last executing test programs: 1.911456586s ago: executing program 0 (id=1225): prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000000)={0x1, &(0x7f0000001400)=[{0x4, 0x0, 0x0, 0x7ffc1ffb}]}) syz_io_uring_submit(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x47f6, 0x0, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000001340)=ANY=[@ANYBLOB="1b00000000000000000000000020000000000000", @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000008b6adcbef6eba5b805ecf1ae9e1cf05a5dca68af48bff2e4de9229841116dd593d2e928fd35737b84f3bddc17bad62fab3fcfe0aeb", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000014000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000440)='kmem_cache_free\x00', r1}, 0x10) r2 = getpgrp(0x0) r3 = getpid() tgkill(r2, r3, 0x1b) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000001440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bf7e3e55d2fa74f1a200000000000007020000f8ffffffb703000008000000b704000000000000850000620300000095040f0fbc8b5782b57bb3667c24a486be660235cd981db4f41367d8b6d10dc0"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000014c0)=ANY=[@ANYBLOB="0b0000000500000001000100000000000100000060c47418c54941ae7971b4ff39ce069c311f6008bd1422590288d1fa9ad4e20613f1edfbd567216397715c6421d10e", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r7}, 0x10) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)={0x15, 0x65, 0xffff, 0x0, 0x8, '9P2000.u'}, 0x15) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r9, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff0180"], 0x15) r10 = dup(r9) write$P9_RLERRORu(r10, &(0x7f0000000040)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r10, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r10, &(0x7f00000002c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x30) write$binfmt_elf64(r10, &(0x7f0000000280)=ANY=[@ANYRES64=r6, @ANYRES64=r4, @ANYRES16=r4, @ANYRESOCT, @ANYRES16=r1], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000049c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r8, @ANYBLOB=',wfdno=', @ANYRESHEX=r9, @ANYBLOB=',access=', @ANYRESDEC=0x0]) readv(r8, &(0x7f0000000100)=[{&(0x7f0000000340)=""/4096, 0x1000}], 0x1) chdir(&(0x7f0000000200)='./file0\x00') mknod(&(0x7f0000000040)='./file0\x00', 0x40, 0x8) syz_io_uring_setup(0x400, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) 1.065549108s ago: executing program 1 (id=1239): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) socket$netlink(0x10, 0x3, 0x14) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000f"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f0000003c40)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000140)="03", 0x1}], 0x1}}], 0x1, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r3, &(0x7f0000000040)=0x800, 0x12) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000400)={0x0, 0x9}, 0x8) 1.064834388s ago: executing program 0 (id=1240): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') ioctl$sock_bt_hci(r0, 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000020000000400000005000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="002e8d41c65fd1d3ed0000000000001a00"/28], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x12, &(0x7f0000000580)=@raw=[@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x681}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0xf}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x4}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f00000000c0)=ANY=[], 0x8) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg(r1, &(0x7f0000004f00)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000140)="e716", 0x2}], 0x1}, 0x810}], 0x1, 0x4000) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x7, 0x0, 0x7, 0x0, 0x8, 0x200, 0xa, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x4, @perf_bp={0x0, 0x4}, 0x8000, 0x8, 0x9a9, 0x1, 0x401, 0x5, 0x4, 0x0, 0x7, 0x0, 0x3b}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) io_uring_setup(0x678d, &(0x7f0000000340)={0x0, 0xffffffff, 0x80, 0x0, 0xf1}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x3, 0x0, "7e12ddc5a89047bf00"}) r5 = syz_open_pts(r4, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000200)=0x2) read(r5, 0x0, 0x2006) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00'}, 0x10) pipe2(&(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r7}, 0x2c, {[{@uname={'uname', 0x3d, '\xd0\xae\xde\xc1\xaa \xff\xd8\x1d\x1b\xf8\x93)!|\xb0X\xa3\x96\xed\xa2\xab@\xa2m\x93\xdd\b<\x00t\xdc\xabl\xab!\xae\x16\xc4\xcd\xf9{\xdc5_;A\xd2{eC\x014\\\xb3\xc4\xce\xc3yS2-\x01\xbe\xaarW\x96O\xd3\x0f\xe2\xd7/\x17\x1d\xa7.8\x9f8-\xea<\x8d\x91\x90j\xea\xd5\xd5\xae\xcc\xc0\x97\xef\x10\x92\xea\x98|+\x00\x00\x00\x00\x00\x00\x00\x00'}}]}}) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000000)) r8 = dup2(r5, r4) fcntl$setstatus(r5, 0x4, 0x2000) r9 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r9, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r9, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="2c000000120001000000000000000000100000000c00000000000000000000000c002e"], 0x2c}], 0x1}, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r8, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="200000001114100029bd7000fcdbdf4608003e00010000f908004a0002000000"], 