last executing test programs: 2.44352871s ago: executing program 4 (id=523): unshare(0x22040080) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket(0x10, 0x803, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000280)=[{0x200000000006, 0x0, 0xfd, 0x7ffc0002}]}) io_pgetevents(0x0, 0x1, 0x0, &(0x7f00000001c0), 0x0, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x5c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x7}, {}, {0x7}}, [@filter_kind_options=@f_flow={{0x9}, {0x2c, 0x2, [@TCA_FLOW_EMATCHES={0x28, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x4, 0x1, 0x9}, {0x549, 0xd, 0x7, 0x1, 0x6, 0x0, 0x2}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xa}}]}]}}]}, 0x5c}}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1600000000000000040000000100000000000000", @ANYRES32=0x1], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r6}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000b40)='neigh_create\x00', r7}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000900)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200102f00fe80000000000000875a65059ff57b00000000000000000000000000ac1414aa35f022eb"], 0xcfa4) recvmsg$unix(r8, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r10, &(0x7f0000000000)=ANY=[], 0xfdef) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f00000001c0)='cpu~\"\"\nt\x00') 2.301197769s ago: executing program 4 (id=526): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000000)={0xa0000001}) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) epoll_wait(r3, &(0x7f0000000040)=[{}], 0x1, 0x400) 1.906609607s ago: executing program 0 (id=532): r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20}, 0x1c) listen(r0, 0x80080400) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) write$cgroup_pid(r2, &(0x7f00000031c0), 0x12) 1.801739277s ago: executing program 0 (id=534): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="190000000400000008000000ff"], 0x48) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0xffffffffffffbf3d}, 0xc) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000004c0)={{{@in6=@private1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x0, 0x0, 0xa}, 0x0, 0x0, 0x1}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x3c}, 0xa, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x3, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r2, &(0x7f0000000480), 0x2e9, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)=r3}, 0x20) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x8, &(0x7f00000000c0)=0x20003, 0x23) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) connect$inet(r4, &(0x7f0000000800)={0x2, 0x0, @local}, 0x10) 1.658006267s ago: executing program 2 (id=536): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a310000000014000780050015000c000000080012400000000005000500020000000500040000000000100003"], 0x5c}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c0000000306010203000000000000000a0000010500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x4004810}, 0x840) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00'}, 0x18) r3 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$selinux_load(r3, &(0x7f0000000100)=ANY=[@ANYBLOB="8c597c07000000297571cd9a7c34b0d6f370acf930f9e99e072d2cc8"], 0x2000) 1.494416566s ago: executing program 3 (id=538): syz_read_part_table(0x60d, &(0x7f0000002240)="$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") creat(&(0x7f0000000040)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) write$P9_ROPEN(r0, 0x0, 0x0) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f00000003c0)="b2458b5b998d010bca4c9bad3aba630c722ef94182ae7ae0d3ac0c602d7e65ee81b1f89347f5963113490d70b99578dcd89ee47acd44ae161f502c992d57e1f32f74a0323d8e5ec9d6a19b5f98d790b3e56af82531d553e0fa6ffa4da145323c946ba58f1823d8fbd8347d652fd708f9a127f97ea142ddce59d69fe5975cfb57d76b5db46b3e49f0157cbf00f210274943c972ef4a14f6fb6282bf8fcccc", 0x9e}], 0x1, 0x5, 0xfb, 0x3) 1.490693346s ago: executing program 2 (id=539): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f00000002c0)={[{@jqfmt_vfsv1}, {}, {@barrier_val}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@resuid}, {@nodelalloc}, {@acl}, {@noinit_itable}]}, 0xfc, 0x572, &(0x7f0000003780)="$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") chdir(&(0x7f0000000100)='./file0\x00') lsetxattr$trusted_overlay_upper(&(0x7f0000000180)='./file1\x00', &(0x7f00000001c0), &(0x7f0000000200)=ANY=[], 0xe01, 0x0) rename(&(0x7f0000000300)='./file0\x00', &(0x7f00000000c0)='./file1\x00') 1.297291855s ago: executing program 2 (id=542): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = socket$qrtr(0x2a, 0x2, 0x0) r2 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) write$binfmt_aout(r2, &(0x7f0000000200)=ANY=[@ANYBLOB="03040000b50000000100fefffeefffff"], 0xc8) sendmsg$sock(r1, &(0x7f0000001540)={&(0x7f0000000280)=@pppoe={0x2a, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 'bridge_slave_1\x00'}}, 0x80, 0x0}, 0x0) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) dup3(r3, r2, 0x0) 1.278223605s ago: executing program 3 (id=543): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x4, &(0x7f0000000380)=0x13) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) close_range(r0, r0, 0x2) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{r2}, &(0x7f0000000440), &(0x7f0000000480)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3, 0x0, 0x9}, 0x18) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000080)=0x21ee, 0x4) sendmmsg$inet(r4, &(0x7f0000003240)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, 0x0}}], 0x1, 0x4000800) recvfrom(r4, 0x0, 0x2a, 0x2101, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000004, 0x30, 0xffffffffffffffff, 0xfffff000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) rseq(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x3}, 0x20, 0x0, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001880)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r5}, 0x18) r6 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000000)={'erspan0\x00', &(0x7f0000000040)=@ethtool_sset_info={0x37, 0x2, 0xff}}) syz_open_procfs(0x0, &(0x7f0000000080)='net/icmp6\x00') 1.250370485s ago: executing program 2 (id=545): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x4, &(0x7f0000000380)=0x13) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) close_range(r0, r0, 0x2) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{r2}, &(0x7f0000000440), &(0x7f0000000480)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3, 0x0, 0x9}, 0x18) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000080)=0x21ee, 0x4) sendmmsg$inet(r4, &(0x7f0000003240)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, 0x0}}], 0x1, 0x4000800) recvfrom(r4, 0x0, 0x2a, 0x2101, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000004, 0x30, 0xffffffffffffffff, 0xfffff000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) rseq(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x3}, 0x20, 0x0, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001880)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r5}, 0x18) r6 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000000)={'erspan0\x00', &(0x7f0000000040)=@ethtool_sset_info={0x37, 0x2, 0xff}}) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) syz_open_procfs(0x0, &(0x7f0000000080)='net/icmp6\x00') 1.149926385s ago: executing program 4 (id=546): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="0500000004000000ff0f00000700000000000000", @ANYRES32, @ANYBLOB="000000000000000040000000000000000000e0000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) perf_event_open$cgroup(&(0x7f0000000000)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4022, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000008018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x990e9783628d522e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000040), &(0x7f0000000280)='%pS \x00'}, 0x20) syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'ipvlan1\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c00000010000305000000000000ffff00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800b0001006d616373656300001c000280050007000000000005000a0000000000050009000000000008000500", @ANYRES32=r2], 0x5c}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000940)={'wg1\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r4}, 0x38) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5, 0x0, 0x2}, 0x18) socket$kcm(0x29, 0x2, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x3ff, 0x0) inotify_init1(0x0) 1.118117444s ago: executing program 1 (id=547): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x1d, 0xb, &(0x7f0000000940)=ANY=[@ANYRESHEX=r0], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0xe, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x10000000, @void, @value}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) r1 = open(&(0x7f0000000000)='./file0\x00', 0x80140, 0x0) fcntl$setlease(r1, 0x400, 0x1) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x5c}}, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAPCLR(r3, 0x4b68, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x9) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000180)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r5}, 0x10) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='projid_map\x00') pread64(r6, 0x0, 0x0, 0x359) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0x10, 0x2, 0x9, 0x0, 0xffffffffffffffff, 0x10000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000c00)=ANY=[@ANYBLOB="180000000000000000000000000000041811000093072bc9239a59a5fa80e8acfb595153ab98d079a986e51030055af870500c322c1c9d553538d591091d4522bd5650ce73db0c85cd70925890f84be7c56b8b56d110c432699bed2b3d170ffd4d8c6783f7b380fa763aa82b43e99f563f67c5ace7e487b4a4590700000000958dd2c3892ea91a63c612405bb7c1d72c33f921a954f0509c0ecc0ce50cb2bfca84c85f4019170057e5450894f9ce08d41f6b9014d024596abf12a88bbb480ab14c66a632b2b3ef4abc889d54c122b0d116a1968ab74855d3d1c6c68995a909a54e", @ANYRES32=r7, @ANYRESDEC=r2], &(0x7f0000000000)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mbind(&(0x7f0000564000/0x2000)=nil, 0x2000, 0x3, &(0x7f0000000000)=0xffff, 0x4000000000c, 0x0) ioctl$PIO_UNIMAP(r3, 0x4b67, &(0x7f0000000040)={0x3ffffffffffffe96, &(0x7f0000000000)=[{0x2000, 0x5}]}) 1.065627114s ago: executing program 4 (id=548): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x4, &(0x7f0000000380)=0x13) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) close_range(r0, r0, 0x2) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{r2}, &(0x7f0000000440), &(0x7f0000000480)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3, 0x0, 0x9}, 0x18) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000080)=0x21ee, 0x4) sendmmsg$inet(r4, &(0x7f0000003240)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, 0x0}}], 0x1, 0x4000800) recvfrom(r4, 0x0, 0x2a, 0x2101, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000004, 0x30, 0xffffffffffffffff, 0xfffff000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r5 = getpid() syz_pidfd_open(r5, 0x0) 830.731133ms ago: executing program 1 (id=549): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) mount$bind(0x0, &(0x7f0000000540)='./file0\x00', &(0x7f0000000600), 0x840, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) timerfd_gettime(0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454da, &(0x7f00000001c0)={'bond_slave_0\x00'}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000240)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x1}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454da, &(0x7f0000000140)={'bond0\x00'}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000e5b000)={0x2, 0x4e20, @broadcast}, 0x10) connect$inet(r5, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000004680)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x7, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x48, &(0x7f0000000440)="ba5c234b", 0x4) r7 = socket$kcm(0x29, 0x2, 0x0) write$binfmt_script(r7, &(0x7f0000000680)={'#! ', './file0', [{}, {}, {}]}, 0xe) ioctl$sock_kcm_SIOCKCMATTACH(r7, 0x89e0, &(0x7f0000000180)={r5, r6}) close_range(r4, 0xffffffffffffffff, 0x204000000000000) 812.068083ms ago: executing program 3 (id=550): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c30000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0x800000000000000}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x10000000000030, 0x0, &(0x7f0000e5f000)) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) 810.558223ms ago: executing program 0 (id=551): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000015c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000000c0)=ANY=[@ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 739.067393ms ago: executing program 3 (id=552): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x4e53e000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x15) symlink(0x0, 0x0) socket$inet6(0xa, 0x6, 0x0) syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x1ffffe, 0x10100, 0xfffffffe}, &(0x7f0000000180), &(0x7f00000001c0)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed7f0000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000)={0xffffffffffffffff}, 0x111, 0xc}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000280)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x7ff, @empty, 0x1}, {0xa, 0x4e20, 0x1ff, @dev={0xfe, 0x80, '\x00', 0x2f}, 0x9}, r1, 0xb}}, 0x48) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000380)={0x1, 0x10, 0xfa00, {&(0x7f0000000300), r1}}, 0x18) 706.710743ms ago: executing program 0 (id=553): syz_read_part_table(0x60d, &(0x7f0000002240)="$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") creat(&(0x7f0000000040)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) write$P9_ROPEN(r0, 0x0, 0x0) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f00000003c0)="b2458b5b998d010bca4c9bad3aba630c722ef94182ae7ae0d3ac0c602d7e65ee81b1f89347f5963113490d70b99578dcd89ee47acd44ae161f502c992d57e1f32f74a0323d8e5ec9d6a19b5f98d790b3e56af82531d553e0fa6ffa4da145323c946ba58f1823d8fbd8347d652fd708f9a127f97ea142ddce59d69fe5975cfb57d76b5db46b3e49f0157cbf00f210274943c972ef4a14f6fb6282bf8fcccc", 0x9e}], 0x1, 0x5, 0xfb, 0x3) 680.812483ms ago: executing program 1 (id=554): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x20081e, &(0x7f0000000040)={[{@nodelalloc}, {@grpid}, {@auto_da_alloc}]}, 0x1, 0x4ef, &(0x7f00000003c0)="$eJzs3U1vW1kZAODXzpeTyUwywywAAVOGgYKqOonbRlUXUFYIoUqILkFqQ+JGUew4ip3ShC7S/4BEJVaw5Aew7oo9GwQ7NmWBxEcEaiqxMLrXN6mb2k1oEjuKn0e6uvfcY/s9J849x36d+AQwsC5FxE5EjEbE/YiYys7nsi1ut7bkdi92Hy/u7T5ezEWzefefubQ+ORdt90m8lz1mISJ+9L2In+bejFvf2l5dqFTKG63i+Eyjuj5T39q+ulJdWC4vl9dKpfm5+dmb126UTq2vn1RHs6MvP//Dzrd+njRrMjvT3o/T1Or6yEGcxHBE/OAsgvXBUNaf0X43hHeSj4iPIuLT9PqfiqH02QQALrJmcyqaU+1lAOCiy6c5sFy+mOUCJiOfLxZbObyPYyJfqdUbVx7UNteWWrmy6RjJP1iplGezXOF0jOSS8lx6/KpcOlS+FhEfRsQvxsbTcnGxVlnq5wsfABhg7x2a//8z1pr/AYALrtDvBgAAPWf+B4DBY/4HgMFj/geAwWP+B4DBY/4HgMFj/geAgfLDO3eSrbmXff/10sOtzdXaw6tL5fpqsbq5WFysbawXl2u15fQ7e6pHPV6lVlufux6bj6a/vV5vzNS3tu9Va5trjXvp93rfK4/0pFcAwNt8+MmzP+ciYufWeLpF21oO5mq42PL9bgDQN0P9bgDQN1b7gsF1gvf40gNwQXRYovc1hYgYP3yy2Ww2z65JwBm7/AX5fxhUbfl/fwUMA0b+HwaX/D8MrmYzd9w1/+O4NwQAzjc5fqDL5/8fZfvfZh8O/GTp8C2enmWrAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4HzbX/+3mK0FPhn5fLEY8X5ETMdI7sFKpTwbER9ExJ/GRsaS8lyf2wwAnFT+b7ls/a/LU59NHq4dzb0cS/cR8bNf3f3lo4VGY+OPyfl/HZxvPM3Ol/rRfgDgKPvzdLpveyP/Yvfx4v7Wy/b8/bsRUWjF39sdjb2D+MMxnO4LMRIRE//OZeWWXFvu4iR2nkTE5zv1PxeTaQ6ktfLp4fhJ7Pd7Gj//Wvx8WtfaJz+Lz51CW2DQPEvGn9udrr98XEr3na//QjpCnVw2/iUPtbiXjoGv4u+Pf0Ndxr9Lx41x/fffbx2Nv1n3JOKLwxH7sffaxp/9+Lku8T87Zvy/fOkrn3ara/464nJ0jt8ea6ZRXZ+pb21fXakuLJeXy2ul0vzc/OzNazdKM2mOeqb7bPCPW1c+6FaX9H+iS/zCEf3/+jH7/5v/3v/xV98S/5tf6xQ/Hx+/JX4yJ37jmPEXJn5X6FaXxF/q0v+jnv8rx4z//K/bbywbDgD0T31re3WhUilv9PJg/4VET4M6uAAHyW/NOWhGx4Pv9CrWaPxf92o23ylWtxHjNLJuwHlwcNFHxMt+NwYAAAAAAAAAAAAAAOioF/+x1O8+AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcHH9LwAA//89fM7W") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000a00)={'#! ', './file1', [{0x20, 'hugetlb.1GB.usage_in_bytes\x00'}, {0x20, '\x12\x00\x10'}], 0xa, "b95c96e6a09be3f0227591c9af3a2fa3e660ba8bfdfd3170e7c55a7904a65a6aa27debba3516c737ffee18ad52212e7122aecc0608def7eb21b9fa4cec11129db04ce8ee0ead2dbd6865736ce187ab65611d348af4b687ebe105ad3b7c2632699d3254aa27093b6bb2ce7c4dac5de3cd4721830c95c4957e3fd5e850cde63a34198a65d2df40b269aae02c8849f02fbf"}, 0xbb) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, r0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="040000000400000004000000ff07000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000083fe711b2d676ee16d76571ede000000000020"], 0x48) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.numa_stat\x00', 0x275a, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0x8004587d, &(0x7f00000003c0)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4}) open_tree(r0, &(0x7f0000000040)='./bus\x00', 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) 636.804953ms ago: executing program 2 (id=555): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x3, 0x4, &(0x7f0000000a80)=@framed={{0x18, 0x2, 0x0, 0x0, 0x80000020, 0x0, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0xb5}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x39) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) syz_usb_connect$hid(0x3, 0x0, 0x0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x2, &(0x7f0000000440)=@string={0x2}}]}) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x67, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r0, 0x0, 0x30, 0xe1515f8735398fb, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x45c], 0x0, 0x0, 0x1f, 0x1}}, 0x3c) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32, @ANYBLOB="00001700000000001c0037800b0003006970768a616e00000c0002800600010000000000050027"], 0x44}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x38, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0xc, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x80}}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000580)='kmem_cache_free\x00', r3}, 0x10) syz_emit_ethernet(0x52, &(0x7f0000000380)={@local, @broadcast, @val={@val={0x88a8, 0x4, 0x1}, {0x8100, 0x3, 0x1, 0x3}}, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd318", 0x14, 0x6, 0x0, @private1, @mcast1, {[], {{0xfffe, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x80}}}}}}}, 0x0) 517.547132ms ago: executing program 0 (id=556): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x20081e, &(0x7f0000000040)={[{@nodelalloc}, {@grpid}, {@auto_da_alloc}]}, 