last executing test programs: 3.003940405s ago: executing program 0 (id=3294): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000014c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r0, 0xfeffff, 0xe80, 0x3f000002, &(0x7f0000000700)="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", 0x0, 0xf0, 0x0, 0xf0, 0xffffff0c}, 0x40) 3.003213865s ago: executing program 0 (id=3295): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r0 = syz_open_dev$vcsu(0x0, 0x8000000000000001, 0x40000) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_io_uring_setup(0x7635, &(0x7f0000000300)={0x0, 0x85b8, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) r4 = socket$inet6_dccp(0xa, 0x6, 0x0) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x1}, 0x1c) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000200)=@in6={0xa, 0x0, 0x0, @dev}}) syz_io_uring_submit(0x0, r3, &(0x7f0000000000)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd=r1, 0x0, 0x20000006, 0x20004, 0x19, 0x0, {0x1}}) bpf$MAP_CREATE(0x0, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="08001a00000004000000800000000000000000006aaed5a80dc21899d2efa7647ec68606f2102ea13a7c834a6f089297e70a6872454a13dd8b02fe6a5770def0938bda8e11ae12b9c2a0338ab86a0487270910273b03294905a5edd289ceb51686235ad160af0db50565a43c5a7a28e913a63faa56c826eefb71cf270bc740968df60263b5", @ANYRES32=0x1, @ANYBLOB="0000000000000000000000000000000703897b10a290eba58abd329f2571b20000000000fd305be0ba5a8dc43c23d27b416c60d1d73f573d6feb5764d8e30f343c954348ccb8235ba6e711586491b4a0d438ce06fc20bf56678e764df4f6963280ec35c9f15d", @ANYRES64=r0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r5}, 0x0, &(0x7f0000000040)}, 0x27) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed0006, &(0x7f0000000540)={[{@jqfmt_vfsold}, {@resgid={'resgid', 0x3d, 0xee00}}, {@nogrpid}, {@noload}, {@data_err_ignore}, {@usrjquota}]}, 0xfe, 0x452, &(0x7f0000000980)="$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") r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10) r8 = creat(&(0x7f0000000100)='./bus\x00', 0x42) ftruncate(r8, 0x1f) write$cgroup_type(r8, &(0x7f0000000200), 0x175d9003) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r9}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5393, &(0x7f0000000000)) 2.787817165s ago: executing program 0 (id=3296): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000004000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000040000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b70200"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000740)={0x2, 0x4e20, @remote}, 0x10) r2 = socket(0x1e, 0x4, 0x0) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10) 2.774150496s ago: executing program 0 (id=3298): r0 = socket(0x2, 0x5, 0x0) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f0000002e40)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x880) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x8, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x49) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10) sendmmsg$inet_sctp(r0, &(0x7f0000000bc0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000001c0)=[{0x0, 0x2}], 0x1, &(0x7f0000000140)=ANY=[@ANYBLOB="30000000000000008400000001000000000000000c0000000000000002002b0388edb6556900"/51, @ANYRES32=0x0], 0x30}], 0x1, 0x0) (fail_nth: 2) 2.064944381s ago: executing program 4 (id=3305): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd885000000040000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) bind$inet(r1, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendmsg$xdp(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="d14fe49b82", 0x1a000}], 0x1, 0x0, 0x0, 0x40048c4}, 0x0) 1.97013882s ago: executing program 4 (id=3306): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x8, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x1, @mcast2, 0x2}, 0x1c) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0x0) syz_emit_ethernet(0x83, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030086dd601b8b97004d88c19edace00000000000000002100000002ff02000000000000000000000000000104004e20004d13"], 0x0) ppoll(&(0x7f0000000080), 0x0, &(0x7f0000000200), 0x0, 0x0) 1.96950271s ago: executing program 4 (id=3307): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r0 = syz_open_dev$vcsu(0x0, 0x8000000000000001, 0x40000) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_io_uring_setup(0x7635, &(0x7f0000000300)={0x0, 0x85b8, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) r4 = socket$inet6_dccp(0xa, 0x6, 0x0) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x1}, 0x1c) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000200)=@in6={0xa, 0x0, 0x0, @dev}}) syz_io_uring_submit(0x0, r3, &(0x7f0000000000)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd=r1, 0x0, 0x20000006, 0x20004, 0x19, 0x0, {0x1}}) bpf$MAP_CREATE(0x0, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="08001a00000004000000800000000000000000006aaed5a80dc21899d2efa7647ec68606f2102ea13a7c834a6f089297e70a6872454a13dd8b02fe6a5770def0938bda8e11ae12b9c2a0338ab86a0487270910273b03294905a5edd289ceb51686235ad160af0db50565a43c5a7a28e913a63faa56c826eefb71cf270bc740968df60263b5", @ANYRES32=0x1, @ANYBLOB="0000000000000000000000000000000703897b10a290eba58abd329f2571b20000000000fd305be0ba5a8dc43c23d27b416c60d1d73f573d6feb5764d8e30f343c954348ccb8235ba6e711586491b4a0d438ce06fc20bf56678e764df4f6963280ec35c9f15d", @ANYRES64=r0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r5}, 0x0, &(0x7f0000000040)}, 0x27) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed0006, &(0x7f0000000540)={[{@jqfmt_vfsold}, {@resgid={'resgid', 0x3d, 0xee00}}, {@nogrpid}, {@noload}, {@data_err_ignore}, {@usrjquota}]}, 0xfe, 0x452, &(0x7f0000000980)="$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") r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10) r8 = creat(&(0x7f0000000100)='./bus\x00', 0x42) ftruncate(r8, 0x1f) write$cgroup_type(r8, &(0x7f0000000200), 0x175d9003) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r9}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5393, &(0x7f0000000000)) 1.726783372s ago: executing program 0 (id=3308): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r1}, 0x10) execve(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) 1.726311152s ago: executing program 3 (id=3309): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff00000000000000", @ANYRES32=0x1, @ANYBLOB="000000907cfc491f0d437243005aa2287fafa420", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000040)={0x53, 0x0, 0x6, 0x0, @buffer={0x17, 0x51, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$usbfs(&(0x7f0000000180), 0xbd, 0x408000) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r3, 0x28, 0x1, &(0x7f0000000140)=0x5, 0x8) 1.725710002s ago: executing program 0 (id=3310): r0 = inotify_init1(0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) close(r2) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0x2) readv(r5, 0x0, 0x0) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r6, &(0x7f0000000240)=ANY=[@ANYBLOB="7f454c46cb4e00000000001500000000e592dc79ef83cbf9000001000000000040000000000000000000000000000000000000000000380005000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000b6afabe8f7112b07ac544a66d045ea8840bf266bb628ed3d29132d0578bd07a8ad064fe2e7ee189cb1afc331b40eb553e5090e6068cee3e076e786c1f3d9f4fdb3d8aaad759e1a51531c362cd16b11b9b78199abaa32cfa9265925fe89b278293c26aaa3730147bba5f5d5418e894bd5bb55fdb1"], 0x78) inotify_add_watch(r0, &(0x7f0000000000)='./file1\x00', 0x4000820) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x3, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000588c0c6249e2091e10ea154e2180b120811169412612662b963f4b82c969555975038a6e2c3507cc6099e5302069f79270b319a95a1b32d73e008c48b40c1a252800000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000001240)=ANY=[], 0x90}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000340)='./file0\x00', 0x0, &(0x7f00000001c0), 0x81, 0x79e, &(0x7f00000018c0)="$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") socketpair$unix(0x1, 0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f0000000200)=[{0x200000000006, 0xff, 0x0, 0x7ffc0001}]}) get_robust_list(0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 1.655075718s ago: executing program 4 (id=3311): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000014c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0xfeffff, 0xe80, 0x3f000002, &(0x7f0000000700)="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", 0x0, 0xf0, 0x0, 0xf0, 0xffffff0c}, 0x40) 1.553215578s ago: executing program 4 (id=3313): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd885000000040000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) bind$inet(r1, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendmsg$xdp(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="d14fe49b82", 0x1a000}], 0x1, 0x0, 0x0, 0x40048c4}, 0x0) 1.5296727s ago: executing program 3 (id=3314): bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1b00000000000000000020000080000000000000", @ANYBLOB="3de76cda7500c24140a4c3726f4a23c9ed8975c048fa100f0807222f6ab60c7bca00aab5d30d5a027bc1ed9c1f87c92d4d21db48a78d1698b61a20a7ee4c56d675668251434498b63e76a8d78ee9888c551be470b4fae793a930a885b8b62385199baafbec9921f47a3d34cc50b4e886b697c0e387c36c209adbed", @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000ffffffff00"/28], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000001c0)='mm_page_alloc\x00', r0}, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000940), r1) sendmsg$IEEE802154_LLSEC_GETPARAMS(r1, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000a80)=ANY=[@ANYBLOB="22abf9c8", @ANYRES16=r2, @ANYBLOB="01000000000000000000220000000a0001007770616e30000000"], 0x20}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x78) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0), 0x7) syz_open_dev$tty1(0xc, 0x4, 0x2) fallocate(0xffffffffffffffff, 0x3, 0x0, 0x3) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x6) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_freezer_state(r3, &(0x7f00000000c0), 0x2, 0x0) r5 = openat$cgroup_procs(r3, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000000040), 0x12) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) write$cgroup_pid(r5, &(0x7f00000006c0), 0x12) write$cgroup_freezer_state(r4, &(0x7f0000000400)='FROZEN\x00', 0x7) close(r5) write$cgroup_freezer_state(r4, &(0x7f0000000080)='THAWED\x00', 0x7) 1.461281856s ago: executing program 4 (id=3316): socket$tipc(0x1e, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r1}, 0x10) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) read$msr(r0, &(0x7f0000001340)=""/102378, 0x7706c522012798af) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="18010000007b00000000000000000000850000"], &(0x7f00000000c0)='syzkaller\x00', 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x7, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b70200000300000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b70800000000002c7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="050000000000000004000000ff00000000000000", @ANYRES32=r3, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="190000000000110000fd0000001400100000"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r4}, 0x0, &(0x7f0000000040)}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x10) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) bind$inet(r6, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r6, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r6, &(0x7f0000007fc0), 0x800001d, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000020000000400000005000000", @ANYRES32, @ANYBLOB="9f1e0b08db57970000000000000000000100000000000000000002", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 1.452915327s ago: executing program 2 (id=3317): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0}, &(0x7f0000000380), &(0x7f00000003c0)=r1}, 0x20) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000340)={0x28, 0x0, 0x0, @my=0x1}, 0x10) connect$vsock_stream(r2, &(0x7f00000000c0)={0x28, 0x0, 0x2710}, 0x10) 1.431221959s ago: executing program 3 (id=3318): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0}, &(0x7f0000000380), &(0x7f00000003c0)=r1}, 0x20) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000340)={0x28, 0x0, 0x0, @my=0x1}, 0x10) connect$vsock_stream(r2, &(0x7f00000000c0)={0x28, 0x0, 0x2710}, 0x10) 786.186078ms ago: executing program 1 (id=3319): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="7000000000010104000000000000000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000ffff07000200"], 0x70}}, 0x0) 674.105228ms ago: executing program 1 (id=3320): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r0 = syz_open_dev$vcsu(0x0, 0x8000000000000001, 0x40000) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_io_uring_setup(0x7635, &(0x7f0000000300)={0x0, 0x85b8, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) r4 = socket$inet6_dccp(0xa, 0x6, 0x0) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x1}, 0x1c) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000200)=@in6={0xa, 0x0, 0x0, @dev}}) syz_io_uring_submit(0x0, r3, &(0x7f0000000000)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd=r1, 0x0, 0x20000006, 0x20004, 0x19, 0x0, {0x1}}) bpf$MAP_CREATE(0x0, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="08001a00000004000000800000000000000000006aaed5a80dc21899d2efa7647ec68606f2102ea13a7c834a6f089297e70a6872454a13dd8b02fe6a5770def0938bda8e11ae12b9c2a0338ab86a0487270910273b03294905a5edd289ceb51686235ad160af0db50565a43c5a7a28e913a63faa56c826eefb71cf270bc740968df60263b5", @ANYRES32=0x1, @ANYBLOB="0000000000000000000000000000000703897b10a290eba58abd329f2571b20000000000fd305be0ba5a8dc43c23d27b416c60d1d73f573d6feb5764d8e30f343c954348ccb8235ba6e711586491b4a0d438ce06fc20bf56678e764df4f6963280ec35c9f15d", @ANYRES64=r0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r5}, 0x0, &(0x7f0000000040)}, 0x27) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed0006, &(0x7f0000000540)={[{@jqfmt_vfsold}, {@resgid={'resgid', 0x3d, 0xee00}}, {@nogrpid}, {@noload}, {@data_err_ignore}, {@usrjquota}]}, 0xfe, 0x452, &(0x7f0000000980)="$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") r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10) r8 = creat(&(0x7f0000000100)='./bus\x00', 0x42) ftruncate(r8, 0x1f) write$cgroup_type(r8, &(0x7f0000000200), 0x175d9003) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r9}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r10 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$SCSI_IOCTL_GET_PCI(r10, 0x5393, &(0x7f0000000000)) 562.077629ms ago: executing program 3 (id=3321): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000004000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000040000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b702000000000000850000008500"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000740)={0x2, 0x4e20, @remote}, 0x10) r2 = socket(0x1e, 0x4, 0x0) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10) 557.641779ms ago: executing program 2 (id=3322): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000019840)=ANY=[@ANYBLOB="6c0100001700010e0000000000000000fc0100000000000000000000000000000000000000000000200100000000000000000000000000000000000000000000000000000000000020010000000000000000000000000002000000000000000000000020000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000bb00000000000000000000ffffac1414bb00000000000000000a00000029000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000044000500fc0200000000ac1e0001000000000000000000000000000000000e00"/196], 0x16c}, 0x1, 0x0, 0x0, 0x40810}, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0xc0200, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000100)=0x3) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000160000001811", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r5}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r6}, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000440), r7) sendmsg$NLBL_CALIPSO_C_ADD(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01002bbd7004ffdbdf250100000008000100000000000800020002"], 0x54}, 0x1, 0x0, 0x0, 0x4000040}, 0x800) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=@base={0x6, 0x4, 0x8000, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe, 0x0, 0x0, @void, @value, @void, @value}, 0x48) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x198}}, 0x4004040) ioctl$PPPIOCATTACH(r3, 0x4004743d, &(0x7f0000000040)=0x3) close(r2) (fail_nth: 2) r9 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r9) ptrace$peeksig(0x4209, r9, 0x0, 0x0) getpriority(0x0, r9) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESOCT=r3, @ANYBLOB=',wfdno=', @ANYRESDEC=r1]) r10 = memfd_secret(0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0x11, r10, 0x0) write$tun(r10, &(0x7f0000000c00)={@void, @val={0x0, 0x80, 0x0, 0x101, 0x101}, @ipv4=@dccp={{0x30, 0x4, 0x2, 0x1d, 0x13e, 0x68, 0x0, 0x1, 0x21, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010100, {[@timestamp_addr={0x44, 0x14, 0xf7, 0x1, 0x0, [{@loopback, 0x9}, {@multicast2, 0x5}]}, @rr={0x7, 0x17, 0x7d, [@remote, @multicast1, @multicast2, @private=0xa010100, @broadcast]}, @noop, @rr={0x7, 0xb, 0x58, [@multicast1, @multicast2]}, @timestamp_prespec={0x44, 0x14, 0xff, 0x3, 0xf, [{@dev={0xac, 0x14, 0x14, 0xf}}, {@rand_addr=0x64010100, 0x5}]}, @timestamp={0x44, 0x20, 0x20, 0x0, 0x8, [0xef9c, 0xa8, 0x2, 0x10000, 0x0, 0xfffffffa, 0x5b3aad80]}, @end, @generic={0x0, 0xd, "2fb7d29b0be34b04099f83"}, @ssrr={0x89, 0x27, 0x96, [@multicast1, @local, @broadcast, @multicast2, @multicast1, @remote, @dev={0xac, 0x14, 0x14, 0x22}, @dev={0xac, 0x14, 0x14, 0x1a}, @private=0xa010100]}, @ssrr={0x89, 0xb, 0x8, [@broadcast, @broadcast]}]}}, {{0x4e23, 0x4e24, 0x4, 0x1, 0x3, 0x0, 0x0, 0x5, 0x6, "83605b", 