last executing test programs: 4.539183081s ago: executing program 2 (id=2452): r0 = socket$netlink(0x10, 0x3, 0x14) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b707000008000000850000006900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r2}, 0x10) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001040)=ANY=[@ANYBLOB="380000000314010000000000000080000900020073797a30000000000800410073697700140033006c6f"], 0x38}}, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000680)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0x64, 0x0, 0x200, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x34}}}}, [@NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x3}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x5ed}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0xffff}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x1}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x4}, @NL80211_ATTR_STA_VLAN={0x8}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5, 0x113, 0x1}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x544}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000001}, 0x4000) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="01e9ffffffffffffff00f3000000000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kmem_cache_free\x00', r4}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) getgroups(0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000b20cc6ddd22930b48de7190903d7000000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r5}, 0x0, &(0x7f0000000040)}, 0x20) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x900) mq_timedsend(r6, &(0x7f0000000b00)="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", 0x1000, 0x5, &(0x7f0000000280)) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r7}, 0x10) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x10) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r9, &(0x7f000057eff8)=@abs, 0x6e) 4.318885322s ago: executing program 2 (id=2453): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000007000000ff0f00000900000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32], 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3f, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000020000000000000000018190000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000001b40)='sched_switch\x00', r1, 0x0, 0x7ff}, 0x18) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="c8010000", @ANYRES16, @ANYBLOB="0100000000000000000001000000060006000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb5426c010880f4000080060005000180000024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff240002001bc715ee4868b12a49f4df11bc05475489f6a27c4d6483ad2fa5e45903b0ce851400040002000000ac1414aa00000000000000008c00098028000080060001000a00000014000200ff020000000000000000000000000001050003000000000028000080060001000a000000140002000000000000000000000000000000000105000300030000001c000080060001000200da0008000200e000000105000300000000001c000080060001000200000008000200ac141400050003000000000074000080200004000a004e2200000000fc0000000000000000000000000000000400000024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff080003000100000024000200cde20bc0d9b90ac13642d7b66459dd9db5e20b4b16d3d23f2cb03a8aa417dce6080007000000000014000200776730"], 0x1c8}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x18) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000a40)={0xfffffffe, {{0xa, 0x4e21, 0x9, @private2}}, {{0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000280)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000014001080800418e00000a04fcff", 0x58}], 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00'}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) syz_usb_connect$cdc_ecm(0x3, 0x4d, &(0x7f0000000580)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x1, 0x0, 0x2, [{{0x9, 0x4, 0x0, 0xa1, 0x2, 0x2, 0x6, 0x0, 0x4, {{0x5}, {0x5, 0x24, 0x0, 0x800}, {0xd, 0x24, 0xf, 0x1, 0x9, 0x7, 0x7f, 0x5e}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x10, 0x1, 0x7, 0x5}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x6, 0x1, 0xc0}}}}}]}}]}}, 0x0) 3.757436674s ago: executing program 2 (id=2463): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/14, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x7, 0x8000, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1e, 0x5, 0x400, 0xd, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x5e2, 0x0, &(0x7f00000003c0), &(0x7f0000000180)) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, 0x1, 0x1, 0x7ff}, 0x20) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e00000027f0000010000000003"], 0x1c) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) r4 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000780)=@raw={'raw\x00', 0x8, 0x3, 0x3f0, 0x0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x320, 0xffffffff, 0xffffffff, 0x320, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'netpci0\x00'}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'ip_vti0\x00', 'gre0\x00'}, 0x0, 0x200, 0x230, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'ipvlan1\x00', {0x0, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x450) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES64=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000080000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@bloom_filter={0x1e, 0x0, 0x4, 0x8000, 0x5081, 0xffffffffffffffff, 0x7f, '\x00', 0x0, r2, 0x5, 0x5, 0x0, 0x9, @void, @value, @void, @value}, 0x50) bpf$TOKEN_CREATE(0x24, &(0x7f00000002c0)={0x0, r2}, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0a000000040000a9f0c27b15d5e734abe413", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$F2FS_IOC_MOVE_RANGE(r6, 0xc020f509, &(0x7f0000000000)={r6, 0xf8a, 0xc, 0xc0000000}) 3.713221748s ago: executing program 2 (id=2464): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x2, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) r3 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xe}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_mount_image$ext4(&(0x7f0000000780)='ext3\x00', &(0x7f0000000240)='./file0\x00', 0x10000, &(0x7f0000000dc0), 0x1, 0x77a, &(0x7f0000000f00)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) r5 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r5, 0x65, 0x1, &(0x7f0000000200)=[{{0x0, 0x1}, {0x0, 0x0, 0x0, 0x1}}, {{0x0, 0x1}}], 0x10) setsockopt$CAN_RAW_FILTER(r5, 0x65, 0x1, 0x0, 0x0) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(r2, &(0x7f00000001c0)="a6", 0x1, 0x0, 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x541b, &(0x7f0000000100)) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="d80000001c0081064e81f782db44b9040a1d08040e00000000000aa1180002000600142603600e1208000f0000810401a8001605200001400200000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) 3.561598642s ago: executing program 2 (id=2468): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c010000190001000000000000000000fc0200000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000075b3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008400050000000000000000000000000000000001000000003c00000002000000ac1414bb000000000000000000000000000000000100000000000000000000000000000000000000000000001100000000000000000000003300000002000000ff02000000000000000000000000000100"/244], 0x13c}}, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0}, 0x20) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff00000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000000c0)='./bus\x00', 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="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"/315], 0x1, 0x217, &(0x7f00000004c0)="$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") r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000d80)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff98, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f00000001c0)='leases_conflict\x00', r3, 0x0, 0xfffffffffffffffd}, 0x18) r4 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r4, 0x0, 0x4, 0x0, 0x0) lstat(&(0x7f0000000040)='./file0\x00', 0x0) socket$packet(0x11, 0xa, 0x300) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r5, 0xffffffffffffffff}, 0x4) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000ec0)={0x11, 0x10, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kmem_cache_free\x00', r7}, 0x10) r8 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000100)=[{0x80000006, 0x0, 0xfc}]}, 0x10) syz_emit_ethernet(0xfed7, &(0x7f00000002c0)=ANY=[], 0x0) openat$selinux_enforce(0xffffff9c, &(0x7f0000000380), 0x446103, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file0/file0\x00', 0x405c, &(0x7f0000000f80)={[{@grpid}, {@noblock_validity}, {@nobh}, {@nolazytime}, {@grpjquota}, {@acl}]}, 0x1, 0x42f, &(0x7f0000000940)="$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") pipe2(&(0x7f0000001440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r11, 0x0, r10, 0x0, 0x6, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000fc0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r9, @ANYBLOB=',wfdno=', @ANYRESHEX=r10, @ANYBLOB="53275d4a7bf80a5e8a9adc35eddba7950d003afbb329134220f4b7a46181f174cda91573ef9197c5f79cab8c2bf62d1bb37b6273296efeb14fedd632ebbffefbafbcd1edbe3c2bab8518eca89185bea4aadfc9da51ce7d88f58631835ca98cefd59765bf339ddb70a4fe2abfee94ac3be037f1bb496b3a7c8074673bf41b8a95231bc03d5304d9fb891264a5f561e47cc0cc9865d95790c5890d8d09f9b7ee09f01b6398f9c549c10217e41ec91db0aa8a2a0564cb93fde1cc295d6a9c56049f8298d3c93cb932aeb82734a67205e67f53986ab7b5e9b81d853535354f63960647c26b61591c505c090a6d7f65fd519afa3de27d2b6d51", @ANYRESHEX=r2, @ANYRES16]) sendmsg$NFNL_MSG_CTHELPER_GET(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[], 0x14}}, 0x0) 1.996647486s ago: executing program 3 (id=2489): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x101800, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x20001439) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f00000000c0)=0x2050a0c) ioctl$TUNSETOFFLOAD(r1, 0x4004743d, 0x2000000b) read(r1, 0x0, 0x0) close(r1) close(r0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000010100008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b70200"], &(0x7f0000001dc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000480), 0xc, 0x141341) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r5}, &(0x7f0000000540), &(0x7f0000000580)}, 0x20) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) 1.84265426s ago: executing program 3 (id=2493): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0xb, 0x7, 0x5, 0x8, 0x5, r0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="fc00000000000200000000000000fe0018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000027b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000002940)={'team0\x00', 0x0}) r3 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r3, 0x114, 0x7, &(0x7f0000000340)={@phonet={0x23, 0x33, 0x4, 0xe}, {&(0x7f0000002bc0)=""/114, 0x72}, &(0x7f0000002c40), 0x10}, 0xa0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000029c0)={'syztnl1\x00', &(0x7f0000002980)={'sit0\x00', 0x0, 0x10, 0x7, 0x0, 0xfff, {{0x7, 0x4, 0x3, 0x2f, 0x1c, 0x66, 0x0, 0x2, 0x4, 0x0, @empty, @broadcast, {[@ra={0x94, 0x4}, @noop]}}}}}) sendmmsg$inet(r0, &(0x7f0000002b00)=[{{&(0x7f0000000200)={0x2, 0x4e23, @local}, 0x10, &(0x7f0000001480)=[{&(0x7f0000001340)="aaa638d593339cc9667ceaf885e5fef67128d0de25675b88e24f2513f00b3c6dadeedfeaf633daadc5e0e5116a25ae5ceaf83b39e887f12951f50841ccaebc714973197bbbe8cfaee850becea46a49455978539e05aed37d90d083a5198857d87fee2ee16add752ca10520ac8650caf0069d154ce47c2121e1ad880ccc2b78cccd5f8af91a7b4c564016250e137dbd93518578e4be869401f595a0cd022d407e3f47df2966efee188b9cd4dd3bf540eb844ec852141e1e6eb00309fc8e45ebba5cf50658a85cb0f6d02b44dc3269f851acd53a496a548bfdd9911b26", 0xdc}, {&(0x7f0000000280)="7d6e36058aa343fc2699d9296bdcd91938b8f3316c3ecfdbbdb9fd3516384ebea2c2ef955a73ab980a240aa6dbb3f6b130133c6398eb56ea84f283484b94ff62fbb3b812af03d3b286ecbfabea42357a2e8c0bff96512bc17a0eafb8dd29421261617b0050f292f5a5113426", 0x6c}, {&(0x7f0000001440)="514ee763f05842d7ecf7bb0d0ae47b126d95e99aa480c5bfc34fb78faea19d2153d808cb80a44cca582ccefe66a7fb8e6e8872812dfa9051b85bb82122894286", 0x40}], 0x3, &(0x7f00000014c0)=ANY=[@ANYBLOB="14000000000000000000000002000000090000000000000060008ce2000000000000000007000000440aad7febeb07c410fd441c5511e00000015c82690c0a01010000000006e00000010000000607236b000000007f000001ac1414aa00000000ac1414aaac1414bbac1e01010a01010289074df1ccc316"], 0x78}}, {{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000001540)="73a1c5c54fe721aa2bfafe", 0xb}, {&(0x7f0000001580)="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", 0x1000}], 0x2}}, {{&(0x7f00000025c0)={0x2, 0x4e23, @rand_addr=0x64010102}, 0x10, &(0x7f0000002900)=[{&(0x7f0000002600)="4511a1033545972141d62b330aa93c6902682147907d84c8724c145444f133f86380363cc4654ace73d1389ab3c0a904416460156f78505b65e1e9f96a0cbe085a01dfaf204087279a2483bbd7ec929e29dfc3e062fb28c3e6aa18e6cb9d91db6473bddac55f830c7420cd2c1d51f5bdc42a6b45404d29ab3dfc5af84f4c7e2b3e763fab37a8f8cb557937149b853f66532db449a6f0ee2f6ddc6fdb72b1af85dc15593870d596d59286a9560870fcb6742e8d73a5a7348fa32a0cc54187415a15af7ff93d95db5eb64e060bbad6af183472c76c443045f33fb466f6a216a0dc52062eb4a9fcaab8a3c1439f3af747e4b5680cb1cfbb92cfbda3", 0xfa}, {&(0x7f0000002700)="910b529068ea67b9ac906a174845b7955e563f94", 0x14}, {&(0x7f0000002740)="a7911d1c5020c5dc5acdb2d7863e98035f5587ed145e8bb56ae86e853c0bd17a3775dfdabbb7ef896af3e355a8e0d123909b4852d7bd994de828008edb9badbf23263378720f90eccfa1cd265ac072caff259e7e58506e60a75db3c1760f89266068fce30b3f5dbc94151bf5ee2995e4349c0ffa3d0ecab852e7b677f65abda7b0d65c5a0aca473e5db0511fa46ac6fab8408a0cf014c6", 0x97}, {&(0x7f0000002800)="23d6dabae0742d42ab4a2d7bdfcc5fb88e64532fae4f24afe603745948413220cd3575376b6804d6ebc1639e03d787ce973d1c6ead93542388ca44766a84e21083300c546b0a5f9041f007215580b5dd2a54daa5d320269ca0ca9ba593bd24af6c2f891a665c288f58dc65957e22fc59c15e91865736b7123e6871aae7c53731c1160e5c8efb29c1ea8855e3fd9db16d9f362bdaa29fae684a5b0e379b91948b46b601f6b6c097711e0f37fc694244d222459f7c9ee305bb48744e9d439a950c0ad08e7c08024884ed11cb6da5b252da561642ad4b4d8bab3770b443da117d3d1a5d5a4e3e055d85f775db270735c411f01079d50adee837fef67f8d851e", 0xfe}], 0x4, &(0x7f0000002a00)=[@ip_ttl={{0x14}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @dev={0xac, 0x14, 0x14, 0x13}, @rand_addr=0x64010101}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x8}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x4}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xff}}, @ip_ttl={{0x14, 0x0, 0x2, 0x600000}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x7}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @multicast1, @private=0xa010100}}}], 0xd0}}], 0x3, 0x4000803) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) r5 = socket$inet6_udp(0xa, 0x2, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r6, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r6, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x2, &(0x7f00000000c0)=@ccm_128={{0x304}, "723e08df8c8b8a86", "bdcc707b30e3c37cfe84d8d4bb4d47d0", '^.\al', "955788b9c460caac"}, 0x28) sendto$inet6(r6, &(0x7f0000000140)="ff0300", 0x3, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r6) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r7, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) listen(r7, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000140)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) 1.325517288s ago: executing program 1 (id=2497): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_script(r0, &(0x7f0000000080)={'#! ', './file0'}, 0xb) prctl$PR_SET_MM_AUXV(0x23, 0xc, 0x0, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$SG_NEXT_CMD_LEN(r0, 0x2283, &(0x7f0000000200)=0xb6) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x4, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0), &(0x7f00000003c0), 0x5, r3}, 0x38) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000001040)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$USBDEVFS_DROP_PRIVILEGES(0xffffffffffffffff, 0x4004551e, &(0x7f0000000180)=0x4ba54771) ioctl$USBDEVFS_BULK(0xffffffffffffffff, 0x80045515, &(0x7f0000001200)={{{0x1, 0x1}}, 0x0, 0x2, 0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kfree\x00', r4}, 0x10) pipe(&(0x7f0000002900)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x2040400) vmsplice(r5, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) ioctl$SG_IO(r7, 0x2285, &(0x7f0000000040)={0x53, 0x0, 0x6, 0x0, @buffer={0x17, 0x51, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180100000100a7d90000000000000000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r9}, 0x10) add_key(&(0x7f0000000280)='rxrpc\x00', 0x0, &(0x7f0000000100)="01000000020000000000006bb55a2a630b00c145f94cd977", 0x18, 0xffffffffffffffff) sendto$inet6(r8, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c) connect$inet6(r8, &(0x7f0000000340)={0xa, 0x0, 0x0, @private1}, 0x1c) pselect6(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000100)={0xb}, 0x0, 0x0) shutdown(r8, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x10, 0x6, &(0x7f0000000140)=ANY=[@ANYBLOB="050000000000000071111d000000000085100000020000008500001f0000000095000007000000009500a5050000e344be86fd66f79cc32a0df5ad55ee62cb8d4733dbe74a370f1dcf"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffe96, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) 988.586579ms ago: executing program 3 (id=2500): semop(0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="000000000087fb00b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000500), 0xff, 0x485, &(0x7f0000001040)="$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") syz_io_uring_setup(0x1526, &(0x7f0000000100)={0x0, 0x0, 0x2, 0x0, 0xfffffffd}, 0x0, 0x0) r1 = creat(&(0x7f0000000200)='./file0\x00', 0x10a) ioctl$FS_IOC_GETFSLABEL(r1, 0x40086602, &(0x7f0000000100)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000080007"], 0x98}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000980)=ANY=[@ANYBLOB="ac0000000001010400000000000000000a0000003c0001802c000180140003000000000000000000000000000000000014000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe80000000000000000000000000003a0c000280050001000000000008000740000000001800068014000400ff010000000000000000000000000001"], 