0x1, 0x4ef, &(0x7f00000003c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000a00)={'#! ', './file1', [{0x20, 'hugetlb.1GB.usage_in_bytes\x00'}, {0x20, '\x12\x00\x10'}], 0xa, "b95c96e6a09be3f0227591c9af3a2fa3e660ba8bfdfd3170e7c55a7904a65a6aa27debba3516c737ffee18ad52212e7122aecc0608def7eb21b9fa4cec11129db04ce8ee0ead2dbd6865736ce187ab65611d348af4b687ebe105ad3b7c2632699d3254aa27093b6bb2ce7c4dac5de3cd4721830c95c4957e3fd5e850cde63a34198a65d2df40b269aae02c8849f02fbf"}, 0xbb) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, r0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="040000000400000004000000ff07000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000083fe711b2d676ee16d76571ede000000000020"], 0x48) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, &(0x7f00000000c0)=0x13) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.numa_stat\x00', 0x275a, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r2, 0x8004587d, &(0x7f00000003c0)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) 516.305152ms ago: executing program 1 (id=557): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="0500000004000000ff0f00000700000000000000", @ANYRES32, @ANYBLOB="000000000000000040000000000000000000e0000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) perf_event_open$cgroup(&(0x7f0000000000)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4022, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000008018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x990e9783628d522e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000040), &(0x7f0000000280)='%pS \x00'}, 0x20) syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'ipvlan1\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c00000010000305000000000000ffff00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800b0001006d616373656300001c000280050007000000000005000a0000000000050009000000000008000500", @ANYRES32=r2], 0x5c}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000940)={'wg1\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r4}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) inotify_init1(0x0) 342.465311ms ago: executing program 1 (id=558): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="00003df9ff930dc4dbbf0740f600"/29, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x5, 0x7, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000500000002"], 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRESDEC=0x0], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000008000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.state\x00', 0x275a, 0x0) fcntl$lock(r2, 0x24, &(0x7f00000000c0)={0x0, 0x0, 0x4002, 0xffffffffffffffff}) 330.630771ms ago: executing program 4 (id=559): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x24, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000850000002300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2688ca4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 213.927551ms ago: executing program 0 (id=560): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x20081e, &(0x7f0000000040)={[{@nodelalloc}, {@grpid}, {@auto_da_alloc}]}, 0x1, 0x4ef, &(0x7f00000003c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000a00)={'#! ', './file1', [{0x20, 'hugetlb.1GB.usage_in_bytes\x00'}, {0x20, '\x12\x00\x10'}], 0xa, "b95c96e6a09be3f0227591c9af3a2fa3e660ba8bfdfd3170e7c55a7904a65a6aa27debba3516c737ffee18ad52212e7122aecc0608def7eb21b9fa4cec11129db04ce8ee0ead2dbd6865736ce187ab65611d348af4b687ebe105ad3b7c2632699d3254aa27093b6bb2ce7c4dac5de3cd4721830c95c4957e3fd5e850cde63a34198a65d2df40b269aae02c8849f02fbf"}, 0xbb) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.numa_stat\x00', 0x275a, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0x8004587d, &(0x7f00000003c0)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4}) open_tree(r0, &(0x7f0000000040)='./bus\x00', 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) 213.642861ms ago: executing program 1 (id=561): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="190000000400000008000000ff"], 0x48) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0xffffffffffffbf3d}, 0xc) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000004c0)={{{@in6=@private1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x0, 0x0, 0xa}, 0x0, 0x0, 0x1}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x3c}, 0xa, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x3, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r2, &(0x7f0000000480), 0x2e9, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)=r3}, 0x20) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x8, &(0x7f00000000c0)=0x20003, 0x23) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) connect$inet(r4, &(0x7f0000000800)={0x2, 0x0, @local}, 0x10) 182.084671ms ago: executing program 3 (id=562): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') rmdir(&(0x7f0000000a40)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00') 1.21509ms ago: executing program 2 (id=563): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='mm_page_free\x00', r0}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000240)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x20000000000000}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x2000000, 0x0) pivot_root(&(0x7f00000000c0)='./file0/../file0/../file0/../file0\x00', &(0x7f00000001c0)='./file0/../file0/file0\x00') bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x9) connect$netlink(r1, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000014007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b0000000700000001000800090000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) removexattr(&(0x7f00000002c0)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000000)=@known='security.apparmor\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000580)='kmem_cache_free\x00'}, 0x10) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r5, &(0x7f0000000300)=ANY=[@ANYBLOB="8fedcb7910009875f37538e486dd6317ce8102036c00fe08000e40000200875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000800}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000425bd7000fbdb6103c2001800030000008ab913e6490f51000500330001000000"], 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x20000001) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000400000000000000000000001801000020207025bfa100000000000007010000f8ffffffb702000208000000b70300000000008385000000715816e01600"/88], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f00000005c0)={0x7b, @multicast1, 0x4e20, 0x3, 'none\x00', 0x12, 0x74ff, 0x8}, 0x2c) sendmsg$TIPC_CMD_GET_MAX_PORTS(r1, &(0x7f0000000b00)={&(0x7f0000000a00), 0xc, &(0x7f0000000ac0)={&(0x7f0000000400)={0x1c}, 0x1c}}, 0x8040084) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000fcffffff000000000500000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000020000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a60000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 802µs ago: executing program 3 (id=564): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) mount$bind(0x0, &(0x7f0000000540)='./file0\x00', &(0x7f0000000600), 0x840, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) timerfd_gettime(0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454da, &(0x7f00000001c0)={'bond_slave_0\x00'}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000240)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x1}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454da, &(0x7f0000000140)={'bond0\x00'}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000e5b000)={0x2, 0x4e20, @broadcast}, 0x10) connect$inet(r5, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000004680)=ANY=[@ANYBLOB="180000000300000000000000a012544f95002b000000000093adffa82255f674412d020000000000005ab527ee3697f1ed4436dd1164b1b3f427f6ba6b34f98125f30e631d273683626e00dc254d570d4a6b78a5833488cfe410090000004aa900003d3cd62f00158e6eee8501000000520a0000151d010000000100bf000000003bbd424c6e6cafbe9309aba218812868a51d129e78f6ae170bf5a52001a3cd000041f0db74596fd72c002a60c1bc7dc8c38b00f45f70685c6bd9ff41c69b7de4758c1096a1dc52f29e460a000517ebc406e89dcbb7677e6528b0856e31eb9474c0106fc48e1f8c1a5f6945ac24cf609068f6ff21e88b3cfc22df01e4bac9d97328fa2a82b5e8741e02056d933bedf59ff232cebc68b91af50479387467824262852c7939db5672d07cdbe8e148bf56497e5d56d06c7551b870b2851c3f0a1aab71587a21c8f1b3369ebfcb4cb2946601b0f04edb256c604f068773f6db9d661bd7f0e2536f00000000000000005521458b7d1e341c6f864f983d745f5865aad41d29158ae7602a2d6cd41503f1aa3dc7f1580ace9bf2afd28d7157e67fb98d121a96eb372713255012e00300000000000000b35faae176f98b745eda2967199cc93685bb537e8e487166737089df20618cd4acf3e3dc10e13ef227f627a40000ad1fa253d33fa74f172d0007ae4e1e347c0cff28235a6bb7aa3804b907a8f2880c5cb1cb385e6add14652003c7cdd3324f07d134d3ed07f1c10900000009dd872ec64fa6c718bbd1aa591140cff0be4c6f8df08445e9734ae30aa9afdc7125f01ab03a9b1074407136b4506000f0916aada035df2e0452a9b39e73aeeb6eaf14652dda689e2051d9b7eb85f3f2d5aed65201cc2c51944da8d7391d5b6b9741aa3b76600cd1aa0afe5f8f46df4c5124caf673374b371867a79b31c6617fc3327191fbf514573f1e30d1fd2d763f3ee9218b15c1d60be2168fffcd599a2cb77f124e22f87673675805494db821f39b50d938d5fd8c6b2a3a324c257bc97def5f07f2b77f05a4f81a9cf81109715b67ccd74089ed6b86f81ca3d247d8f71d290ed1b1a11f7a67125170c88c3b6a50696332226401b110da9c4407eca22debc99335583b00013c3130978fa069af8223b38ced735c2d90c6d84c30a0d87dc0c102000000000000009ef52134842e64171f3963841086e3797a4825d081f2d987f05c534187738655d7a6240412c8f283cc0c1eba2866dc9580000000000000007fffffffff554b82d9c162f3556076b80552d961ca74f1ffdaccf0ea5f02e0219ccb9087e6c3b3917bb74fd3d560700a1fab44e77e312b3b129e000302d613916c9bcf9f0000fac73a5b6bfb01efada800e50000000000fdaf2f7b3b79a433e08074ea2462974ab2cbd247eb1cfa2638f56daee57ed14bc74de0fd87a9ce638190f3570e0b4c80ef682df22237270955afb6008846557ee3bc09fda6dbb6550d597300eb82a184c96ffde5a30e5433d866665b98ca2002c836e89feef904c22ff2634b7bfbf5c0d586cda5b45fd00dede1e88a4d41dee7cc8d0834fb8d124638fec58faeb4c16abb440df2a694f4cdcaa400d503d79906958102000000000000000000001ffff0ef89b2a68d2bb2dd163e863314e8449801b52bb93f6c9084659ce777dda8563c859656a357770289a61faa95a82b04cfb7f2f97252e9322abe282c3344fc6738b4467893b9bf0d1c8130ae6b00110635376413c29f7c6f7b7e29b9f4bddd5e328661f4615e627a6f608ad53a4168fe8e5d7d934aa289b4bd2b870000000000000000000000000000bc4b4ff50000009b777883a02ffd92dfc4cb4114b9f9cf4ad155110cd3ace2b322ae31bfa27847c799c8869a1ea5b98e525e6383ad7fd9795170e7b11e247603000000001459c7f606d721d3979676bffb3049166ab84ac1061991bd57c2566c10c296352a5105b6164e3f2491e4793e590dcc71f110da96366c40dd44a2c9882d3aa0f8a797b8fea6efcfb5276b7679f15559cdaabf5fc14add71d0bca37405ded69b77ab4a3d7487fd50c5e22adef9546abb9b5fe7f30e4e0c13f60870fde1f88d830b11002135e8e7262f29b6d7923bfbe0bd2a8be179e56b3bff3792cee2fc37eee739c3008ce740d8804f8e705f0dc59d000021363e8df94ff175b48dc8c12def681a11647946595445bf1cb7d2778cd27a6b3b2966b011d193ba8075da1d1da9311a050000ab89524414cae922141f7baf17756c31559907a53581b6ebb790ad60bd03870c39d1ad12c750837e63f9880fd70259e35590afb4843cd4e9989398eaa89cefb3aa13cab8d015cbaf1561d95362decd73b8f8cbf8269cac091cfaaa3c7e46d6e79145fc0f1d1b383752ccb40515a772356d746914540216adf4c0f44f1cff3760afa252720ec6dad3a98671ecdaff46cddffb1f05a0c0976070d603a442d014822369fa3eacbb69bd1b0a074357acd5d02161fed146ad3aa15d2b8101b7bd1e091ada78ecd50181f4b35cae1b29aff91494c916323b61f815c4e0701657087ad11eef97952921365bc898ba2c76a9b6e0052f43b1ad2dfdf3f958fc1d32e692bc8846c78a956ada453c67c1c2cdc4f8b1c94e9adc106e85b31e030d955c5578e107a6e8ca0d4dd05344c3e2af25d9a3b0f7805624016aeab271a75f0bacb101a156ef8948064569154a7de08f80e4df4c339b69431b0a5671097d89212b465b0b32275deae10a77e334c9fc074d181bdeb5be80a6249d472e78e6be57a5ccd354cf0a74680bc9987d5aade221a2be926210b2690d09e4b7a3dea25403397439979c27d5613262de10bacecfff2d58437f422df4252c018795310c25e8fce18ed366ac2caade564ca869727a7dc26271e17d7aba48971835530311545273d3caadeb5d2017dcddab8f38f2068f68a4111ddd587b5df4b5d8f1ce00231a2092eb2e797c491a1e66f736c5867831c5d6eaa9ef1806fd95bbe00318000000000000259da51ff7517ace7361420a4669a97f7d0bf095c2787f00bdbfee19670d1e0ec5e6c3cb09972fa4d94993157b96d6695177c99d83716651129320924352cda7b8ead91c3301af620c1e8d703dd29ad77f54836779600bb0db3ecfad36fa8164999898e4aaa56324e1c03a74daf593f92a8ecc03f8c8e3af9ae07dc03780cc0d69da9e3528c1693fb51998731992ceb27dcc0be5be4decefe41b78bc1847bf54b087e095172f06cfa6d4bf958b1d4544947ff1230655199db4f475006047fe83caca97758dffa53cee764f85932eb20d54241b2d515c0826dfe1f0f40ae920455a4548fb35e2a345c05b1c252b7877bb3d834b0b3579a36249146f832ef258df5127318c7017ac1a996c4f902f82deb60fd113ccf812d55ffd625057bd4ff3960992b85bc8d32edfca386be16b1c549aec52e31e1405d86c7760282901750b732ec06b0db735222a731195633164704886a0c50a5db0d694028cdf61b9749d5d7bd79969a92114ca804a6365615ceb09ed22e4fc3a7d0e2ee4a5fc10f3d01346481e934e411d0e9d7a9fa515a2219b526d8f3e2b383ef694ff99257fc52c31a3503ce22e503214fa808301b489bb0cd8000000000000159c447fc6f1bf1137f6863aceb90d62dae497fe08f7e627727ad0919a62fe92a33f1e5d390000000000000000004135cb6dda469cd6622e6c36e9f005789e6b827c07b8f4f8d4f15695fe30d32ee6efe22cf8d299239eaa54e5c699a904a0344febb884d1cc94f552f48d84ee3431d817edc4bdb762d62778f30baee4aa428bba55f6cff1b5ba395d461db8ffe6fb89e1058a73bc8564c86497b92330b23cb3befb569cc67f15e349644a2c47924423e2983517074747680306eddd948e5211377575787cfa291ec8796dd7db6968791aea4f5e627b219e99bb9262493bbf04415b22ee398406ec88f6b758f6b240a87dc169f51d3a79fb512afae14fbc5e7808764b8550622c1e3080cdd6b21ce0f0324712343943f5e061df056b3b809c07e1318daf9ed1ebea0f95e302dab0b6bc52ed2aac8b950b448ca3a03d1bd21078c54f5cf86c5563b9bba2805a30574a4123e27d6f281f70ac769c62b49bf7cc73f0c9a2b84534d234d2eb136f8620d3e1147a7b7361618e0064cad6fe32685d143af0d378d54c0a5953c764ae8721bd23cba4701e9f0d7a6e1ba92c87b0384f8ee595d618f7cf5a80a0a2edc2541072e146c1e5a8f7b65c877af04e742cfdcac0641a11d51fd6dc88965691bce388005fbb071451bc260bcf7df8890d9c5c8ef47bc4ff5080a2a771f85b4f3d2a2259196a8423e7a992e9b320a40921f6f74d5b0e94be6c9c059e62ff53e5c2139806cca4545d88a7f7ff366e5d7f08a56609130931b64e3bb70000d38011b924ed9df6aa170c6d845f43c0bcbe3839cd1422944651a5908c76c3f3b4070aa1d896e4adc117698c452c9926442a000e128bb936a99536290f906c088cb10ee7bee50b7b013e4e1ff3481d77c7697738b46deebd9ac6e58b41341dcbfad161e3d529a504821549629ef63f8297bec881eb5edb07ed6c86640fb4128d7931e56bb89f0ce605"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x7, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x48, &(0x7f0000000440)="ba5c234b", 0x4) r7 = socket$kcm(0x29, 0x2, 0x0) write$binfmt_script(r7, &(0x7f0000000680)={'#! ', './file0', [{}, {}, {}]}, 0xe) ioctl$sock_kcm_SIOCKCMATTACH(r7, 0x89e0, &(0x7f0000000180)={r5, r6}) close_range(r4, 0xffffffffffffffff, 0x204000000000000) 0s ago: executing program 4 (id=565): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x4e53e000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x15) symlink(0x0, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) r1 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x1ffffe, 0x10100, 0xfffffffe}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed7f0000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r0, 0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x14a8}, 0x0, 0x20000000, 0x2}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000e37d13fc2e2c98b5256664034b88e7437db9325ba10cf64b6f73792923739a3d6eb288749020808e60d415444d5fc2921d4b9e173a0461a70c2895", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r6}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r7}, 0x10) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001900)=@newtaction={0xeb0, 0x30, 0xb, 0x70bd28, 0x0, {}, [{0xe9c, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}, @m_pedit={0xe50, 0x2, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x0, 0x0, 0x6}, 0x1}, [{0x0, 0x1}, {}, {0x0, 0x0, 0x8}, {0x2}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {0x0, 0xc}, {0x0, 0x0, 0x0, 0x80}, {}, {}, {}, {0x0, 0x0, 0x0, 0x2}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x10}, {0x0, 0x0, 0x0, 0x4000000}, {}, {}, {0x0, 0x9}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x2}, {}, {}, {0xfffffff4}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {}, {0x0, 0x10000}, {0x0, 0x0, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x7fff}, {0x0, 0x0, 0x1}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffc00}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x10000}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, {}, {}, {0x0, 0x1}, {}, {0x2000000}, {}, {0x0, 0xfffffffc, 0x55f8}, {0x200}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, {0x40}, {}, {}, {0x800, 0xfffffffd}, {}, {}, {}, {0x2}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {0x5}, {}, {}, {0x0, 0x1}, {0x3}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {0xd}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x3}, {}, {0x5}, {}, {0x4, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xeb0}}, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') writev(r8, &(0x7f00000002c0)=[{&(0x7f0000000280)='0', 0x1}], 0x1) r9 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r9, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000)={0xffffffffffffffff}, 0x111, 0xc}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r9, &(0x7f0000000280)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x7ff, @empty, 0x1}, {0xa, 0x4e20, 0x1ff, @dev={0xfe, 0x80, '\x00', 0x2f}, 0x9}, r10, 0xb}}, 0x48) write$RDMA_USER_CM_CMD_DESTROY_ID(r9, &(0x7f0000000380)={0x1, 0x10, 0xfa00, {&(0x7f0000000300), r10}}, 0x18) write$RDMA_USER_CM_CMD_RESOLVE_IP(r8, &(0x7f00000002c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e24, 0xdc9, @local, 0x4}, {0xa, 0x4e22, 0x4, @dev={0xfe, 0x80, '\x00', 0x22}}, r10, 0x5}}, 0x48) io_uring_enter(r1, 0x2ded, 0x4000, 0x0, 0x0, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000001000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b7000000000000009500"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) close(0xffffffffffffffff) kernel console output (not intermixed with test programs): 3 netdevsim2: renamed from eth2 [ 30.506784][ T3305] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 30.524877][ T3299] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.548601][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.555691][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.567606][ T3304] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.586458][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.593526][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.606544][ T3297] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.615205][ T3304] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.633925][ T3297] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.650753][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.657903][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.666973][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.674026][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.691289][ T3307] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.702833][ T28] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.710004][ T28] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.720692][ T28] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.727750][ T28] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.786533][ T3305] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.798945][ T3307] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.815671][ T3305] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.825909][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.833028][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.845589][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.852663][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.886085][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.893188][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.925770][ T3305] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 30.936206][ T3305] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 30.950769][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.957936][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.983161][ T3297] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.010159][ T3299] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.042669][ T3304] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.067503][ T3305] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.085053][ T3307] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.200041][ T3304] veth0_vlan: entered promiscuous mode [ 31.223596][ T3304] veth1_vlan: entered promiscuous mode [ 31.247105][ T3297] veth0_vlan: entered promiscuous mode [ 31.260068][ T3297] veth1_vlan: entered promiscuous mode [ 31.277110][ T3307] veth0_vlan: entered promiscuous mode [ 31.299970][ T3304] veth0_macvtap: entered promiscuous mode [ 31.307229][ T3297] veth0_macvtap: entered promiscuous mode [ 31.317378][ T3304] veth1_macvtap: entered promiscuous mode [ 31.324185][ T3307] veth1_vlan: entered promiscuous mode [ 31.331956][ T3297] veth1_macvtap: entered promiscuous mode [ 31.348893][ T3305] veth0_vlan: entered promiscuous mode [ 31.357913][ T3305] veth1_vlan: entered promiscuous mode [ 31.368199][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.381413][ T3297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.391902][ T3297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.402475][ T3297] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.416622][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.430671][ T3304] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.439498][ T3304] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.448405][ T3304] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.459019][ T3304] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.469938][ T3297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.480513][ T3297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.491275][ T3297] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.499403][ T3307] veth0_macvtap: entered promiscuous mode [ 31.505788][ T3299] veth0_vlan: entered promiscuous mode [ 31.524368][ T3305] veth0_macvtap: entered promiscuous mode [ 31.531395][ T3297] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.540174][ T3297] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.549040][ T3297] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.557866][ T3297] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.568872][ T3299] veth1_vlan: entered promiscuous mode [ 31.575673][ T3305] veth1_macvtap: entered promiscuous mode [ 31.586318][ T3307] veth1_macvtap: entered promiscuous mode [ 31.616843][ T3307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.627554][ T3307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.637450][ T3307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.647962][ T3307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.662903][ T3307] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.674309][ T3305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.684803][ T3305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.694690][ T3305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.705144][ T3305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.714984][ T3305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.725504][ T3305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.737837][ T3297] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 31.740409][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.761151][ T3305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.771690][ T3305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.781546][ T3305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.791997][ T3305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.803479][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.811654][ T3307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.822164][ T3307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.832026][ T3307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.842664][ T3307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.852576][ T3307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.863063][ T3307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.873823][ T3307] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.886794][ T3307] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.895595][ T3307] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.904387][ T3307] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.913227][ T3307] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.925040][ T29] kauditd_printk_skb: 27 callbacks suppressed [ 31.931281][ T29] audit: type=1400 audit(1734482001.824:119): avc: denied { read write } for pid=3297 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 31.956800][ T29] audit: type=1400 audit(1734482001.824:120): avc: denied { open } for pid=3297 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 31.966221][ T3305] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.980974][ T29] audit: type=1400 audit(1734482001.824:121): avc: denied { ioctl } for pid=3297 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=101 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 31.989550][ T3305] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.989645][ T3305] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.015043][ T29] audit: type=1400 audit(1734482001.834:122): avc: denied { prog_load } for pid=3438 comm="syz.1.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 32.023776][ T3305] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.032430][ T29] audit: type=1400 audit(1734482001.834:123): avc: denied { bpf } for pid=3438 comm="syz.1.2" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 32.062314][ T3442] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 32.080028][ T29] audit: type=1400 audit(1734482001.834:124): avc: denied { perfmon } for pid=3438 comm="syz.1.2" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 32.080064][ T29] audit: type=1400 audit(1734482001.834:125): avc: denied { prog_run } for pid=3438 comm="syz.1.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 32.131080][ T29] audit: type=1400 audit(1734482001.834:126): avc: denied { map_create } for pid=3438 comm="syz.1.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 32.131748][ T3442] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 32.149950][ T29] audit: type=1400 audit(1734482001.834:127): avc: denied { map_read map_write } for pid=3438 comm="syz.1.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 32.153854][ T29] audit: type=1400 audit(1734482001.964:128): avc: denied { create } for pid=3438 comm="syz.1.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 32.206682][ T3299] veth0_macvtap: entered promiscuous mode [ 32.207793][ T3299] veth1_macvtap: entered promiscuous mode [ 32.211620][ T3299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.211636][ T3299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.211692][ T3299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.211707][ T3299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.211716][ T3299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.211728][ T3299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.211738][ T3299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.211750][ T3299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.212162][ T3299] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.213069][ T3299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.213087][ T3299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.213097][ T3299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.213110][ T3299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.213119][ T3299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.213135][ T3299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.213146][ T3299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.213162][ T3299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.213618][ T3299] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.214452][ T3299] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.214487][ T3299] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.214522][ T3299] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.214608][ T3299] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.389604][ T3453] FAULT_INJECTION: forcing a failure. [ 32.389604][ T3453] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 32.389671][ T3453] CPU: 1 UID: 0 PID: 3453 Comm: syz.4.7 Not tainted 6.13.0-rc3-syzkaller-00026-g59dbb9d81adf #0 [ 32.389699][ T3453] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 32.389714][ T3453] Call Trace: [ 32.389726][ T3453] [ 32.389734][ T3453] dump_stack_lvl+0xf2/0x150 [ 32.389781][ T3453] dump_stack+0x15/0x1a [ 32.389818][ T3453] should_fail_ex+0x223/0x230 [ 32.389852][ T3453] should_fail+0xb/0x10 [ 32.389879][ T3453] should_fail_usercopy+0x1a/0x20 [ 32.389909][ T3453] _copy_from_user+0x1e/0xb0 [ 32.390019][ T3453] copy_msghdr_from_user+0x54/0x2a0 [ 32.390058][ T3453] ? __fget_files+0x17c/0x1c0 [ 32.390144][ T3453] __sys_sendmmsg+0x1e8/0x4b0 [ 32.390194][ T3453] __x64_sys_sendmmsg+0x57/0x70 [ 32.390227][ T3453] x64_sys_call+0x29aa/0x2dc0 [ 32.390252][ T3453] do_syscall_64+0xc9/0x1c0 [ 32.390272][ T3453] ? clear_bhb_loop+0x55/0xb0 [ 32.390321][ T3453] ? clear_bhb_loop+0x55/0xb0 [ 32.390346][ T3453] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 32.390434][ T3453] RIP: 0033:0x7fca173d5d29 [ 32.390457][ T3453] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 32.390480][ T3453] RSP: 002b:00007fca15a41038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 32.390509][ T3453] RAX: ffffffffffffffda RBX: 00007fca175c5fa0 RCX: 00007fca173d5d29 [ 32.390545][ T3453] RDX: 0000000000000001 RSI: 0000000020002900 RDI: 0000000000000005 [ 32.390560][ T3453] RBP: 00007fca15a41090 R08: 0000000000000000 R09: 0000000000000000 [ 32.390575][ T3453] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 32.390588][ T3453] R13: 0000000000000000 R14: 00007fca175c5fa0 R15: 00007fffd7388298 [ 32.390610][ T3453] [ 32.527611][ T3461] loop2: detected capacity change from 0 to 128 [ 32.569624][ T3461] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 32.570638][ T3461] ext4 filesystem being mounted at /2/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 32.852100][ T3471] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=3471 comm=syz.0.13 [ 32.852414][ T3461] netlink: 'syz.2.10': attribute type 10 has an invalid length. [ 32.854604][ T3461] team0: Failed to send options change via netlink (err -105) [ 32.854625][ T3461] team0: Port device netdevsim1 added [ 32.936245][ T3481] infiniband syz1: set active [ 32.941142][ T3481] infiniband syz1: added team_slave_0 [ 32.958350][ T3481] RDS/IB: syz1: added [ 32.962478][ T3481] smc: adding ib device syz1 with port count 1 [ 32.969191][ T3481] smc: ib device syz1 port 1 has pnetid [ 32.982778][ T3486] atomic_op ffff888117817d28 conn xmit_atomic 0000000000000000 [ 33.055850][ T3491] loop0: detected capacity change from 0 to 2048 [ 33.085586][ T3491] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 33.118677][ T3491] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 102 with max blocks 1 with error 28 [ 33.131167][ T3491] EXT4-fs (loop0): This should not happen!! Data will be lost [ 33.131167][ T3491] [ 33.140962][ T3491] EXT4-fs (loop0): Total free blocks count 0 [ 33.147055][ T3491] EXT4-fs (loop0): Free/Dirty block details [ 33.152963][ T3491] EXT4-fs (loop0): free_blocks=0 [ 33.158113][ T3491] EXT4-fs (loop0): dirty_blocks=0 [ 33.160871][ C1] hrtimer: interrupt took 46264 ns [ 33.163182][ T3491] EXT4-fs (loop0): Block reservation details [ 33.174620][ T3491] EXT4-fs (loop0): i_reserved_data_blocks=0 [ 33.215476][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.282625][ T3481] +}[@ (3481) used greatest stack depth: 10752 bytes left [ 33.327247][ T3503] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=3503 comm=syz.0.23 [ 33.427262][ T3304] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 33.882575][ T3533] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=3533 comm=syz.2.34 [ 33.907780][ T3534] loop3: detected capacity change from 0 to 512 [ 33.970754][ T3530] loop4: detected capacity change from 0 to 512 [ 33.977392][ T3530] ======================================================= [ 33.977392][ T3530] WARNING: The mand mount option has been deprecated and [ 33.977392][ T3530] and is ignored by this kernel. Remove the mand [ 33.977392][ T3530] option from the mount to silence this warning. [ 33.977392][ T3530] ======================================================= [ 34.029357][ T3544] netlink: 8 bytes leftover after parsing attributes in process `syz.1.40'. [ 34.057581][ T3534] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.057642][ T3534] ext4 filesystem being mounted at /10/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 34.089786][ T3548] loop0: detected capacity change from 0 to 1024 [ 34.101726][ T3530] EXT4-fs (loop4): too many log groups per flexible block group [ 34.109474][ T3530] EXT4-fs (loop4): failed to initialize mballoc (-12) [ 34.110086][ T3530] EXT4-fs (loop4): mount failed [ 34.125979][ T3548] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 34.144068][ T3548] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2863: Unable to expand inode 12. Delete some EAs or run e2fsck. [ 34.162638][ T3548] EXT4-fs error (device loop0): ext4_expand_extra_isize_ea:2793: inode #14: comm syz.0.41: corrupted in-inode xattr: bad magic number in in-inode xattr [ 34.179340][ T3548] EXT4-fs error (device loop0): ext4_clear_blocks:876: inode #14: comm syz.0.41: attempt to clear invalid blocks 1886221359 len 1 [ 34.189929][ T3534] EXT4-fs (loop3): shut down requested (0) [ 34.222976][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.232660][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.491247][ T3586] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=3586 comm=syz.1.53 [ 35.148740][ T3617] syz.4.62[3617] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 35.148811][ T3617] syz.4.62[3617] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 35.195198][ T3617] syz.4.62[3617] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 35.388776][ T3620] loop4: detected capacity change from 0 to 512 [ 35.421990][ T3620] EXT4-fs: inline encryption not supported [ 35.469631][ T3620] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.537268][ T3620] ext4 filesystem being mounted at /11/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 35.597762][ T3617] EXT4-fs error (device loop4): ext4_do_update_inode:5153: inode #2: comm syz.4.62: corrupted inode contents [ 35.625677][ T3629] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=3629 comm=syz.2.65 [ 35.642944][ T3617] EXT4-fs error (device loop4): ext4_dirty_inode:6041: inode #2: comm syz.4.62: mark_inode_dirty error [ 35.688522][ T3617] EXT4-fs error (device loop4): ext4_do_update_inode:5153: inode #2: comm syz.4.62: corrupted inode contents [ 35.726691][ T3617] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #2: comm syz.4.62: mark_inode_dirty error [ 35.779046][ T3633] netlink: 'syz.2.67': attribute type 2 has an invalid length. [ 35.788477][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.916112][ T3637] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=3637 comm=syz.4.69 [ 36.177028][ T3647] veth1_macvtap: left promiscuous mode [ 36.193385][ T3647] veth1_macvtap: entered promiscuous mode [ 36.200097][ T3647] macsec0: entered promiscuous mode [ 36.205527][ T3647] macsec0: entered allmulticast mode [ 36.210841][ T3647] veth1_macvtap: entered allmulticast mode [ 36.489872][ T3659] loop3: detected capacity change from 0 to 8192 [ 36.602244][ T3669] loop2: detected capacity change from 0 to 1024 [ 36.653391][ T3669] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.667892][ T3671] syz.4.79[3671] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 36.667957][ T3671] syz.4.79[3671] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 36.716007][ T3671] syz.4.79[3671] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 36.730993][ T3669] EXT4-fs error (device loop2): ext4_expand_extra_isize_ea:2793: inode #14: comm syz.2.78: corrupted in-inode xattr: bad magic number in in-inode xattr [ 36.780925][ T3680] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=3680 comm=syz.1.82 [ 36.807958][ T3669] EXT4-fs error (device loop2): ext4_clear_blocks:876: inode #14: comm syz.2.78: attempt to clear invalid blocks 1886221359 len 1 [ 36.882498][ T3687] netlink: 4 bytes leftover after parsing attributes in process `syz.4.84'. [ 36.893116][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.898398][ T3689] loop1: detected capacity change from 0 to 1024 [ 36.954521][ T3689] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.969990][ T29] kauditd_printk_skb: 197 callbacks suppressed [ 36.970012][ T29] audit: type=1326 audit(1734482006.874:324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3696 