0xd, "2fc22a"}, "5708e30547c861a81c60e19962278c04d4eb724d4b54e7e4efa213cc8c25c45278ed8eb0831929e4e56a5e32d5c1e5360c2d428fc51c9b2eabe9ded13c44b6859e512f8c62f0e3158dfeb57a8d24288ddb8f4f3eec3993ff609053393d30e17b5b5f2251ac49b29744b632e46188"}}}, 0x148) socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000000000000000000000000008500000050000000850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) 447.170509ms ago: executing program 1 (id=3323): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff00000000000000", @ANYRES32=0x1, @ANYBLOB="000000907cfc491f0d437243005aa2287fafa420", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000040)={0x53, 0x0, 0x6, 0x0, @buffer={0x17, 0x51, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$usbfs(&(0x7f0000000180), 0xbd, 0x408000) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r3, 0x28, 0x1, &(0x7f0000000140)=0x5, 0x8) 446.301499ms ago: executing program 3 (id=3324): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000200)={[{@abort}, {@jqfmt_vfsv1}]}, 0x1, 0x79c, &(0x7f0000001700)="$eJzs3c9rXNUeAPDvnck0Tdr3kgcP3qurgKCB0ompsVVwUXEhgoWCrm2HyTS0mWRKZlKaELBFBDeCFheCbrquWndu/bHV/8KFtFSbFisuJHInM+00mUmTJpkp5POB255zf53zvef+OJN7mAlgzxpJ/8lEHIqIj5OIocb8JCJy9VRfxInV9e4vLxXTKYmVlbd/T+rr3FteKkbLNqkDjcz/I+KHDyIOZ9aXW11YnC6Uy6W5Rn6sNnNhrLqweOTcTGGqNFWaPTY+MXH0+EvHj+1crH/8vHjw1idvPP/1ib/e/9+Nj35M4kQcbCxrjWOnjMRI45jk0kP4iNd3urAeS3pdAZ5IemlmV6/yOBRDka2nOhjoZs0AgN3yXkSsAAB7TOL5DwB7TPPvAPeWl4rNqbd/keiu269FxP7V+JvvN1eX9DXe2e2vvwcdvJc88mYkiYjhHSh/JCK++PbdL9Mpduk9JEA7l69ExJnhkfX3/2TdmIWtemET66x92+z+B93zXdr/ebld/y/zoP8Tbfo//c2xY9u0dh/rr//MzR0opqO0//dqy9i2+y3xNwxnG7l/1ft8ueTsuXIpvbf9OyJGI9ef5sc3KGP07t93Oy1r7f/duXr+elr+nWxcf7hG5mZf/yObZLcV8Bq3r0Q809cu/uRB+ycd+r+nNlnGm698+HmnZWn8adzNqR7/1fPXtxXUFqxci3iubfs/HNGWtBufOJVrjE8cq58OY82Too1vfvlssFP5re2fTmn5zc8C3ZC2/+DG8Q8nreM1q1sv46drQ993XJh5XPzrzv+YLNQK+5J36ul9jXmXCrXa3HjEvuSt9fOPPty2mW+un8Y/+mz763+j8z/9THhmk/H33frtq07Lnob2n9xS+289ceP+dMd71uPjT9t/op4abcxJ2/9xcW22gts5dgAAAAAAAAAAAAAAAAAAAAAAAACwWZmIOBhJJv8gncnk86u/4f3fGMyUK9Xa4bOV+dnJqP9W9nDkMs2vuhxq+T7U8cb34TfzR9fkX4yI/0TEp/0D9Xy+WClP9jp4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGg40OH3/1O/9ve6dgDArtnf6woAAF3n+Q8Ae8/Wnv8Du1YPAKB7fP4HgL3H8x8A9h7PfwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHbZqZMn02nlz+WlYpqfvLgwP125eGSyVJ3Oz8wX88XK3IX8VKUyVS7li5WZjju6vPpfuVK5MBGz85fGaqVqbay6sHh6pjI/Wzt9bqYwVTpdynUtMgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADYvOrC4nShXC7NbSeR7mgn9tOtRP/TUQ2JriaysXtF5OKJNs9GRK8Py0YXddNAz+5PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAE+7fwIAAP//IIQicg==") bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000300)={0x8, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES8=r0, @ANYBLOB="0000000000000000b7080000300000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x5, 0x9, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) socketpair(0x1e, 0x5, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r2) (async) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) (async) setsockopt$sock_attach_bpf(r2, 0x10e, 0xb, &(0x7f0000000180), 0x4) (async) sendmsg$inet(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000000c0)="7700000018007f1437", 0x9}, {&(0x7f0000000140)="78cabf2dfb73fc0a00250080f2dc0689258f2e1800b8f9e6aaeb1ae2f6c8bcb5ee52dc06249798093c5102a1bca0b646a7ce904f346b788b3219c233e60ddc36024a99a63e72572c9f9b06f96137c8af12b66cb0e031713a0ffb0f5fe4ca08fd3c67e8f319b8f3a9bb2fa7d5ee75", 0x6e}], 0x2}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000080000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000040008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r7}, 0x10) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) (async) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x6, 0x4, 0x5b, 0x8a, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={r8, r9}, 0xc) (async) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r10, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000180)='ext4_ext_show_extent\x00', r4}, 0x10) (async) getsockname$packet(r2, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000480)=0x14) (async) r11 = socket$unix(0x1, 0x2, 0x0) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000180)='ext4_ext_show_extent\x00', r12}, 0x10) (async) bind$unix(r11, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 358.451167ms ago: executing program 1 (id=3325): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000019840)=ANY=[@ANYBLOB="6c0100001700010e0000000000000000fc0100000000000000000000000000000000000000000000200100000000000000000000000000000000000000000000000000000000000020010000000000000000000000000002000000000000000000000020000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000bb00000000000000000000ffffac1414bb00000000000000000a00000029000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000044000500fc0200000000ac1e0001000000000000000000000000000000000e00"/196], 0x16c}, 0x1, 0x0, 0x0, 0x40810}, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0xc0200, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x3) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000160000001811", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r4}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r5}, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000440), r6) sendmsg$NLBL_CALIPSO_C_ADD(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000d40)=ANY=[@ANYRES64, @ANYRES16=r3, @ANYRESOCT, @ANYRES64, @ANYRES32=r0, @ANYBLOB="9be04f69a777fee35957e91a4eaf9452ab8bfeb759a0c6623e2a35d51ca7835fb0a7dd492d6ee2b66a85e2e2892ef68a2f3742dfc4eb4a2e2a5c14321b61204f0cabb0cf763e815558341b29cbe23615e13c7e9f26dbf8c7e95fe394831df11ab80a100083fc4533460108f29c5013c2588ac044111615034e33", @ANYRESOCT=0x0, @ANYBLOB="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", @ANYRESHEX=0x0], 0x54}, 0x1, 0x0, 0x0, 0x44000800}, 0x800) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000880)=ANY=[@ANYBLOB="1400000004000000008000005c000000000000008dfc6b047be5f4158447424c8dd9013936a5f58d14ef95b986df0d04a60b6d8d7aa757aeb32bbe949e5270d6efa6478028fcdd6755e9d9ba82504c0066948180ca0f5ed40d95e35303a5e4186ee09fe7ec2672d0810c9c6302d162a28760c850ec04d28fde0ad6502929568afdc8d717c0c0223dd0ad79109d74c7d5c67019f78e136a2b9470928b7fe8e4cefc5d2ed54c3db1407e9dd25da4167a731c0bf4882c25b5b5e2ff8a73e12395f6f614ae2636bd834abc47e5dfbba52b1a5b92f83067329418bd6d00c97ede4775bef51e30f7951c19e6828f352ba42997184482643647503f748e82f722a0", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000feffffff00"/28], 0x50) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x198}}, 0x4004040) ioctl$PPPIOCATTACH(r2, 0x4004743d, &(0x7f0000000040)=0x3) close(r1) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r7) ptrace$peeksig(0x4209, r7, 0x0, 0x0) getpriority(0x0, r7) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000003c0)=ANY=[]) r8 = memfd_secret(0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0x11, r8, 0x0) write$tun(r8, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x148) socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000000000000000000000000008500000050000000850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) 260.966936ms ago: executing program 2 (id=3326): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket(0x11, 0x800000003, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file0'}, 0xb) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r2, 0x2201, &(0x7f0000000040)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bond0\x00', 0x1000}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89f1, &(0x7f0000000080)) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x20, 0x0, 0x0, 0xfffff024}, {0x6}]}, 0x10) r6 = dup(r3) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000fd0f00000200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000400"/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r9}, 0x10) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100fffe08000a40000000000900020073797a32000000000900010073797a3000000000080005400000000f700000000c0a0103000000a158a5dd00010000000900020073797a32000000004400038040000080080003400000000234000b80200001800a00010071756f7461000000100002800c0001400000000000000000100001800c000100636f756e746572000900010073797a3000000000140000001000010000000000000000000000000a"], 0xf4}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=@newqdisc={0x28, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xfff1}}, [@TCA_STAB={0x4}]}, 0x28}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) write$UHID_INPUT(r6, &(0x7f00000007c0)={0x8, {"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", 0x1000}}, 0x1006) r11 = socket$netlink(0x10, 0x3, 0x0) r12 = openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/power/pm_test', 0x10200, 0x82) connect$inet6(r12, &(0x7f0000000180)={0xa, 0x4e20, 0x8, @private1={0xfc, 0x1, '\x00', 0x1}, 0x9}, 0x1c) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000040)={0x0, 0x3}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp_SCTP_ASSOCINFO(r12, 0x84, 0x1, &(0x7f00000000c0)={r13, 0xffff, 0x8, 0x2, 0x4, 0x1}, &(0x7f0000000100)=0x14) sendmsg$nl_route_sched(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r10, {0x0, 0xa}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}}, 0x0) 198.294112ms ago: executing program 3 (id=3327): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd88500000004000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) bind$inet(r1, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendmsg$xdp(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="d14fe49b82", 0x1a000}], 0x1, 0x0, 0x0, 0x40048c4}, 0x0) 195.497122ms ago: executing program 1 (id=3328): lchown(&(0x7f0000000dc0)='./file0\x00', 0x0, 0xee01) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x14, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r3, &(0x7f0000001e40)={&(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000ac0)=[@mask_fadd={0x58, 0x114, 0x8, {{}, 0x0, 0x0}}], 0x58}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x80201, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000180)=ANY=[@ANYRESDEC=r4], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000200)='./file0\x00', 0x8000, &(0x7f0000000000)=ANY=[], 0x5, 0x7f5, &(0x7f0000001bc0)="$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") r5 = openat$selinux_avc_hash_stats(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) write$vga_arbiter(r5, &(0x7f0000000340), 0xf) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) getdents64(0xffffffffffffffff, 0x0, 0xfffffffffffffd7a) r7 = socket$inet(0x2, 0x2, 0x0) connect$inet(r7, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r7, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00000000000000000000fb036601aadea3084400", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) r8 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$cgroup_pid(r8, &(0x7f00000031c0), 0x12) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000040)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private2}, 0x1c, &(0x7f0000000080)=[{&(0x7f0000000100)}], 0x1}}], 0x1, 0x0) write$rfkill(r4, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x1}, 0x8) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0xff, 0x2, 0x7fff7ffc}]}) close_range(r9, 0xffffffffffffffff, 0x0) write$binfmt_script(r1, &(0x7f0000000300)={'#! ', './file0'}, 0xb) 179.448084ms ago: executing program 2 (id=3329): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r2, &(0x7f0000004440)={&(0x7f0000000ec0)=@id={0x1e, 0x3, 0x2, {0x4e20, 0x4}}, 0x10, 0x0}, 0x20000000) r3 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x409, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, 0x200, 0x1}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_STATE={0x5, 0x1, 0x3}]}}}]}, 0x44}}, 0x2) 14.214848ms ago: executing program 2 (id=3330): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x1, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{r0}, &(0x7f0000000680), &(0x7f00000006c0)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) sched_rr_get_interval(0x0, &(0x7f0000000080)) 13.539009ms ago: executing program 1 (id=3331): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x1, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{r0}, &(0x7f0000000680), &(0x7f00000006c0)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) sched_rr_get_interval(0x0, &(0x7f0000000080)) 0s ago: executing program 2 (id=3332): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8ef8ff00000000bfa200000000080007020000f8ffffffb703000000010000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e00000000000000050000000600000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000f10000000000e500"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = open(&(0x7f00000000c0)='./bus\x00', 0x14103e, 0x0) r5 = open(&(0x7f00000004c0)='./bus\x00', 0x143042, 0x0) ftruncate(r5, 0x2008002) sendfile(r4, r5, 0x0, 0x80000001) getsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000040)={0x0, 0x9, 0x7b, 0x5}, &(0x7f0000000200)=0x10) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r5, 0x84, 0x18, &(0x7f0000000240)={r6, 0x3}, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r8, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r8, 0x1, 0x8, &(0x7f0000000000), 0x4) ioctl$sock_SIOCBRADDBR(r8, 0x89a0, &(0x7f00000002c0)='pim6reg1\x00') sendmsg$nl_route(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@ipv4_newrule={0x2c, 0x20, 0x801, 0x0, 0x0, {0x2, 0x20}, [@FRA_DST={0x8, 0x1, @multicast2}, @FRA_GENERIC_POLICY=@FRA_GOTO={0x8}]}, 0x2c}}, 0x0) socket$pppoe(0x18, 0x1, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r9, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000020000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='kfree\x00', r12}, 0x10) r13 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r11, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000080)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r13, @ANYBLOB="010000000000000000001a0000000c00018008000100", @ANYRES32=r10], 0x20}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) kernel console output (not intermixed with test programs): [ 190.364970][ T29] audit: type=1326 audit(190.101:20102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10640 comm="syz.1.1885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff08fb1dff9 code=0x7ffc0000 [ 190.387974][ T29] audit: type=1326 audit(190.101:20103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10640 comm="syz.1.1885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7ff08fb1dff9 code=0x7ffc0000 [ 190.411006][ T29] audit: type=1326 audit(190.111:20104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10640 comm="syz.1.1885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff08fb1dff9 code=0x7ffc0000 [ 190.434027][ T29] audit: type=1326 audit(190.111:20105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10640 comm="syz.1.1885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7ff08fb1dff9 code=0x7ffc0000 [ 190.532760][T10654] loop0: detected capacity change from 0 to 256 [ 190.643733][T10659] loop3: detected capacity change from 0 to 2364 [ 190.645020][T10666] syz.1.1896[10666] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 190.664290][T10666] syz.1.1896[10666] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 190.706417][T10666] loop1: detected capacity change from 0 to 764 [ 190.750852][T10670] syz.3.1892[10670] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 190.760025][T10666] iso9660: Unknown parameter '' [ 190.802200][T10674] loop0: detected capacity change from 0 to 512 [ 190.882935][T10678] netlink: 'syz.0.1901': attribute type 4 has an invalid length. [ 190.985845][T10676] loop1: detected capacity change from 0 to 256 [ 191.026095][T10676] FAT-fs (loop1): Directory bread(block 64) failed [ 191.035455][T10676] FAT-fs (loop1): Directory bread(block 65) failed [ 191.049895][T10676] FAT-fs (loop1): Directory bread(block 66) failed [ 191.059817][T10676] FAT-fs (loop1): Directory bread(block 67) failed [ 191.066446][T10676] FAT-fs (loop1): Directory bread(block 68) failed [ 191.095180][T10676] FAT-fs (loop1): Directory bread(block 69) failed [ 191.115776][T10686] loop3: detected capacity change from 0 to 256 [ 191.122143][T10676] FAT-fs (loop1): Directory bread(block 70) failed [ 191.128717][T10676] FAT-fs (loop1): Directory bread(block 71) failed [ 191.142072][T10686] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 191.163335][T10676] FAT-fs (loop1): Directory bread(block 72) failed [ 191.179817][T10676] FAT-fs (loop1): Directory bread(block 73) failed [ 191.252850][T10676] syz.1.1900: attempt to access beyond end of device [ 191.252850][T10676] loop1: rw=524288, sector=1736, nr_sectors = 32 limit=256 [ 191.297047][T10676] syz.1.1900: attempt to access beyond end of device [ 191.297047][T10676] loop1: rw=0, sector=1736, nr_sectors = 8 limit=256 [ 191.414752][T10701] loop0: detected capacity change from 0 to 512 [ 191.546828][T10711] loop1: detected capacity change from 0 to 256 [ 191.568858][T10711] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 191.724411][T10723] loop1: detected capacity change from 0 to 256 [ 191.747854][T10693] loop3: detected capacity change from 0 to 764 [ 191.799125][T10723] FAT-fs (loop1): Directory bread(block 64) failed [ 191.820201][T10723] FAT-fs (loop1): Directory bread(block 65) failed [ 191.826747][T10723] FAT-fs (loop1): Directory bread(block 66) failed [ 191.859837][T10723] FAT-fs (loop1): Directory bread(block 67) failed [ 191.866408][T10723] FAT-fs (loop1): Directory bread(block 68) failed [ 191.890922][T10723] FAT-fs (loop1): Directory bread(block 69) failed [ 191.899284][T10723] FAT-fs (loop1): Directory bread(block 70) failed [ 191.910590][T10723] FAT-fs (loop1): Directory bread(block 71) failed [ 191.927219][T10723] FAT-fs (loop1): Directory bread(block 72) failed [ 191.940885][T10723] FAT-fs (loop1): Directory bread(block 73) failed [ 192.030158][T10736] syz.1.1923: attempt to access beyond end of device [ 192.030158][T10736] loop1: rw=524288, sector=1736, nr_sectors = 32 limit=256 [ 192.045365][T10736] syz.1.1923: attempt to access beyond end of device [ 192.045365][T10736] loop1: rw=0, sector=1736, nr_sectors = 8 limit=256 [ 192.157639][T10731] sd 0:0:1:0: device reset [ 192.197256][T10741] loop1: detected capacity change from 0 to 256 [ 192.234280][T10741] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 192.349255][T10750] loop1: detected capacity change from 0 to 764 [ 192.361114][T10750] iso9660: Unknown parameter '' [ 192.482900][T10608] loop4: detected capacity change from 0 to 2048 [ 192.497851][T10608] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 192.532977][T10619] loop2: detected capacity change from 0 to 2048 [ 192.553367][T10619] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 192.783443][ T7495] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.809052][ T7229] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.894596][T10778] loop2: detected capacity change from 0 to 256 [ 192.912383][T10781] loop0: detected capacity change from 0 to 164 [ 192.929088][T10781] iso9660: Unknown parameter 'h ŏ.