last executing test programs: 1.474189162s ago: executing program 0 (id=524): symlinkat(&(0x7f00000002c0)='./file1\x00', 0xffffffffffffffff, &(0x7f0000000000)='./file1\x00') r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0a000000020000000900000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000004740), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r2, &(0x7f0000004900)={0x0, 0x0, &(0x7f00000048c0)={&(0x7f0000004780)={0x3c, r3, 0x40d, 0x70bd28, 0x25dfdbff, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000800}, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000400)='kfree\x00', r1}, 0x18) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x14000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xc, 0x800}, 0x1c0, 0x4000000000000, 0x3, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x1, 0x0, 0x80000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000b80)={[{@nombcache}, {@abort}, {@dioread_lock}, {@norecovery}, {@discard}, {@lazytime}, {@noload}, {@usrquota}, {@noauto_da_alloc}]}, 0xfe, 0x558, &(0x7f0000000c00)="$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") r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={0x0, r5}, 0x18) socket(0x10, 0x80002, 0x0) r6 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000900)=@newtaction={0x48, 0x31, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4}}}]}]}, 0x48}}, 0x0) 1.439680585s ago: executing program 1 (id=525): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$GIO_SCRNMAP(r1, 0x5608, 0x0) 1.425456046s ago: executing program 0 (id=526): syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000240)='./file0\x00', 0x1018000, &(0x7f00000003c0)=ANY=[@ANYRES8=0x0, @ANYRES16, @ANYRES16=0x0, @ANYRESOCT, @ANYRES32, @ANYRESDEC], 0x1, 0x2ee, &(0x7f00000006c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) fdatasync(r0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mlock2(&(0x7f0000004000/0x4000)=nil, 0x40ef, 0x0) 1.318722433s ago: executing program 1 (id=527): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f0000000540)=ANY=[@ANYBLOB], 0x210) close_range(r0, 0xffffffffffffffff, 0x0) 1.300882275s ago: executing program 1 (id=528): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000500)="a4", 0x34000, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x1000000, @loopback, 0xffffffff}, 0x1c) 1.249627649s ago: executing program 4 (id=529): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000540)=ANY=[@ANYBLOB], 0x210) 1.203736872s ago: executing program 1 (id=530): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r1}, 0x18) r2 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r2, &(0x7f0000000040), 0x10) listen(r2, 0x0) r3 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r3, &(0x7f0000000080), 0x10) sendmmsg(r3, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)="2e00000010008108040f80ecdb4cb92e0a480e000f000000e8bd6efb250314000e000300240248ff050005001200", 0x2e}], 0x1}, 0x0) 1.203409122s ago: executing program 4 (id=531): openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r0 = perf_event_open(&(0x7f0000000200)={0x4, 0x80, 0x3d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x6200c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100000, 0x0, 0x0, 0x6, 0x3, 0x0, 0x4}, 0x0, 0x2, 0xffffffffffffffff, 0x8) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000680)=@newtaction={0xac, 0x30, 0x216822a75a8bdd29, 0xffe4, 0x0, {}, [{0x98, 0x1, [@m_connmark={0x50, 0x2, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0xd, 0x5, 0x0, 0x3}, 0x8}}]}, {0x4}, {0xc}, {0xc}}}, @m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xac}}, 0x0) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x20a241, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000001340)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r3 = syz_pidfd_open(0x0, 0x0) process_madvise(r3, &(0x7f0000000040)=[{0x0}, {&(0x7f0000001240)="e3", 0x1}], 0x2, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200000800000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$netlink(0x10, 0x3, 0x7) sendmsg$nl_xfrm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000007c0)=ANY=[@ANYBLOB="680000001400010000000000fddbdf25fe800000000000000000000000000016ff0100000000000000000000000000014e200000000000010200000000000000", @ANYRES32=0x0, @ANYRES32=r0, @ANYRESOCT, @ANYRES32=0x0, @ANYBLOB="010000000c0008000800080000ff0000"], 0x68}}, 0x20002000) getsockopt$inet_sctp6_SCTP_STATUS(r2, 0x84, 0xe, &(0x7f0000000300)={0x0, 0x10000, 0x7, 0x8000, 0x2, 0x3, 0x9, 0x40, {0x0, @in={{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x101, 0x1ff, 0x3, 0xab56, 0x1}}, &(0x7f00000000c0)=0xb0) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000001300)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) syz_clone3(&(0x7f0000001100)={0x400, &(0x7f0000000540), &(0x7f0000000580), &(0x7f00000005c0), {0x20}, &(0x7f0000000600)=""/103, 0x67, &(0x7f0000001040)=""/82, &(0x7f00000010c0)=[0x0], 0x1, {r2}}, 0x58) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000001200)='ns/user\x00') ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, &(0x7f0000001240)={{0x1, 0x1, 0x18, r2, {0xfffffffffffffffd}}, './file0\x00'}) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f0000001280)) r5 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000040), &(0x7f00000000c0)=0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) creat(&(0x7f0000000000)='./bus\x00', 0x8) mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x700, &(0x7f0000000300)='trans=rdma,') r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000b8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r7}, 0x10) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021940000000c0a01030000000000000000070000000900020073797a31000000000900010073797a30000000006800038064000080080003400000000258000b80200001800a0001"], 0x118}}, 0x0) 1.010591186s ago: executing program 1 (id=533): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) mkdir(&(0x7f0000000580)='./file0\x00', 0x101) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f00000002c0)='./file0\x00', 0x500082c) setxattr$incfs_metadata(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x0, 0x0, 0x0) removexattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='user.incfs.metadata\x00') r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_ADDRFORM(r3, 0x29, 0x1, &(0x7f00000000c0), 0x4) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x2c8, 0x270, 0x2b8, 0xb0000010, 0x160, 0x5c8fca04, 0x270, 0x3a8, 0x3a8, 0x270, 0x3a8, 0x3, 0x0, {[{{@ipv6={@private1, @local, [], [], 'team_slave_0\x00', 'veth0_to_team\x00'}, 0x0, 0xa8, 0x110, 0x700}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "78ed9300032ce416ae19db66c8fb2158fbc487a284b992e42fef198c9f58"}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x328) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x41, &(0x7f0000000080)=0xeebd, 0x4) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000800000000005e002200850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000000, @void, @value}, 0x94) r5 = socket$kcm(0x29, 0x2, 0x0) sendmmsg$inet(r5, &(0x7f0000004e80)=[{{0x0, 0x0, &(0x7f0000000080)}}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000008c0)="9b", 0x1}], 0x1}}], 0x2, 0x24048085) close(r5) syz_emit_ethernet(0x46, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd603000bb00102b00fc020000000000000000000000000000fe8000000000000000000000a3f382db000000aa000002000000000000000000a478367f1ca85aa5e876df75ec3fd561b4593b8509f4c4bf1261f4e6a7512912f09c1f94b148f7ea0aae9ef160158a034429546e85b87e7e7c56c99ff2f1c90f63e17dea670d742ca6f741022c6b8fced59f2b49a353f176076a2a86"], 0x0) r6 = fsmount(0xffffffffffffffff, 0x0, 0x0) unshare(0x2020000) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r8}, 0x10) r9 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) syz_clone3(&(0x7f0000000200)={0x60802000, 0x0, &(0x7f0000000040), 0x0, {0x16}, 0x0, 0x0, 0x0, 0x0, 0x0, {r6}}, 0x58) 934.769212ms ago: executing program 3 (id=534): r0 = signalfd(0xffffffffffffffff, &(0x7f0000000c80)={[0xfffffffffffffffe]}, 0x8) r1 = syz_io_uring_setup(0x4169, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000480), &(0x7f0000000040)=0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_ext={0x1c, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000700000000000000006655ce669500"/32], 0x0, 0x10, 0x0, 0x0, 0x41100, 0x58, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x267bd, r0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) syz_io_uring_setup(0xa94, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x3, 0x0, 0x0, r0}, &(0x7f0000000340)=0x0, &(0x7f00000005c0)) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) io_uring_enter(r1, 0x48e9, 0x0, 0x0, 0x0, 0x0) rseq(&(0x7f0000000300)={0x300, 0x0, 0x0, 0x5}, 0x20, 0x0, 0x0) 864.991326ms ago: executing program 3 (id=535): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e000000"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) 802.492731ms ago: executing program 3 (id=536): symlinkat(&(0x7f00000002c0)='./file1\x00', 0xffffffffffffffff, &(0x7f0000000000)='./file1\x00') r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0a000000020000000900000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000004740), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r2, &(0x7f0000004900)={0x0, 0x0, &(0x7f00000048c0)={&(0x7f0000004780)={0x3c, r3, 0x40d, 0x70bd28, 0x25dfdbff, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000800}, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000400)='kfree\x00', r1}, 0x18) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x14000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xc, 0x800}, 0x1c0, 0x4000000000000, 0x3, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x1, 0x0, 0x80000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000b80)={[{@nombcache}, {@abort}, {@dioread_lock}, {@norecovery}, {@discard}, {@lazytime}, {@noload}, {@usrquota}, {@noauto_da_alloc}]}, 0xfe, 0x558, &(0x7f0000000c00)="$eJzs3U1rG0cfAPD/ynbenOeJAyG0PRRDDk1JI8d2X1LoIT2WNjTQ3lNhb0ywHAVLDrEbaHJoLr2UUCilgdIP0HuPoV+gnyLQBkIJpj30orLyylFsyZZtpVaq3w82mdldaXY0+x/PaCQUwMAaz/4pRLwcEV8nEcdajg1HfnB87bzVJ7dmsi2Jev2TP5JI8n3N85P8/9E881JE/PJlxJnC5nKryyvzpXI5XczzE7WF6xPV5ZWzVxdKc+lcem1qevr8W9NT777zds/q+vqlv777+MEH5786tfrtT4+O30viQhzNj7XWYw9ut2bGYzx/TUbiwoYTJ3tQWD9J9vsC2JWhPM5HIusDjsVQHvXAf98XEVEHBlQi/mFANccBzbl9j+bBL4zH769NgDbXf3jtvZE41JgbHVlNnpkZZfPdsR6Un5Xx8+/372Vb9O59CIBt3b4TEeeGhzf3f0ne/+3euS7O2VjGDvu/+g4vCWjxIBv/vNFu/FNYH/9Em/HPaJvY3Y3t47/wqAfFdJSN/95rO/5dX7QaG8pz/2uM+UaSK1fLada3/T8iTsfIwSy/1XrO+dWHHfup1vFftmXlN8eC+XU8Gj747GNmS7XSXurc6vGdiFfajn+T9fZP2rR/9npc6rKMk+n9Vzsd277+z1f9x4jX2rb/0xWtZOv1yYnG/TDRvCs2+/PuyV87lb/f9c/a/8jW9R9LWtdrqzsv44dDf6edju32/j+QfNpIH8j33SzVaouTEQeSjzbvn3r62Ga+eX5W/9Ontu7/2t3/hyPisy7rf/fE3Y6n9kP7z+6o/XeeePjh5993Kr+79n+zkTqd7+mm/+v2Avfy2gEAAAAAAEC/KUTE0UgKxfV0oVAsrn2+40QcKZQr1dqZK5Wla7PR+K7sWIwUmivdoy2fh5jMPw/bzE9tyE9HxPGI+GbocCNfnKmUZ/e78gAAAAAAAAAAAAAAAAAAANAnRjt8/z/z29B+Xx3w3PnJbxhc28Z/L37pCehL/v7D4BL/MLjEPwwu8Q+DS/zD4BL/MLjEPwwu8Q8AAAAAAAAAAAAAAAAAAAAAAAAAAAA9denixWyrrz65NZPlZ28sL81XbpydTavzxYWlmeJMZfF6ca5SmSunxZnKwnbPV65Urk9OxdLNiVparU1Ul1cuL1SWrtUuX10ozaWX05F/pVYAAAAAAAAAAAAAAAAAAADwYqkur8yXyuV0UUJiV4nh/rgMibVEM7D3/IT72y8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQKt/AgAA//+jgjYy") r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={0x0, r5}, 0x18) socket(0x10, 0x80002, 0x0) r6 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000900)=@newtaction={0x48, 0x31, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4}}}]}]}, 0x48}}, 0x0) 801.841131ms ago: executing program 4 (id=537): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000380)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f00000006c0)=[{0x26, 0x0, [0x7, 0x9, 0x6, 0x1, 0x75, 0x8, 0x3, 0x9, 0xffffff81, 0x214, 0x3, 0x3, 0x7, 0x7, 0x5, 0x5]}, {0x2b, 0x0, [0x7, 0x547d, 0x1, 0xcec3, 0x9, 0x5, 0xe, 0xe1, 0x1ff, 0x9, 0xca31, 0x400000, 0x0, 0x1ff, 0x3, 0x4]}], 0xffffffffffffffff, 0x1, 0x1, 0x90}}, 0x20) 686.77924ms ago: executing program 4 (id=538): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f0000000540)=ANY=[@ANYBLOB], 0x210) close_range(r0, 0xffffffffffffffff, 0x0) 686.5225ms ago: executing program 1 (id=539): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x0, &(0x7f0000000040)}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x19) listen(r1, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7020000140000e0b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r4 = accept(r0, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x1) recvfrom(r3, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r6 = dup(r5) getsockopt$inet_buf(r6, 0x0, 0x9, 0x0, &(0x7f0000000300)=0xfffffffffffffe7a) getsockopt$WPAN_SECURITY_LEVEL(r5, 0x0, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x4) socket$inet_udp(0x2, 0x2, 0x0) r7 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x3d, 0x1, 0x0, 0x0, 0x0, 0x7, 0xe2000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1ff, 0x5}, 0x100020, 0x0, 0x0, 0x6, 0x7, 0x0, 0xa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) fcntl$getflags(r7, 0x408) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001880)=@newtaction={0x18, 0x30, 0xb, 0x0, 0x0, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4004000}, 0x10000000) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000480)={0x6, 0xfffff2b6, 0x18001, 0x2}, 0x10) 680.49022ms ago: executing program 3 (id=540): bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0xb, &(0x7f0000000000)=ANY=[@ANYBLOB="1808000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa0ffffffe1000007010000f8ffffffb70200000800000000850000008b0000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000bc0)=@base={0xb, 0x8, 0xc, 0x6f4, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008bd6000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) syz_emit_ethernet(0xfed7, &(0x7f00000002c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa86dd6002adf700383a00fe88000000000000000000697f000001ff02000000000000000000000000000102009078000000006000641a00003a00ff01000000000000000026da00000001ff0100"/100], 0x0) 680.21506ms ago: executing program 4 (id=541): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000540)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000002000000e000000200"/201], 0x210) 577.859747ms ago: executing program 4 (id=542): r0 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x121a02, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xd, 0x6e, 0x3, 0x10001, 0xa021, r0, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x3, 0x0, @value, @void, @void, @value}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) r3 = memfd_create(&(0x7f0000000500)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85l\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~7\x16\x02\x00(v\xe6`\"6\xfcgC\xb5\xf0\x13.zj\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x82\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00xffffffffffffffff}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a010400000000000000000100000008000240000000020900010073797a300000000014000000110001"], 0x50}}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000009006000000000000000000000a44000000090a050600000000000000000100000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001405000d404600000014000000110001"], 0x6c}}, 0x0) close_range(r8, 0xffffffffffffffff, 0x0) 460.122286ms ago: executing program 0 (id=546): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000), 0x4) connect$inet(r0, &(0x7f0000000380)={0x2, 