comm="syz.4.89" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca173d5d29 code=0x7ffc0000 [ 37.030249][ T3689] EXT4-fs (loop1): shut down requested (0) [ 37.046872][ T3689] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 37.047031][ T3689] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 37.047151][ T3689] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 37.047196][ T3689] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=15 [ 37.047303][ T3689] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 37.047368][ T3689] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=15 [ 37.047412][ T3689] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 37.088010][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.097710][ T29] audit: type=1326 audit(1734482006.904:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3696 comm="syz.4.89" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fca173d5d29 code=0x7ffc0000 [ 37.097742][ T29] audit: type=1326 audit(1734482006.904:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3696 comm="syz.4.89" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca173d5d29 code=0x7ffc0000 [ 37.097771][ T29] audit: type=1326 audit(1734482006.904:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3696 comm="syz.4.89" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca173d5d29 code=0x7ffc0000 [ 37.097853][ T29] audit: type=1326 audit(1734482006.924:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3696 comm="syz.4.89" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fca173d5d29 code=0x7ffc0000 [ 37.097878][ T29] audit: type=1326 audit(1734482006.924:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3696 comm="syz.4.89" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca173d5d29 code=0x7ffc0000 [ 37.097994][ T29] audit: type=1326 audit(1734482006.924:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3696 comm="syz.4.89" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca173d5d29 code=0x7ffc0000 [ 37.098024][ T29] audit: type=1326 audit(1734482006.934:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3696 comm="syz.4.89" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fca173d5d29 code=0x7ffc0000 [ 37.098053][ T29] audit: type=1326 audit(1734482006.934:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3696 comm="syz.4.89" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca173d5d29 code=0x7ffc0000 [ 37.098077][ T29] audit: type=1326 audit(1734482006.934:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3696 comm="syz.4.89" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca173d5d29 code=0x7ffc0000 [ 37.321941][ T3705] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=3705 comm=syz.4.93 [ 37.329493][ T3708] SELinux: Context Ü is not valid (left unmapped). [ 37.355543][ T3708] +}[@ uses obsolete (PF_INET,SOCK_PACKET) [ 37.521656][ T3710] netlink: 8 bytes leftover after parsing attributes in process `syz.0.95'. [ 37.675396][ T3718] syz.4.94[3718] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 37.675453][ T3718] syz.4.94[3718] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 37.699333][ T3718] syz.4.94[3718] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 37.764357][ T3722] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=3722 comm=syz.2.97 [ 37.792847][ T3726] netlink: 36 bytes leftover after parsing attributes in process `syz.4.99'. [ 37.849687][ T3730] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=3730 comm=syz.2.101 [ 38.217989][ T3743] SELinux: Context system_u:object_r:hald_log_t:s0 is not valid (left unmapped). [ 38.348411][ T3714] syz.3.96 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 38.359284][ T3714] CPU: 0 UID: 0 PID: 3714 Comm: syz.3.96 Not tainted 6.13.0-rc3-syzkaller-00026-g59dbb9d81adf #0 [ 38.369928][ T3714] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 38.380035][ T3714] Call Trace: [ 38.383328][ T3714] [ 38.386329][ T3714] dump_stack_lvl+0xf2/0x150 [ 38.390982][ T3714] dump_stack+0x15/0x1a [ 38.395195][ T3714] dump_header+0x83/0x2d0 [ 38.399607][ T3714] oom_kill_process+0x341/0x4c0 [ 38.404558][ T3714] out_of_memory+0x9af/0xbe0 [ 38.409281][ T3714] ? css_next_descendant_pre+0x11c/0x140 [ 38.414943][ T3714] mem_cgroup_out_of_memory+0x13e/0x190 [ 38.420608][ T3714] try_charge_memcg+0x508/0x7f0 [ 38.425503][ T3714] charge_memcg+0x50/0xc0 [ 38.429856][ T3714] mem_cgroup_swapin_charge_folio+0xd0/0x150 [ 38.435858][ T3714] __read_swap_cache_async+0x236/0x480 [ 38.441427][ T3714] swap_cluster_readahead+0x279/0x3f0 [ 38.446993][ T3714] swapin_readahead+0xe4/0x6f0 [ 38.451895][ T3714] ? __rcu_read_unlock+0x34/0x70 [ 38.456868][ T3714] ? swap_cache_get_folio+0x77/0x210 [ 38.462183][ T3714] do_swap_page+0x31b/0x2550 [ 38.466794][ T3714] ? __rcu_read_lock+0x36/0x50 [ 38.471582][ T3714] ? __pfx_default_wake_function+0x10/0x10 [ 38.477555][ T3714] handle_mm_fault+0x8e4/0x2ac0 [ 38.482442][ T3714] exc_page_fault+0x3b9/0x650 [ 38.487222][ T3714] asm_exc_page_fault+0x26/0x30 [ 38.492100][ T3714] RIP: 0033:0x7faa6fa885b4 [ 38.496608][ T3714] Code: ff ff ff 49 89 ca 0f 44 f8 80 3d 9e 3f 19 00 00 74 14 b8 e6 00 00 00 0f 05 f7 d8 c3 66 2e 0f 1f 84 00 00 00 00 00 48 83 ec 28 <48> 89 54 24 10 89 74 24 0c 89 3c 24 48 89 4c 24 18 e8 f6 54 ff ff [ 38.516231][ T3714] RSP: 002b:00007ffcfae07a20 EFLAGS: 00010202 [ 38.522388][ T3714] RAX: 00000000fffffffa RBX: 00007faa6fc45fa0 RCX: 0000000000000000 [ 38.530389][ T3714] RDX: 00007ffcfae07a60 RSI: 0000000000000000 RDI: 0000000000000000 [ 38.538376][ T3714] RBP: 00007faa6fc47ba0 R08: 0000000010994efc R09: 7fffffffffffffff [ 38.546532][ T3714] R10: 0000000000000000 R11: 0000000000000010 R12: 0000000000009625 [ 38.554511][ T3714] R13: 00007faa6fc46080 R14: 0000000000000032 R15: ffffffffffffffff [ 38.562517][ T3714] [ 38.565686][ T3714] memory: usage 84120kB, limit 307200kB, failcnt 338 [ 38.572371][ T3714] memory+swap: usage 84304kB, limit 9007199254740988kB, failcnt 0 [ 38.580459][ T3714] kmem: usage 83988kB, limit 9007199254740988kB, failcnt 0 [ 38.587770][ T3714] Memory cgroup stats for /syz3: [ 38.635430][ T3714] cache 131072 [ 38.643939][ T3714] rss 4096 [ 38.647083][ T3714] shmem 0 [ 38.650065][ T3714] mapped_file 65536 [ 38.650457][ T3752] syz.4.110[3752] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 38.653900][ T3714] dirty 0 [ 38.668229][ T3714] writeback 0 [ 38.671548][ T3714] workingset_refault_anon 15 [ 38.676279][ T3714] workingset_refault_file 33 [ 38.680977][ T3714] swap 188416 [ 38.684363][ T3714] swapcached 16384 [ 38.688164][ T3714] pgpgin 3524 [ 38.691465][ T3714] pgpgout 3488 [ 38.694850][ T3714] pgfault 5226 [ 38.698275][ T3714] pgmajfault 14 [ 38.701825][ T3714] inactive_anon 12288 [ 38.705915][ T3714] active_anon 4096 [ 38.709649][ T3714] inactive_file 0 [ 38.713299][ T3714] active_file 131072 [ 38.717276][ T3714] unevictable 0 [ 38.720858][ T3714] hierarchical_memory_limit 314572800 [ 38.726366][ T3714] hierarchical_memsw_limit 9223372036854771712 [ 38.732639][ T3714] total_cache 131072 [ 38.736573][ T3714] total_rss 4096 [ 38.740178][ T3714] total_shmem 0 [ 38.743713][ T3714] total_mapped_file 65536 [ 38.748115][ T3714] total_dirty 0 [ 38.751613][ T3714] total_writeback 0 [ 38.755619][ T3714] total_workingset_refault_anon 15 [ 38.760761][ T3714] total_workingset_refault_file 33 [ 38.765973][ T3714] total_swap 188416 [ 38.769866][ T3714] total_swapcached 16384 [ 38.774242][ T3714] total_pgpgin 3524 [ 38.778100][ T3714] total_pgpgout 3488 [ 38.781999][ T3714] total_pgfault 5226 [ 38.786045][ T3714] total_pgmajfault 14 [ 38.792330][ T3714] total_inactive_anon 12288 [ 38.796899][ T3714] total_active_anon 4096 [ 38.801210][ T3714] total_inactive_file 0 [ 38.805454][ T3714] total_active_file 131072 [ 38.809890][ T3714] total_unevictable 0 [ 38.813948][ T3714] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.96,pid=3714,uid=0 [ 38.828543][ T3714] Memory cgroup out of memory: Killed process 3714 (syz.3.96) total-vm:93516kB, anon-rss:840kB, file-rss:22216kB, shmem-rss:0kB, UID:0 pgtables:120kB oom_score_adj:1000 [ 38.836550][ T3715] syz.3.96 (3715) used greatest stack depth: 9744 bytes left [ 38.857723][ T3756] gtp0: entered promiscuous mode [ 38.862703][ T3756] gtp0: entered allmulticast mode [ 38.863575][ T3757] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=3757 comm=syz.4.113 [ 38.887709][ T3758] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=3758 comm=syz.0.111 [ 38.947213][ T3760] loop4: detected capacity change from 0 to 1024 [ 38.970700][ T3760] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.983183][ T3768] FAULT_INJECTION: forcing a failure. [ 38.983183][ T3768] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 38.996337][ T3768] CPU: 0 UID: 0 PID: 3768 Comm: syz.0.117 Not tainted 6.13.0-rc3-syzkaller-00026-g59dbb9d81adf #0 [ 39.006983][ T3768] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 39.017059][ T3768] Call Trace: [ 39.017394][ T3760] EXT4-fs error (device loop4): ext4_expand_extra_isize_ea:2793: inode #14: comm syz.4.114: corrupted in-inode xattr: bad magic number in in-inode xattr [ 39.020403][ T3768] [ 39.020415][ T3768] dump_stack_lvl+0xf2/0x150 [ 39.037257][ T3760] EXT4-fs error (device loop4): ext4_clear_blocks:876: inode #14: comm syz.4.114: attempt to clear invalid blocks 1886221359 len 1 [ 39.038699][ T3768] dump_stack+0x15/0x1a [ 39.061070][ T3768] should_fail_ex+0x223/0x230 [ 39.065817][ T3768] should_fail+0xb/0x10 [ 39.070022][ T3768] should_fail_usercopy+0x1a/0x20 [ 39.075052][ T3768] strncpy_from_user+0x25/0x210 [ 39.079938][ T3768] ? __fget_files+0x17c/0x1c0 [ 39.084628][ T3768] __se_sys_add_key+0x81/0x320 [ 39.089400][ T3768] ? fput+0x1c4/0x200 [ 39.093384][ T3768] __x64_sys_add_key+0x67/0x80 [ 39.098166][ T3768] x64_sys_call+0x2964/0x2dc0 [ 39.102872][ T3768] do_syscall_64+0xc9/0x1c0 [ 39.107375][ T3768] ? clear_bhb_loop+0x55/0xb0 [ 39.112115][ T3768] ? clear_bhb_loop+0x55/0xb0 [ 39.116797][ T3768] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 39.122759][ T3768] RIP: 0033:0x7f27b24a5d29 [ 39.127170][ T3768] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 39.146934][ T3768] RSP: 002b:00007f27b0b17038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 39.155381][ T3768] RAX: ffffffffffffffda RBX: 00007f27b2695fa0 RCX: 00007f27b24a5d29 [ 39.163381][ T3768] RDX: 0000000020000040 RSI: 0000000020000180 RDI: 0000000020000140 [ 39.171463][ T3768] RBP: 00007f27b0b17090 R08: 000000001c0e2f66 R09: 0000000000000000 [ 39.179435][ T3768] R10: 00000000000001d4 R11: 0000000000000246 R12: 0000000000000001 [ 39.187408][ T3768] R13: 0000000000000000 R14: 00007f27b2695fa0 R15: 00007fff53c18e48 [ 39.195468][ T3768] [ 39.202009][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.284367][ T3779] netlink: 8 bytes leftover after parsing attributes in process `syz.0.120'. [ 39.295466][ T3780] loop2: detected capacity change from 0 to 512 [ 39.313285][ T3779] netlink: 12 bytes leftover after parsing attributes in process `syz.0.120'. [ 39.332196][ T3780] EXT4-fs error (device loop2): ext4_expand_extra_isize_ea:2813: inode #11: comm syz.2.121: corrupted xattr block 95: invalid header [ 39.349138][ T3780] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.121: bg 0: block 7: invalid block bitmap [ 39.362331][ T3780] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 39.371939][ T3780] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2977: inode #11: comm syz.2.121: corrupted xattr block 95: invalid header [ 39.385998][ T3780] EXT4-fs warning (device loop2): ext4_evict_inode:276: xattr delete (err -117) [ 39.395342][ T3780] EXT4-fs (loop2): 1 orphan inode deleted [ 39.402171][ T3780] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.477937][ T3788] netlink: 8 bytes leftover after parsing attributes in process `syz.2.121'. [ 39.492203][ T3788] batadv0: entered promiscuous mode [ 39.498848][ T3788] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 39.509100][ T3788] batadv0: left promiscuous mode [ 39.555539][ T3791] loop4: detected capacity change from 0 to 512 [ 39.576970][ T3791] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 not in group (block 18)! [ 39.587291][ T3791] EXT4-fs (loop4): group descriptors corrupted! [ 39.610276][ T3791] loop4: detected capacity change from 0 to 1024 [ 39.618136][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.643395][ T3791] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.656124][ T3791] ext4 filesystem being mounted at /33/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 39.682104][ T3797] FAULT_INJECTION: forcing a failure. [ 39.682104][ T3797] name failslab, interval 1, probability 0, space 0, times 0 [ 39.682134][ T3797] CPU: 0 UID: 0 PID: 3797 Comm: syz.2.127 Not tainted 6.13.0-rc3-syzkaller-00026-g59dbb9d81adf #0 [ 39.682165][ T3797] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 39.682180][ T3797] Call Trace: [ 39.682227][ T3797] [ 39.682236][ T3797] dump_stack_lvl+0xf2/0x150 [ 39.682278][ T3797] dump_stack+0x15/0x1a [ 39.682395][ T3797] should_fail_ex+0x223/0x230 [ 39.682427][ T3797] should_failslab+0x8f/0xb0 [ 39.682469][ T3797] kmem_cache_alloc_lru_noprof+0x57/0x320 [ 39.682538][ T3797] ? shmem_alloc_inode+0x34/0x50 [ 39.682568][ T3797] shmem_alloc_inode+0x34/0x50 [ 39.682592][ T3797] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 39.682618][ T3797] alloc_inode+0x3c/0x160 [ 39.682672][ T3797] new_inode+0x1e/0x100 [ 39.682695][ T3797] shmem_get_inode+0x24e/0x730 [ 39.682727][ T3797] __shmem_file_setup+0x127/0x1f0 [ 39.682750][ T3797] shmem_file_setup+0x3b/0x50 [ 39.682777][ T3797] __se_sys_memfd_create+0x31d/0x5c0 [ 39.682855][ T3797] __x64_sys_memfd_create+0x31/0x40 [ 39.794954][ T3797] x64_sys_call+0x2d4c/0x2dc0 [ 39.794984][ T3797] do_syscall_64+0xc9/0x1c0 [ 39.804164][ T3797] ? clear_bhb_loop+0x55/0xb0 [ 39.808986][ T3797] ? clear_bhb_loop+0x55/0xb0 [ 39.813670][ T3797] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 39.819655][ T3797] RIP: 0033:0x7f33ce645d29 [ 39.824091][ T3797] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 39.843727][ T3797] RSP: 002b:00007f33cccb0e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 39.852152][ T3797] RAX: ffffffffffffffda RBX: 00000000000007f2 RCX: 00007f33ce645d29 [ 39.860143][ T3797] RDX: 00007f33cccb0ef0 RSI: 0000000000000000 RDI: 00007f33ce6c2381 [ 39.868136][ T3797] RBP: 0000000020001280 R08: 00007f33cccb0bb7 R09: 00007f33cccb0e40 [ 39.876163][ T3797] R10: 000000000000000a R11: 0000000000000202 R12: 0000000020000140 [ 39.884145][ T3797] R13: 00007f33cccb0ef0 R14: 00007f33cccb0eb0 R15: 0000000020000040 [ 39.892205][ T3797] [ 39.915446][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.019507][ T3808] loop2: detected capacity change from 0 to 512 [ 40.047842][ T3808] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.068591][ T3808] ext4 filesystem being mounted at /29/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 40.110071][ T3819] loop4: detected capacity change from 0 to 512 [ 40.124740][ T3815] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=3815 comm=syz.1.135 [ 40.129787][ T3808] EXT4-fs (loop2): shut down requested (0) [ 40.163611][ T3819] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.180538][ T3824] atomic_op ffff888113388528 conn xmit_atomic 0000000000000000 [ 40.182871][ T3820] loop0: detected capacity change from 0 to 512 [ 40.188832][ T3819] ext4 filesystem being mounted at /36/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 40.230182][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.232524][ T3820] EXT4-fs (loop0): too many log groups per flexible block group [ 40.247023][ T3820] EXT4-fs (loop0): failed to initialize mballoc (-12) [ 40.253888][ T3820] EXT4-fs (loop0): mount failed [ 40.277668][ T3829] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=3829 comm=syz.2.139 [ 40.295963][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.338811][ T3834] veth1_macvtap: left promiscuous mode [ 40.347577][ T3834] veth1_macvtap: entered promiscuous mode [ 40.353364][ T3834] macsec0: entered promiscuous mode [ 40.358939][ T3834] macsec0: entered allmulticast mode [ 40.364248][ T3834] veth1_macvtap: entered allmulticast mode [ 40.424881][ T3839] veth1_macvtap: left promiscuous mode [ 40.454226][ T3839] veth1_macvtap: entered promiscuous mode [ 40.460063][ T3839] macsec0: entered promiscuous mode [ 40.465469][ T3839] macsec0: entered allmulticast mode [ 40.470770][ T3839] veth1_macvtap: entered allmulticast mode [ 40.588592][ T3847] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=3847 comm=syz.1.144 [ 40.742082][ T3859] bpf_get_probe_write_proto: 2 callbacks suppressed [ 40.742099][ T3859] syz.0.148[3859] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 40.748943][ T3859] syz.0.148[3859] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 40.760323][ T3859] syz.0.148[3859] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 40.763967][ T3859] loop0: detected capacity change from 0 to 512 [ 40.764263][ T3859] EXT4-fs: inline encryption not supported [ 40.825232][ T3859] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.838142][ T3859] ext4 filesystem being mounted at /27/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 40.838737][ T3862] loop3: detected capacity change from 0 to 512 [ 40.851826][ T3859] EXT4-fs error (device loop0): ext4_do_update_inode:5153: inode #2: comm syz.0.148: corrupted inode contents [ 40.866279][ T3863] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=3863 comm=syz.4.150 [ 40.866421][ T3863] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=3863 comm=syz.4.150 [ 40.867002][ T3863] SELinux: Context system_u:object_r:updpwd_exec_t:s0 is not valid (left unmapped). [ 40.882524][ T3859] EXT4-fs error (device loop0): ext4_dirty_inode:6041: inode #2: comm syz.0.148: mark_inode_dirty error [ 40.929191][ T3859] EXT4-fs error (device loop0): ext4_do_update_inode:5153: inode #2: comm syz.0.148: corrupted inode contents [ 40.939513][ T3863] loop4: detected capacity change from 0 to 128 [ 40.941175][ T3859] EXT4-fs error (device loop0): __ext4_ext_dirty:207: inode #2: comm syz.0.148: mark_inode_dirty error [ 40.962056][ T3862] EXT4-fs (loop3): too many log groups per flexible block group [ 40.969944][ T3862] EXT4-fs (loop3): failed to initialize mballoc (-12) [ 40.977616][ T3862] EXT4-fs (loop3): mount failed [ 41.010448][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.029491][ T3881] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=3881 comm=syz.4.154 [ 41.053157][ T3883] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=3883 