&jZ0EeB9Ĕ%x[' [ 192.951229][T10778] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 193.010956][T10781] program syz.0.1943 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 193.055932][T10792] program syz.2.1952 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 193.129501][T10800] loop4: detected capacity change from 0 to 764 [ 193.144441][T10800] iso9660: Unknown parameter '' [ 193.404377][T10815] bpf_get_probe_write_proto: 6 callbacks suppressed [ 193.404393][T10815] syz.4.1962[10815] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 193.428701][T10791] loop1: detected capacity change from 0 to 2048 [ 193.446788][T10815] syz.4.1962[10815] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 193.458411][T10815] loop4: detected capacity change from 0 to 764 [ 193.496437][T10815] iso9660: Unknown parameter '' [ 193.558003][T10817] loop4: detected capacity change from 0 to 256 [ 193.573852][T10817] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 193.592537][T10791] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 193.740046][T10820] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 193.764213][T10828] loop4: detected capacity change from 0 to 512 [ 193.860332][T10828] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 193.871779][T10843] netlink: 'syz.0.1973': attribute type 4 has an invalid length. [ 193.933799][ T7229] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.002520][ T5739] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.115335][T10865] loop4: detected capacity change from 0 to 256 [ 194.132454][T10867] syz.1.1979[10867] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 194.132608][T10867] syz.1.1979[10867] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 194.144216][T10867] syz.1.1979[10867] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 194.166412][T10865] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 194.191968][T10867] loop1: detected capacity change from 0 to 128 [ 194.193539][T10872] loop3: detected capacity change from 0 to 512 [ 194.200888][T10867] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 194.224459][T10876] netlink: 'syz.0.1987': attribute type 4 has an invalid length. [ 194.264400][T10867] hub 9-0:1.0: USB hub found [ 194.269401][T10872] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 194.276234][T10867] hub 9-0:1.0: 8 ports detected [ 194.300442][ T9966] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.317948][ T5739] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 194.454448][T10905] loop1: detected capacity change from 0 to 256 [ 194.469174][T10905] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 194.754541][T10939] loop0: detected capacity change from 0 to 256 [ 194.926836][T10884] loop4: detected capacity change from 0 to 2048 [ 195.022436][T10884] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 195.073639][T10970] loop2: detected capacity change from 0 to 256 [ 195.106293][ T29] kauditd_printk_skb: 3412 callbacks suppressed [ 195.106307][ T29] audit: type=1326 audit(194.931:23518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10971 comm="syz.1.2030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff08fb1dff9 code=0x7ffc0000 [ 195.107060][T10970] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 195.148185][ T29] audit: type=1326 audit(194.971:23519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10971 comm="syz.1.2030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff08fb1dff9 code=0x7ffc0000 [ 195.171319][ T29] audit: type=1326 audit(194.971:23520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10971 comm="syz.1.2030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff08fb1dff9 code=0x7ffc0000 [ 195.210961][ T29] audit: type=1326 audit(194.971:23521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10971 comm="syz.1.2030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff08fb1dff9 code=0x7ffc0000 [ 195.234112][ T29] audit: type=1326 audit(194.971:23522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10971 comm="syz.1.2030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff08fb1dff9 code=0x7ffc0000 [ 195.257164][ T29] audit: type=1326 audit(194.971:23523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10971 comm="syz.1.2030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7ff08fb1dff9 code=0x7ffc0000 [ 195.280311][ T29] audit: type=1326 audit(194.971:23524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10971 comm="syz.1.2030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff08fb1dff9 code=0x7ffc0000 [ 195.303421][ T29] audit: type=1326 audit(194.971:23525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10971 comm="syz.1.2030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7ff08fb1dff9 code=0x7ffc0000 [ 195.326681][ T29] audit: type=1326 audit(194.971:23526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10971 comm="syz.1.2030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff08fb1dff9 code=0x7ffc0000 [ 195.349673][ T29] audit: type=1326 audit(194.971:23527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10971 comm="syz.1.2030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7ff08fb1dff9 code=0x7ffc0000 [ 195.528034][ T7229] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.575659][T10996] loop2: detected capacity change from 0 to 1024 [ 195.580882][T11007] loop0: detected capacity change from 0 to 256 [ 195.605835][T11009] netlink: 'syz.4.2045': attribute type 4 has an invalid length. [ 195.623715][T10996] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 195.766937][ T7495] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.802491][T11038] loop2: detected capacity change from 0 to 256 [ 195.815363][T11040] syz.0.2063[11040] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 195.815464][T11040] syz.0.2063[11040] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 195.820903][T11038] FAT-fs (loop2): Directory bread(block 64) failed [ 195.833661][T11040] loop0: detected capacity change from 0 to 764 [ 195.840150][T11038] FAT-fs (loop2): Directory bread(block 65) failed [ 195.861097][T11040] iso9660: Unknown parameter '' [ 195.868523][T11038] FAT-fs (loop2): Directory bread(block 66) failed [ 195.876562][T11038] FAT-fs (loop2): Directory bread(block 67) failed [ 195.893885][T11038] FAT-fs (loop2): Directory bread(block 68) failed [ 195.903682][T11038] FAT-fs (loop2): Directory bread(block 69) failed [ 195.917171][T11038] FAT-fs (loop2): Directory bread(block 70) failed [ 195.929038][T11038] FAT-fs (loop2): Directory bread(block 71) failed [ 195.937542][T11038] FAT-fs (loop2): Directory bread(block 72) failed [ 195.944201][T11038] FAT-fs (loop2): Directory bread(block 73) failed [ 195.976286][T11038] syz.2.2060: attempt to access beyond end of device [ 195.976286][T11038] loop2: rw=524288, sector=1736, nr_sectors = 32 limit=256 [ 196.009712][T11038] syz.2.2060: attempt to access beyond end of device [ 196.009712][T11038] loop2: rw=0, sector=1736, nr_sectors = 8 limit=256 [ 196.081032][T11058] loop2: detected capacity change from 0 to 2364 [ 196.153527][T11067] syz.2.2071[11067] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 196.153612][T11067] syz.2.2071[11067] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 196.167149][T11067] syz.2.2071[11067] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 196.191750][T11070] loop4: detected capacity change from 0 to 512 [ 196.236349][T11070] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 196.280313][ T7229] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.461689][T11093] loop0: detected capacity change from 0 to 256 [ 196.564582][T11103] loop4: detected capacity change from 0 to 512 [ 196.584140][T11103] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 196.614330][T11027] loop1: detected capacity change from 0 to 2048 [ 196.635343][T11027] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 196.661865][ T7229] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.762499][ T5739] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.902345][T11130] loop4: detected capacity change from 0 to 256 [ 196.924419][T11130] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 196.995084][T11138] loop2: detected capacity change from 0 to 512 [ 197.016251][T11138] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 197.037319][T11122] loop1: detected capacity change from 0 to 764 [ 197.082589][ T7495] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.088201][T11146] loop4: detected capacity change from 0 to 256 [ 197.119075][T11148] loop1: detected capacity change from 0 to 764 [ 197.137100][T11148] iso9660: Unknown parameter '' [ 197.158002][T11152] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2106'. [ 197.255712][T11167] loop2: detected capacity change from 0 to 256 [ 197.265228][T11167] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 197.308471][T11173] netlink: 'syz.2.2118': attribute type 4 has an invalid length. [ 197.529664][T11202] netlink: 'syz.3.2132': attribute type 4 has an invalid length. [ 197.542330][T11198] loop1: detected capacity change from 0 to 256 [ 197.562709][T11198] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 197.643735][T11179] loop2: detected capacity change from 0 to 764 [ 197.711440][T11215] loop2: detected capacity change from 0 to 764 [ 197.720382][T11215] iso9660: Unknown parameter '' [ 197.803782][T11232] netlink: 'syz.1.2144': attribute type 4 has an invalid length. [ 197.974882][T11258] netlink: 'syz.2.2160': attribute type 4 has an invalid length. [ 198.171303][T11294] loop4: detected capacity change from 0 to 512 [ 198.202507][T11294] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 198.258062][T11287] sd 0:0:1:0: device reset [ 198.332514][ T7229] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.338305][T11325] bpf_get_probe_write_proto: 4 callbacks suppressed [ 199.338320][T11325] syz.2.2189[11325] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 199.361070][T11325] syz.2.2189[11325] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 199.377047][T11325] loop2: detected capacity change from 0 to 764 [ 199.395362][T11325] iso9660: Unknown parameter '' [ 199.422395][T11337] loop1: detected capacity change from 0 to 512 [ 199.453406][T11337] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 199.546119][ T5739] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.566209][T11332] sd 0:0:1:0: device reset [ 199.667464][T11336] loop4: detected capacity change from 0 to 256 [ 199.712004][T11336] msdos: Bad value for 'gid' [ 199.716666][T11336] msdos: Bad value for 'gid' [ 199.893336][T11357] loop3: detected capacity change from 0 to 2364 [ 199.988857][T11363] syz.0.2206[11363] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 199.988946][T11363] syz.0.2206[11363] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 200.019356][T11363] loop0: detected capacity change from 0 to 764 [ 200.024766][T11365] loop1: detected capacity change from 0 to 2364 [ 200.031040][T11363] iso9660: Unknown parameter '' [ 200.046937][T11370] syz.3.2203[11370] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 200.048571][T11370] syz.3.2203[11370] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 200.079965][T11370] syz.3.2203[11370] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 200.115542][T11376] syz.1.2198[11376] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 200.127152][T11376] syz.1.2198[11376] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 200.138805][T11376] syz.1.2198[11376] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 200.158231][ T29] kauditd_printk_skb: 1180 callbacks suppressed [ 200.158244][ T29] audit: type=1326 audit(199.981:24708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11367 comm="syz.3.2203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7fc2a787dff9 code=0x7ffc0000 [ 200.199297][ T29] audit: type=1326 audit(199.991:24709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11355 comm="syz.3.2203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2a787dff9 code=0x7ffc0000 [ 200.222324][ T29] audit: type=1326 audit(199.991:24710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11355 comm="syz.3.2203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2a787dff9 code=0x7ffc0000 [ 200.252843][ T29] audit: type=1326 audit(200.081:24711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11374 comm="syz.1.2198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7ff08fb1dff9 code=0x7ffc0000 [ 200.295442][ T29] audit: type=1326 audit(200.111:24712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11364 comm="syz.1.2198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff08fb1dff9 code=0x7ffc0000 [ 200.319066][ T29] audit: type=1326 audit(200.111:24713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11364 comm="syz.1.2198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff08fb1dff9 code=0x7ffc0000 [ 200.363568][T11382] netlink: 'syz.2.2212': attribute type 4 has an invalid length. [ 200.387932][ T29] audit: type=1326 audit(200.211:24714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11383 comm="syz.3.2211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2a787dff9 code=0x7ffc0000 [ 200.412695][ T29] audit: type=1326 audit(200.211:24715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11383 comm="syz.3.2211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2a787dff9 code=0x7ffc0000 [ 200.436106][ T29] audit: type=1326 audit(200.211:24716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11383 comm="syz.3.2211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc2a787dff9 code=0x7ffc0000 [ 200.459164][ T29] audit: type=1326 audit(200.211:24717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11383 comm="syz.3.2211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2a787dff9 code=0x7ffc0000 [ 200.484943][T11397] loop2: detected capacity change from 0 to 764 [ 200.492561][T11397] iso9660: Unknown parameter '' [ 200.532903][T11400] loop2: detected capacity change from 0 to 2364 [ 200.648297][T11414] loop0: detected capacity change from 0 to 512 [ 201.100460][T11432] loop0: detected capacity change from 0 to 764 [ 201.116915][T11432] iso9660: Unknown parameter '' [ 201.151231][T11439] loop2: detected capacity change from 0 to 764 [ 201.157730][T11439] iso9660: Unknown parameter '' [ 201.231959][T11451] loop3: detected capacity change from 0 to 512 [ 201.278148][T11459] loop0: detected capacity change from 0 to 2364 [ 201.292051][T11451] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 201.312288][T11461] loop4: detected capacity change from 0 to 256 [ 201.319667][T11461] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 201.337331][ T9966] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.372638][T11467] loop4: detected capacity change from 0 to 764 [ 201.388170][T11467] iso9660: Unknown parameter '' [ 201.524740][T11481] loop1: detected capacity change from 0 to 764 [ 201.552590][T11481] iso9660: Unknown parameter '' [ 201.554875][T11490] loop4: detected capacity change from 0 to 512 [ 201.672842][T11490] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 201.794861][ T7229] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.953809][T11517] loop0: detected capacity change from 0 to 2364 [ 202.188352][T11527] loop4: detected capacity change from 0 to 764 [ 202.196690][T11527] iso9660: Unknown parameter '' [ 202.275604][T11541] netlink: 'syz.0.2284': attribute type 4 has an invalid length. [ 202.396162][T11559] loop4: detected capacity change from 0 to 2364 [ 202.478349][T11565] loop3: detected capacity change from 0 to 2364 [ 202.562507][T11579] netlink: 'syz.1.2301': attribute type 4 has an invalid length. [ 202.773986][T11592] loop4: detected capacity change from 0 to 764 [ 202.798244][T11592] iso9660: Unknown parameter '' [ 203.025865][T11625] loop1: detected capacity change from 0 to 764 [ 203.061282][T11625] iso9660: Unknown parameter '' [ 203.302783][T11661] loop1: detected capacity change from 0 to 256 [ 203.325831][T11661] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 203.350810][ C1] Dead loop on virtual device ipvlan1, fix it urgently! [ 203.394165][T11660] loop4: detected capacity change from 0 to 764 [ 203.416034][T11670] loop3: detected capacity change from 0 to 256 [ 203.420103][T11660] iso9660: Unknown parameter '' [ 203.442363][T11670] FAT-fs (loop3): Directory bread(block 64) failed [ 203.456811][T11670] FAT-fs (loop3): Directory bread(block 65) failed [ 203.463799][T11670] FAT-fs (loop3): Directory bread(block 66) failed [ 203.473209][T11670] FAT-fs (loop3): Directory bread(block 67) failed [ 203.479889][T11670] FAT-fs (loop3): Directory bread(block 68) failed [ 203.486496][T11670] FAT-fs (loop3): Directory bread(block 69) failed [ 203.507661][T11670] FAT-fs (loop3): Directory bread(block 70) failed [ 203.525663][T11670] FAT-fs (loop3): Directory bread(block 71) failed [ 203.538738][T11670] FAT-fs (loop3): Directory bread(block 