last executing test programs: 1.41084977s ago: executing program 0 (id=3016): perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x66, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000}, 0x0, 0x1, 0x6, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x1c1341, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="170000000000000004000000ff00000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000040000000000000000000000846e9c64000000000000008c9fe2f643e6eb3fd8db3d150783f3fe58bbf65f9a0ab339e49d66eb4b8710"], 0x48) r0 = socket(0x10, 0x3, 0x9) sendmsg$TIPC_CMD_GET_MAX_PORTS(r0, &(0x7f0000000000)={&(0x7f0000000a00), 0xc, &(0x7f0000000ac0)={&(0x7f0000000080)={0x1c, 0x0, 0x0, 0x0, 0x40}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000080) 1.361015765s ago: executing program 0 (id=3019): r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) writev(r0, &(0x7f0000000400)=[{0x0}, {&(0x7f0000000040)="aa1d484e243103000000f7c08bfcd111fbdf23ea32db0e8f21d5bc27bd8063067a0689ff", 0x24}], 0x2) 1.30529816s ago: executing program 0 (id=3021): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r4}, 0x10) r5 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$selinux_load(r5, &(0x7f0000000580)={0xf97cff8c, 0x8}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x0, 0x7a, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e25f01403767010066de010203010902"], 0x0) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)={0x28, r7, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) sendmsg$MPTCP_PM_CMD_REMOVE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x14, r1, 0x1, 0x0, 0x0, {0x4}}, 0x14}, 0x1, 0xfcffffff00000000}, 0x0) 1.065845202s ago: executing program 1 (id=3038): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x200000000006, 0x4, 0x0, 0x7ffc0006}]}) timer_delete(0x0) 1.051578433s ago: executing program 1 (id=3039): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18010000000000000000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = socket(0x22, 0x2, 0x1) sendmsg$DEVLINK_CMD_PORT_SPLIT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x20000804}, 0x8001) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x22004006, &(0x7f00000010c0)={[{@jqfmt_vfsold}, {@nouid32}, {@nobh}, {@stripe={'stripe', 0x3d, 0xffff}}, {@block_validity}, {@grpjquota, 0x22}], [], 0x2}, 0xc4, 0x46f, &(0x7f0000000940)="$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") syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000280)={0x1, &(0x7f0000000240)=[{0x6}]}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000380)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000340), 0x106}}, 0x20) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000700)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000006c0), 0x2}}, 0x20) close_range(r2, 0xffffffffffffffff, 0x0) 617.959633ms ago: executing program 0 (id=3051): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r1}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xa}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8d, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000b80)={'filter\x00', 0x4, 0x4, 0x3e8, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0xfd, 0x0, {@mac=@link_local={0x2}, {[0xff]}}, {@mac}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'erspan0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0xc, 0x4}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x40}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {@mac}, {@mac=@multicast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x2, 0x8}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 592.282186ms ago: executing program 0 (id=3052): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='page_pool_state_release\x00', r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='page_pool_state_release\x00', r2}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r4, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x44}}, 0x0) 547.50854ms ago: executing program 0 (id=3056): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00'}, 0x10) r4 = openat$selinux_load(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$selinux_load(r4, &(0x7f0000000580)={0xf97cff8c, 0x8}, 0x10) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x0, 0x7a, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e25f01403767010066de010203010902"], 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_REMOVE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x14, r1, 0x1, 0x0, 0x0, {0x4}}, 0x14}, 0x1, 0xfcffffff00000000}, 0x0) 458.256988ms ago: executing program 4 (id=3058): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = io_uring_setup(0x1693, &(0x7f0000000080)={0x0, 0x0, 0x40, 0x3, 0x1dc}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0), 0x0) 457.244698ms ago: executing program 4 (id=3060): r0 = socket(0x10, 0x3, 0x9) sendmsg$TIPC_CMD_GET_MAX_PORTS(r0, &(0x7f0000000000)={&(0x7f0000000a00), 0xc, &(0x7f0000000ac0)={&(0x7f0000000080)={0x1c, 0x0, 0x0, 0x0, 0x40}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000080) 415.767262ms ago: executing program 3 (id=3062): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x200000000006, 0x4, 0x0, 0x7ffc0006}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='kmem_cache_free\x00', r0}, 0x18) sysfs$1(0x1, 0x0) 415.146692ms ago: executing program 4 (id=3063): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r1}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xa}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8d, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000b80)={'filter\x00', 0x4, 0x4, 0x3e8, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0xfd, 0x0, {@mac=@link_local={0x2}, {[0xff]}}, {@mac}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'erspan0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0xc, 0x4}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x40}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {@mac}, {@mac=@multicast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x2, 0x8}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 395.816344ms ago: executing program 4 (id=3065): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='page_pool_state_release\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 360.737897ms ago: executing program 4 (id=3066): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r2}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @broadcast}) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x800714, &(0x7f0000000000)={[{@nobarrier}]}, 0xff, 0x485, &(0x7f0000001040)="$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") r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800006, 0x11, r4, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r2}, 0x10) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) (async) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @broadcast}) (async) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x800714, &(0x7f0000000000)={[{@nobarrier}]}, 0xff, 0x485, &(0x7f0000001040)="$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") (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) (async) write$binfmt_script(r4, &(0x7f0000000000), 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) (async) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800006, 0x11, r4, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) (async) 360.343518ms ago: executing program 3 (id=3067): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1e, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) syz_read_part_table(0x5c3, &(0x7f00000005c0)="$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") 314.123562ms ago: executing program 2 (id=3068): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008f00850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000d40)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r1, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000880)=ANY=[@ANYBLOB="58000000c5bd0eb9a8db51a7493cc05d2e9ca365ebc1a6498633fcdd2f02f8da41515898193bb6b1a137e7acca105084162aa47c4b082f502b010082f2009ac55248b786fa7ae31f0720e1ee4b80ce997afd72a46a480d54279e31144e823fd40b40da81ca40464f86531ebb4df2abd49494353c728ef34a3bad201f2bd0cca2c76ac9d1bbdf02edc4697ffa7efdf0f5664c407d14f9c6afcb8d386b3b08c95d84f88fb834488b662b0de09f3f07", @ANYRES16=r2, @ANYBLOB="490900000000000000001500000004002b8008000300", @ANYRES32=r4, @ANYBLOB="08002a0000000000050029000100000020002b8004000380080001000104000005000200000000ef04b444a46f00000008002c"], 0x58}}, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, @void, @value}, 0x94) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r6}, 0x10) setsockopt$EBT_SO_SET_ENTRIES(r5, 0x0, 0x80, &(0x7f0000000040)=@broute={'broute\x00', 0x20, 0x1, 0x220, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000500], 0x7, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="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"]}, 0x298) fchdir(r0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYRES16=r7], 0x0, 0x42, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000001f80)=""/4100, 0x1004) 280.181255ms ago: executing program 3 (id=3069): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x2000490, &(0x7f0000000340)={[{@journal_dev={'journal_dev', 0x3d, 0x9}}, {@test_dummy_encryption}, {@nodiscard}, {@usrjquota_path={'usrjquota', 0x3d, './file0'}}, {@nojournal_checksum}]}, 0xff, 0x784, &(0x7f00000007c0)="$eJzs3c1rHOUfAPDvbJKmSfv7JYKg9RQQNFC6MTW2Ch4qHkSwUNCz7bLZhppNtmQ3pQkBW0TwIqh4EPTSsy/15tWXq/4XHqSlalqseJDI7Eu7bXbTTZvdDeTzgck+z8xsnue7z8wzz+wMOwHsWRPpn0zEoYj4KIkYq89PImKomhqMOFFb7/b6Wj6dktjYePOPpLrOrfW1fDS9J3WgnnkyIn58P+JwZnO55ZXV+VyxWFiq56cqC+enyiurR84t5OYKc4XFY9MzM0ePv3D82M7F+tcvqwevf/zas9+c+Oe9J65++FMSJ+JgfVlzHDtlIibqn8lQ+hHe49WdLqzPkn5XgIeS7poDtb08DsVYDFRTbYz0smYAQLe8GxEbAMAekzj+A8Ae0/ge4Nb6Wr4x9fcbid668UpE7K/F37i+WVsyWL9mt796HXT0VnLPlZEkIsZ3oPyJiPjiu7e/Sqfo0nVIgFYuXY6IM+MTm/v/ZNM9C9v13FYLN4arLxP3zdb/Qe98n45/Xmw1/svcGf9Ei/HPcIt992E8eP/PXNuBYtpKx38vN93bdrsp/rrxgXruf9Ux31By9lyxkPZt/4+IyRgaTvPT1VVb3wU1efPfm+3Kbx7//fnJO1+m5aevd9fIXBscvvc9s7lK7lHjbrhxOeKpwVbxJ3faP2kz/j3VYRmvv/TB5+2WpfGn8TamzfF318aViGdatv/dtky2vD9xqro5TDU2iha+/fWz0XblN7d/OqXlN84FeiFt/9Gt4x9Pmu/XLG+/jJ+vjP3QbtmD42+9/e9L3qqm99XnXcxVKkvTEfuSNzbPP3r3vY18Y/00/smnW+//W23/6TnhmQ7jH7z++9cPH393pfHPbqv9t5+4ent+oF35nbX/TDU1WZ/TSf/XaQUf5bMDAAAAAAAAAAAAAAAAAAAAAAAAgE5lIuJgJJnsnXQmk83WnuH9eIxmiqVy5fDZ0vLibFSflT0eQ5nGT12ONf0e6nT99/Ab+aP35Z+PiMci4tPhkWo+my8VZ/sdPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADUHWjz/P/Ub8P9rh0A0DX7+10BAKDnHP8BYO/Z3vF/pGv1AAB6x/k/AOw9HR//z3S3HgBA7zj/BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoMtOnTyZTht/r6/l0/zshZXl+dKFI7OF8nx2YTmfzZeWzmfnSqW5YiGbLy20/UeXai/FUun8TCwuX5yqFMqVqfLK6umF0vJi5fS5hdxc4XRhqGeRAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDnyiur87lisbAksWViZHdUY9ckBmNXVEOia4nmXmKkfx0UAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwC73XwAAAP//+Lkq2Q==") r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000000)='./file0\x00') openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0/file0/..\x00', &(0x7f0000000240)={0x0, 0x0, 0x8}, 0x18) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000080)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_DEV(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x1c, r1, 0xde6bcce13c096341, 0x70bd27, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[], 0x98}, 0x1, 0x0, 0x0, 0x4}, 0x0) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, 0xffffffffffffffff, 0x0) r4 = socket$rxrpc(0x21, 0x2, 0x2) connect$rxrpc(r4, &(0x7f0000000100)=@in4={0x21, 0x0, 0x1c, 0x2, {0x2, 0x0, @loopback}}, 0x24) 212.541721ms ago: executing program 2 (id=3070): ioperm(0x0, 0x7fff, 0x15f9) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f0000000100)=0x13) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) syz_io_uring_setup(0x246d, &(0x7f00000002c0)={0x0, 0x0, 0x100, 0x1}, &(0x7f0000000280)=0x0, &(0x7f0000000480)) syz_io_uring_submit(r2, 0x0, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(0xffffffffffffffff, 0x184c, 0x0, 0x0, 0x0, 0x42) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000040)={0xe96e, 0x0, 0x0, 0x0, 0x0, "7e12091588e633bbb1df022dace17a32d251ee"}) 204.420222ms ago: executing program 2 (id=3071): socket(0x840000000002, 0x3, 0xff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) sendmsg$IPSET_CMD_TYPE(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0xd, 0x6, 0x401, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4048000}, 0x40000) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x16}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) vmsplice(0xffffffffffffffff, &(0x7f00000008c0)=[{0x0, 0xfffffcec}], 0x1, 0x0) 193.495882ms ago: executing program 1 (id=3072): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0xfff, 0x2, 0x80, 0xffffffffffffffff, 0x10, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3f, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000020000000000000000018190000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r2}, 0x10) pwritev(r0, &(0x7f0000000540)=[{&(0x7f00000002c0)='\x00!', 0x2}], 0x1, 0x0, 0x0) 140.934918ms ago: executing program 2 (id=3073): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='page_pool_state_release\x00', r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='page_pool_state_release\x00', r2}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r4, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r6], 0x44}}, 0x0) 121.463709ms ago: executing program 2 (id=3074): r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f0000000100)=0x13) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000001c0)) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) r2 = syz_io_uring_setup(0x78ed, 0x0, &(0x7f0000000380), &(0x7f0000000040)=0x0) syz_io_uring_setup(0x246d, &(0x7f00000002c0)={0x0, 0x0, 0x100, 0x1}, &(0x7f0000000280)=0x0, &(0x7f0000000480)) syz_io_uring_submit(r4, r3, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r2, 0x184c, 0x0, 0x0, 0x0, 0x42) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000040)={0xe96e, 0x0, 0x0, 0x0, 0x0, "7e12091588e633bbb1df022dace17a32d251ee"}) 118.07808ms ago: executing program 3 (id=3075): r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) writev(r0, &(0x7f0000000400)=[{}, {&(0x7f0000000040)="aa1d484e243103000000f7c08bfcd111fbdf23ea32db0e8f21d5bc27bd8063067a0689ff", 0x24}], 0x2) 100.525781ms ago: executing program 1 (id=3076): rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) 87.006712ms ago: executing program 3 (id=3077): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x200000000006, 0x4, 0x0, 0x7ffc0006}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='kmem_cache_free\x00', r0}, 0x18) timer_delete(0x0) 86.277522ms ago: executing program 2 (id=3078): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000400)='./file0\x00', 0x21081e, &(0x7f0000000300)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x200000}}, {@nobarrier}, {@nolazytime}]}, 0x1, 0x51d, &(0x7f0000000a40)="$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") bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) fsmount(0xffffffffffffffff, 0x0, 0x7a) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x2, &(0x7f0000000200)=@raw=[@call={0x85, 0x0, 0x0, 0x1b}, @exit], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a2824734ca454088df95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cf84ded40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c86e00f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec231fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b2120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06de269e97fbb0776bf56dd022c074eb8a322fb0bf47c0a8d154b405c305eaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895012f1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f01000080000000004febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d37261774cc5a3bf6b466cb72812da518ff602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d50a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5001000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2e9a20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1015ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88c3c44b3b7486f979e8a3174b531f573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846899c6b23c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33694f40000000000005d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b95bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953f88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a5fe1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8504611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c01446234437b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c64cd14c61322a5ac2d371a95b8ad867ec92d13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e87973d574ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a00000000000000aceb111b66a500ca52fd8f848088c67ee65dfdcc4c580e9bc18c1699dca07d019bf1bf9dd3da480d6c155d7e60674ce88ab5ae07a9d16e22792d99986b531ab4e592ab5925da779e700cf20309a2137877690dc5c07956fc82d7b3bb46d3138041af18508938c9be4e5d0a98073463a5cff6c146d020743da474cb81677a6f389f0e00c33b70b7f8bab95435c27167f365a29fb09cbf35bf192f6a65616fa2ad9a6c7ca3a3ecd96aaecd993e8badb40e7eb8a22b0015e70c885cd519e28448168c6d914265998bff74ea1b0e651a6cae9419096248a0e41573827ad60fafce6e6540734c1f23f75337d836c31497e8112969a039d65aa297e2b046b5f4d11116a89f9f65693d4dc3e70fbfe0b2044fdb3f87e887d1daae8e38a0c19f668f776e19a02bb2449ee4384f6536879c85d7e41bc0276ee2b125d41ff358323311703ec01d64a573bdeb75bdcc87d01de38365ab9222713d2d1640a742d62fefb5403b2ed9969c32a0841e8c36b0107bb888eb14ac62e6d4bdfaeb9ee7430100bf3825a19d6c8997ce285edf1d277ed703f560460417bfe702af833e83c5b987befb6d1fcf765ab7ea537d9dafb622a1ba8686cb150963b84470364942e90d1cf856cead864f5e38c83b9ed86cc5725a20299ce512b16500000000000000000000000000cbf5e55f5adc0a7459f94def8b303c3db48ec4cbf211fbabb0559abb1a14edcb9d6aaf566ce5fc325c60a97a50a42ad405caaf3477ffad000000000000000000"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) fsetxattr$security_selinux(r1, &(0x7f0000000400), &(0x7f0000000440)='system_u:object_r:auditd_initrc_exec_t:s0\x00', 