0xac}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000002c80)={0xa, 0x14e24}, 0x1c) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) recvmmsg(r3, &(0x7f0000007c80)=[{{0x0, 0x0, &(0x7f0000001c00)=[{&(0x7f0000001c80)=""/130, 0x82}, {0x0}], 0x2}}], 0x1, 0x0, 0x0) 869.5255ms ago: executing program 0 (id=2501): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000"], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000900)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000180)={0x28, 0x0, 0x0, @host}, 0x10) 856.767931ms ago: executing program 0 (id=2502): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001c2df6f270000000fad413ec50000000f000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r0}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b904021d080225000000040000a118000200e000000000000e1208000f0100810401a80016ea1f000840032e5f54c92011148ed08734843cb12b00000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100", 0x6c}], 0x1, 0x0, 0x0, 0x7400}, 0x0) 843.673433ms ago: executing program 0 (id=2503): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x20}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004801}, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r4, 0x4) sendmmsg$inet6(r4, &(0x7f0000005780)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20000000) 828.698744ms ago: executing program 0 (id=2504): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 803.667046ms ago: executing program 0 (id=2505): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002ac0)=@newtaction={0x850, 0x30, 0xffff, 0x0, 0x0, {}, [{0x83c, 0x1, [@m_police={0x838, 0x1, 0x0, 0x0, {{0xb}, {0x80c, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x40, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xffffffff]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x20000000, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x850}}, 0x0) 803.066246ms ago: executing program 0 (id=2506): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) setsockopt$inet6_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) io_setup(0x6, &(0x7f0000000680)=0x0) io_submit(r3, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x180a, 0x0, 0x3, 0x1, 0x0, r1, 0x0, 0x2}]) 536.828231ms ago: executing program 2 (id=2507): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) setsockopt$inet6_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) io_setup(0x6, &(0x7f0000000680)=0x0) io_submit(r3, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x180a, 0x0, 0x3, 0x1, 0x0, r1, 0x0, 0x2}]) 459.743707ms ago: executing program 1 (id=2508): bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x15) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="0600000004000000ff0f00000700000000000000", @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000098acc2273e94d4807d5074bd2ad28fa6d4ac7ae27041c2440989638ec35c131cbe711ef8d7065f8781703471ed7bf3165bb01bb8920569d765760b42d11d6c13689f44e3d03f7f82dabceca5837aeadd864bfb0d37071ef3fbd2b549a062e716539becb10ad4254b1974d93429a00472f1fbdf8c4a070995e8fe10f8f0929923a23fd32f18e864ee4ca30b1f8841ea9ab1d9990037a708279833e418c86ee72f1c7acbd7bba264916f711bd172", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000e41621eb70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x800000, &(0x7f0000000000), 0x1, 0x4ec, &(0x7f0000000140)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r2}, 0x10) epoll_create1(0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) 411.994012ms ago: executing program 4 (id=2509): r0 = socket$netlink(0x10, 0x3, 0x14) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b707000008000000850000006900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r2}, 0x10) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001040)=ANY=[@ANYBLOB="380000000314010000000000000080000900020073797a30000000000800410073697700140033006c6f"], 0x38}}, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000680)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0x64, 0x0, 0x200, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x34}}}}, [@NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x3}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x5ed}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0xffff}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x1}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x4}, @NL80211_ATTR_STA_VLAN={0x8}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5, 0x113, 0x1}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x544}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000001}, 0x4000) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="01e9ffffffffffffff00f3000000000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kmem_cache_free\x00', r4}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) getgroups(0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000b20cc6ddd22930b48de7190903d7000000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r5}, 0x0, &(0x7f0000000040)}, 0x20) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x900) mq_timedsend(r6, &(0x7f0000000b00)="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", 0x1000, 0x5, &(0x7f0000000280)) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r7}, 0x10) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x10) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r9, &(0x7f000057eff8)=@abs, 0x6e) 236.176378ms ago: executing program 4 (id=2510): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001f40)=ANY=[@ANYBLOB="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"], &(0x7f0000001000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x53) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="1401000025000100000000000000000003"], 0x114}], 0x1}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x4d53, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000001000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008180000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000008c0)='page_pool_state_hold\x00', r5}, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020100008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f00000007c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002c00000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f00000002c0)='mm_page_pcpu_drain\x00', 0xffffffffffffffff, 0x0, 0x4}, 0x18) 165.991014ms ago: executing program 4 (id=2511): r0 = add_key$keyring(&(0x7f00000001c0), &(0x7f00000002c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f0000000340)="01000722625a900ede290f00015b097ead85847837353d2dbad0", 0x1a, r0) 139.369417ms ago: executing program 4 (id=2512): socket$nl_route(0x10, 0x3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ff000008000000b70300000e0000008500e9ffaf0000009500000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000001afc180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000090000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) syz_mount_image$iso9660(&(0x7f0000000180), &(0x7f0000000100)='./file0\x00', 0x14c0e, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], 0xfd, 0x6b1, &(0x7f0000000280)="$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") r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000850000002300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000d00)='kfree\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00'}, 0x10) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x6) 138.864967ms ago: executing program 1 (id=2513): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001c2df6f270000000fad413ec50000000f000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r0}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b904021d080225000000040000a118000200e000000000000e1208000f0100810401a80016ea1f000840032e5f54c92011148ed08734843cb12b00000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025", 0xa2}], 0x1, 0x0, 0x0, 0x7400}, 0x0) 128.103318ms ago: executing program 3 (id=2514): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ff000008000000b70300000e0000008500e9ffaf0000009500000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000001afc180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000090000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) syz_mount_image$iso9660(&(0x7f0000000180), &(0x7f0000000100)='./file0\x00', 0x14c0e, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], 0xfd, 0x6b1, &(0x7f0000000280)="$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") r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000850000002300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000d00)='kfree\x00', r2}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r4}, 0x10) fsync(0xffffffffffffffff) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x6) gettid() r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000015000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5}, 0x10) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800b000100697036746e6c000018000280140002002001000000000000000000000000000008000a00", @ANYRES32, @ANYBLOB="40c68e47c0b763d92ad682f0ac4b68b5cad0981ecce1becb98ce6ec605140968e4c2f7930cb2b15e86afeb4500f78e4df94d34c0b42aecc7bae995eddbcdaef3ecdaf42bfb307f000000000000"], 0x50}}, 0x0) 106.81494ms ago: executing program 1 (id=2515): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x20}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004801}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r4, 0x4) sendmmsg$inet6(r4, &(0x7f0000005780)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20000000) 91.543601ms ago: executing program 4 (id=2516): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000600)=ANY=[@ANYBLOB="61124c00000000006113890000000000bf2000000000000007000000080000003d0301000000000095000000000000006916000000000000bf67000000000000170600000fff07006706000002000000070600000ee60000bf050000000000001f650000000000006507000002000000070700004c0000001f75000000000000bf54000000000000070500000419311f3d2401000000000095000000000000000500000000000000950000000000000032ed3c5be95e76b67754bb12dc8c27df8ecf264e0f84f9f17d3c30e3c72fe9755ba08508460b603daf5a7d1dbdd2d17f2f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a674f888a08034b7dd399703d6c4f633a9a4f16d0a3e1282ee45a010fb94fa9de56c9d8a814261bdb94a6538b89dc6c60bf70d742a81b72bab8395fa64810b5b1bfd3782519518c51231422bb8fab4d4d897db2c544c0ec50b8eac8c63d2b1cd06a39702bd547f5ebaa6954f01cef3c9bacec15e2e3b2bd352e93a22adfe8efe33ffa78b02af242f8ee5476d4ef7a6f0c4704403b9bad2b648e90fff24f69a5ef05f5408ea197ed09a9510ee6063229de2984abdd46ea3ec78e3127002ed37c2564b8f8a621483fb2a5ff221e0d831d64759d17b8c59d0f2b06e7f6b7958fb5b939af4be5e55a95f8c6d785a91c7c3f0c17ae7f9ac5ff05f5ecddf0cef90d50e763be96496661c749e21ab63a1f50b30a65a9027ba357bf8c614497ee59b68bf6a5d45c81c567e347d545741fbbbea3e47b1750f272980087b7f8a13cce7014137f250370b8a70"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 76.068443ms ago: executing program 1 (id=2517): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000900)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000180)={0x28, 0x0, 0x0, @host}, 0x10) 52.712165ms ago: executing program 4 (id=2518): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000007000000ff0f00000900000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0], 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3f, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000020000000000000000018190000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000001b40)='sched_switch\x00', r1, 0x0, 0x7ff}, 0x18) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="c8010000", @ANYRES16, @ANYBLOB="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"], 0x1c8}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x18) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000a40)={0xfffffffe, {{0xa, 0x4e21, 0x9, @private2}}, {{0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000280)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000014001080800418e00000a04fcff", 0x58}], 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00'}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) syz_usb_connect$cdc_ecm(0x3, 0x4d, &(0x7f0000000580)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x1, 0x0, 0x2, [{{0x9, 0x4, 0x0, 0xa1, 0x2, 0x2, 0x6, 0x0, 0x4, {{0x5}, {0x5, 0x24, 0x0, 0x800}, {0xd, 0x24, 0xf, 0x1, 0x9, 0x7, 0x7f, 0x5e}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x10, 0x1, 0x7, 0x5}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x6, 0x1, 0xc0}}}}}]}}]}}, 0x0) 52.243565ms ago: executing program 1 (id=2519): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x38, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0x4}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x60}}, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x20000ff9, &(0x7f0000000240)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000000700)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff959bcecc7a95425a3a07e758044ab4ea6f7c555d88fecf90b037511bf746bec66ba", 0x994b6e03113064ae, 0x0, 0x0, 0x0) 12.391179ms ago: executing program 3 (id=2520): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000"], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000900)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000180)={0x28, 0x0, 0x0, @host}, 0x10) 0s ago: executing program 3 (id=2521): bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x15) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="000000000000000000000000000000000000000098acc2273e94d4807d5074bd2ad28fa6d4ac7ae27041c2440989638ec35c131cbe711ef8d7065f8781703471ed7bf3165bb01bb8920569d765760b", @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000e"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x800000, &(0x7f0000000000), 0x1, 0x4ec, &(0x7f0000000140)="$eJzs3c9rXFsdAPDvnSRt0uY5eeri+cDXYitp0c4kjW2Di1JB3BXUuo8hmYSQSSZkJm0TSknxDxBEdOHKlRvBP0CQbtwXoaB7EVGKbXXhQh25M3dsTGeSwU5m7OTzgdN77o/c7/d0Orf33HvICeDUuhgRdyJiJCKuRkQ+257LSuw3S3rc61ePltKSRL1+7y9JJNm21rmSbHk++7HxiPh2cmDHAdXdvfXFcrm0na0Xaxtbxeru3rW1jcXV0mppc25u9ub8rfkb8zM9a+vtr//xR9//2Tdu/+rLD36/8Ocrj9O0JrN9B9vRS82mjzX+LlpGI2L7JIINwEjWnrEujz97wvkAAHC09B7/0xHxhcb9fz5GGndzAAAAwDCpJxH/SCLqAAAAwNDKNcbAJrlCNhZgMnK5QqE5hvezcS5XrlRrX1qp7GwuN8fKTsVYbmWtXJrJxgpPxViSrs826m/Wrx9an4uIDyPih/mJZOVslApLlfLyoB9+AAAAwClx/lD//2/5Zv8fAAAAGDJTg04AAAAAOHH6/wAAADD8Ovb/E5MBAAAAwBD45t27aam35r9evr+7s165f225VF0vbOwsFZYq21uF1UpltVwqLFU2jjtfuVLZ+kps7jws1krVWrG6u7ewUdnZrC005vVeKHU7TzQAAADQOx9eePq7JCL2vzrRKKkz2T59dRhuueMPmThQT04yF6C/RgadADAw/9sAX8OCYRgc18d/Wa/3KRNgUI7r2I932vGs97kAAAAnY/pznd//A8Oti/f/bdzpeR5A/3n/D6eXN/lwehnjD7zb+3+DhAAA4H0w2ShJrpC9C5yMXK5QiPigMS3AWLKyVi7NRMSnIuK3+bGz6frsoJMGAAAAAAAAAAAAAAAAAAAAAAAAgPdMvZ5E/bAzb28CAAAA3l8RuT8l2fxf0/nLk4efD5xJ/p5vLCPiwU/u/fjhYq22PZtuf5l/M2tYtv163x9fAAAAAKlf//dqq5/e6scDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQA/Vk+Zy6fWrR0v9DPziaxExFZHGbZXmntEYbyzHYywizv01idEDP5fmO9KD+PtPIuKjdvGTNK2YyrI4HD8XERMDjn++B/HhNHuaXn/utPv+5eJiY9n++zealXf14mKn61/uP9e/kQ7Xvw+6jPHx818UO8Z/EvHxaPvrTyt+0iH+pS7jf/c7e3ud9tV/GjEd7eMfjFWsbWwVq7t719Y2FldLq6XNubnZm/O35m/MzxRX1sql7M+2MX7w+V/+66j2n+sQf+qY9l/usv3/fP7w1Wfe2vr4eiv+lUvtP/+Pjoif/pv4Yvb/QLp/ulXfb9YP+uTnv/nkqPYvd2j/cZ//lS7bf/Vb3/tDl4cCAH1Q3d1bXyyXS9tHVp7F8cec3kp6L5RWbvcvaOvRQy/PfCE934kmPxH/F5+XSjeVAV+YAACAnntz0z/oTAAAAAAAAAAAAAAAAAAAAOD06sevExt0GwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuvHvAAAA//+P68mm") openat(0xffffffffffffff9c, 0x0, 0x143042, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r2}, 0x10) epoll_create1(0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) ioctl$FICLONERANGE(r4, 0x4020940d, &(0x7f0000000080)={{r4}, 0x40006, 0x2, 0x2}) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000041c0), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000042c0)={&(0x7f0000000040)={0x6c, r5, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @loopback}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @loopback}}}}]}]}, 0x6c}}, 0x0) r6 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) close(r6) kernel console output (not intermixed with test programs): ridge1: entered promiscuous mode [ 226.091241][ T8231] bridge1: entered allmulticast mode [ 226.285781][ T8240] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 226.293620][ T8240] vhci_hcd: default hub control req: 9500 v0000 i0000 l0 [ 226.301565][ T8234] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1730'. [ 226.382620][ T8256] validate_nla: 9 callbacks suppressed [ 226.382633][ T8256] netlink: 'syz.2.1738': attribute type 1 has an invalid length. [ 226.432817][ T8263] netlink: 'syz.0.1740': attribute type 2 has an invalid length. [ 226.440863][ T8263] netlink: 'syz.0.1740': attribute type 8 has an invalid length. [ 226.471453][ T8266] bridge1: entered promiscuous mode [ 226.476829][ T8266] bridge1: entered allmulticast mode [ 226.496077][ T8267] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 226.502930][ T9] hid-generic 0000:0000:0000.003D: unknown main item tag 0x0 [ 226.503631][ T8267] vhci_hcd: default hub control req: 9500 v0000 i0000 l0 [ 226.511626][ T9] hid-generic 0000:0000:0000.003D: hidraw0: HID v0.00 Device [syz0] on syz0 [ 226.562581][ T8276] xt_hashlimit: invalid rate [ 226.574906][ T8278] FAULT_INJECTION: forcing a failure. [ 226.574906][ T8278] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 226.588330][ T8278] CPU: 0 UID: 0 PID: 8278 Comm: syz.4.1744 Not tainted 6.11.0-syzkaller-10669-g11a299a7933e #0 [ 226.598785][ T8278] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 226.608864][ T8278] Call Trace: [ 226.612161][ T8278] [ 226.615161][ T8278] dump_stack_lvl+0xf2/0x150 [ 226.619781][ T8278] dump_stack+0x15/0x20 [ 226.623950][ T8278] should_fail_ex+0x223/0x230 [ 226.628716][ T8278] should_fail+0xb/0x10 [ 226.632891][ T8278] should_fail_usercopy+0x1a/0x20 [ 226.637995][ T8278] _copy_from_user+0x1e/0xd0 [ 226.642624][ T8278] __se_sys_memfd_create+0x26b/0x5c0 [ 226.647942][ T8278] __x64_sys_memfd_create+0x31/0x40 [ 226.653177][ T8278] x64_sys_call+0x2891/0x2d60 [ 226.657972][ T8278] do_syscall_64+0xc9/0x1c0 [ 226.662502][ T8278] ? clear_bhb_loop+0x55/0xb0 [ 226.667233][ T8278] ? clear_bhb_loop+0x55/0xb0 [ 226.671937][ T8278] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.677879][ T8278] RIP: 0033:0x7f451352df39 [ 226.682304][ T8278] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 226.701970][ T8278] RSP: 002b:00007f45121a6e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 226.710481][ T8278] RAX: ffffffffffffffda RBX: 0000000000000564 RCX: 00007f451352df39 [ 226.718575][ T8278] RDX: 00007f45121a6ef0 RSI: 0000000000000000 RDI: 00007f45135a0a09 [ 226.726655][ T8278] RBP: 0000000020000ec0 R08: 00007f45121a6bb7 R09: 00007f45121a6e40 [ 226.734697][ T8278] R10: 000000000000000a R11: 0000000000000202 R12: 0000000020000200 [ 226.742667][ T8278] R13: 00007f45121a6ef0 R14: 00007f45121a6eb0 R15: 00000000200002c0 [ 226.750753][ T8278] [ 226.783341][ T8282] xt_hashlimit: invalid rate [ 226.787597][ T8285] syz.0.1747[8285] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 226.835982][ T8291] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 226.886871][ T8294] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 226.888928][ T8293] syzkaller0: entered promiscuous mode [ 226.894394][ T8294] vhci_hcd: default hub control req: 9500 v0000 i0000 l0 [ 226.899841][ T8293] syzkaller0: entered allmulticast mode [ 226.982336][ T8299] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 226.991470][ T8299] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 227.031485][ T8301] netlink: 'syz.2.1753': attribute type 1 has an invalid length. [ 227.101986][ T29] kauditd_printk_skb: 199 callbacks suppressed [ 227.102019][ T29] audit: type=1326 audit(1727393347.961:2445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8302 comm="syz.1.1754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f187813df39 code=0x7ffc0000 [ 227.133833][ T29] audit: type=1326 audit(1727393347.961:2446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8302 comm="syz.1.1754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f187813df39 code=0x7ffc0000 [ 227.157471][ T29] audit: type=1326 audit(1727393347.961:2447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8302 comm="syz.1.1754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=115 compat=0 ip=0x7f187813df39 code=0x7ffc0000 [ 227.180880][ T29] audit: type=1326 audit(1727393347.961:2448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8302 comm="syz.1.1754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f187813df39 code=0x7ffc0000 [ 227.204496][ T29] audit: type=1326 audit(1727393347.961:2449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8302 comm="syz.1.1754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f187813df39 code=0x7ffc0000 [ 227.228104][ T29] audit: type=1326 audit(1727393347.961:2450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8302 comm="syz.1.1754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f187813df39 code=0x7ffc0000 [ 227.251696][ T29] audit: type=1326 audit(1727393347.961:2451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8302 comm="syz.1.1754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f187813df39 code=0x7ffc0000 [ 227.275388][ T29] audit: type=1326 audit(1727393347.961:2452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8302 comm="syz.1.1754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f187813df39 code=0x7ffc0000 [ 227.299075][ T29] audit: type=1326 audit(1727393347.961:2453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8302 comm="syz.1.1754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f187813df39 code=0x7ffc0000 [ 227.322610][ T29] audit: type=1326 audit(1727393347.961:2454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8302 comm="syz.1.1754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f187813df39 code=0x7ffc0000 [ 227.390987][ T8308] netlink: 'syz.0.1757': attribute type 1 has an invalid length. [ 227.405338][ T8306] xt_hashlimit: invalid rate [ 227.437348][ T8313] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 227.445955][ T8313] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 227.457013][ T8315] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 227.465673][ T8315] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 227.555753][ T8325] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 227.563361][ T8325] vhci_hcd: default hub control req: 9500 v0000 i0000 l0 [ 227.583152][ T8327] bridge1: entered promiscuous mode [ 227.588454][ T8327] bridge1: entered allmulticast mode [ 227.715639][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 227.845543][ T8337] syzkaller0: entered promiscuous mode [ 227.851059][ T8337] syzkaller0: entered allmulticast mode [ 227.974423][ T3731] hid-generic 0000:0000:0000.003E: unknown main item tag 0x0 [ 227.990562][ T3731] hid-generic 0000:0000:0000.003E: hidraw0: HID v0.00 Device [syz0] on syz0 [ 228.046732][ T8353] netlink: 'syz.1.1773': attribute type 2 has an invalid length. [ 228.054539][ T8353] netlink: 'syz.1.1773': attribute type 8 has an invalid length. [ 228.062431][ T8351] netlink: 'syz.4.1772': attribute type 2 has an invalid length. [ 228.070291][ T8351] netlink: 'syz.4.1772': attribute type 8 has an invalid length. [ 228.101356][ T8362] loop4: detected capacity change from 0 to 512 [ 228.117689][ T8362] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 228.130425][ T8362] ext4 filesystem being mounted at /338/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 228.142200][ T8362] EXT4-fs error (device loop4): ext4_xattr_block_get:596: inode #15: comm syz.4.1776: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 228.158808][ T8362] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 228.167899][ T8362] EXT4-fs error (device loop4): ext4_xattr_block_get:596: inode #15: comm syz.4.1776: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 228.184388][ T8369] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 228.191959][ T8362] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 228.201179][ T8362] EXT4-fs error (device loop4): ext4_xattr_block_get:596: inode #15: comm syz.4.1776: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 228.217694][ T8369] vhci_hcd: default hub control req: 9500 v0000 i0000 l0 [ 228.224806][ T8362] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 228.243053][ T8362] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.1776: bg 0: block 18: invalid block bitmap [ 228.256859][ T8362] EXT4-fs error (device loop4): ext4_acquire_dquot:6879: comm syz.4.1776: Failed to acquire dquot type 1 [ 228.271937][ T8371] loop1: detected capacity change from 0 to 512 [ 228.296716][ T8362] tipc: Enabling of bearer rejected, already enabled [ 228.336567][ T8371] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 228.394572][ T8375] syzkaller0: entered promiscuous mode [ 228.400087][ T8375] syzkaller0: entered allmulticast mode [ 228.441979][ T3823] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 228.466723][ T8371] EXT4-fs (loop1): 1 orphan inode deleted [ 228.472539][ T8371] EXT4-fs (loop1): 1 truncate cleaned up [ 228.522880][ T8371] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 228.547334][ T8385] xt_hashlimit: invalid rate [ 228.593681][ T8392] EXT4-fs (sda1): resizing filesystem from 262144 to 1 blocks [ 228.601258][ T8392] EXT4-fs warning (device sda1): ext4_resize_fs:2040: can't shrink FS - resize aborted [ 228.629669][ T8396] siw: device registration error -23 [ 228.725880][ T8398] loop4: detected capacity change from 0 to 512 [ 228.726392][ T8394] loop0: detected capacity change from 0 to 512 [ 228.732467][ T8398] EXT4-fs: test_dummy_encryption option not supported [ 228.764797][ T8394] EXT4-fs: test_dummy_encryption option not supported [ 228.780745][ T8394] loop0: detected capacity change from 0 to 128 [ 228.788686][ T8394] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 228.816908][ T8398] loop4: detected capacity change from 0 to 128 [ 228.832667][ T8398] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 228.909037][ T8405] netlink: 'syz.3.1790': attribute type 1 has an invalid length. [ 228.974365][ T3685] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 229.047871][ T8408] tipc: Enabling of bearer rejected, already enabled [ 229.049181][ T3315] hid-generic 0000:0000:0000.003F: unknown main item tag 0x0 [ 229.078608][ T3315] hid-generic 0000:0000:0000.003F: hidraw0: HID v0.00 Device [syz0] on syz0 [ 229.100111][ T8423] syzkaller0: entered promiscuous mode [ 229.105804][ T8423] syzkaller0: entered allmulticast mode [ 229.118806][ T8424] bridge1: entered promiscuous mode [ 229.124154][ T8424] bridge1: entered allmulticast mode [ 229.192805][ T8430] loop3: detected capacity change from 0 to 512 [ 229.199448][ T8430] EXT4-fs: test_dummy_encryption option not supported [ 229.213317][ T8430] loop3: detected capacity change from 0 to 128 [ 229.220347][ T8430] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 229.457801][ T8451] __nla_validate_parse: 19 callbacks suppressed [ 229.457823][ T8451] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1809'. [ 229.506508][ T8458] bridge1: entered promiscuous mode [ 229.511764][ T8458] bridge1: entered allmulticast mode [ 229.593062][ T8463] syzkaller0: entered promiscuous mode [ 229.598675][ T8463] syzkaller0: entered allmulticast mode [ 229.614690][ T8465] bpf_get_probe_write_proto: 8 callbacks suppressed [ 229.614703][ T8465] syz.0.1815[8465] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 229.621436][ T8465] syz.0.1815[8465] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 229.632922][ T8465] syz.0.1815[8465] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 229.663835][ T8465] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 229.679997][ T8467] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1814'. [ 229.692804][ T8465] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 229.850160][ T8469] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1816'. [ 229.970379][ T8474] siw: device registration error -23 [ 230.026661][ T8476] xt_hashlimit: invalid rate [ 230.136570][ T8483] xt_hashlimit: invalid rate [ 230.137054][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 230.152296][ T8484] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1820'. [ 230.190748][ T8486] syz.4.1823[8486] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 230.190813][ T8486] syz.4.1823[8486] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 230.202413][ T8486] syz.4.1823[8486] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 230.232777][ T3731] hid-generic 0000:0000:0000.0040: unknown main item tag 0x0 [ 230.252509][ T3731] hid-generic 0000:0000:0000.0040: hidraw0: HID v0.00 Device [syz0] on syz0 [ 230.387855][ T8492] tipc: Enabling of bearer rejected, already enabled [ 230.423026][ T8500] syz.3.1828[8500] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 230.423102][ T8500] syz.3.1828[8500] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 230.436225][ T8500] syz.3.1828[8500] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 230.461059][ T8500] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 230.481068][ T8500] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 230.489345][ T8504] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1827'. [ 230.642517][ T8512] xt_hashlimit: invalid rate [ 230.751566][ T8516] syz.4.1833[8516] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 230.983421][ T8520] TCP: request_sock_TCP: Possible SYN flooding on port [::ffff:0.0.0.0]:20002. Sending cookies. [ 231.119569][ T8529] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1838'. [ 231.235578][ T8534] xt_hashlimit: invalid rate [ 231.274404][ T8538] siw: device registration error -23 [ 231.418644][ T8544] validate_nla: 6 callbacks suppressed [ 231.418657][ T8544] netlink: 'syz.4.1844': attribute type 1 has an invalid length. [ 231.431986][ T8544] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1844'. [ 231.453124][ T3315] hid-generic 0000:0000:0000.0041: unknown main item tag 0x0 [ 231.461031][ T3315] hid-generic 0000:0000:0000.0041: hidraw0: HID v0.00 Device [syz0] on syz0 [ 231.521407][ T8554] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 231.533270][ T8557] netlink: 'syz.0.1850': attribute type 1 has an invalid length. [ 231.533324][ T8554] capability: warning: `syz.1.1849' uses deprecated v2 capabilities in a way that may be insecure [ 231.551926][ T8557] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1850'. [ 231.562176][ T8557] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1850'. [ 231.582910][ T8559] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 231.591428][ T8559] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 231.658012][ T8561] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 231.734095][ T8566] syzkaller0: entered promiscuous mode [ 231.830802][ T8566] syzkaller0: entered allmulticast mode [ 231.834428][ T8569] siw: device registration error -23 [ 231.895171][ T8572] bridge1: entered promiscuous mode [ 231.900449][ T8572] bridge1: entered allmulticast mode [ 231.997506][ T8578] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1858'. [ 231.998508][ T8579] netlink: 'syz.2.1859': attribute type 1 has an invalid length. [ 232.017070][ T8578] bond_slave_0: entered promiscuous mode [ 232.023184][ T8578] bond_slave_0: left promiscuous mode [ 232.099782][ T8589] netlink: 'syz.0.1863': attribute type 1 has an invalid length. [ 232.138234][ T29] kauditd_printk_skb: 388 callbacks suppressed [ 232.138250][ T29] audit: type=1400 audit(1727393353.001:2841): avc: denied { read write } for pid=8595 comm="syz.0.1867" name="sg0" dev="devtmpfs" ino=111 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 232.169456][ T8602] TCP: request_sock_TCP: Possible SYN flooding on port [::ffff:0.0.0.0]:20002. Sending cookies. [ 232.180312][ T29] audit: type=1400 audit(1727393353.001:2842): avc: denied { open } for pid=8595 comm="syz.0.1867" path="/dev/sg0" dev="devtmpfs" ino=111 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 232.204682][ T29] audit: type=1400 audit(1727393353.001:2843): avc: denied { ioctl } for pid=8595 comm="syz.0.1867" path="/dev/sg0" dev="devtmpfs" ino=111 ioctlcmd=0x5393 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 232.240990][ T29] audit: type=1400 audit(1727393353.071:2844): avc: denied { sys_module } for pid=8582 comm="syz.3.1861" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 232.247861][ T8603] syzkaller0: entered promiscuous mode [ 232.267888][ T8603] syzkaller0: entered allmulticast mode [ 232.306964][ T29] audit: type=1326 audit(1727393353.171:2845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8610 comm="syz.4.1870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f451352df39 code=0x7ffc0000 [ 232.326127][ T8608] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 232.330955][ T29] audit: type=1326 audit(1727393353.171:2846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8610 comm="syz.4.1870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f451352df39 code=0x7ffc0000 [ 232.345820][ T8608] vhci_hcd: default hub control req: 9500 v0000 i0000 l0 [ 232.361278][ T29] audit: type=1326 audit(1727393353.171:2847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8610 comm="syz.4.1870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=294 compat=0 ip=0x7f451352df39 code=0x7ffc0000 [ 232.391935][ T29] audit: type=1326 audit(1727393353.171:2848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8610 comm="syz.4.1870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f451352df39 code=0x7ffc0000 [ 232.415440][ T29] audit: type=1326 audit(1727393353.171:2849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8610 comm="syz.4.1870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=254 compat=0 ip=0x7f451352df39 code=0x7ffc0000 [ 232.439051][ T29] audit: type=1326 audit(1727393353.171:2850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8610 comm="syz.4.1870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f451352df39 code=0x7ffc0000 [ 232.474685][ T8616] loop1: detected capacity change from 0 to 512 [ 232.476501][ T8615] bridge1: entered promiscuous mode [ 232.483300][ T8616] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 232.486681][ T8615] bridge1: entered allmulticast mode [ 232.503340][ T8616] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c028, mo2=0002] [ 232.511479][ T8616] System zones: 1-12 [ 232.516011][ T8616] EXT4-fs error (device loop1): ext4_xattr_inode_iget:440: inode #13: comm syz.1.1872: missing EA_INODE flag [ 232.528141][ T8616] EXT4-fs (loop1): Remounting filesystem read-only [ 232.534956][ T8616] EXT4-fs (loop1): 1 orphan inode deleted [ 232.541322][ T8616] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 232.553541][ T8616] SELinux: (dev loop1, type ext4) getxattr errno 5 [ 232.560974][ T8616] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 232.598593][ T8621] bond_slave_0: entered promiscuous mode [ 232.605874][ T8621] bond_slave_0: left promiscuous mode [ 232.955133][ T8639] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 232.963908][ T8639] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 233.075821][ T8648] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 233.083310][ T8648] vhci_hcd: default hub control req: 9500 v0000 i0000 l0 [ 233.126456][ T8651] bridge1: entered promiscuous mode [ 233.131843][ T8651] bridge1: entered allmulticast mode [ 233.237234][ T8654] FAULT_INJECTION: forcing a failure. [ 233.237234][ T8654] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 233.250394][ T8654] CPU: 0 UID: 0 PID: 8654 Comm: syz.2.1885 Not tainted 6.11.0-syzkaller-10669-g11a299a7933e #0 [ 233.260820][ T8654] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 233.270924][ T8654] Call Trace: [ 233.274253][ T8654] [ 233.277200][ T8654] dump_stack_lvl+0xf2/0x150 [ 233.282069][ T8654] dump_stack+0x15/0x20 [ 233.286249][ T8654] should_fail_ex+0x223/0x230 [ 233.290994][ T8654] should_fail+0xb/0x10 [ 233.295290][ T8654] should_fail_usercopy+0x1a/0x20 [ 233.300346][ T8654] _copy_from_user+0x1e/0xd0 [ 233.305059][ T8654] move_addr_to_kernel+0x82/0x120 [ 233.310169][ T8654] __sys_connect+0x74/0x1b0 [ 233.314712][ T8654] __x64_sys_connect+0x41/0x50 [ 233.319511][ T8654] x64_sys_call+0x2220/0x2d60 [ 233.324286][ T8654] do_syscall_64+0xc9/0x1c0 [ 233.328849][ T8654] ? clear_bhb_loop+0x55/0xb0 [ 233.333538][ T8654] ? clear_bhb_loop+0x55/0xb0 [ 233.338292][ T8654] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.344237][ T8654] RIP: 0033:0x7f9c6bcddf39 [ 233.348653][ T8654] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 233.368435][ T8654] RSP: 002b:00007f9c6a957038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 233.376887][ T8654] RAX: ffffffffffffffda RBX: 00007f9c6be95f80 RCX: 00007f9c6bcddf39 [ 233.384873][ T8654] RDX: 000000000000001c RSI: 0000000020000000 RDI: 0000000000000009 [ 233.392906][ T8654] RBP: 00007f9c6a957090 R08: 0000000000000000 R09: 0000000000000000 [ 233.400882][ T8654] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 233.408982][ T8654] R13: 0000000000000000 R14: 00007f9c6be95f80 R15: 00007ffffe7bf908 [ 233.416965][ T8654] [ 233.482695][ T8662] netlink: 'syz.4.1889': attribute type 2 has an invalid length. [ 233.490736][ T8662] netlink: 'syz.4.1889': attribute type 8 has an invalid length. [ 233.590004][ T8667] xt_hashlimit: invalid rate [ 233.632780][ T8672] xt_hashlimit: invalid rate [ 233.682221][ T8677] No such timeout policy "syz0" [ 234.044762][ T8700] xt_hashlimit: invalid rate [ 234.092221][ T8703] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 234.100931][ T8703] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 234.352896][ T8719] xt_hashlimit: invalid rate [ 234.421040][ T8723] bridge1: entered promiscuous mode [ 234.426353][ T8723] bridge1: entered allmulticast mode [ 234.657799][ T8741] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 234.665733][ T8741] vhci_hcd: default hub control req: 9500 v0000 i0000 l0 [ 234.673685][ T8731] __nla_validate_parse: 10 callbacks suppressed [ 234.673703][ T8731] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1917'. [ 234.753424][ T8753] TCP: request_sock_TCP: Possible SYN flooding on port [::ffff:0.0.0.0]:20002. Sending cookies. [ 234.857740][ T8760] bridge1: entered promiscuous mode [ 234.863017][ T8760] bridge1: entered allmulticast mode [ 234.907223][ T8756] loop2: detected capacity change from 0 to 8192 [ 235.160203][ T8772] netlink: 'syz.2.1930': attribute type 1 has an invalid length. [ 235.168042][ T8772] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1930'. [ 235.195654][ T8772] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1930'. [ 235.215485][ T8774] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 235.223955][ T8774] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 235.415823][ T8785] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 235.423262][ T8785] vhci_hcd: default hub control req: 9500 v0000 i0000 l0 [ 235.431152][ T8780] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1934'. [ 235.464889][ T8790] bpf_get_probe_write_proto: 8 callbacks suppressed [ 235.464905][ T8790] syz.3.1936[8790] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 235.472173][ T8790] syz.3.1936[8790] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 235.486027][ T8790] syz.3.1936[8790] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 235.488328][ T8792] siw: device registration error -23 [ 235.542847][ T8794] xt_hashlimit: invalid rate [ 235.603598][ T8796] xt_hashlimit: invalid rate [ 235.644370][ T8803] loop1: detected capacity change from 0 to 512 [ 235.652712][ T8803] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 235.707755][ T8803] EXT4-fs (loop1): 1 orphan inode deleted [ 235.713681][ T8803] EXT4-fs (loop1): 1 truncate cleaned up [ 235.726325][ T8803] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 235.763784][ T8811] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 235.783284][ T8811] EXT4-fs (loop1): Remounting filesystem read-only [ 235.790000][ T8811] coredump: 879(syz.1.1942): failed when writing out, error -28 [ 235.797696][ T8811] coredump: 879(syz.1.1942): Error emitting the program header for notes [ 235.806208][ T8811] coredump: 879(syz.1.1942): written to core: VMAs: 29, size 89026560; core: 64 bytes, pos 64 [ 235.917719][ T8813] tipc: Enabling of bearer rejected, already enabled [ 236.077909][ T8826] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 236.130024][ T8826] vhci_hcd: default hub control req: 9500 v0000 i0000 l0 [ 236.178846][ T8833] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1947'. [ 236.371844][ T8842] xt_hashlimit: invalid rate [ 236.415482][ T3685] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 236.428174][ T8852] netlink: 'syz.3.1954': attribute type 1 has an invalid length. [ 236.436098][ T8852] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1954'. [ 236.459383][ T8856] netlink: 'syz.3.1955': attribute type 2 has an invalid length. [ 236.467280][ T8856] netlink: 'syz.3.1955': attribute type 8 has an invalid length. [ 236.475119][ T8856] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1955'. [ 236.600181][ T8860] tipc: Enabling of bearer rejected, already enabled [ 236.655362][ T8871] bridge1: entered promiscuous mode [ 236.660636][ T8871] bridge1: entered allmulticast mode [ 236.666296][ T8873] siw: device registration error -23 [ 236.704316][ T8877] netlink: 'syz.4.1965': attribute type 1 has an invalid length. [ 236.712173][ T8877] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1965'. [ 236.756464][ T8881] netlink: 'syz.4.1967': attribute type 1 has an invalid length. [ 236.764254][ T8881] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1967'. [ 236.790155][ T8884] netlink: 'syz.4.1968': attribute type 2 has an invalid length. [ 236.797976][ T8884] netlink: 'syz.4.1968': attribute type 8 has an invalid length. [ 236.805834][ T8884] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1968'. [ 236.962331][ T8896] tipc: Enabling of bearer rejected, already enabled [ 237.030567][ T8905] xt_hashlimit: invalid rate [ 237.082800][ T8909] netlink: 'syz.2.1979': attribute type 1 has an invalid length. [ 237.105560][ T8911] netlink: 'syz.2.1980': attribute type 1 has an invalid length. [ 237.220946][ T8914] siw: device registration error -23 [ 237.227568][ T29] kauditd_printk_skb: 276 callbacks suppressed [ 237.227581][ T29] audit: type=1326 audit(1727393358.091:3127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8913 comm="syz.2.1981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c6bcddf39 code=0x7ffc0000 [ 237.261363][ T8916] bridge1: entered promiscuous mode [ 237.266712][ T8916] bridge1: entered allmulticast mode [ 237.273821][ T29] audit: type=1326 audit(1727393358.091:3128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8913 comm="syz.2.1981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c6bcddf39 code=0x7ffc0000 [ 237.297434][ T29] audit: type=1326 audit(1727393358.091:3129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8913 comm="syz.2.1981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=115 compat=0 ip=0x7f9c6bcddf39 code=0x7ffc0000 [ 237.320889][ T29] audit: type=1326 audit(1727393358.091:3130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8913 comm="syz.2.1981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c6bcddf39 code=0x7ffc0000 [ 237.344384][ T29] audit: type=1326 audit(1727393358.091:3131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8913 comm="syz.2.1981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9c6bcddf39 code=0x7ffc0000 [ 237.367934][ T29] audit: type=1326 audit(1727393358.091:3132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8913 comm="syz.2.1981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c6bcddf39 code=0x7ffc0000 [ 237.391388][ T29] audit: type=1326 audit(1727393358.091:3133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8913 comm="syz.2.1981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9c6bcddf39 code=0x7ffc0000 [ 237.414991][ T29] audit: type=1326 audit(1727393358.091:3134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8913 comm="syz.2.1981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c6bcddf39 code=0x7ffc0000 [ 237.438545][ T29] audit: type=1326 audit(1727393358.091:3135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8913 comm="syz.2.1981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9c6bcddf39 code=0x7ffc0000 [ 237.462038][ T29] audit: type=1326 audit(1727393358.091:3136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8913 comm="syz.2.1981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c6bcddf39 code=0x7ffc0000 [ 237.529812][ T8926] loop1: detected capacity change from 0 to 512 [ 237.545885][ T8926] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 237.558735][ T8926] ext4 filesystem being mounted at /379/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 237.570263][ T8926] EXT4-fs error (device loop1): ext4_xattr_block_get:596: inode #15: comm syz.1.1987: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 237.587322][ T8926] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 237.596383][ T8926] EXT4-fs error (device loop1): ext4_xattr_block_get:596: inode #15: comm syz.1.1987: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 237.613146][ T8926] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 237.622418][ T8926] EXT4-fs error (device loop1): ext4_xattr_block_get:596: inode #15: comm syz.1.1987: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 237.640356][ T8926] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 237.650252][ T8926] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.1987: bg 0: block 18: invalid block bitmap [ 237.663067][ T8926] EXT4-fs error (device loop1): ext4_acquire_dquot:6879: comm syz.1.1987: Failed to acquire dquot type 1 [ 237.710776][ T8935] xt_hashlimit: invalid rate [ 237.743645][ T8941] netlink: 'syz.3.1992': attribute type 1 has an invalid length. [ 237.758394][ T8926] tipc: Enabling of bearer rejected, already enabled [ 237.772206][ T8944] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 237.782022][ T8944] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 237.810667][ T3685] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 237.829837][ T8946] siw: device registration error -23 [ 237.976827][ T8956] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 237.984366][ T8956] vhci_hcd: default hub control req: 9500 v0000 i0000 l0 [ 238.012570][ T8961] syz.1.1998[8961] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 238.012770][ T8961] syz.1.1998[8961] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 238.024409][ T8961] syz.1.1998[8961] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 238.046617][ T8964] bridge1: entered promiscuous mode [ 238.063472][ T8964] bridge1: entered allmulticast mode [ 238.106518][ T8961] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 238.115307][ T8961] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 238.413603][ T8980] loop2: detected capacity change from 0 to 512 [ 238.427150][ T8980] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 238.440075][ T8980] ext4 filesystem being mounted at /401/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 238.452061][ T8980] EXT4-fs error (device loop2): ext4_xattr_block_get:596: inode #15: comm syz.2.2005: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 238.468953][ T8980] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 238.477980][ T8980] EXT4-fs error (device loop2): ext4_xattr_block_get:596: inode #15: comm syz.2.2005: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 238.495275][ T8980] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 238.504516][ T8980] EXT4-fs error (device loop2): ext4_xattr_block_get:596: inode #15: comm syz.2.2005: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 238.521439][ T8980] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 238.530929][ T8980] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.2005: bg 0: block 18: invalid block bitmap [ 238.543585][ T8980] EXT4-fs error (device loop2): ext4_acquire_dquot:6879: comm syz.2.2005: Failed to acquire dquot type 1 [ 238.574077][ T8980] tipc: Enabling of bearer rejected, already enabled [ 238.719499][ T8996] bridge1: entered promiscuous mode [ 238.724793][ T8996] bridge1: entered allmulticast mode [ 238.771666][ T3716] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 238.805233][ T9006] loop1: detected capacity change from 0 to 512 [ 238.816229][ T9006] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 238.828975][ T9006] ext4 filesystem being mounted at /386/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 238.841040][ T9006] EXT4-fs error (device loop1): ext4_xattr_block_get:596: inode #15: comm syz.1.2016: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 238.848001][ T9013] syz.3.2018[9013] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 238.857860][ T9013] syz.3.2018[9013] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 238.869360][ T9006] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 238.880722][ T9013] syz.3.2018[9013] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 238.889778][ T9006] EXT4-fs error (device loop1): ext4_xattr_block_get:596: inode #15: comm syz.1.2016: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 238.918185][ T9006] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 238.927213][ T9006] EXT4-fs error (device loop1): ext4_xattr_block_get:596: inode #15: comm syz.1.2016: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 238.945409][ T9006] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 238.961287][ T9006] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.2016: bg 0: block 18: invalid block bitmap [ 238.974339][ T9006] EXT4-fs error (device loop1): ext4_acquire_dquot:6879: comm syz.1.2016: Failed to acquire dquot type 1 [ 238.990376][ T9013] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 239.002286][ T9013] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 239.036436][ T9025] siw: device registration error -23 [ 239.141309][ T9028] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 239.156185][ T9028] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 239.166224][ T3685] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 239.190463][ T9031] loop1: detected capacity change from 0 to 512 [ 239.198649][ T9031] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 239.210091][ T9031] EXT4-fs (loop1): 1 truncate cleaned up [ 239.216148][ T9031] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 239.238635][ T3685] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 239.239904][ T9034] bridge1: entered promiscuous mode [ 239.252941][ T9034] bridge1: entered allmulticast mode [ 239.338256][ T9044] xt_hashlimit: invalid rate [ 239.457252][ T9055] loop1: detected capacity change from 0 to 512 [ 239.487152][ T9055] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 239.499900][ T9055] ext4 filesystem being mounted at /394/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 239.511440][ T9055] EXT4-fs error (device loop1): ext4_xattr_block_get:596: inode #15: comm syz.1.2035: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 239.528169][ T9055] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 239.537164][ T9055] EXT4-fs error (device loop1): ext4_xattr_block_get:596: inode #15: comm syz.1.2035: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 239.553843][ T9055] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 239.562876][ T9055] EXT4-fs error (device loop1): ext4_xattr_block_get:596: inode #15: comm syz.1.2035: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 239.579554][ T9055] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 239.589159][ T9055] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.2035: bg 0: block 18: invalid block bitmap [ 239.602171][ T9055] EXT4-fs error (device loop1): ext4_acquire_dquot:6879: comm syz.1.2035: Failed to acquire dquot type 1 [ 239.711990][ T9071] __nla_validate_parse: 17 callbacks suppressed [ 239.712012][ T9071] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2041'. [ 239.749716][ T9073] bridge1: entered promiscuous mode [ 239.755028][ T9073] bridge1: entered allmulticast mode [ 239.777534][ T3685] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 239.807553][ T9075] xt_hashlimit: invalid rate [ 239.815968][ T9081] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2045'. [ 239.827852][ T9081] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2045'. [ 239.840463][ T9083] bridge1: entered promiscuous mode [ 239.846028][ T9083] bridge1: entered allmulticast mode [ 239.939109][ T9100] FAULT_INJECTION: forcing a failure. [ 239.939109][ T9100] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 239.952253][ T9100] CPU: 1 UID: 0 PID: 9100 Comm: syz.0.2054 Not tainted 6.11.0-syzkaller-10669-g11a299a7933e #0 [ 239.962592][ T9100] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 239.972653][ T9100] Call Trace: [ 239.976019][ T9100] [ 239.978965][ T9100] dump_stack_lvl+0xf2/0x150 [ 239.983595][ T9100] dump_stack+0x15/0x20 [ 239.987825][ T9100] should_fail_ex+0x223/0x230 [ 239.992522][ T9100] should_fail+0xb/0x10 [ 239.996693][ T9100] should_fail_usercopy+0x1a/0x20 [ 240.001796][ T9100] _copy_from_user+0x1e/0xd0 [ 240.006523][ T9100] copy_msghdr_from_user+0x54/0x2a0 [ 240.011874][ T9100] __sys_sendmsg+0x171/0x270 [ 240.016496][ T9100] __x64_sys_sendmsg+0x46/0x50 [ 240.021273][ T9100] x64_sys_call+0x2689/0x2d60 [ 240.026080][ T9100] do_syscall_64+0xc9/0x1c0 [ 240.030633][ T9100] ? clear_bhb_loop+0x55/0xb0 [ 240.035365][ T9100] ? clear_bhb_loop+0x55/0xb0 [ 240.040058][ T9100] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 240.045992][ T9100] RIP: 0033:0x7f97fc74df39 [ 240.050531][ T9100] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 240.070434][ T9100] RSP: 002b:00007f97fb3c1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 240.078856][ T9100] RAX: ffffffffffffffda RBX: 00007f97fc905f80 RCX: 00007f97fc74df39 [ 240.086925][ T9100] RDX: 0000000000000000 RSI: 00000000200029c0 RDI: 0000000000000003 [ 240.094907][ T9100] RBP: 00007f97fb3c1090 R08: 0000000000000000 R09: 0000000000000000 [ 240.103406][ T9100] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 240.111404][ T9100] R13: 0000000000000000 R14: 00007f97fc905f80 R15: 00007fff5b5cef68 [ 240.119524][ T9100] [ 240.154225][ T9105] xt_hashlimit: invalid rate [ 240.215130][ T9111] loop1: detected capacity change from 0 to 512 [ 240.242880][ T9104] tipc: Enabling of bearer rejected, already enabled [ 240.276591][ T9111] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 240.289318][ T9111] ext4 filesystem being mounted at /401/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 240.302391][ T9111] EXT4-fs error (device loop1): ext4_xattr_block_get:596: inode #15: comm syz.1.2059: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 240.318971][ T9121] syzkaller0: entered promiscuous mode [ 240.320162][ T9111] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 240.324633][ T9121] syzkaller0: entered allmulticast mode [ 240.333669][ T9118] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2062'. [ 240.333889][ T9111] EXT4-fs error (device loop1): ext4_xattr_block_get:596: inode #15: comm syz.1.2059: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 240.348965][ T9118] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2062'. [ 240.377900][ T9111] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 240.387055][ T9111] EXT4-fs error (device loop1): ext4_xattr_block_get:596: inode #15: comm syz.1.2059: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 240.403660][ T9111] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 240.413810][ T9111] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.2059: bg 0: block 18: invalid block bitmap [ 240.426615][ T9111] EXT4-fs error (device loop1): ext4_acquire_dquot:6879: comm syz.1.2059: Failed to acquire dquot type 1 [ 240.457839][ T9130] bridge1: entered promiscuous mode [ 240.463103][ T9130] bridge1: entered allmulticast mode [ 240.566740][ T3685] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 240.609512][ T9139] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2070'. [ 240.655364][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 240.805902][ T9149] tipc: Enabling of bearer rejected, already enabled [ 240.860757][ T9152] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2074'. [ 240.992012][ T9156] xt_hashlimit: invalid rate [ 241.048188][ T9158] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2077'. [ 241.295850][ T9169] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 241.303399][ T9169] vhci_hcd: default hub control req: 9500 v0000 i0000 l0 [ 241.311168][ T9165] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2080'. [ 241.343715][ T9172] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2081'. [ 241.375660][ T9174] bridge1: entered promiscuous mode [ 241.381922][ T9174] bridge1: entered allmulticast mode [ 241.446547][ T9176] xt_hashlimit: invalid rate [ 241.455057][ T9179] syz.1.2084[9179] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 241.455228][ T9179] syz.1.2084[9179] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 241.471135][ T9179] syz.1.2084[9179] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 241.508076][ T9183] bridge1: entered promiscuous mode [ 241.525412][ T9183] bridge1: entered allmulticast mode [ 241.591553][ T9179] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 241.600999][ T9179] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 241.642268][ T9201] siw: device registration error -23 [ 241.787088][ T9204] tipc: Enabling of bearer rejected, already enabled [ 241.815923][ T9208] xt_hashlimit: invalid rate [ 241.936777][ T9221] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 241.944207][ T9221] vhci_hcd: default hub control req: 9500 v0000 i0000 l0 [ 241.997809][ T9226] validate_nla: 19 callbacks suppressed [ 241.997828][ T9226] netlink: 'syz.0.2102': attribute type 2 has an invalid length. [ 242.011317][ T9226] netlink: 'syz.0.2102': attribute type 8 has an invalid length. [ 242.170460][ T9228] bridge1: entered promiscuous mode [ 242.175795][ T9228] bridge1: entered allmulticast mode [ 242.310477][ T9234] netlink: 'syz.1.2105': attribute type 1 has an invalid length. [ 242.417458][ T9241] loop1: detected capacity change from 0 to 512 [ 242.446095][ T9241] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 242.458634][ T9241] ext4 filesystem being mounted at /408/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 242.470391][ T9241] EXT4-fs error (device loop1): ext4_xattr_block_get:596: inode #15: comm syz.1.2108: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 242.473313][ T9245] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 242.487643][ T9241] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 242.504413][ T9241] EXT4-fs error (device loop1): ext4_xattr_block_get:596: inode #15: comm syz.1.2108: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 242.504531][ T9245] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 242.521432][ T9241] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 242.537597][ T9241] EXT4-fs error (device loop1): ext4_xattr_block_get:596: inode #15: comm syz.1.2108: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 242.554248][ T9241] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 242.563842][ T9241] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.2108: bg 0: block 18: invalid block bitmap [ 242.577562][ T9241] __quota_error: 330 callbacks suppressed [ 242.577581][ T9241] Quota error (device loop1): write_blk: dquota write failed [ 242.590742][ T9241] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 242.600923][ T9241] EXT4-fs error (device loop1): ext4_acquire_dquot:6879: comm syz.1.2108: Failed to acquire dquot type 1 [ 242.644304][ T9254] syz.0.2113[9254] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 242.645807][ T9254] syz.0.2113[9254] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 242.660705][ T9254] syz.0.2113[9254] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 242.676918][ T29] audit: type=1326 audit(1727393363.541:3457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9255 comm="syz.3.2114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efda4e4df39 code=0x7ffc0000 [ 242.677305][ T9256] syz.3.2114[9256] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 242.688271][ T29] audit: type=1326 audit(1727393363.541:3458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9255 comm="syz.3.2114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efda4e4df39 code=0x7ffc0000 [ 242.688310][ T29] audit: type=1326 audit(1727393363.541:3459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9255 comm="syz.3.2114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efda4e4df39 code=0x7ffc0000 [ 242.749128][ T9256] syz.3.2114[9256] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 242.775305][ T9256] syz.3.2114[9256] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 242.788094][ T29] audit: type=1326 audit(1727393363.661:3460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9255 comm="syz.3.2114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efda4e4df39 code=0x7ffc0000 [ 242.797370][ T9254] netlink: 'syz.0.2113': attribute type 2 has an invalid length. [ 242.799486][ T29] audit: type=1326 audit(1727393363.661:3461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9255 comm="syz.3.2114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efda4e4df39 code=0x7ffc0000 [ 242.822842][ T9254] netlink: 'syz.0.2113': attribute type 8 has an invalid length. [ 242.853472][ T9254] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 242.878345][ T9241] tipc: Enabling of bearer rejected, already enabled [ 242.878622][ T9254] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 242.943604][ T3685] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 242.952683][ T9265] xt_hashlimit: invalid rate [ 242.973700][ T9271] loop1: detected capacity change from 0 to 512 [ 242.981775][ T9271] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 243.000360][ T9271] EXT4-fs (loop1): 1 orphan inode deleted [ 243.006293][ T9271] EXT4-fs (loop1): 1 truncate cleaned up [ 243.012618][ T9271] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 243.029506][ T9278] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 243.044325][ T9278] EXT4-fs (loop1): Remounting filesystem read-only [ 243.051203][ T9278] coredump: 967(syz.1.2119): failed when writing out, error -28 [ 243.058916][ T9278] coredump: 967(syz.1.2119): Error emitting the program header for notes [ 243.067422][ T9278] coredump: 967(syz.1.2119): written to core: VMAs: 29, size 89026560; core: 64 bytes, pos 64 [ 243.119068][ T29] audit: type=1326 audit(1727393363.981:3462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9283 comm="syz.4.2124" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f451352df39 code=0x0 [ 243.142899][ T3685] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 243.250877][ T9291] loop1: detected capacity change from 0 to 512 [ 243.257894][ T9291] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 243.269415][ T9291] EXT4-fs (loop1): 1 orphan inode deleted [ 243.275246][ T9291] EXT4-fs (loop1): 1 truncate cleaned up [ 243.281281][ T9291] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 243.299797][ T9294] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 243.314345][ T9294] EXT4-fs (loop1): Remounting filesystem read-only [ 243.321245][ T9294] coredump: 973(syz.1.2126): failed when writing out, error -28 [ 243.328969][ T9294] coredump: 973(syz.1.2126): Error emitting the program header for notes [ 243.337456][ T9294] coredump: 973(syz.1.2126): written to core: VMAs: 29, size 91123712; core: 64 bytes, pos 64 [ 243.387258][ T3685] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 243.425901][ T29] audit: type=1326 audit(1727393364.291:3463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9299 comm="syz.1.2128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f187813df39 code=0x7ffc0000 [ 243.449503][ T29] audit: type=1326 audit(1727393364.291:3464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9299 comm="syz.1.2128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f187813df39 code=0x7ffc0000 [ 243.581208][ T9306] tipc: Enabling of bearer rejected, already enabled [ 243.596784][ T9311] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 243.604341][ T9311] vhci_hcd: default hub control req: 9500 v0000 i0000 l0 [ 243.638498][ T9315] xt_hashlimit: invalid rate [ 243.674809][ T9321] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 243.683469][ T9321] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 243.708867][ T9323] bridge1: entered promiscuous mode [ 243.714125][ T9323] bridge1: entered allmulticast mode [ 243.862198][ T9329] siw: device registration error -23 [ 243.907410][ T9333] syz.2.2140[9333] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 243.923409][ T9333] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 243.953196][ T9333] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 244.034831][ T9346] bridge1: entered promiscuous mode [ 244.040071][ T9346] bridge1: entered allmulticast mode [ 244.105917][ T9350] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 244.113382][ T9350] vhci_hcd: default hub control req: 9500 v0000 i0000 l0 [ 244.155880][ T9353] xt_hashlimit: invalid rate [ 244.173456][ T9357] netlink: 'syz.1.2147': attribute type 2 has an invalid length. [ 244.181285][ T9357] netlink: 'syz.1.2147': attribute type 8 has an invalid length. [ 244.215471][ T9361] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5122 sclass=netlink_route_socket pid=9361 comm=syz.4.2149 [ 244.259010][ T9365] xt_hashlimit: invalid rate [ 244.353220][ T9374] bridge1: entered promiscuous mode [ 244.358584][ T9374] bridge1: entered allmulticast mode [ 244.510664][ T9387] netlink: 'syz.2.2159': attribute type 2 has an invalid length. [ 244.518612][ T9387] netlink: 'syz.2.2159': attribute type 8 has an invalid length. [ 244.839835][ T9397] xt_hashlimit: invalid rate [ 245.364061][ T9412] netlink: 'syz.4.2169': attribute type 2 has an invalid length. [ 245.371885][ T9412] __nla_validate_parse: 15 callbacks suppressed [ 245.371902][ T9412] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2169'. [ 245.415053][ T9412] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 245.433240][ T9412] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 245.542176][ T9418] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2172'. [ 245.617951][ T9422] loop2: detected capacity change from 0 to 512 [ 245.646622][ T9422] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 245.659280][ T9422] ext4 filesystem being mounted at /430/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 245.670889][ T9422] EXT4-fs error (device loop2): ext4_xattr_block_get:596: inode #15: comm syz.2.2174: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 245.687463][ T9422] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 245.696567][ T9422] EXT4-fs error (device loop2): ext4_xattr_block_get:596: inode #15: comm syz.2.2174: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 245.713167][ T9422] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 245.722411][ T9422] EXT4-fs error (device loop2): ext4_xattr_block_get:596: inode #15: comm syz.2.2174: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 245.739227][ T9422] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 245.748986][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 245.754552][ T9422] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.2174: bg 0: block 18: invalid block bitmap [ 245.771895][ T9422] EXT4-fs error (device loop2): ext4_acquire_dquot:6879: comm syz.2.2174: Failed to acquire dquot type 1 [ 245.794196][ T9422] tipc: Enabling of bearer rejected, already enabled [ 245.846395][ T9428] xt_hashlimit: invalid rate [ 245.876831][ T9430] xt_hashlimit: invalid rate [ 245.926163][ T3716] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 245.997708][ T9439] syzkaller0: entered promiscuous mode [ 246.003359][ T9439] syzkaller0: entered allmulticast mode [ 246.032749][ T9446] bridge1: entered promiscuous mode [ 246.038218][ T9446] bridge1: entered allmulticast mode [ 246.842896][ T9467] xt_hashlimit: invalid rate [ 246.894899][ T9471] xt_hashlimit: invalid rate [ 247.028387][ T9478] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2195'. [ 247.041778][ T9480] bridge1: entered promiscuous mode [ 247.047301][ T9480] bridge1: entered allmulticast mode [ 247.280006][ T9487] validate_nla: 3 callbacks suppressed [ 247.280023][ T9487] netlink: 'syz.4.2199': attribute type 1 has an invalid length. [ 247.293393][ T9487] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2199'. [ 247.304808][ T9487] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2199'. [ 247.398914][ T9491] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2201'. [ 247.425687][ T9493] xt_hashlimit: invalid rate [ 247.475714][ T9496] wireguard0: entered promiscuous mode [ 247.481246][ T9496] wireguard0: entered allmulticast mode [ 247.609439][ T9500] xt_CT: No such helper "netbios-ns" [ 247.632434][ T9506] bpf_get_probe_write_proto: 5 callbacks suppressed [ 247.632533][ T9506] syz.4.2206[9506] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 247.639752][ T9506] syz.4.2206[9506] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 247.648617][ T9508] netlink: 'syz.3.2207': attribute type 2 has an invalid length. [ 247.651464][ T9506] syz.4.2206[9506] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 247.662397][ T9508] netlink: 'syz.3.2207': attribute type 8 has an invalid length. [ 247.689576][ T9508] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2207'. [ 247.702130][ T9506] netlink: 'syz.4.2206': attribute type 2 has an invalid length. [ 247.710028][ T9506] netlink: 'syz.4.2206': attribute type 8 has an invalid length. [ 247.717833][ T9506] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2206'. [ 247.728756][ T9506] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 247.737386][ T9506] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 247.738920][ T9512] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 247.753991][ T9512] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 247.794243][ T9514] loop1: detected capacity change from 0 to 512 [ 247.806524][ T9514] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 247.819078][ T9514] ext4 filesystem being mounted at /430/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 247.830626][ T9514] EXT4-fs error (device loop1): ext4_xattr_block_get:596: inode #15: comm syz.1.2210: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 247.847274][ T9514] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 247.856419][ T9514] EXT4-fs error (device loop1): ext4_xattr_block_get:596: inode #15: comm syz.1.2210: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 247.873004][ T9514] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 247.881999][ T9514] EXT4-fs error (device loop1): ext4_xattr_block_get:596: inode #15: comm syz.1.2210: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 247.898508][ T9514] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 247.907980][ T9514] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.2210: bg 0: block 18: invalid block bitmap [ 247.920786][ T9514] __quota_error: 135 callbacks suppressed [ 247.920799][ T9514] Quota error (device loop1): write_blk: dquota write failed [ 247.934036][ T9514] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 247.944100][ T9514] EXT4-fs error (device loop1): ext4_acquire_dquot:6879: comm syz.1.2210: Failed to acquire dquot type 1 [ 248.056562][ T9523] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2212'. [ 248.084168][ T9525] netlink: 'syz.2.2213': attribute type 1 has an invalid length. [ 248.092024][ T9525] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2213'. [ 248.101989][ T3685] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 248.194848][ T9534] loop2: detected capacity change from 0 to 512 [ 248.201464][ T9534] EXT4-fs: test_dummy_encryption option not supported [ 248.221786][ T9534] loop2: detected capacity change from 0 to 128 [ 248.228723][ T9534] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 248.242681][ T29] audit: type=1400 audit(1727393369.111:3598): avc: denied { write } for pid=9533 comm="syz.2.2217" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 248.279551][ T3716] FAT-fs (loop2): error, invalid