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x48004) socket$nl_route(0x10, 0x3, 0x0) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000), 0x10) 935.83248ms ago: executing program 4 (id=1244): syz_open_dev$vcsu(0x0, 0x3, 0x200) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x6, 0x4, 0x5b, 0x8a, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={r1, r2}, 0xc) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100)={r1, r0}, 0xc) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000240)={r1}, 0xc) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000340)={r1}, 0xc) 914.996852ms ago: executing program 4 (id=1246): r0 = socket$kcm(0xa, 0x2, 0x3a) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r3 = dup(r2) write$P9_RLERRORu(r3, &(0x7f00000000c0)=ANY=[@ANYBLOB='S\x00\x00\x00\a\x00\x00F\x00'], 0x53) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[], [], 0x6b}}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x10, 0x4, 0x5, 0x2, 0x1000, 0xffffffffffffffff, 0xfffffffe, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000141007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) timerfd_create(0x7, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) recvmsg$kcm(r0, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005c831, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r8, &(0x7f00000000c0), 0xfffffff4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r7}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20) pipe2$9p(&(0x7f0000000240), 0x0) 897.353064ms ago: executing program 4 (id=1248): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000006, 0x100010, 0xffffffffffffffff, 0x8e822000) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000180000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000f0850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port0\x00'}) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000280)={{0x1, 0x1, 0x18, r0, {0xfffffff4}}, './file2\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$rxrpc(0x21, 0x2, 0xa) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) r1 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0xa4, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0xfe, [0x8, 0x4], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}]}]}}]}, 0xa4}}, 0x0) 880.427975ms ago: executing program 4 (id=1249): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) socket$netlink(0x10, 0x3, 0x14) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000f"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f0000003c40)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000140)="03", 0x1}], 0x1}}], 0x1, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r3, &(0x7f0000000040)=0x800, 0x12) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000400)={0x0, 0x9}, 0x8) 862.463547ms ago: executing program 4 (id=1250): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r0, &(0x7f0000000040), 0x10) ioctl$SIOCPNENABLEPIPE(r0, 0x89ed, 0x0) 849.531068ms ago: executing program 4 (id=1251): prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000000)={0x1, &(0x7f0000001400)=[{0x4, 0x0, 0x0, 0x7ffc1ffb}]}) syz_io_uring_submit(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x47f6, 0x0, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000001340)=ANY=[@ANYBLOB="1b00000000000000000000000020000000000000", @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000008b6adcbef6eba5b805ecf1ae9e1cf05a5dca68af48bff2e4de9229841116dd593d2e928fd35737b84f3bddc17bad62fab3fcfe0aeb", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000014000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000440)='kmem_cache_free\x00', r1}, 0x10) r2 = getpgrp(0x0) r3 = getpid() tgkill(r2, r3, 0x1b) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000001440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bf7e3e55d2fa74f1a200000000000007020000f8ffffffb703000008000000b704000000000000850000620300000095040f0fbc8b5782b57bb3667c24a486be660235cd981db4f41367d8b6d10dc0"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000014c0)=ANY=[@ANYBLOB="0b0000000500000001000100000000000100000060c47418c54941ae7971b4ff39ce069c311f6008bd1422590288d1fa9ad4e20613f1edfbd567216397715c6421d10e", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r7}, 0x10) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)={0x15, 0x65, 0xffff, 0x0, 0x8, '9P2000.u'}, 0x15) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r9, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff0180"], 0x15) r10 = dup(r9) write$P9_RLERRORu(r10, &(0x7f0000000040)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r10, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r10, &(0x7f00000002c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x30) write$binfmt_elf64(r10, &(0x7f0000000280)=ANY=[@ANYRES64=r6, @ANYRES64=r4, @ANYRES16=r4, @ANYRESOCT, @ANYRES16=r1], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000049c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r8, @ANYBLOB=',wfdno=', @ANYRESHEX=r9, @ANYBLOB=',access=', @ANYRESDEC=0x0]) readv(r8, &(0x7f0000000100)=[{&(0x7f0000000340)=""/4096, 0x1000}], 0x1) chdir(&(0x7f0000000200)='./file0\x00') mknod(&(0x7f0000000040)='./file0\x00', 0x40, 0x8) syz_io_uring_setup(0x400, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) 511.708061ms ago: executing program 