72) failed [ 203.555414][T11670] FAT-fs (loop3): Directory bread(block 73) failed [ 203.635993][T11670] syz.3.2344: attempt to access beyond end of device [ 203.635993][T11670] loop3: rw=524288, sector=1736, nr_sectors = 32 limit=256 [ 203.654618][T11670] syz.3.2344: attempt to access beyond end of device [ 203.654618][T11670] loop3: rw=0, sector=1736, nr_sectors = 8 limit=256 [ 203.743855][T11571] loop0: detected capacity change from 0 to 2048 [ 203.759365][T11696] loop3: detected capacity change from 0 to 256 [ 203.774603][T11696] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 203.847065][T11698] loop1: detected capacity change from 0 to 764 [ 203.854652][T11698] iso9660: Unknown parameter '' [ 203.905771][T11702] loop3: detected capacity change from 0 to 512 [ 203.941418][T11702] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 204.001398][ T9966] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.172137][T11727] loop1: detected capacity change from 0 to 256 [ 204.179412][T11727] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 204.217312][T11734] loop3: detected capacity change from 0 to 2364 [ 204.258298][T11740] loop2: detected capacity change from 0 to 512 [ 204.329565][T11740] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 204.393988][ T7495] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.565551][T11774] loop2: detected capacity change from 0 to 256 [ 204.609256][T11782] loop4: detected capacity change from 0 to 2364 [ 204.631092][T11783] netlink: 'syz.3.2391': attribute type 4 has an invalid length. [ 204.637393][T11774] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 204.692393][T11782] vhci_hcd: default hub control req: 4014 v0000 i0000 l0 [ 204.729096][T11790] bpf_get_probe_write_proto: 40 callbacks suppressed [ 204.729112][T11790] syz.3.2397[11790] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 204.736372][T11790] syz.3.2397[11790] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 204.764231][T11790] loop3: detected capacity change from 0 to 764 [ 204.767790][T11792] loop0: detected capacity change from 0 to 512 [ 204.777178][T11790] iso9660: Unknown parameter '' [ 204.877343][T11805] loop2: detected capacity change from 0 to 2364 [ 204.963379][T11822] syz.0.2412[11822] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 204.963522][T11822] syz.0.2412[11822] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 204.975233][T11822] syz.0.2412[11822] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 204.992371][T11822] loop0: detected capacity change from 0 to 764 [ 205.010518][T11822] iso9660: Unknown parameter '' [ 205.204135][ T29] kauditd_printk_skb: 1778 callbacks suppressed [ 205.204183][ T29] audit: type=1326 audit(205.021:26496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11848 comm="syz.1.2425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff08fb1dff9 code=0x7ffc0000 [ 205.233644][ T29] audit: type=1326 audit(205.021:26497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11848 comm="syz.1.2425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff08fb1dff9 code=0x7ffc0000 [ 205.256717][ T29] audit: type=1326 audit(205.021:26498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11848 comm="syz.1.2425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff08fb1dff9 code=0x7ffc0000 [ 205.268466][T11852] syz.2.2427[11852] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 205.279877][ T29] audit: type=1326 audit(205.021:26499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11848 comm="syz.1.2425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff08fb1dff9 code=0x7ffc0000 [ 205.279904][ T29] audit: type=1326 audit(205.021:26500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11848 comm="syz.1.2425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff08fb1dff9 code=0x7ffc0000 [ 205.309890][T11852] syz.2.2427[11852] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 205.314378][ T29] audit: type=1326 audit(205.021:26501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11848 comm="syz.1.2425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff08fb1dff9 code=0x7ffc0000 [ 205.371732][ T29] audit: type=1326 audit(205.021:26502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11848 comm="syz.1.2425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff08fb1dff9 code=0x7ffc0000 [ 205.372060][T11856] loop2: detected capacity change from 0 to 764 [ 205.394800][ T29] audit: type=1326 audit(205.021:26503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11848 comm="syz.1.2425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7ff08fb1dff9 code=0x7ffc0000 [ 205.424131][ T29] audit: type=1326 audit(205.021:26504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11848 comm="syz.1.2425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff08fb1dff9 code=0x7ffc0000 [ 205.425595][T11852] syz.2.2427[11852] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 205.447358][ T29] audit: type=1326 audit(205.021:26505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11848 comm="syz.1.2425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7ff08fb1dff9 code=0x7ffc0000 [ 205.484961][T11856] iso9660: Unknown parameter '' [ 205.500027][T11861] netlink: 'syz.0.2428': attribute type 4 has an invalid length. [ 205.612399][T11869] loop2: detected capacity change from 0 to 2364 [ 205.734086][T11892] syz.4.2444[11892] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 205.734404][T11892] syz.4.2444[11892] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 205.756418][T11892] loop4: detected capacity change from 0 to 764 [ 205.782126][T11892] iso9660: Unknown parameter '' [ 205.784119][T11896] netlink: 'syz.0.2446': attribute type 4 has an invalid length. [ 205.841204][T11900] loop0: detected capacity change from 0 to 512 [ 206.015118][T11922] netlink: 'syz.2.2459': attribute type 4 has an invalid length. [ 206.019120][T11920] loop4: detected capacity change from 0 to 764 [ 206.037333][T11920] iso9660: Unknown parameter '' [ 206.043696][T11924] loop0: detected capacity change from 0 to 512 [ 206.107383][T11926] loop2: detected capacity change from 0 to 2364 [ 206.277493][T11949] loop0: detected capacity change from 0 to 2364 [ 206.293279][T11949] vhci_hcd: default hub control req: 4014 v0000 i0000 l0 [ 206.354334][T11952] loop4: detected capacity change from 0 to 764 [ 206.373950][T11952] iso9660: Unknown parameter '' [ 206.551589][T11974] loop2: detected capacity change from 0 to 2364 [ 206.580807][T11974] vhci_hcd: default hub control req: 4014 v0000 i0000 l0 [ 206.638590][T11979] loop1: detected capacity change from 0 to 2364 [ 206.683062][T11986] loop0: detected capacity change from 0 to 512 [ 206.685015][T11989] loop4: detected capacity change from 0 to 256 [ 206.704058][T11989] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 206.803856][T11816] loop3: detected capacity change from 0 to 2048 [ 206.822444][T11816] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 206.860113][ T9966] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 206.864689][T11996] netlink: 'syz.4.2491': attribute type 4 has an invalid length. [ 206.942326][T11998] loop2: detected capacity change from 0 to 256 [ 206.954677][T11998] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 206.970432][T12010] loop3: detected capacity change from 0 to 512 [ 206.992485][T12010] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 207.044714][ T9966] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 207.086546][T12026] vhci_hcd: default hub control req: 4014 v0000 i0000 l0 [ 207.095659][T12027] loop1: detected capacity change from 0 to 256 [ 207.103380][T12027] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 207.142361][T12031] netlink: 'syz.1.2504': attribute type 4 has an invalid length. [ 207.157340][T12029] loop3: detected capacity change from 0 to 256 [ 207.175532][T12029] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 207.238162][T12036] loop3: detected capacity change from 0 to 2364 [ 207.274314][T12038] loop1: detected capacity change from 0 to 256 [ 207.288414][T12038] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 207.407329][T12048] loop1: detected capacity change from 0 to 512 [ 207.432309][T12048] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 207.477559][T12052] vhci_hcd: default hub control req: 4014 v0000 i0000 l0 [ 207.527389][T12024] loop2: detected capacity change from 0 to 2048 [ 207.528327][ T5739] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 207.591508][T12024] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 207.624826][T12060] netlink: 'syz.3.2518': attribute type 4 has an invalid length. [ 207.641495][T12063] vhci_hcd: default hub control req: 4014 v0000 i0000 l0 [ 207.891713][T12089] loop4: detected capacity change from 0 to 512 [ 207.902877][T12089] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 207.903826][T12091] netlink: 'syz.1.2531': attribute type 4 has an invalid length. [ 207.930500][ T7495] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 207.978143][T12100] vhci_hcd: default hub control req: 4014 v0000 i0000 l0 [ 207.988797][T12101] netlink: 'syz.1.2535': attribute type 4 has an invalid length. [ 208.046020][T12109] loop3: detected capacity change from 0 to 764 [ 208.064948][T12109] iso9660: Unknown parameter '' [ 208.067580][T12113] loop1: detected capacity change from 0 to 512 [ 208.107064][T12113] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 208.141518][T12122] loop2: detected capacity change from 0 to 256 [ 208.150910][T12122] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 208.156899][ T5739] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 208.281680][T12137] netlink: 'syz.2.2550': attribute type 4 has an invalid length. [ 208.346130][T12143] loop1: detected capacity change from 0 to 764 [ 208.355581][T12143] iso9660: Unknown parameter '' [ 208.576922][T12170] netlink: 'syz.1.2566': attribute type 4 has an invalid length. [ 208.622723][T12175] loop0: detected capacity change from 0 to 512 [ 208.682692][ T7229] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 208.824594][T12194] loop4: detected capacity change from 0 to 256 [ 208.858396][T12194] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 208.969608][T12217] loop4: detected capacity change from 0 to 512 [ 209.033482][T12217] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 209.086134][T12233] loop1: detected capacity change from 0 to 764 [ 209.099190][T12233] iso9660: Unknown parameter '' [ 209.221246][ T7229] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 209.250746][T12249] netlink: 'syz.1.2603': attribute type 4 has an invalid length. [ 209.279659][T12253] loop2: detected capacity change from 0 to 2364 [ 209.439134][T12277] loop1: detected capacity change from 0 to 512 [ 209.486052][T12277] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 209.521606][T12290] netlink: 'syz.4.2621': attribute type 4 has an invalid length. [ 209.620665][T12121] loop3: detected capacity change from 0 to 2048 [ 209.708123][ T5739] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 209.732197][T12121] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 209.784425][T12314] loop2: detected capacity change from 0 to 512 [ 209.833638][T12318] netlink: 'syz.0.2634': attribute type 4 has an invalid length. [ 209.873305][T12314] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 209.959054][ T7495] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 209.994596][T12332] loop1: detected capacity change from 0 to 2364 [ 210.082837][T12345] bpf_get_probe_write_proto: 16 callbacks suppressed [ 210.082893][T12345] syz.2.2646[12345] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 210.089634][T12345] syz.2.2646[12345] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 210.115415][T12345] loop2: detected capacity change from 0 to 764 [ 210.135626][T12345] iso9660: Unknown parameter '' [ 210.194255][T12350] netlink: 'syz.4.2648': attribute type 4 has an invalid length. [ 210.198834][T12352] loop2: detected capacity change from 0 to 512 [ 210.216770][ T29] kauditd_printk_skb: 1279 callbacks suppressed [ 210.216784][ T29] audit: type=1326 audit(210.041:27785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12120 comm="syz.3.2544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc2a7819959 code=0x7ffc0000 [ 210.246074][ T29] audit: type=1326 audit(210.041:27786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12120 comm="syz.3.2544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc2a7874fa7 code=0x7ffc0000 [ 210.269220][ T29] audit: type=1326 audit(210.041:27787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12120 comm="syz.3.2544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc2a7819959 code=0x7ffc0000 [ 210.292257][ T29] audit: type=1326 audit(210.041:27788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12120 comm="syz.3.2544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2a787dff9 code=0x7ffc0000 [ 210.316746][ T29] audit: type=1326 audit(210.041:27789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12120 comm="syz.3.2544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc2a7874fa7 code=0x7ffc0000 [ 210.339864][ T29] audit: type=1326 audit(210.041:27790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12120 comm="syz.3.2544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc2a7819959 code=0x7ffc0000 [ 210.362876][ T29] audit: type=1326 audit(210.041:27791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12120 comm="syz.3.2544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc2a7874fa7 code=0x7ffc0000 [ 210.385796][ T29] audit: type=1326 audit(210.041:27792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12120 comm="syz.3.2544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc2a7819959 code=0x7ffc0000 [ 210.408882][ T29] audit: type=1326 audit(210.041:27793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12120 comm="syz.3.2544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc2a7874fa7 code=0x7ffc0000 [ 210.431820][ T29] audit: type=1326 audit(210.041:27794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12120 comm="syz.3.2544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc2a7819959 code=0x7ffc0000 [ 210.442446][T12352] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 210.560995][T12365] loop1: detected capacity change from 0 to 512 [ 210.603550][T12365] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 210.622657][T12368] loop0: detected capacity change from 0 to 256 [ 210.630989][ T7495] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 210.828038][T12398] netlink: 'syz.1.2670': attribute type 4 has an invalid length. [ 210.898708][T12410] loop2: detected capacity change from 0 to 256 [ 210.900561][T12409] loop3: detected capacity change from 0 to 512 [ 210.918101][T12410] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 211.241869][T12457] loop2: detected capacity change from 0 to 512 [ 211.256704][ T50] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.315633][ T50] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.393232][T12420] chnl_net:caif_netlink_parms(): no params data found [ 211.418313][ T50] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.486368][ T50] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.525229][T12484] syz.2.2699[12484] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 211.525357][T12484] syz.2.2699[12484] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 211.541885][T12484] loop2: detected capacity change from 0 to 764 [ 211.561472][T12484] iso9660: Unknown parameter '' [ 211.592007][T12420] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.599079][T12420] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.636036][T12420] bridge_slave_0: entered allmulticast mode [ 211.645614][T12420] bridge_slave_0: entered promiscuous mode [ 211.676850][T12420] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.684054][T12420] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.697363][T12420] bridge_slave_1: entered allmulticast mode [ 211.704241][T12420] bridge_slave_1: entered promiscuous mode [ 211.722505][ T50] bridge_slave_1: left allmulticast mode [ 211.728407][ T50] bridge_slave_1: left promiscuous mode [ 211.734093][ T50] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.833812][T12417] loop4: detected capacity change from 0 to 2048 [ 211.843311][ T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 211.854944][ T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 211.866526][ T50] bond0 (unregistering): Released all slaves [ 211.878591][ T50] bond1 (unregistering): Released all slaves [ 211.906966][T12420] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 211.928992][T12420] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 211.941269][ T50] tipc: Left network mode [ 211.955341][ T50] hsr_slave_0: left promiscuous mode [ 211.961644][ T50] hsr_slave_1: left promiscuous mode [ 211.968743][ T50] veth1_vlan: left promiscuous mode [ 211.974110][ T50] veth0_vlan: left promiscuous mode [ 212.091509][ T50] team0 (unregistering): Port device team_slave_1 removed [ 212.102111][ T50] team0 (unregistering): Port device team_slave_0 removed [ 212.158790][T12420] team0: Port device team_slave_0 added [ 212.169532][T12420] team0: Port device team_slave_1 added [ 212.202740][T12420] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 212.209689][T12420] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 212.235817][T12420] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 212.249358][T12420] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 212.256405][T12420] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 212.282428][T12420] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 212.325453][T12420] hsr_slave_0: entered promiscuous mode [ 212.331823][T12420] hsr_slave_1: entered promiscuous mode [ 212.339997][T12420] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 212.347716][T12420] Cannot create hsr