access to FAT (entry 0x0affffff) [ 248.285686][ T9540] bridge1: entered promiscuous mode [ 248.287513][ T3716] FAT-fs (loop2): Filesystem has been set read-only [ 248.292625][ T9540] bridge1: entered allmulticast mode [ 248.336880][ T9541] netlink: 'syz.3.2219': attribute type 2 has an invalid length. [ 248.344762][ T9541] netlink: 'syz.3.2219': attribute type 8 has an invalid length. [ 248.355025][ T9538] netlink: 'syz.4.2218': attribute type 2 has an invalid length. [ 248.362777][ T9538] netlink: 'syz.4.2218': attribute type 8 has an invalid length. [ 248.383704][ T29] audit: type=1326 audit(1727393369.241:3599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9543 comm="syz.3.2221" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efda4e4df39 code=0x0 [ 248.600026][ T152] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.609224][ T29] audit: type=1400 audit(1727393369.461:3600): avc: denied { mounton } for pid=9547 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 248.659657][ T152] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.694092][ T9547] lo speed is unknown, defaulting to 1000 [ 248.709625][ T152] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.759232][ T152] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.772862][ T9547] chnl_net:caif_netlink_parms(): no params data found [ 248.808699][ T9547] bridge0: port 1(bridge_slave_0) entered blocking state [ 248.815866][ T9547] bridge0: port 1(bridge_slave_0) entered disabled state [ 248.823059][ T9547] bridge_slave_0: entered allmulticast mode [ 248.829616][ T9547] bridge_slave_0: entered promiscuous mode [ 248.836867][ T9547] bridge0: port 2(bridge_slave_1) entered blocking state [ 248.844009][ T9547] bridge0: port 2(bridge_slave_1) entered disabled state [ 248.851325][ T9547] bridge_slave_1: entered allmulticast mode [ 248.857861][ T9547] bridge_slave_1: entered promiscuous mode [ 248.875620][ T9547] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 248.886067][ T9547] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 248.917654][ T9547] team0: Port device team_slave_0 added [ 248.927530][ T9547] team0: Port device team_slave_1 added [ 248.933680][ T152] bridge_slave_1: left allmulticast mode [ 248.939570][ T152] bridge_slave_1: left promiscuous mode [ 248.945390][ T152] bridge0: port 2(bridge_slave_1) entered disabled state [ 248.953110][ T152] bridge_slave_0: left allmulticast mode [ 248.958976][ T152] bridge_slave_0: left promiscuous mode [ 248.964739][ T152] bridge0: port 1(bridge_slave_0) entered disabled state [ 248.986577][ T9566] syz.1.2226[9566] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 248.986783][ T9566] syz.1.2226[9566] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 248.998669][ T9566] syz.1.2226[9566] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 249.034415][ T29] audit: type=1326 audit(1727393369.891:3601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9567 comm="syz.0.2227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97fc74df39 code=0x7ffc0000 [ 249.069343][ T29] audit: type=1326 audit(1727393369.891:3602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9567 comm="syz.0.2227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97fc74df39 code=0x7ffc0000 [ 249.094037][ T29] audit: type=1326 audit(1727393369.901:3603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9567 comm="syz.0.2227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f97fc74df39 code=0x7ffc0000 [ 249.117558][ T29] audit: type=1326 audit(1727393369.901:3604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9567 comm="syz.0.2227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97fc74df39 code=0x7ffc0000 [ 249.141026][ T29] audit: type=1326 audit(1727393369.901:3605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9567 comm="syz.0.2227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=33 compat=0 ip=0x7f97fc74df39 code=0x7ffc0000 [ 249.166932][ T152] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 249.177527][ T152] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 249.187543][ T152] bond0 (unregistering): Released all slaves [ 249.198468][ T9564] bridge1: entered promiscuous mode [ 249.203697][ T9564] bridge1: entered allmulticast mode [ 249.285893][ T152] tipc: Disabling bearer [ 249.291167][ T152] tipc: Left network mode [ 249.297665][ T9547] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 249.304664][ T9547] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 249.330692][ T9547] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 249.343466][ T152] hsr_slave_0: left promiscuous mode [ 249.349174][ T152] hsr_slave_1: left promiscuous mode [ 249.355107][ T152] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 249.362565][ T152] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 249.370634][ T9580] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 249.379237][ T152] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 249.386771][ T152] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 249.394032][ T9580] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 249.404510][ T152] veth1_macvtap: left promiscuous mode [ 249.410014][ T152] veth0_macvtap: left promiscuous mode [ 249.415590][ T152] veth1_vlan: left promiscuous mode [ 249.420874][ T152] veth0_vlan: left promiscuous mode [ 249.429925][ T9585] FAULT_INJECTION: forcing a failure. [ 249.429925][ T9585] name failslab, interval 1, probability 0, space 0, times 0 [ 249.442602][ T9585] CPU: 0 UID: 0 PID: 9585 Comm: syz.4.2231 Not tainted 6.11.0-syzkaller-10669-g11a299a7933e #0 [ 249.453039][ T9585] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 249.463129][ T9585] Call Trace: [ 249.466421][ T9585] [ 249.469352][ T9585] dump_stack_lvl+0xf2/0x150 [ 249.473969][ T9585] dump_stack+0x15/0x20 [ 249.478187][ T9585] should_fail_ex+0x223/0x230 [ 249.482948][ T9585] ? audit_log_start+0x34c/0x6b0 [ 249.487887][ T9585] should_failslab+0x8f/0xb0 [ 249.492504][ T9585] kmem_cache_alloc_noprof+0x4c/0x290 [ 249.497895][ T9585] audit_log_start+0x34c/0x6b0 [ 249.502674][ T9585] audit_seccomp+0x4b/0x130 [ 249.507278][ T9585] __seccomp_filter+0x6fa/0x1180 [ 249.512304][ T9585] ? proc_fail_nth_write+0x12a/0x150 [ 249.517670][ T9585] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 249.523849][ T9585] ? vfs_write+0x580/0x910 [ 249.528281][ T9585] __secure_computing+0x9f/0x1c0 [ 249.533232][ T9585] syscall_trace_enter+0xd1/0x1f0 [ 249.538342][ T9585] do_syscall_64+0xaa/0x1c0 [ 249.542856][ T9585] ? clear_bhb_loop+0x55/0xb0 [ 249.547541][ T9585] ? clear_bhb_loop+0x55/0xb0 [ 249.552228][ T9585] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.558303][ T9585] RIP: 0033:0x7f451352df39 [ 249.562786][ T9585] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 249.582483][ T9585] RSP: 002b:00007f45121a7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 249.590894][ T9585] RAX: ffffffffffffffda RBX: 00007f45136e5f80 RCX: 00007f451352df39 [ 249.598948][ T9585] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 249.606923][ T9585] RBP: 00007f45121a7090 R08: 0000000000000000 R09: 0000000000000000 [ 249.614994][ T9585] R10: 0000020000023896 R11: 0000000000000246 R12: 0000000000000001 [ 249.622967][ T9585] R13: 0000000000000000 R14: 00007f45136e5f80 R15: 00007fff35e2c148 [ 249.630952][ T9585] [ 249.685328][ T152] team0 (unregistering): Port device team_slave_1 removed [ 249.695812][ T152] team0 (unregistering): Port device team_slave_0 removed [ 249.734375][ T9547] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 249.741403][ T9547] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 249.767412][ T9547] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 249.799055][ T9547] hsr_slave_0: entered promiscuous mode [ 249.805757][ T9547] hsr_slave_1: entered promiscuous mode [ 249.811697][ T9547] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 249.819287][ T9547] Cannot create hsr debugfs directory [ 249.830704][ T9587] xt_hashlimit: invalid rate [ 250.128475][ T9547] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 250.137503][ T9547] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 250.146701][ T9547] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 250.155355][ T9547] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 250.188761][ T9547] 8021q: adding VLAN 0 to HW filter on device bond0 [ 250.201604][ T9547] 8021q: adding VLAN 0 to HW filter on device team0 [ 250.211215][ T3299] bridge0: port 1(bridge_slave_0) entered blocking state [ 250.218411][ T3299] bridge0: port 1(bridge_slave_0) entered forwarding state [ 250.229201][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 250.236282][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 250.312519][ T9547] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 250.361802][ T9609] syzkaller0: entered promiscuous mode [ 250.367410][ T9609] syzkaller0: entered allmulticast mode [ 250.400138][ T9547] veth0_vlan: entered promiscuous mode [ 250.408341][ T9547] veth1_vlan: entered promiscuous mode [ 250.423678][ T9547] veth0_macvtap: entered promiscuous mode [ 250.431455][ T9547] veth1_macvtap: entered promiscuous mode [ 250.442922][ T9547] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 250.453582][ T9547] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.463648][ T9547] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 250.474159][ T9547] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.484186][ T9547] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 250.494857][ T9547] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.504724][ T9547] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 250.515404][ T9547] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.527826][ T9547] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 250.539986][ T9547] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 250.550604][ T9614] xt_hashlimit: invalid rate [ 250.555311][ T9547] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.565271][ T9547] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 250.575800][ T9547] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.585794][ T9547] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 250.596799][ T9547] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.606723][ T9547] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 250.617183][ T9547] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.628014][ T9547] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 250.637689][ T9547] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.646488][ T9547] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.655274][ T9547] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.664026][ T9547] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.765626][ T9627] xt_hashlimit: invalid rate [ 250.800231][ T9629] syz.4.2245[9629] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 250.800312][ T9629] syz.4.2245[9629] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 250.812537][ T9629] syz.4.2245[9629] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 250.831725][ T9632] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 250.852147][ T9632] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 250.895310][ T9635] __nla_validate_parse: 6 callbacks suppressed [ 250.895327][ T9635] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2247'. [ 250.913001][ T9635] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 250.921831][ T9635] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 251.204087][ T9638] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2248'. [ 251.378483][ T9642] xt_hashlimit: invalid rate [ 251.653683][ T9663] TCP: request_sock_TCP: Possible SYN flooding on port [::ffff:0.0.0.0]:20002. Sending cookies. [ 252.304098][ T9672] syz.2.2260[9672] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 252.437274][ T9683] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 252.456605][ T9683] vhci_hcd: default hub control req: 9500 v0000 i0000 l0 [ 252.464865][ T9674] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2261'. [ 252.510317][ T9687] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2265'. [ 252.577416][ T9694] loop1: detected capacity change from 0 to 512 [ 252.602576][ T9699] bridge1: entered promiscuous mode [ 252.606777][ T9694] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 252.607908][ T9699] bridge1: entered allmulticast mode [ 252.622325][ T9694] ext4 filesystem being mounted at /447/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 252.641993][ T9694] EXT4-fs: Cannot change journaled quota options when quota turned on [ 252.706028][ T3685] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 253.054603][ T9715] TCP: request_sock_TCP: Possible SYN flooding on port [::ffff:0.0.0.0]:20002. Sending cookies. [ 253.212450][ T9717] bpf_get_probe_write_proto: 2 callbacks suppressed [ 253.212464][ T9717] syz.4.2275[9717] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 253.219452][ T9717] syz.4.2275[9717] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 253.231104][ T9717] syz.4.2275[9717] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 253.250048][ T29] kauditd_printk_skb: 176 callbacks suppressed [ 253.250063][ T29] audit: type=1400 audit(1727393374.111:3780): avc: denied { sqpoll } for pid=9716 comm="syz.4.2275" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 253.251588][ T9717] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2275'. [ 253.302198][ T29] audit: type=1400 audit(1727393374.161:3781): avc: denied { name_bind } for pid=9716 comm="syz.4.2275" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 253.338925][ T29] audit: type=1400 audit(1727393374.201:3782): avc: denied { mac_admin } for pid=9719 comm="syz.0.2276" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 253.380006][ T9723] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2277'. [ 253.414987][ T9727] validate_nla: 6 callbacks suppressed [ 253.415004][ T9727] netlink: 'syz.0.2279': attribute type 2 has an invalid length. [ 253.428330][ T9727] netlink: 'syz.0.2279': attribute type 8 has an invalid length. [ 253.436157][ T9727] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2279'. [ 253.446353][ T29] audit: type=1400 audit(1727393374.311:3783): avc: denied { mount } for pid=9726 comm="syz.0.2279" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 253.447535][ T9727] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 253.470249][ T29] audit: type=1400 audit(1727393374.311:3784): avc: denied { ioctl } for pid=9726 comm="syz.0.2279" path="/dev/raw-gadget" dev="devtmpfs" ino=118 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 253.502490][ T9727] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 253.503932][ T29] audit: type=1400 audit(1727393374.351:3785): avc: denied { create } for pid=9729 comm="syz.3.2280" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 253.514979][ T9730] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2280'. [ 253.529929][ T29] audit: type=1400 audit(1727393374.351:3786): avc: denied { bind } for pid=9729 comm="syz.3.2280" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 253.538855][ T9730] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2280'. [ 253.563898][ T9730] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 253.567260][ T29] audit: type=1400 audit(1727393374.351:3787): avc: denied { name_bind } for pid=9729 comm="syz.3.2280" src=1792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 253.594876][ T29] audit: type=1400 audit(1727393374.351:3788): avc: denied { node_bind } for pid=9729 comm="syz.3.2280" saddr=fe80::b src=1792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 253.616923][ T29] audit: type=1400 audit(1727393374.351:3789): avc: denied { connect } for pid=9729 comm="syz.3.2280" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 253.656245][ T9734] xt_hashlimit: invalid rate [ 253.710212][ T9739] syz.3.2283[9739] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 253.710332][ T9739] syz.3.2283[9739] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 253.721938][ T9739] syz.3.2283[9739] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 253.780723][ T9740] syzkaller0: entered promiscuous mode [ 253.797644][ T9740] syzkaller0: entered allmulticast mode [ 253.926733][ T9746] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 253.934181][ T9746] vhci_hcd: default hub control req: 9500 v0000 i0000 l0 [ 253.942096][ T9742] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2284'. [ 253.979537][ T9749] xt_hashlimit: invalid rate [ 254.018666][ T9751] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 254.027514][ T9751] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 254.297874][ T9766] xt_hashlimit: invalid rate [ 254.319847][ T9768] netlink: 'syz.0.2294': attribute type 2 has an invalid length. [ 254.327720][ T9768] netlink: 'syz.0.2294': attribute type 8 has an invalid length. [ 254.356926][ T9774] netlink: 'syz.4.2297': attribute type 2 has an invalid length. [ 254.365104][ T9774] netlink: 'syz.4.2297': attribute type 8 has an invalid length. [ 254.566125][ T9777] netlink: 'syz.2.2298': attribute type 2 has an invalid length. [ 254.569685][ T9779] netlink: 'syz.1.2299': attribute type 1 has an invalid length. [ 254.574069][ T9777] netlink: 'syz.2.2298': attribute type 8 has an invalid length. [ 254.679945][ T9781] netlink: 'syz.1.2300': attribute type 1 has an invalid length. [ 254.767923][ T9783] syz.1.2301[9783] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 254.767985][ T9783] syz.1.2301[9783] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 254.779515][ T9783] syz.1.2301[9783] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 254.854245][ T9785] FAULT_INJECTION: forcing a failure. [ 254.854245][ T9785] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 254.879038][ T9785] CPU: 0 UID: 0 PID: 9785 Comm: syz.0.2302 Not tainted 6.11.0-syzkaller-10669-g11a299a7933e #0 [ 254.889438][ T9785] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 254.899496][ T9785] Call Trace: [ 254.902774][ T9785] [ 254.905771][ T9785] dump_stack_lvl+0xf2/0x150 [ 254.910428][ T9785] dump_stack+0x15/0x20 [ 254.914695][ T9785] should_fail_ex+0x223/0x230 [ 254.919476][ T9785] should_fail+0xb/0x10 [ 254.923645][ T9785] should_fail_usercopy+0x1a/0x20 [ 254.928697][ T9785] _copy_from_user+0x1e/0xd0 [ 254.933311][ T9785] copy_msghdr_from_user+0x54/0x2a0 [ 254.938797][ T9785] __sys_sendmmsg+0x21a/0x500 [ 254.943669][ T9785] __x64_sys_sendmmsg+0x57/0x70 [ 254.948537][ T9785] x64_sys_call+0xa49/0x2d60 [ 254.953144][ T9785] do_syscall_64+0xc9/0x1c0 [ 254.957743][ T9785] ? clear_bhb_loop+0x55/0xb0 [ 254.962512][ T9785] ? clear_bhb_loop+0x55/0xb0 [ 254.967297][ T9785] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.973203][ T9785] RIP: 0033:0x7f97fc74df39 [ 254.977676][ T9785] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 254.997308][ T9785] RSP: 002b:00007f97fb3c1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 255.005765][ T9785] RAX: ffffffffffffffda RBX: 00007f97fc905f80 RCX: 00007f97fc74df39 [ 255.013844][ T9785] RDX: 0000000000000001 RSI: 0000000020005200 RDI: 0000000000000003 [ 255.021959][ T9785] RBP: 00007f97fb3c1090 R08: 0000000000000000 R09: 0000000000000000 [ 255.030121][ T9785] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 255.038114][ T9785] R13: 0000000000000000 R14: 00007f97fc905f80 R15: 00007fff5b5cef68 [ 255.046107][ T9785] [ 255.186825][ T9796] xt_hashlimit: invalid rate [ 255.220282][ T9799] xt_hashlimit: invalid rate [ 255.352141][ T9810] syzkaller0: entered promiscuous mode [ 255.356373][ T9812] loop2: detected capacity change from 0 to 512 [ 255.357720][ T9810] syzkaller0: entered allmulticast mode [ 255.378383][ T9812] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 255.392926][ T9812] ext4 filesystem being mounted at /12/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 255.403550][ T9816] syzkaller0: entered promiscuous mode [ 255.409494][ T9816] syzkaller0: entered allmulticast mode [ 255.414116][ T9812] EXT4-fs: Cannot change journaled quota options when quota turned on [ 255.443306][ T9547] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 255.477148][ T9820] FAULT_INJECTION: forcing a failure. [ 255.477148][ T9820] name failslab, interval 1, probability 0, space 0, times 0 [ 255.490174][ T9820] CPU: 1 UID: 0 PID: 9820 Comm: syz.2.2316 Not tainted 6.11.0-syzkaller-10669-g11a299a7933e #0 [ 255.500529][ T9820] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 255.510601][ T9820] Call Trace: [ 255.513914][ T9820] [ 255.516847][ T9820] dump_stack_lvl+0xf2/0x150 [ 255.521450][ T9820] dump_stack+0x15/0x20 [ 255.525620][ T9820] should_fail_ex+0x223/0x230 [ 255.530314][ T9820] ? __alloc_skb+0x10b/0x310 [ 255.534912][ T9820] should_failslab+0x8f/0xb0 [ 255.539538][ T9820] kmem_cache_alloc_node_noprof+0x51/0x2b0 [ 255.545464][ T9820] __alloc_skb+0x10b/0x310 [ 255.550126][ T9820] audit_log_start+0x368/0x6b0 [ 255.554909][ T9820] audit_seccomp+0x4b/0x130 [ 255.559861][ T9820] __seccomp_filter+0x6fa/0x1180 [ 255.564861][ T9820] ? proc_fail_nth_write+0x12a/0x150 [ 255.570181][ T9820] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 255.576524][ T9820] ? vfs_write+0x580/0x910 [ 255.580992][ T9820] ? __fget_files+0x1d4/0x210 [ 255.585707][ T9820] __secure_computing+0x9f/0x1c0 [ 255.590655][ T9820] syscall_trace_enter+0xd1/0x1f0 [ 255.595696][ T9820] ? fpregs_assert_state_consistent+0x83/0xa0 [ 255.602014][ T9820] do_syscall_64+0xaa/0x1c0 [ 255.606581][ T9820] ? clear_bhb_loop+0x55/0xb0 [ 255.611303][ T9820] ? clear_bhb_loop+0x55/0xb0 [ 255.616006][ T9820] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 255.621907][ T9820] RIP: 0033:0x7f35b075df39 [ 255.626335][ T9820] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 255.645972][ T9820] RSP: 002b:00007f35af3d7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 255.654443][ T9820] RAX: ffffffffffffffda RBX: 00007f35b0915f80 RCX: 00007f35b075df39 [ 255.662456][ T9820] RDX: 0000000000000006 RSI: 0000000000000001 RDI: 0000000000000007 [ 255.670552][ T9820] RBP: 00007f35af3d7090 R08: 0000000000000000 R09: 0000000000000000 [ 255.678544][ T9820] R10: 0000000020001a00 R11: 0000000000000246 R12: 0000000000000001 [ 255.686525][ T9820] R13: 0000000000000000 R14: 00007f35b0915f80 R15: 00007ffc49127648 [ 255.694516][ T9820] [ 255.834938][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 255.938361][ T9827] xt_hashlimit: invalid rate [ 255.971082][ T9829] xt_hashlimit: invalid rate [ 256.053669][ T9835] syz.4.2323[9835] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 256.136394][ T9837] __nla_validate_parse: 12 callbacks suppressed [ 256.136409][ T9837] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2324'. [ 256.161226][ T9839] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 256.166521][ T9837] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2324'. [ 256.181267][ T9839] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 256.257534][ T9843] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 256.266051][ T9843] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 256.595702][ T9847] netlink: 256 bytes leftover after parsing attributes in process `syz.2.2329'. [ 256.615113][ T9847] Illegal XDP return value 4294967274 on prog (id 1525) dev N/A, expect packet loss! [ 256.716705][ T9855] xt_hashlimit: invalid rate [ 256.795691][ T9860] xt_hashlimit: invalid rate [ 257.559263][ T9875] xt_hashlimit: invalid rate [ 257.604947][ T9879] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2341'. [ 257.641923][ T9884] siw: device registration error -23 [ 257.740963][ T9888] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2345'. [ 257.890979][ T9897] loop2: detected capacity change from 0 to 512 [ 257.906490][ T9897] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 257.911092][ T9892] Cannot find map_set index 0 as target [ 257.919167][ T9897] ext4 filesystem being mounted at /20/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 257.940194][ T9897] EXT4-fs error (device loop2): ext4_xattr_block_get:596: inode #15: comm syz.2.2348: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 257.956843][ T9897] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 257.965996][ T9897] EXT4-fs error (device loop2): ext4_xattr_block_get:596: inode #15: comm syz.2.2348: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 257.982836][ T9897] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 257.991950][ T9897] EXT4-fs error (device loop2): ext4_xattr_block_get:596: inode #15: comm syz.2.2348: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 258.008683][ T9897] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 258.018347][ T9897] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.2348: bg 0: block 18: invalid block bitmap [ 258.031385][ T9897] EXT4-fs error (device loop2): ext4_acquire_dquot:6879: comm syz.2.2348: Failed to acquire dquot type 1 [ 258.180112][ T9547] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 258.275720][ T9913] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 258.283225][ T9913] vhci_hcd: default hub control req: 9500 v0000 i0000 l0 [ 258.290898][ T9907] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2351'. [ 258.324681][ T29] kauditd_printk_skb: 206 callbacks suppressed [ 258.324719][ T29] audit: type=1326 audit(1727393379.181:3992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9915 comm="syz.2.2353" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f35b075df39 code=0x0 [ 258.484279][ T29] audit: type=1400 audit(1727393379.341:3993): avc: denied { create } for pid=9922 comm="syz.1.2355" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 258.504412][ T9925] validate_nla: 6 callbacks suppressed [ 258.510033][ T9925] netlink: 'syz.1.2356': attribute type 1 has an invalid length. [ 258.517917][ T9925] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2356'. [ 258.524828][ T29] audit: type=1400 audit(1727393379.341:3994): avc: denied { getopt } for pid=9922 comm="syz.1.2355" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 258.563474][ T29] audit: type=1326 audit(1727393379.421:3995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9928 comm="syz.4.2358" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f451352df39 code=0x0 [ 258.617419][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 258.649903][ T29] audit: type=1400 audit(1727393379.511:3996): avc: denied { write } for pid=9926 comm="syz.1.2357" name="sg0" dev="devtmpfs" ino=111 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 258.650415][ T9931] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 258.682345][ T9927] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 258.690841][ T9927] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 258.726718][ T9933] loop1: detected capacity change from 0 to 512 [ 258.746413][ T9933] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 258.759014][ T9933] ext4 filesystem being mounted at /462/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 258.770598][ T9933] EXT4-fs error (device loop1): ext4_xattr_block_get:596: inode #15: comm syz.1.2359: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 258.787442][ T9933] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 258.796585][ T9933] EXT4-fs error (device loop1): ext4_xattr_block_get:596: inode #15: comm syz.1.2359: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 258.813125][ T9933] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 258.822194][ T9933] EXT4-fs error (device loop1): ext4_xattr_block_get:596: inode #15: comm syz.1.2359: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 258.839066][ T9933] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 258.848792][ T9933] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.2359: bg 0: block 18: invalid block bitmap [ 258.861383][ T9933] Quota error (device loop1): write_blk: dquota write failed [ 258.868834][ T9933] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 258.878792][ T9933] EXT4-fs error (device loop1): ext4_acquire_dquot:6879: comm syz.1.2359: Failed to acquire dquot type 1 [ 258.901472][ T9933] tipc: Enabling of bearer rejected, already enabled [ 259.029613][ T3685] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 259.030044][ T9942] netlink: 'syz.3.2362': attribute type 2 has an invalid length. [ 259.046688][ T9942] netlink: 'syz.3.2362': attribute type 8 has an invalid length. [ 259.054602][ T9942] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2362'. [ 259.172788][ T9953] hashlimit_mt_check_common: 1 callbacks suppressed [ 259.172808][ T9953] xt_hashlimit: invalid rate [ 259.205756][ T9954] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 259.213352][ T9954] vhci_hcd: default hub control req: 9500 v0000 i0000 l0 [ 259.221141][ T9947] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2364'. [ 259.221406][ T9956] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 259.239075][ T9956] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 259.269973][ T9959] netlink: 'syz.0.2367': attribute type 1 has an invalid length. [ 259.277861][ T9959] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2367'. [ 259.300156][ T9956] loop2: detected capacity change from 0 to 8192 [ 259.307675][ T9956] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 259.308529][ T29] audit: type=1326 audit(1727393380.171:3997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9960 comm="syz.0.2368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97fc74df39 code=0x7ffc0000 [ 259.351358][ T29] audit: type=1400 audit(1727393380.191:3998): avc: denied { mount } for pid=9955 comm="syz.2.2366" name="/" dev="loop2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 259.373458][ T29] audit: type=1326 audit(1727393380.211:3999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9960 comm="syz.0.2368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=115 compat=0 ip=0x7f97fc74df39 code=0x7ffc0000 [ 259.488213][ T9964] syzkaller0: entered promiscuous mode [ 259.493823][ T9964] syzkaller0: entered allmulticast mode [ 259.517823][ T9970] FAULT_INJECTION: forcing a failure. [ 259.517823][ T9970] name failslab, interval 1, probability 0, space 0, times 0 [ 259.530571][ T9970] CPU: 1 UID: 0 PID: 9970 Comm: syz.0.2372 Not tainted 6.11.0-syzkaller-10669-g11a299a7933e #0 [ 259.540941][ T9970] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 259.551050][ T9970] Call Trace: [ 259.554345][ T9970] [ 259.557277][ T9970] dump_stack_lvl+0xf2/0x150 [ 259.561993][ T9970] dump_stack+0x15/0x20 [ 259.566158][ T9970] should_fail_ex+0x223/0x230 [ 259.570918][ T9970] ? audit_log_start+0x34c/0x6b0 [ 259.575896][ T9970] should_failslab+0x8f/0xb0 [ 259.580490][ T9970] kmem_cache_alloc_noprof+0x4c/0x290 [ 259.585928][ T9970] audit_log_start+0x34c/0x6b0 [ 259.590757][ T9970] audit_seccomp+0x4b/0x130 [ 259.595287][ T9970] __seccomp_filter+0x6fa/0x1180 [ 259.600310][ T9970] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 259.605874][ T9970] ? vfs_read+0x3f2/0x720 [ 259.610285][ T9970] ? __rcu_read_unlock+0x4e/0x70 [ 259.615316][ T9970] ? __fget_files+0x1d4/0x210 [ 259.620089][ T9970] __secure_computing+0x9f/0x1c0 [ 259.625095][ T9970] syscall_trace_enter+0xd1/0x1f0 [ 259.630192][ T9970] ? fpregs_assert_state_consistent+0x83/0xa0 [ 259.636313][ T9970] do_syscall_64+0xaa/0x1c0 [ 259.640841][ T9970] ? clear_bhb_loop+0x55/0xb0 [ 259.645588][ T9970] ? clear_bhb_loop+0x55/0xb0 [ 259.650327][ T9970] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 259.656250][ T9970] RIP: 0033:0x7f97fc74ca1f [ 259.660821][ T9970] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8d 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 1c 8e 02 00 48 [ 259.680450][ T9970] RSP: 002b:00007f97fb3c1030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 259.688882][ T9970] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f97fc74ca1f [ 259.696910][ T9970] RDX: 0000000000000001 RSI: 00007f97fb3c10a0 RDI: 0000000000000007 [ 259.704888][ T9970] RBP: 00007f97fb3c1090 R08: 0000000000000000 R09: 0000000000000000 [ 259.712967][ T9970] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 259.721166][ T9970] R13: 0000000000000000 R14: 00007f97fc905f80 R15: 00007fff5b5cef68 [ 259.729183][ T9970] [ 259.842108][ T9974] tipc: Enabling of bearer rejected, already enabled [ 260.076573][ T9994] bpf_get_probe_write_proto: 2 callbacks suppressed [ 260.076587][ T9994] syz.2.2381[9994] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 260.083297][ T9994] syz.2.2381[9994] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 260.094860][ T9994] syz.2.2381[9994] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 260.116853][ C1] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 260.323701][ T9999] syz.4.2383[9999] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 260.323796][ T9999] syz.4.2383[9999] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 260.335429][ T9999] syz.4.2383[9999] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 260.632720][T10006] bridge1: entered promiscuous mode [ 260.649845][T10006] bridge1: entered allmulticast mode [ 260.753274][T10011] loop2: detected capacity change from 0 to 512 [ 260.776901][T10011] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 260.789698][T10011] ext4 filesystem being mounted at /28/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 260.801170][T10011] EXT4-fs error (device loop2): ext4_xattr_block_get:596: inode #15: comm syz.2.2388: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 260.817772][T10011] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 260.826787][T10011] EXT4-fs error (device loop2): ext4_xattr_block_get:596: inode #15: comm syz.2.2388: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 260.843464][T10011] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 260.852563][T10011] EXT4-fs error (device loop2): ext4_xattr_block_get:596: inode #15: comm syz.2.2388: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 260.869526][T10011] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 260.880033][T10011] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.2388: bg 0: block 18: invalid block bitmap [ 260.880973][T10018] siw: device registration error -23 [ 260.898419][T10011] EXT4-fs error (device loop2): ext4_acquire_dquot:6879: comm syz.2.2388: Failed to acquire dquot type 1 [ 260.923129][T10011] tipc: Started in network mode [ 260.928093][T10011] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 260.937252][T10011] tipc: New replicast peer: 0000:0000:0000:0000:0000:0000:0000:0001 [ 260.945505][T10011] tipc: Enabled bearer , priority 10 [ 261.081935][ T9547] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 261.105022][T10027] loop2: detected capacity change from 0 to 512 [ 261.116094][T10027] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 261.128658][T10027] ext4 filesystem being mounted at /29/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 261.140080][T10027] EXT4-fs error (device loop2): ext4_xattr_block_get:596: inode #15: comm syz.2.2392: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 261.156933][T10027] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 261.166049][T10027] EXT4-fs error (device loop2): ext4_xattr_block_get:596: inode #15: comm syz.2.2392: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 261.182706][T10027] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 261.191726][T10027] EXT4-fs error (device loop2): ext4_xattr_block_get:596: inode #15: comm syz.2.2392: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 261.208859][T10027] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 261.216180][T10032] loop1: detected capacity change from 0 to 2048 [ 261.218559][T10027] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.2392: bg 0: block 18: invalid block bitmap [ 261.225045][T10032] EXT4-fs (loop1): Invalid log cluster size: 65541 [ 261.244623][T10027] EXT4-fs error (device loop2): ext4_acquire_dquot:6879: comm syz.2.2392: Failed to acquire dquot type 1 [ 261.271125][T10032] __nla_validate_parse: 3 callbacks suppressed [ 261.271141][T10032] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2394'. [ 261.338699][T10035] bridge1: entered promiscuous mode [ 261.343980][T10035] bridge1: entered allmulticast mode [ 261.390922][T10037] netlink: 'syz.3.2396': attribute type 2 has an invalid length. [ 