0x2a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x40, 0x7ffc1ffb}]}) shmctl$SHM_INFO(0x0, 0xe, &(0x7f00000002c0)=""/210) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r2, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x0, 0x2173, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00'}, 0x10) add_key$user(0x0, &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)="c79b9fbc", 0x4, 0xffffffffffffffff) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r5, 0x6, 0x24, 0x0, 0x0) ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, &(0x7f0000000980)=0x10001) connect$inet6(r5, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) 74.341853ms ago: executing program 3 (id=3079): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1e, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) syz_read_part_table(0x5c3, &(0x7f00000005c0)="$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") 25.031618ms ago: executing program 1 (id=3080): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008f00850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000d40)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r1, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000880)=ANY=[@ANYBLOB="58000000c5bd0eb9a8db51a7493cc05d2e9ca365ebc1a6498633fcdd2f02f8da41515898193bb6b1a137e7acca105084162aa47c4b082f502b010082f2009ac55248b786fa7ae31f0720e1ee4b80ce997afd72a46a480d54279e31144e823fd40b40da81ca40464f86531ebb4df2abd49494353c728ef34a3bad201f2bd0cca2c76ac9d1bbdf02edc4697ffa7efdf0f5664c407d14f9c6afcb8d386b3b08c95d84f88fb834488b662b0de09f3f07", @ANYRES16=r2, @ANYBLOB="490900000000000000001500000004002b8008000300", @ANYRES32=r4, @ANYBLOB="08002a0000000000050029000100000020002b8004000380080001000104000005000200000000ef04b444a46f00000008002c"], 0x58}}, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, @void, @value}, 0x94) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r6}, 0x10) setsockopt$EBT_SO_SET_ENTRIES(r5, 0x0, 0x80, &(0x7f0000000040)=@broute={'broute\x00', 0x20, 0x1, 0x220, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000500], 0x7, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000020000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff01000000110000000000000000006e2a30456b880000145b41fe6900000079616d3000000000000000000000000079616d3000000000000000000000000076657468315f742f5f626f6e640000000180c20000000000000000000180c20000000000000000000000b0000000670100009001000073746174697374696300000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000646e61740000000000000000ff0300000000000000000000000000000000000010000000000000000180c20000000000ffffffff000000006e666c6f67000000000000000000000000000000000000000000000000000000500000002b25121b6eb244d4f0fffbf04a000000007e4b000022d4e27ebdf3b9dc569e338e2c551c2fc4a19597ba4c501c8b1f16fb7809c40aeea768e825383d2afb577ed2bb6dd99f024b3f54ba00000000415544495400000000000000000000000000000000000000000000000000000008000000000000200000000000000000000200000000"]}, 0x298) fchdir(r0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYRES16=r7], 0x0, 0x42, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000001f80)=""/4100, 0x1004) 18.009679ms ago: executing program 1 (id=3081): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20) syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000340)=ANY=[], 0x2, 0x7bc, &(0x7f0000000a80)="$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") 0s ago: executing program 4 (id=3082): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18010000000000000000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = socket(0x22, 0x2, 0x1) sendmsg$DEVLINK_CMD_PORT_SPLIT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x20000804}, 0x8001) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x22004006, &(0x7f00000010c0)={[{@jqfmt_vfsold}, {@nouid32}, {@nobh}, {@stripe={'stripe', 0x3d, 0xffff}}, {@block_validity}, {@grpjquota, 0x22}], [], 0x2}, 0xc4, 0x46f, &(0x7f0000000940)="$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") syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000280)={0x1, &(0x7f0000000240)=[{0x6}]}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000380)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000340), 0x106}}, 0x20) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000680)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000400), 0x106}}, 0x20) close_range(r2, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): 0198] dump_stack+0x15/0x20 [ 120.261282][T10196] loop1: detected capacity change from 0 to 512 [ 120.264588][T10198] should_fail_ex+0x223/0x230 [ 120.264622][T10198] ? mas_alloc_nodes+0x1d3/0x4a0 [ 120.280672][T10198] should_failslab+0x8f/0xb0 [ 120.285299][T10198] kmem_cache_alloc_noprof+0x4c/0x290 [ 120.290672][T10198] mas_alloc_nodes+0x1d3/0x4a0 [ 120.290692][T10196] ext4 filesystem being mounted at /83/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 120.295439][T10198] mas_preallocate+0x449/0x650 [ 120.295472][T10198] mmap_region+0x1186/0x16e0 [ 120.295511][T10198] do_mmap+0x718/0xb60 [ 120.295535][T10198] vm_mmap_pgoff+0x133/0x290 [ 120.323979][T10198] ksys_mmap_pgoff+0xd0/0x330 [ 120.328670][T10198] ? fpregs_assert_state_consistent+0x83/0xa0 [ 120.334738][T10198] x64_sys_call+0x1884/0x2d60 [ 120.339471][T10198] do_syscall_64+0xc9/0x1c0 [ 120.344102][T10198] ? clear_bhb_loop+0x55/0xb0 [ 120.348780][T10198] ? clear_bhb_loop+0x55/0xb0 [ 120.353784][T10198] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.359747][T10198] RIP: 0033:0x7fc9c539e033 [ 120.364148][T10198] Code: f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 41 89 ca 41 f7 c1 ff 0f 00 00 75 14 b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 25 c3 0f 1f 40 00 48 c7 c0 a8 ff ff ff 64 c7 [ 120.383744][T10198] RSP: 002b:00007fc9c4016e18 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 120.392327][T10198] RAX: ffffffffffffffda RBX: 00000000000002a2 RCX: 00007fc9c539e033 [ 120.400292][T10198] RDX: 0000000000000003 RSI: 0000000008400000 RDI: 0000000000000000 [ 120.408313][T10198] RBP: 0000000020000582 R08: 00000000ffffffff R09: 0000000000000000 [ 120.416498][T10198] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000000000004 [ 120.424468][T10198] R13: 00007fc9c4016ef0 R14: 00007fc9c4016eb0 R15: 0000000020000840 [ 120.432583][T10198] [ 120.487871][T10203] loop2: detected capacity change from 0 to 2048 [ 120.521749][T10215] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 0, id = 0 [ 120.534474][T10203] FAULT_INJECTION: forcing a failure. [ 120.534474][T10203] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 120.547905][T10203] CPU: 0 UID: 0 PID: 10203 Comm: syz.2.2304 Tainted: G W 6.12.0-rc1-syzkaller-00257-g2f91ff27b0ee #0 [ 120.554055][T10210] IPVS: stopping master sync thread 10215 ... [ 120.560355][T10203] Tainted: [W]=WARN [ 120.560365][T10203] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 120.560376][T10203] Call Trace: [ 120.560383][T10203] [ 120.586630][T10203] dump_stack_lvl+0xf2/0x150 [ 120.591215][T10203] dump_stack+0x15/0x20 [ 120.595438][T10203] should_fail_ex+0x223/0x230 [ 120.600167][T10203] should_fail_alloc_page+0xfd/0x110 [ 120.605443][T10203] __alloc_pages_noprof+0x109/0x360 [ 120.610662][T10203] alloc_pages_mpol_noprof+0xb1/0x1e0 [ 120.616032][T10203] folio_alloc_noprof+0xee/0x130 [ 120.620988][T10203] filemap_alloc_folio_noprof+0x69/0x220 [ 120.626619][T10203] __filemap_get_folio+0x298/0x5b0 [ 120.631957][T10203] ? fault_in_readable+0x97/0x1b0 [ 120.637069][T10203] ? fault_in_readable+0xee/0x1b0 [ 120.642088][T10203] ext4_da_write_begin+0x2ef/0x540 [ 120.647293][T10203] generic_perform_write+0x1a8/0x4a0 [ 120.652646][T10203] ext4_buffered_write_iter+0x1ea/0x370 [ 120.658283][T10203] ext4_file_write_iter+0x293/0xe10 [ 120.663534][T10203] ? kstrtouint+0x77/0xc0 [ 120.667930][T10203] ? kstrtouint_from_user+0xb0/0xe0 [ 120.673211][T10203] ? avc_policy_seqno+0x15/0x20 [ 120.678054][T10203] vfs_write+0x76a/0x910 [ 120.682291][T10203] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 120.688073][T10203] ksys_write+0xeb/0x1b0 [ 120.692377][T10203] __x64_sys_write+0x42/0x50 [ 120.697034][T10203] x64_sys_call+0x27dd/0x2d60 [ 120.701797][T10203] do_syscall_64+0xc9/0x1c0 [ 120.706297][T10203] ? clear_bhb_loop+0x55/0xb0 [ 120.711003][T10203] ? clear_bhb_loop+0x55/0xb0 [ 120.715716][T10203] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.721619][T10203] RIP: 0033:0x7f2b2005dff9 [ 120.726032][T10203] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 120.745715][T10203] RSP: 002b:00007f2b1ecd7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 120.754121][T10203] RAX: ffffffffffffffda RBX: 00007f2b20215f80 RCX: 00007f2b2005dff9 [ 120.762081][T10203] RDX: 000000000208e24b RSI: 0000000020000d80 RDI: 0000000000000007 [ 120.770086][T10203] RBP: 00007f2b1ecd7090 R08: 0000000000000000 R09: 0000000000000000 [ 120.778080][T10203] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 120.786037][T10203] R13: 0000000000000000 R14: 00007f2b20215f80 R15: 00007ffc95f05aa8 [ 120.794001][T10203] [ 120.828009][T10118] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 120.831506][T10222] loop1: detected capacity change from 0 to 1024 [ 120.850781][T10222] EXT4-fs: Ignoring removed orlov option [ 120.856475][T10222] EXT4-fs: Ignoring removed nomblk_io_submit option [ 120.864295][T10118] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 4 with error 28 [ 120.876615][T10118] EXT4-fs (loop2): This should not happen!! Data will be lost [ 120.876615][T10118] [ 120.886413][T10118] EXT4-fs (loop2): Total free blocks count 0 [ 120.892511][T10118] EXT4-fs (loop2): Free/Dirty block details [ 120.898515][T10118] EXT4-fs (loop2): free_blocks=66060288 [ 120.904181][T10118] EXT4-fs (loop2): dirty_blocks=16 [ 120.909319][T10118] EXT4-fs (loop2): Block reservation details [ 120.915516][T10118] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 120.932882][T10232] loop0: detected capacity change from 0 to 512 [ 120.958944][T10235] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 120.990382][T10232] ext4 filesystem being mounted at /75/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 121.048376][T10238] SELinux: failed to load policy [ 121.115510][T10254] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 121.124838][T10249] SELinux: failed to load policy [ 121.130527][T10254] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 121.166078][T10258] loop0: detected capacity change from 0 to 1024 [ 121.172917][T10258] EXT4-fs: Ignoring removed orlov option [ 121.178736][T10258] EXT4-fs: Ignoring removed nomblk_io_submit option [ 121.197095][T10258] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a84ec018, mo2=0002] [ 121.205354][T10258] System zones: 0-1, 3-36 [ 121.214743][T10267] SELinux: failed to load policy [ 121.220975][T10267] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 121.230048][T10267] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 121.302741][T10279] syz.3.2329[10279] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 121.302778][T10279] syz.3.2329[10279] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 121.314956][T10279] syz.3.2329[10279] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 121.378808][T10286] loop3: detected capacity change from 0 to 512 [ 121.405936][T10286] ext4 filesystem being mounted at /414/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 121.432647][T10292] loop2: detected capacity change from 0 to 1024 [ 121.439518][T10292] EXT4-fs: Ignoring removed orlov option [ 121.445319][T10292] EXT4-fs: Ignoring removed nomblk_io_submit option [ 121.512648][T10298] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=10298 comm=syz.3.2336 [ 121.795893][T10323] loop1: detected capacity change from 0 to 512 [ 121.815893][T10323] ext4 filesystem being mounted at /90/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 121.939516][T10335] loop1: detected capacity change from 0 to 764 [ 121.947230][T10335] Symlink component flag not implemented [ 121.952874][T10335] Symlink component flag not implemented [ 121.958701][T10335] Symlink component flag not implemented (112) [ 121.964956][T10335] Symlink component flag not implemented (22) [ 122.002884][T10339] loop2: detected capacity change from 0 to 1024 [ 122.013140][T10339] EXT4-fs: Ignoring removed orlov option [ 122.019003][T10339] EXT4-fs: Ignoring removed nomblk_io_submit option [ 122.047351][T10338] loop1: detected capacity change from 0 to 764 [ 122.063463][T10338] Symlink component flag not implemented [ 122.069280][T10338] Symlink component flag not implemented [ 122.087155][T10338] Symlink component flag not implemented (112) [ 122.093434][T10338] Symlink component flag not implemented (22) [ 122.151225][T10353] SELinux: failed to load policy [ 122.157645][T10353] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 122.172395][T10354] loop0: detected capacity change from 0 to 764 [ 122.181538][T10353] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 122.193795][T10354] Symlink component flag not implemented [ 122.199432][T10354] Symlink component flag not implemented [ 122.205437][T10354] Symlink component flag not implemented (112) [ 122.211760][T10354] Symlink component flag not implemented (22) [ 122.271179][T10360] loop0: detected capacity change from 0 to 512 [ 122.296609][T10360] ext4 filesystem being mounted at /81/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 122.429333][T10378] loop3: detected capacity change from 0 to 512 [ 122.446354][T10378] ext4 filesystem being mounted at /420/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 122.488697][T10384] loop3: detected capacity change from 0 to 1024 [ 122.495454][T10384] EXT4-fs: Ignoring removed orlov option [ 122.501251][T10384] EXT4-fs: Ignoring removed nomblk_io_submit option [ 122.703381][T10404] loop2: detected capacity change from 0 to 512 [ 122.716743][T10404] ext4 filesystem being mounted at /462/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 122.752084][T10410] loop3: detected capacity change from 0 to 512 [ 122.786279][T10410] ext4 filesystem being mounted at /426/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 122.823278][T10420] loop3: detected capacity change from 0 to 1024 [ 122.831505][T10420] EXT4-fs: Ignoring removed orlov option [ 122.837234][T10420] EXT4-fs: Ignoring removed nomblk_io_submit option [ 122.877816][ T29] kauditd_printk_skb: 584 callbacks suppressed [ 122.877829][ T29] audit: type=1326 audit(1728112909.520:12609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10411 comm="syz.1.2376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff96745dff9 code=0x7ffc0000 [ 122.908306][ T29] audit: type=1326 audit(1728112909.520:12610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10411 comm="syz.1.2376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff96745dff9 code=0x7ffc0000 [ 122.908336][ T29] audit: type=1326 audit(1728112909.520:12611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10411 comm="syz.1.2376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff96745dff9 code=0x7ffc0000 [ 122.908361][ T29] audit: type=1326 audit(1728112909.520:12612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10411 comm="syz.1.2376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff96745dff9 code=0x7ffc0000 [ 122.908407][ T29] audit: type=1326 audit(1728112909.520:12613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10411 comm="syz.1.2376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff96745dff9 code=0x7ffc0000 [ 122.908433][ T29] audit: type=1326 audit(1728112909.520:12614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10411 comm="syz.1.2376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff96745dff9 code=0x7ffc0000 [ 122.908452][ T29] audit: type=1326 audit(1728112909.540:12615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10411 comm="syz.1.2376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff96745dff9 code=0x7ffc0000 [ 122.908524][ T29] audit: type=1326 audit(1728112909.540:12616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10411 comm="syz.1.2376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff96745dff9 code=0x7ffc0000 [ 122.908543][ T29] audit: type=1326 audit(1728112909.540:12617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10411 comm="syz.1.2376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff96745dff9 code=0x7ffc0000 [ 122.908617][ T29] audit: type=1326 audit(1728112909.540:12618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10411 comm="syz.1.2376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff96745dff9 code=0x7ffc0000 [ 123.019051][T10429] __nla_validate_parse: 5 callbacks suppressed [ 123.019067][T10429] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2378'. [ 123.064942][T10412] 9pnet_fd: Insufficient options for proto=fd [ 123.244280][T10432] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2380'. [ 123.335810][T10444] SELinux: failed to load policy [ 123.342305][T10444] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 123.352632][T10446] FAULT_INJECTION: forcing a failure. [ 123.352632][T10446] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 123.366165][T10446] CPU: 0 UID: 0 PID: 10446 Comm: syz.2.2387 Tainted: G W 6.12.0-rc1-syzkaller-00257-g2f91ff27b0ee #0 [ 123.378489][T10446] Tainted: [W]=WARN [ 123.382284][T10446] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 123.392338][T10446] Call Trace: [ 123.395681][T10446] [ 123.398591][T10446] dump_stack_lvl+0xf2/0x150 [ 123.403218][T10446] dump_stack+0x15/0x20 [ 123.407398][T10446] should_fail_ex+0x223/0x230 [ 123.412101][T10446] should_fail+0xb/0x10 [ 123.416289][T10446] should_fail_usercopy+0x1a/0x20 [ 123.421313][T10446] _copy_from_user+0x1e/0xd0 [ 123.425935][T10446] kstrtouint_from_user+0x76/0xe0 [ 123.430957][T10446] ? 