (device loop0): ext4_do_update_inode:5211: inode #2: comm syz.0.606: corrupted inode contents [ 75.288055][ T5347] EXT4-fs error (device loop0): ext4_dirty_inode:6103: inode #2: comm syz.0.606: mark_inode_dirty error [ 75.307959][ T5347] EXT4-fs error (device loop0): ext4_do_update_inode:5211: inode #2: comm syz.0.606: corrupted inode contents [ 75.342788][ T5347] EXT4-fs error (device loop0): __ext4_ext_dirty:207: inode #2: comm syz.0.606: mark_inode_dirty error [ 75.441066][ T5347] netlink: 36 bytes leftover after parsing attributes in process `syz.0.606'. [ 75.462580][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.