3 (id=1259): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000006, 0x100010, 0xffffffffffffffff, 0x8e822000) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000180000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000f0850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port0\x00'}) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000280)={{0x1, 0x1, 0x18, r0, {0xfffffff4}}, './file2\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$rxrpc(0x21, 0x2, 0xa) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) r1 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0xa4, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0xfe, [0x8, 0x4], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}]}]}}]}, 0xa4}}, 0x0) 511.327061ms ago: executing program 3 (id=1260): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000003c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)=ANY=[@ANYRES32=r2, @ANYRES32=r2, @ANYBLOB='/\x00'], 0x20) 490.105623ms ago: executing program 3 (id=1261): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYRES64], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x3, &(0x7f0000000180)=@framed, 0x0, 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) bpf$MAP_CREATE(0x0, 0x0, 0x50) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x66, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000003c0)=[{&(0x7f0000000200)="93cb", 0x2}], 0x1, 0x0) vmsplice(r2, &(0x7f0000000040)=[{&(0x7f00000000c0)='c', 0x1}], 0x1, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) close(r3) 424.975679ms ago: executing program 2 (id=1265): bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001440)={{r0}, &(0x7f0000000180), &(0x7f0000000300)='%pB \x00'}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x2, 0x0) sendfile(r3, r2, 0x0, 0x6) 410.832881ms ago: executing program 2 (id=1266): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x381, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000), 0x8) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[], 0x14}}, 0x0) io_setup(0xbf, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f00000001c0)=[&(0x7f00000000c0)={0x20000000, 0x0, 0x7, 0x8, 0x0, r0, &(0x7f0000000080)='\x00\x00', 0x2}]) 384.006183ms ago: executing program 3 (id=1267): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000023000000850000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000003000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x63, 0x0, &(0x7f00000000c0)='\x00', 0x0, 0x2}, 0x48) (fail_nth: 2) 212.451059ms ago: executing program 1 (id=1268): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000b80)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b40)={&(0x7f0000000600)='kfree\x00', r0}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000002140)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7fff0200}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1b, &(0x7f0000002140)={0x1, &(0x7f00000000c0)=[{0x6}]}) 211.574979ms ago: executing program 0 (id=1269): r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) 162.342275ms ago: executing program 2 (id=1270): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f00000006c0)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000180)={0x1f, 0x1}, 0x6) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x11}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2e}, @NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}]}], {0x14}}, 0xdc}}, 0x0) ioctl(0xffffffffffffffff, 0xfffff000, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x4) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a64000000060a29040000000000000000020000000900010073797a30000000000900020073797a32000000003800048034000180090001007866726d0000000024000280080001400000000005000300000000000800024000000004080004"], 0x8c}}, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000500)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60"], 0x0) bind$bt_hci(r3, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) close_range(r2, 0xffffffffffffffff, 0x0) 161.463535ms ago: executing program 0 (id=1271): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000006, 0x100010, 0xffffffffffffffff, 0x8e822000) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000180000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000f0850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port0\x00'}) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000280)={{0x1, 0x1, 0x18, r0, {0xfffffff4}}, './file2\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$rxrpc(0x21, 0x2, 0xa) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) r1 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0xa4, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0xfe, [0x8, 0x4], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}]}]}}]}, 0xa4}}, 0x0) 132.671327ms ago: executing program 1 (id=1272): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000003c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)=ANY=[@ANYRES32=r2, @ANYRES32=r2, @ANYBLOB='/\x00'], 0x20) 105.47093ms ago: executing program 3 (id=1273): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x2c) r1 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r2 = openat$cgroup_freezer_state(r1, &(0x7f0000000140), 0x2, 0x0) sendfile(r2, r2, 0x0, 