0xffffffff81000000 [ 123.435090][T10446] proc_fail_nth_write+0x4f/0x150 [ 123.440147][T10446] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 123.445770][T10446] vfs_write+0x26c/0x910 [ 123.450024][T10446] ? __fget_files+0x1d4/0x210 [ 123.454803][T10446] ksys_write+0xeb/0x1b0 [ 123.459083][T10446] __x64_sys_write+0x42/0x50 [ 123.463756][T10446] x64_sys_call+0x27dd/0x2d60 [ 123.468435][T10446] do_syscall_64+0xc9/0x1c0 [ 123.473027][T10446] ? clear_bhb_loop+0x55/0xb0 [ 123.477746][T10446] ? clear_bhb_loop+0x55/0xb0 [ 123.482628][T10446] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.488528][T10446] RIP: 0033:0x7f2b2005cadf [ 123.492965][T10446] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8d 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 1c 8e 02 00 48 [ 123.512579][T10446] RSP: 002b:00007f2b1ecd7030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 123.520997][T10446] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f2b2005cadf [ 123.528968][T10446] RDX: 0000000000000001 RSI: 00007f2b1ecd70a0 RDI: 0000000000000007 [ 123.536997][T10446] RBP: 00007f2b1ecd7090 R08: 0000000000000000 R09: 0000000000000000 [ 123.544974][T10446] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 123.553030][T10446] R13: 0000000000000000 R14: 00007f2b20215f80 R15: 00007ffc95f05aa8 [ 123.561017][T10446] [ 123.566266][T10444] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 123.601264][T10451] loop2: detected capacity change from 0 to 512 [ 123.626114][T10451] ext4 filesystem being mounted at /466/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 123.720324][T10457] loop2: detected capacity change from 0 to 1024 [ 123.733957][T10457] EXT4-fs: Ignoring removed orlov option [ 123.739655][T10457] EXT4-fs: Ignoring removed nomblk_io_submit option [ 123.918985][T10462] loop2: detected capacity change from 0 to 512 [ 123.926227][T10462] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 123.937517][T10462] EXT4-fs (loop2): 1 truncate cleaned up [ 123.966582][T10465] FAULT_INJECTION: forcing a failure. [ 123.966582][T10465] name failslab, interval 1, probability 0, space 0, times 0 [ 123.979292][T10465] CPU: 0 UID: 0 PID: 10465 Comm: syz.2.2392 Tainted: G W 6.12.0-rc1-syzkaller-00257-g2f91ff27b0ee #0 [ 123.991619][T10465] Tainted: [W]=WARN [ 123.995475][T10465] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 124.005530][T10465] Call Trace: [ 124.008792][T10465] [ 124.011755][T10465] dump_stack_lvl+0xf2/0x150 [ 124.016331][T10465] dump_stack+0x15/0x20 [ 124.020612][T10465] should_fail_ex+0x223/0x230 [ 124.025315][T10465] ? getname_flags+0x81/0x3b0 [ 124.030036][T10465] should_failslab+0x8f/0xb0 [ 124.034622][T10465] kmem_cache_alloc_noprof+0x4c/0x290 [ 124.040071][T10465] getname_flags+0x81/0x3b0 [ 124.044640][T10465] getname+0x17/0x20 [ 124.048527][T10465] __se_sys_sysfs+0x8d/0x2f0 [ 124.053152][T10465] __x64_sys_sysfs+0x43/0x50 [ 124.057802][T10465] x64_sys_call+0x2adf/0x2d60 [ 124.062554][T10465] do_syscall_64+0xc9/0x1c0 [ 124.067064][T10465] ? clear_bhb_loop+0x55/0xb0 [ 124.071831][T10465] ? clear_bhb_loop+0x55/0xb0 [ 124.076652][T10465] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.082566][T10465] RIP: 0033:0x7f2b2005dff9 [ 124.086977][T10465] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 124.106976][T10465] RSP: 002b:00007f2b1ecd7038 EFLAGS: 00000246 ORIG_RAX: 000000000000008b [ 124.115399][T10465] RAX: ffffffffffffffda RBX: 00007f2b20215f80 RCX: 00007f2b2005dff9 [ 124.123379][T10465] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 124.131395][T10465] RBP: 00007f2b1ecd7090 R08: 0000000000000000 R09: 0000000000000000 [ 124.139440][T10465] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 124.147398][T10465] R13: 0000000000000000 R14: 00007f2b20215f80 R15: 00007ffc95f05aa8 [ 124.155586][T10465] [ 124.252213][T10481] loop0: detected capacity change from 0 to 512 [ 124.286132][T10483] loop2: detected capacity change from 0 to 512 [ 124.293121][T10481] ext4 filesystem being mounted at /89/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 124.325901][T10487] loop1: detected capacity change from 0 to 1024 [ 124.332997][T10487] EXT4-fs: Ignoring removed orlov option [ 124.338813][T10487] EXT4-fs: Ignoring removed nomblk_io_submit option [ 124.369794][T10493] FAULT_INJECTION: forcing a failure. [ 124.369794][T10493] name failslab, interval 1, probability 0, space 0, times 0 [ 124.382464][T10493] CPU: 0 UID: 0 PID: 10493 Comm: syz.4.2403 Tainted: G W 6.12.0-rc1-syzkaller-00257-g2f91ff27b0ee #0 [ 124.394709][T10493] Tainted: [W]=WARN [ 124.398523][T10493] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 124.408613][T10493] Call Trace: [ 124.411916][T10493] [ 124.414996][T10493] dump_stack_lvl+0xf2/0x150 [ 124.419589][T10493] dump_stack+0x15/0x20 [ 124.423794][T10493] should_fail_ex+0x223/0x230 [ 124.428501][T10493] ? __pfx_ip6_dst_gc+0x10/0x10 [ 124.433471][T10493] ? dst_alloc+0xc0/0x100 [ 124.437813][T10493] should_failslab+0x8f/0xb0 [ 124.442410][T10493] kmem_cache_alloc_noprof+0x4c/0x290 [ 124.448351][T10493] ? fib6_select_path+0x2bf/0x2f0 [ 124.453423][T10493] dst_alloc+0xc0/0x100 [ 124.457587][T10493] ip6_pol_route+0x6ff/0xb90 [ 124.462248][T10493] ? ip6_pol_route+0x385/0xb90 [ 124.467029][T10493] ip6_pol_route_output+0x3f/0x50 [ 124.472127][T10493] ? __pfx_ip6_pol_route_output+0x10/0x10 [ 124.477912][T10493] fib6_rule_lookup+0x225/0x4e0 [ 124.482793][T10493] ? __pfx_ip6_pol_route_output+0x10/0x10 [ 124.488538][T10493] ? l3mdev_link_scope_lookup+0x1b/0x120 [ 124.494244][T10493] ? dev_get_by_index_rcu+0x9a/0xb0 [ 124.499464][T10493] ip6_route_output_flags+0x1f1/0x2e0 [ 124.504899][T10493] ip6_dst_lookup_tail+0x4d6/0xa60 [ 124.510131][T10493] ? selinux_file_open+0x34a/0x3b0 [ 124.515228][T10493] ip6_dst_lookup_flow+0x48/0xc0 [ 124.520165][T10493] rawv6_sendmsg+0x9b2/0xf50 [ 124.524888][T10493] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 124.530044][T10493] inet_sendmsg+0xc5/0xd0 [ 124.534381][T10493] __sock_sendmsg+0x102/0x180 [ 124.534820][T10483] ext4 filesystem being mounted at /472/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 124.539057][T10493] sock_write_iter+0x15e/0x1a0 [ 124.539090][T10493] vfs_write+0x76a/0x910 [ 124.558441][T10493] ? __pfx_sock_write_iter+0x10/0x10 [ 124.563748][T10493] ksys_write+0xeb/0x1b0 [ 124.567985][T10493] __x64_sys_write+0x42/0x50 [ 124.572571][T10493] x64_sys_call+0x27dd/0x2d60 [ 124.577259][T10493] do_syscall_64+0xc9/0x1c0 [ 124.581912][T10493] ? clear_bhb_loop+0x55/0xb0 [ 124.586675][T10493] ? clear_bhb_loop+0x55/0xb0 [ 124.591341][T10493] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.597226][T10493] RIP: 0033:0x7f5dfd09dff9 [ 124.601638][T10493] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 124.621305][T10493] RSP: 002b:00007f5dfbd11038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 124.629744][T10493] RAX: ffffffffffffffda RBX: 00007f5dfd255f80 RCX: 00007f5dfd09dff9 [ 124.637779][T10493] RDX: 000000000000fff7 RSI: 0000000020000040 RDI: 0000000000000004 [ 124.645789][T10493] RBP: 00007f5dfbd11090 R08: 0000000000000000 R09: 0000000000000000 [ 124.653762][T10493] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 124.661789][T10493] R13: 0000000000000000 R14: 00007f5dfd255f80 R15: 00007fff55cc5428 [ 124.669745][T10493] [ 124.676719][T10476] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2398'. [ 124.718138][T10505] SELinux: failed to load policy [ 124.724706][T10505] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 124.747712][T10505] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 124.751650][T10507] SELinux: failed to load policy [ 124.772604][T10507] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 124.781393][T10507] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 124.858475][T10523] loop1: detected capacity change from 0 to 512 [ 124.872404][T10525] loop4: detected capacity change from 0 to 128 [ 124.887358][T10523] ext4 filesystem being mounted at /103/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 124.923463][T10529] FAULT_INJECTION: forcing a failure. [ 124.923463][T10529] name failslab, interval 1, probability 0, space 0, times 0 [ 124.936213][T10529] CPU: 1 UID: 0 PID: 10529 Comm: syz.1.2417 Tainted: G W 6.12.0-rc1-syzkaller-00257-g2f91ff27b0ee #0 [ 124.948490][T10529] Tainted: [W]=WARN [ 124.952313][T10529] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 124.962404][T10529] Call Trace: [ 124.965670][T10529] [ 124.968588][T10529] dump_stack_lvl+0xf2/0x150 [ 124.973170][T10529] dump_stack+0x15/0x20 [ 124.977403][T10529] should_fail_ex+0x223/0x230 [ 124.982076][T10529] ? getname_flags+0x81/0x3b0 [ 124.986742][T10529] should_failslab+0x8f/0xb0 [ 124.991334][T10529] kmem_cache_alloc_noprof+0x4c/0x290 [ 124.996711][T10529] getname_flags+0x81/0x3b0 [ 125.001282][T10529] user_path_at+0x26/0x110 [ 125.005747][T10529] __x64_sys_llistxattr+0x73/0x130 [ 125.010861][T10529] x64_sys_call+0x257b/0x2d60 [ 125.015661][T10529] do_syscall_64+0xc9/0x1c0 [ 125.020156][T10529] ? clear_bhb_loop+0x55/0xb0 [ 125.024878][T10529] ? clear_bhb_loop+0x55/0xb0 [ 125.029603][T10529] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.035502][T10529] RIP: 0033:0x7ff96745dff9 [ 125.039903][T10529] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 125.059529][T10529] RSP: 002b:00007ff9660d7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000c3 [ 125.068007][T10529] RAX: ffffffffffffffda RBX: 00007ff967615f80 RCX: 00007ff96745dff9 [ 125.076047][T10529] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000280 [ 125.084087][T10529] RBP: 00007ff9660d7090 R08: 0000000000000000 R09: 0000000000000000 [ 125.092046][T10529] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 125.100104][T10529] R13: 0000000000000000 R14: 00007ff967615f80 R15: 00007ffda90898d8 [ 125.108069][T10529] [ 125.125342][T10530] bio_check_eod: 91454 callbacks suppressed [ 125.125359][T10530] syz.4.2416: attempt to access beyond end of device [ 125.125359][T10530] loop4: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 125.142124][T10535] syz.1.2418[10535] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 125.144795][T10530] Buffer I/O error on dev loop4, logical block 128, lost async page write [ 125.145971][T10535] syz.1.2418[10535] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 125.165044][T10535] syz.1.2418[10535] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 125.184478][T10535] dummy0: entered promiscuous mode [ 125.201098][T10535] macvtap1: entered promiscuous mode [ 125.208294][T10535] dummy0: left promiscuous mode [ 125.448500][T10540] loop2: detected capacity change from 0 to 1024 [ 125.456012][T10540] EXT4-fs: Ignoring removed orlov option [ 125.461740][T10540] EXT4-fs: Ignoring removed nomblk_io_submit option [ 125.485441][T10540] EXT4-fs mount: 138 callbacks suppressed [ 125.485452][T10540] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 125.602638][ T3265] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.639050][T10550] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2419'. [ 125.682342][T10556] sg_write: data in/out 209152/1 bytes for SCSI command 0xf2-- guessing data in; [ 125.682342][T10556] program syz.3.2423 not setting count and/or reply_len properly [ 125.697398][T10558] loop2: detected capacity change from 0 to 512 [ 125.711594][T10558] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 125.738582][T10558] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e12c, mo2=0002] [ 125.748857][T10558] EXT4-fs (loop2): orphan cleanup on readonly fs [ 125.760720][T10558] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.2424: bg 0: block 361: padding at end of block bitmap is not set [ 125.777757][T10565] loop4: detected capacity change from 0 to 512 [ 125.785886][T10558] EXT4-fs (loop2): Remounting filesystem read-only [ 125.793566][T10558] EXT4-fs (loop2): 1 truncate cleaned up [ 125.799995][T10558] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 125.812271][T10558] SELinux: (dev loop2, type ext4) getxattr errno 5 [ 125.819797][T10558] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 125.820695][T10565] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 125.856595][T10570] loop0: detected capacity change from 0 to 512 [ 125.857060][T10565] ext4 filesystem being mounted at /469/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 125.926016][ T4036] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.935720][T10570] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 125.950206][T10574] SELinux: failed to load policy [ 125.962249][T10570] ext4 filesystem being mounted at /94/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 125.989371][T10574] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 126.017435][T10578] SELinux: failed to load policy [ 126.032254][T10574] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 126.058405][T10580] loop1: detected capacity change from 0 to 1024 [ 126.088726][T10580] EXT4-fs: Ignoring removed orlov option [ 126.094444][T10580] EXT4-fs: Ignoring removed nomblk_io_submit option [ 126.108309][ T8995] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.118654][T10581] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 126.136011][T10583] FAULT_INJECTION: forcing a failure. [ 126.136011][T10583] name failslab, interval 1, probability 0, space 0, times 0 [ 126.148664][T10583] CPU: 1 UID: 0 PID: 10583 Comm: syz.0.2432 Tainted: G W 6.12.0-rc1-syzkaller-00257-g2f91ff27b0ee #0 [ 126.161036][T10583] Tainted: [W]=WARN [ 126.164829][T10583] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 126.174885][T10583] Call Trace: [ 126.178237][T10583] [ 126.181219][T10583] dump_stack_lvl+0xf2/0x150 [ 126.185818][T10583] dump_stack+0x15/0x20 [ 126.190069][T10583] should_fail_ex+0x223/0x230 [ 126.194819][T10583] ? vm_area_alloc+0xac/0x130 [ 126.199503][T10583] should_failslab+0x8f/0xb0 [ 126.204112][T10583] kmem_cache_alloc_noprof+0x4c/0x290 [ 126.209628][T10583] vm_area_alloc+0xac/0x130 [ 126.214194][T10583] alloc_bprm+0x3bc/0x740 [ 126.218541][T10583] ? should_fail_ex+0xd7/0x230 [ 126.223344][T10583] do_execveat_common+0x134/0x800 [ 126.228390][T10583] ? getname_flags+0x15a/0x3b0 [ 126.233180][T10583] __x64_sys_execveat+0x75/0x90 [ 126.238069][T10583] x64_sys_call+0x8ae/0x2d60 [ 126.242667][T10583] do_syscall_64+0xc9/0x1c0 [ 126.247220][T10583] ? clear_bhb_loop+0x55/0xb0 [ 126.252029][T10583] ? clear_bhb_loop+0x55/0xb0 [ 126.256748][T10583] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.262670][T10583] RIP: 0033:0x7f7ff453dff9 [ 126.267160][T10583] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 126.286786][T10583] RSP: 002b:00007f7ff31b7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 126.295210][T10583] RAX: ffffffffffffffda RBX: 00007f7ff46f5f80 RCX: 00007f7ff453dff9 [ 126.303263][T10583] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000006 [ 126.311239][T10583] RBP: 00007f7ff31b7090 R08: 0000000000001000 R09: 0000000000000000 [ 126.319219][T10583] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 126.327267][T10583] R13: 0000000000000000 R14: 00007f7ff46f5f80 R15: 00007ffc8b14b088 [ 126.335310][T10583] [ 126.343151][T10581] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 126.343481][T10580] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 126.731216][ T9125] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.774636][T10603] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2436'. [ 126.790650][T10605] sg_write: data in/out 209152/1 bytes for SCSI command 0xf2-- guessing data in; [ 126.790650][T10605] program syz.1.2437 not setting count and/or reply_len properly [ 126.919770][T10618] loop0: detected capacity change from 0 to 512 [ 126.955655][T10618] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 126.973058][T10618] ext4 filesystem being mounted at /102/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 127.008260][T10563] syz.3.2427 (10563) used greatest stack depth: 6232 bytes left [ 127.039678][ T8995] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.079329][T10628] loop0: detected capacity change from 0 to 512 [ 127.114789][T10628] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 127.133387][T10628] ext4 filesystem being mounted at /103/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 127.134316][T10634] loop3: detected capacity change from 0 to 1024 [ 127.153584][T10634] EXT4-fs: Ignoring removed orlov option [ 127.159376][T10634] EXT4-fs: Ignoring removed nomblk_io_submit option [ 127.169358][T10636] SELinux: failed to load policy [ 127.175188][T10636] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 127.183954][T10636] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 127.185250][ T8995] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.211042][T10634] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 