261.398880][T10037] netlink: 'syz.3.2396': attribute type 8 has an invalid length. [ 261.406812][T10037] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2396'. [ 261.416874][ T9547] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 261.515817][T10048] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 261.523325][T10048] vhci_hcd: default hub control req: 9500 v0000 i0000 l0 [ 261.530975][T10040] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2397'. [ 261.564255][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 261.617326][T10060] bridge1: entered promiscuous mode [ 261.622748][T10060] bridge1: entered allmulticast mode [ 261.675720][T10059] xt_hashlimit: invalid rate [ 261.866493][T10069] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2406'. [ 261.893360][T10071] loop2: detected capacity change from 0 to 512 [ 261.907325][T10071] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 261.919884][T10071] ext4 filesystem being mounted at /38/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 261.932557][T10071] EXT4-fs error (device loop2): ext4_xattr_block_get:596: inode #15: comm syz.2.2407: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 261.950178][T10071] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 261.959210][T10071] EXT4-fs error (device loop2): ext4_xattr_block_get:596: inode #15: comm syz.2.2407: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 261.976077][T10071] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 261.985158][T10077] xt_hashlimit: invalid rate [ 261.985116][T10071] EXT4-fs error (device loop2): ext4_xattr_block_get:596: inode #15: comm syz.2.2407: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 262.006592][T10071] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 262.015714][ T3338] tipc: Node number set to 1 [ 262.020981][T10071] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.2407: bg 0: block 18: invalid block bitmap [ 262.033687][T10071] EXT4-fs error (device loop2): ext4_acquire_dquot:6879: comm syz.2.2407: Failed to acquire dquot type 1 [ 262.049293][T10080] xt_hashlimit: invalid rate [ 262.139782][T10091] xt_hashlimit: invalid rate [ 262.178557][T10092] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 262.186044][T10092] vhci_hcd: default hub control req: 9500 v0000 i0000 l0 [ 262.193932][T10082] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2411'. [ 262.204757][ T9547] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 262.242087][T10097] netlink: 256 bytes leftover after parsing attributes in process `syz.2.2416'. [ 262.275636][T10104] netlink: 'syz.4.2418': attribute type 2 has an invalid length. [ 262.283476][T10104] netlink: 'syz.4.2418': attribute type 8 has an invalid length. [ 262.291322][T10104] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2418'. [ 262.314529][T10108] loop1: detected capacity change from 0 to 164 [ 262.329749][T10110] xt_hashlimit: invalid rate [ 262.386196][T10115] syzkaller0: entered promiscuous mode [ 262.391716][T10115] syzkaller0: entered allmulticast mode [ 262.399686][T10120] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2425'. [ 262.410721][ T35] hid-generic 0000:0000:0000.0042: unknown main item tag 0x0 [ 262.419864][ T35] hid-generic 0000:0000:0000.0042: hidraw0: HID v0.00 Device [syz0] on syz0 [ 262.458163][T10123] xt_hashlimit: invalid rate [ 263.015352][T10144] bridge1: entered promiscuous mode [ 263.020735][T10144] bridge1: entered allmulticast mode [ 263.242542][T10153] xt_hashlimit: invalid rate [ 263.248915][T10149] tipc: Enabling of bearer rejected, already enabled [ 263.302831][T10160] netlink: 'syz.2.2441': attribute type 1 has an invalid length. [ 263.310643][T10160] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2441'. [ 263.321371][T10160] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2441'. [ 263.396251][T10170] loop1: detected capacity change from 0 to 164 [ 263.405446][ T29] kauditd_printk_skb: 181 callbacks suppressed [ 263.405530][ T29] audit: type=1400 audit(1727393384.271:4173): avc: denied { mounton } for pid=10169 comm="syz.1.2445" path="/474/file0" dev="tmpfs" ino=2479 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 263.437318][ T29] audit: type=1400 audit(1727393384.271:4174): avc: denied { mount } for pid=10169 comm="syz.1.2445" name="/" dev="loop1" ino=1792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 263.490783][T10175] netlink: 'syz.1.2447': attribute type 1 has an invalid length. [ 263.544413][ T29] audit: type=1400 audit(1727393384.401:4175): avc: denied { create } for pid=10184 comm="syz.2.2451" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 263.583557][ T29] audit: type=1400 audit(1727393384.431:4176): avc: denied { ioctl } for pid=10184 comm="syz.2.2451" path="socket:[29433]" dev="sockfs" ino=29433 ioctlcmd=0x48d2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 263.591189][T10187] siw: device registration error -23 [ 263.608983][ T29] audit: type=1400 audit(1727393384.441:4177): avc: denied { create } for pid=10186 comm="syz.2.2452" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 263.666970][ T29] audit: type=1400 audit(1727393384.441:4178): avc: denied { write } for pid=10186 comm="syz.2.2452" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 263.687218][ T29] audit: type=1326 audit(1727393384.481:4179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10186 comm="syz.2.2452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35b075df39 code=0x7ffc0000 [ 263.710866][ T29] audit: type=1326 audit(1727393384.481:4180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10186 comm="syz.2.2452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35b075df39 code=0x7ffc0000 [ 263.734407][ T29] audit: type=1326 audit(1727393384.481:4181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10186 comm="syz.2.2452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=115 compat=0 ip=0x7f35b075df39 code=0x7ffc0000 [ 263.757949][ T29] audit: type=1326 audit(1727393384.481:4182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10186 comm="syz.2.2452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35b075df39 code=0x7ffc0000 [ 263.780358][T10189] bridge1: entered promiscuous mode [ 263.786788][T10189] bridge1: entered allmulticast mode [ 263.845502][T10179] tipc: Enabling of bearer rejected, already enabled [ 263.852658][ T3315] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 263.860722][ T3315] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 263.868205][ T3315] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 263.875973][ T3315] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 263.883470][ T3315] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 263.890910][ T3315] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 263.898358][ T3315] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 263.905805][ T3315] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 263.913316][ T3315] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 263.920869][ T3315] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 263.928353][ T3315] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 263.935879][ T3315] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 263.943282][ T3315] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 263.950854][ T3315] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 263.958475][ T3315] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 263.966245][ T3315] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 263.973838][ T3315] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 263.981260][ T3315] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 263.988679][ T3315] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 263.996182][ T3315] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 264.003575][ T3315] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 264.011043][ T3315] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 264.018461][ T3315] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 264.025882][ T3315] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 264.033262][ T3315] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 264.040669][ T3315] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 264.048065][ T3315] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 264.055554][ T3315] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 264.063015][ T3315] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 264.070453][ T3315] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 264.077855][ T3315] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 264.085262][ T3315] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 264.086815][T10209] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 264.095494][ T3315] hid-generic 0000:0000:0000.0043: hidraw0: HID v0.00 Device [syz0] on syz0 [ 264.109998][T10209] vhci_hcd: default hub control req: 9500 v0000 i0000 l0 [ 264.268978][T10217] netlink: 'syz.0.2461': attribute type 1 has an invalid length. [ 264.371484][T10221] xt_hashlimit: invalid rate [ 264.425661][T10224] loop2: detected capacity change from 0 to 2048 [ 264.439790][T10224] EXT4-fs (loop2): Invalid log cluster size: 65541 [ 264.601281][T10233] loop2: detected capacity change from 0 to 256 [ 264.706744][T10245] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 264.714387][T10245] vhci_hcd: default hub control req: 9500 v0000 i0000 l0 [ 264.757958][T10252] xt_hashlimit: invalid rate [ 264.885211][T10256] tipc: Enabling of bearer rejected, already enabled [ 264.941147][T10262] netlink: 'syz.3.2476': attribute type 1 has an invalid length. [ 265.273463][T10269] netlink: 'syz.3.2479': attribute type 2 has an invalid length. [ 265.281470][T10269] netlink: 'syz.3.2479': attribute type 8 has an invalid length. [ 265.283083][T10271] syz.4.2480[10271] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 265.289444][T10271] syz.4.2480[10271] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 265.300979][T10271] syz.4.2480[10271] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 265.588764][T10278] netlink: 'syz.1.2483': attribute type 1 has an invalid length. [ 265.623456][T10279] syzkaller0: entered promiscuous mode [ 265.629027][T10279] syzkaller0: entered allmulticast mode [ 265.829696][T10284] siw: device registration error -23 [ 266.013221][T10291] syz.3.2488[10291] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 266.013349][T10291] syz.3.2488[10291] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 266.025113][T10291] syz.3.2488[10291] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 266.136044][T10297] xt_hashlimit: invalid rate [ 266.210126][T10302] netlink: 'syz.4.2492': attribute type 2 has an invalid length. [ 266.217935][T10302] netlink: 'syz.4.2492': attribute type 8 has an invalid length. [ 266.227441][T10302] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 266.235944][T10302] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 266.425840][T10309] netlink: 'syz.0.2495': attribute type 2 has an invalid length. [ 266.433649][T10309] netlink: 'syz.0.2495': attribute type 8 has an invalid length. [ 266.441491][T10309] __nla_validate_parse: 16 callbacks suppressed [ 266.441533][T10309] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2495'. [ 266.557849][T10311] loop1: detected capacity change from 0 to 512 [ 266.576337][T10311] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 266.589712][T10311] ext4 filesystem being mounted at /480/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 266.601473][T10311] EXT4-fs error (device loop1): ext4_xattr_block_get:596: inode #15: comm syz.1.2496: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 266.618153][T10311] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 266.627148][T10311] EXT4-fs error (device loop1): ext4_xattr_block_get:596: inode #15: comm syz.1.2496: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 266.643834][T10311] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 266.652953][T10311] EXT4-fs error (device loop1): ext4_xattr_block_get:596: inode #15: comm syz.1.2496: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 266.670555][T10311] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 266.680340][T10311] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.2496: bg 0: block 18: invalid block bitmap [ 266.693023][T10311] EXT4-fs error (device loop1): ext4_acquire_dquot:6879: comm syz.1.2496: Failed to acquire dquot type 1 [ 266.790744][ T3685] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 266.823206][ T3315] hid-generic 0000:0000:0000.0044: unknown main item tag 0x0 [ 266.830749][ T3315] hid-generic 0000:0000:0000.0044: unknown main item tag 0x0 [ 266.838222][ T3315] hid-generic 0000:0000:0000.0044: unknown main item tag 0x0 [ 266.845760][ T3315] hid-generic 0000:0000:0000.0044: unknown main item tag 0x0 [ 266.853160][ T3315] hid-generic 0000:0000:0000.0044: unknown main item tag 0x0 [ 266.860588][ T3315] hid-generic 0000:0000:0000.0044: unknown main item tag 0x0 [ 266.868199][ T3315] hid-generic 0000:0000:0000.0044: unknown main item tag 0x0 [ 266.875682][ T3315] hid-generic 0000:0000:0000.0044: unknown main item tag 0x0 [ 266.883104][ T3315] hid-generic 0000:0000:0000.0044: unknown main item tag 0x0 [ 266.890571][ T3315] hid-generic 0000:0000:0000.0044: unknown main item tag 0x0 [ 266.897984][ T3315] hid-generic 0000:0000:0000.0044: unknown main item tag 0x0 [ 266.905407][ T3315] hid-generic 0000:0000:0000.0044: unknown main item tag 0x0 [ 266.912843][ T3315] hid-generic 0000:0000:0000.0044: unknown main item tag 0x0 [ 266.920306][ T3315] hid-generic 0000:0000:0000.0044: unknown main item tag 0x0 [ 266.927717][ T3315] hid-generic 0000:0000:0000.0044: unknown main item tag 0x0 [ 266.935204][ T3315] hid-generic 0000:0000:0000.0044: unknown main item tag 0x0 [ 266.942659][ T3315] hid-generic 0000:0000:0000.0044: unknown main item tag 0x0 [ 266.950094][ T3315] hid-generic 0000:0000:0000.0044: unknown main item tag 0x0 [ 266.957520][ T3315] hid-generic 0000:0000:0000.0044: unknown main item tag 0x0 [ 266.964953][ T3315] hid-generic 0000:0000:0000.0044: unknown main item tag 0x0 [ 266.972412][ T3315] hid-generic 0000:0000:0000.0044: unknown main item tag 0x0 [ 266.979933][ T3315] hid-generic 0000:0000:0000.0044: unknown main item tag 0x0 [ 266.987514][ T3315] hid-generic 0000:0000:0000.0044: unknown main item tag 0x0 [ 266.995069][ T3315] hid-generic 0000:0000:0000.0044: unknown main item tag 0x0 [ 267.002562][ T3315] hid-generic 0000:0000:0000.0044: unknown main item tag 0x0 [ 267.010264][ T3315] hid-generic 0000:0000:0000.0044: unknown main item tag 0x0 [ 267.017691][ T3315] hid-generic 0000:0000:0000.0044: unknown main item tag 0x0 [ 267.025096][ T3315] hid-generic 0000:0000:0000.0044: unknown main item tag 0x0 [ 267.032626][ T3315] hid-generic 0000:0000:0000.0044: unknown main item tag 0x0 [ 267.040117][ T3315] hid-generic 0000:0000:0000.0044: unknown main item tag 0x0 [ 267.047530][ T3315] hid-generic 0000:0000:0000.0044: unknown main item tag 0x0 [ 267.054940][ T3315] hid-generic 0000:0000:0000.0044: unknown main item tag 0x0 [ 267.065827][ T3315] hid-generic 0000:0000:0000.0044: hidraw0: HID v0.00 Device [syz0] on syz0 [ 267.132383][T10328] syz.3.2500[10328] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 267.132528][T10328] syz.3.2500[10328] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 267.150787][T10328] syz.3.2500[10328] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 267.169504][T10328] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2500'. [ 267.669250][T10346] loop1: detected capacity change from 0 to 512 [ 267.686960][T10346] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 267.699806][T10346] ext4 filesystem being mounted at /482/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 267.711395][T10350] siw: device registration error -23 [ 267.712709][T10346] EXT4-fs error (device loop1): ext4_xattr_block_get:596: inode #15: comm syz.1.2508: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 267.734308][T10346] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 267.743371][T10346] EXT4-fs error (device loop1): ext4_xattr_block_get:596: inode #15: comm syz.1.2508: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 267.763170][T10346] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 267.772322][T10346] EXT4-fs error (device loop1): ext4_xattr_block_get:596: inode #15: comm syz.1.2508: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 267.790783][T10346] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 267.800714][T10346] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.2508: bg 0: block 18: invalid block bitmap [ 267.813508][T10346] EXT4-fs error (device loop1): ext4_acquire_dquot:6879: comm syz.1.2508: Failed to acquire dquot type 1 [ 267.920050][T10353] netlink: 256 bytes leftover after parsing attributes in process `syz.4.2510'. [ 267.978591][ T3685] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 268.202318][ T35] ================================================================== [ 268.210519][ T35] BUG: KCSAN: assert: race in dequeue_entities+0x6df/0x760 [ 268.217760][ T35] [ 268.220106][ T35] race at unknown origin, with assert no writes to 0xffff888102f34268 of 4 bytes by task 35 on cpu 1: [ 268.231053][ T35] dequeue_entities+0x6df/0x760 [ 268.235921][ T35] pick_next_task_fair+0x7d/0x410 [ 268.240966][ T35] __schedule+0x284/0x940 [ 268.245400][ T35] schedule+0x55/0xc0 [ 268.249402][ T35] worker_thread+0x5f4/0x6f0 [ 268.253995][ T35] kthread+0x1d1/0x210 [ 268.258081][ T35] ret_from_fork+0x4b/0x60 [ 268.258922][T10378] tipc: Enabling of bearer rejected, already enabled [ 268.262514][ T35] ret_from_fork_asm+0x1a/0x30 [ 268.262555][ T35] [ 268.262560][ T35] value changed: 0x00000000 -> 0x00000001 [ 268.283016][ T35] [ 268.285336][ T35] Reported by Kernel Concurrency Sanitizer on: [ 268.291478][ T35] CPU: 1 UID: 0 PID: 35 Comm: kworker/1:1 Not tainted 6.11.0-syzkaller-10669-g11a299a7933e #0 [ 268.301730][ T35] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 268.311795][ T35] Workqueue: 0x0 (wg-crypt-wg0) [ 268.316744][ T35] ==================================================================