debugfs directory [ 212.402975][T12542] syz.2.2711[12542] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 212.403035][T12542] syz.2.2711[12542] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 212.438222][T12542] loop2: detected capacity change from 0 to 764 [ 212.480227][T12542] iso9660: Unknown parameter '' [ 212.566813][T12573] loop4: detected capacity change from 0 to 256 [ 212.575503][T12573] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 212.888741][T12605] syz.4.2731[12605] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 212.888798][T12605] syz.4.2731[12605] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 212.909435][T12605] loop4: detected capacity change from 0 to 764 [ 213.286343][T12605] iso9660: Unknown parameter '' [ 213.308534][T12621] loop2: detected capacity change from 0 to 256 [ 213.345700][T12621] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 213.442144][T12632] validate_nla: 1 callbacks suppressed [ 213.442159][T12632] netlink: 'syz.4.2737': attribute type 4 has an invalid length. [ 213.502711][T12636] loop4: detected capacity change from 0 to 256 [ 213.516381][T12420] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 213.532155][T12420] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 213.532252][T12636] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 213.563645][T12420] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 213.577338][T12420] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 213.705844][T12420] 8021q: adding VLAN 0 to HW filter on device bond0 [ 213.717614][T12420] 8021q: adding VLAN 0 to HW filter on device team0 [ 213.735559][T12420] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 213.746053][T12420] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 213.761749][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.768891][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 213.781716][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.788800][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 213.845226][T12667] syz.4.2747[12667] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 213.845320][T12667] syz.4.2747[12667] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 213.849934][T12420] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 213.892883][T12667] loop4: detected capacity change from 0 to 764 [ 213.912664][T12673] loop2: detected capacity change from 0 to 512 [ 213.932406][T12667] iso9660: Unknown parameter '' [ 213.939671][T12683] loop3: detected capacity change from 0 to 256 [ 213.947647][T12683] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 214.051120][T12687] netlink: 'syz.3.2749': attribute type 4 has an invalid length. [ 214.068660][T12564] loop1: detected capacity change from 0 to 2048 [ 214.068764][T12692] loop4: detected capacity change from 0 to 256 [ 214.128714][T12692] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 214.158909][T12420] veth0_vlan: entered promiscuous mode [ 214.204557][T12420] veth1_vlan: entered promiscuous mode [ 214.265329][T12420] veth0_macvtap: entered promiscuous mode [ 214.272891][T12420] veth1_macvtap: entered promiscuous mode [ 214.282864][T12420] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 214.293383][T12420] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.303299][T12420] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 214.313810][T12420] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.323627][T12420] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 214.334088][T12420] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.343941][T12420] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 214.354362][T12420] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.364172][T12420] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 214.374588][T12420] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.385119][T12420] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 214.395619][T12420] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.406526][T12420] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 214.414610][T12420] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 214.425099][T12420] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.434933][T12420] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 214.438446][T12723] loop3: detected capacity change from 0 to 256 [ 214.445361][T12420] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.445379][T12420] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 214.463819][T12723] msdos: Bad value for 'gid' [ 214.471898][T12420] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.471915][T12420] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 214.471930][T12420] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.471942][T12420] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 214.476567][T12723] msdos: Bad value for 'gid' [ 214.486354][T12420] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.486369][T12420] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 214.542390][T12420] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.553338][T12420] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 214.561976][T12420] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.570851][T12420] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.579540][T12420] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.588331][T12420] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.667021][T12739] loop4: detected capacity change from 0 to 764 [ 214.698156][T12739] iso9660: Unknown parameter '' [ 214.755921][T12752] netlink: 'syz.4.2764': attribute type 4 has an invalid length. [ 214.838235][T12757] loop4: detected capacity change from 0 to 2364 [ 214.873619][T12766] loop3: detected capacity change from 0 to 256 [ 214.905137][T12766] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 215.022486][T12781] loop4: detected capacity change from 0 to 256 [ 215.035426][T12781] msdos: Bad value for 'gid' [ 215.040168][T12781] msdos: Bad value for 'gid' [ 215.056736][T12791] loop3: detected capacity change from 0 to 764 [ 215.085217][T12791] iso9660: Unknown parameter '' [ 215.140344][T12808] netlink: 'syz.4.2780': attribute type 4 has an invalid length. [ 215.183541][T12810] loop3: detected capacity change from 0 to 2364 [ 215.185602][T12814] loop2: detected capacity change from 0 to 256 [ 215.204717][T12814] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 215.244431][T12818] netlink: 'syz.1.2795': attribute type 4 has an invalid length. [ 215.310314][ T29] kauditd_printk_skb: 1990 callbacks suppressed [ 215.310335][ T29] audit: type=1326 audit(215.141:29785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12830 comm="syz.1.2791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff08fb1dff9 code=0x7ffc0000 [ 215.375427][T12834] bpf_get_probe_write_proto: 4 callbacks suppressed [ 215.375442][T12834] syz.1.2792[12834] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 215.383939][T12834] syz.1.2792[12834] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 215.395937][ T29] audit: type=1326 audit(215.181:29786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12830 comm="syz.1.2791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff08fb1dff9 code=0x7ffc0000 [ 215.430294][ T29] audit: type=1326 audit(215.181:29787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12830 comm="syz.1.2791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff08fb1dff9 code=0x7ffc0000 [ 215.453608][ T29] audit: type=1326 audit(215.181:29788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12830 comm="syz.1.2791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff08fb1dff9 code=0x7ffc0000 [ 215.476605][ T29] audit: type=1326 audit(215.181:29789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12830 comm="syz.1.2791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff08fb1dff9 code=0x7ffc0000 [ 215.499586][ T29] audit: type=1326 audit(215.181:29790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12830 comm="syz.1.2791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7ff08fb1dff9 code=0x7ffc0000 [ 215.522628][ T29] audit: type=1326 audit(215.181:29791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12830 comm="syz.1.2791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff08fb1dff9 code=0x7ffc0000 [ 215.545595][ T29] audit: type=1326 audit(215.181:29792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12830 comm="syz.1.2791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7ff08fb1dff9 code=0x7ffc0000 [ 215.568619][ T29] audit: type=1326 audit(215.181:29793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12830 comm="syz.1.2791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff08fb1dff9 code=0x7ffc0000 [ 215.591787][ T29] audit: type=1326 audit(215.181:29794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12830 comm="syz.1.2791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7ff08fb1dff9 code=0x7ffc0000 [ 215.632328][T12835] loop1: detected capacity change from 0 to 764 [ 215.638819][T12835] iso9660: Unknown parameter '' [ 215.690304][T12832] loop2: detected capacity change from 0 to 256 [ 215.700991][T12832] msdos: Bad value for 'gid' [ 215.705667][T12832] msdos: Bad value for 'gid' [ 215.780941][T12848] loop1: detected capacity change from 0 to 2364 [ 215.814399][T12846] loop2: detected capacity change from 0 to 256 [ 215.829882][T12846] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 215.930621][T12854] netlink: 'syz.2.2799': attribute type 4 has an invalid length. [ 216.061790][T12867] syz.0.2806[12867] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 216.061888][T12867] syz.0.2806[12867] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 216.082589][T12867] loop0: detected capacity change from 0 to 764 [ 216.102951][T12867] iso9660: Unknown parameter '' [ 216.212583][T12870] loop0: detected capacity change from 0 to 256 [ 216.221560][T12870] msdos: Bad value for 'gid' [ 216.226185][T12870] msdos: Bad value for 'gid' [ 216.239162][T12875] loop1: detected capacity change from 0 to 256 [ 216.260334][T12875] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 216.350710][T12880] netlink: 'syz.0.2813': attribute type 4 has an invalid length. [ 216.513403][T12898] syz.1.2822[12898] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 216.513463][T12898] syz.1.2822[12898] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 216.515945][T12893] loop0: detected capacity change from 0 to 256 [ 216.545016][T12898] loop1: detected capacity change from 0 to 764 [ 216.559561][T12898] iso9660: Unknown parameter '' [ 216.672777][T12907] netlink: 'syz.0.2827': attribute type 4 has an invalid length. [ 216.683513][T12904] loop1: detected capacity change from 0 to 256 [ 216.695836][T12904] msdos: Bad value for 'gid' [ 216.700477][T12904] msdos: Bad value for 'gid' [ 216.893216][T12921] loop0: detected capacity change from 0 to 256 [ 216.948284][T12929] syz.1.2835[12929] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 216.948371][T12929] syz.1.2835[12929] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 217.002609][T12932] netlink: 'syz.3.2839': attribute type 4 has an invalid length. [ 217.028008][T12934] netlink: 'syz.0.2840': attribute type 4 has an invalid length. [ 217.044777][T12929] loop1: detected capacity change from 0 to 764 [ 217.076507][T12929] iso9660: Unknown parameter '' [ 217.191966][T12945] loop3: detected capacity change from 0 to 256 [ 217.207099][T12945] msdos: Bad value for 'gid' [ 217.211775][T12945] msdos: Bad value for 'gid' [ 217.479218][T12972] loop0: detected capacity change from 0 to 256 [ 217.592298][T12976] loop3: detected capacity change from 0 to 256 [ 217.623875][T12976] msdos: Bad value for 'gid' [ 217.628499][T12976] msdos: Bad value for 'gid' [ 217.720014][T12989] loop0: detected capacity change from 0 to 512 [ 218.052444][T13022] loop3: detected capacity change from 0 to 512 [ 218.282017][T13048] loop1: detected capacity change from 0 to 256 [ 218.289631][T13048] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 218.393391][T13059] loop2: detected capacity change from 0 to 512 [ 218.534421][T13077] loop0: detected capacity change from 0 to 256 [ 218.642170][T13089] loop0: detected capacity change from 0 to 512 [ 218.663912][T13089] loop0: detected capacity change from 0 to 512 [ 218.676368][T13091] validate_nla: 3 callbacks suppressed [ 218.676381][T13091] netlink: 'syz.1.2912': attribute type 4 has an invalid length. [ 218.700607][T13089] EXT4-fs: Ignoring removed orlov option [ 218.714662][T13089] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 218.767903][T13097] loop1: detected capacity change from 0 to 512 [ 218.797442][T13089] EXT4-fs (loop0): write access unavailable, skipping orphan cleanup [ 218.810971][T13089] EXT4-fs mount: 16 callbacks suppressed [ 218.811063][T13089] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 218.849064][T12420] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 218.864220][T13097] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 218.909273][ T5739] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 218.960767][T13111] loop1: detected capacity change from 0 to 256 [ 218.981497][T13111] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 219.035195][T13123] netlink: 'syz.0.2924': attribute type 4 has an invalid length. [ 219.080423][T13127] loop3: detected capacity change from 0 to 512 [ 219.098155][T13127] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 219.132762][T13127] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 219.152377][T13132] loop2: detected capacity change from 0 to 512 [ 219.177192][T13127] EXT4-fs (loop3): 1 truncate cleaned up [ 219.195888][T12816] loop4: detected capacity change from 0 to 2048 [ 219.197050][T13132] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 219.212109][T13127] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 219.263362][T13127] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 219.287912][T13127] EXT4-fs: Ignoring removed orlov option [ 219.300834][T12816] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 219.327134][T13127] EXT4-fs (loop3): can't enable nombcache during remount [ 219.350959][ T7495] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 219.382141][T13152] loop1: detected capacity change from 0 to 256 [ 219.402594][ T9966] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 219.421845][T13152] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 219.454368][T13162] netlink: 'syz.3.2941': attribute type 4 has an invalid length. [ 219.567313][T13174] loop3: detected capacity change from 0 to 512 [ 219.604489][T13174] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 219.655818][T13186] loop0: detected capacity change from 0 to 512 [ 219.691378][ T9966] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 219.701915][ T7229] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 219.744796][T13194] netlink: 'syz.4.2956': attribute type 4 has an invalid length. [ 219.755138][T13189] loop3: detected capacity change from 0 to 256 [ 219.763767][T13189] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 219.858290][T13211] syz.3.2964[13211] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 219.858351][T13211] syz.3.2964[13211] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 219.874581][T13211] loop3: detected capacity change from 0 to 764 [ 219.892626][T13211] iso9660: Unknown parameter '' [ 219.925262][T13215] loop3: detected capacity change from 0 to 512 [ 219.953331][T13215] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 219.977642][ T9966] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 220.136717][T13213] loop4: detected capacity change from 0 to 2048 [ 220.150161][T13213] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 220.321259][ T29] kauditd_printk_skb: 1212 callbacks suppressed [ 220.321274][ T29] audit: type=1326 audit(220.151:31007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13212 comm="syz.4.2965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f2aca564fa7 code=0x7ffc0000 [ 220.398809][T13234] loop2: detected capacity change from 0 to 512 [ 220.441544][T13234] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 220.538851][ T29] audit: type=1326 audit(220.181:31008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13212 comm="syz.4.2965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2aca509959 code=0x7ffc0000 [ 220.561918][ T29] audit: type=1326 audit(220.181:31009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13212 comm="syz.4.2965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f2aca564fa7 code=0x7ffc0000 [ 220.584938][ T29] audit: type=1326 audit(220.181:31010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13212 comm="syz.4.2965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2aca509959 code=0x7ffc0000 [ 220.607941][ T29] audit: type=1326 audit(220.181:31011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13212 comm="syz.4.2965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f2aca564fa7 code=0x7ffc0000 [ 220.628536][T13234] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 220.630866][ T29] audit: type=1326 audit(220.181:31012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13212 comm="syz.4.2965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2aca509959 code=0x7ffc0000 [ 220.663640][ T29] audit: type=1326 audit(220.181:31013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13212 comm="syz.4.2965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f2aca564fa7 code=0x7ffc0000 [ 220.673520][T13234] EXT4-fs (loop2): 1 truncate cleaned up [ 220.686659][ T29] audit: type=1326 audit(220.181:31014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13212 comm="syz.4.2965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2aca509959 code=0x7ffc0000 [ 220.715270][ T29] audit: type=1326 audit(220.181:31015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13212 