127.274487][T10645] sg_write: data in/out 209152/1 bytes for SCSI command 0xf2-- guessing data in; [ 127.274487][T10645] program syz.1.2454 not setting count and/or reply_len properly [ 127.358248][T10652] loop1: detected capacity change from 0 to 512 [ 127.405190][T10652] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 127.417772][T10652] ext4 filesystem being mounted at /115/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 127.418673][ T3275] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.437766][T10652] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.469520][T10662] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2458'. [ 127.504878][T10665] loop1: detected capacity change from 0 to 512 [ 127.511267][T10666] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2453'. [ 127.525305][T10665] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 127.537995][T10665] ext4 filesystem being mounted at /117/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 127.597356][ T9125] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.628208][T10681] loop1: detected capacity change from 0 to 512 [ 127.643309][T10681] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 127.655101][T10681] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8802e12c, mo2=0002] [ 127.664518][T10681] EXT4-fs (loop1): orphan cleanup on readonly fs [ 127.671123][T10681] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.2463: bg 0: block 361: padding at end of block bitmap is not set [ 127.686613][T10681] EXT4-fs (loop1): Remounting filesystem read-only [ 127.695141][T10681] EXT4-fs (loop1): 1 truncate cleaned up [ 127.701305][T10681] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 127.715630][T10681] SELinux: (dev loop1, type ext4) getxattr errno 5 [ 127.722506][T10679] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2464'. [ 127.741476][T10681] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 127.756145][T10679] xfrm1: entered promiscuous mode [ 127.761213][T10679] xfrm1: entered allmulticast mode [ 127.783938][T10681] xt_recent: hitcount (4294967295) is larger than allowed maximum (65535) [ 127.829016][T10696] loop0: detected capacity change from 0 to 1024 [ 127.849583][T10698] loop1: detected capacity change from 0 to 256 [ 127.865022][T10696] EXT4-fs: Ignoring removed orlov option [ 127.870705][T10696] EXT4-fs: Ignoring removed nomblk_io_submit option [ 127.885284][T10696] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 127.902357][ T29] kauditd_printk_skb: 520 callbacks suppressed [ 127.902492][ T29] audit: type=1326 audit(1728112914.540:13139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10703 comm="syz.2.2472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b2005dff9 code=0x7ffc0000 [ 127.932437][ T29] audit: type=1326 audit(1728112914.540:13140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10703 comm="syz.2.2472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=115 compat=0 ip=0x7f2b2005dff9 code=0x7ffc0000 [ 127.956154][ T29] audit: type=1326 audit(1728112914.540:13141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10703 comm="syz.2.2472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b2005dff9 code=0x7ffc0000 [ 127.986518][T10713] syz.2.2473[10713] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 127.986665][T10713] syz.2.2473[10713] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 128.001313][T10713] syz.2.2473[10713] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 128.036056][T10717] loop1: detected capacity change from 0 to 512 [ 128.063269][T10720] FAULT_INJECTION: forcing a failure. [ 128.063269][T10720] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 128.076485][T10720] CPU: 1 UID: 0 PID: 10720 Comm: syz.2.2475 Tainted: G W 6.12.0-rc1-syzkaller-00257-g2f91ff27b0ee #0 [ 128.088771][T10720] Tainted: [W]=WARN [ 128.089149][T10717] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 128.092552][T10720] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 128.092567][T10720] Call Trace: [ 128.092574][T10720] [ 128.105888][T10717] ext4 filesystem being mounted at /120/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 128.115004][T10720] dump_stack_lvl+0xf2/0x150 [ 128.136314][T10720] dump_stack+0x15/0x20 [ 128.140484][T10720] should_fail_ex+0x223/0x230 [ 128.145162][T10720] should_fail+0xb/0x10 [ 128.149338][T10720] should_fail_usercopy+0x1a/0x20 [ 128.154398][T10720] _copy_from_user+0x1e/0xd0 [ 128.158977][T10720] copy_msghdr_from_user+0x54/0x2a0 [ 128.164170][T10720] __sys_sendmsg+0x171/0x270 [ 128.168839][T10720] __x64_sys_sendmsg+0x46/0x50 [ 128.173596][T10720] x64_sys_call+0x2689/0x2d60 [ 128.178316][T10720] do_syscall_64+0xc9/0x1c0 [ 128.182808][T10720] ? clear_bhb_loop+0x55/0xb0 [ 128.187490][T10720] ? clear_bhb_loop+0x55/0xb0 [ 128.192197][T10720] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.198209][T10720] RIP: 0033:0x7f2b2005dff9 [ 128.202614][T10720] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 128.222325][T10720] RSP: 002b:00007f2b1ecd7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 128.230796][T10720] RAX: ffffffffffffffda RBX: 00007f2b20215f80 RCX: 00007f2b2005dff9 [ 128.238760][T10720] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000004 [ 128.246718][T10720] RBP: 00007f2b1ecd7090 R08: 0000000000000000 R09: 0000000000000000 [ 128.254728][T10720] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 128.262748][T10720] R13: 0000000000000000 R14: 00007f2b20215f80 R15: 00007ffc95f05aa8 [ 128.270711][T10720] [ 128.278156][T10705] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2471'. [ 128.281037][ T8995] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.301150][ T29] audit: type=1326 audit(1728112914.940:13142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10716 comm="syz.1.2474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff96745dff9 code=0x7ffc0000 [ 128.344940][ T29] audit: type=1326 audit(1728112914.940:13143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10716 comm="syz.1.2474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=31 compat=0 ip=0x7ff96745dff9 code=0x7ffc0000 [ 128.365102][T10730] SELinux: failed to load policy [ 128.368539][ T29] audit: type=1326 audit(1728112914.940:13144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10716 comm="syz.1.2474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff96745dff9 code=0x7ffc0000 [ 128.397195][ T29] audit: type=1326 audit(1728112914.970:13145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10716 comm="syz.1.2474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff96745dff9 code=0x7ffc0000 [ 128.420852][ T29] audit: type=1326 audit(1728112914.970:13146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10716 comm="syz.1.2474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff96745dff9 code=0x7ffc0000 [ 128.444619][ T29] audit: type=1326 audit(1728112914.970:13147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10716 comm="syz.1.2474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff96745dff9 code=0x7ffc0000 [ 128.468579][ T29] audit: type=1326 audit(1728112914.980:13148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10716 comm="syz.1.2474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff96745dff9 code=0x7ffc0000 [ 128.469253][T10732] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 128.494450][ T9125] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.513159][T10733] loop3: detected capacity change from 0 to 512 [ 128.529126][T10732] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 128.542676][T10733] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 128.559270][T10733] ext4 filesystem being mounted at /445/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 128.587428][T10733] syz.3.2480 (10733): attempted to duplicate a private mapping with mremap. This is not supported. [ 128.629725][ T3275] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.662406][T10748] loop1: detected capacity change from 0 to 512 [ 128.675374][T10750] loop2: detected capacity change from 0 to 512 [ 128.695915][T10750] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 128.713840][T10750] ext4 filesystem being mounted at /489/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 128.721117][T10748] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 128.730537][T10750] FAULT_INJECTION: forcing a failure. [ 128.730537][T10750] name failslab, interval 1, probability 0, space 0, times 0 [ 128.738020][T10748] ext4 filesystem being mounted at /123/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 128.749399][T10750] CPU: 0 UID: 0 PID: 10750 Comm: syz.2.2485 Tainted: G W 6.12.0-rc1-syzkaller-00257-g2f91ff27b0ee #0 [ 128.749451][T10750] Tainted: [W]=WARN [ 128.749457][T10750] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 128.749468][T10750] Call Trace: [ 128.789319][T10750] [ 128.792254][T10750] dump_stack_lvl+0xf2/0x150 [ 128.796837][T10750] dump_stack+0x15/0x20 [ 128.800974][T10750] should_fail_ex+0x223/0x230 [ 128.805710][T10750] ? getname_flags+0x81/0x3b0 [ 128.810391][T10750] should_failslab+0x8f/0xb0 [ 128.815033][T10750] kmem_cache_alloc_noprof+0x4c/0x290 [ 128.820396][T10750] getname_flags+0x81/0x3b0 [ 128.824895][T10750] user_path_at+0x26/0x110 [ 128.829382][T10750] __x64_sys_llistxattr+0x73/0x130 [ 128.834486][T10750] x64_sys_call+0x257b/0x2d60 [ 128.839205][T10750] do_syscall_64+0xc9/0x1c0 [ 128.843693][T10750] ? clear_bhb_loop+0x55/0xb0 [ 128.848466][T10750] ? clear_bhb_loop+0x55/0xb0 [ 128.853143][T10750] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.859044][T10750] RIP: 0033:0x7f2b2005dff9 [ 128.863513][T10750] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 128.883125][T10750] RSP: 002b:00007f2b1ecd7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000c3 [ 128.891531][T10750] RAX: ffffffffffffffda RBX: 00007f2b20215f80 RCX: 00007f2b2005dff9 [ 128.899492][T10750] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000280 [ 128.907532][T10750] RBP: 00007f2b1ecd7090 R08: 0000000000000000 R09: 0000000000000000 [ 128.915486][T10750] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 128.923530][T10750] R13: 0000000000000000 R14: 00007f2b20215f80 R15: 00007ffc95f05aa8 [ 128.931486][T10750] [ 128.939207][ T9125] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.942048][T10759] loop3: detected capacity change from 0 to 1024 [ 128.955388][T10759] EXT4-fs: Ignoring removed orlov option [ 128.961241][T10759] EXT4-fs: Ignoring removed nomblk_io_submit option [ 128.985021][ T3265] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.989037][T10761] loop1: detected capacity change from 0 to 2048 [ 129.009401][T10759] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 129.011429][T10765] loop4: detected capacity change from 0 to 512 [ 129.056506][T10761] EXT4-fs: test_dummy_encryption option not supported [ 129.075007][T10765] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 129.103791][T10765] ext4 filesystem being mounted at /471/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 129.156552][T10774] FAULT_INJECTION: forcing a failure. [ 129.156552][T10774] name failslab, interval 1, probability 0, space 0, times 0 [ 129.169230][T10774] CPU: 1 UID: 0 PID: 10774 Comm: syz.1.2492 Tainted: G W 6.12.0-rc1-syzkaller-00257-g2f91ff27b0ee #0 [ 129.181496][T10774] Tainted: [W]=WARN [ 129.185351][T10774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 129.195398][T10774] Call Trace: [ 129.198714][T10774] [ 129.201627][T10774] dump_stack_lvl+0xf2/0x150 [ 129.206209][T10774] dump_stack+0x15/0x20 [ 129.210364][T10774] should_fail_ex+0x223/0x230 [ 129.215075][T10774] ? vm_area_dup+0x98/0x130 [ 129.219559][T10774] should_failslab+0x8f/0xb0 [ 129.224172][T10774] kmem_cache_alloc_noprof+0x4c/0x290 [ 129.229730][T10774] vm_area_dup+0x98/0x130 [ 129.234146][T10774] __split_vma+0xf7/0x6a0 [ 129.238464][T10774] vms_gather_munmap_vmas+0x175/0x7a0 [ 129.243828][T10774] ? mntput+0x49/0x70 [ 129.247845][T10774] do_vmi_align_munmap+0x1a9/0x390 [ 129.252947][T10774] do_vmi_munmap+0x1eb/0x230 [ 129.257583][T10774] do_munmap+0x8b/0xc0 [ 129.261647][T10774] __se_sys_mremap+0x955/0xec0 [ 129.266441][T10774] ? fput+0x14e/0x190 [ 129.270416][T10774] __x64_sys_mremap+0x67/0x80 [ 129.275145][T10774] x64_sys_call+0x2747/0x2d60 [ 129.279837][T10774] do_syscall_64+0xc9/0x1c0 [ 129.284343][T10774] ? clear_bhb_loop+0x55/0xb0 [ 129.289034][T10774] ? clear_bhb_loop+0x55/0xb0 [ 129.290054][T10778] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2489'. [ 129.293755][T10774] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.308585][T10774] RIP: 0033:0x7ff96745dff9 [ 129.313030][T10774] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 129.332727][T10774] RSP: 002b:00007ff9660d7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 129.341238][T10774] RAX: ffffffffffffffda RBX: 00007ff967615f80 RCX: 00007ff96745dff9 [ 129.349210][T10774] RDX: 0000000000800000 RSI: 0000000000001000 RDI: 0000000020a96000 [ 129.357215][T10774] RBP: 00007ff9660d7090 R08: 0000000020130000 R09: 0000000000000000 [ 129.365174][T10774] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001 [ 129.373127][T10774] R13: 0000000000000000 R14: 00007ff967615f80 R15: 00007ffda90898d8 [ 129.381163][T10774] [ 129.384617][ T4036] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.444662][ T3275] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.486057][T10795] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2499'. [ 129.499891][T10794] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2496'. [ 129.513564][T10800] SELinux: failed to load policy [ 129.533807][T10800] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 129.544582][T10800] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 129.558923][T10795] FAULT_INJECTION: forcing a failure. [ 129.558923][T10795] name failslab, interval 1, probability 0, space 0, times 0 [ 129.571592][T10795] CPU: 0 UID: 0 PID: 10795 Comm: syz.2.2499 Tainted: G W 6.12.0-rc1-syzkaller-00257-g2f91ff27b0ee #0 [ 129.583897][T10795] Tainted: [W]=WARN [ 129.587727][T10795] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 129.597778][T10795] Call Trace: [ 129.601083][T10795] [ 129.604008][T10795] dump_stack_lvl+0xf2/0x150 [ 129.608589][T10795] dump_stack+0x15/0x20 [ 129.612731][T10795] should_fail_ex+0x223/0x230 [ 129.617420][T10795] ? wakeup_source_sysfs_add+0x37/0x1a0 [ 129.623048][T10795] should_failslab+0x8f/0xb0 [ 129.627639][T10795] __kmalloc_cache_noprof+0x4b/0x2a0 [ 129.632938][T10795] wakeup_source_sysfs_add+0x37/0x1a0 [ 129.638377][T10795] wakeup_source_register+0x106/0x250 [ 129.643743][T10795] ep_insert+0x7c6/0xce0 [ 129.647984][T10795] do_epoll_ctl+0x616/0x940 [ 129.652549][T10795] __x64_sys_epoll_ctl+0xc6/0xf0 [ 129.657511][T10795] x64_sys_call+0x27c9/0x2d60 [ 129.662233][T10795] do_syscall_64+0xc9/0x1c0 [ 129.666742][T10795] ? clear_bhb_loop+0x55/0xb0 [ 129.671492][T10795] ? clear_bhb_loop+0x55/0xb0 [ 129.676194][T10795] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.682095][T10795] RIP: 0033:0x7f2b2005dff9 [ 129.686669][T10795] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 129.706273][T10795] RSP: 002b:00007f2b1ecd7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 129.714724][T10795] RAX: ffffffffffffffda RBX: 00007f2b20215f80 RCX: 00007f2b2005dff9 [ 129.722714][T10795] RDX: 0000000000000009 RSI: 0000000000000001 RDI: 000000000000000a [ 129.730746][T10795] RBP: 00007f2b1ecd7090 R08: 0000000000000000 R09: 0000000000000000 [ 129.738703][T10795] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000002 [ 129.746662][T10795] R13: 0000000000000000 R14: 00007f2b20215f80 R15: 00007ffc95f05aa8 [ 129.754658][T10795] [ 129.771257][T10795] dvmrp0: entered allmulticast mode [ 129.780118][T10805] SELinux: failed to load policy [ 129.782280][T10806] loop4: detected capacity change from 0 to 512 [ 129.808299][T10806] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 129.826064][T10806] ext4 filesystem being mounted at /474/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 129.838828][T10811] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 129.847881][T10811] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 129.877708][ T4036] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.898511][T10816] netem: incorrect ge model size [ 129.920951][T10818] loop4: detected capacity change from 0 to 1024 [ 129.927741][T10818] EXT4-fs: Ignoring removed orlov option [ 129.933435][T10818] EXT4-fs: Ignoring removed nomblk_io_submit option [ 129.945126][T10818] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 130.046961][T10824] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2505'. [ 130.058289][ T4036] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.078243][T10826] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2508'. [ 130.148091][T10837] sg_write: data in/out 209152/1 bytes for SCSI command 0xf2-- guessing data in; [ 130.148091][T10837] program syz.2.2512 not setting count and/or reply_len properly [ 130.184429][T10840] loop4: detected capacity change from 0 to 1024 [ 130.191182][T10840] EXT4-fs: Ignoring removed orlov option [ 130.197057][T10840] EXT4-fs: Ignoring removed nomblk_io_submit option [ 130.215139][T10840] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 130.229906][T10835] EXT4-fs error (device loop4): ext4_xattr_set_entry:1668: inode #13: comm syz.4.2511: corrupted xattr entries [ 130.256297][T10835] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2511'. [ 130.274671][ T4036] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.320448][T10851] loop4: detected capacity change from 0 to 512 [ 130.327256][T10853] SELinux: failed to load policy [ 130.333558][T10853] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 130.342566][T10853] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 130.353975][T10851] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 130.367075][T10851] ext4 filesystem being mounted at /481/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 130.396547][ T4036] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.407071][T10857] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2513'. [ 130.452696][T10861] loop2: detected capacity change from 0 to 1024 [ 130.460374][T10861] EXT4-fs: Ignoring removed orlov option [ 130.466103][T10861] EXT4-fs: Ignoring removed nomblk_io_submit option [ 130.485099][T10861] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 130.594980][ T3265] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.821344][T10871] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2520'. [ 130.911052][T10875] loop2: detected capacity change from 0 to 2048 [ 130.945754][T10875] Alternate GPT is invalid, using primary GPT. [ 130.952022][T10875] loop2: p1 p2 p3 [ 131.008120][T10885] loop1: detected capacity change from 0 to 764 [ 131.015467][T10885] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 131.045795][T10889] loop2: detected capacity change from 0 to 512 [ 131.066018][T10889] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 131.078714][T10889] ext4 filesystem being mounted at /503/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 131.107248][ T3265] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.129444][T10896] loop2: detected capacity change from 0 to 1024 [ 131.136133][T10896] EXT4-fs: Ignoring removed orlov option [ 131.141814][T10896] EXT4-fs: Ignoring removed nomblk_io_submit option [ 131.155784][T10896] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 131.258866][T10902] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2530'. [ 131.275580][ T3265] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.298860][T10906] SELinux: failed to load policy [ 131.305595][T10906] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 131.316246][T10906] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 131.397334][T10917] loop0: detected capacity change from 0 to 2048 [ 131.429022][T10924] loop1: detected capacity change from 0 to 512 [ 131.445159][T10917] Alternate GPT is invalid, using primary GPT. [ 131.451450][T10917] loop0: p1 p2 p3 [ 131.484782][T10924] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 131.497985][T10924] ext4 filesystem being mounted at /145/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 131.528259][ T3754] udevd[3754]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 131.535099][ T3256] udevd[3256]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 131.544942][ T3259] udevd[3259]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 131.553925][ T9125] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.576016][T10932] loop0: detected capacity change from 0 to 1024 [ 131.582670][T10932] EXT4-fs: Ignoring removed orlov option [ 131.588374][T10932] EXT4-fs: Ignoring removed nomblk_io_submit option [ 131.628071][T10932] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 131.688621][T10947] syz.1.2549[10947] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 131.688722][T10947] syz.1.2549[10947] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 131.700565][T10947] syz.1.2549[10947] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 131.774866][ T8995] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.806704][T10956] loop1: detected capacity change from 0 to 2048 [ 131.845613][T10963] loop0: detected capacity change from 0 to 512 [ 131.857994][T10956] Alternate GPT is invalid, using primary GPT. [ 131.864404][T10956] loop1: p1 p2 p3 [ 131.888592][T10963] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 131.902477][T10963] ext4 filesystem being mounted at /115/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 131.903478][ T2968] Alternate GPT is invalid, using primary GPT. [ 131.919491][ T2968] loop1: p1 p2 p3 [ 131.945537][ T8995] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.945945][ T3259] udevd[3259]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 131.956086][ T3754] udevd[3754]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 131.975477][ T3256] udevd[3256]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 132.032053][T10980] loop0: detected capacity change from 0 to 2048 [ 132.072968][T10988] loop1: detected capacity change from 0 to 1024 [ 132.088958][T10988] EXT4-fs: Ignoring removed orlov option [ 132.094839][T10988] EXT4-fs: Ignoring removed nomblk_io_submit option [ 132.115782][T10988] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 132.130002][T10999] SELinux: failed to load policy [ 132.143864][T10999] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 132.154986][T10999] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 132.252752][ T9125] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.280238][T11005] loop1: detected capacity change from 0 to 2048 [ 132.315153][T11005] Alternate GPT is invalid, using primary GPT. [ 132.321402][T11005] loop1: p1 p2 p3 [ 132.352578][T11009] loop1: detected capacity change from 0 to 512 [ 132.366932][T11009] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 132.379538][T11009] ext4 filesystem being mounted at /159/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 132.408723][ T9125] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.489384][T11024] loop1: detected capacity change from 0 to 764 [ 132.497752][T11024] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 132.612985][T11033] loop1: detected capacity change from 0 to 2048 [ 132.644984][T11033] Alternate GPT is invalid, using primary GPT. [ 132.651380][T11033] loop1: p1 p2 p3 [ 132.691358][ T3754] udevd[3754]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 132.692565][ T3259] udevd[3259]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 132.707537][ T3256] udevd[3256]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 132.831057][T11058] loop2: detected capacity change from 0 to 764 [ 132.843138][T11057] loop0: detected capacity change from 0 to 2048 [ 132.853826][T11060] loop4: detected capacity change from 0 to 2048 [ 132.861637][T11058] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 132.870010][T11057] EXT4-fs: test_dummy_encryption option not supported [ 132.908558][T11060] Alternate GPT is invalid, using primary GPT. [ 132.914939][T11060] loop4: p1 p2 p3 [ 132.918815][ T29] kauditd_printk_skb: 475 callbacks suppressed [ 132.918826][ T29] audit: type=1400 audit(1728112919.550:13624): avc: denied { connect } for pid=11056 comm="syz.0.2591" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 132.944964][ T29] audit: type=1400 audit(1728112919.550:13625): avc: denied { remount } for pid=11062 comm="syz.3.2593" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 132.985359][T11068] SELinux: failed to load policy [ 132.991240][ T2968] Alternate GPT is invalid, using primary GPT. [ 132.997623][ T2968] loop4: p1 p2 p3 [ 133.041131][T11068] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 133.080700][T11077] loop0: detected capacity change from 0 to 256 [ 133.114823][T11068] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 133.138236][T11077] FAULT_INJECTION: forcing a failure. [ 133.138236][T11077] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 133.151384][T11077] CPU: 0 UID: 0 PID: 11077 Comm: syz.0.2597 Tainted: G W 6.12.0-rc1-syzkaller-00257-g2f91ff27b0ee #0 [ 133.163641][T11077] Tainted: [W]=WARN [ 133.167447][T11077] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 133.177510][T11077] Call Trace: [ 133.180830][T11077] [ 133.183758][T11077] dump_stack_lvl+0xf2/0x150 [ 133.188350][T11077] dump_stack+0x15/0x20 [ 133.192506][T11077] should_fail_ex+0x223/0x230 [ 133.197212][T11077] should_fail+0xb/0x10 [ 133.201462][T11077] should_fail_usercopy+0x1a/0x20 [ 133.206549][T11077] copy_page_from_iter_atomic+0x22e/0xfa0 [ 133.212278][T11077] ? fat_write_begin+0x51/0xe0 [ 133.217130][T11077] ? __pfx_fat_get_block+0x10/0x10 [ 133.222262][T11077] generic_perform_write+0x2f1/0x4a0 [ 133.227556][T11077] __generic_file_write_iter+0xec/0x120 [ 133.233159][T11077] generic_file_write_iter+0x77/0x1c0 [ 133.238539][T11077] vfs_write+0x76a/0x910 [ 133.242793][T11077] ? __pfx_generic_file_write_iter+0x10/0x10 [ 133.248785][T11077] ksys_write+0xeb/0x1b0 [ 133.253143][T11077] __x64_sys_write+0x42/0x50 [ 133.257824][T11077] x64_sys_call+0x27dd/0x2d60 [ 133.262583][T11077] do_syscall_64+0xc9/0x1c0 [ 133.267152][T11077] ? clear_bhb_loop+0x55/0xb0 [ 133.271846][T11077] ? clear_bhb_loop+0x55/0xb0 [ 133.276535][T11077] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.282529][T11077] RIP: 0033:0x7f7ff453dff9 [ 133.286943][T11077] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 133.306642][T11077] RSP: 002b:00007f7ff3196038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 133.315061][T11077] RAX: ffffffffffffffda RBX: 00007f7ff46f6058 RCX: 00007f7ff453dff9 [ 133.323033][T11077] RDX: 000000000000f000 RSI: 0000000020000200 RDI: 0000000000000007 [ 133.331002][T11077] RBP: 00007f7ff3196090 R08: 0000000000000000 R09: 0000000000000000 [ 133.338977][T11077] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 133.346980][T11077] R13: 0000000000000000 R14: 00007f7ff46f6058 R15: 00007ffc8b14b088 [ 133.355019][T11077] [ 133.364124][T11082] SELinux: failed to load policy [ 133.378274][T11082] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 133.410487][ T3259] udevd[3259]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 133.420408][T11082] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 133.591492][T11088] __nla_validate_parse: 6 callbacks suppressed [ 133.591510][T11088] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2601'. [ 133.693338][ T29] audit: type=1326 audit(1728112920.330:13626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11090 comm="syz.3.2603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9c539dff9 code=0x7ffc0000 [ 133.717193][ T29] audit: type=1326 audit(1728112920.330:13627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11090 comm="syz.3.2603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9c539dff9 code=0x7ffc0000 [ 133.740772][ T29] audit: type=1326 audit(1728112920.330:13628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11090 comm="syz.3.2603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc9c539dff9 code=0x7ffc0000 [ 133.764426][ T29] audit: type=1326 audit(1728112920.330:13629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11090 comm="syz.3.2603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9c539dff9 code=0x7ffc0000 [ 133.788284][ T29] audit: type=1326 audit(1728112920.330:13630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11090 comm="syz.3.2603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9c539dff9 code=0x7ffc0000 [ 133.811898][ T29] audit: type=1326 audit(1728112920.330:13631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11090 comm="syz.3.2603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc9c539dff9 code=0x7ffc0000 [ 133.835659][ T29] audit: type=1326 audit(1728112920.330:13632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11090 comm="syz.3.2603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9c539dff9 code=0x7ffc0000 [ 133.859237][ T29] audit: type=1326 audit(1728112920.330:13633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11090 comm="syz.3.2603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc9c539dff9 code=0x7ffc0000 [ 133.906094][T11097] loop2: detected capacity change from 0 to 764 [ 133.915681][T11097] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 133.973019][T11107] loop2: detected capacity change from 0 to 512 [ 133.991264][T11110] loop3: detected capacity change from 0 to 256 [ 134.001035][T11107] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 134.013918][T11107] ext4 filesystem being mounted at /515/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 134.041686][ T3265] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.063922][T11116] SELinux: failed to load policy [ 134.074544][T11116] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 134.083569][T11116] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 134.092493][T11110] loop3: detected capacity change from 256 to 255 [ 134.136598][T11123] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2613'. [ 134.191731][T11125] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2609'. [ 134.254890][T11130] SELinux: failed to load policy [ 134.260370][T11130] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 134.269675][T11130] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 134.313153][T11134] loop0: detected capacity change from 0 to 2048 [ 134.325244][T11138] FAULT_INJECTION: forcing a failure. [ 134.325244][T11138] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 134.338331][T11138] CPU: 1 UID: 0 PID: 11138 Comm: syz.4.2620 Tainted: G W 6.12.0-rc1-syzkaller-00257-g2f91ff27b0ee #0 [ 134.350566][T11138] Tainted: [W]=WARN [ 134.354379][T11138] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 134.364452][T11138] Call Trace: [ 134.367710][T11138] [ 134.370669][T11138] dump_stack_lvl+0xf2/0x150 [ 134.375242][T11138] dump_stack+0x15/0x20 [ 134.379429][T11138] should_fail_ex+0x223/0x230 [ 134.384191][T11138] should_fail+0xb/0x10 [ 134.388403][T11138] should_fail_usercopy+0x1a/0x20 [ 134.393501][T11138] _copy_from_iter+0xd3/0xd20 [ 134.398310][T11138] ? kmalloc_reserve+0x16e/0x190 [ 134.403273][T11138] ? __build_skb_around+0x196/0x1f0 [ 134.408473][T11138] ? __alloc_skb+0x21f/0x310 [ 134.413046][T11138] ? __virt_addr_valid+0x1ed/0x250 [ 134.418203][T11138] ? __check_object_size+0x364/0x520 [ 134.423474][T11138] netlink_sendmsg+0x460/0x6e0 [ 134.428447][T11138] ? __pfx_netlink_sendmsg+0x10/0x10 [ 134.433823][T11138] __sock_sendmsg+0x140/0x180 [ 134.438516][T11138] ____sys_sendmsg+0x312/0x410 [ 134.443324][T11138] __sys_sendmsg+0x1d9/0x270 [ 134.448017][T11138] __x64_sys_sendmsg+0x46/0x50 [ 134.453129][T11138] x64_sys_call+0x2689/0x2d60 [ 134.457891][T11138] do_syscall_64+0xc9/0x1c0 [ 134.462396][T11138] ? clear_bhb_loop+0x55/0xb0 [ 134.467112][T11138] ? clear_bhb_loop+0x55/0xb0 [ 134.471856][T11138] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.477812][T11138] RIP: 0033:0x7f5dfd09dff9 [ 134.482211][T11138] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 134.501854][T11138] RSP: 002b:00007f5dfbd11038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 134.510330][T11138] RAX: ffffffffffffffda RBX: 00007f5dfd255f80 RCX: 00007f5dfd09dff9 [ 134.518321][T11138] RDX: 0000000000000000 RSI: 00000000200012c0 RDI: 0000000000000003 [ 134.526356][T11138] RBP: 00007f5dfbd11090 R08: 0000000000000000 R09: 0000000000000000 [ 134.534317][T11138] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 134.542368][T11138] R13: 0000000000000000 R14: 00007f5dfd255f80 R15: 00007fff55cc5428 [ 134.550342][T11138] [ 134.564847][T11134] Alternate GPT is invalid, using primary GPT. [ 134.571089][T11134] loop0: p1 p2 p3 [ 134.622162][T11142] SELinux: failed to load policy [ 134.638497][T11143] loop4: detected capacity change from 0 to 764 [ 134.647244][T11143] Symlink component flag not implemented [ 134.652961][T11143] Symlink component flag not implemented [ 134.659557][T11143] Symlink component flag not implemented (112) [ 134.665925][T11143] Symlink component flag not implemented (22) [ 134.680090][T11144] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 134.688802][T11144] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 134.869525][T11152] FAULT_INJECTION: forcing a failure. [ 134.869525][T11152] name failslab, interval 1, probability 0, space 0, times 0 [ 134.882239][T11152] CPU: 1 UID: 0 PID: 11152 Comm: syz.2.2624 Tainted: G W 6.12.0-rc1-syzkaller-00257-g2f91ff27b0ee #0 [ 134.894489][T11152] Tainted: [W]=WARN [ 134.898278][T11152] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 134.908622][T11152] Call Trace: [ 134.911887][T11152] [ 134.914807][T11152] dump_stack_lvl+0xf2/0x150 [ 134.919452][T11152] dump_stack+0x15/0x20 [ 134.923644][T11152] should_fail_ex+0x223/0x230 [ 134.928383][T11152] ? __list_lru_init+0x72/0x2e0 [ 134.933231][T11152] should_failslab+0x8f/0xb0 [ 134.937810][T11152] __kmalloc_noprof+0xa5/0x370 [ 134.942570][T11152] __list_lru_init+0x72/0x2e0 [ 134.947253][T11152] alloc_super+0x558/0x5b0 [ 134.951717][T11152] ? __pfx_devpts_mount+0x10/0x10 [ 134.956795][T11152] sget+0x174/0x460 [ 134.960648][T11152] ? __pfx_set_anon_super+0x10/0x10 [ 134.965901][T11152] ? __pfx_devpts_mount+0x10/0x10 [ 134.970989][T11152] ? __pfx_devpts_fill_super+0x10/0x10 [ 134.976491][T11152] mount_nodev+0x30/0xd0 [ 134.980784][T11152] devpts_mount+0x29/0x40 [ 134.985121][T11152] legacy_get_tree+0x77/0xd0 [ 134.989851][T11152] vfs_get_tree+0x56/0x1e0 [ 134.994269][T11152] do_new_mount+0x227/0x690 [ 134.998854][T11152] path_mount+0x49b/0xb30 [ 135.003305][T11152] __se_sys_mount+0x27c/0x2d0 [ 135.008065][T11152] __x64_sys_mount+0x67/0x80 [ 135.012711][T11152] x64_sys_call+0x203e/0x2d60 [ 135.017381][T11152] do_syscall_64+0xc9/0x1c0 [ 135.021934][T11152] ? clear_bhb_loop+0x55/0xb0 [ 135.026610][T11152] ? clear_bhb_loop+0x55/0xb0 [ 135.031356][T11152] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.037245][T11152] RIP: 0033:0x7f2b2005dff9 [ 135.041759][T11152] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 135.061418][T11152] RSP: 002b:00007f2b1ecb6038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 135.069880][T11152] RAX: ffffffffffffffda RBX: 00007f2b20216058 RCX: 00007f2b2005dff9 [ 135.077842][T11152] RDX: 0000000020000000 RSI: 0000000020000040 RDI: 0000000000000000 [ 135.085888][T11152] RBP: 00007f2b1ecb6090 R08: 0000000020000100 R09: 0000000000000000 [ 135.093895][T11152] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 135.101924][T11152] R13: 0000000000000000 R14: 00007f2b20216058 R15: 00007ffc95f05aa8 [ 135.109888][T11152] [ 135.182878][T11164] loop1: detected capacity change from 0 to 764 [ 135.203328][T11164] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 135.257189][T11175] loop1: detected capacity change from 0 to 512 [ 135.284474][T11153] chnl_net:caif_netlink_parms(): no params data found [ 135.285406][T11175] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 135.313905][T11175] ext4 filesystem being mounted at /178/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 135.346767][T11187] syz.4.2637[11187] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 135.346863][T11187] syz.4.2637[11187] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 135.362811][T11153] bridge0: port 1(bridge_slave_0) entered blocking state [ 135.363978][T11187] syz.4.2637[11187] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 135.374408][T11153] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.400109][T11153] bridge_slave_0: entered allmulticast mode [ 135.406854][T11153] bridge_slave_0: entered promiscuous mode [ 135.413949][T11153] bridge0: port 2(bridge_slave_1) entered blocking state [ 135.421018][T11153] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.428291][T11153] bridge_slave_1: entered allmulticast mode [ 135.434819][T11153] bridge_slave_1: entered promiscuous mode [ 135.455209][T11153] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 135.466483][T11153] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 135.487183][T11153] team0: Port device team_slave_0 added [ 135.494636][T11153] team0: Port device team_slave_1 added [ 135.502580][ T9125] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.522992][T11153] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 135.530010][T11153] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 135.555975][T11153] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 135.570379][T11153] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 135.577401][T11153] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 135.603386][T11153] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 135.627243][T11193] SELinux: failed to load policy [ 135.633754][T11193] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 135.635547][T11153] hsr_slave_0: entered promiscuous mode [ 135.648350][T11193] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 135.656589][T11153] hsr_slave_1: entered promiscuous mode [ 135.662643][T11153] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 135.671338][T11153] Cannot create hsr debugfs directory [ 135.733302][T11153] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.778165][T11197] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2638'. [ 135.791682][T11153] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.848064][T11153] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.907694][T11153] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.968098][T11153] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 135.977142][T11153] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 135.985768][T11153] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 135.994715][T11153] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 136.032033][T11153] 8021q: adding VLAN 0 to HW filter on device bond0 [ 136.045327][T11153] 8021q: adding VLAN 0 to HW filter on device team0 [ 136.054656][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 136.061702][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 136.072373][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 136.079467][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 136.088961][T11205] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2641'. [ 136.157122][T11153] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 136.217902][T11213] loop1: detected capacity change from 0 to 764 [ 136.255906][T11213] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 136.263314][T11153] veth0_vlan: entered promiscuous mode [ 136.283013][T11153] veth1_vlan: entered promiscuous mode [ 136.301448][T11227] loop4: detected capacity change from 0 to 512 [ 136.310289][T11153] veth0_macvtap: entered promiscuous mode [ 136.322670][T11230] loop2: detected capacity change from 0 to 1024 [ 136.325375][T11153] veth1_macvtap: entered promiscuous mode [ 136.337850][T11230] EXT4-fs: Ignoring removed orlov option [ 136.338549][T11227] ext4 filesystem being mounted at /505/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 136.343605][T11230] EXT4-fs: Ignoring removed nomblk_io_submit option [ 136.364692][T11153] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 136.375161][T11153] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.385055][T11153] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 136.390825][T11231] loop1: detected capacity change from 0 to 2048 [ 136.395473][T11153] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.395489][T11153] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 136.395580][T11153] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.432099][T11153] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 136.442556][T11153] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.452457][T11153] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 136.462913][T11153] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.475190][T11153] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 136.494450][T11153] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 136.505011][T11153] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.514781][T11231] Alternate GPT is invalid, using primary GPT. [ 136.514856][T11153] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 136.521102][T11231] loop1: p1 p2 p3 [ 136.531482][T11153] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.531500][T11153] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 136.531514][T11153] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.531546][T11153] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 136.575858][T11153] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.586113][T11153] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 136.596818][T11153] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.610727][T11153] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 136.619435][T11153] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.628208][T11153] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.636964][T11153] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.645721][T11153] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.702995][ T3754] udevd[3754]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 136.707108][ T3259] udevd[3259]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 136.714606][ T3256] udevd[3256]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 136.802494][T11240] loop1: detected capacity change from 0 to 512 [ 136.812009][T11240] EXT4-fs (loop1): blocks per group (95) and clusters per group (32768) inconsistent [ 136.822432][T11252] syz.2.2655[11252] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 136.822543][T11252] syz.2.2655[11252] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 136.853960][T11252] syz.2.2655[11252] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 137.005110][T11286] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2627'. [ 137.072388][T11294] loop1: detected capacity change from 0 to 2048 [ 137.079142][T11294] EXT4-fs: test_dummy_encryption option not supported [ 137.097381][T11295] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2658'. [ 137.178084][T11308] loop1: detected capacity change from 0 to 512 [ 137.205887][T11308] ext4 filesystem being mounted at /200/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 137.221161][T11296] loop2: detected capacity change from 0 to 512 [ 137.231690][T11296] EXT4-fs (loop2): blocks per group (95) and clusters per group (32768) inconsistent [ 137.384355][T11322] loop1: detected capacity change from 0 to 2048 [ 137.400971][T11322] EXT4-fs: test_dummy_encryption option not supported [ 137.421557][T11328] loop4: detected capacity change from 0 to 1024 [ 137.431633][T11328] EXT4-fs: Ignoring removed orlov option [ 137.437415][T11328] EXT4-fs: Ignoring removed nomblk_io_submit option [ 137.733022][T11358] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2699'. [ 137.774144][T11363] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2693'. [ 137.801641][T11369] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2702'. [ 137.842934][T11373] loop0: detected capacity change from 0 to 2048 [ 137.851208][T11375] syz.3.2705[11375] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 137.851345][T11375] syz.3.2705[11375] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 137.863012][T11375] syz.3.2705[11375] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 137.878504][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 137.946134][T11373] Alternate GPT is invalid, using primary GPT. [ 137.946272][T11373] loop0: p1 p2 p3 [ 137.986972][T11378] loop4: detected capacity change from 0 to 512 [ 138.069094][ T29] kauditd_printk_skb: 222 callbacks suppressed [ 138.069125][ T29] audit: type=1400 audit(1728112924.630:13854): avc: denied { read write } for pid=11359 comm="syz.4.2700" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 138.099600][ T29] audit: type=1400 audit(1728112924.630:13855): avc: denied { open } for pid=11359 comm="syz.4.2700" path="/dev/loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 138.123880][ T29] audit: type=1400 audit(1728112924.630:13856): avc: denied { ioctl } for pid=11359 comm="syz.4.2700" path="/dev/loop4" dev="devtmpfs" ino=104 ioctlcmd=0x4c00 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 138.149468][ T29] audit: type=1400 audit(1728112924.630:13857): avc: denied { mounton } for pid=11359 comm="syz.4.2700" path="/516/bus" dev="tmpfs" ino=2742 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 138.172092][ T29] audit: type=1400 audit(1728112924.640:13858): avc: denied { append } for pid=2950 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=9 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 138.251038][ T3754] udevd[3754]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 138.268864][ T6611] udevd[6611]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 138.309647][ T3259] udevd[3259]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 138.373075][T11391] loop2: detected capacity change from 0 to 764 [ 138.374065][ T29] audit: type=1400 audit(1728112924.930:13859): avc: denied { map_create } for pid=11384 comm="syz.2.2707" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 138.374091][ T29] audit: type=1400 audit(1728112924.930:13860): avc: denied { bpf } for pid=11384 comm="syz.2.2707" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 138.374113][ T29] audit: type=1400 audit(1728112924.930:13861): avc: denied { map_read map_write } for pid=11384 comm="syz.2.2707" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 138.374152][ T29] audit: type=1400 audit(1728112924.940:13862): avc: denied { prog_load } for pid=11384 comm="syz.2.2707" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 138.374172][ T29] audit: type=1400 audit(1728112924.940:13863): avc: denied { perfmon } for pid=11384 comm="syz.2.2707" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 138.376325][T11378] ext4 filesystem being mounted at /516/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 138.385781][T11391] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 138.408497][T11395] loop3: detected capacity change from 0 to 2048 [ 138.547930][T11395] EXT4-fs: test_dummy_encryption option not supported [ 138.615431][T11404] loop4: detected capacity change from 0 to 764 [ 138.623121][T11404] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 138.655792][T11408] loop4: detected capacity change from 0 to 2048 [ 138.682009][T11411] loop1: detected capacity change from 0 to 764 [ 138.688997][T11411] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 138.699330][ T3259] Alternate GPT is invalid, using primary GPT. [ 138.705707][ T3259] loop4: p1 p2 p3 [ 138.715370][T11408] Alternate GPT is invalid, using primary GPT. [ 138.716239][T11413] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 138.721680][T11408] loop4: p1 p2 p3 [ 138.786374][ T3256] udevd[3256]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 138.797446][T11383] udevd[11383]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 138.809096][ T3259] udevd[3259]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 138.810244][T11422] loop4: detected capacity change from 0 to 512 [ 138.842869][ T3259] udevd[3259]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 138.855191][T11422] EXT4-fs error (device loop4): ext4_acquire_dquot:6879: comm syz.4.2720: Failed to acquire dquot type 1 [ 138.884254][T11430] __nla_validate_parse: 1 callbacks suppressed [ 138.884271][T11430] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2713'. [ 138.918553][T11422] EXT4-fs (loop4): 1 truncate cleaned up [ 138.924788][T11422] ext4 filesystem being mounted at /519/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 138.948504][T11422] EXT4-fs error (device loop4): ext4_lookup:1817: inode #2: comm syz.4.2720: deleted inode referenced: 12 [ 139.018257][T11441] loop0: detected capacity change from 0 to 764 [ 139.031767][T11441] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 139.076584][T11447] SELinux: failed to load policy [ 139.081666][T11448] EXT4-fs error (device loop4): ext4_lookup:1817: inode #2: comm syz.4.2720: deleted inode referenced: 12 [ 139.096201][T11447] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 139.105020][T11447] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 139.105206][T11422] EXT4-fs error (device loop4): ext4_acquire_dquot:6879: comm syz.4.2720: Failed to acquire dquot type 1 [ 139.129964][T11422] EXT4-fs error (device loop4): ext4_acquire_dquot:6879: comm syz.4.2720: Failed to acquire dquot type 1 [ 139.433148][T11454] SELinux: failed to load policy [ 139.439486][T11454] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 139.448998][T11454] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 139.618617][T11462] loop1: detected capacity change from 0 to 512 [ 139.658783][T11462] ext4 filesystem being mounted at /218/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 139.682500][T11470] loop0: detected capacity change from 0 to 2048 [ 139.693687][T11470] EXT4-fs: test_dummy_encryption option not supported [ 139.709099][T11473] loop4: detected capacity change from 0 to 764 [ 139.728899][T11474] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2734'. [ 139.741129][T11473] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 139.830732][T11486] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2746'. [ 139.840577][T11480] loop4: detected capacity change from 0 to 2048 [ 139.854045][T11480] EXT4-fs: test_dummy_encryption option not supported [ 139.863641][T11488] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=11488 comm=syz.1.2747 [ 139.945402][T11499] loop4: detected capacity change from 0 to 512 [ 139.965283][T11499] ext4 filesystem being mounted at /525/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 139.995505][T11504] loop1: detected capacity change from 0 to 512 [ 140.003572][T11504] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 140.014474][T11504] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 140.022576][T11504] EXT4-fs (loop1): orphan cleanup on readonly fs [ 140.044631][T11504] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.2754: Invalid block bitmap block 0 in block_group 0 [ 140.058576][T11504] EXT4-fs (loop1): Remounting filesystem read-only [ 140.065493][T11504] EXT4-fs (loop1): 1 orphan inode deleted [ 140.077471][T11504] SELinux: (dev loop1, type ext4) getxattr errno 5 [ 140.091005][T11511] loop4: detected capacity change from 0 to 1024 [ 140.100695][T11511] EXT4-fs: Ignoring removed orlov option [ 140.106559][T11511] EXT4-fs: Ignoring removed nomblk_io_submit option [ 140.252277][T11529] loop1: detected capacity change from 0 to 2048 [ 140.259122][T11529] EXT4-fs: test_dummy_encryption option not supported [ 140.278298][T11530] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2755'. [ 140.292002][T11534] SELinux: failed to load policy [ 140.297648][T11532] SELinux: failed to load policy [ 140.304068][T11532] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 140.313508][T11532] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 140.347359][T11538] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2766'. [ 140.358115][T11539] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 140.369572][T11539] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 140.540726][T11555] loop2: detected capacity change from 0 to 1024 [ 140.547624][T11555] EXT4-fs: Ignoring removed orlov option [ 140.553386][T11555] EXT4-fs: Ignoring removed nomblk_io_submit option [ 140.680263][T11560] loop3: detected capacity change from 0 to 764 [ 140.694172][T11560] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 140.866747][T11586] loop0: detected capacity change from 0 to 2048 [ 140.876900][T11587] loop3: detected capacity change from 0 to 1024 [ 140.883520][T11587] EXT4-fs: Ignoring removed orlov option [ 140.889383][T11587] EXT4-fs: Ignoring removed nomblk_io_submit option [ 140.897426][T11589] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2776'. [ 140.897515][T11586] Alternate GPT is invalid, using primary GPT. [ 140.912745][T11586] loop0: p1 p2 p3 [ 140.976679][T11593] loop0: detected capacity change from 0 to 764 [ 140.994574][T11593] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 141.008005][T11595] loop2: detected capacity change from 0 to 2048 [ 141.015786][T11595] EXT4-fs: test_dummy_encryption option not supported [ 141.177279][T11611] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 141.221511][T11617] SELinux: failed to load policy [ 141.227097][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 141.238066][T11617] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 141.246822][T11617] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 141.773878][T11623] loop3: detected capacity change from 0 to 764 [ 141.781008][T11623] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 141.826300][T11628] loop3: detected capacity change from 0 to 2048 [ 141.832901][T11628] EXT4-fs: test_dummy_encryption option not supported [ 141.860721][T11631] loop3: detected capacity change from 0 to 512 [ 141.875580][T11631] ext4 filesystem being mounted at /31/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 141.924042][T11636] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2799'. [ 141.996136][T11646] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=11646 comm=syz.0.2808 [ 142.048648][T11649] loop2: detected capacity change from 0 to 2048 [ 142.064026][T11649] EXT4-fs: test_dummy_encryption option not supported [ 142.106121][T11659] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2814'. [ 142.117216][T11659] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2814'. [ 142.124471][T11661] SELinux: failed to load policy [ 142.147589][T11661] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 142.157027][T11661] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 142.253013][T11679] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=11679 comm=syz.0.2822 [ 142.410467][T11690] loop0: detected capacity change from 0 to 2048 [ 142.417151][T11690] EXT4-fs: test_dummy_encryption option not supported [ 142.443202][T11692] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2820'. [ 142.513440][T11697] FAULT_INJECTION: forcing a failure. [ 142.513440][T11697] name failslab, interval 1, probability 0, space 0, times 0 [ 142.526143][T11697] CPU: 1 UID: 0 PID: 11697 Comm: syz.1.2829 Tainted: G W 6.12.0-rc1-syzkaller-00257-g2f91ff27b0ee #0 [ 142.538449][T11697] Tainted: [W]=WARN [ 142.542250][T11697] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 142.552380][T11697] Call Trace: [ 142.555663][T11697] [ 142.558649][T11697] dump_stack_lvl+0xf2/0x150 [ 142.563231][T11697] dump_stack+0x15/0x20 [ 142.567373][T11697] should_fail_ex+0x223/0x230 [ 142.572101][T11697] ? security_inode_alloc+0x32/0x100 [ 142.577382][T11697] should_failslab+0x8f/0xb0 [ 142.581963][T11697] kmem_cache_alloc_noprof+0x4c/0x290 [ 142.587416][T11697] security_inode_alloc+0x32/0x100 [ 142.592643][T11697] inode_init_always+0x439/0x480 [ 142.597694][T11697] alloc_inode+0x7d/0x160 [ 142.602040][T11697] new_inode_pseudo+0x15/0x20 [ 142.606741][T11697] create_pipe_files+0x42/0x3b0 [ 142.611621][T11697] __do_pipe_flags+0x46/0x190 [ 142.616306][T11697] do_pipe2+0x64/0x130 [ 142.620413][T11697] __x64_sys_pipe+0x21/0x30 [ 142.624903][T11697] x64_sys_call+0xd0/0x2d60 [ 142.629454][T11697] do_syscall_64+0xc9/0x1c0 [ 142.633946][T11697] ? clear_bhb_loop+0x55/0xb0 [ 142.638624][T11697] ? clear_bhb_loop+0x55/0xb0 [ 142.643342][T11697] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.649256][T11697] RIP: 0033:0x7ff96745dff9 [ 142.653659][T11697] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 142.673334][T11697] RSP: 002b:00007ff9660d7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000016 [ 142.681844][T11697] RAX: ffffffffffffffda RBX: 00007ff967615f80 RCX: 00007ff96745dff9 [ 142.689981][T11697] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000080 [ 142.697982][T11697] RBP: 00007ff9660d7090 R08: 0000000000000000 R09: 0000000000000000 [ 142.705942][T11697] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 142.713900][T11697] R13: 0000000000000000 R14: 00007ff967615f80 R15: 00007ffda90898d8 [ 142.721866][T11697] [ 142.770868][T11699] loop0: detected capacity change from 0 to 512 [ 142.781152][T11699] EXT4-fs: Ignoring removed mblk_io_submit option [ 142.783356][T11699] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 142.800212][T11699] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2240: inode #15: comm syz.0.2830: corrupted in-inode xattr: e_value out of bounds [ 142.815944][T11699] EXT4-fs error (device loop0): ext4_orphan_get:1393: comm syz.0.2830: couldn't read orphan inode 15 (err -117) [ 143.002130][T11733] SELinux: failed to load policy [ 143.006562][T11731] loop0: detected capacity change from 0 to 1024 [ 143.015171][T11733] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 143.016032][T11731] EXT4-fs: Ignoring removed orlov option [ 143.029334][T11731] EXT4-fs: Ignoring removed nomblk_io_submit option [ 143.039314][T11733] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 143.049566][T11737] loop3: detected capacity change from 0 to 2048 [ 143.057583][T11737] EXT4-fs: test_dummy_encryption option not supported [ 143.114408][T11742] loop3: detected capacity change from 0 to 764 [ 143.134088][T11742] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 143.311696][ T29] kauditd_printk_skb: 430 callbacks suppressed [ 143.311711][ T29] audit: type=1400 audit(1728112929.950:14286): avc: denied { create } for pid=11757 comm="syz.4.2854" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 143.407419][T11762] loop3: detected capacity change from 0 to 2048 [ 143.423959][ T29] audit: type=1400 audit(1728112930.060:14287): avc: denied { connect } for pid=11757 comm="syz.4.2854" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 143.443756][ T29] audit: type=1400 audit(1728112930.060:14288): avc: denied { setopt } for pid=11757 comm="syz.4.2854" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 143.485952][T11762] Alternate GPT is invalid, using primary GPT. [ 143.489295][ T29] audit: type=1400 audit(1728112930.130:14289): avc: denied { connect } for pid=11764 comm="syz.4.2856" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 143.492351][T11762] loop3: p1 p2 p3 [ 143.518668][ T29] audit: type=1400 audit(1728112930.160:14290): avc: denied { read } for pid=11764 comm="syz.4.2856" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 143.524144][ T2968] Alternate GPT is invalid, using primary GPT. [ 143.544493][ T2968] loop3: p1 p2 p3 [ 143.563623][ T3256] udevd[3256]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 143.573675][T11383] udevd[11383]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 143.587604][ T3259] udevd[3259]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 143.607687][T11383] udevd[11383]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 143.620506][ T3754] udevd[3754]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 143.633180][ T3259] udevd[3259]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 143.730309][T11781] syz.4.2863[11781] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 143.730444][T11781] syz.4.2863[11781] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 143.742165][T11781] syz.4.2863[11781] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 143.757074][ T29] audit: type=1400 audit(1728112930.390:14291): avc: denied { create } for pid=11780 comm="syz.4.2863" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 143.860259][T11794] SELinux: failed to load policy [ 143.866256][T11794] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 143.876109][T11794] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 143.910177][T11796] loop1: detected capacity change from 0 to 2048 [ 143.946749][T11796] Alternate GPT is invalid, using primary GPT. [ 143.953020][T11796] loop1: p1 p2 p3 [ 143.980406][T11798] __nla_validate_parse: 5 callbacks suppressed [ 143.980422][T11798] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2870'. [ 144.008156][T11798] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2870'. [ 144.047962][ T29] audit: type=1326 audit(1728112930.690:14292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11799 comm="syz.2.2871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b2005dff9 code=0x7ffc0000 [ 144.073033][T11800] FAULT_INJECTION: forcing a failure. [ 144.073033][T11800] name failslab, interval 1, probability 0, space 0, times 0 [ 144.085625][ T29] audit: type=1326 audit(1728112930.690:14293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11799 comm="syz.2.2871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2b2005dff9 code=0x7ffc0000 [ 144.085699][T11800] CPU: 0 UID: 0 PID: 11800 Comm: syz.2.2871 Tainted: G W 6.12.0-rc1-syzkaller-00257-g2f91ff27b0ee #0 [ 144.085747][T11800] Tainted: [W]=WARN [ 144.085754][T11800] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 144.109300][ T29] audit: type=1326 audit(1728112930.690:14294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11799 comm="syz.2.2871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b2005dff9 code=0x7ffc0000 [ 144.121514][T11800] Call Trace: [ 144.121522][T11800] [ 144.121529][T11800] dump_stack_lvl+0xf2/0x150 [ 144.125324][ T29] audit: type=1326 audit(1728112930.690:14295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11799 comm="syz.2.2871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b2005dff9 code=0x7ffc0000 [ 144.135343][T11800] dump_stack+0x15/0x20 [ 144.135364][T11800] should_fail_ex+0x223/0x230 [ 144.202067][T11800] ? __alloc_skb+0x10b/0x310 [ 144.206663][T11800] should_failslab+0x8f/0xb0 [ 144.211350][T11800] kmem_cache_alloc_node_noprof+0x51/0x2b0 [ 144.217175][T11800] __alloc_skb+0x10b/0x310 [ 144.221587][T11800] audit_log_start+0x368/0x6b0 [ 144.226411][T11800] audit_seccomp+0x4b/0x130 [ 144.230952][T11800] __seccomp_filter+0x6fa/0x1180 [ 144.235948][T11800] ? proc_fail_nth_write+0x12a/0x150 [ 144.241224][T11800] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 144.246986][T11800] ? vfs_write+0x580/0x910 [ 144.251420][T11800] ? __fget_files+0x1d4/0x210 [ 144.256148][T11800] __secure_computing+0x9f/0x1c0 [ 144.261080][T11800] syscall_trace_enter+0xd1/0x1f0 [ 144.266120][T11800] ? fpregs_assert_state_consistent+0x83/0xa0 [ 144.272232][T11800] do_syscall_64+0xaa/0x1c0 [ 144.276735][T11800] ? clear_bhb_loop+0x55/0xb0 [ 144.281484][T11800] ? clear_bhb_loop+0x55/0xb0 [ 144.286219][T11800] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.292142][T11800] RIP: 0033:0x7f2b2005dff9 [ 144.296546][T11800] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 144.316154][T11800] RSP: 002b:00007f2b1ecd7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 144.324555][T11800] RAX: ffffffffffffffda RBX: 00007f2b20215f80 RCX: 00007f2b2005dff9 [ 144.332562][T11800] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000007 [ 144.340593][T11800] RBP: 00007f2b1ecd7090 R08: 0000000000000000 R09: 0000000000000000 [ 144.348601][T11800] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 144.356565][T11800] R13: 0000000000000000 R14: 00007f2b20215f80 R15: 00007ffc95f05aa8 [ 144.364544][T11800] [ 144.474449][T11811] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2875'. [ 144.576806][T11838] SELinux: failed to load policy [ 144.595354][T11838] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 144.603436][T11840] loop4: detected capacity change from 0 to 764 [ 144.611025][T11840] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 144.613285][T11838] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 144.743432][T11858] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2882'. [ 144.807239][T11864] FAULT_INJECTION: forcing a failure. [ 144.807239][T11864] name failslab, interval 1, probability 0, space 0, times 0 [ 144.819943][T11864] CPU: 0 UID: 0 PID: 11864 Comm: syz.4.2898 Tainted: G W 6.12.0-rc1-syzkaller-00257-g2f91ff27b0ee #0 [ 144.832249][T11864] Tainted: [W]=WARN [ 144.836037][T11864] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 144.846099][T11864] Call Trace: [ 144.849366][T11864] [ 144.852357][T11864] dump_stack_lvl+0xf2/0x150 [ 144.856940][T11864] dump_stack+0x15/0x20 [ 144.861110][T11864] should_fail_ex+0x223/0x230 [ 144.865786][T11864] ? __alloc_skb+0x10b/0x310 [ 144.870397][T11864] should_failslab+0x8f/0xb0 [ 144.875010][T11864] kmem_cache_alloc_node_noprof+0x51/0x2b0 [ 144.880876][T11864] __alloc_skb+0x10b/0x310 [ 144.885289][T11864] audit_log_start+0x368/0x6b0 [ 144.890047][T11864] audit_seccomp+0x4b/0x130 [ 144.894542][T11864] __seccomp_filter+0x6fa/0x1180 [ 144.899476][T11864] ? proc_fail_nth_write+0x12a/0x150 [ 144.904752][T11864] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 144.910450][T11864] ? vfs_write+0x580/0x910 [ 144.914929][T11864] __secure_computing+0x9f/0x1c0 [ 144.919919][T11864] syscall_trace_enter+0xd1/0x1f0 [ 144.925076][T11864] do_syscall_64+0xaa/0x1c0 [ 144.929608][T11864] ? clear_bhb_loop+0x55/0xb0 [ 144.934284][T11864] ? clear_bhb_loop+0x55/0xb0 [ 144.939012][T11864] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.944998][T11864] RIP: 0033:0x7f5dfd09dff9 [ 144.949429][T11864] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 144.969081][T11864] RSP: 002b:00007f5dfbd11038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 144.977496][T11864] RAX: ffffffffffffffda RBX: 00007f5dfd255f80 RCX: 00007f5dfd09dff9 [ 144.985571][T11864] RDX: 00000000200002c0 RSI: 0000000000000000 RDI: 0000000000000003 [ 144.993705][T11864] RBP: 00007f5dfbd11090 R08: 0000000000000000 R09: 0000000000000000 [ 145.001668][T11864] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001 [ 145.009625][T11864] R13: 0000000000000000 R14: 00007f5dfd255f80 R15: 00007fff55cc5428 [ 145.017588][T11864] [ 145.105511][T11873] loop4: detected capacity change from 0 to 764 [ 145.109074][T11871] netlink: 'syz.1.2900': attribute type 10 has an invalid length. [ 145.123077][T11873] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 145.127480][T11875] loop3: detected capacity change from 0 to 2048 [ 145.173738][T11871] team0: Port device geneve0 added [ 145.232858][T11881] loop1: detected capacity change from 0 to 2048 [ 145.241655][T11881] EXT4-fs: test_dummy_encryption option not supported [ 145.252742][T11875] Alternate GPT is invalid, using primary GPT. [ 145.258963][T11875] loop3: p1 p2 p3 [ 145.267359][T11883] loop0: detected capacity change from 0 to 512 [ 145.276225][T11883] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 145.285351][T11883] EXT4-fs (loop0): #clusters per group too big: 2130739200 [ 145.390684][T11895] loop1: detected capacity change from 0 to 1024 [ 145.396886][ T3256] udevd[3256]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 145.398283][T11383] udevd[11383]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 145.410055][ T3256] udevd[3256]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 145.424811][T11883] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 145.432849][T11883] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 145.438936][T11895] EXT4-fs: Ignoring removed orlov option [ 145.438965][T11895] EXT4-fs: Ignoring removed nomblk_io_submit option [ 145.450578][T11901] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2912'. [ 145.489507][T11883] hsr_slave_0: left promiscuous mode [ 145.504310][T11883] hsr_slave_1: left promiscuous mode [ 145.510005][T11907] SELinux: failed to load policy [ 145.510485][T11909] loop2: detected capacity change from 0 to 512 [ 145.567889][T11909] ext4 filesystem being mounted at /567/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 145.582879][T11913] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 145.596774][T11913] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 145.691737][T11922] loop2: detected capacity change from 0 to 2048 [ 145.716988][T11926] FAULT_INJECTION: forcing a failure. [ 145.716988][T11926] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 145.730169][T11926] CPU: 1 UID: 0 PID: 11926 Comm: syz.1.2922 Tainted: G W 6.12.0-rc1-syzkaller-00257-g2f91ff27b0ee #0 [ 145.742587][T11926] Tainted: [W]=WARN [ 145.746478][T11926] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 145.756657][T11926] Call Trace: [ 145.759932][T11926] [ 145.762942][T11926] dump_stack_lvl+0xf2/0x150 [ 145.767535][T11926] dump_stack+0x15/0x20 [ 145.771773][T11926] should_fail_ex+0x223/0x230 [ 145.776563][T11926] should_fail+0xb/0x10 [ 145.779565][T11922] Alternate GPT is invalid, using primary GPT. [ 145.780819][T11926] should_fail_usercopy+0x1a/0x20 [ 145.787140][T11922] loop2: p1 p2 p3 [ 145.791955][T11926] _copy_from_user+0x1e/0xd0 [ 145.791981][T11926] kvmemdup_bpfptr_noprof+0x7d/0xf0 [ 145.805590][T11926] map_delete_elem+0x131/0x300 [ 145.810364][T11926] __sys_bpf+0x514/0x7a0 [ 145.814614][T11926] __x64_sys_bpf+0x43/0x50 [ 145.819034][T11926] x64_sys_call+0x2625/0x2d60 [ 145.823712][T11926] do_syscall_64+0xc9/0x1c0 [ 145.828205][T11926] ? clear_bhb_loop+0x55/0xb0 [ 145.832876][T11926] ? clear_bhb_loop+0x55/0xb0 [ 145.837546][T11926] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.843432][T11926] RIP: 0033:0x7ff96745dff9 [ 145.847886][T11926] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 145.867603][T11926] RSP: 002b:00007ff9660d7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 145.876089][T11926] RAX: ffffffffffffffda RBX: 00007ff967615f80 RCX: 00007ff96745dff9 [ 145.884094][T11926] RDX: 0000000000000020 RSI: 00000000200000c0 RDI: 0000000000000003 [ 145.892088][T11926] RBP: 00007ff9660d7090 R08: 0000000000000000 R09: 0000000000000000 [ 145.900124][T11926] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 145.908100][T11926] R13: 0000000000000000 R14: 00007ff967615f80 R15: 00007ffda90898d8 [ 145.916134][T11926] [ 145.928065][T11935] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 145.950407][T11938] sg_write: data in/out 209152/1 bytes for SCSI command 0xf2-- guessing data in; [ 145.950407][T11938] program syz.1.2927 not setting count and/or reply_len properly [ 145.975119][T11924] loop0: detected capacity change from 0 to 512 [ 145.983929][T11924] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 145.997809][ T3259] udevd[3259]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 146.002713][T11924] EXT4-fs (loop0): 1 truncate cleaned up [ 146.010662][T11942] loop3: detected capacity change from 0 to 512 [ 146.015528][T11944] SELinux: failed to load policy [ 146.039507][T11944] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 146.054560][T11944] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 146.056444][T11942] ext4 filesystem being mounted at /64/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 146.143143][T11959] syz.3.2936[11959] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 146.143202][T11959] syz.3.2936[11959] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 146.155123][T11959] syz.3.2936[11959] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 146.180582][T11961] loop1: detected capacity change from 0 to 512 [ 146.199368][T11961] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 146.208450][T11961] EXT4-fs (loop1): #clusters per group too big: 2130739200 [ 146.259013][T11961] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 146.265430][T11961] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 146.279923][T11961] hsr_slave_0: left promiscuous mode [ 146.284482][T11965] loop3: detected capacity change from 0 to 764 [ 146.291589][T11961] hsr_slave_1: left promiscuous mode [ 146.299283][T11965] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 146.339923][T11970] sg_write: data in/out 209152/1 bytes for SCSI command 0xf2-- guessing data in; [ 146.339923][T11970] program syz.3.2941 not setting count and/or reply_len properly [ 146.492493][T11988] loop1: detected capacity change from 0 to 2048 [ 146.499441][T11988] EXT4-fs: test_dummy_encryption option not supported [ 146.553142][T11992] loop3: detected capacity change from 0 to 256 [ 146.578790][T11995] loop0: detected capacity change from 0 to 1024 [ 146.599378][T11995] EXT4-fs: Ignoring removed orlov option [ 146.605098][T11995] EXT4-fs: Ignoring removed nomblk_io_submit option [ 146.614288][T11997] loop1: detected capacity change from 0 to 764 [ 146.632617][T11997] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 146.680573][T12005] loop2: detected capacity change from 0 to 2048 [ 146.735352][T12005] Alternate GPT is invalid, using primary GPT. [ 146.741745][T12005] loop2: p1 p2 p3 [ 146.853670][T12026] loop1: detected capacity change from 0 to 764 [ 146.860763][T12026] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 146.963388][T12037] loop0: detected capacity change from 0 to 256 [ 146.972647][T12040] loop1: detected capacity change from 0 to 512 [ 146.991316][T12040] ext4 filesystem being mounted at /276/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 147.025569][T12046] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2963'. [ 147.040087][T12047] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2962'. [ 147.125698][T12060] loop0: detected capacity change from 0 to 2048 [ 147.132438][T12060] EXT4-fs: test_dummy_encryption option not supported [ 147.185914][T12068] loop0: detected capacity change from 0 to 764 [ 147.200779][T12068] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 147.307634][T12085] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2985'. [ 147.356027][T12091] loop0: detected capacity change from 0 to 2048 [ 147.380382][T12091] EXT4-fs: test_dummy_encryption option not supported [ 147.429065][T12094] loop1: detected capacity change from 0 to 1024 [ 147.429261][T12094] EXT4-fs: Ignoring removed orlov option [ 147.429320][T12094] EXT4-fs: Ignoring removed nomblk_io_submit option [ 147.531305][T12114] loop2: detected capacity change from 0 to 2048 [ 147.538143][T12114] EXT4-fs: test_dummy_encryption option not supported [ 147.616679][T12121] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=12121 comm=syz.0.3004 [ 147.633981][T12107] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2998'. [ 147.707777][T12128] syz.0.3015[12128] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 147.707903][T12128] syz.0.3015[12128] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 147.721511][T12128] syz.0.3015[12128] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 147.767271][T12137] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3005'. [ 147.779379][T12138] loop0: detected capacity change from 0 to 2048 [ 147.797176][T12138] EXT4-fs: test_dummy_encryption option not supported [ 147.873453][T12151] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=12151 comm=syz.0.3016 [ 147.910692][T12147] loop1: detected capacity change from 0 to 512 [ 147.934772][T12157] syz.3.3020[12157] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 147.935772][T12147] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 147.969676][T12147] EXT4-fs (loop1): 1 truncate cleaned up [ 147.971457][T12161] SELinux: failed to load policy [ 147.989762][T12161] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 148.001466][T12161] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 148.015047][T12168] loop2: detected capacity change from 0 to 2048 [ 148.021642][T12168] EXT4-fs: test_dummy_encryption option not supported [ 148.126877][T12185] loop2: detected capacity change from 0 to 512 [ 148.155372][T12185] ext4 filesystem being mounted at /586/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 148.230862][T12201] loop2: detected capacity change from 0 to 2048 [ 148.232105][T12203] loop1: detected capacity change from 0 to 512 [ 148.238630][T12201] EXT4-fs: test_dummy_encryption option not supported [ 148.249417][T12203] EXT4-fs: Ignoring removed nobh option [ 148.267512][T12203] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2 [ 148.277530][T12203] EXT4-fs error (device loop1): ext4_orphan_get:1388: inode #13: comm syz.1.3039: casefold flag without casefold feature [ 148.293734][T12203] EXT4-fs error (device loop1): ext4_orphan_get:1393: comm syz.1.3039: couldn't read orphan inode 13 (err -117) [ 148.298831][T12207] loop2: detected capacity change from 0 to 2048 [ 148.314631][ T29] kauditd_printk_skb: 337 callbacks suppressed [ 148.314642][ T29] audit: type=1326 audit(1728112934.960:14629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12202 comm="syz.1.3039" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff96745dff9 code=0x0 [ 148.360917][T12207] Alternate GPT is invalid, using primary GPT. [ 148.367321][T12207] loop2: p1 p2 p3 [ 148.371158][ T29] audit: type=1326 audit(1728112935.010:14630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12212 comm="syz.3.3043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc852b3dff9 code=0x7ffc0000 [ 148.394843][ T29] audit: type=1326 audit(1728112935.010:14631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12212 comm="syz.3.3043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc852b3dff9 code=0x7ffc0000 [ 148.418481][ T29] audit: type=1326 audit(1728112935.010:14632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12212 comm="syz.3.3043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=439 compat=0 ip=0x7fc852b3dff9 code=0x7ffc0000 [ 148.442083][ T29] audit: type=1326 audit(1728112935.010:14633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12212 comm="syz.3.3043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc852b3dff9 code=0x7ffc0000 [ 148.465708][ T29] audit: type=1326 audit(1728112935.010:14634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12212 comm="syz.3.3043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc852b3dff9 code=0x7ffc0000 [ 148.489431][ T29] audit: type=1326 audit(1728112935.130:14635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12217 comm="syz.3.3045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc852b3dff9 code=0x7ffc0000 [ 148.513195][ T29] audit: type=1326 audit(1728112935.130:14636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12217 comm="syz.3.3045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc852b3dff9 code=0x7ffc0000 [ 148.536979][ T29] audit: type=1326 audit(1728112935.140:14637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12217 comm="syz.3.3045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc852b3dff9 code=0x7ffc0000 [ 148.560694][ T29] audit: type=1326 audit(1728112935.140:14638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12217 comm="syz.3.3045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc852b3dff9 code=0x7ffc0000 [ 148.601634][T12224] loop4: detected capacity change from 0 to 512 [ 148.616907][T12224] ext4 filesystem being mounted at /550/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 148.668120][T12229] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 148.732464][T12236] loop3: detected capacity change from 0 to 2048 [ 148.745569][T12236] EXT4-fs: test_dummy_encryption option not supported [ 148.789493][T12248] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 148.803736][T12248] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 148.807374][T12252] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=12252 comm=syz.4.3060 [ 148.863158][T12259] loop2: detected capacity change from 0 to 512 [ 148.876975][T12259] ext4 filesystem being mounted at /593/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 148.927303][T12268] loop3: detected capacity change from 0 to 2048 [ 148.934505][T12266] pim6reg1: entered promiscuous mode [ 148.939809][T12266] pim6reg1: entered allmulticast mode [ 148.949183][T12266] loop4: detected capacity change from 0 to 512 [ 148.957543][T12268] Alternate GPT is invalid, using primary GPT. [ 148.964060][T12268] loop3: p1 p2 p3 [ 148.976406][T12266] EXT4-fs error (device loop4): ext4_orphan_get:1388: inode #15: comm syz.4.3066: casefold flag without casefold feature [ 149.007232][ T3256] udevd[3256]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 149.017990][ T3754] udevd[3754]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 149.027827][T11383] udevd[11383]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 149.033977][T12266] EXT4-fs error (device loop4): ext4_orphan_get:1393: comm syz.4.3066: couldn't read orphan inode 15 (err -117) [ 149.069788][T12276] loop3: detected capacity change from 0 to 2048 [ 149.106280][T12276] EXT4-fs: test_dummy_encryption option not supported [ 149.216396][T12297] loop3: detected capacity change from 0 to 2048 [ 149.220422][T12295] loop2: detected capacity change from 0 to 512 [ 149.246450][T12295] ext4 filesystem being mounted at /599/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 149.263401][T12304] loop1: detected capacity change from 0 to 764 [ 149.267854][T12297] Alternate GPT is invalid, using primary GPT. [ 149.276038][T12297] loop3: p1 p2 p3 [ 149.294889][T12304] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 149.314632][ T3259] ================================================================== [ 149.322744][ T3259] BUG: KCSAN: data-race in generic_fillattr / touch_atime [ 149.329880][ T3259] [ 149.332200][ T3259] read to 0xffff888115ee3258 of 4 bytes by task 11383 on cpu 0: [ 149.339830][ T3259] generic_fillattr+0x16f/0x2f0 [ 149.344700][ T3259] shmem_getattr+0x17b/0x200 [ 149.349289][ T3259] vfs_fstat+0x1b0/0x460 [ 149.353616][ T3259] vfs_fstatat+0xa2/0x110 [ 149.356779][T12306] loop4: detected capacity change from 0 to 512 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 149.358105][ T3259] __se_sys_newfstatat+0x58/0x260 [ 149.369393][ T3259] __x64_sys_newfstatat+0x55/0x70 [ 149.374419][ T3259] x64_sys_call+0x141f/0x2d60 [ 149.379098][ T3259] do_syscall_64+0xc9/0x1c0 [ 149.383597][ T3259] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.389544][ T3259] [ 149.391862][ T3259] write to 0xffff888115ee3258 of 4 bytes by task 3259 on cpu 1: [ 149.399493][ T3259] touch_atime+0x1f3/0x350 [ 149.403914][ T3259] shmem_file_read_iter+0x4aa/0x550 [ 149.409114][ T3259] vfs_read+0x5f6/0x720 [ 149.413279][ T3259] ksys_read+0xeb/0x1b0 [ 149.417438][ T3259] __x64_sys_read+0x42/0x50 [ 149.421954][ T3259] x64_sys_call+0x27d3/0x2d60 [ 149.426639][ T3259] do_syscall_64+0xc9/0x1c0 [ 149.431182][ T3259] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.437175][ T3259] [ 149.439498][ T3259] value changed: 0x38ab0d24 -> 0x3943a3a4 [ 149.442133][T12306] EXT4-fs: Ignoring removed nobh option [ 149.445196][ T3259] [ 149.445202][ T3259] Reported by Kernel Concurrency Sanitizer on: [ 149.445211][ T3259] CPU: 1 UID: 0 PID: 3259 Comm: udevd Tainted: G W 6.12.0-rc1-syzkaller-00257-g2f91ff27b0ee #0 [ 149.445239][ T3259] Tainted: [W]=WARN [ 149.445245][ T3259] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 149.445256][ T3259] ================================================================== [ 149.525707][T12306] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 149.533951][T12306] EXT4-fs error (device loop4): ext4_orphan_get:1388: inode #13: comm syz.4.3082: casefold flag without casefold feature [ 149.547011][T12306] EXT4-fs error (device loop4): ext4_orphan_get:1393: comm syz.4.3082: couldn't read orphan inode 13 (err -117) [ 149.730234][T10098] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.826959][T10098] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.886705][T10098] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.926461][T10098] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.980395][T10098] bridge_slave_1: left allmulticast mode [ 149.986082][T10098] bridge_slave_1: left promiscuous mode [ 149.991672][T10098] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.999434][T10098] bridge_slave_0: left allmulticast mode [ 150.005102][T10098] bridge_slave_0: left promiscuous mode [ 150.010702][T10098] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.106838][T10098] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 150.117038][T10098] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 150.126974][T10098] bond0 (unregistering): Released all slaves [ 150.167635][T10098] hsr_slave_0: left promiscuous mode [ 150.173279][T10098] hsr_slave_1: left promiscuous mode [ 150.179336][T10098] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 150.186825][T10098] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 150.194652][T10098] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 150.202129][T10098] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 150.211498][T10098] veth1_macvtap: left promiscuous mode [ 150.217106][T10098] veth0_macvtap: left promiscuous mode [ 150.222753][T10098] veth1_vlan: left promiscuous mode [ 150.228121][T10098] veth0_vlan: left promiscuous mode [ 150.300231][T10098] team0 (unregistering): Port device team_slave_1 removed [ 150.311364][T10098] team0 (unregistering): Port device team_slave_0 removed [ 150.656932][T10098] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.698128][T10098] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.756559][T10098] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.816754][T10098] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.888195][T10098] bridge_slave_1: left allmulticast mode [ 150.893897][T10098] bridge_slave_1: left promiscuous mode [ 150.899591][T10098] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.907437][T10098] bridge_slave_0: left allmulticast mode [ 150.913116][T10098] bridge_slave_0: left promiscuous mode [ 150.918802][T10098] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.964088][T10098] dvmrp0 (unregistering): left allmulticast mode [ 150.975173][T10098] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 151.036227][T10098] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 151.045985][T10098] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 151.056031][T10098] bond0 (unregistering): Released all slaves [ 151.097413][T10098] hsr_slave_0: left promiscuous mode [ 151.103043][T10098] hsr_slave_1: left promiscuous mode [ 151.109066][T10098] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 151.116550][T10098] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 151.125268][T10098] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 151.132754][T10098] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 151.141795][T10098] veth1_macvtap: left promiscuous mode [ 151.147406][T10098] veth0_macvtap: left promiscuous mode [ 151.152907][T10098] veth1_vlan: left promiscuous mode [ 151.158163][T10098] veth0_vlan: left promiscuous mode [ 151.227334][T10098] team0 (unregistering): Port device team_slave_1 removed [ 151.237644][T10098] team0 (unregistering): Port device team_slave_0 removed