comm=syz.0.153 [ 41.092605][ T3887] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=3887 comm=syz.0.156 [ 41.150918][ T3894] loop4: detected capacity change from 0 to 1024 [ 41.176624][ T3894] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.209333][ T3894] EXT4-fs error (device loop4): ext4_expand_extra_isize_ea:2793: inode #14: comm syz.4.159: corrupted in-inode xattr: bad magic number in in-inode xattr [ 41.252404][ T3894] EXT4-fs error (device loop4): ext4_clear_blocks:876: inode #14: comm syz.4.159: attempt to clear invalid blocks 1886221359 len 1 [ 41.273081][ T3901] FAULT_INJECTION: forcing a failure. [ 41.273081][ T3901] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 41.286346][ T3901] CPU: 0 UID: 0 PID: 3901 Comm: syz.0.160 Not tainted 6.13.0-rc3-syzkaller-00026-g59dbb9d81adf #0 [ 41.296960][ T3901] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 41.307043][ T3901] Call Trace: [ 41.310413][ T3901] [ 41.313378][ T3901] dump_stack_lvl+0xf2/0x150 [ 41.318050][ T3901] dump_stack+0x15/0x1a [ 41.322397][ T3901] should_fail_ex+0x223/0x230 [ 41.327103][ T3901] should_fail+0xb/0x10 [ 41.331405][ T3901] should_fail_usercopy+0x1a/0x20 [ 41.336459][ T3901] _copy_from_iter+0xd5/0xd00 [ 41.341216][ T3901] ? kmalloc_reserve+0x16e/0x190 [ 41.346175][ T3901] ? __build_skb_around+0x196/0x1f0 [ 41.351479][ T3901] ? __alloc_skb+0x21f/0x310 [ 41.356132][ T3901] ? __virt_addr_valid+0x1ed/0x250 [ 41.361292][ T3901] ? __check_object_size+0x364/0x520 [ 41.366664][ T3901] netlink_sendmsg+0x460/0x6e0 [ 41.371502][ T3901] ? __pfx_netlink_sendmsg+0x10/0x10 [ 41.376838][ T3901] __sock_sendmsg+0x140/0x180 [ 41.381635][ T3901] ____sys_sendmsg+0x312/0x410 [ 41.386620][ T3901] __sys_sendmsg+0x19d/0x230 [ 41.391290][ T3901] __x64_sys_sendmsg+0x46/0x50 [ 41.396135][ T3901] x64_sys_call+0x2734/0x2dc0 [ 41.400978][ T3901] do_syscall_64+0xc9/0x1c0 [ 41.405505][ T3901] ? clear_bhb_loop+0x55/0xb0 [ 41.410209][ T3901] ? clear_bhb_loop+0x55/0xb0 [ 41.414977][ T3901] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 41.420912][ T3901] RIP: 0033:0x7f27b24a5d29 [ 41.425346][ T3901] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 41.445231][ T3901] RSP: 002b:00007f27b0b17038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 41.453674][ T3901] RAX: ffffffffffffffda RBX: 00007f27b2695fa0 RCX: 00007f27b24a5d29 [ 41.461672][ T3901] RDX: 0000000000000000 RSI: 0000000020000300 RDI: 0000000000000003 [ 41.469662][ T3901] RBP: 00007f27b0b17090 R08: 0000000000000000 R09: 0000000000000000 [ 41.477650][ T3901] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 41.485650][ T3901] R13: 0000000000000000 R14: 00007f27b2695fa0 R15: 00007fff53c18e48 [ 41.493742][ T3901] [ 41.501815][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.591100][ T3908] loop4: detected capacity change from 0 to 2048 [ 41.639755][ T3908] loop4: p1 < > p4 [ 41.643913][ T3910] syz.2.164[3910] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 41.644033][ T3910] syz.2.164[3910] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 41.660575][ T3910] syz.2.164[3910] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 41.672329][ T3908] loop4: p4 size 8388608 extends beyond EOD, truncated [ 41.693185][ T3913] loop2: detected capacity change from 0 to 512 [ 41.704675][ T3913] EXT4-fs: inline encryption not supported [ 41.711023][ T2999] loop4: p1 < > p4 [ 41.716366][ T2999] loop4: p4 size 8388608 extends beyond EOD, truncated [ 41.730251][ T3290] udevd[3290]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 41.741474][ T3913] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.747965][ T3912] loop0: detected capacity change from 0 to 512 [ 41.765976][ T3913] ext4 filesystem being mounted at /33/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 41.767764][ T3555] udevd[3555]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 41.790760][ T3910] EXT4-fs error (device loop2): ext4_do_update_inode:5153: inode #2: comm syz.2.164: corrupted inode contents [ 41.811471][ T3290] udevd[3290]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 41.823212][ T3555] udevd[3555]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 41.836998][ T3910] EXT4-fs error (device loop2): ext4_dirty_inode:6041: inode #2: comm syz.2.164: mark_inode_dirty error [ 41.887813][ T3912] EXT4-fs (loop0): too many log groups per flexible block group [ 41.895584][ T3912] EXT4-fs (loop0): failed to initialize mballoc (-12) [ 41.902744][ T3912] EXT4-fs (loop0): mount failed [ 41.904166][ T3921] SELinux: Context system_u:object_r:dhcp_state_t:s0 is not valid (left unmapped). [ 41.910145][ T3910] EXT4-fs error (device loop2): ext4_do_update_inode:5153: inode #2: comm syz.2.164: corrupted inode contents [ 42.010961][ T3929] loop4: detected capacity change from 0 to 512 [ 42.023338][ T3910] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #2: comm syz.2.164: mark_inode_dirty error [ 42.084486][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.096748][ T3929] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.144267][ T3929] ext4 filesystem being mounted at /45/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 42.200962][ T3939] syzkaller1: entered promiscuous mode [ 42.206564][ T3939] syzkaller1: entered allmulticast mode [ 42.221262][ T29] kauditd_printk_skb: 539 callbacks suppressed [ 42.221316][ T29] audit: type=1326 audit(1734482012.124:871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3940 comm="syz.1.174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd9a8f5d29 code=0x7ffc0000 [ 42.221371][ T29] audit: type=1326 audit(1734482012.124:872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3940 comm="syz.1.174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd9a8f5d29 code=0x7ffc0000 [ 42.221403][ T29] audit: type=1326 audit(1734482012.124:873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3940 comm="syz.1.174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=172 compat=0 ip=0x7fbd9a8f5d29 code=0x7ffc0000 [ 42.221441][ T29] audit: type=1326 audit(1734482012.124:874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3940 comm="syz.1.174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd9a8f5d29 code=0x7ffc0000 [ 42.221470][ T29] audit: type=1326 audit(1734482012.124:875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3940 comm="syz.1.174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd9a8f5d29 code=0x7ffc0000 [ 42.221869][ T29] audit: type=1326 audit(1734482012.124:876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3940 comm="syz.1.174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=152 compat=0 ip=0x7fbd9a8f5d29 code=0x7ffc0000 [ 42.221900][ T29] audit: type=1326 audit(1734482012.124:877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3940 comm="syz.1.174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd9a8f5d29 code=0x7ffc0000 [ 42.266144][ T3947] loop0: detected capacity change from 0 to 1024 [ 42.357480][ T3929] EXT4-fs (loop4): shut down requested (0) [ 42.458239][ T29] audit: type=1400 audit(1734482012.364:878): avc: denied { ioctl } for pid=3948 comm="syz.1.178" path="socket:[6162]" dev="sockfs" ino=6162 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 42.483973][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.484723][ T29] audit: type=1400 audit(1734482012.364:879): avc: denied { ioctl } for pid=3948 comm="syz.1.178" path="socket:[5830]" dev="sockfs" ino=5830 ioctlcmd=0x8912 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 42.494565][ T3947] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.584834][ T3962] syz.1.182[3962] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 42.585031][ T3962] syz.1.182[3962] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 42.596723][ T3962] syz.1.182[3962] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 42.627278][ T3947] EXT4-fs error (device loop0): ext4_expand_extra_isize_ea:2793: inode #14: comm syz.0.177: corrupted in-inode xattr: bad magic number in in-inode xattr [ 42.645614][ T3963] netlink: 'syz.3.181': attribute type 1 has an invalid length. [ 42.665553][ T3965] syz.4.183[3965] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 42.668571][ T3965] loop4: detected capacity change from 0 to 512 [ 42.684879][ T3947] EXT4-fs error (device loop0): ext4_clear_blocks:876: inode #14: comm syz.0.177: attempt to clear invalid blocks 1886221359 len 1 [ 42.686391][ T3965] EXT4-fs: inline encryption not supported [ 42.745370][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.754824][ T3965] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.769786][ T3965] ext4 filesystem being mounted at /47/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 42.815553][ T3965] EXT4-fs error (device loop4): ext4_do_update_inode:5153: inode #2: comm syz.4.183: corrupted inode contents [ 42.829433][ T29] audit: type=1326 audit(1734482012.714:880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3975 comm="syz.3.188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa6fa55d29 code=0x7ffc0000 [ 42.857026][ T3965] EXT4-fs error (device loop4): ext4_dirty_inode:6041: inode #2: comm syz.4.183: mark_inode_dirty error [ 42.870689][ T3965] EXT4-fs error (device loop4): ext4_do_update_inode:5153: inode #2: comm syz.4.183: corrupted inode contents [ 42.884852][ T3965] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #2: comm syz.4.183: mark_inode_dirty error [ 42.974842][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.045953][ T3992] FAULT_INJECTION: forcing a failure. [ 43.045953][ T3992] name failslab, interval 1, probability 0, space 0, times 0 [ 43.058817][ T3992] CPU: 1 UID: 0 PID: 3992 Comm: syz.4.190 Not tainted 6.13.0-rc3-syzkaller-00026-g59dbb9d81adf #0 [ 43.069514][ T3992] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 43.079651][ T3992] Call Trace: [ 43.082953][ T3992] [ 43.085905][ T3992] dump_stack_lvl+0xf2/0x150 [ 43.090541][ T3992] dump_stack+0x15/0x1a [ 43.094748][ T3992] should_fail_ex+0x223/0x230 [ 43.099520][ T3992] should_failslab+0x8f/0xb0 [ 43.104240][ T3992] kmem_cache_alloc_noprof+0x52/0x320 [ 43.109711][ T3992] ? security_file_alloc+0x32/0x100 [ 43.114944][ T3992] security_file_alloc+0x32/0x100 [ 43.120064][ T3992] init_file+0x5b/0x1b0 [ 43.124260][ T3992] alloc_empty_file+0xea/0x200 [ 43.129058][ T3992] dentry_open+0x2d/0x90 [ 43.133414][ T3992] __se_sys_open_tree+0x1a1/0x660 [ 43.138506][ T3992] ? fput+0x1c4/0x200 [ 43.142510][ T3992] ? ksys_write+0x176/0x1b0 [ 43.147036][ T3992] __x64_sys_open_tree+0x43/0x50 [ 43.152049][ T3992] x64_sys_call+0x2011/0x2dc0 [ 43.156741][ T3992] do_syscall_64+0xc9/0x1c0 [ 43.161301][ T3992] ? clear_bhb_loop+0x55/0xb0 [ 43.166048][ T3992] ? clear_bhb_loop+0x55/0xb0 [ 43.170757][ T3992] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 43.176738][ T3992] RIP: 0033:0x7fca173d5d29 [ 43.181191][ T3992] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 43.200846][ T3992] RSP: 002b:00007fca15a41038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ac [ 43.209327][ T3992] RAX: ffffffffffffffda RBX: 00007fca175c5fa0 RCX: 00007fca173d5d29 [ 43.217361][ T3992] RDX: 0000000000000000 RSI: 0000000020000840 RDI: ffffffffffffff9c [ 43.225589][ T3992] RBP: 00007fca15a41090 R08: 0000000000000000 R09: 0000000000000000 [ 43.233588][ T3992] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 43.241627][ T3992] R13: 0000000000000000 R14: 00007fca175c5fa0 R15: 00007fffd7388298 [ 43.249694][ T3992] [ 43.263168][ T3994] netlink: 76 bytes leftover after parsing attributes in process `syz.0.192'. [ 43.439390][ T4012] netlink: 4 bytes leftover after parsing attributes in process `syz.4.200'. [ 43.455729][ T4012] netlink: 1 bytes leftover after parsing attributes in process `syz.4.200'. [ 43.474378][ T4012] loop4: detected capacity change from 0 to 512 [ 43.498830][ T4012] EXT4-fs (loop4): too many log groups per flexible block group [ 43.506755][ T4012] EXT4-fs (loop4): failed to initialize mballoc (-12) [ 43.529297][ T4012] EXT4-fs (loop4): mount failed [ 43.784110][ T4039] loop0: detected capacity change from 0 to 1024 [ 43.804101][ T4039] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 43.815105][ T4039] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (38281!=20869) [ 43.839928][ T4039] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 43.850115][ T4039] EXT4-fs (loop0): external journal device major/minor numbers have changed [ 43.858874][ T4039] EXT4-fs (loop0): filesystem has both journal inode and journal device! [ 43.873682][ T4042] selinux_netlink_send: 6 callbacks suppressed [ 43.873702][ T4042] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=4042 comm=syz.1.211 [ 43.973181][ T4048] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=4048 comm=syz.0.214 [ 43.999753][ T4050] loop2: detected capacity change from 0 to 1024 [ 44.034094][ T4050] xt_connbytes: Forcing CT accounting to be enabled [ 44.044328][ T4050] Cannot find add_set index 0 as target [ 44.064535][ T4055] program syz.1.216 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 44.080386][ T4055] netlink: 20 bytes leftover after parsing attributes in process `syz.1.216'. [ 44.139896][ T4067] veth1_macvtap: left promiscuous mode [ 44.152189][ T4067] veth1_macvtap: entered promiscuous mode [ 44.158037][ T4067] macsec0: entered promiscuous mode [ 44.163431][ T4067] macsec0: entered allmulticast mode [ 44.168821][ T4067] veth1_macvtap: entered allmulticast mode [ 44.264412][ T4076] netlink: 8 bytes leftover after parsing attributes in process `syz.4.225'. [ 44.277404][ T4078] loop1: detected capacity change from 0 to 512 [ 44.317988][ T4078] EXT4-fs (loop1): too many log groups per flexible block group [ 44.325797][ T4078] EXT4-fs (loop1): failed to initialize mballoc (-12) [ 44.343131][ T4086] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=4086 comm=syz.4.228 [ 44.354878][ T4078] EXT4-fs (loop1): mount failed [ 44.976764][ T4111] SELinux: policydb magic number 0x77c598c does not match expected magic number 0xf97cff8c [ 44.987136][ T4111] SELinux: failed to load policy [ 44.994194][ T4111] netlink: 4 bytes leftover after parsing attributes in process `syz.3.237'. [ 45.166747][ T4116] loop3: detected capacity change from 0 to 512 [ 45.196472][ T4116] EXT4-fs (loop3): too many log groups per flexible block group [ 45.204179][ T4116] EXT4-fs (loop3): failed to initialize mballoc (-12) [ 45.211421][ T4116] EXT4-fs (loop3): mount failed [ 45.387302][ T4130] loop2: detected capacity change from 0 to 512 [ 45.402892][ T4134] loop0: detected capacity change from 0 to 512 [ 45.413838][ T4130] EXT4-fs (loop2): too many log groups per flexible block group [ 45.417337][ T4133] netlink: 36 bytes leftover after parsing attributes in process `syz.3.246'. [ 45.421626][ T4130] EXT4-fs (loop2): failed to initialize mballoc (-12) [ 45.438825][ T4130] EXT4-fs (loop2): mount failed [ 45.467612][ T4134] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.485898][ T4134] ext4 filesystem being mounted at /52/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 45.511615][ T4134] EXT4-fs (loop0): shut down requested (0) [ 45.534441][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.569144][ T4143] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=4143 comm=syz.0.248 [ 46.049502][ T4172] bpf_get_probe_write_proto: 8 callbacks suppressed [ 46.049529][ T4172] syz.3.260[4172] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 46.056438][ T4172] syz.3.260[4172] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 46.067980][ T4172] syz.3.260[4172] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 46.131697][ T4176] loop4: detected capacity change from 0 to 512 [ 46.151990][ T4176] EXT4-fs error (device loop4): ext4_expand_extra_isize_ea:2813: inode #11: comm syz.4.262: corrupted xattr block 95: invalid header [ 46.166750][ T4176] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.262: bg 0: block 7: invalid block bitmap [ 46.186223][ T4176] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 46.205237][ T4176] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2977: inode #11: comm syz.4.262: corrupted xattr block 95: invalid header [ 46.224488][ T4180] loop2: detected capacity change from 0 to 1024 [ 46.231146][ T4176] EXT4-fs warning (device loop4): ext4_evict_inode:276: xattr delete (err -117) [ 46.249494][ T4176] EXT4-fs (loop4): 1 orphan inode deleted [ 46.264704][ T4176] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.282946][ T4180] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.304474][ T4180] ext4 filesystem being mounted at /41/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 46.340817][ T4187] netlink: 8 bytes leftover after parsing attributes in process `syz.4.262'. [ 46.350379][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.424525][ T4193] netlink: 8 bytes leftover after parsing attributes in process `syz.3.267'. [ 46.433762][ T4191] netlink: 'syz.2.266': attribute type 2 has an invalid length. [ 46.469026][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.483342][ T4195] loop3: detected capacity change from 0 to 512 [ 46.510168][ T4195] EXT4-fs (loop3): too many log groups per flexible block group [ 46.518035][ T4195] EXT4-fs (loop3): failed to initialize mballoc (-12) [ 46.519236][ T4197] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=4197 comm=syz.4.269 [ 46.554219][ T4195] EXT4-fs (loop3): mount failed [ 46.618707][ T4202] syz.1.271[4202] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 46.618801][ T4202] syz.1.271[4202] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 46.631663][ T4202] syz.1.271[4202] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 46.707235][ T4205] atomic_op ffff88812e806128 conn xmit_atomic 0000000000000000 [ 46.814399][ T4211] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=4211 comm=syz.3.274 [ 46.981054][ T4219] loop3: detected capacity change from 0 to 512 [ 46.991069][ T4217] syz.0.276[4217] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 46.991197][ T4217] syz.0.276[4217] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 47.003763][ T4219] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 not in group (block 18)! [ 47.025150][ T4217] syz.0.276[4217] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 47.025311][ T4219] EXT4-fs (loop3): group descriptors corrupted! [ 47.036850][ T4217] loop0: detected capacity change from 0 to 512 [ 47.060829][ T4217] EXT4-fs: inline encryption not supported [ 47.107084][ T4217] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.131371][ T4219] loop3: detected capacity change from 0 to 1024 [ 