0x4e24, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000100)=0xffffffffffffffff, 0x4) bpf$TOKEN_CREATE(0x24, &(0x7f00000004c0), 0x8) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r1}, 0x18) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) io_submit(0x0, 0x1, &(0x7f0000000340)=[&(0x7f0000000700)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r2, &(0x7f0000000040)="4200ffff0000", 0x6, 0x0, 0x0, 0x2}]) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000540), 0x501, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) mq_notify(0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) r4 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) writev(r4, &(0x7f0000000040)=[{&(0x7f0000002500)='\f7', 0x2}, {&(0x7f0000000440)='0', 0x1}], 0x2) getsockopt$IP_VS_SO_GET_SERVICE(r3, 0x0, 0x483, &(0x7f0000000280), &(0x7f0000000080)=0x68) creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39ddd8) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$nl_route(0x10, 0x3, 0x0) r6 = getpid() bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={r5, 0x0, 0x30, 0x1, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x3], &(0x7f0000000240)=[0x2], 0x0, 0x1, 0x0, r6}}, 0x40) close(r0) 420.783469ms ago: executing program 2 (id=547): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e000000"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) 380.187492ms ago: executing program 0 (id=548): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000410"], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x80) 359.933524ms ago: executing program 2 (id=549): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007b0000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000002c0)='mm_page_alloc\x00', r1}, 0x10) unshare(0x66000080) keyctl$link(0x8, 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) ioctl$SG_IO(r2, 0x2285, &(0x7f00000005c0)={0x53, 0xfffffffe, 0x6, 0x2, @scatter={0x1, 0xcc, &(0x7f00000000c0)=[{&(0x7f0000000800)=""/215, 0xd7}]}, &(0x7f0000000040)="0000501ef663", 0x0, 0x4, 0x10030, 0x0, 0x0}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r7 = mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) mq_timedsend(r7, &(0x7f0000000b00)="009e12c83b3bb95faf4db8a49ba27028e2921e1c1ed19149751b73ac917aba1469286c8a9913cbc8df8ba8ef29e4afae78cd31313122340ba908968ab11183ceaec1be0beff4c731382e356db1671a8835da18f9441cf81bcdb4da38993f452b27d808767192f5042b18720e4bd8566a93d4058808e94fd11480d83a47eeda1052f4dca794f4110061c8fff61b8ecefbb28c98f61618bf69c0505e5c7d0ea51cf974d42194542daf8e6795afb8a44dc8a0fc0d1e4286619178c73013d7944cd21b2f699cc336955e692d3980b1eafd11d5d831670a300be0bf2c0a", 0xdb, 0x0, 0x0) mq_timedreceive(r7, &(0x7f0000004600)=""/102381, 0xfffffceb, 0x0, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000000000040850000008600000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r8, 0x27, 0x0, 0x120, 0x0, 0x0, 0x2100, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="5800000010000104000020000000000000000000", @ANYRES32=0x0, @ANYBLOB="2b12020000000000280012800b00010067656e6576650000180002"], 0x58}}, 0x0) r10 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r10, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0}, 0x50) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./file0\x00', 0x10, &(0x7f0000000080)=ANY=[@ANYRESHEX], 0x21, 0x2a1, &(0x7f0000000f40)="$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") ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r9, 0x8983, &(0x7f00000001c0)) r11 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt(r11, 0x28, 0x1, 0x0, 0x0) recvfrom(r9, &(0x7f0000000400)=""/190, 0xbe, 0x160, &(0x7f0000000000)=@l2={0x1f, 0x3, @none, 0x1, 0x3}, 0x80) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000740)={0x0}}, 0x240400c5) 336.384565ms ago: executing program 0 (id=550): symlinkat(&(0x7f00000002c0)='./file1\x00', 0xffffffffffffffff, &(0x7f0000000000)='./file1\x00') r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0a000000020000000900000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000004740), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r2, &(0x7f0000004900)={0x0, 0x0, &(0x7f00000048c0)={&(0x7f0000004780)={0x3c, r3, 0x40d, 0x70bd28, 0x25dfdbff, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000800}, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000400)='kfree\x00', r1}, 0x18) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x14000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xc, 0x800}, 0x1c0, 0x4000000000000, 0x3, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x1, 0x0, 0x80000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000b80)={[{@nombcache}, {@abort}, {@dioread_lock}, {@norecovery}, {@discard}, {@lazytime}, {@noload}, {@usrquota}, {@noauto_da_alloc}]}, 0xfe, 0x558, &(0x7f0000000c00)="$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") r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={0x0, r5}, 0x18) socket(0x10, 0x80002, 0x0) r6 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000900)=@newtaction={0x48, 0x31, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4}}}]}]}, 0x48}}, 0x0) 187.078516ms ago: executing program 0 (id=551): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000400)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x12, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, 0x0}, 0x0) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000400)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r0, 0x84, 0x9, &(0x7f0000000380), 0x98) sendmsg$inet(r0, &(0x7f0000000780)={&(0x7f0000000080)={0x2, 0x4e23, @private=0xa010101}, 0x10, &(0x7f0000000700)=[{&(0x7f0000000140)="f5", 0x1}], 0x1}, 0x1) utimes(&(0x7f0000000200)='./file0\x00', 0x0) 92.510643ms ago: executing program 2 (id=552): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000540)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000002000000e000000200"/201], 0x210) 43.215136ms ago: executing program 2 (id=553): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) utimes(&(0x7f0000000200)='./file0\x00', 0x0) 42.682196ms ago: executing program 2 (id=554): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x0, &(0x7f0000000280)={[{@stripe={'stripe', 0x3d, 0x10}}, {@stripe={'stripe', 0x3d, 0x7}}, {@dioread_nolock}, {@mblk_io_submit}, {@discard}, {@nogrpid}]}, 0x1, 0x408, &(0x7f0000001180)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000000020"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) open(0x0, 0x14927e, 0x0) gettid() recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, 0x0, 0xfe33) socket$inet_sctp(0x2, 0x1, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$packet(0x11, 0x3, 0x300) sendmsg$NFT_BATCH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a010400000000000000000100000008000240000000020900010073797a3000000000140000"], 0x50}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000009006000000000000000000000a44000000090a050600000000000000000100000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001405000d404600000014000000110001"], 0x6c}}, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 0s ago: executing program 2 (id=555): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000500000002"], 0x50) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x80) 0s ago: executing program 2 (id=556): syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x1000048, 0x0, 0x0, 0x0, &(0x7f0000000340)) (async) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x3, 0x0, &(0x7f0000000b00), &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="16000000000000d19ffe43a98cf9bfff488ccf38d70b00"/35, @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x23, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, 0x0, &(0x7f0000000040)}, 0x20) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x141341) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000200)) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async, rerun: 32) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r4}, &(0x7f0000000000), &(0x7f0000000040)=r1}, 0x20) (async, rerun: 32) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r5}, 0x10) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) (async, rerun: 64) syz_open_dev$loop(0x0, 0xd, 0x20000) (async, rerun: 64) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10) fchmodat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0) (async) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x20802, 0x0) (async) r7 = syz_io_uring_setup(0x186, &(0x7f0000000080)={0x0, 0x45ac, 0x13100, 0x102, 0x2de}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r7, 0x2def, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSW2(r6, 0x402c542c, &(0x7f0000000000)={0x9, 0x80000001, 0x5, 0x4, 0x9, "a5a214b0cd5bd3e1110df2c80d0bb38f8f3ef4", 0xa2fa, 0x7}) (async) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000100)='kfree\x00', r10}, 0x18) (async) r11 = semget$private(0x0, 0x5, 0x0) semctl$SETALL(r11, 0x0, 0x11, &(0x7f0000000100)=[0x4]) semop(r11, &(0x7f0000002480)=[{}], 0x1) (async, rerun: 64) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async, rerun: 64) getpid() kernel console output (not intermixed with test programs): [ 21.636377][ T29] audit: type=1400 audit(1739719519.378:81): avc: denied { read } for pid=2980 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 Warning: Permanently added '10.128.10.24' (ED25519) to the list of known hosts. [ 26.834599][ T29] audit: type=1400 audit(1739719524.568:82): avc: denied { mounton } for pid=3286 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 26.835692][ T3286] cgroup: Unknown subsys name 'net' [ 26.857525][ T29] audit: type=1400 audit(1739719524.568:83): avc: denied { mount } for pid=3286 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 26.885396][ T29] audit: type=1400 audit(1739719524.598:84): avc: denied { unmount } for pid=3286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 27.106226][ T3286] cgroup: Unknown subsys name 'cpuset' [ 27.112500][ T3286] cgroup: Unknown subsys name 'rlimit' [ 27.263910][ T29] audit: type=1400 audit(1739719524.998:85): avc: denied { setattr } for pid=3286 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 27.289321][ T29] audit: type=1400 audit(1739719524.998:86): avc: denied { create } for pid=3286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 27.309906][ T29] audit: type=1400 audit(1739719525.008:87): avc: denied { write } for pid=3286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 27.330301][ T29] audit: type=1400 audit(1739719525.008:88): avc: denied { read } for pid=3286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 27.350618][ T29] audit: type=1400 audit(1739719525.008:89): avc: denied { mounton } for pid=3286 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 27.358320][ T3290] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 27.375389][ T29] audit: type=1400 audit(1739719525.008:90): avc: denied { mount } for pid=3286 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 27.407415][ T29] audit: type=1400 audit(1739719525.128:91): avc: denied { relabelto } for pid=3290 comm="mkswap" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 27.471161][ T3286] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 28.632585][ T3304] chnl_net:caif_netlink_parms(): no params data found [ 28.646803][ T3299] chnl_net:caif_netlink_parms(): no params data found [ 28.679953][ T3301] chnl_net:caif_netlink_parms(): no params data found [ 28.770316][ T3304] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.777526][ T3304] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.784807][ T3304] bridge_slave_0: entered allmulticast mode [ 28.791354][ T3304] bridge_slave_0: entered promiscuous mode [ 28.797783][ T3302] chnl_net:caif_netlink_parms(): no params data found [ 28.811555][ T3297] chnl_net:caif_netlink_parms(): no params data found [ 28.827190][ T3304] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.834243][ T3304] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.841407][ T3304] bridge_slave_1: entered allmulticast mode [ 28.847873][ T3304] bridge_slave_1: entered promiscuous mode [ 28.859375][ T3299] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.866539][ T3299] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.873653][ T3299] bridge_slave_0: entered allmulticast mode [ 28.880112][ T3299] bridge_slave_0: entered promiscuous mode [ 28.906915][ T3299] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.914094][ T3299] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.921246][ T3299] bridge_slave_1: entered allmulticast mode [ 28.927723][ T3299] bridge_slave_1: entered promiscuous mode [ 28.940017][ T3304] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.949254][ T3301] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.956332][ T3301] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.963529][ T3301] bridge_slave_0: entered allmulticast mode [ 28.970127][ T3301] bridge_slave_0: entered promiscuous mode [ 28.991924][ T3304] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.005821][ T3301] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.012961][ T3301] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.020169][ T3301] bridge_slave_1: entered allmulticast mode [ 29.026842][ T3301] bridge_slave_1: entered promiscuous mode [ 29.043506][ T3299] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.067933][ T3299] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.077798][ T3304] team0: Port device team_slave_0 added [ 29.098151][ T3304] team0: Port device team_slave_1 added [ 29.109757][ T3301] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.133281][ T3299] team0: Port device team_slave_0 added [ 29.139774][ T3299] team0: Port device team_slave_1 added [ 29.146351][ T3301] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.164647][ T3297] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.171831][ T3297] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.179084][ T3297] bridge_slave_0: entered allmulticast mode [ 29.185785][ T3297] bridge_slave_0: entered promiscuous mode [ 29.205325][ T3302] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.212464][ T3302] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.219965][ T3302] bridge_slave_0: entered allmulticast mode [ 29.226464][ T3302] bridge_slave_0: entered promiscuous mode [ 29.233064][ T3297] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.240155][ T3297] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.247448][ T3297] bridge_slave_1: entered allmulticast mode [ 29.253821][ T3297] bridge_slave_1: entered promiscuous mode [ 29.260262][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.267241][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.293517][ T3304] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.313532][ T3302] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.320676][ T3302] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.327840][ T3302] bridge_slave_1: entered allmulticast mode [ 29.334411][ T3302] bridge_slave_1: entered promiscuous mode [ 29.349359][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.356369][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.382328][ T3304] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.393238][ T3299] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.400216][ T3299] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.426274][ T3299] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.437840][ T3301] team0: Port device team_slave_0 added [ 29.455905][ T3299] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.462876][ T3299] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.488887][ T3299] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.500163][ T3301] team0: Port device team_slave_1 added [ 29.507266][ T3302] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.517581][ T3302] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.527777][ T3297] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.561996][ T3297] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.590879][ T3302] team0: Port device team_slave_0 added [ 29.609634][ T3304] hsr_slave_0: entered promiscuous mode [ 29.615696][ T3304] hsr_slave_1: entered promiscuous mode [ 29.621873][ T3301] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.629101][ T3301] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.655271][ T3301] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.671524][ T3302] team0: Port device team_slave_1 added [ 29.683123][ T3297] team0: Port device team_slave_0 added [ 29.689706][ T3297] team0: Port device team_slave_1 added [ 29.695756][ T3301] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.702769][ T3301] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.728793][ T3301] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.741494][ T3299] hsr_slave_0: entered promiscuous mode [ 29.747635][ T3299] hsr_slave_1: entered promiscuous mode [ 29.753492][ T3299] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 29.761548][ T3299] Cannot create hsr debugfs directory [ 29.773241][ T3302] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.780221][ T3302] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.806272][ T3302] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.834753][ T3302] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.841796][ T3302] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.868181][ T3302] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.888695][ T3297] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.895869][ T3297] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.921882][ T3297] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.948002][ T3297] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.955014][ T3297] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.981063][ T3297] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.008433][ T3302] hsr_slave_0: entered promiscuous mode [ 30.014458][ T3302] hsr_slave_1: entered promiscuous mode [ 30.020755][ T3302] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 30.028361][ T3302] Cannot create hsr debugfs directory [ 30.035851][ T3301] hsr_slave_0: entered promiscuous mode [ 30.041884][ T3301] hsr_slave_1: entered promiscuous mode [ 30.047861][ T3301] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 30.055499][ T3301] Cannot create hsr debugfs directory [ 30.117662][ T3297] hsr_slave_0: entered promiscuous mode [ 30.123563][ T3297] hsr_slave_1: entered promiscuous mode [ 30.129776][ T3297] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 30.137402][ T3297] Cannot create hsr debugfs directory [ 30.265371][ T3304] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 30.287642][ T3304] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 30.296638][ T3304] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 30.307902][ T3304] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 30.329749][ T3299] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 30.338577][ T3299] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 30.353591][ T3299] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 30.362480][ T3299] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 30.390804][ T3301] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 30.403591][ T3301] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 30.413004][ T3301] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 30.424153][ T3301] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 30.444509][ T3297] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 30.458150][ T3297] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 30.469467][ T3297] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 30.479268][ T3297] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 30.518515][ T3302] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 30.528339][ T3302] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 30.543380][ T3302] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 30.553053][ T3302] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 30.564797][ T3304] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.586779][ T3304] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.610302][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.617408][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.626729][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.633840][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.666102][ T3301] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.700077][ T3299] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.712044][ T3301] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.734921][ T3322] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.742014][ T3322] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.754054][ T3297] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.768202][ T3322] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.775378][ T3322] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.792788][ T3297] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.806190][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.813484][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.822638][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.829694][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.838734][ T3299] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.860157][ T3302] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.871343][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.878424][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.894215][ T3304] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.904017][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.911264][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.935211][ T3302] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.954003][ T3297] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 30.983336][ T3299] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 30.993799][ T3299] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.016707][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.023798][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.054412][ T3301] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.064313][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.071447][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.120089][ T3302] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.139646][ T3299] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.162291][ T3297] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.231026][ T3304] veth0_vlan: entered promiscuous mode [ 31.258097][ T3304] veth1_vlan: entered promiscuous mode [ 31.271907][ T3302] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.283674][ T3301] veth0_vlan: entered promiscuous mode [ 31.302754][ T3301] veth1_vlan: entered promiscuous mode [ 31.329706][ T3299] veth0_vlan: entered promiscuous mode [ 31.336049][ T3304] veth0_macvtap: entered promiscuous mode [ 31.348629][ T3304] veth1_macvtap: entered promiscuous mode [ 31.359133][ T3299] veth1_vlan: entered promiscuous mode [ 31.367670][ T3297] veth0_vlan: entered promiscuous mode [ 31.382057][ T3297] veth1_vlan: entered promiscuous mode [ 31.393109][ T3301] veth0_macvtap: entered promiscuous mode [ 31.401564][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.414598][ T3301] veth1_macvtap: entered promiscuous mode [ 31.423603][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.437443][ T3304] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.446568][ T3304] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.455277][ T3304] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.464205][ T3304] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.485825][ T3301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.496381][ T3301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.507105][ T3301] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.522239][ T3302] veth0_vlan: entered promiscuous mode [ 31.529229][ T3299] veth0_macvtap: entered promiscuous mode [ 31.537004][ T3299] veth1_macvtap: entered promiscuous mode [ 31.546130][ T3297] veth0_macvtap: entered promiscuous mode [ 31.554267][ T3301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.564790][ T3301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.575777][ T3301] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.584030][ T3302] veth1_vlan: entered promiscuous mode [ 31.595519][ T3299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.606035][ T3299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.615910][ T3299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.626422][ T3299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.637143][ T3299] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.644877][ T3297] veth1_macvtap: entered promiscuous mode [ 31.651951][ T3301] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.660724][ T3301] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.669526][ T3301] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.678374][ T3301] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.702172][ T3299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.712692][ T3299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.722550][ T3299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.733020][ T3299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.743879][ T3299] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.752924][ T3299] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.761943][ T3299] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.770766][ T3299] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.779599][ T3299] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.792353][ T3304] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 31.799327][ T3297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.817631][ T3297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.827538][ T3297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.838274][ T3297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.848206][ T3297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.858652][ T3297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.870021][ T3297] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.883329][ T3297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.893864][ T3297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.903960][ T3297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.914541][ T3297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.924664][ T3297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.935507][ T3297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.946425][ T29] kauditd_printk_skb: 27 callbacks suppressed [ 31.946442][ T29] audit: type=1400 audit(1739719529.628:119): avc: denied { read write } for pid=3304 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 31.956163][ T3297] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.976849][ T29] audit: type=1400 audit(1739719529.628:120): avc: denied { open } for pid=3304 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 32.008432][ T29] audit: type=1400 audit(1739719529.628:121): avc: denied { ioctl } for pid=3304 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=104 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 32.033944][ T29] audit: type=1400 audit(1739719529.658:122): avc: denied { map_create } for pid=3439 comm="syz.4.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 32.052821][ T29] audit: type=1400 audit(1739719529.658:123): avc: denied { perfmon } for pid=3439 comm="syz.4.6" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 32.073431][ T29] audit: type=1400 audit(1739719529.658:124): avc: denied { map_read map_write } for pid=3439 comm="syz.4.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 32.092975][ T29] audit: type=1400 audit(1739719529.658:125): avc: denied { prog_load } for pid=3439 comm="syz.4.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 32.111758][ T29] audit: type=1400 audit(1739719529.658:126): avc: denied { bpf } for pid=3439 comm="syz.4.6" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 32.132010][ T29] audit: type=1400 audit(1739719529.658:127): avc: denied { prog_run } for pid=3439 comm="syz.4.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 32.154625][ T3302] veth0_macvtap: entered promiscuous mode [ 32.165649][ T3297] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.174478][ T3297] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.183364][ T3297] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.192153][ T3297] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.201928][ T3440] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 32.210321][ T3440] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 32.221319][ T3302] veth1_macvtap: entered promiscuous mode [ 32.240048][ T29] audit: type=1400 audit(1739719529.978:128): avc: denied { append } for pid=3442 comm="syz.4.7" name="loop7" dev="devtmpfs" ino=107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 32.281995][ T3445] loop4: detected capacity change from 0 to 1024 [ 32.288423][ T3302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.288441][ T3302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.288450][ T3302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.288463][ T3302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.288473][ T3302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.288487][ T3302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.345577][ T3445] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 32.349914][ T3302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.369988][ T3302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.371009][ T3445] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 32.386011][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.412902][ T3445] EXT4-fs error (device loop4): ext4_get_journal_inode:5798: comm syz.4.8: inode #1: comm syz.4.8: iget: illegal inode # [ 32.446303][ T3445] EXT4-fs (loop4): no journal found [ 32.451551][ T3445] EXT4-fs (loop4): can't get journal size [ 32.460422][ T3302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.471105][ T3302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.480986][ T3302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.492275][ T3302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.502204][ T3302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.512744][ T3302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.522727][ T3302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.523987][ T3445] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 32.533451][ T3302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.552892][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.553403][ T3445] EXT4-fs (loop4): failed to initialize system zone (-22) [ 32.569691][ T3302] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.578569][ T3302] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.587386][ T3302] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.596279][ T3302] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.606794][ T3445] EXT4-fs (loop4): mount failed [ 32.622776][ T3457] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1'. [ 32.714807][ T3463] loop1: detected capacity change from 0 to 1024 [ 32.753859][ T3463] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 32.806822][ T3474] loop0: detected capacity change from 0 to 128 [ 32.882439][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.906452][ T3474] syz.0.12: attempt to access beyond end of device [ 32.906452][ T3474] loop0: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 32.928945][ T3474] syz.0.12: attempt to access beyond end of device [ 32.928945][ T3474] loop0: rw=524288, sector=145, nr_sectors = 224 limit=128 [ 32.946953][ T3474] syz.0.12: attempt to access beyond end of device [ 32.946953][ T3474] loop0: rw=0, sector=145, nr_sectors = 8 limit=128 [ 32.981561][ T3482] capability: warning: `syz.1.13' uses deprecated v2 capabilities in a way that may be insecure [ 33.001684][ T3474] syz.0.12: attempt to access beyond end of device [ 33.001684][ T3474] loop0: rw=0, sector=145, nr_sectors = 8 limit=128 [ 33.039282][ T3474] syz.0.12: attempt to access beyond end of device [ 33.039282][ T3474] loop0: rw=0, sector=145, nr_sectors = 8 limit=128 [ 33.044094][ T3485] loop2: detected capacity change from 0 to 512 [ 33.052911][ T3474] syz.0.12: attempt to access beyond end of device [ 33.052911][ T3474] loop0: rw=0, sector=145, nr_sectors = 8 limit=128 [ 33.070780][ T3487] netlink: 24 bytes leftover after parsing attributes in process `syz.4.17'. [ 33.073538][ T3474] syz.0.12: attempt to access beyond end of device [ 33.073538][ T3474] loop0: rw=0, sector=145, nr_sectors = 8 limit=128 [ 33.096439][ T3474] syz.0.12: attempt to access beyond end of device [ 33.096439][ T3474] loop0: rw=0, sector=145, nr_sectors = 8 limit=128 [ 33.149154][ T3485] ext4: Unknown parameter 'nouser_xattr' [ 33.154391][ T3474] syz.0.12: attempt to access beyond end of device [ 33.154391][ T3474] loop0: rw=0, sector=145, nr_sectors = 8 limit=128 [ 33.170715][ T3474] syz.0.12: attempt to access beyond end of device [ 33.170715][ T3474] loop0: rw=0, sector=145, nr_sectors = 8 limit=128 [ 33.186818][ T3485] SELinux: Context Ü is not valid (left unmapped). [ 33.219328][ T3487] netlink: 16 bytes leftover after parsing attributes in process `syz.4.17'. [ 33.228325][ T3487] netlink: 16 bytes leftover after parsing attributes in process `syz.4.17'. [ 33.237326][ T3487] netlink: 16 bytes leftover after parsing attributes in process `syz.4.17'. [ 33.272414][ T3487] netlink: 16 bytes leftover after parsing attributes in process `syz.4.17'. [ 33.281636][ T3487] netlink: 16 bytes leftover after parsing attributes in process `syz.4.17'. [ 33.290590][ T3487] netlink: 16 bytes leftover after parsing attributes in process `syz.4.17'. [ 33.333395][ T3502] loop1: detected capacity change from 0 to 1024 [ 33.343856][ T3487] netlink: 16 bytes leftover after parsing attributes in process `syz.4.17'. [ 33.352859][ T3487] netlink: 16 bytes leftover after parsing attributes in process `syz.4.17'. [ 33.387144][ T3502] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.499972][ T3502] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 33.525505][ T3502] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 33.537874][ T3502] EXT4-fs (loop1): This should not happen!! Data will be lost [ 33.537874][ T3502] [ 33.547605][ T3502] EXT4-fs (loop1): Total free blocks count 0 [ 33.553607][ T3502] EXT4-fs (loop1): Free/Dirty block details [ 33.559616][ T3502] EXT4-fs (loop1): free_blocks=68451041280 [ 33.565463][ T3502] EXT4-fs (loop1): dirty_blocks=16 [ 33.570591][ T3502] EXT4-fs (loop1): Block reservation details [ 33.576684][ T3502] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 33.593768][ T3511] loop2: detected capacity change from 0 to 256 [ 33.602226][ T3511] vfat: Unknown parameter 'syzkaller' [ 33.632236][ T3502] syz.1.22 (3502) used greatest stack depth: 9416 bytes left [ 33.652264][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.864685][ T3532] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 33.872803][ T3532] vhci_hcd: default hub control req: 2314 v0008 i0002 l0 [ 34.203983][ T3553] loop3: detected capacity change from 0 to 512 [ 34.228897][ T3553] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.241592][ T3553] ext4 filesystem being mounted at /6/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 34.547857][ T3558] mmap: syz.2.40 (3558) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 34.769187][ T3565] FAULT_INJECTION: forcing a failure. [ 34.769187][ T3565] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 34.782563][ T3565] CPU: 1 UID: 0 PID: 3565 Comm: syz.0.43 Not tainted 6.14.0-rc2-syzkaller-00303-gad1b832bf1cf #0 [ 34.782592][ T3565] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 34.782617][ T3565] Call Trace: [ 34.782626][ T3565] [ 34.782633][ T3565] dump_stack_lvl+0xf2/0x150 [ 34.782662][ T3565] dump_stack+0x15/0x1a [ 34.782683][ T3565] should_fail_ex+0x24a/0x260 [ 34.782714][ T3565] should_fail_alloc_page+0xfd/0x110 [ 34.782823][ T3565] __alloc_frozen_pages_noprof+0x109/0x340 [ 34.782856][ T3565] alloc_pages_mpol+0xb4/0x260 [ 34.782885][ T3565] alloc_pages_noprof+0xe8/0x130 [ 34.782914][ T3565] get_free_pages_noprof+0xc/0x30 [ 34.782997][ T3565] do_proc_control+0x174/0x850 [ 34.783026][ T3565] ? should_fail_ex+0xd7/0x260 [ 34.783060][ T3565] usbdev_ioctl+0x1c03/0x3f20 [ 34.783172][ T3565] ? do_vfs_ioctl+0x98b/0x1590 [ 34.783229][ T3565] ? selinux_file_ioctl+0x2f7/0x380 [ 34.783259][ T3565] ? __fget_files+0x17c/0x1c0 [ 34.783294][ T3565] ? __pfx_usbdev_ioctl+0x10/0x10 [ 34.783378][ T3565] __se_sys_ioctl+0xc9/0x140 [ 34.783465][ T3565] __x64_sys_ioctl+0x43/0x50 [ 34.783491][ T3565] x64_sys_call+0x1690/0x2dc0 [ 34.783524][ T3565] do_syscall_64+0xc9/0x1c0 [ 34.783623][ T3565] ? clear_bhb_loop+0x55/0xb0 [ 34.783657][ T3565] ? clear_bhb_loop+0x55/0xb0 [ 34.783690][ T3565] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 34.783719][ T3565] RIP: 0033:0x7f83bc82cde9 [ 34.783797][ T3565] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 34.783814][ T3565] RSP: 002b:00007f83bae97038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 34.783832][ T3565] RAX: ffffffffffffffda RBX: 00007f83bca45fa0 RCX: 00007f83bc82cde9 [ 34.783844][ T3565] RDX: 0000400000000040 RSI: 00000000c0185500 RDI: 0000000000000007 [ 34.783857][ T3565] RBP: 00007f83bae97090 R08: 0000000000000000 R09: 0000000000000000 [ 34.783872][ T3565] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 34.783931][ T3565] R13: 0000000000000000 R14: 00007f83bca45fa0 R15: 00007ffea49573f8 [ 34.783952][ T3565] [ 35.111963][ T3570] loop1: detected capacity change from 0 to 512 [ 35.128192][ T3570] EXT4-fs: Ignoring removed mblk_io_submit option [ 35.181531][ T3579] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 35.198253][ T3570] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.266244][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.285091][ T3582] process 'syz.2.49' launched '/dev/fd/6' with NULL argv: empty string added [ 35.343967][ T3582] loop2: detected capacity change from 0 to 1024 [ 35.357499][ T3588] Zero length message leads to an empty skb [ 35.483793][ T3592] loop1: detected capacity change from 0 to 128 [ 35.578768][ T3582] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.662117][ T3582] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 35.749411][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.785450][ T3600] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 35.797798][ T3600] EXT4-fs (loop2): This should not happen!! Data will be lost [ 35.797798][ T3600] [ 35.807513][ T3600] EXT4-fs (loop2): Total free blocks count 0 [ 35.813536][ T3600] EXT4-fs (loop2): Free/Dirty block details [ 35.819514][ T3600] EXT4-fs (loop2): free_blocks=68451041280 [ 35.825390][ T3600] EXT4-fs (loop2): dirty_blocks=16 [ 35.830517][ T3600] EXT4-fs (loop2): Block reservation details [ 35.836673][ T3600] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 35.913415][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.956841][ T3620] loop3: detected capacity change from 0 to 512 [ 35.974234][ T3621] loop2: detected capacity change from 0 to 4096 [ 35.993998][ T3621] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.004660][ T3620] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.62: bg 0: block 248: padding at end of block bitmap is not set [ 36.021123][ T3621] atomic_op ffff88811afe2528 conn xmit_atomic 0000000000000000 [ 36.022545][ T3620] EXT4-fs error (device loop3): ext4_acquire_dquot:6927: comm syz.3.62: Failed to acquire dquot type 1 [ 36.043260][ T3620] EXT4-fs (loop3): 1 truncate cleaned up [ 36.049464][ T3620] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.063371][ T3620] ext4 filesystem being mounted at /9/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 36.082915][ T3620] syz.3.62 (3620) used greatest stack depth: 9280 bytes left [ 36.104429][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.118492][ T3629] loop1: detected capacity change from 0 to 512 [ 36.118510][ T11] EXT4-fs error (device loop3): ext4_release_dquot:6950: comm kworker/u8:0: Failed to release dquot type 1 [ 36.125214][ T3629] EXT4-fs: Ignoring removed mblk_io_submit option [ 36.136951][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.154152][ T3629] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.313856][ T3644] loop0: detected capacity change from 0 to 512 [ 36.327778][ T3645] loop3: detected capacity change from 0 to 256 [ 36.327987][ T3645] vfat: Unknown parameter 'syzkaller' [ 36.342525][ T3644] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 36.342545][ T3644] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 36.351387][ T3644] EXT4-fs error (device loop0): ext4_orphan_get:1415: comm syz.0.72: bad orphan inode 16 [ 36.351546][ T3644] ext4_test_bit(bit=15, block=4) = 0 [ 36.351566][ T3644] EXT4-fs (loop0): 1 orphan inode deleted [ 36.352019][ T3644] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.352944][ T3644] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.371731][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.514537][ T3650] loop2: detected capacity change from 0 to 512 [ 36.541412][ T3649] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 36.701572][ T3650] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.701752][ T3650] ext4 filesystem being mounted at /12/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 37.386543][ T29] kauditd_printk_skb: 443 callbacks suppressed [ 37.386563][ T29] audit: type=1326 audit(1739719535.078:569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3648 comm="syz.4.74" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa27878cde9 code=0x7ffc0000 [ 37.386638][ T29] audit: type=1326 audit(1739719535.078:570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3648 comm="syz.4.74" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa27878cde9 code=0x7ffc0000 [ 37.413168][ T3655] loop1: detected capacity change from 0 to 512 [ 37.413569][ T3655] EXT4-fs: Ignoring removed mblk_io_submit option [ 37.449127][ T3655] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.452569][ T29] audit: type=1326 audit(1739719535.188:571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3654 comm="syz.1.73" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00492dcde9 code=0x7ffc0000 [ 37.452774][ T29] audit: type=1326 audit(1739719535.188:572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3654 comm="syz.1.73" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00492dcde9 code=0x7ffc0000 [ 37.452960][ T29] audit: type=1326 audit(1739719535.188:573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3654 comm="syz.1.73" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f00492dcde9 code=0x7ffc0000 [ 37.453292][ T29] audit: type=1326 audit(1739719535.188:574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3654 comm="syz.1.73" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00492dcde9 code=0x7ffc0000 [ 37.453550][ T29] audit: type=1326 audit(1739719535.188:575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3654 comm="syz.1.73" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00492dcde9 code=0x7ffc0000 [ 37.453711][ T29] audit: type=1326 audit(1739719535.188:576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3654 comm="syz.1.73" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f00492dcde9 code=0x7ffc0000 [ 37.453939][ T29] audit: type=1326 audit(1739719535.188:577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3654 comm="syz.1.73" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00492dcde9 code=0x7ffc0000 [ 37.453974][ T29] audit: type=1326 audit(1739719535.188:578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3654 comm="syz.1.73" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f00492dcde9 code=0x7ffc0000 [ 38.340832][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.723087][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.843031][ T3696] loop3: detected capacity change from 0 to 512 [ 38.860485][ T3696] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.89: bg 0: block 248: padding at end of block bitmap is not set [ 38.875359][ T3696] EXT4-fs error (device loop3): ext4_acquire_dquot:6927: comm syz.3.89: Failed to acquire dquot type 1 [ 38.890320][ T3696] EXT4-fs (loop3): 1 truncate cleaned up [ 38.896643][ T3696] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.910624][ T3696] ext4 filesystem being mounted at /15/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 38.931374][ T3696] syz.3.89 (3696) used greatest stack depth: 9272 bytes left [ 39.033554][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.046189][ T1425] EXT4-fs error (device loop3): ext4_release_dquot:6950: comm kworker/u8:5: Failed to release dquot type 1 [ 39.077890][ T3709] 9pnet_fd: Insufficient options for proto=fd [ 39.382230][ T3728] loop4: detected capacity change from 0 to 512 [ 39.757456][ T3736] __nla_validate_parse: 34 callbacks suppressed [ 39.757471][ T3736] netlink: 132 bytes leftover after parsing attributes in process `syz.0.105'. [ 39.884835][ T3740] 9pnet_fd: Insufficient options for proto=fd [ 40.011949][ T3744] FAULT_INJECTION: forcing a failure. [ 40.011949][ T3744] name failslab, interval 1, probability 0, space 0, times 1 [ 40.024664][ T3744] CPU: 1 UID: 0 PID: 3744 Comm: +}[@ Not tainted 6.14.0-rc2-syzkaller-00303-gad1b832bf1cf #0 [ 40.024730][ T3744] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 40.024743][ T3744] Call Trace: [ 40.024806][ T3744] [ 40.024815][ T3744] dump_stack_lvl+0xf2/0x150 [ 40.024849][ T3744] dump_stack+0x15/0x1a [ 40.024871][ T3744] should_fail_ex+0x24a/0x260 [ 40.025024][ T3744] ? sctp_auth_asoc_copy_shkeys+0x101/0x340 [ 40.025063][ T3744] should_failslab+0x8f/0xb0 [ 40.025097][ T3744] __kmalloc_cache_noprof+0x4e/0x320 [ 40.025124][ T3744] sctp_auth_asoc_copy_shkeys+0x101/0x340 [ 40.025159][ T3744] sctp_association_new+0xe78/0x1280 [ 40.025186][ T3744] sctp_connect_new_asoc+0x1b0/0x3b0 [ 40.025218][ T3744] sctp_sendmsg+0xefb/0x18f0 [ 40.025296][ T3744] ? __pfx_sctp_sendmsg+0x10/0x10 [ 40.025321][ T3744] inet_sendmsg+0xc5/0xd0 [ 40.025357][ T3744] __sock_sendmsg+0x102/0x180 [ 40.025408][ T3744] ____sys_sendmsg+0x326/0x4b0 [ 40.025440][ T3744] __sys_sendmmsg+0x227/0x4b0 [ 40.025507][ T3744] __x64_sys_sendmmsg+0x57/0x70 [ 40.025533][ T3744] x64_sys_call+0x29aa/0x2dc0 [ 40.025592][ T3744] do_syscall_64+0xc9/0x1c0 [ 40.025645][ T3744] ? clear_bhb_loop+0x55/0xb0 [ 40.025672][ T3744] ? clear_bhb_loop+0x55/0xb0 [ 40.025781][ T3744] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 40.025814][ T3744] RIP: 0033:0x7f83bc82cde9 [ 40.025832][ T3744] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 40.025851][ T3744] RSP: 002b:00007f83bae97038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 40.025869][ T3744] RAX: ffffffffffffffda RBX: 00007f83bca45fa0 RCX: 00007f83bc82cde9 [ 40.025881][ T3744] RDX: 0000000000000001 RSI: 00004000000032c0 RDI: 0000000000000006 [ 40.025895][ T3744] RBP: 00007f83bae97090 R08: 0000000000000000 R09: 0000000000000000 [ 40.025909][ T3744] R10: 0000000000000880 R11: 0000000000000246 R12: 0000000000000001 [ 40.025962][ T3744] R13: 0000000000000000 R14: 00007f83bca45fa0 R15: 00007ffea49573f8 [ 40.025984][ T3744] [ 40.309883][ T3728] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.322706][ T3728] ext4 filesystem being mounted at /17/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 40.656488][ T3766] 9pnet_fd: Insufficient options for proto=fd [ 40.820021][ T3770] loop0: detected capacity change from 0 to 512 [ 40.873611][ T3770] EXT4-fs: Ignoring removed i_version option [ 40.879941][ T3770] EXT4-fs: Ignoring removed mblk_io_submit option [ 40.930733][ T3770] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 40.947064][ T3778] IPv6: NLM_F_CREATE should be specified when creating new route [ 40.965920][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.003381][ T3770] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2863: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 41.028445][ T3770] EXT4-fs (loop0): 1 truncate cleaned up [ 41.034740][ T3770] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.122875][ T3297] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.144939][ T3790] netlink: 24 bytes leftover after parsing attributes in process `syz.4.124'. [ 41.174353][ T3790] netlink: 16 bytes leftover after parsing attributes in process `syz.4.124'. [ 41.183359][ T3790] netlink: 16 bytes leftover after parsing attributes in process `syz.4.124'. [ 41.192751][ T3790] netlink: 16 bytes leftover after parsing attributes in process `syz.4.124'. [ 41.247815][ T3790] netlink: 16 bytes leftover after parsing attributes in process `syz.4.124'. [ 41.256883][ T3790] netlink: 16 bytes leftover after parsing attributes in process `syz.4.124'. [ 41.265806][ T3790] netlink: 16 bytes leftover after parsing attributes in process `syz.4.124'. [ 41.392343][ T3790] netlink: 16 bytes leftover after parsing attributes in process `syz.4.124'. [ 41.401334][ T3790] netlink: 16 bytes leftover after parsing attributes in process `syz.4.124'. [ 41.434928][ T3802] loop0: detected capacity change from 0 to 4096 [ 41.457936][ T3804] 9pnet_fd: Insufficient options for proto=fd [ 41.470709][ T3802] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.489261][ T3802] atomic_op ffff888100e2dd28 conn xmit_atomic 0000000000000000 [ 41.514375][ T3297] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.547069][ T3809] FAULT_INJECTION: forcing a failure. [ 41.547069][ T3809] name failslab, interval 1, probability 0, space 0, times 0 [ 41.559886][ T3809] CPU: 0 UID: 0 PID: 3809 Comm: syz.4.134 Not tainted 6.14.0-rc2-syzkaller-00303-gad1b832bf1cf #0 [ 41.559916][ T3809] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 41.559930][ T3809] Call Trace: [ 41.559937][ T3809] [ 41.559945][ T3809] dump_stack_lvl+0xf2/0x150 [ 41.559973][ T3809] dump_stack+0x15/0x1a [ 41.559997][ T3809] should_fail_ex+0x24a/0x260 [ 41.560092][ T3809] should_failslab+0x8f/0xb0 [ 41.560128][ T3809] kmem_cache_alloc_noprof+0x52/0x320 [ 41.560166][ T3809] ? copy_signal+0x54/0x350 [ 41.560255][ T3809] ? copy_sighand+0x52/0x1b0 [ 41.560285][ T3809] copy_signal+0x54/0x350 [ 41.560313][ T3809] copy_process+0xcdf/0x1f50 [ 41.560351][ T3809] kernel_clone+0x167/0x5e0 [ 41.560387][ T3809] ? vfs_write+0x644/0x920 [ 41.560434][ T3809] __x64_sys_clone+0xe7/0x120 [ 41.560554][ T3809] x64_sys_call+0x2d7e/0x2dc0 [ 41.560588][ T3809] do_syscall_64+0xc9/0x1c0 [ 41.560617][ T3809] ? clear_bhb_loop+0x55/0xb0 [ 41.560648][ T3809] ? clear_bhb_loop+0x55/0xb0 [ 41.560720][ T3809] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 41.560750][ T3809] RIP: 0033:0x7fa27878cde9 [ 41.560765][ T3809] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 41.560782][ T3809] RSP: 002b:00007fa276df6fe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 41.560800][ T3809] RAX: ffffffffffffffda RBX: 00007fa2789a5fa0 RCX: 00007fa27878cde9 [ 41.560812][ T3809] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000022023400 [ 41.560826][ T3809] RBP: 00007fa276df7090 R08: 0000000000000000 R09: 0000000000000000 [ 41.560840][ T3809] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 41.560858][ T3809] R13: 0000000000000000 R14: 00007fa2789a5fa0 R15: 00007fffd00effb8 [ 41.560880][ T3809] [ 41.853529][ T3817] loop1: detected capacity change from 0 to 1024 [ 41.946300][ T3817] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.001521][ T3832] 9pnet_fd: Insufficient options for proto=fd [ 42.088493][ T3843] FAULT_INJECTION: forcing a failure. [ 42.088493][ T3843] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 42.093008][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.101812][ T3843] CPU: 0 UID: 0 PID: 3843 Comm: syz.3.148 Not tainted 6.14.0-rc2-syzkaller-00303-gad1b832bf1cf #0 [ 42.101842][ T3843] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 42.101933][ T3843] Call Trace: [ 42.101939][ T3843] [ 42.101949][ T3843] dump_stack_lvl+0xf2/0x150 [ 42.101988][ T3843] dump_stack+0x15/0x1a [ 42.102017][ T3843] should_fail_ex+0x24a/0x260 [ 42.102057][ T3843] should_fail_alloc_page+0xfd/0x110 [ 42.102099][ T3843] __alloc_frozen_pages_noprof+0x109/0x340 [ 42.102141][ T3843] alloc_pages_mpol+0xb4/0x260 [ 42.102172][ T3843] alloc_pages_noprof+0xe8/0x130 [ 42.102209][ T3843] __pmd_alloc+0x4b/0x430 [ 42.102234][ T3843] handle_mm_fault+0x1a77/0x2ac0 [ 42.102277][ T3843] ? __rcu_read_unlock+0x4e/0x70 [ 42.102306][ T3843] ? mt_find+0x72a/0x890 [ 42.102365][ T3843] ? check_vma_flags+0x222/0x310 [ 42.102438][ T3843] __get_user_pages+0xf6a/0x2350 [ 42.102478][ T3843] ? down_read+0x171/0x4b0 [ 42.102512][ T3843] get_user_pages_remote+0x1df/0x790 [ 42.102573][ T3843] get_arg_page+0x96/0x1e0 [ 42.102606][ T3843] copy_string_kernel+0x128/0x2b0 [ 42.102638][ T3843] do_execveat_common+0x615/0x7e0 [ 42.102807][ T3843] __x64_sys_execveat+0x75/0x90 [ 42.102843][ T3843] x64_sys_call+0x291e/0x2dc0 [ 42.102878][ T3843] do_syscall_64+0xc9/0x1c0 [ 42.102978][ T3843] ? clear_bhb_loop+0x55/0xb0 [ 42.103014][ T3843] ? clear_bhb_loop+0x55/0xb0 [ 42.103071][ T3843] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 42.103105][ T3843] RIP: 0033:0x7fbe74f3cde9 [ 42.103124][ T3843] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 42.103147][ T3843] RSP: 002b:00007fbe735a7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 42.103232][ T3843] RAX: ffffffffffffffda RBX: 00007fbe75155fa0 RCX: 00007fbe74f3cde9 [ 42.103248][ T3843] RDX: 0000000000000000 RSI: 0000400000000000 RDI: 0000000000000003 [ 42.103263][ T3843] RBP: 00007fbe735a7090 R08: 0000000000001000 R09: 0000000000000000 [ 42.103278][ T3843] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 42.103293][ T3843] R13: 0000000000000000 R14: 00007fbe75155fa0 R15: 00007ffec7687728 [ 42.103316][ T3843] [ 42.341576][ T3850] loop3: detected capacity change from 0 to 256 [ 42.348320][ T3850] vfat: Unknown parameter 'syzkaller' [ 42.364281][ T3845] loop4: detected capacity change from 0 to 1024 [ 42.406413][ T29] kauditd_printk_skb: 366 callbacks suppressed [ 42.406431][ T29] audit: type=1326 audit(1739719540.148:942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3840 comm="syz.4.146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa27878cde9 code=0x7ffc0000 [ 42.435962][ T29] audit: type=1326 audit(1739719540.148:943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3840 comm="syz.4.146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fa27878cde9 code=0x7ffc0000 [ 42.459321][ T29] audit: type=1326 audit(1739719540.148:944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3840 comm="syz.4.146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa27878cde9 code=0x7ffc0000 [ 42.482665][ T29] audit: type=1326 audit(1739719540.148:945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3840 comm="syz.4.146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fa27878cde9 code=0x7ffc0000 [ 42.534319][ T29] audit: type=1326 audit(1739719540.188:946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3854 comm="syz.1.147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00492dcde9 code=0x7ffc0000 [ 42.558033][ T29] audit: type=1326 audit(1739719540.188:947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3854 comm="syz.1.147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00492dcde9 code=0x7ffc0000 [ 42.581479][ T29] audit: type=1326 audit(1739719540.188:948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3854 comm="syz.1.147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f00492dcde9 code=0x7ffc0000 [ 42.604821][ T29] audit: type=1326 audit(1739719540.188:949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3854 comm="syz.1.147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00492dcde9 code=0x7ffc0000 [ 42.628163][ T29] audit: type=1326 audit(1739719540.188:950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3854 comm="syz.1.147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00492dcde9 code=0x7ffc0000 [ 42.651956][ T29] audit: type=1326 audit(1739719540.188:951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3854 comm="syz.1.147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f00492dcde9 code=0x7ffc0000 [ 42.809541][ T3870] 9pnet_fd: Insufficient options for proto=fd [ 42.879154][ T3870] loop3: detected capacity change from 0 to 512 [ 42.885917][ T3870] journal_path: Non-blockdev passed as './bus' [ 42.885940][ T3870] EXT4-fs: error: could not find journal device path [ 42.922177][ T3876] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 42.950811][ T3883] netlink: 'syz.3.164': attribute type 30 has an invalid length. [ 42.961753][ T3876] team0: Port device batadv1 added [ 42.969450][ T3878] loop1: detected capacity change from 0 to 256 [ 42.976080][ T3878] vfat: Unknown parameter 'syzkaller' [ 42.981955][ T3883] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0) [ 42.991221][ T3883] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255 [ 43.097836][ T3893] loop1: detected capacity change from 0 to 512 [ 43.120459][ T3893] EXT4-fs: Ignoring removed mblk_io_submit option [ 43.167867][ T3893] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.288126][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.349880][ T3908] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 43.366456][ T3908] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 43.465859][ T3914] loop1: detected capacity change from 0 to 256 [ 43.480835][ T3914] vfat: Unknown parameter 'syzkaller' [ 43.544669][ T3920] loop2: detected capacity change from 0 to 512 [ 43.619494][ T3920] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.179: bg 0: block 248: padding at end of block bitmap is not set [ 43.663298][ T3920] EXT4-fs error (device loop2): ext4_acquire_dquot:6927: comm syz.2.179: Failed to acquire dquot type 1 [ 43.729522][ T3920] EXT4-fs (loop2): 1 truncate cleaned up [ 43.738484][ T3922] loop3: detected capacity change from 0 to 8192 [ 43.754425][ T3920] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.774329][ T3922] ======================================================= [ 43.774329][ T3922] WARNING: The mand mount option has been deprecated and [ 43.774329][ T3922] and is ignored by this kernel. Remove the mand [ 43.774329][ T3922] option from the mount to silence this warning. [ 43.774329][ T3922] ======================================================= [ 43.843430][ T3920] ext4 filesystem being mounted at /29/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 43.890679][ T3922] vfat: Unknown parameter '' [ 43.928843][ T3899] Set syz1 is full, maxelem 65536 reached [ 43.953961][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.964859][ T1425] EXT4-fs error (device loop2): ext4_release_dquot:6950: comm kworker/u8:5: Failed to release dquot type 1 [ 44.015360][ C1] hrtimer: interrupt took 46853 ns [ 44.031578][ T3940] capability: warning: `syz.1.187' uses 32-bit capabilities (legacy support in use) [ 44.130765][ T3940] loop1: detected capacity change from 0 to 512 [ 44.141634][ T3951] loop2: detected capacity change from 0 to 256 [ 44.162796][ T3951] vfat: Unknown parameter 'syzkaller' [ 44.188443][ T3955] loop3: detected capacity change from 0 to 1024 [ 44.217834][ T3955] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.244406][ T3940] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 44.259468][ T3940] ext4 filesystem being mounted at /37/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 44.302065][ T3940] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 44.313917][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.531425][ T3983] loop2: detected capacity change from 0 to 8192 [ 44.544942][ T3983] vfat: Unknown parameter '' [ 44.571763][ T3979] blackhole_netdev_xmit(): Dropping skb. [ 44.631645][ T3991] FAULT_INJECTION: forcing a failure. [ 44.631645][ T3991] name failslab, interval 1, probability 0, space 0, times 0 [ 44.644471][ T3991] CPU: 1 UID: 0 PID: 3991 Comm: syz.2.205 Not tainted 6.14.0-rc2-syzkaller-00303-gad1b832bf1cf #0 [ 44.644500][ T3991] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 44.644514][ T3991] Call Trace: [ 44.644521][ T3991] [ 44.644530][ T3991] dump_stack_lvl+0xf2/0x150 [ 44.644608][ T3991] dump_stack+0x15/0x1a [ 44.644634][ T3991] should_fail_ex+0x24a/0x260 [ 44.644814][ T3991] should_failslab+0x8f/0xb0 [ 44.644850][ T3991] kmem_cache_alloc_noprof+0x52/0x320 [ 44.644912][ T3991] ? getname_flags+0x81/0x3b0 [ 44.644961][ T3991] ? get_pid_task+0x8e/0xc0 [ 44.645001][ T3991] getname_flags+0x81/0x3b0 [ 44.645122][ T3991] user_path_at+0x26/0x120 [ 44.645150][ T3991] do_utimes+0xc7/0x1f0 [ 44.645188][ T3991] __x64_sys_futimesat+0xd4/0x1a0 [ 44.645243][ T3991] ? fpregs_assert_state_consistent+0x83/0xa0 [ 44.645271][ T3991] x64_sys_call+0x2d2e/0x2dc0 [ 44.645304][ T3991] do_syscall_64+0xc9/0x1c0 [ 44.645342][ T3991] ? clear_bhb_loop+0x55/0xb0 [ 44.645452][ T3991] ? clear_bhb_loop+0x55/0xb0 [ 44.645486][ T3991] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 44.645518][ T3991] RIP: 0033:0x7f5e0e32cde9 [ 44.645536][ T3991] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 44.645558][ T3991] RSP: 002b:00007f5e0c7ef038 EFLAGS: 00000246 ORIG_RAX: 0000000000000105 [ 44.645580][ T3991] RAX: ffffffffffffffda RBX: 00007f5e0e546080 RCX: 00007f5e0e32cde9 [ 44.645605][ T3991] RDX: 0000400000000300 RSI: 0000400000000080 RDI: ffffffffffffffff [ 44.645619][ T3991] RBP: 00007f5e0c7ef090 R08: 0000000000000000 R09: 0000000000000000 [ 44.645634][ T3991] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 44.645648][ T3991] R13: 0000000000000000 R14: 00007f5e0e546080 R15: 00007ffc86686238 [ 44.645680][ T3991] [ 44.886662][ T3990] loop3: detected capacity change from 0 to 256 [ 44.887909][ T3999] loop0: detected capacity change from 0 to 1024 [ 44.893321][ T3990] vfat: Unknown parameter 'syzkaller' [ 44.918508][ T3999] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.978151][ T3297] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.994527][ T4008] 9pnet_fd: Insufficient options for proto=fd [ 45.058311][ T4016] __nla_validate_parse: 17 callbacks suppressed [ 45.058363][ T4016] netlink: 132 bytes leftover after parsing attributes in process `syz.0.215'. [ 45.114751][ T4024] 9pnet_fd: Insufficient options for proto=fd [ 45.128521][ T4023] loop1: detected capacity change from 0 to 1024 [ 45.165729][ T4023] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.192215][ T4034] loop0: detected capacity change from 0 to 128 [ 45.199742][ T4032] loop3: detected capacity change from 0 to 256 [ 45.206877][ T4032] vfat: Unknown parameter 'syzkaller' [ 45.239507][ T4036] loop3: detected capacity change from 0 to 1024 [ 45.258236][ T4036] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.303217][ T4042] 9pnet_fd: Insufficient options for proto=fd [ 45.329052][ T4047] 9pnet: Could not find request transport: f„zÒî|îÓ0MñµÞ0ÌN¦[íoHµ»¦ÈdkMÐ:¼ñF÷ ÓŽã4x€vh'¯·ÿÀÊö°J*jyìæòy‚ædÊü [ 45.337191][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.375218][ T4023] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 45.392088][ T4023] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 45.404440][ T4023] EXT4-fs (loop1): This should not happen!! Data will be lost [ 45.404440][ T4023] [ 45.410365][ T4049] loop2: detected capacity change from 0 to 1024 [ 45.414215][ T4023] EXT4-fs (loop1): Total free blocks count 0 [ 45.421270][ T4051] netlink: 132 bytes leftover after parsing attributes in process `syz.0.232'. [ 45.426605][ T4023] EXT4-fs (loop1): Free/Dirty block details [ 45.441635][ T4023] EXT4-fs (loop1): free_blocks=68451041280 [ 45.447934][ T4023] EXT4-fs (loop1): dirty_blocks=16 [ 45.453309][ T4023] EXT4-fs (loop1): Block reservation details [ 45.459361][ T4023] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 45.509889][ T4058] loop4: detected capacity change from 0 to 1024 [ 45.540760][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.544083][ T4058] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.572112][ T4069] loop3: detected capacity change from 0 to 128 [ 45.621194][ T4072] loop1: detected capacity change from 0 to 256 [ 45.642358][ T4072] vfat: Unknown parameter 'syzkaller' [ 45.676453][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.711679][ T4078] loop1: detected capacity change from 0 to 1024 [ 45.734252][ T4069] bio_check_eod: 5995 callbacks suppressed [ 45.734273][ T4069] syz.3.236: attempt to access beyond end of device [ 45.734273][ T4069] loop3: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 45.769260][ T4078] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.814785][ T4089] netlink: 132 bytes leftover after parsing attributes in process `syz.4.243'. [ 45.833547][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.867000][ T4091] netlink: 12 bytes leftover after parsing attributes in process `syz.4.245'. [ 45.870833][ T4069] syz.3.236: attempt to access beyond end of device [ 45.870833][ T4069] loop3: rw=524288, sector=145, nr_sectors = 896 limit=128 [ 45.922642][ T4091] loop4: detected capacity change from 0 to 512 [ 46.079377][ T4091] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 46.082295][ T4104] loop2: detected capacity change from 0 to 1024 [ 46.094607][ T4091] ext4 filesystem being mounted at /47/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 46.116913][ T4106] loop1: detected capacity change from 0 to 256 [ 46.131701][ T4106] vfat: Unknown parameter 'syzkaller' [ 46.146182][ T4091] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 46.217916][ T4119] loop1: detected capacity change from 0 to 1024 [ 46.219457][ T4104] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.251011][ T4119] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.281784][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.333170][ T4129] loop3: detected capacity change from 0 to 512 [ 46.356509][ T4129] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.258: bg 0: block 248: padding at end of block bitmap is not set [ 46.358997][ T4131] 9pnet: Could not find request transport: f„zÒî|îÓ0MñµÞ0ÌN¦[íoHµ»¦ÈdkMÐ:¼ñF÷ ÓŽã4x€vh'¯·ÿÀÊö°J*jyìæòy‚ædÊü [ 46.386972][ T4129] EXT4-fs error (device loop3): ext4_acquire_dquot:6927: comm syz.3.258: Failed to acquire dquot type 1 [ 46.400491][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.401016][ T4129] EXT4-fs (loop3): 1 truncate cleaned up [ 46.417724][ T4129] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.430682][ T4129] ext4 filesystem being mounted at /50/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 46.487649][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.493786][ T4140] loop2: detected capacity change from 0 to 256 [ 46.497099][ T1425] EXT4-fs error (device loop3): ext4_release_dquot:6950: comm kworker/u8:5: Failed to release dquot type 1 [ 46.503490][ T4140] vfat: Unknown parameter 'syzkaller' [ 46.612350][ T4138] loop4: detected capacity change from 0 to 8192 [ 46.639303][ T4138] FAULT_INJECTION: forcing a failure. [ 46.639303][ T4138] name failslab, interval 1, probability 0, space 0, times 0 [ 46.652017][ T4138] CPU: 1 UID: 0 PID: 4138 Comm: syz.4.261 Not tainted 6.14.0-rc2-syzkaller-00303-gad1b832bf1cf #0 [ 46.652110][ T4138] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 46.652125][ T4138] Call Trace: [ 46.652134][ T4138] [ 46.652143][ T4138] dump_stack_lvl+0xf2/0x150 [ 46.652177][ T4138] dump_stack+0x15/0x1a [ 46.652203][ T4138] should_fail_ex+0x24a/0x260 [ 46.652240][ T4138] should_failslab+0x8f/0xb0 [ 46.652296][ T4138] kmem_cache_alloc_noprof+0x52/0x320 [ 46.652332][ T4138] ? mm_alloc+0x2b/0xa0 [ 46.652363][ T4138] mm_alloc+0x2b/0xa0 [ 46.652437][ T4138] alloc_bprm+0x21a/0x680 [ 46.652470][ T4138] do_execveat_common+0x12b/0x7e0 [ 46.652507][ T4138] __x64_sys_execve+0x5a/0x70 [ 46.652538][ T4138] x64_sys_call+0x1333/0x2dc0 [ 46.652569][ T4138] do_syscall_64+0xc9/0x1c0 [ 46.652669][ T4138] ? clear_bhb_loop+0x55/0xb0 [ 46.652697][ T4138] ? clear_bhb_loop+0x55/0xb0 [ 46.652729][ T4138] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 46.652848][ T4138] RIP: 0033:0x7fa27878cde9 [ 46.652867][ T4138] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 46.652955][ T4138] RSP: 002b:00007fa276df7038 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 46.652975][ T4138] RAX: ffffffffffffffda RBX: 00007fa2789a5fa0 RCX: 00007fa27878cde9 [ 46.652988][ T4138] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000400000000040 [ 46.653008][ T4138] RBP: 00007fa276df7090 R08: 0000000000000000 R09: 0000000000000000 [ 46.653021][ T4138] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 46.653035][ T4138] R13: 0000000000000000 R14: 00007fa2789a5fa0 R15: 00007fffd00effb8 [ 46.653058][ T4138] [ 46.881122][ T4157] loop3: detected capacity change from 0 to 1024 [ 46.911426][ T4165] 9pnet: Could not find request transport: f„zÒî|îÓ0MñµÞ0ÌN¦[íoHµ»¦ÈdkMÐ:¼ñF÷ ÓŽã4x€vh'¯·ÿÀÊö°J*jyìæòy‚ædÊü [ 46.944006][ T4157] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.999809][ T4172] loop1: detected capacity change from 0 to 2048 [ 47.060321][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.071132][ T4172] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.089205][ T4180] 9pnet_fd: Insufficient options for proto=fd [ 47.116369][ T4182] loop3: detected capacity change from 0 to 256 [ 47.125630][ T4182] vfat: Unknown parameter 'syzkaller' [ 47.146782][ T4172] netlink: 8 bytes leftover after parsing attributes in process `syz.1.274'. [ 47.171429][ T4172] bond1: entered promiscuous mode [ 47.176595][ T4172] bond1: entered allmulticast mode [ 47.184224][ T4172] 8021q: adding VLAN 0 to HW filter on device bond1 [ 47.205254][ T4189] loop0: detected capacity change from 0 to 1024 [ 47.221642][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.233912][ T4189] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.255134][ T4193] loop3: detected capacity change from 0 to 512 [ 47.289277][ T4193] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.283: bg 0: block 248: padding at end of block bitmap is not set [ 47.295748][ T4189] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 47.310717][ T4193] EXT4-fs error (device loop3): ext4_acquire_dquot:6927: comm syz.3.283: Failed to acquire dquot type 1 [ 47.330508][ T4193] EXT4-fs (loop3): 1 truncate cleaned up [ 47.334528][ T4189] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 47.336764][ T4193] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.348514][ T4189] EXT4-fs (loop0): This should not happen!! Data will be lost [ 47.348514][ T4189] [ 47.361261][ T4193] ext4 filesystem being mounted at /56/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 47.370699][ T4189] EXT4-fs (loop0): Total free blocks count 0 [ 47.370755][ T4189] EXT4-fs (loop0): Free/Dirty block details [ 47.370768][ T4189] EXT4-fs (loop0): free_blocks=68451041280 [ 47.370783][ T4189] EXT4-fs (loop0): dirty_blocks=16 [ 47.370796][ T4189] EXT4-fs (loop0): Block reservation details [ 47.370809][ T4189] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 47.419308][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.428798][ T28] __quota_error: 255 callbacks suppressed [ 47.428813][ T28] Quota error (device loop3): do_check_range: Getting block 0 out of range 1-5 [ 47.443897][ T28] EXT4-fs error (device loop3): ext4_release_dquot:6950: comm kworker/u8:1: Failed to release dquot type 1 [ 47.486235][ T3297] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.520320][ T4204] loop3: detected capacity change from 0 to 1024 [ 47.542827][ T4210] 9pnet: Could not find request transport: f„zÒî|îÓ0MñµÞ0ÌN¦[íoHµ»¦ÈdkMÐ:¼ñF÷ ÓŽã4x€vh'¯·ÿÀÊö°J*jyìæòy‚ædÊü [ 47.573695][ T4204] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.586965][ T4212] loop2: detected capacity change from 0 to 512 [ 47.612337][ T4212] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 47.629380][ T4218] loop1: detected capacity change from 0 to 256 [ 47.631489][ T4212] ext4 filesystem being mounted at /50/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 47.635987][ T4218] vfat: Unknown parameter 'syzkaller' [ 47.653692][ T4212] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 47.750328][ T4227] netlink: 132 bytes leftover after parsing attributes in process `syz.2.293'. [ 47.761123][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.805677][ T29] audit: type=1326 audit(1739719545.538:1199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4231 comm="syz.2.298" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5e0e32cde9 code=0x0 [ 47.884608][ T29] audit: type=1326 audit(1739719545.618:1200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4241 comm="syz.4.300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa27878cde9 code=0x7ffc0000 [ 47.929339][ T29] audit: type=1326 audit(1739719545.618:1201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4241 comm="syz.4.300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=158 compat=0 ip=0x7fa27878cde9 code=0x7ffc0000 [ 47.952980][ T29] audit: type=1326 audit(1739719545.618:1202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4241 comm="syz.4.300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa27878cde9 code=0x7ffc0000 [ 47.976557][ T29] audit: type=1326 audit(1739719545.618:1203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4241 comm="syz.4.300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa27878cde9 code=0x7ffc0000 [ 48.026934][ T4252] loop1: detected capacity change from 0 to 512 [ 48.054413][ T29] audit: type=1400 audit(1739719545.788:1204): avc: denied { create } for pid=4253 comm="syz.4.305" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 48.153386][ T4268] netlink: 24 bytes leftover after parsing attributes in process `syz.0.308'. [ 48.153947][ T29] audit: type=1326 audit(1739719545.888:1205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4267 comm="syz.0.308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83bc82cde9 code=0x7ffc0000 [ 48.173450][ T4259] loop4: detected capacity change from 0 to 1024 [ 48.185906][ T29] audit: type=1326 audit(1739719545.888:1206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4267 comm="syz.0.308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83bc82cde9 code=0x7ffc0000 [ 48.185959][ T29] audit: type=1326 audit(1739719545.888:1207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4267 comm="syz.0.308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f83bc82cde9 code=0x7ffc0000 [ 48.236102][ T4252] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 48.253031][ T4252] ext4 filesystem being mounted at /59/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 48.264374][ T4252] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 48.300971][ T4268] netlink: 16 bytes leftover after parsing attributes in process `syz.0.308'. [ 48.309908][ T4268] netlink: 16 bytes leftover after parsing attributes in process `syz.0.308'. [ 48.318918][ T4268] netlink: 16 bytes leftover after parsing attributes in process `syz.0.308'. [ 48.319034][ T4259] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.579957][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.595395][ T4282] 9pnet: Could not find request transport: fd0x0000000000000004 [ 48.663913][ T4285] loop0: detected capacity change from 0 to 256 [ 48.670620][ T4285] vfat: Unknown parameter 'syzkaller' [ 48.686701][ T4250] Set syz1 is full, maxelem 65536 reached [ 48.758156][ T4294] loop2: detected capacity change from 0 to 256 [ 48.764715][ T4294] vfat: Unknown parameter 'syzkaller' [ 48.794859][ T4300] loop0: detected capacity change from 0 to 256 [ 48.810181][ T4302] loop1: detected capacity change from 0 to 2048 [ 48.825882][ T4300] vfat: Unknown parameter 'syzkaller' [ 48.875011][ T4302] EXT4-fs: Ignoring removed mblk_io_submit option [ 48.881650][ T4302] EXT4-fs: Ignoring removed i_version option [ 48.918942][ T4311] 9pnet_fd: Insufficient options for proto=fd [ 48.934879][ T4302] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.949292][ T4314] 9pnet: Could not find request transport: fd0x0000000000000004 [ 48.968725][ T4302] FAULT_INJECTION: forcing a failure. [ 48.968725][ T4302] name failslab, interval 1, probability 0, space 0, times 0 [ 48.981663][ T4302] CPU: 0 UID: 0 PID: 4302 Comm: syz.1.319 Not tainted 6.14.0-rc2-syzkaller-00303-gad1b832bf1cf #0 [ 48.981765][ T4302] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 48.981779][ T4302] Call Trace: [ 48.981787][ T4302] [ 48.981870][ T4302] dump_stack_lvl+0xf2/0x150 [ 48.981900][ T4302] dump_stack+0x15/0x1a [ 48.981969][ T4302] should_fail_ex+0x24a/0x260 [ 48.982006][ T4302] should_failslab+0x8f/0xb0 [ 48.982097][ T4302] kmem_cache_alloc_noprof+0x52/0x320 [ 48.982120][ T4302] ? __es_insert_extent+0x563/0xed0 [ 48.982150][ T4302] __es_insert_extent+0x563/0xed0 [ 48.982188][ T4302] ext4_es_insert_extent+0x45a/0x1c60 [ 48.982230][ T4302] ext4_map_blocks+0x8b9/0xd20 [ 48.982289][ T4302] ext4_iomap_begin+0x4a9/0x5d0 [ 48.982407][ T4302] ? __pfx_ext4_iomap_begin+0x10/0x10 [ 48.982519][ T4302] iomap_iter+0x402/0x840 [ 48.982552][ T4302] __iomap_dio_rw+0x6e9/0x1110 [ 48.982627][ T4302] ? __pfx_ext4_xattr_security_get+0x10/0x10 [ 48.982709][ T4302] iomap_dio_rw+0x40/0x90 [ 48.982736][ T4302] ext4_file_write_iter+0xb71/0xf20 [ 48.982835][ T4302] do_iter_readv_writev+0x403/0x4b0 [ 48.982925][ T4302] vfs_writev+0x2d9/0x880 [ 48.982944][ T4302] ? proc_fail_nth_write+0x12a/0x150 [ 48.982981][ T4302] __se_sys_pwritev2+0x100/0x1c0 [ 48.983071][ T4302] __x64_sys_pwritev2+0x78/0x90 [ 48.983142][ T4302] x64_sys_call+0x2afe/0x2dc0 [ 48.983176][ T4302] do_syscall_64+0xc9/0x1c0 [ 48.983208][ T4302] ? clear_bhb_loop+0x55/0xb0 [ 48.983239][ T4302] ? clear_bhb_loop+0x55/0xb0 [ 48.983351][ T4302] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 48.983384][ T4302] RIP: 0033:0x7f00492dcde9 [ 48.983403][ T4302] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 48.983425][ T4302] RSP: 002b:00007f0047947038 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 48.983523][ T4302] RAX: ffffffffffffffda RBX: 00007f00494f5fa0 RCX: 00007f00492dcde9 [ 48.983548][ T4302] RDX: 0000000000000001 RSI: 0000400000000240 RDI: 0000000000000004 [ 48.983563][ T4302] RBP: 00007f0047947090 R08: 0000000000000000 R09: 0000000000000000 [ 48.983635][ T4302] R10: 0000000000001400 R11: 0000000000000246 R12: 0000000000000002 [ 48.983650][ T4302] R13: 0000000000000000 R14: 00007f00494f5fa0 R15: 00007ffdfcff7688 [ 48.983672][ T4302] [ 49.257032][ T4328] loop0: detected capacity change from 0 to 256 [ 49.263721][ T4328] vfat: Unknown parameter 'syzkaller' [ 49.298188][ T4332] loop0: detected capacity change from 0 to 512 [ 49.310977][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.330266][ T4332] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.330: bg 0: block 248: padding at end of block bitmap is not set [ 49.368826][ T4341] loop1: detected capacity change from 0 to 512 [ 49.376962][ T4332] EXT4-fs error (device loop0): ext4_acquire_dquot:6927: comm syz.0.330: Failed to acquire dquot type 1 [ 49.389668][ T4341] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 49.406114][ T4341] EXT4-fs (loop1): 1 truncate cleaned up [ 49.407054][ T4332] EXT4-fs (loop0): 1 truncate cleaned up [ 49.412330][ T4341] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.418556][ T4332] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.430899][ T4339] bridge_slave_1: left allmulticast mode [ 49.443288][ T4332] ext4 filesystem being mounted at /86/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 49.448623][ T4339] bridge_slave_1: left promiscuous mode [ 49.464764][ T4339] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.500160][ T4339] bridge_slave_0: left allmulticast mode [ 49.506085][ T4339] bridge_slave_0: left promiscuous mode [ 49.511789][ T4339] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.535313][ T4344] blackhole_netdev_xmit(): Dropping skb. [ 49.543312][ T3297] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.553051][ T36] EXT4-fs error (device loop0): ext4_release_dquot:6950: comm kworker/u8:2: Failed to release dquot type 1 [ 49.633636][ T4347] loop0: detected capacity change from 0 to 256 [ 49.643219][ T4347] vfat: Unknown parameter 'syzkaller' [ 49.718374][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.783594][ T4351] 9pnet: Could not find request transport: fd0x0000000000000004 [ 49.802591][ T4354] 9pnet_fd: Insufficient options for proto=fd [ 49.849232][ T4358] loop2: detected capacity change from 0 to 512 [ 49.904920][ T4358] EXT4-fs: Ignoring removed mblk_io_submit option [ 50.001130][ T4358] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.067844][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.100273][ T4374] loop4: detected capacity change from 0 to 512 [ 50.101954][ T4376] 9pnet: Could not find request transport: f„zÒî|îÓ0MñµÞ0ÌN¦[íoHµ»¦ÈdkMÐ:¼ñF÷ ÓŽã4x€vh'¯·ÿÀÊö°J*jyìæòy‚ædÊü [ 50.120436][ T4377] __nla_validate_parse: 37 callbacks suppressed [ 50.120516][ T4377] netlink: 14 bytes leftover after parsing attributes in process `syz.3.343'. [ 50.139844][ T4374] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.344: bg 0: block 248: padding at end of block bitmap is not set [ 50.154766][ T4374] EXT4-fs error (device loop4): ext4_acquire_dquot:6927: comm syz.4.344: Failed to acquire dquot type 1 [ 50.190004][ T4374] EXT4-fs (loop4): 1 truncate cleaned up [ 50.202892][ T4374] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.218965][ T4374] ext4 filesystem being mounted at /62/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 50.243673][ T4381] netlink: 132 bytes leftover after parsing attributes in process `syz.2.346'. [ 50.260469][ T3322] EXT4-fs error (device loop4): ext4_release_dquot:6950: comm kworker/u8:6: Failed to release dquot type 1 [ 50.282130][ T4386] 9pnet_fd: Insufficient options for proto=fd [ 50.488212][ T4402] netlink: 16 bytes leftover after parsing attributes in process `syz.3.354'. [ 50.497215][ T4402] netlink: 16 bytes leftover after parsing attributes in process `syz.3.354'. [ 50.506329][ T4402] netlink: 16 bytes leftover after parsing attributes in process `syz.3.354'. [ 50.506791][ T4404] loop2: detected capacity change from 0 to 2048 [ 50.522465][ T4404] EXT4-fs: Ignoring removed mblk_io_submit option [ 50.529171][ T4404] EXT4-fs: Ignoring removed nomblk_io_submit option [ 50.541257][ T4402] netlink: 16 bytes leftover after parsing attributes in process `syz.3.354'. [ 50.549801][ T4404] EXT4-fs: Mount option(s) incompatible with ext2 [ 50.550211][ T4402] netlink: 16 bytes leftover after parsing attributes in process `syz.3.354'. [ 50.565551][ T4402] netlink: 16 bytes leftover after parsing attributes in process `syz.3.354'. [ 50.623904][ T4402] netlink: 16 bytes leftover after parsing attributes in process `syz.3.354'. [ 50.632958][ T4402] netlink: 16 bytes leftover after parsing attributes in process `syz.3.354'. [ 50.645256][ T4409] 9pnet: Could not find request transport: f„zÒî|îÓ0MñµÞ0ÌN¦[íoHµ»¦ÈdkMÐ:¼ñF÷ ÓŽã4x€vh'¯·ÿÀÊö°J*jyìæòy‚ædÊü [ 50.748351][ T4412] loop1: detected capacity change from 0 to 512 [ 50.788965][ T4412] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.358: bg 0: block 248: padding at end of block bitmap is not set [ 50.807130][ T4412] EXT4-fs error (device loop1): ext4_acquire_dquot:6927: comm syz.1.358: Failed to acquire dquot type 1 [ 50.896327][ T4412] EXT4-fs (loop1): 1 truncate cleaned up [ 50.902796][ T4412] ext4 filesystem being mounted at /66/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 50.978524][ T4436] loop3: detected capacity change from 0 to 512 [ 50.988383][ T4436] EXT4-fs: Ignoring removed mblk_io_submit option [ 51.018225][ T3322] EXT4-fs error (device loop1): ext4_release_dquot:6950: comm kworker/u8:6: Failed to release dquot type 1 [ 51.503687][ T4453] 9pnet: Could not find request transport: f„zÒî|îÓ0MñµÞ0ÌN¦[íoHµ»¦ÈdkMÐ:¼ñF÷ ÓŽã4x€vh'¯·ÿÀÊö°J*jyìæòy‚ædÊü [ 51.642783][ T4427] Set syz1 is full, maxelem 65536 reached [ 51.704762][ T4463] loop1: detected capacity change from 0 to 512 [ 51.715981][ T4463] ext4 filesystem being mounted at /69/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 52.467358][ T4478] 9pnet_fd: Insufficient options for proto=fd [ 52.571139][ T4480] loop0: detected capacity change from 0 to 256 [ 52.593504][ T4480] vfat: Unknown parameter 'syzkaller' [ 52.680228][ T4483] loop4: detected capacity change from 0 to 256 [ 52.686619][ T4483] vfat: Unknown parameter 'syzkaller' [ 52.902865][ T4494] loop4: detected capacity change from 0 to 512 [ 52.922208][ T4494] EXT4-fs: Ignoring removed mblk_io_submit option [ 52.961913][ T29] kauditd_printk_skb: 636 callbacks suppressed [ 52.961930][ T29] audit: type=1326 audit(1739719550.698:1835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4493 comm="syz.4.389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa27878cde9 code=0x7ffc0000 [ 53.063077][ T29] audit: type=1326 audit(1739719550.738:1836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4493 comm="syz.4.389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa27878cde9 code=0x7ffc0000 [ 53.086804][ T29] audit: type=1326 audit(1739719550.738:1837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4493 comm="syz.4.389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa27878cde9 code=0x7ffc0000 [ 53.113555][ T29] audit: type=1326 audit(1739719550.738:1838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4493 comm="syz.4.389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa27878cde9 code=0x7ffc0000 [ 53.137226][ T29] audit: type=1326 audit(1739719550.738:1839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4493 comm="syz.4.389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa27878cde9 code=0x7ffc0000 [ 53.160831][ T29] audit: type=1326 audit(1739719550.738:1840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4493 comm="syz.4.389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7fa27878cde9 code=0x7ffc0000 [ 53.184003][ T29] audit: type=1326 audit(1739719550.748:1841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4493 comm="syz.4.389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa27878cde9 code=0x7ffc0000 [ 53.207438][ T29] audit: type=1326 audit(1739719550.748:1842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4493 comm="syz.4.389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=77 compat=0 ip=0x7fa27878cde9 code=0x7ffc0000 [ 53.230892][ T29] audit: type=1326 audit(1739719550.748:1843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4493 comm="syz.4.389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa27878cde9 code=0x7ffc0000 [ 53.254531][ T29] audit: type=1326 audit(1739719550.748:1844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4493 comm="syz.4.389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa27878cde9 code=0x7ffc0000 [ 53.629184][ T4504] bridge_slave_1: left allmulticast mode [ 53.634929][ T4504] bridge_slave_1: left promiscuous mode [ 53.640716][ T4504] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.651639][ T4509] loop3: detected capacity change from 0 to 512 [ 53.664835][ T4504] bridge_slave_0: left allmulticast mode [ 53.670591][ T4504] bridge_slave_0: left promiscuous mode [ 53.676526][ T4504] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.688620][ T4509] ext4 filesystem being mounted at /81/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 53.719499][ T4515] SELinux: Context : is not valid (left unmapped). [ 53.898657][ T4520] 9pnet_fd: Insufficient options for proto=fd [ 54.360369][ T4541] loop2: detected capacity change from 0 to 512 [ 54.393827][ T4542] loop3: detected capacity change from 0 to 1024 [ 54.402084][ T4541] EXT4-fs: Ignoring removed mblk_io_submit option [ 54.559575][ T4549] 9pnet_fd: Insufficient options for proto=fd [ 54.685204][ T4564] 9pnet_fd: Insufficient options for proto=fd [ 54.904446][ T4573] loop4: detected capacity change from 0 to 1024 [ 54.939958][ T4579] loop3: detected capacity change from 0 to 1024 [ 54.993910][ T4583] 9pnet_fd: Insufficient options for proto=fd [ 55.039595][ T4585] loop3: detected capacity change from 0 to 256 [ 55.055169][ T4585] vfat: Unknown parameter 'syzkaller' [ 55.111894][ T4590] loop4: detected capacity change from 0 to 1024 [ 55.209202][ T4590] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 55.249074][ T4590] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 55.260011][ T4597] __nla_validate_parse: 22 callbacks suppressed [ 55.260166][ T4597] netlink: 12 bytes leftover after parsing attributes in process `syz.0.425'. [ 55.261331][ T4590] EXT4-fs (loop4): This should not happen!! Data will be lost [ 55.261331][ T4590] [ 55.261350][ T4590] EXT4-fs (loop4): Total free blocks count 0 [ 55.292421][ T4590] EXT4-fs (loop4): Free/Dirty block details [ 55.298427][ T4590] EXT4-fs (loop4): free_blocks=68451041280 [ 55.304381][ T4590] EXT4-fs (loop4): dirty_blocks=16 [ 55.309979][ T4590] EXT4-fs (loop4): Block reservation details [ 55.316136][ T4590] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 55.365049][ T4604] netlink: 14 bytes leftover after parsing attributes in process `syz.2.427'. [ 55.404979][ T4606] loop3: detected capacity change from 0 to 1024 [ 55.546138][ T4622] loop3: detected capacity change from 0 to 512 [ 55.553085][ T4622] EXT4-fs: Ignoring removed mblk_io_submit option [ 55.646261][ T4632] SELinux: syz.2.439 (4632) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 55.688707][ T4635] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.435'. [ 55.706935][ T4633] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.435'. [ 55.879467][ T4644] loop0: detected capacity change from 0 to 1024 [ 55.967266][ T4652] loop0: detected capacity change from 0 to 1024 [ 56.531591][ T4667] netlink: 12 bytes leftover after parsing attributes in process `syz.4.450'. [ 56.723018][ T4669] netlink: 132 bytes leftover after parsing attributes in process `syz.2.452'. [ 56.764983][ T4671] 9pnet_fd: Insufficient options for proto=fd [ 56.951101][ T4680] FAULT_INJECTION: forcing a failure. [ 56.951101][ T4680] name failslab, interval 1, probability 0, space 0, times 0 [ 56.963822][ T4680] CPU: 0 UID: 0 PID: 4680 Comm: syz.1.457 Not tainted 6.14.0-rc2-syzkaller-00303-gad1b832bf1cf #0 [ 56.963848][ T4680] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 56.963860][ T4680] Call Trace: [ 56.963867][ T4680] [ 56.963874][ T4680] dump_stack_lvl+0xf2/0x150 [ 56.963903][ T4680] dump_stack+0x15/0x1a [ 56.963938][ T4680] should_fail_ex+0x24a/0x260 [ 56.963975][ T4680] should_failslab+0x8f/0xb0 [ 56.964012][ T4680] kmem_cache_alloc_lru_noprof+0x57/0x320 [ 56.964036][ T4680] ? __d_alloc+0x3d/0x350 [ 56.964096][ T4680] __d_alloc+0x3d/0x350 [ 56.964120][ T4680] d_alloc_pseudo+0x1e/0x80 [ 56.964196][ T4680] alloc_file_pseudo+0x73/0x160 [ 56.964220][ T4680] __shmem_file_setup+0x1bb/0x1f0 [ 56.964335][ T4680] shmem_file_setup+0x3b/0x50 [ 56.964374][ T4680] __se_sys_memfd_create+0x2e1/0x5a0 [ 56.964407][ T4680] __x64_sys_memfd_create+0x31/0x40 [ 56.964501][ T4680] x64_sys_call+0x2d4c/0x2dc0 [ 56.964533][ T4680] do_syscall_64+0xc9/0x1c0 [ 56.964640][ T4680] ? clear_bhb_loop+0x55/0xb0 [ 56.964679][ T4680] ? clear_bhb_loop+0x55/0xb0 [ 56.964736][ T4680] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 56.964766][ T4680] RIP: 0033:0x7f00492dcde9 [ 56.964784][ T4680] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 56.964805][ T4680] RSP: 002b:00007f0047946e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 56.964868][ T4680] RAX: ffffffffffffffda RBX: 0000000000000532 RCX: 00007f00492dcde9 [ 56.964883][ T4680] RDX: 00007f0047946ef0 RSI: 0000000000000000 RDI: 00007f004935ec51 [ 56.964898][ T4680] RBP: 0000400000000dc0 R08: 00007f0047946bb7 R09: 00007f0047946e40 [ 56.964913][ T4680] R10: 000000000000000a R11: 0000000000000202 R12: 0000400000000040 [ 56.964927][ T4680] R13: 00007f0047946ef0 R14: 00007f0047946eb0 R15: 0000400000000840 [ 56.965010][ T4680] [ 57.277148][ T4693] netfs: Couldn't get user pages (rc=-14) [ 57.340898][ T4695] netlink: 12 bytes leftover after parsing attributes in process `syz.0.463'. [ 57.451706][ T4702] netlink: 16 bytes leftover after parsing attributes in process `syz.0.465'. [ 57.460771][ T4702] netlink: 32 bytes leftover after parsing attributes in process `syz.0.465'. [ 57.526846][ T3174] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 57.544855][ T3174] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz0] on syz0 [ 57.600595][ T4710] netlink: 132 bytes leftover after parsing attributes in process `syz.1.468'. [ 57.643728][ T4715] loop3: detected capacity change from 0 to 1024 [ 57.770640][ T4713] loop0: detected capacity change from 0 to 8192 [ 57.777937][ T4715] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 57.814087][ T4715] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 57.826490][ T4715] EXT4-fs (loop3): This should not happen!! Data will be lost [ 57.826490][ T4715] [ 57.836689][ T4715] EXT4-fs (loop3): Total free blocks count 0 [ 57.842734][ T4715] EXT4-fs (loop3): Free/Dirty block details [ 57.848684][ T4715] EXT4-fs (loop3): free_blocks=68451041280 [ 57.854553][ T4715] EXT4-fs (loop3): dirty_blocks=16 [ 57.855804][ T4713] FAT-fs (loop0): error, invalid access to FAT (entry 0x00008945) [ 57.859713][ T4715] EXT4-fs (loop3): Block reservation details [ 57.867535][ T4713] FAT-fs (loop0): Filesystem has been set read-only [ 57.873492][ T4715] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 57.880380][ T4713] FAT-fs (loop0): error, invalid access to FAT (entry 0x00008945) [ 57.894221][ T4713] FAT-fs (loop0): error, invalid access to FAT (entry 0x00008945) [ 57.902186][ T4713] FAT-fs (loop0): error, invalid access to FAT (entry 0x00008945) [ 57.927667][ T4713] syz.0.470: attempt to access beyond end of device [ 57.927667][ T4713] loop0: rw=0, sector=35211, nr_sectors = 1 limit=8192 [ 57.941146][ T4713] Buffer I/O error on dev loop0, logical block 35211, async page read [ 57.949372][ T4713] FAT-fs (loop0): error, invalid access to FAT (entry 0x00008945) [ 57.983542][ T4713] FAT-fs (loop0): error, invalid access to FAT (entry 0x00008945) [ 57.991581][ T4713] FAT-fs (loop0): error, invalid access to FAT (entry 0x00008945) [ 57.999520][ T4713] FAT-fs (loop0): error, invalid access to FAT (entry 0x00008945) [ 58.007446][ T4713] FAT-fs (loop0): error, invalid access to FAT (entry 0x00008945) [ 58.015388][ T4713] FAT-fs (loop0): error, invalid access to FAT (entry 0x00008945) [ 58.023229][ T4713] FAT-fs (loop0): error, invalid access to FAT (entry 0x00008945) [ 58.023284][ T4713] FAT-fs (loop0): error, invalid access to FAT (entry 0x00008945) [ 58.023350][ T4713] FAT-fs (loop0): error, invalid access to FAT (entry 0x00008945) [ 58.023373][ T4713] FAT-fs (loop0): error, invalid access to FAT (entry 0x00008945) [ 58.024668][ T4713] FAT-fs (loop0): error, invalid access to FAT (entry 0x00008945) [ 58.024689][ T4713] FAT-fs (loop0): error, invalid access to FAT (entry 0x00008945) [ 58.036041][ T4713] FAT-fs (loop0): error, invalid access to FAT (entry 0x00008945) [ 58.049359][ T4719] tipc: Started in network mode [ 58.056422][ T4713] FAT-fs (loop0): error, invalid access to FAT (entry 0x00008945) [ 58.056472][ T4713] FAT-fs (loop0): error, invalid access to FAT (entry 0x00008945) [ 58.056493][ T4713] FAT-fs (loop0): error, invalid access to FAT (entry 0x00008945) [ 58.058051][ T4713] syz.0.470: attempt to access beyond end of device [ 58.058051][ T4713] loop0: rw=0, sector=35211, nr_sectors = 1 limit=8192 [ 58.065157][ T4719] tipc: Node identity ac14140f, cluster identity 4711 [ 58.072654][ T4713] Buffer I/O error on dev loop0, logical block 35211, async page read [ 58.125679][ T29] kauditd_printk_skb: 618 callbacks suppressed [ 58.125700][ T29] audit: type=1400 audit(1739719555.858:2463): avc: denied { unmount } for pid=3304 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 58.129215][ T4719] tipc: New replicast peer: 10.1.1.2 [ 58.181953][ T4719] tipc: Enabled bearer , priority 10 [ 58.191828][ T4733] loop3: detected capacity change from 0 to 256 [ 58.192053][ T4733] vfat: Unknown parameter 'syzkaller' [ 58.299642][ T4746] FAULT_INJECTION: forcing a failure. [ 58.299642][ T4746] name failslab, interval 1, probability 0, space 0, times 0 [ 58.312416][ T4746] CPU: 1 UID: 0 PID: 4746 Comm: syz.0.478 Not tainted 6.14.0-rc2-syzkaller-00303-gad1b832bf1cf #0 [ 58.312445][ T4746] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 58.312460][ T4746] Call Trace: [ 58.312468][ T4746] [ 58.312477][ T4746] dump_stack_lvl+0xf2/0x150 [ 58.312511][ T4746] dump_stack+0x15/0x1a [ 58.312537][ T4746] should_fail_ex+0x24a/0x260 [ 58.312573][ T4746] should_failslab+0x8f/0xb0 [ 58.312609][ T4746] kmem_cache_alloc_noprof+0x52/0x320 [ 58.312640][ T4746] ? vm_area_dup+0x2c/0x130 [ 58.312670][ T4746] vm_area_dup+0x2c/0x130 [ 58.312697][ T4746] __split_vma+0xf7/0x6a0 [ 58.312728][ T4746] vms_gather_munmap_vmas+0x2a5/0x7a0 [ 58.312776][ T4746] mmap_region+0x464/0x1620 [ 58.312799][ T4746] ? __rcu_read_unlock+0x4e/0x70 [ 58.312826][ T4746] ? mntput_no_expire+0x70/0x3d0 [ 58.312859][ T4746] ? mntput+0x49/0x70 [ 58.312884][ T4746] ? terminate_walk+0x260/0x280 [ 58.312942][ T4746] do_mmap+0x98a/0xc30 [ 58.312980][ T4746] vm_mmap_pgoff+0x16d/0x2d0 [ 58.313017][ T4746] ksys_mmap_pgoff+0xd0/0x330 [ 58.313046][ T4746] ? fpregs_assert_state_consistent+0x83/0xa0 [ 58.313070][ T4746] x64_sys_call+0x1940/0x2dc0 [ 58.313101][ T4746] do_syscall_64+0xc9/0x1c0 [ 58.313133][ T4746] ? clear_bhb_loop+0x55/0xb0 [ 58.313160][ T4746] ? clear_bhb_loop+0x55/0xb0 [ 58.313190][ T4746] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 58.313222][ T4746] RIP: 0033:0x7f83bc82cde9 [ 58.313239][ T4746] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 58.313260][ T4746] RSP: 002b:00007f83bae97038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 58.313281][ T4746] RAX: ffffffffffffffda RBX: 00007f83bca45fa0 RCX: 00007f83bc82cde9 [ 58.313296][ T4746] RDX: 0000000000000000 RSI: 0000000000c00000 RDI: 0000400000001000 [ 58.313307][ T4746] RBP: 00007f83bae97090 R08: ffffffffffffffff R09: 0000000000000000 [ 58.313319][ T4746] R10: 0000000000003032 R11: 0000000000000246 R12: 0000000000000001 [ 58.313330][ T4746] R13: 0000000000000000 R14: 00007f83bca45fa0 R15: 00007ffea49573f8 [ 58.313350][ T4746] [ 58.560684][ T29] audit: type=1326 audit(1739719556.268:2464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4747 comm="syz.2.480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e0e32cde9 code=0x7ffc0000 [ 58.584344][ T29] audit: type=1326 audit(1739719556.268:2465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4747 comm="syz.2.480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f5e0e32cde9 code=0x7ffc0000 [ 58.607828][ T29] audit: type=1326 audit(1739719556.268:2466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4747 comm="syz.2.480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e0e32cde9 code=0x7ffc0000 [ 58.631286][ T29] audit: type=1326 audit(1739719556.268:2467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4747 comm="syz.2.480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=440 compat=0 ip=0x7f5e0e32cde9 code=0x7ffc0000 [ 58.654806][ T29] audit: type=1326 audit(1739719556.268:2468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4747 comm="syz.2.480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e0e32cde9 code=0x7ffc0000 [ 58.678225][ T29] audit: type=1326 audit(1739719556.268:2469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4747 comm="syz.2.480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5e0e32cde9 code=0x7ffc0000 [ 58.701669][ T29] audit: type=1326 audit(1739719556.278:2470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4747 comm="syz.2.480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e0e32cde9 code=0x7ffc0000 [ 58.725320][ T29] audit: type=1326 audit(1739719556.278:2471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4747 comm="syz.2.480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5e0e32cde9 code=0x7ffc0000 [ 58.749516][ T29] audit: type=1326 audit(1739719556.278:2472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4747 comm="syz.2.480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e0e32cde9 code=0x7ffc0000 [ 58.782625][ T4753] loop0: detected capacity change from 0 to 128 [ 58.854492][ T4753] syz.0.481: attempt to access beyond end of device [ 58.854492][ T4753] loop0: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 58.887015][ T4753] syz.0.481: attempt to access beyond end of device [ 58.887015][ T4753] loop0: rw=524288, sector=145, nr_sectors = 224 limit=128 [ 58.901401][ T4753] syz.0.481: attempt to access beyond end of device [ 58.901401][ T4753] loop0: rw=0, sector=145, nr_sectors = 8 limit=128 [ 58.915122][ T4753] syz.0.481: attempt to access beyond end of device [ 58.915122][ T4753] loop0: rw=0, sector=145, nr_sectors = 8 limit=128 [ 58.928468][ T4753] syz.0.481: attempt to access beyond end of device [ 58.928468][ T4753] loop0: rw=0, sector=145, nr_sectors = 8 limit=128 [ 58.942246][ T4753] syz.0.481: attempt to access beyond end of device [ 58.942246][ T4753] loop0: rw=0, sector=145, nr_sectors = 8 limit=128 [ 58.956422][ T4753] syz.0.481: attempt to access beyond end of device [ 58.956422][ T4753] loop0: rw=0, sector=145, nr_sectors = 8 limit=128 [ 58.969705][ T4753] syz.0.481: attempt to access beyond end of device [ 58.969705][ T4753] loop0: rw=0, sector=145, nr_sectors = 8 limit=128 [ 59.030826][ T4775] 9pnet_fd: Insufficient options for proto=fd [ 59.225440][ T3374] tipc: Node number set to 2886997007 [ 59.857055][ T4795] 9pnet: Could not find request transport: 0xffffffffffffffff [ 59.930126][ T4802] 9pnet_fd: Insufficient options for proto=fd [ 59.963817][ T4804] loop3: detected capacity change from 0 to 256 [ 59.982890][ T4806] loop0: detected capacity change from 0 to 128 [ 60.103811][ T4817] loop4: detected capacity change from 0 to 1024 [ 60.481845][ T4838] 9pnet_fd: Insufficient options for proto=fd [ 60.570920][ T4841] FAULT_INJECTION: forcing a failure. [ 60.570920][ T4841] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 60.584049][ T4841] CPU: 1 UID: 0 PID: 4841 Comm: syz.2.516 Not tainted 6.14.0-rc2-syzkaller-00303-gad1b832bf1cf #0 [ 60.584078][ T4841] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 60.584091][ T4841] Call Trace: [ 60.584097][ T4841] [ 60.584103][ T4841] dump_stack_lvl+0xf2/0x150 [ 60.584162][ T4841] dump_stack+0x15/0x1a [ 60.584187][ T4841] should_fail_ex+0x24a/0x260 [ 60.584219][ T4841] should_fail+0xb/0x10 [ 60.584319][ T4841] should_fail_usercopy+0x1a/0x20 [ 60.584359][ T4841] _copy_to_user+0x20/0xa0 [ 60.584395][ T4841] simple_read_from_buffer+0xa0/0x110 [ 60.584431][ T4841] proc_fail_nth_read+0xf9/0x140 [ 60.584462][ T4841] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 60.584528][ T4841] vfs_read+0x19b/0x6f0 [ 60.584557][ T4841] ? __rcu_read_unlock+0x4e/0x70 [ 60.584579][ T4841] ? __fget_files+0x17c/0x1c0 [ 60.584615][ T4841] ksys_read+0xe8/0x1b0 [ 60.584660][ T4841] __x64_sys_read+0x42/0x50 [ 60.584687][ T4841] x64_sys_call+0x2874/0x2dc0 [ 60.584713][ T4841] do_syscall_64+0xc9/0x1c0 [ 60.584742][ T4841] ? clear_bhb_loop+0x55/0xb0 [ 60.584785][ T4841] ? clear_bhb_loop+0x55/0xb0 [ 60.584813][ T4841] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 60.584840][ T4841] RIP: 0033:0x7f5e0e32b7fc [ 60.584855][ T4841] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 60.584947][ T4841] RSP: 002b:00007f5e0c991030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 60.584966][ T4841] RAX: ffffffffffffffda RBX: 00007f5e0e545fa0 RCX: 00007f5e0e32b7fc [ 60.584978][ T4841] RDX: 000000000000000f RSI: 00007f5e0c9910a0 RDI: 0000000000000004 [ 60.584990][ T4841] RBP: 00007f5e0c991090 R08: 0000000000000000 R09: 0000000000000000 [ 60.585001][ T4841] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 60.585055][ T4841] R13: 0000000000000000 R14: 00007f5e0e545fa0 R15: 00007ffc86686238 [ 60.585074][ T4841] [ 60.874572][ T4848] loop1: detected capacity change from 0 to 256 [ 60.882089][ T4848] vfat: Unknown parameter 'syzkaller' [ 60.973047][ T4854] 9pnet_fd: Insufficient options for proto=fd [ 60.994646][ T4856] __nla_validate_parse: 21 callbacks suppressed [ 60.994660][ T4856] netlink: 12 bytes leftover after parsing attributes in process `syz.1.523'. [ 61.034912][ T4858] loop0: detected capacity change from 0 to 1024 [ 61.124256][ T4865] loop0: detected capacity change from 0 to 128 [ 61.296199][ T4875] netlink: 24 bytes leftover after parsing attributes in process `syz.4.531'. [ 61.316912][ T4874] $Hÿ: renamed from bond0 (while UP) [ 61.330694][ T4875] netlink: 16 bytes leftover after parsing attributes in process `syz.4.531'. [ 61.340099][ T4875] netlink: 16 bytes leftover after parsing attributes in process `syz.4.531'. [ 61.349046][ T4875] netlink: 16 bytes leftover after parsing attributes in process `syz.4.531'. [ 61.362622][ T4874] $Hÿ: entered promiscuous mode [ 61.367764][ T4874] bond_slave_0: entered promiscuous mode [ 61.373530][ T4874] bond_slave_1: entered promiscuous mode [ 61.395313][ T4875] netlink: 16 bytes leftover after parsing attributes in process `syz.4.531'. [ 61.404278][ T4875] netlink: 16 bytes leftover after parsing attributes in process `syz.4.531'. [ 61.413245][ T4875] netlink: 16 bytes leftover after parsing attributes in process `syz.4.531'. [ 61.450668][ T4882] sock: sock_timestamping_bind_phc: sock not bind to device [ 61.463345][ T4882] lo speed is unknown, defaulting to 1000 [ 61.469683][ T4882] lo speed is unknown, defaulting to 1000 [ 61.477538][ T4882] lo speed is unknown, defaulting to 1000 [ 61.485654][ T4882] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 61.505222][ T4882] lo speed is unknown, defaulting to 1000 [ 61.511867][ T4882] lo speed is unknown, defaulting to 1000 [ 61.520030][ T4882] lo speed is unknown, defaulting to 1000 [ 61.532803][ T4882] lo speed is unknown, defaulting to 1000 [ 61.582917][ T4875] netlink: 16 bytes leftover after parsing attributes in process `syz.4.531'. [ 61.591979][ T4875] netlink: 16 bytes leftover after parsing attributes in process `syz.4.531'. [ 61.617699][ T4882] lo speed is unknown, defaulting to 1000 [ 61.638236][ T4883] lo speed is unknown, defaulting to 1000 [ 61.749964][ T4891] loop3: detected capacity change from 0 to 1024 [ 62.040403][ T4911] loop3: detected capacity change from 0 to 512 [ 62.067147][ T4911] EXT4-fs: Ignoring removed mblk_io_submit option [ 62.211370][ T4922] lo speed is unknown, defaulting to 1000 [ 62.223355][ T4925] loop0: detected capacity change from 0 to 1024 [ 62.340487][ T4922] loop2: detected capacity change from 0 to 128 [ 62.349153][ T4922] vfat: Unknown parameter '0xffffffffffffffff' [ 62.461771][ T4939] loop2: detected capacity change from 0 to 512 [ 62.468826][ T4939] EXT4-fs: Ignoring removed mblk_io_submit option [ 62.537497][ T4946] ================================================================== [ 62.545676][ T4946] BUG: KCSAN: data-race in mas_wr_store_entry / mtree_range_walk [ 62.553443][ T4946] [ 62.555794][ T4946] write to 0xffff888104492a60 of 8 bytes by task 4943 on cpu 1: [ 62.563439][ T4946] mas_wr_store_entry+0x1222/0x23f0 [ 62.568678][ T4946] mas_store_prealloc+0x6bf/0x960 [ 62.573727][ T4946] commit_merge+0x441/0x740 [ 62.578275][ T4946] vma_expand+0x211/0x360 [ 62.582637][ T4946] vma_merge_new_range+0x2da/0x340 [ 62.587876][ T4946] mmap_region+0x7e0/0x1620 [ 62.592407][ T4946] do_mmap+0x98a/0xc30 [ 62.596585][ T4946] vm_mmap_pgoff+0x16d/0x2d0 [ 62.601207][ T4946] ksys_mmap_pgoff+0xd0/0x330 [ 62.605930][ T4946] x64_sys_call+0x1940/0x2dc0 [ 62.610629][ T4946] do_syscall_64+0xc9/0x1c0 [ 62.615166][ T4946] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 62.621087][ T4946] [ 62.623507][ T4946] read to 0xffff888104492a60 of 8 bytes by task 4946 on cpu 0: [ 62.631172][ T4946] mtree_range_walk+0x1b4/0x460 [ 62.636048][ T4946] mas_walk+0x16e/0x320 [ 62.640293][ T4946] lock_vma_under_rcu+0x95/0x270 [ 62.645245][ T4946] exc_page_fault+0x150/0x650 [ 62.649937][ T4946] asm_exc_page_fault+0x26/0x30 [ 62.654819][ T4946] [ 62.657149][ T4946] value changed: 0x00007f5e0c92efff -> 0x00007f5e0c90dfff [ 62.664270][ T4946] [ 62.666688][ T4946] Reported by Kernel Concurrency Sanitizer on: [ 62.672866][ T4946] CPU: 0 UID: 0 PID: 4946 Comm: syz.2.556 Not tainted 6.14.0-rc2-syzkaller-00303-gad1b832bf1cf #0 [ 62.683487][ T4946] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 62.693586][ T4946] ==================================================================