comm="syz.4.2965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f2aca564fa7 code=0x7ffc0000 [ 220.738571][ T29] audit: type=1326 audit(220.181:31016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13212 comm="syz.4.2965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2aca509959 code=0x7ffc0000 [ 220.753945][T13234] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 220.816588][T13234] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 220.837993][T13247] loop0: detected capacity change from 0 to 256 [ 220.855636][T13234] FAULT_INJECTION: forcing a failure. [ 220.855636][T13234] name failslab, interval 1, probability 0, space 0, times 0 [ 220.868418][T13234] CPU: 0 UID: 0 PID: 13234 Comm: syz.2.2971 Not tainted 6.11.0-syzkaller-11993-g3efc57369a0c #0 [ 220.878901][T13234] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 220.889036][T13234] Call Trace: [ 220.892483][T13234] [ 220.895411][T13234] dump_stack_lvl+0xf2/0x150 [ 220.900029][T13234] dump_stack+0x15/0x20 [ 220.904195][T13234] should_fail_ex+0x223/0x230 [ 220.908898][T13234] ? getname_flags+0x81/0x3b0 [ 220.913581][T13234] should_failslab+0x8f/0xb0 [ 220.918231][T13234] kmem_cache_alloc_noprof+0x4c/0x290 [ 220.923756][T13234] getname_flags+0x81/0x3b0 [ 220.928252][T13234] __x64_sys_mkdirat+0x41/0x60 [ 220.933058][T13234] x64_sys_call+0x2cd3/0x2d60 [ 220.937739][T13234] do_syscall_64+0xc9/0x1c0 [ 220.942246][T13234] ? clear_bhb_loop+0x55/0xb0 [ 220.946958][T13234] ? clear_bhb_loop+0x55/0xb0 [ 220.951779][T13234] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 220.957675][T13234] RIP: 0033:0x7f40787dc897 [ 220.962086][T13234] Code: 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 02 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 220.981734][T13234] RSP: 002b:00007f4077456e68 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 220.990227][T13234] RAX: ffffffffffffffda RBX: 00007f4077456ef0 RCX: 00007f40787dc897 [ 220.998209][T13234] RDX: 00000000000001ff RSI: 0000000020000140 RDI: 00000000ffffff9c [ 221.006179][T13234] RBP: 0000000020000f40 R08: 0000000020000000 R09: 0000000000000000 [ 221.014173][T13234] R10: 0000000020000f40 R11: 0000000000000246 R12: 0000000020000140 [ 221.022169][T13234] R13: 00007f4077456eb0 R14: 0000000000000000 R15: 00000000200008c0 [ 221.030173][T13234] [ 221.040391][T13234] EXT4-fs: Ignoring removed orlov option [ 221.082939][T13234] EXT4-fs (loop2): can't enable nombcache during remount [ 221.106883][T13254] syz.0.2980[13254] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 221.107063][T13254] syz.0.2980[13254] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 221.132580][T13257] netlink: 'syz.3.2982': attribute type 4 has an invalid length. [ 221.168397][T13254] loop0: detected capacity change from 0 to 764 [ 221.176398][T13254] iso9660: Unknown parameter '' [ 221.207394][ T7495] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 221.220386][T13263] loop1: detected capacity change from 0 to 256 [ 221.232973][T13263] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 221.363986][T13281] loop0: detected capacity change from 0 to 512 [ 221.689504][T13297] loop2: detected capacity change from 0 to 256 [ 221.756255][T13297] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 221.942166][T13315] netlink: 'syz.0.3008': attribute type 4 has an invalid length. [ 221.973335][T13313] loop2: detected capacity change from 0 to 256 [ 221.998470][T13313] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 222.080257][T13227] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 222.199451][T13334] loop2: detected capacity change from 0 to 2364 [ 222.273102][ T7229] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 222.344727][T13369] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3034'. [ 222.359717][T13369] netlink: 'syz.3.3034': attribute type 2 has an invalid length. [ 222.367488][T13369] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3034'. [ 222.372089][T13373] loop0: detected capacity change from 0 to 256 [ 222.384684][T13376] loop4: detected capacity change from 0 to 256 [ 222.404561][T13375] loop1: detected capacity change from 0 to 164 [ 222.413060][T13376] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 222.415696][T13375] iso9660: Unknown parameter 'GPL' [ 222.558285][T13390] loop4: detected capacity change from 0 to 2364 [ 222.627312][T13396] syz.4.3042[13396] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 222.627372][T13396] syz.4.3042[13396] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 222.647127][T13396] syz.4.3042[13396] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 222.726977][T13407] syz.0.3050[13407] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 222.742006][T13407] syz.0.3050[13407] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 222.762051][T13407] loop0: detected capacity change from 0 to 764 [ 222.793327][T13407] iso9660: Unknown parameter '' [ 222.822382][T13408] loop1: detected capacity change from 0 to 256 [ 222.844800][T13408] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 222.863085][T13417] FAULT_INJECTION: forcing a failure. [ 222.863085][T13417] name failslab, interval 1, probability 0, space 0, times 0 [ 222.875771][T13417] CPU: 1 UID: 0 PID: 13417 Comm: syz.2.3055 Not tainted 6.11.0-syzkaller-11993-g3efc57369a0c #0 [ 222.886278][T13417] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 222.896376][T13417] Call Trace: [ 222.899659][T13417] [ 222.902714][T13417] dump_stack_lvl+0xf2/0x150 [ 222.907311][T13417] dump_stack+0x15/0x20 [ 222.911541][T13417] should_fail_ex+0x223/0x230 [ 222.916229][T13417] ? __alloc_skb+0x10b/0x310 [ 222.919756][T13419] syz.0.3054[13419] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 222.920959][T13417] should_failslab+0x8f/0xb0 [ 222.921014][T13419] syz.0.3054[13419] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 222.932312][T13417] kmem_cache_alloc_node_noprof+0x51/0x2b0 [ 222.932345][T13417] __alloc_skb+0x10b/0x310 [ 222.932396][T13417] skb_copy_expand+0xfc/0x560 [ 222.963245][T13417] uevent_net_rcv_skb+0x1c8/0x2a0 [ 222.968373][T13417] netlink_rcv_skb+0x12c/0x230 [ 222.973154][T13417] ? __pfx_uevent_net_rcv_skb+0x10/0x10 [ 222.974453][T13419] loop0: detected capacity change from 0 to 764 [ 222.978696][T13417] uevent_net_rcv+0x1c/0x30 [ 222.989493][T13417] netlink_unicast+0x599/0x670 [ 222.994275][T13417] netlink_sendmsg+0x5cc/0x6e0 [ 222.999033][T13417] ? __pfx_netlink_sendmsg+0x10/0x10 [ 222.999971][T13419] iso9660: Unknown parameter '' [ 223.004392][T13417] __sock_sendmsg+0x140/0x180 [ 223.014088][T13417] ____sys_sendmsg+0x312/0x410 [ 223.018864][T13417] __sys_sendmsg+0x1d9/0x270 [ 223.023516][T13417] __x64_sys_sendmsg+0x46/0x50 [ 223.028355][T13417] x64_sys_call+0x2689/0x2d60 [ 223.033042][T13417] do_syscall_64+0xc9/0x1c0 [ 223.037678][T13417] ? clear_bhb_loop+0x55/0xb0 [ 223.042528][T13417] ? clear_bhb_loop+0x55/0xb0 [ 223.047222][T13417] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 223.053118][T13417] RIP: 0033:0x7f40787ddff9 [ 223.057560][T13417] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 223.077259][T13417] RSP: 002b:00007f4077457038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 223.085725][T13417] RAX: ffffffffffffffda RBX: 00007f4078995f80 RCX: 00007f40787ddff9 [ 223.093694][T13417] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000004 [ 223.101665][T13417] RBP: 00007f4077457090 R08: 0000000000000000 R09: 0000000000000000 [ 223.109638][T13417] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 223.117680][T13417] R13: 0000000000000000 R14: 00007f4078995f80 R15: 00007ffebb37bac8 [ 223.125655][T13417] [ 223.198548][T13423] loop2: detected capacity change from 0 to 512 [ 223.231547][T13423] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 223.277283][T13423] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 223.297398][T13423] EXT4-fs (loop2): 1 truncate cleaned up [ 223.303486][T13442] loop4: detected capacity change from 0 to 512 [ 223.303515][T13423] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 223.329541][T13444] loop0: detected capacity change from 0 to 256 [ 223.337457][T13423] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 223.361316][T13442] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 223.365934][T13423] EXT4-fs: Ignoring removed orlov option [ 223.376566][T13446] loop1: detected capacity change from 0 to 1024 [ 223.379541][T13423] EXT4-fs (loop2): can't enable nombcache during remount [ 223.421568][ T7495] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 223.461656][T13446] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 223.480285][ T7229] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 223.599487][T13457] Cannot find add_set index 0 as target [ 223.606357][ T5739] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 223.712292][T13482] netlink: 256 bytes leftover after parsing attributes in process `syz.0.3082'. [ 223.771798][T13489] hub 6-0:1.0: USB hub found [ 223.789060][T13489] hub 6-0:1.0: 8 ports detected [ 223.797542][T13493] loop2: detected capacity change from 0 to 256 [ 223.804954][T13492] FAULT_INJECTION: forcing a failure. [ 223.804954][T13492] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 223.818039][T13492] CPU: 1 UID: 0 PID: 13492 Comm: syz.4.3086 Not tainted 6.11.0-syzkaller-11993-g3efc57369a0c #0 [ 223.828470][T13492] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 223.838662][T13492] Call Trace: [ 223.840859][T13493] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 223.841928][T13492] [ 223.841938][T13492] dump_stack_lvl+0xf2/0x150 [ 223.859913][T13492] dump_stack+0x15/0x20 [ 223.864071][T13492] should_fail_ex+0x223/0x230 [ 223.868848][T13492] should_fail+0xb/0x10 [ 223.873017][T13492] should_fail_usercopy+0x1a/0x20 [ 223.878068][T13492] _copy_from_user+0x1e/0xd0 [ 223.882661][T13492] move_addr_to_kernel+0x82/0x120 [ 223.887796][T13492] copy_msghdr_from_user+0x271/0x2a0 [ 223.893173][T13492] __sys_sendmmsg+0x21a/0x500 [ 223.897878][T13492] __x64_sys_sendmmsg+0x57/0x70 [ 223.902731][T13492] x64_sys_call+0xa49/0x2d60 [ 223.907316][T13492] do_syscall_64+0xc9/0x1c0 [ 223.911828][T13492] ? clear_bhb_loop+0x55/0xb0 [ 223.916515][T13492] ? clear_bhb_loop+0x55/0xb0 [ 223.921263][T13492] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 223.927433][T13492] RIP: 0033:0x7f2aca56dff9 [ 223.931891][T13492] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 223.951525][T13492] RSP: 002b:00007f2ac91e1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 223.959994][T13492] RAX: ffffffffffffffda RBX: 00007f2aca725f80 RCX: 00007f2aca56dff9 [ 223.967968][T13492] RDX: 0000000000000002 RSI: 00000000200027c0 RDI: 0000000000000003 [ 223.967981][T13492] RBP: 00007f2ac91e1090 R08: 0000000000000000 R09: 0000000000000000 [ 223.967993][T13492] R10: 0000000000000040 R11: 0000000000000246 R12: 0000000000000001 [ 223.968004][T13492] R13: 0000000000000000 R14: 00007f2aca725f80 R15: 00007ffd226918c8 [ 223.968070][T13492] [ 224.119316][T13513] FAULT_INJECTION: forcing a failure. [ 224.119316][T13513] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 224.132449][T13513] CPU: 1 UID: 0 PID: 13513 Comm: syz.0.3095 Not tainted 6.11.0-syzkaller-11993-g3efc57369a0c #0 [ 224.142876][T13513] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 224.152987][T13513] Call Trace: [ 224.156304][T13513] [ 224.159250][T13513] dump_stack_lvl+0xf2/0x150 [ 224.163891][T13513] dump_stack+0x15/0x20 [ 224.168055][T13513] should_fail_ex+0x223/0x230 [ 224.172851][T13513] should_fail+0xb/0x10 [ 224.177025][T13513] should_fail_usercopy+0x1a/0x20 [ 224.182117][T13513] strncpy_from_user+0x25/0x200 [ 224.186995][T13513] strncpy_from_user_nofault+0x66/0xe0 [ 224.192524][T13513] bpf_probe_read_compat_str+0xb3/0x130 [ 224.198150][T13513] bpf_prog_e42f6260c1b72fb3+0x3e/0x40 [ 224.203604][T13513] bpf_trace_run3+0x10c/0x1d0 [ 224.208285][T13513] ? __put_anon_vma+0x94/0x150 [ 224.213057][T13513] ? __put_anon_vma+0x94/0x150 [ 224.217827][T13513] kmem_cache_free+0x237/0x2d0 [ 224.222604][T13513] __put_anon_vma+0x94/0x150 [ 224.227256][T13513] unlink_anon_vmas+0x27f/0x350 [ 224.232194][T13513] free_pgtables+0x155/0x470 [ 224.236789][T13513] vms_clear_ptes+0x2b5/0x300 [ 224.241537][T13513] vms_clean_up_area+0x46/0x110 [ 224.246393][T13513] mmap_region+0xc6b/0x16e0 [ 224.250943][T13513] do_mmap+0x718/0xb60 [ 224.251761][T13511] loop2: detected capacity change from 0 to 2048 [ 224.255291][T13513] vm_mmap_pgoff+0x133/0x290 [ 224.266291][T13513] ksys_mmap_pgoff+0x2de/0x330 [ 224.271141][T13513] x64_sys_call+0x1884/0x2d60 [ 224.275829][T13513] do_syscall_64+0xc9/0x1c0 [ 224.280333][T13513] ? clear_bhb_loop+0x55/0xb0 [ 224.285170][T13513] ? clear_bhb_loop+0x55/0xb0 [ 224.289918][T13513] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.295814][T13513] RIP: 0033:0x7f0e0fdadff9 [ 224.300236][T13513] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 224.319851][T13513] RSP: 002b:00007f0e0ea21038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 224.328278][T13513] RAX: ffffffffffffffda RBX: 00007f0e0ff65f80 RCX: 00007f0e0fdadff9 [ 224.336316][T13513] RDX: 0000000000000002 RSI: 0000000000800000 RDI: 0000000020800000 [ 224.344287][T13513] RBP: 00007f0e0ea21090 R08: ffffffffffffffff R09: 0000000000000000 [ 224.352360][T13513] R10: 0000000000042032 R11: 0000000000000246 R12: 0000000000000002 [ 224.360323][T13513] R13: 0000000000000000 R14: 00007f0e0ff65f80 R15: 00007ffdd2a0d378 [ 224.368319][T13513] [ 224.398239][T13515] netlink: 256 bytes leftover after parsing attributes in process `syz.4.3096'. [ 224.470243][T13511] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 224.522343][T13524] loop4: detected capacity change from 0 to 256 [ 224.546121][T13524] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 224.571463][ T7495] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 224.822613][T13569] syz.2.3119[13569] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 224.833764][T13569] loop2: detected capacity change from 0 to 764 [ 224.872341][T13569] iso9660: Unknown parameter '' [ 225.123756][T13612] loop1: detected capacity change from 0 to 256 [ 225.173252][T13612] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 225.230378][T13610] loop2: detected capacity change from 0 to 764 [ 225.252256][T13610] iso9660: Unknown parameter '' [ 225.364506][ T29] kauditd_printk_skb: 4709 callbacks suppressed [ 225.364522][ T29] audit: type=1326 audit(225.191:35726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13621 comm="syz.1.3144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff08fb1dff9 code=0x7ffc0000 [ 225.468303][ T29] audit: type=1326 audit(225.221:35727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13621 comm="syz.1.3144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff08fb1dff9 code=0x7ffc0000 [ 225.491582][ T29] audit: type=1326 audit(225.221:35728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13621 comm="syz.1.3144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=148 compat=0 ip=0x7ff08fb1dff9 code=0x7ffc0000 [ 225.501170][T13626] netlink: 'syz.1.3145': attribute type 4 has an invalid length. [ 225.514826][ T29] audit: type=1326 audit(225.221:35729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13621 comm="syz.1.3144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff08fb1dff9 code=0x7ffc0000 [ 225.545485][ T29] audit: type=1326 audit(225.221:35730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13621 comm="syz.1.3144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff08fb1dff9 code=0x7ffc0000 [ 225.645426][ T29] audit: type=1326 audit(225.381:35731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13628 comm="syz.1.3148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff08fb1dff9 code=0x7ffc0000 [ 225.668462][ T29] audit: type=1326 audit(225.381:35732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13628 comm="syz.1.3148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff08fb1dff9 code=0x7ffc0000 [ 225.691591][ T29] audit: type=1326 audit(225.401:35733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13628 comm="syz.1.3148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=148 compat=0 ip=0x7ff08fb1dff9 code=0x7ffc0000 [ 225.691613][ T29] audit: type=1326 audit(225.401:35734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13628 comm="syz.1.3148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff08fb1dff9 code=0x7ffc0000 [ 225.737611][ T29] audit: type=1326 audit(225.401:35735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13628 comm="syz.1.3148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff08fb1dff9 code=0x7ffc0000 [ 225.839662][T13378] loop3: detected capacity change from 0 to 2048 [ 225.857519][T13655] netlink: 'syz.0.3159': attribute type 4 has an invalid length. [ 225.890643][T13378] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 226.127104][ T9966] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 226.147785][T13689] netlink: 'syz.3.3174': attribute type 4 has an invalid length. [ 226.384112][T13707] bpf_get_probe_write_proto: 7 callbacks suppressed [ 226.384130][T13707] syz.3.3183[13707] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 226.423329][T13707] syz.3.3183[13707] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 226.545279][T13707] loop3: detected capacity change from 0 to 764 [ 226.575480][T13707] iso9660: Unknown parameter '' [ 226.656675][T13722] loop3: detected capacity change from 0 to 512 [ 226.684892][T13722] EXT4-fs (loop3): orphan cleanup on readonly fs [ 226.692017][T13722] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.3189: bg 0: block 248: padding at end of block bitmap is not set [ 226.721385][T13722] EXT4-fs error (device loop3): ext4_acquire_dquot:6879: comm syz.3.3189: Failed to acquire dquot type 1 [ 226.737966][T13722] EXT4-fs (loop3): 1 truncate cleaned up [ 226.745246][T13722] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 226.766574][T13740] loop1: detected capacity change from 0 to 512 [ 226.777093][T13740] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 226.824523][T13744] loop2: detected capacity change from 0 to 1024 [ 226.826924][T13740] EXT4-fs (loop1): 1 truncate cleaned up [ 226.844285][T13744] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 226.857044][T13740] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 226.881100][T13744] FAULT_INJECTION: forcing a failure. [ 226.881100][T13744] name failslab, interval 1, probability 0, space 0, times 0 [ 226.893816][T13744] CPU: 1 UID: 0 PID: 13744 Comm: syz.2.3198 Not tainted 6.11.0-syzkaller-11993-g3efc57369a0c #0 [ 226.904302][T13744] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 226.914363][T13744] Call Trace: [ 226.917645][T13744] [ 226.920569][T13744] dump_stack_lvl+0xf2/0x150 [ 226.925160][T13744] dump_stack+0x15/0x20 [ 226.929315][T13744] should_fail_ex+0x223/0x230 [ 226.933997][T13744] ? ext4_read_inline_dir+0x121/0x780 [ 226.939410][T13744] should_failslab+0x8f/0xb0 [ 226.944068][T13744] __kmalloc_noprof+0xa5/0x370 [ 226.948963][T13744] ext4_read_inline_dir+0x121/0x780 [ 226.954232][T13744] ? _parse_integer+0x27/0x30 [ 226.958919][T13744] ext4_readdir+0x1f0/0x1ba0 [ 226.963550][T13744] ? 