47.139880][ T4217] ext4 filesystem being mounted at /57/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 47.179274][ T4217] EXT4-fs error (device loop0): ext4_do_update_inode:5153: inode #2: comm syz.0.276: corrupted inode contents [ 47.198380][ T4219] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.198819][ T4217] EXT4-fs error (device loop0): ext4_dirty_inode:6041: inode #2: comm syz.0.276: mark_inode_dirty error [ 47.211259][ T4219] ext4 filesystem being mounted at /52/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 47.253058][ T4217] EXT4-fs error (device loop0): ext4_do_update_inode:5153: inode #2: comm syz.0.276: corrupted inode contents [ 47.271374][ T4217] EXT4-fs error (device loop0): __ext4_ext_dirty:207: inode #2: comm syz.0.276: mark_inode_dirty error [ 47.286864][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.308518][ T4235] syz.4.282[4235] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 47.338585][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.390088][ T4241] loop0: detected capacity change from 0 to 512 [ 47.394125][ T4243] netlink: 80 bytes leftover after parsing attributes in process `syz.1.285'. [ 47.407824][ T4241] EXT4-fs (loop0): too many log groups per flexible block group [ 47.415642][ T4241] EXT4-fs (loop0): failed to initialize mballoc (-12) [ 47.442506][ T4241] EXT4-fs (loop0): mount failed [ 47.564016][ T29] kauditd_printk_skb: 528 callbacks suppressed [ 47.564033][ T29] audit: type=1326 audit(1734482017.464:1409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4256 comm="syz.0.289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27b24a5d29 code=0x7ffc0000 [ 47.593628][ T29] audit: type=1326 audit(1734482017.464:1410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4256 comm="syz.0.289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27b24a5d29 code=0x7ffc0000 [ 47.617011][ T29] audit: type=1326 audit(1734482017.504:1411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4256 comm="syz.0.289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=333 compat=0 ip=0x7f27b24a5d29 code=0x7ffc0000 [ 47.640356][ T29] audit: type=1326 audit(1734482017.504:1412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4256 comm="syz.0.289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27b24a5d29 code=0x7ffc0000 [ 47.663762][ T29] audit: type=1326 audit(1734482017.504:1413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4256 comm="syz.0.289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27b24a5d29 code=0x7ffc0000 [ 47.687169][ T29] audit: type=1326 audit(1734482017.504:1414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4256 comm="syz.0.289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f27b24a5d29 code=0x7ffc0000 [ 47.710616][ T29] audit: type=1326 audit(1734482017.504:1415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4256 comm="syz.0.289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27b24a5d29 code=0x7ffc0000 [ 47.734003][ T29] audit: type=1326 audit(1734482017.504:1416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4256 comm="syz.0.289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27b24a5d29 code=0x7ffc0000 [ 47.757325][ T29] audit: type=1326 audit(1734482017.504:1417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4256 comm="syz.0.289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f27b24a5d29 code=0x7ffc0000 [ 47.780731][ T29] audit: type=1326 audit(1734482017.504:1418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4256 comm="syz.0.289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27b24a5d29 code=0x7ffc0000 [ 48.059734][ T4268] loop4: detected capacity change from 0 to 1024 [ 48.116236][ T4268] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.143691][ T4268] EXT4-fs error (device loop4): ext4_expand_extra_isize_ea:2793: inode #14: comm syz.4.292: corrupted in-inode xattr: bad magic number in in-inode xattr [ 48.185718][ T4268] EXT4-fs error (device loop4): ext4_clear_blocks:876: inode #14: comm syz.4.292: attempt to clear invalid blocks 1886221359 len 1 [ 48.246803][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.334363][ T4280] netlink: 'syz.1.297': attribute type 2 has an invalid length. [ 48.343979][ T4283] loop0: detected capacity change from 0 to 512 [ 48.378251][ T4283] EXT4-fs (loop0): too many log groups per flexible block group [ 48.386091][ T4283] EXT4-fs (loop0): failed to initialize mballoc (-12) [ 48.392930][ T4288] veth1_macvtap: left allmulticast mode [ 48.398719][ T4288] veth1_macvtap: left promiscuous mode [ 48.401570][ T4289] loop4: detected capacity change from 0 to 1024 [ 48.404281][ T4288] macsec0: left promiscuous mode [ 48.415595][ T4288] macsec0: left allmulticast mode [ 48.420965][ T4283] EXT4-fs (loop0): mount failed [ 48.425406][ T4288] veth1_macvtap: entered promiscuous mode [ 48.431652][ T4288] macsec0: entered promiscuous mode [ 48.437108][ T4288] macsec0: entered allmulticast mode [ 48.442424][ T4288] veth1_macvtap: entered allmulticast mode [ 48.449883][ T4289] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.466472][ T4289] EXT4-fs error (device loop4): ext4_expand_extra_isize_ea:2793: inode #14: comm syz.4.300: corrupted in-inode xattr: bad magic number in in-inode xattr [ 48.482188][ T4289] EXT4-fs error (device loop4): ext4_clear_blocks:876: inode #14: comm syz.4.300: attempt to clear invalid blocks 1886221359 len 1 [ 48.514044][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.693842][ T4309] loop4: detected capacity change from 0 to 512 [ 48.709393][ T4309] EXT4-fs error (device loop4): ext4_expand_extra_isize_ea:2813: inode #11: comm syz.4.308: corrupted xattr block 95: invalid header [ 48.723800][ T4309] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.308: bg 0: block 7: invalid block bitmap [ 48.737759][ T4309] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 48.746770][ T4309] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2977: inode #11: comm syz.4.308: corrupted xattr block 95: invalid header [ 48.762006][ T4309] EXT4-fs warning (device loop4): ext4_evict_inode:276: xattr delete (err -117) [ 48.771124][ T4309] EXT4-fs (loop4): 1 orphan inode deleted [ 48.777328][ T4309] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.863743][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.910297][ T4316] loop2: detected capacity change from 0 to 512 [ 48.928287][ T4316] EXT4-fs (loop2): too many log groups per flexible block group [ 48.936091][ T4316] EXT4-fs (loop2): failed to initialize mballoc (-12) [ 48.946907][ T4316] EXT4-fs (loop2): mount failed [ 48.978280][ T4325] loop2: detected capacity change from 0 to 1024 [ 48.996415][ T4326] capability: warning: `syz.4.309' uses 32-bit capabilities (legacy support in use) [ 48.998986][ T4325] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.024635][ T4325] EXT4-fs error (device loop2): ext4_expand_extra_isize_ea:2793: inode #14: comm syz.2.313: corrupted in-inode xattr: bad magic number in in-inode xattr [ 49.042240][ T4325] EXT4-fs error (device loop2): ext4_clear_blocks:876: inode #14: comm syz.2.313: attempt to clear invalid blocks 1886221359 len 1 [ 49.068441][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.494263][ T4343] loop3: detected capacity change from 0 to 512 [ 49.504146][ T4343] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 not in group (block 18)! [ 49.514429][ T4343] EXT4-fs (loop3): group descriptors corrupted! [ 49.528000][ T4343] loop3: detected capacity change from 0 to 1024 [ 49.553005][ T4343] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.571471][ T4343] ext4 filesystem being mounted at /58/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 49.624946][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.710945][ T4350] loop3: detected capacity change from 0 to 512 [ 49.749825][ T4350] EXT4-fs error (device loop3): ext4_expand_extra_isize_ea:2813: inode #11: comm syz.3.319: corrupted xattr block 95: invalid header [ 49.750812][ T4351] loop0: detected capacity change from 0 to 512 [ 49.771443][ T4350] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.319: bg 0: block 7: invalid block bitmap [ 49.774230][ T4351] EXT4-fs error (device loop0): ext4_expand_extra_isize_ea:2813: inode #11: comm syz.0.320: corrupted xattr block 95: invalid header [ 49.800987][ T4351] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz.0.320: bg 0: block 7: invalid block bitmap [ 49.814780][ T4351] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 49.819036][ T4350] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 49.824612][ T4351] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2977: inode #11: comm syz.0.320: corrupted xattr block 95: invalid header [ 49.847658][ T4351] EXT4-fs warning (device loop0): ext4_evict_inode:276: xattr delete (err -117) [ 49.857118][ T4351] EXT4-fs (loop0): 1 orphan inode deleted [ 49.863115][ T4350] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2977: inode #11: comm syz.3.319: corrupted xattr block 95: invalid header [ 49.863352][ T4351] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.899044][ T4350] EXT4-fs warning (device loop3): ext4_evict_inode:276: xattr delete (err -117) [ 49.913061][ T4355] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=4355 comm=syz.4.321 [ 49.949303][ T4350] EXT4-fs (loop3): 1 orphan inode deleted [ 49.966034][ T4356] netlink: 8 bytes leftover after parsing attributes in process `syz.0.320'. [ 49.976716][ T4350] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.141821][ T4360] netlink: 8 bytes leftover after parsing attributes in process `syz.3.319'. [ 50.205493][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.362640][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.372161][ T4366] Falling back ldisc for ttyS3. [ 50.591248][ T4394] loop3: detected capacity change from 0 to 512 [ 50.599308][ T4394] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 not in group (block 18)! [ 50.609608][ T4394] EXT4-fs (loop3): group descriptors corrupted! [ 50.629904][ T4396] loop1: detected capacity change from 0 to 512 [ 50.659842][ T4394] loop3: detected capacity change from 0 to 1024 [ 50.688858][ T4396] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.727883][ T4394] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.741785][ T4396] ext4 filesystem being mounted at /59/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 50.752641][ T4394] ext4 filesystem being mounted at /61/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 50.792056][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.816759][ T4396] EXT4-fs (loop1): shut down requested (0) [ 50.867715][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.900106][ T4418] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=4418 comm=syz.3.334 [ 51.172678][ T4430] loop2: detected capacity change from 0 to 2048 [ 51.214065][ T4433] netlink: 8 bytes leftover after parsing attributes in process `syz.3.339'. [ 51.247703][ T4430] loop2: p1 < > p4 [ 51.252717][ T4430] loop2: p4 size 8388608 extends beyond EOD, truncated [ 51.328748][ T4433] netlink: 12 bytes leftover after parsing attributes in process `syz.3.339'. [ 51.350593][ T3555] udevd[3555]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 51.363874][ T3290] udevd[3290]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 51.384437][ T3555] udevd[3555]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 51.405974][ T3290] udevd[3290]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 51.484286][ T4446] loop0: detected capacity change from 0 to 512 [ 51.490901][ T4445] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=4445 comm=syz.2.343 [ 51.517856][ T4446] EXT4-fs (loop0): too many log groups per flexible block group [ 51.525660][ T4446] EXT4-fs (loop0): failed to initialize mballoc (-12) [ 51.534539][ T4446] EXT4-fs (loop0): mount failed [ 51.576209][ T4455] loop2: detected capacity change from 0 to 1024 [ 51.592393][ T4457] netlink: 4 bytes leftover after parsing attributes in process `syz.4.347'. [ 51.596609][ T4455] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.634636][ T4455] EXT4-fs error (device loop2): ext4_expand_extra_isize_ea:2793: inode #14: comm syz.2.346: corrupted in-inode xattr: bad magic number in in-inode xattr [ 51.651928][ T4455] EXT4-fs error (device loop2): ext4_clear_blocks:876: inode #14: comm syz.2.346: attempt to clear invalid blocks 1886221359 len 1 [ 51.655892][ T4457] netlink: 8 bytes leftover after parsing attributes in process `syz.4.347'. [ 51.695941][ T4463] bpf_get_probe_write_proto: 8 callbacks suppressed [ 51.695962][ T4463] syz.0.349[4463] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 51.702828][ T4463] syz.0.349[4463] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 51.703901][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.714306][ T4463] syz.0.349[4463] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 51.861407][ T4467] syz.0.349[4467] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 51.902403][ T4469] loop4: detected capacity change from 0 to 512 [ 51.932985][ T4467] syz.0.349[4467] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 51.933131][ T4467] syz.0.349[4467] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 51.974954][ T4469] loop4: detected capacity change from 0 to 1024 [ 52.006455][ T4469] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.048128][ T4469] ext4 filesystem being mounted at /86/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 52.093689][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.130567][ T4466] syz.2.350[4466] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 52.130722][ T4466] syz.2.350[4466] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 52.142197][ T4466] syz.2.350[4466] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 52.200064][ T4484] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=4484 comm=syz.4.356 [ 52.290753][ T4493] syz.2.360[4493] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 52.298498][ T4493] Illegal XDP return value 734236285 on prog (id 313) dev N/A, expect packet loss! [ 52.304732][ T4491] loop3: detected capacity change from 0 to 2048 [ 52.370104][ T4491] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.382502][ T4491] ext4 filesystem being mounted at /68/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 52.402966][ T4499] loop2: detected capacity change from 0 to 1024 [ 52.407963][ T4491] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.359: bg 0: block 192: padding at end of block bitmap is not set [ 52.421525][ T4499] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.459459][ T4499] EXT4-fs error (device loop2): ext4_expand_extra_isize_ea:2793: inode #14: comm syz.2.361: corrupted in-inode xattr: bad magic number in in-inode xattr [ 52.479575][ T4499] EXT4-fs error (device loop2): ext4_clear_blocks:876: inode #14: comm syz.2.361: attempt to clear invalid blocks 1886221359 len 1 [ 52.524082][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.574767][ T4504] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=4504 comm=syz.2.362 [ 52.640625][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.840129][ T29] kauditd_printk_skb: 779 callbacks suppressed [ 52.840147][ T29] audit: type=1326 audit(1734482022.744:2198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4514 comm="syz.1.367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd9a8f5d29 code=0x7ffc0000 [ 52.878545][ T29] audit: type=1326 audit(1734482022.744:2199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4514 comm="syz.1.367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd9a8f5d29 code=0x7ffc0000 [ 52.902067][ T29] audit: type=1326 audit(1734482022.744:2200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4514 comm="syz.1.367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbd9a8f5d29 code=0x7ffc0000 [ 52.925416][ T29] audit: type=1326 audit(1734482022.744:2201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4514 comm="syz.1.367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd9a8f5d29 code=0x7ffc0000 [ 52.948761][ T29] audit: type=1326 audit(1734482022.744:2202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4514 comm="syz.1.367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd9a8f5d29 code=0x7ffc0000 [ 52.972085][ T29] audit: type=1326 audit(1734482022.744:2203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4514 comm="syz.1.367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbd9a8f5d29 code=0x7ffc0000 [ 52.995530][ T29] audit: type=1326 audit(1734482022.744:2204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4514 comm="syz.1.367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd9a8f5d29 code=0x7ffc0000 [ 53.018946][ T29] audit: type=1326 audit(1734482022.744:2205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4514 comm="syz.1.367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbd9a8f5d29 code=0x7ffc0000 [ 53.042352][ T29] audit: type=1326 audit(1734482022.744:2206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4514 comm="syz.1.367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd9a8f5d29 code=0x7ffc0000 [ 53.065746][ T29] audit: type=1326 audit(1734482022.744:2207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4514 comm="syz.1.367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbd9a8f5d29 code=0x7ffc0000 [ 53.096932][ T4518] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=4518 comm=syz.1.369 [ 53.121916][ T4522] loop3: detected capacity change from 0 to 1024 [ 53.191936][ T4522] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.207256][ T4532] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=4532 comm=syz.4.373 [ 53.242077][ T4522] EXT4-fs error (device loop3): ext4_expand_extra_isize_ea:2793: inode #14: comm syz.3.370: corrupted in-inode xattr: bad magic number in in-inode xattr [ 53.264169][ T4534] loop2: detected capacity change from 0 to 512 [ 53.275193][ T4522] EXT4-fs error (device loop3): ext4_clear_blocks:876: inode #14: comm syz.3.370: attempt to clear invalid blocks 1886221359 len 1 [ 53.291219][ T4534] EXT4-fs error (device loop2): ext4_expand_extra_isize_ea:2813: inode #11: comm syz.2.374: corrupted xattr block 95: invalid header [ 53.308302][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.318147][ T4534] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.374: bg 0: block 7: invalid block bitmap [ 53.325329][ T4541] Zero length message leads to an empty skb [ 53.334491][ T4534] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 53.351557][ T4534] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2977: inode #11: comm syz.2.374: corrupted xattr block 95: invalid header [ 53.377318][ T4534] EXT4-fs warning (device loop2): ext4_evict_inode:276: xattr delete (err -117) [ 53.386629][ T4534] EXT4-fs (loop2): 1 orphan inode deleted [ 53.411860][ T4543] loop4: detected capacity change from 0 to 164 [ 53.445432][ T4547] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=4547 comm=syz.0.382 [ 53.458986][ T4543] Unable to read rock-ridge attributes [ 53.466065][ T4549] netlink: 8 bytes leftover after parsing attributes in process `syz.2.374'. [ 53.567151][ T4557] FAULT_INJECTION: forcing a failure. [ 53.567151][ T4557] name failslab, interval 1, probability 0, space 0, times 0 [ 53.579918][ T4557] CPU: 1 UID: 0 PID: 4557 Comm: syz.0.384 Not tainted 6.13.0-rc3-syzkaller-00026-g59dbb9d81adf #0 [ 53.590585][ T4557] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 53.600664][ T4557] Call Trace: [ 53.603954][ T4557] [ 53.606899][ T4557] dump_stack_lvl+0xf2/0x150 [ 53.611527][ T4557] dump_stack+0x15/0x1a [ 53.615805][ T4557] should_fail_ex+0x223/0x230 [ 53.620532][ T4557] should_failslab+0x8f/0xb0 [ 53.625263][ T4557] kmem_cache_alloc_node_noprof+0x59/0x320 [ 53.631101][ T4557] ? __alloc_skb+0x10b/0x310 [ 53.635719][ T4557] __alloc_skb+0x10b/0x310 [ 53.640237][ T4557] netlink_alloc_large_skb+0xad/0xe0 [ 53.645613][ T4557] netlink_sendmsg+0x3b4/0x6e0 [ 53.650488][ T4557] ? __pfx_netlink_sendmsg+0x10/0x10 [ 53.655797][ T4557] __sock_sendmsg+0x140/0x180 [ 53.660588][ T4557] ____sys_sendmsg+0x312/0x410 [ 53.665486][ T4557] __sys_sendmsg+0x19d/0x230 [ 53.670298][ T4557] __x64_sys_sendmsg+0x46/0x50 [ 53.675087][ T4557] x64_sys_call+0x2734/0x2dc0 [ 53.679789][ T4557] do_syscall_64+0xc9/0x1c0 [ 53.684319][ T4557] ? clear_bhb_loop+0x55/0xb0 [ 53.689035][ T4557] ? clear_bhb_loop+0x55/0xb0 [ 53.693804][ T4557] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.699752][ T4557] RIP: 0033:0x7f27b24a5d29 [ 53.704189][ T4557] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 53.723820][ T4557] RSP: 002b:00007f27b0b17038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 53.732242][ T4557] RAX: ffffffffffffffda RBX: 00007f27b2695fa0 RCX: 00007f27b24a5d29 [ 53.740255][ T4557] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000007 [ 53.748230][ T4557] RBP: 00007f27b0b17090 R08: 0000000000000000 R09: 0000000000000000 [ 53.756264][ T4557] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 53.764294][ T4557] R13: 0000000000000000 R14: 00007f27b2695fa0 R15: 00007fff53c18e48 [ 53.772277][ T4557] [ 53.947192][ T4585] netlink: 8 bytes leftover after parsing attributes in process `syz.2.388'. [ 54.018810][ T4592] loop0: detected capacity change from 0 to 1024 [ 54.042529][ T4592] EXT4-fs error (device loop0): ext4_expand_extra_isize_ea:2793: inode #14: comm syz.0.390: corrupted in-inode xattr: bad magic number in in-inode xattr [ 54.053770][ T4600] FAULT_INJECTION: forcing a failure. [ 54.053770][ T4600] name failslab, interval 1, probability 0, space 0, times 0 [ 54.058689][ T4592] EXT4-fs error (device loop0): ext4_clear_blocks:876: inode #14: comm syz.0.390: attempt to clear invalid blocks 1886221359 len 1 [ 54.070755][ T4600] CPU: 1 UID: 0 PID: 4600 Comm: syz.2.391 Not tainted 6.13.0-rc3-syzkaller-00026-g59dbb9d81adf #0 [ 54.094872][ T4600] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 54.105054][ T4600] Call Trace: [ 54.108350][ T4600] [ 54.111295][ T4600] dump_stack_lvl+0xf2/0x150 [ 54.115928][ T4600] dump_stack+0x15/0x1a [ 54.120119][ T4600] should_fail_ex+0x223/0x230 [ 54.124909][ T4600] should_failslab+0x8f/0xb0 [ 54.129736][ T4600] kmem_cache_alloc_noprof+0x52/0x320 [ 54.135129][ T4600] ? vm_area_alloc+0xac/0x130 [ 54.139861][ T4600] vm_area_alloc+0xac/0x130 [ 54.144444][ T4600] __mmap_region+0x6b5/0x13f0 [ 54.149190][ T4600] mmap_region+0x164/0x1e0 [ 54.153686][ T4600] do_mmap+0x718/0xb60 [ 54.157821][ T4600] vm_mmap_pgoff+0x133/0x290 [ 54.162426][ T4600] ksys_mmap_pgoff+0xd0/0x330 [ 54.167124][ T4600] ? fpregs_assert_state_consistent+0x83/0xa0 [ 54.173216][ T4600] x64_sys_call+0x1940/0x2dc0 [ 54.177999][ T4600] do_syscall_64+0xc9/0x1c0 [ 54.182592][ T4600] ? clear_bhb_loop+0x55/0xb0 [ 54.187316][ T4600] ? clear_bhb_loop+0x55/0xb0 [ 54.192090][ T4600] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 54.198036][ T4600] RIP: 0033:0x7f33ce645d63 [ 54.202492][ T4600] Code: f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 41 89 ca 41 f7 c1 ff 0f 00 00 75 14 b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 25 c3 0f 1f 40 00 48 c7 c0 a8 ff ff ff 64 c7 [ 54.222565][ T4600] RSP: 002b:00007f33cccb0e18 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 54.230978][ T4600] RAX: ffffffffffffffda RBX: 0000000000000518 RCX: 00007f33ce645d63 [ 54.239046][ T4600] RDX: 0000000000000003 RSI: 0000000008400000 RDI: 0000000000000000 [ 54.247037][ T4600] RBP: 00000000200008c2 R08: 00000000ffffffff R09: 0000000000000000 [ 54.255048][ T4600] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000000000006 [ 54.263036][ T4600] R13: 00007f33cccb0ef0 R14: 00007f33cccb0eb0 R15: 0000000020000640 [ 54.271052][ T4600] [ 54.381224][ T4613] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=4613 comm=syz.1.394 [ 54.397261][ T4610] loop2: detected capacity change from 0 to 2048 [ 54.427179][ T4610] loop2: p1 < > p4 [ 54.446726][ T4610] loop2: p4 size 8388608 extends beyond EOD, truncated [ 54.492531][ T4621] loop1: detected capacity change from 0 to 512 [ 54.521174][ T4621] EXT4-fs error (device loop1): ext4_expand_extra_isize_ea:2813: inode #11: comm syz.1.395: corrupted xattr block 95: invalid header [ 54.568483][ T4621] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.395: bg 0: block 7: invalid block bitmap [ 54.570714][ T3290] udevd[3290]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 54.581239][ T3555] udevd[3555]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 54.614381][ T4621] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 54.625475][ T4621] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2977: inode #11: comm syz.1.395: corrupted xattr block 95: invalid header [ 54.641104][ T4621] EXT4-fs warning (device loop1): ext4_evict_inode:276: xattr delete (err -117) [ 54.650776][ T4621] EXT4-fs (loop1): 1 orphan inode deleted [ 54.717758][ T4641] netlink: 8 bytes leftover after parsing attributes in process `syz.1.395'. [ 54.888600][ T4648] SELinux: policydb magic number 0x77c598c does not match expected magic number 0xf97cff8c [ 54.926421][ T4648] SELinux: failed to load policy [ 54.972748][ T4660] loop4: detected capacity change from 0 to 1024 [ 55.023470][ T4660] EXT4-fs error (device loop4): ext4_expand_extra_isize_ea:2793: inode #14: comm syz.4.402: corrupted in-inode xattr: bad magic number in in-inode xattr [ 55.076948][ T4660] EXT4-fs error (device loop4): ext4_clear_blocks:876: inode #14: comm syz.4.402: attempt to clear invalid blocks 1886221359 len 1 [ 55.137178][ T4679] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=4679 comm=syz.3.405 [ 55.231906][ T4681] loop4: detected capacity change from 0 to 2048 [ 55.278492][ T4681] loop4: p1 < > p4 [ 55.287597][ T4687] loop1: detected capacity change from 0 to 512 [ 55.296288][ T4681] loop4: p4 size 8388608 extends beyond EOD, truncated [ 55.329385][ T4687] EXT4-fs (loop1): too many log groups per flexible block group [ 55.337154][ T4687] EXT4-fs (loop1): failed to initialize mballoc (-12) [ 55.345622][ T4687] EXT4-fs (loop1): mount failed [ 55.352425][ T3555] udevd[3555]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 55.356363][ T3290] udevd[3290]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 55.626103][ T4699] loop1: detected capacity change from 0 to 2048 [ 55.685256][ T4699] loop1: p1 < > p4 [ 55.691309][ T4699] loop1: p4 size 8388608 extends beyond EOD, truncated [ 55.726305][ T4704] loop2: detected capacity change from 0 to 164 [ 55.736050][ T4704] Unable to read rock-ridge attributes [ 55.803860][ T3290] udevd[3290]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 55.855562][ T4710] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=4710 comm=syz.3.418 [ 55.929163][ T4713] netlink: 36 bytes leftover after parsing attributes in process `syz.0.419'. [ 56.012437][ T4724] netlink: 4 bytes leftover after parsing attributes in process `syz.2.424'. [ 56.081895][ T4728] loop1: detected capacity change from 0 to 1024 [ 56.111146][ T4728] EXT4-fs error (device loop1): ext4_expand_extra_isize_ea:2793: inode #14: comm syz.1.426: corrupted in-inode xattr: bad magic number in in-inode xattr [ 56.129251][ T4728] EXT4-fs error (device loop1): ext4_clear_blocks:876: inode #14: comm syz.1.426: attempt to clear invalid blocks 1886221359 len 1 [ 56.134737][ T4732] loop2: detected capacity change from 0 to 512 [ 56.171068][ T4732] ext4 filesystem being mounted at /78/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 56.196728][ T4732] EXT4-fs (loop2): shut down requested (0) [ 56.243506][ T4738] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=4738 comm=syz.1.428 [ 56.333035][ T4743] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=4743 comm=syz.4.431 [ 56.336652][ T4745] netlink: 3 bytes leftover after parsing attributes in process `+}[@'. [ 56.353782][ T4745] 0ªX¹¦À: renamed from caif0 [ 56.360544][ T4745] 0ªX¹¦À: entered allmulticast mode [ 56.365910][ T4745] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 56.469184][ T4749] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=4749 comm=syz.2.434 [ 56.713757][ T4774] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4774 comm=syz.3.446 [ 56.802468][ T4781] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=4781 comm=syz.4.447 [ 57.071045][ T4790] loop1: detected capacity change from 0 to 2048 [ 57.127165][ T4790] loop1: p1 < > p4 [ 57.132841][ T4790] loop1: p4 size 8388608 extends beyond EOD, truncated [ 57.414451][ T4812] loop2: detected capacity change from 0 to 1024 [ 57.497319][ T4812] EXT4-fs error (device loop2): ext4_expand_extra_isize_ea:2793: inode #14: comm syz.2.461: corrupted in-inode xattr: bad magic number in in-inode xattr [ 57.513611][ T4812] EXT4-fs error (device loop2): ext4_clear_blocks:876: inode #14: comm syz.2.461: attempt to clear invalid blocks 1886221359 len 1 [ 57.571578][ T4817] loop3: detected capacity change from 0 to 2048 [ 57.606331][ T4822] bpf_get_probe_write_proto: 14 callbacks suppressed [ 57.606351][ T4822] syz.1.464[4822] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 57.613193][ T4822] syz.1.464[4822] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 57.627668][ T4822] syz.1.464[4822] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 57.641479][ T4817] loop3: p1 < > p4 [ 57.658677][ T4817] loop3: p4 size 8388608 extends beyond EOD, truncated [ 57.703858][ T4833] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4833 comm=syz.1.469 [ 57.740881][ T4828] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=4828 comm=syz.0.467 [ 57.770417][ T3290] udevd[3290]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 57.787658][ T3555] udevd[3555]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 57.834108][ T4841] loop3: detected capacity change from 0 to 1024 [ 57.874377][ T4841] EXT4-fs error (device loop3): ext4_expand_extra_isize_ea:2793: inode #14: comm syz.3.473: corrupted in-inode xattr: bad magic number in in-inode xattr [ 57.905006][ T4841] EXT4-fs error (device loop3): ext4_clear_blocks:876: inode #14: comm syz.3.473: attempt to clear invalid blocks 1886221359 len 1 [ 57.909964][ T4847] netlink: 'syz.4.475': attribute type 2 has an invalid length. [ 57.963083][ T29] kauditd_printk_skb: 898 callbacks suppressed [ 57.963100][ T29] audit: type=1400 audit(1734482027.864:3106): avc: denied { read } for pid=4848 comm="syz.2.476" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 57.971955][ T4850] netlink: 'syz.2.476': attribute type 10 has an invalid length. [ 58.012460][ T29] audit: type=1400 audit(1734482027.874:3107): avc: denied { create } for pid=4848 comm="syz.2.476" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 58.033143][ T29] audit: type=1400 audit(1734482027.874:3108): avc: denied { read write } for pid=4848 comm="syz.2.476" name="file0" dev="tmpfs" ino=541 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 58.049702][ T4854] syz.3.478: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 58.055918][ T29] audit: type=1400 audit(1734482027.874:3109): avc: denied { open } for pid=4848 comm="syz.2.476" path="/94/file0" dev="tmpfs" ino=541 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 58.068332][ T4854] ,cpuset= [ 58.090679][ T29] audit: type=1400 audit(1734482027.874:3110): avc: denied { create } for pid=4848 comm="syz.2.476" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 58.097401][ T29] audit: type=1400 audit(1734482027.954:3111): avc: denied { create } for pid=4853 comm="syz.3.478" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 58.113587][ T4854] / [ 58.132720][ T29] audit: type=1400 audit(1734482027.954:3112): avc: denied { setopt } for pid=4853 comm="syz.3.478" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 58.154814][ T4854] ,mems_allowed=0 [ 58.158504][ T4854] CPU: 0 UID: 0 PID: 4854 Comm: syz.3.478 Not tainted 6.13.0-rc3-syzkaller-00026-g59dbb9d81adf #0 [ 58.169133][ T4854] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 58.179356][ T4854] Call Trace: [ 58.182643][ T4854] [ 58.185584][ T4854] dump_stack_lvl+0xf2/0x150 [ 58.190209][ T4854] dump_stack+0x15/0x1a [ 58.194400][ T4854] warn_alloc+0x145/0x1b0 [ 58.198767][ T4854] ? __vmalloc_node_range_noprof+0x88/0xe80 [ 58.204778][ T4854] ? common_lsm_audit+0x920/0x1010 [ 58.209913][ T4854] __vmalloc_node_range_noprof+0xaa/0xe80 [ 58.215719][ T4854] ? avc_denied+0xf1/0x110 [ 58.220172][ T4854] ? slow_avc_audit+0xf9/0x140 [ 58.225027][ T4854] ? should_fail_ex+0x31/0x230 [ 58.229863][ T4854] ? xskq_create+0x36/0xd0 [ 58.234293][ T4854] ? should_failslab+0x8f/0xb0 [ 58.239082][ T4854] vmalloc_user_noprof+0x59/0x70 [ 58.244122][ T4854] ? xskq_create+0x79/0xd0 [ 58.248557][ T4854] xskq_create+0x79/0xd0 [ 58.252815][ T4854] xsk_init_queue+0x82/0xd0 [ 58.257338][ T4854] xsk_setsockopt+0x409/0x520 [ 58.262093][ T4854] ? __pfx_xsk_setsockopt+0x10/0x10 [ 58.267313][ T4854] __sys_setsockopt+0x187/0x200 [ 58.272230][ T4854] __x64_sys_setsockopt+0x66/0x80 [ 58.277418][ T4854] x64_sys_call+0x282e/0x2dc0 [ 58.282106][ T4854] do_syscall_64+0xc9/0x1c0 [ 58.286649][ T4854] ? clear_bhb_loop+0x55/0xb0 [ 58.291339][ T4854] ? clear_bhb_loop+0x55/0xb0 [ 58.296142][ T4854] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 58.302093][ T4854] RIP: 0033:0x7faa6fa55d29 [ 58.306550][ T4854] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 58.326172][ T4854] RSP: 002b:00007faa6e0c7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 58.334594][ T4854] RAX: ffffffffffffffda RBX: 00007faa6fc45fa0 RCX: 00007faa6fa55d29 [ 58.342571][ T4854] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000006 [ 58.350683][ T4854] RBP: 00007faa6fad1a20 R08: 0000000000000020 R09: 0000000000000000 [ 58.358718][ T4854] R10: 00000000200000c0 R11: 0000000000000246 R12: 0000000000000000 [ 58.366760][ T4854] R13: 0000000000000000 R14: 00007faa6fc45fa0 R15: 00007ffcfae07928 [ 58.374740][ T4854] [ 58.378001][ T4854] Mem-Info: [ 58.381130][ T4854] active_anon:5225 inactive_anon:1 isolated_anon:0 [ 58.381130][ T4854] active_file:5115 inactive_file:1991 isolated_file:0 [ 58.381130][ T4854] unevictable:0 dirty:716 writeback:0 [ 58.381130][ T4854] slab_reclaimable:2778 slab_unreclaimable:14704 [ 58.381130][ T4854] mapped:29695 shmem:265 pagetables:862 [ 58.381130][ T4854] sec_pagetables:0 bounce:0 [ 58.381130][ T4854] kernel_misc_reclaimable:0 [ 58.381130][ T4854] free:1909193 free_pcp:4396 free_cma:0 [ 58.426018][ T4854] Node 0 active_anon:18812kB inactive_anon:4kB active_file:20460kB inactive_file:7964kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:118780kB dirty:2864kB writeback:0kB shmem:1060kB writeback_tmp:0kB kernel_stack:2912kB pagetables:3448kB sec_pagetables:0kB all_unreclaimable? no [ 58.453877][ T4854] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 58.480802][ T4854] lowmem_reserve[]: 0 2866 7844 0 [ 58.485945][ T4854] Node 0 DMA32 free:2950280kB boost:0kB min:4136kB low:7068kB high:10000kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2953912kB mlocked:0kB bounce:0kB free_pcp:3632kB local_pcp:100kB free_cma:0kB [ 58.486173][ T4856] loop3: detected capacity change from 0 to 1024 [ 58.514541][ T4854] lowmem_reserve[]: 0 0 4978 0 [ 58.526270][ T4854] Node 0 Normal free:4671132kB boost:0kB min:7184kB low:12280kB high:17376kB reserved_highatomic:0KB active_anon:18116kB inactive_anon:4kB active_file:20460kB inactive_file:7964kB unevictable:0kB writepending:2864kB present:5242880kB managed:5098208kB mlocked:0kB bounce:0kB free_pcp:18392kB local_pcp:2928kB free_cma:0kB [ 58.556489][ T4854] lowmem_reserve[]: 0 0 0 0 [ 58.556639][ T4850] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.561041][ T4854] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB [ 58.568325][ T4850] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.568339][ T4854] 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 58.588510][ T4850] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.590514][ T4854] Node 0 [ 58.597394][ T4850] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.597550][ T4850] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.600335][ T4854] DMA32: 2*4kB [ 58.607545][ T4850] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.614548][ T4854] (M) 2*8kB (M) 3*16kB (M) 4*32kB (M) 3*64kB (M) 2*128kB (M) 2*256kB (M) 2*512kB (M) 3*1024kB (M) 2*2048kB (M) 718*4096kB (M) = 2950280kB [ 58.639824][ T4854] Node 0 Normal: 1*4kB (E) 52*8kB (UME) 79*16kB (UE) 80*32kB (UE) 126*64kB (UME) 115*128kB (UME) 83*256kB (UME) 57*512kB (UM) 38*1024kB (UM) 26*2048kB (UM) 1099*4096kB (UM) = 4671124kB [ 58.641497][ T4850] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 58.658336][ T4854] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 58.658360][ T4854] 7506 total pagecache pages [ 58.680933][ T4854] 1 pages in swap cache [ 58.685187][ T4854] Free swap = 112780kB [ 58.689355][ T4854] Total swap = 124996kB [ 58.693521][ T4854] 2097051 pages RAM [ 58.697394][ T4854] 0 pages HighMem/MovableOnly [ 58.699878][ T4843] syz.0.474[4843] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 58.702065][ T4854] 80181 pages reserved [ 58.710499][ T4860] loop1: detected capacity change from 0 to 1024 [ 58.725229][ T4843] syz.0.474[4843] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 58.725359][ T4843] syz.0.474[4843] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 58.740976][ T29] audit: type=1400 audit(1734482028.644:3113): avc: denied { unlink } for pid=3304 comm="syz-executor" name="file0" dev="tmpfs" ino=541 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 58.786251][ T29] audit: type=1326 audit(1734482028.654:3114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4862 comm="syz.2.480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33ce645d29 code=0x7ffc0000 [ 58.792041][ T4854] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, [ 58.809641][ T29] audit: type=1326 audit(1734482028.654:3115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4862 comm="syz.2.480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33ce645d29 code=0x7ffc0000 [ 58.841331][ T4854] block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 58.865017][ T4854] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 4 with error 28 [ 58.877310][ T4854] EXT4-fs (loop3): This should not happen!! Data will be lost [ 58.877310][ T4854] [ 58.886996][ T4854] EXT4-fs (loop3): Total free blocks count 0 [ 58.893180][ T4854] EXT4-fs (loop3): Free/Dirty block details [ 58.899171][ T4854] EXT4-fs (loop3): free_blocks=68451041280 [ 58.905007][ T4854] EXT4-fs (loop3): dirty_blocks=64 [ 58.910209][ T4854] EXT4-fs (loop3): Block reservation details [ 58.916324][ T4854] EXT4-fs (loop3): i_reserved_data_blocks=4 [ 58.919184][ T4863] netlink: 4 bytes leftover after parsing attributes in process `syz.2.480'. [ 58.925912][ T4854] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 58.943357][ T4854] EXT4-fs (loop3): This should not happen!! Data will be lost [ 58.943357][ T4854] [ 58.970328][ T4854] syz.3.478 (4854) used greatest stack depth: 9560 bytes left [ 58.977503][ T4860] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 59.006426][ T4860] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 4 with error 28 [ 59.018701][ T4860] EXT4-fs (loop1): This should not happen!! Data will be lost [ 59.018701][ T4860] [ 59.028508][ T4860] EXT4-fs (loop1): Total free blocks count 0 [ 59.034508][ T4860] EXT4-fs (loop1): Free/Dirty block details [ 59.040562][ T4860] EXT4-fs (loop1): free_blocks=68451041280 [ 59.046489][ T4860] EXT4-fs (loop1): dirty_blocks=64 [ 59.051609][ T4860] EXT4-fs (loop1): Block reservation details [ 59.057693][ T4860] EXT4-fs (loop1): i_reserved_data_blocks=4 [ 59.075306][ T4871] FAULT_INJECTION: forcing a failure. [ 59.075306][ T4871] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 59.088443][ T4871] CPU: 1 UID: 0 PID: 4871 Comm: syz.1.479 Not tainted 6.13.0-rc3-syzkaller-00026-g59dbb9d81adf #0 [ 59.099120][ T4871] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 59.102947][ T4877] loop3: detected capacity change from 0 to 512 [ 59.109177][ T4871] Call Trace: [ 59.109188][ T4871] [ 59.109197][ T4871] dump_stack_lvl+0xf2/0x150 [ 59.126341][ T4871] dump_stack+0x15/0x1a [ 59.130537][ T4871] should_fail_ex+0x223/0x230 [ 59.135241][ T4871] should_fail+0xb/0x10 [ 59.139476][ T4871] should_fail_usercopy+0x1a/0x20 [ 59.144528][ T4871] _copy_to_user+0x20/0xa0 [ 59.148972][ T4871] simple_read_from_buffer+0xa0/0x110 [ 59.154376][ T4871] proc_fail_nth_read+0xf9/0x140 [ 59.159433][ T4871] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 59.165000][ T4871] vfs_read+0x1a2/0x700 [ 59.165410][ T4860] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 59.169167][ T4871] ? __rcu_read_unlock+0x4e/0x70 [ 59.181388][ T4860] EXT4-fs (loop1): This should not happen!! Data will be lost [ 59.181388][ T4860] [ 59.186232][ T4871] ? __fget_files+0x17c/0x1c0 [ 59.200595][ T4871] ksys_read+0xe8/0x1b0 [ 59.204842][ T4871] __x64_sys_read+0x42/0x50 [ 59.209357][ T4871] x64_sys_call+0x2874/0x2dc0 [ 59.214129][ T4871] do_syscall_64+0xc9/0x1c0 [ 59.218648][ T4871] ? clear_bhb_loop+0x55/0xb0 [ 59.223411][ T4871] ? clear_bhb_loop+0x55/0xb0 [ 59.228127][ T4871] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 59.234045][ T4871] RIP: 0033:0x7fbd9a8f473c [ 59.238494][ T4871] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 59.258119][ T4871] RSP: 002b:00007fbd98f46030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 59.266558][ T4871] RAX: ffffffffffffffda RBX: 00007fbd9aae6080 RCX: 00007fbd9a8f473c [ 59.274530][ T4871] RDX: 000000000000000f RSI: 00007fbd98f460a0 RDI: 000000000000000c [ 59.282503][ T4871] RBP: 00007fbd98f46090 R08: 0000000000000000 R09: 0000000000000000 [ 59.290535][ T4871] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 59.298585][ T4871] R13: 0000000000000000 R14: 00007fbd9aae6080 R15: 00007ffd13de3988 [ 59.306652][ T4871] [ 59.348026][ T4877] ext4 filesystem being mounted at /93/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 59.362829][ T4877] EXT4-fs (loop3): shut down requested (0) [ 59.431566][ T4885] loop2: detected capacity change from 0 to 512 [ 59.455702][ T4885] EXT4-fs (loop2): too many log groups per flexible block group [ 59.463410][ T4885] EXT4-fs (loop2): failed to initialize mballoc (-12) [ 59.496432][ T4885] EXT4-fs (loop2): mount failed [ 59.545753][ T4891] SELinux: policydb magic number 0x77c598c does not match expected magic number 0xf97cff8c [ 59.557887][ T4891] SELinux: failed to load policy [ 59.591048][ T4899] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=4899 comm=syz.2.492 [ 59.615815][ T4903] veth1_macvtap: left allmulticast mode [ 59.621601][ T4903] veth1_macvtap: left promiscuous mode [ 59.627211][ T4903] macsec0: left promiscuous mode [ 59.632225][ T4903] macsec0: left allmulticast mode [ 59.665194][ T4903] veth1_macvtap: entered promiscuous mode [ 59.671433][ T4903] macsec0: entered promiscuous mode [ 59.676966][ T4903] macsec0: entered allmulticast mode [ 59.682275][ T4903] veth1_macvtap: entered allmulticast mode [ 59.837173][ T4919] SELinux: policydb magic number 0x77c598c does not match expected magic number 0xf97cff8c [ 59.870157][ T4919] SELinux: failed to load policy [ 60.050691][ T4936] netlink: 8 bytes leftover after parsing attributes in process `syz.2.508'. [ 60.253571][ T4942] loop2: detected capacity change from 0 to 2048 [ 60.264023][ T4943] selinux_netlink_send: 2 callbacks suppressed [ 60.264043][ T4943] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=4943 comm=syz.4.511 [ 60.325656][ T4942] loop2: p1 < > p4 [ 60.331320][ T4942] loop2: p4 size 8388608 extends beyond EOD, truncated [ 60.364416][ T4945] loop4: detected capacity change from 0 to 512 [ 60.394746][ T4945] EXT4-fs error (device loop4): ext4_expand_extra_isize_ea:2813: inode #11: comm syz.4.512: corrupted xattr block 95: invalid header [ 60.411873][ T4945] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.512: bg 0: block 7: invalid block bitmap [ 60.427342][ T4945] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 60.437677][ T4945] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2977: inode #11: comm syz.4.512: corrupted xattr block 95: invalid header [ 60.453798][ T4945] EXT4-fs warning (device loop4): ext4_evict_inode:276: xattr delete (err -117) [ 60.462940][ T4945] EXT4-fs (loop4): 1 orphan inode deleted [ 60.474842][ T4953] loop1: detected capacity change from 0 to 512 [ 60.486610][ T4953] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 not in group (block 18)! [ 60.496951][ T4953] EXT4-fs (loop1): group descriptors corrupted! [ 60.532279][ T4953] loop1: detected capacity change from 0 to 1024 [ 60.545585][ T4958] netlink: 8 bytes leftover after parsing attributes in process `syz.4.512'. [ 60.556155][ T4956] SELinux: policydb magic number 0x77c598c does not match expected magic number 0xf97cff8c [ 60.574545][ T4956] SELinux: failed to load policy [ 60.575319][ T4958] batadv0: entered promiscuous mode [ 60.585869][ T4958] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 60.597907][ T4953] ext4 filesystem being mounted at /96/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 60.608549][ T4958] batadv0: left promiscuous mode [ 60.623911][ T4963] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=4963 comm=syz.3.517 [ 60.670621][ T4965] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=4965 comm=syz.3.518 [ 60.679991][ T4967] loop1: detected capacity change from 0 to 512 [ 60.698031][ T4967] EXT4-fs error (device loop1): ext4_expand_extra_isize_ea:2813: inode #11: comm syz.1.519: corrupted xattr block 95: invalid header [ 60.712675][ T4967] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.519: bg 0: block 7: invalid block bitmap [ 60.725499][ T4967] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 60.734592][ T4967] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2977: inode #11: comm syz.1.519: corrupted xattr block 95: invalid header [ 60.748479][ T4967] EXT4-fs warning (device loop1): ext4_evict_inode:276: xattr delete (err -117) [ 60.757800][ T4967] EXT4-fs (loop1): 1 orphan inode deleted [ 60.793993][ T4974] loop4: detected capacity change from 0 to 512 [ 60.811125][ T4974] ext4 filesystem being mounted at /119/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 60.840971][ T4974] EXT4-fs (loop4): shut down requested (0) [ 60.851682][ T4978] netlink: 8 bytes leftover after parsing attributes in process `syz.1.519'. [ 61.003436][ T4984] netlink: 8 bytes leftover after parsing attributes in process `syz.1.525'. [ 61.021519][ T4983] loop0: detected capacity change from 0 to 2048 [ 61.065582][ T4983] loop0: p1 < > p4 [ 61.070021][ T4983] loop0: p4 size 8388608 extends beyond EOD, truncated [ 61.135798][ T4990] syz.0.527[4990] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 61.136746][ T4990] syz.0.527[4990] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 61.150735][ T4990] syz.0.527[4990] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 61.195536][ T4993] loop1: detected capacity change from 0 to 512 [ 61.225222][ T4993] EXT4-fs error (device loop1): ext4_expand_extra_isize_ea:2813: inode #11: comm syz.1.528: corrupted xattr block 95: invalid header [ 61.249956][ T4993] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.528: bg 0: block 7: invalid block bitmap [ 61.266581][ T4993] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 61.284178][ T4997] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=4997 comm=syz.0.529 [ 61.298078][ T4993] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2977: inode #11: comm syz.1.528: corrupted xattr block 95: invalid header [ 61.339827][ T5001] netlink: 4 bytes leftover after parsing attributes in process `syz.0.531'. [ 61.390211][ T4993] EXT4-fs warning (device loop1): ext4_evict_inode:276: xattr delete (err -117) [ 61.417542][ T4993] EXT4-fs (loop1): 1 orphan inode deleted [ 61.503195][ T5005] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=5005 comm=syz.2.533 [ 61.524267][ T5008] netlink: 8 bytes leftover after parsing attributes in process `syz.1.528'. [ 61.723805][ T5012] SELinux: policydb magic number 0x77c598c does not match expected magic number 0xf97cff8c [ 61.757216][ T5012] SELinux: failed to load policy [ 61.768627][ T5016] loop1: detected capacity change from 0 to 1024 [ 61.806322][ T5016] EXT4-fs error (device loop1): ext4_expand_extra_isize_ea:2793: inode #14: comm syz.1.537: corrupted in-inode xattr: bad magic number in in-inode xattr [ 61.841471][ T5016] EXT4-fs error (device loop1): ext4_clear_blocks:876: inode #14: comm syz.1.537: attempt to clear invalid blocks 1886221359 len 1 [ 61.849000][ T5020] loop2: detected capacity change from 0 to 1024 [ 61.885003][ T5022] loop3: detected capacity change from 0 to 2048 [ 61.912961][ T5020] EXT4-fs error (device loop2): ext4_expand_extra_isize_ea:2793: inode #14: comm syz.2.539: corrupted in-inode xattr: bad magic number in in-inode xattr [ 61.931341][ T5025] syz.1.540[5025] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 61.933822][ T5020] EXT4-fs error (device loop2): ext4_clear_blocks:876: inode #14: comm syz.2.539: attempt to clear invalid blocks 1886221359 len 1 [ 61.959586][ T5022] loop3: p1 < > p4 [ 61.963887][ T5022] loop3: p4 size 8388608 extends beyond EOD, truncated [ 62.086960][ T5035] loop1: detected capacity change from 0 to 512 [ 62.106526][ T5035] EXT4-fs (loop1): too many log groups per flexible block group [ 62.114230][ T5035] EXT4-fs (loop1): failed to initialize mballoc (-12) [ 62.131793][ T5035] EXT4-fs (loop1): mount failed [ 62.134768][ T5041] netlink: 8 bytes leftover after parsing attributes in process `syz.4.546'. [ 62.656502][ T5060] loop1: detected capacity change from 0 to 512 [ 62.680978][ T5058] loop0: detected capacity change from 0 to 2048 [ 62.689142][ T5060] ext4 filesystem being mounted at /106/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 62.715519][ T5058] loop0: p1 < > p4 [ 62.720083][ T5058] loop0: p4 size 8388608 extends beyond EOD, truncated [ 62.740497][ T5060] EXT4-fs (loop1): shut down requested (0) [ 62.746547][ T2999] loop0: p1 < > p4 [ 62.751025][ T2999] loop0: p4 size 8388608 extends beyond EOD, truncated [ 62.794174][ T2999] loop0: p1 < > p4 [ 62.811781][ T2999] loop0: p4 size 8388608 extends beyond EOD, truncated [ 62.824865][ T5068] netlink: 8 bytes leftover after parsing attributes in process `syz.1.557'. [ 62.857264][ T5070] loop0: detected capacity change from 0 to 512 [ 62.879139][ T3290] udevd[3290]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 62.890469][ T3531] udevd[3531]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 62.890604][ T5070] ext4 filesystem being mounted at /107/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 62.951311][ T3290] udevd[3290]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 62.962653][ T3555] udevd[3555]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 62.978059][ T5070] EXT4-fs (loop0): shut down requested (0) [ 63.006605][ T29] kauditd_printk_skb: 553 callbacks suppressed [ 63.006684][ T29] audit: type=1326 audit(1734482032.914:3669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5074 comm="syz.1.558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd9a8f5d29 code=0x7ffc0000 [ 63.036379][ T29] audit: type=1326 audit(1734482032.914:3670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5074 comm="syz.1.558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd9a8f5d29 code=0x7ffc0000 [ 63.103736][ T29] audit: type=1326 audit(1734482032.944:3671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5074 comm="syz.1.558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbd9a8f5d29 code=0x7ffc0000 [ 63.127134][ T29] audit: type=1326 audit(1734482032.944:3672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5074 comm="syz.1.558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd9a8f5d29 code=0x7ffc0000 [ 63.150954][ T29] audit: type=1326 audit(1734482032.944:3673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5074 comm="syz.1.558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbd9a8f5d29 code=0x7ffc0000 [ 63.174382][ T29] audit: type=1326 audit(1734482032.944:3674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5074 comm="syz.1.558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd9a8f5d29 code=0x7ffc0000 [ 63.197821][ T29] audit: type=1326 audit(1734482032.944:3675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5074 comm="syz.1.558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbd9a8f5d29 code=0x7ffc0000 [ 63.221211][ T29] audit: type=1326 audit(1734482032.944:3676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5074 comm="syz.1.558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd9a8f5d29 code=0x7ffc0000 [ 63.244560][ T29] audit: type=1326 audit(1734482032.944:3677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5074 comm="syz.1.558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbd9a8f5d29 code=0x7ffc0000 [ 63.267902][ T29] audit: type=1326 audit(1734482032.944:3678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5074 comm="syz.1.558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd9a8f5d29 code=0x7ffc0000 [ 63.330314][ T5088] loop0: detected capacity change from 0 to 512 [ 63.350172][ T5092] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=5092 comm=syz.2.563 [ 63.363042][ T5088] ================================================================== [ 63.371148][ T5088] BUG: KCSAN: data-race in __filemap_add_folio / filemap_write_and_wait_range [ 63.380012][ T5088] [ 63.382351][ T5088] read-write to 0xffff888100630570 of 8 bytes by task 3290 on cpu 1: [ 63.390416][ T5088] __filemap_add_folio+0x430/0x6f0 [ 63.395539][ T5088] filemap_add_folio+0x9c/0x1b0 [ 63.400394][ T5088] page_cache_ra_unbounded+0x177/0x310 [ 63.405861][ T5088] page_cache_sync_ra+0x252/0x670 [ 63.410893][ T5088] filemap_get_pages+0x2c1/0x10e0 [ 63.415926][ T5088] filemap_read+0x221/0x6a0 [ 63.420434][ T5088] blkdev_read_iter+0x20e/0x2c0 [ 63.425296][ T5088] vfs_read+0x5dc/0x700 [ 63.429467][ T5088] ksys_read+0xe8/0x1b0 [ 63.433636][ T5088] __x64_sys_read+0x42/0x50 [ 63.438149][ T5088] x64_sys_call+0x2874/0x2dc0 [ 63.442831][ T5088] do_syscall_64+0xc9/0x1c0 [ 63.447336][ T5088] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 63.453258][ T5088] [ 63.455580][ T5088] read to 0xffff888100630570 of 8 bytes by task 5088 on cpu 0: [ 63.463122][ T5088] filemap_write_and_wait_range+0x59/0x360 [ 63.468936][ T5088] set_blocksize+0x1d0/0x270 [ 63.473538][ T5088] sb_min_blocksize+0x63/0xe0 [ 63.478221][ T5088] ext4_fill_super+0x38b/0x3a10 [ 63.483090][ T5088] get_tree_bdev_flags+0x29f/0x310 [ 63.488215][ T5088] get_tree_bdev+0x1f/0x30 [ 63.492644][ T5088] ext4_get_tree+0x1c/0x30 [ 63.497075][ T5088] vfs_get_tree+0x56/0x1e0 [ 63.501519][ T5088] do_new_mount+0x227/0x690 [ 63.506037][ T5088] path_mount+0x49b/0xb30 [ 63.510393][ T5088] __se_sys_mount+0x27c/0x2d0 [ 63.515090][ T5088] __x64_sys_mount+0x67/0x80 [ 63.519693][ T5088] x64_sys_call+0x2c84/0x2dc0 [ 63.524377][ T5088] do_syscall_64+0xc9/0x1c0 [ 63.528886][ T5088] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 63.534803][ T5088] [ 63.537124][ T5088] value changed: 0x0000000000000005 -> 0x0000000000000006 [ 63.544228][ T5088] [ 63.546559][ T5088] Reported by Kernel Concurrency Sanitizer on: [ 63.552703][ T5088] CPU: 0 UID: 0 PID: 5088 Comm: syz.0.560 Not tainted 6.13.0-rc3-syzkaller-00026-g59dbb9d81adf #0 [ 63.563299][ T5088] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 63.573456][ T5088] ================================================================== [ 63.606115][ T5088] ext4 filesystem being mounted at /108/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 63.622319][ T5088] EXT4-fs (loop0): shut down requested (0)