0xffffffff81000000 [ 226.967755][T13744] ? __rcu_read_unlock+0x4e/0x70 [ 226.972704][T13744] ? get_pid_task+0x8e/0xc0 [ 226.977209][T13744] ? proc_fail_nth_write+0x12a/0x150 [ 226.982501][T13744] ? down_read_killable+0x172/0x6b0 [ 226.987756][T13744] ? avc_policy_seqno+0x15/0x20 [ 226.992619][T13744] ? selinux_file_permission+0x22a/0x360 [ 226.998292][T13744] iterate_dir+0x11d/0x310 [ 227.002753][T13744] __se_sys_getdents+0x88/0x1a0 [ 227.007612][T13744] ? __pfx_filldir+0x10/0x10 [ 227.012212][T13744] __x64_sys_getdents+0x43/0x50 [ 227.017070][T13744] x64_sys_call+0x2bbb/0x2d60 [ 227.021753][T13744] do_syscall_64+0xc9/0x1c0 [ 227.026268][T13744] ? clear_bhb_loop+0x55/0xb0 [ 227.030996][T13744] ? clear_bhb_loop+0x55/0xb0 [ 227.035772][T13744] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 227.041675][T13744] RIP: 0033:0x7f40787ddff9 [ 227.046118][T13744] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 227.065738][T13744] RSP: 002b:00007f4077457038 EFLAGS: 00000246 ORIG_RAX: 000000000000004e [ 227.074210][T13744] RAX: ffffffffffffffda RBX: 00007f4078995f80 RCX: 00007f40787ddff9 [ 227.082513][T13744] RDX: 00000000000000b8 RSI: 0000000020001fc0 RDI: 0000000000000004 [ 227.090475][T13744] RBP: 00007f4077457090 R08: 0000000000000000 R09: 0000000000000000 [ 227.098560][T13744] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 227.106713][T13744] R13: 0000000000000000 R14: 00007f4078995f80 R15: 00007ffebb37bac8 [ 227.114936][T13744] [ 227.146197][ T7495] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 227.263543][ T5739] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 227.305500][T13765] loop1: detected capacity change from 0 to 1024 [ 227.327569][T13767] FAULT_INJECTION: forcing a failure. [ 227.327569][T13767] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 227.340741][T13767] CPU: 1 UID: 0 PID: 13767 Comm: syz.2.3205 Not tainted 6.11.0-syzkaller-11993-g3efc57369a0c #0 [ 227.351216][T13767] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 227.361272][T13767] Call Trace: [ 227.364547][T13767] [ 227.367479][T13767] dump_stack_lvl+0xf2/0x150 [ 227.372141][T13767] dump_stack+0x15/0x20 [ 227.376323][T13767] should_fail_ex+0x223/0x230 [ 227.381000][T13767] should_fail+0xb/0x10 [ 227.385243][T13767] should_fail_usercopy+0x1a/0x20 [ 227.390369][T13767] _copy_to_user+0x1e/0xa0 [ 227.394871][T13767] simple_read_from_buffer+0xa0/0x110 [ 227.400251][T13767] proc_fail_nth_read+0xf9/0x140 [ 227.405313][T13767] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 227.410899][T13767] vfs_read+0x195/0x720 [ 227.415104][T13767] ? __rcu_read_unlock+0x4e/0x70 [ 227.420107][T13767] ? __fget_files+0x1d4/0x210 [ 227.424799][T13767] ksys_read+0xeb/0x1b0 [ 227.429029][T13767] __x64_sys_read+0x42/0x50 [ 227.433602][T13767] x64_sys_call+0x27d3/0x2d60 [ 227.438366][T13767] do_syscall_64+0xc9/0x1c0 [ 227.442992][T13767] ? clear_bhb_loop+0x55/0xb0 [ 227.447686][T13767] ? clear_bhb_loop+0x55/0xb0 [ 227.452592][T13767] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 227.458965][T13767] RIP: 0033:0x7f40787dca3c [ 227.463401][T13767] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 227.483295][T13767] RSP: 002b:00007f4077457030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 227.491802][T13767] RAX: ffffffffffffffda RBX: 00007f4078995f80 RCX: 00007f40787dca3c [ 227.500054][T13767] RDX: 000000000000000f RSI: 00007f40774570a0 RDI: 0000000000000009 [ 227.508031][T13767] RBP: 00007f4077457090 R08: 0000000000000000 R09: 0000000000000000 [ 227.515999][T13767] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 227.524013][T13767] R13: 0000000000000000 R14: 00007f4078995f80 R15: 00007ffebb37bac8 [ 227.531991][T13767] [ 227.551242][ T9966] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 227.568011][T13765] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 227.631751][ T5739] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 227.847746][T13794] netlink: 'syz.3.3215': attribute type 4 has an invalid length. [ 228.186551][T13807] loop4: detected capacity change from 0 to 512 [ 228.213642][T13807] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 228.231169][T13807] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 228.241366][T13807] EXT4-fs (loop4): 1 truncate cleaned up [ 228.247404][T13807] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 228.265417][T13807] FAULT_INJECTION: forcing a failure. [ 228.265417][T13807] name failslab, interval 1, probability 0, space 0, times 0 [ 228.278126][T13807] CPU: 1 UID: 0 PID: 13807 Comm: syz.4.3220 Not tainted 6.11.0-syzkaller-11993-g3efc57369a0c #0 [ 228.288602][T13807] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 228.298751][T13807] Call Trace: [ 228.302021][T13807] [ 228.304940][T13807] dump_stack_lvl+0xf2/0x150 [ 228.309529][T13807] dump_stack+0x15/0x20 [ 228.313793][T13807] should_fail_ex+0x223/0x230 [ 228.318466][T13807] ? getname_flags+0x81/0x3b0 [ 228.323134][T13807] should_failslab+0x8f/0xb0 [ 228.327755][T13807] kmem_cache_alloc_noprof+0x4c/0x290 [ 228.333124][T13807] getname_flags+0x81/0x3b0 [ 228.337705][T13807] __x64_sys_mkdirat+0x41/0x60 [ 228.342468][T13807] x64_sys_call+0x2cd3/0x2d60 [ 228.347215][T13807] do_syscall_64+0xc9/0x1c0 [ 228.351708][T13807] ? clear_bhb_loop+0x55/0xb0 [ 228.356500][T13807] ? clear_bhb_loop+0x55/0xb0 [ 228.361273][T13807] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 228.367230][T13807] RIP: 0033:0x7f2aca56c897 [ 228.371627][T13807] Code: 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 02 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 228.391237][T13807] RSP: 002b:00007f2ac91e0e68 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 228.399668][T13807] RAX: ffffffffffffffda RBX: 00007f2ac91e0ef0 RCX: 00007f2aca56c897 [ 228.407639][T13807] RDX: 00000000000001ff RSI: 0000000020000140 RDI: 00000000ffffff9c [ 228.415596][T13807] RBP: 0000000020000f40 R08: 0000000020000000 R09: 0000000000000000 [ 228.423591][T13807] R10: 0000000020000f40 R11: 0000000000000246 R12: 0000000020000140 [ 228.431593][T13807] R13: 00007f2ac91e0eb0 R14: 0000000000000000 R15: 00000000200008c0 [ 228.439735][T13807] [ 228.445412][T13807] EXT4-fs: Ignoring removed orlov option [ 228.457588][T13807] EXT4-fs (loop4): can't enable nombcache during remount [ 228.589355][T13825] netlink: 'syz.1.3227': attribute type 4 has an invalid length. [ 228.600431][ T7229] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 228.705329][T13842] loop2: detected capacity change from 0 to 512 [ 228.711403][T13844] loop4: detected capacity change from 0 to 256 [ 228.815247][T13844] FAT-fs (loop4): Directory bread(block 64) failed [ 228.832815][T13844] FAT-fs (loop4): Directory bread(block 65) failed [ 228.839352][T13844] FAT-fs (loop4): Directory bread(block 66) failed [ 228.850108][T13842] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 228.870343][T13844] FAT-fs (loop4): Directory bread(block 67) failed [ 228.889573][T13844] FAT-fs (loop4): Directory bread(block 68) failed [ 228.896143][T13844] FAT-fs (loop4): Directory bread(block 69) failed [ 228.902785][T13844] FAT-fs (loop4): Directory bread(block 70) failed [ 228.909293][T13844] FAT-fs (loop4): Directory bread(block 71) failed [ 228.915859][T13844] FAT-fs (loop4): Directory bread(block 72) failed [ 228.922734][T13844] FAT-fs (loop4): Directory bread(block 73) failed [ 229.011108][T13856] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 0, id = 0 [ 229.022358][T13842] IPVS: stopping master sync thread 13856 ... [ 229.059954][T13842] netlink: 'syz.2.3235': attribute type 10 has an invalid length. [ 229.140293][T13844] xt_TCPMSS: Only works on TCP SYN packets [ 229.154666][T13864] EXT4-fs error (device loop2): ext4_acquire_dquot:6879: comm syz.2.3235: Failed to acquire dquot type 0 [ 229.330907][ T7495] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 229.350413][T13868] : renamed from bond0 (while UP) [ 229.364398][T13868] netlink: 'syz.3.3242': attribute type 21 has an invalid length. [ 229.373964][T13871] netlink: 'syz.2.3243': attribute type 4 has an invalid length. [ 229.383119][T13872] syz.4.3237: attempt to access beyond end of device [ 229.383119][T13872] loop4: rw=2049, sector=1224, nr_sectors = 4 limit=256 [ 229.610587][T13893] syz.4.3251[13893] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 229.610639][T13893] syz.4.3251[13893] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 229.623840][T13895] FAULT_INJECTION: forcing a failure. [ 229.623840][T13895] name failslab, interval 1, probability 0, space 0, times 0 [ 229.631419][T13893] loop4: detected capacity change from 0 to 764 [ 229.635437][T13895] CPU: 1 UID: 0 PID: 13895 Comm: syz.1.3255 Not tainted 6.11.0-syzkaller-11993-g3efc57369a0c #0 [ 229.660238][T13893] iso9660: Unknown parameter '' [ 229.664559][T13895] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 229.679583][T13895] Call Trace: [ 229.682852][T13895] [ 229.685801][T13895] dump_stack_lvl+0xf2/0x150 [ 229.690383][T13895] dump_stack+0x15/0x20 [ 229.694579][T13895] should_fail_ex+0x223/0x230 [ 229.699408][T13895] ? __alloc_skb+0x10b/0x310 [ 229.704024][T13895] should_failslab+0x8f/0xb0 [ 229.708601][T13895] kmem_cache_alloc_node_noprof+0x51/0x2b0 [ 229.714467][T13895] __alloc_skb+0x10b/0x310 [ 229.718887][T13895] netlink_alloc_large_skb+0xad/0xe0 [ 229.724200][T13895] netlink_sendmsg+0x3b4/0x6e0 [ 229.728958][T13895] ? __pfx_netlink_sendmsg+0x10/0x10 [ 229.734275][T13895] __sock_sendmsg+0x140/0x180 [ 229.739066][T13895] ____sys_sendmsg+0x312/0x410 [ 229.743894][T13895] __sys_sendmsg+0x1d9/0x270 [ 229.748490][T13895] __x64_sys_sendmsg+0x46/0x50 [ 229.753247][T13895] x64_sys_call+0x2689/0x2d60 [ 229.757992][T13895] do_syscall_64+0xc9/0x1c0 [ 229.762488][T13895] ? clear_bhb_loop+0x55/0xb0 [ 229.767246][T13895] ? clear_bhb_loop+0x55/0xb0 [ 229.771983][T13895] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 229.777896][T13895] RIP: 0033:0x7ff08fb1dff9 [ 229.782384][T13895] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 229.802086][T13895] RSP: 002b:00007ff08e791038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 229.810489][T13895] RAX: ffffffffffffffda RBX: 00007ff08fcd5f80 RCX: 00007ff08fb1dff9 [ 229.818600][T13895] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000006 [ 229.826555][T13895] RBP: 00007ff08e791090 R08: 0000000000000000 R09: 0000000000000000 [ 229.834511][T13895] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 229.842471][T13895] R13: 0000000000000000 R14: 00007ff08fcd5f80 R15: 00007ffc7a13dd08 [ 229.850436][T13895] [ 229.872614][T13897] loop2: detected capacity change from 0 to 512 [ 229.909459][T13897] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 229.939506][T13904] netlink: 'syz.1.3257': attribute type 4 has an invalid length. [ 229.947777][T13897] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec01c, mo2=0002] [ 229.958036][T13897] System zones: 1-12 [ 229.989701][T13897] EXT4-fs (loop2): 1 truncate cleaned up [ 230.001835][T13897] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 230.074848][T13897] netlink: 'syz.2.3253': attribute type 4 has an invalid length. [ 230.215988][T13913] chnl_net:caif_netlink_parms(): no params data found [ 230.249373][ T6549] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.268170][T13935] loop4: detected capacity change from 0 to 128 [ 230.280006][T13935] vfat: Unknown parameter 'HbDi8VRwj' [ 230.327219][ T6549] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.363087][T13913] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.370279][T13913] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.379366][T13913] bridge_slave_0: entered allmulticast mode [ 230.385993][T13913] bridge_slave_0: entered promiscuous mode [ 230.393060][T13913] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.400197][T13913] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.408502][T13913] bridge_slave_1: entered allmulticast mode [ 230.414961][T13913] bridge_slave_1: entered promiscuous mode [ 230.423894][ T29] kauditd_printk_skb: 240 callbacks suppressed [ 230.423963][ T29] audit: type=1326 audit(230.251:35972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13791 comm="syz.0.3214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e0fdadff9 code=0x7ffc0000 [ 230.458672][ T29] audit: type=1326 audit(230.281:35973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13791 comm="syz.0.3214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f0e0fda4fa7 code=0x7ffc0000 [ 230.481594][ T29] audit: type=1326 audit(230.281:35974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13791 comm="syz.0.3214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0e0fd49959 code=0x7ffc0000 [ 230.504560][ T29] audit: type=1326 audit(230.281:35975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13791 comm="syz.0.3214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f0e0fda4fa7 code=0x7ffc0000 [ 230.527514][ T29] audit: type=1326 audit(230.281:35976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13791 comm="syz.0.3214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0e0fd49959 code=0x7ffc0000 [ 230.550412][ T29] audit: type=1326 audit(230.281:35977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13791 comm="syz.0.3214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e0fdadff9 code=0x7ffc0000 [ 230.573446][ T29] audit: type=1326 audit(230.281:35978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13791 comm="syz.0.3214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f0e0fda4fa7 code=0x7ffc0000 [ 230.596421][ T29] audit: type=1326 audit(230.281:35979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13791 comm="syz.0.3214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0e0fd49959 code=0x7ffc0000 [ 230.619532][ T29] audit: type=1326 audit(230.281:35980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13791 comm="syz.0.3214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e0fdadff9 code=0x7ffc0000 [ 230.642531][ T29] audit: type=1326 audit(230.281:35981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13791 comm="syz.0.3214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f0e0fda4fa7 code=0x7ffc0000 [ 230.733326][ T7495] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 230.749440][ T6549] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.837512][T13945] loop2: detected capacity change from 0 to 8192 [ 230.961501][T13913] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 231.002990][T13949] syz.3.3268[13949] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 231.003304][T13949] syz.3.3268[13949] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 231.019327][T13913] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 231.046091][ T6549] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.067321][T13948] loop2: detected capacity change from 0 to 1024 [ 231.114873][T13948] EXT4-fs: Ignoring removed orlov option [ 231.120721][T13948] EXT4-fs: Ignoring removed nomblk_io_submit option [ 231.178512][ T6549] bridge_slave_1: left allmulticast mode [ 231.184273][ T6549] bridge_slave_1: left promiscuous mode [ 231.189940][ T6549] bridge0: port 2(bridge_slave_1) entered disabled state [ 231.200193][T13949] loop3: detected capacity change from 0 to 764 [ 231.210011][ T6549] bridge_slave_0: left allmulticast mode [ 231.215669][ T6549] bridge_slave_0: left promiscuous mode [ 231.221313][ T6549] bridge0: port 1(bridge_slave_0) entered disabled state [ 231.229213][T13949] iso9660: Unknown parameter '' [ 231.257702][T13948] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 231.382135][ T6549] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 231.394119][ T6549] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 231.414163][ T6549] bond0 (unregistering): Released all slaves [ 231.459115][ T7495] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 231.497102][T13913] team0: Port device team_slave_0 added [ 231.509040][ T6549] hsr_slave_0: left promiscuous mode [ 231.525660][T13968] loop2: detected capacity change from 0 to 512 [ 231.533014][ T6549] hsr_slave_1: left promiscuous mode [ 231.540946][ T6549] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 231.548359][ T6549] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 231.560440][T13978] syz.0.3278[13978] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 231.560515][T13978] syz.0.3278[13978] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 231.571755][T13968] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 231.603888][ T6549] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 231.611345][ T6549] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 231.622249][T13968] EXT4-fs (loop2): 1 truncate cleaned up [ 231.630283][T13968] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 231.644911][ T6549] veth1_macvtap: left promiscuous mode [ 231.650569][ T6549] veth0_macvtap: left promiscuous mode [ 231.656094][ T6549] veth1_vlan: left promiscuous mode [ 231.658847][T13987] FAULT_INJECTION: forcing a failure. [ 231.658847][T13987] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 231.661325][ T6549] veth0_vlan: left promiscuous mode [ 231.679645][T13987] CPU: 0 UID: 0 PID: 13987 Comm: syz.3.3280 Not tainted 6.11.0-syzkaller-11993-g3efc57369a0c #0 [ 231.690124][T13987] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 231.700260][T13987] Call Trace: [ 231.703540][T13987] [ 231.706598][T13987] dump_stack_lvl+0xf2/0x150 [ 231.711200][T13987] dump_stack+0x15/0x20 [ 231.715356][T13987] should_fail_ex+0x223/0x230 [ 231.720186][T13987] should_fail+0xb/0x10 [ 231.724343][T13987] should_fail_usercopy+0x1a/0x20 [ 231.729613][T13987] strncpy_from_user+0x25/0x200 [ 231.734491][T13987] ? kmem_cache_alloc_noprof+0x10c/0x290 [ 231.740130][T13987] getname_flags+0xb0/0x3b0 [ 231.744699][T13987] getname+0x17/0x20 [ 231.748585][T13987] do_mq_open+0xd4/0x4b0 [ 231.752864][T13987] __x64_sys_mq_open+0xcc/0x100 [ 231.757755][T13987] x64_sys_call+0x29d1/0x2d60 [ 231.762429][T13987] do_syscall_64+0xc9/0x1c0 [ 231.766923][T13987] ? clear_bhb_loop+0x55/0xb0 [ 231.771689][T13987] ? clear_bhb_loop+0x55/0xb0 [ 231.776432][T13987] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 231.782368][T13987] RIP: 0033:0x7fc2a787dff9 [ 231.786782][T13987] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 231.806474][T13987] RSP: 002b:00007fc2a64f7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f0 [ 231.814876][T13987] RAX: ffffffffffffffda RBX: 00007fc2a7a35f80 RCX: 00007fc2a787dff9 [ 231.822839][T13987] RDX: 0000000000000000 RSI: 0000000000000040 RDI: 0000000000000000 [ 231.830847][T13987] RBP: 00007fc2a64f7090 R08: 0000000000000000 R09: 0000000000000000 [ 231.838862][T13987] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 231.846820][T13987] R13: 0000000000000000 R14: 00007fc2a7a35f80 R15: 00007ffc3bd9b9a8 [ 231.854787][T13987] [ 231.923890][T14003] loop3: detected capacity change from 0 to 512 [ 231.951358][T14003] EXT4-fs (loop3): too many log groups per flexible block group [ 231.959140][T14003] EXT4-fs (loop3): failed to initialize mballoc (-12) [ 231.967478][ T7495] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 232.001853][T14003] EXT4-fs (loop3): mount failed [ 232.147204][ T6549] team0 (unregistering): Port device team_slave_1 removed [ 232.160118][ T6549] team0 (unregistering): Port device team_slave_0 removed [ 232.212141][T13913] team0: Port device team_slave_1 added [ 232.233516][T14016] netlink: 'syz.2.3286': attribute type 4 has an invalid length. [ 232.241656][T13913] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 232.248656][T13913] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 232.274601][T13913] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 232.294749][T13913] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 232.301837][T13913] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 232.327807][T13913] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 232.359747][T14032] loop2: detected capacity change from 0 to 1024 [ 232.386395][T13913] hsr_slave_0: entered promiscuous mode [ 232.387339][T14032] EXT4-fs: Ignoring removed orlov option [ 232.408737][T14032] EXT4-fs: Ignoring removed bh option [ 232.410018][T13913] hsr_slave_1: entered promiscuous mode [ 232.439957][T13913] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 232.449755][T14032] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 232.453616][T13913] Cannot create hsr debugfs directory [ 232.505644][T14032] syz.2.3292[14032] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 232.505811][T14032] syz.2.3292[14032] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 232.517527][T14032] syz.2.3292[14032] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 232.602596][ T7495] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 232.728271][T14057] FAULT_INJECTION: forcing a failure. [ 232.728271][T14057] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 232.741388][T14057] CPU: 1 UID: 0 PID: 14057 Comm: syz.0.3298 Not tainted 6.11.0-syzkaller-11993-g3efc57369a0c #0 [ 232.751806][T14057] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 232.761892][T14057] Call Trace: [ 232.765166][T14057] [ 232.768141][T14057] dump_stack_lvl+0xf2/0x150 [ 232.772836][T14057] dump_stack+0x15/0x20 [ 232.777004][T14057] should_fail_ex+0x223/0x230 [ 232.781766][T14057] should_fail+0xb/0x10 [ 232.785941][T14057] should_fail_usercopy+0x1a/0x20 [ 232.790977][T14057] _copy_from_user+0x1e/0xd0 [ 232.795560][T14057] move_addr_to_kernel+0x82/0x120 [ 232.800651][T14057] copy_msghdr_from_user+0x271/0x2a0 [ 232.805994][T14057] __sys_sendmmsg+0x21a/0x500 [ 232.810867][T14057] __x64_sys_sendmmsg+0x57/0x70 [ 232.815822][T14057] x64_sys_call+0xa49/0x2d60 [ 232.820488][T14057] do_syscall_64+0xc9/0x1c0 [ 232.825009][T14057] ? clear_bhb_loop+0x55/0xb0 [ 232.829766][T14057] ? clear_bhb_loop+0x55/0xb0 [ 232.834460][T14057] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.840434][T14057] RIP: 0033:0x7f0e0fdadff9 [ 232.844888][T14057] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 232.864591][T14057] RSP: 002b:00007f0e0ea00038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 232.873030][T14057] RAX: ffffffffffffffda RBX: 00007f0e0ff66058 RCX: 00007f0e0fdadff9 [ 232.881019][T14057] RDX: 0000000000000001 RSI: 0000000020000bc0 RDI: 0000000000000003 [ 232.889007][T14057] RBP: 00007f0e0ea00090 R08: 0000000000000000 R09: 0000000000000000 [ 232.896981][T14057] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 232.904956][T14057] R13: 0000000000000000 R14: 00007f0e0ff66058 R15: 00007ffdd2a0d378 [ 232.913019][T14057] [ 232.952685][T14075] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 233.014794][T14083] IPv4: Oversized IP packet from 127.202.26.0 [ 233.123149][T14095] netlink: 'syz.4.3302': attribute type 4 has an invalid length. [ 233.140654][T13913] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 233.155127][T13913] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 233.184500][T13913] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 233.190549][T14101] loop3: detected capacity change from 0 to 1024 [ 233.198199][T14101] EXT4-fs: Ignoring removed orlov option [ 233.203776][T13913] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 233.204769][T14101] EXT4-fs: Ignoring removed bh option [ 233.221916][T14101] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 233.235317][T14101] syz.3.3304[14101] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 233.235373][T14101] syz.3.3304[14101] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 233.257116][T14101] syz.3.3304[14101] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 233.274480][T14101] FAULT_INJECTION: forcing a failure. [ 233.274480][T14101] name failslab, interval 1, probability 0, space 0, times 0 [ 233.298922][T14101] CPU: 1 UID: 0 PID: 14101 Comm: syz.3.3304 Not tainted 6.11.0-syzkaller-11993-g3efc57369a0c #0 [ 233.309386][T14101] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 233.319507][T14101] Call Trace: [ 233.322789][T14101] [ 233.325713][T14101] dump_stack_lvl+0xf2/0x150 [ 233.330307][T14101] dump_stack+0x15/0x20 [ 233.334551][T14101] should_fail_ex+0x223/0x230 [ 233.339250][T14101] ? alloc_pipe_info+0x1cb/0x360 [ 233.344190][T14101] should_failslab+0x8f/0xb0 [ 233.348790][T14101] __kmalloc_noprof+0xa5/0x370 [ 233.349386][T14111] loop4: detected capacity change from 0 to 512 [ 233.353577][T14101] alloc_pipe_info+0x1cb/0x360 [ 233.353599][T14101] splice_direct_to_actor+0x60f/0x670 [ 233.353624][T14101] ? kstrtouint_from_user+0xb0/0xe0 [ 233.353650][T14101] ? __pfx_direct_splice_actor+0x10/0x10 [ 233.381116][T14101] ? 0xffffffff81000000 [ 233.385262][T14101] ? __rcu_read_unlock+0x4e/0x70 [ 233.390209][T14101] ? avc_policy_seqno+0x15/0x20 [ 233.395131][T14101] ? selinux_file_permission+0x22a/0x360 [ 233.400768][T14101] do_splice_direct+0xd7/0x150 [ 233.405576][T14101] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 233.411618][T14101] do_sendfile+0x39b/0x970 [ 233.416043][T14101] __x64_sys_sendfile64+0x110/0x150 [ 233.421256][T14101] x64_sys_call+0xed5/0x2d60 [ 233.425925][T14101] do_syscall_64+0xc9/0x1c0 [ 233.430549][T14101] ? clear_bhb_loop+0x55/0xb0 [ 233.435344][T14101] ? clear_bhb_loop+0x55/0xb0 [ 233.440082][T14101] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.445971][T14101] RIP: 0033:0x7fc2a787dff9 [ 233.450380][T14101] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 233.470046][T14101] RSP: 002b:00007fc2a64f7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 233.478539][T14101] RAX: ffffffffffffffda RBX: 00007fc2a7a35f80 RCX: 00007fc2a787dff9 [ 233.486782][T14101] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 000000000000000a [ 233.494808][T14101] RBP: 00007fc2a64f7090 R08: 0000000000000000 R09: 0000000000000000 [ 233.502770][T14101] R10: 0000000100800001 R11: 0000000000000246 R12: 0000000000000001 [ 233.510729][T14101] R13: 0000000000000000 R14: 00007fc2a7a35f80 R15: 00007ffc3bd9b9a8 [ 233.518695][T14101] [ 233.524943][T14111] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 233.537651][T13913] 8021q: adding VLAN 0 to HW filter on device bond0 [ 233.567765][T14111] EXT4-fs (loop4): 1 truncate cleaned up [ 233.573889][T14111] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 233.607472][T13913] 8021q: adding VLAN 0 to HW filter on device team0 [ 233.621345][ T9966] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 233.649975][ T3767] bridge0: port 1(bridge_slave_0) entered blocking state [ 233.657046][ T3767] bridge0: port 1(bridge_slave_0) entered forwarding state [ 233.689402][ T3767] bridge0: port 2(bridge_slave_1) entered blocking state [ 233.691613][ T7229] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 233.696466][ T3767] bridge0: port 2(bridge_slave_1) entered forwarding state [ 233.747911][T13913] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 233.758367][T13913] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 233.866586][T13913] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 234.087348][T13913] veth0_vlan: entered promiscuous mode [ 234.103455][T13913] veth1_vlan: entered promiscuous mode [ 234.152448][T13913] veth0_macvtap: entered promiscuous mode [ 234.168440][T13913] veth1_macvtap: entered promiscuous mode [ 234.197024][T13913] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 234.207757][T13913] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.217590][T13913] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 234.228077][T13913] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.237968][T13913] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 234.248553][T13913] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.258413][T13913] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 234.269027][T13913] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.278999][T13913] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 234.289594][T13913] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.299686][T13913] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 234.310316][T13913] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.327914][T13913] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 234.340607][T13913] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 234.351138][T13913] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.361090][T13913] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 234.371647][T13913] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.381540][T13913] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 234.392096][T13913] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.401936][T13913] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 234.412391][T13913] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.422323][T13913] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 234.432790][T13913] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.442671][T13913] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 234.453143][T13913] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.465261][T13913] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 234.475871][T13913] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.484696][T13913] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.493451][T13913] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.502167][T13913] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.649892][T14202] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3319'. [ 234.659624][T14202] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3319'. [ 234.668782][T14202] netlink: 'syz.1.3319': attribute type 2 has an invalid length. [ 234.718278][T14207] loop1: detected capacity change from 0 to 512 [ 234.725857][T14207] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 234.747556][T14207] EXT4-fs (loop1): 1 truncate cleaned up [ 234.753874][T14207] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 234.861652][T14212] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3322'. [ 234.904394][T14212] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3322'. [ 234.925248][T13913] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 234.952856][T14214] loop3: detected capacity change from 0 to 2048 [ 235.011305][T14214] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 235.033586][T14222] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3325'. [ 235.045674][T14214] netlink: 67 bytes leftover after parsing attributes in process `syz.3.3324'. [ 235.183851][ T9966] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 235.214287][T14236] syz.1.3328[14236] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 235.214435][T14236] syz.1.3328[14236] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 235.231225][T14234] bridge0: port 2(bridge_slave_1) entered forwarding state [ 235.234663][T14236] loop1: detected capacity change from 0 to 764 [ 235.259038][T14234] bridge0: port 2(bridge_slave_1) entered disabled state [ 235.287759][T14236] iso9660: Unknown parameter '' [ 235.372791][ T4548] ================================================================== [ 235.380905][ T4548] BUG: KCSAN: data-race in generic_fillattr / shmem_symlink [ 235.388196][ T4548] [ 235.390516][ T4548] write to 0xffff888101e2af74 of 4 bytes by task 4425 on cpu 0: [ 235.398134][ T4548] shmem_symlink+0x349/0x3a0 [ 235.402715][ T4548] vfs_symlink+0xca/0x1d0 [ 235.407037][ T4548] do_symlinkat+0xe3/0x350 [ 235.411448][ T4548] __x64_sys_symlink+0x50/0x60 [ 235.416206][ T4548] x64_sys_call+0x2819/0x2d60 [ 235.420881][ T4548] do_syscall_64+0xc9/0x1c0 [ 235.425379][ T4548] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.431270][ T4548] [ 235.433583][ T4548] read to 0xffff888101e2af74 of 4 bytes by task 4548 on cpu 1: [ 235.441110][ T4548] generic_fillattr+0x1a6/0x2f0 [ 235.445948][ T4548] shmem_getattr+0x17b/0x200 [ 235.450522][ T4548] vfs_getattr+0x19b/0x1e0 [ 235.454925][ T4548] vfs_statx+0x134/0x2f0 [ 235.459153][ T4548] vfs_fstatat+0xec/0x110 [ 235.463470][ T4548] __se_sys_newfstatat+0x58/0x260 [ 235.468480][ T4548] __x64_sys_newfstatat+0x55/0x70 [ 235.473497][ T4548] x64_sys_call+0x141f/0x2d60 [ 235.478168][ T4548] do_syscall_64+0xc9/0x1c0 [ 235.482757][ T4548] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.488643][ T4548] [ 235.490947][ T4548] value changed: 0x0b62c406 -> 0x0bfb5a86 [ 235.496647][ T4548] [ 235.498953][ T4548] Reported by Kernel Concurrency Sanitizer on: [ 235.505082][ T4548] CPU: 1 UID: 0 PID: 4548 Comm: udevd Not tainted 6.11.0-syzkaller-11993-g3efc57369a0c #0 [ 235.514960][ T4548] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 235.525001][ T4548] ================================================================== [ 235.565107][ T29] kauditd_printk_skb: 1802 callbacks suppressed [ 235.565185][ T29] audit: type=1326 audit(235.391:37784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14243 comm="syz.1.3331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27bc1cdff9 code=0x7ffc0000 [ 235.607019][ T29] audit: type=1326 audit(235.421:37785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14243 comm="syz.1.3331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=148 compat=0 ip=0x7f27bc1cdff9 code=0x7ffc0000 [ 235.630197][ T29] audit: type=1326 audit(235.421:37786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14243 comm="syz.1.3331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27bc1cdff9 code=0x7ffc0000 [ 235.653237][ T29] audit: type=1326 audit(235.421:37787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14243 comm="syz.1.3331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27bc1cdff9 code=0x7ffc0000 [ 236.371577][ T29] audit: type=1326 audit(236.201:37788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14128 comm="syz.0.3310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e0fdadff9 code=0x7ffc0000 [ 236.414172][ T29] audit: type=1326 audit(236.221:37789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14128 comm="syz.0.3310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f0e0fda4fa7 code=0x7ffc0000 [ 236.437207][ T29] audit: type=1326 audit(236.221:37790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14128 comm="syz.0.3310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0e0fd49959 code=0x7ffc0000 [ 236.460120][ T29] audit: type=1326 audit(236.221:37791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14128 comm="syz.0.3310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f0e0fda4fa7 code=0x7ffc0000 [ 236.482995][ T29] audit: type=1326 audit(236.221:37792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14128 comm="syz.0.3310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0e0fd49959 code=0x7ffc0000 [ 236.505873][ T29] audit: type=1326 audit(236.221:37793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14128 comm="syz.0.3310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f0e0fda4fa7 code=0x7ffc0000