0x9) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x1b, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000000000000010018111a000000", @ANYRESOCT=r1, @ANYRESDEC, @ANYRES32=r0, @ANYRES8=0x0], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) syz_open_dev$mouse(&(0x7f0000000280), 0xfffffffffffffffe, 0x4100) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xd, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x21081e, &(0x7f00000002c0), 0x1, 0x4f2, &(0x7f0000000d40)="$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") r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/key-users\x00', 0x0, 0x0) r9 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) sendfile(r9, r8, &(0x7f0000000000)=0x9, 0x2) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000700)={r3, r7, 0x25, 0x0, @val=@perf_event}, 0x40) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0xa, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r10}, &(0x7f0000000040), &(0x7f0000000180)=r11}, 0x20) ioctl$EXT4_IOC_SWAP_BOOT(r11, 0x6611) syz_emit_ethernet(0xfdef, &(0x7f0000000a40)=ANY=[], 0x0) 104.80876ms ago: executing program 0 (id=1274): bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001440)={{r0}, &(0x7f0000000180), &(0x7f0000000300)='%pB \x00'}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x2, 0x0) sendfile(r3, r2, 0x0, 0x6) 104.57247ms ago: executing program 1 (id=1275): sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/notes', 0x80000, 0x9c) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000200), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) 62.554424ms ago: executing program 2 (id=1276): getresgid(&(0x7f0000000c40), &(0x7f0000000140), &(0x7f0000000240)=0x0) syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000200)='./file0\x00', 0x10814, &(0x7f0000000700)=ANY=[@ANYBLOB='umask=00000000000000000000000,flush,nodots,dots,gid=', @ANYRESHEX=r0, @ANYBLOB="00006b746769643d0092", @ANYRESDEC, @ANYBLOB="1500bba7d41fabba4332de3ca642acf6f8de847e3f21783608008708a887d30aaf0a14b0691d48445fe3b4d1ddde1b81337b2c3b5f88535d7f6fa931b84783704494cebe49ca9f6269b05edde0246c360d0566b4056f0f02ccab035d3d0a5cde0b31bd424949fe23c0a0a25691738006c5c6acdf101fecdb4f79abdfb95c6afaea03dd5903b5240565f31504c207a9a2aa6c8108fb973081e90412a3c6cfa3b2513693727fad9acd8108acb8b90fab033c9dac0dc3e5a61c513e7b5edc5d76320f0e54045ea2b7b8fb1f78d3d346e26ee5ed6926cea1ffe0a1"], 0x1, 0x1fa, &(0x7f0000000500)="$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") r1 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r1, &(0x7f0000001fc0)=""/184, 0xb8) 60.320314ms ago: executing program 1 (id=1277): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000b80)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b40)={&(0x7f0000000600)='kfree\x00', r0}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000002140)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7fff0200}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1b, &(0x7f0000002140)={0x1, &(0x7f00000000c0)=[{0x6}]}) (fail_nth: 2) 49.455215ms ago: executing program 0 (id=1278): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x11, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="180100000000001c000000000000ea04850000007b00"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x0, &(0x7f0000000240)={[{@noload}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x200}}, {@nodiscard}]}, 0x1, 0x501, &(0x7f0000000ac0)="$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") r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x10) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f00000006c0)) write$binfmt_script(r3, &(0x7f0000000380), 0x208e24b) ioctl$EXT4_IOC_MIGRATE(r3, 0x6609) read$snapshot(r2, 0x0, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000dc0)=ANY=[@ANYRES32=r2, @ANYRESOCT=r0, @ANYBLOB="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", @ANYRES32, @ANYRES16, @ANYRESDEC=r2], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={r5}, 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x11, &(0x7f00000004c0)=ANY=[@ANYBLOB="180200000f00000000000000000000008500000041000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b705000008000000850000009500000000000000929a4feb2e60"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r7, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ff5}]}) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0b00000007000000230000000800000005000000", @ANYBLOB="2f4d5c8024a7bbe22b53683c", @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYRES64=r7], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r8, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000003c0)='xprtrdma_op_set_cto\x00', r0}, 0x18) readahead(0xffffffffffffffff, 0x0, 0x6) sendto$inet6(r7, &(0x7f0000000300)="1acb36adee122af90c5a0029f4dee148eaf801d7a68b114b3b9b916d47f5561793c364d3337013e0a8e0307aee5c17eecbcc2278a1228da302493b7e7a47a767b7973f94e00000000035fd5d8c4db003501c509d726dd6a9148a993270efe3380b15efbe500d2d844bc89943d1a3373ce89c6e1c0839e3e5419c3a75f17b37487b20b13bf026aca92aaa5577ab62c5d3c28987fa323d868a", 0xb5, 0x4000, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r7, &(0x7f0000000d80)="c7", 0x1, 0x54014, 0x0, 0x4d) sendto$inet6(r7, &(0x7f0000000040)="93", 0x34000, 0x0, 0x0, 0x44) fsopen(&(0x7f0000000000)='hugetlbfs\x00', 0x0) 35.571077ms ago: executing program 2 (id=1279): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) socket$netlink(0x10, 0x3, 0x14) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000f"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f0000003c40)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000140)="03", 0x1}], 0x1}}], 0x1, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r3, &(0x7f0000000040)=0x800, 0x12) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000400)={0x0, 0x9}, 0x8) 22.505708ms ago: executing program 1 (id=1280): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x10000000000002}, 0x18) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, r2, {0xee00, 0xee00}}, './file0\x00'}) ioctl$PPPIOCSACTIVE(r3, 0x40107446, &(0x7f0000000180)={0x2, &(0x7f0000000040)=[{0x1, 0x7, 0xc, 0xa42}, {0x6, 0x9, 0x8, 0x8}]}) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r5 = socket(0xa, 0x40000000002, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r5, 0x0, 0x80, &(0x7f0000000280)=@nat={'nat\x00', 0x19, 0x2, 0x208, [0x20000600, 0x0, 0x0, 0x20000630, 0x20000660], 0x0, 0x0, 0x0}, 0x280) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r2, &(0x7f0000001ac0)=[{{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000700)="acc841985992b79554acfc02163bb0fb2bb293e68702bb40b6b870bde5700d36874436", 0x23}, {&(0x7f0000001500)="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", 0x17e}, {&(0x7f0000000940)="5be3b011e12323e4ab88c0472fd012198c3c61bb81e71ba62134303d2db9740143b0374a0d12e875789932cfd4855c4cc243dae723789d8a9a16be3135c5f82691837c90ab19645f7a1dcf1449fd34eecae5f52fba1e89d6d34b39297bbbc258c2ea547d47f2d89ad6e36e737691a1c6bdd164b2a85cbaaf648c910559f53581c60bd6c80f90c75f664e5b285c738881560f8ae89a4943141ac45fb6995cece6a2e0e62bd79213527a11c34a6e89ca41ead3e2589301279d9b0832d0b5a6ebe2cf", 0xc1}, {&(0x7f0000000a40)="bd2f6aa36cea0e62ac00a4539dd80281164750339fcc3cd1f7bb1b74e98dbbe81e997d4847ee5d06a72e6f1c6b8a873c7ea7760f102483b578526af9775e51b84818d03da71c7a9a2b18fac6dde3bbf1", 0x50}], 0x4}}], 0x1, 0xc0) sendto$inet(r2, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffc000/0x4000)=nil) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000800000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r6}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0b00000000000000008400000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0100000000b1623afcc240cc00000000000000000300000000000000"], 0x50) 22.125338ms ago: executing program 3 (id=1281): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x381, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000), 0x8) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[], 0x14}}, 0x0) io_setup(0xbf, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f00000001c0)=[&(0x7f00000000c0)={0x20000000, 0x0, 0x7, 0x8, 0x0, r0, &(0x7f0000000080)='\x00\x00', 0x2}]) 0s ago: executing program 2 (id=1282): prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 0s ago: executing program 4 (id=1283): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00'}, 0x10) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) (async) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = socket(0x10, 0x803, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x8}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) msync(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x1000, &(0x7f0000001400)=""/4106, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x18) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="34000000100001f8ffffff000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32=r3, @ANYBLOB="08001b"], 0x34}}, 0x4004010) (async, rerun: 64) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4000}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r3}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) (rerun: 64) kernel console output (not intermixed with test programs): omponent flag not implemented (129) [ 43.974098][ T4174] rock: directory entry would overflow storage [ 43.980326][ T4174] rock: sig=0x4f50, size=4, remaining=3 [ 43.985905][ T4174] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 44.032991][ T4188] bond1: entered promiscuous mode [ 44.038093][ T4188] bond1: entered allmulticast mode [ 44.053874][ T4188] 8021q: adding VLAN 0 to HW filter on device bond1 [ 44.060077][ T4174] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 44.072615][ T4174] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 44.081971][ T4188] bond1 (unregistering): Released all slaves [ 44.181240][ T4199] loop0: detected capacity change from 0 to 512 [ 44.204583][ T4204] capability: warning: `syz.3.274' uses 32-bit capabilities (legacy support in use) [ 44.215087][ T4199] EXT4-fs (loop0): too many log groups per flexible block group [ 44.222880][ T4199] EXT4-fs (loop0): failed to initialize mballoc (-12) [ 44.238392][ T4199] EXT4-fs (loop0): mount failed [ 44.385439][ T4222] loop0: detected capacity change from 0 to 512 [ 44.403238][ T4226] netlink: 'syz.1.284': attribute type 21 has an invalid length. [ 44.412237][ T4226] netlink: 132 bytes leftover after parsing attributes in process `syz.1.284'. [ 44.424835][ T4221] tipc: Enabling of bearer <th:sy> rejected, media not registered [ 44.456196][ T4222] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.283: invalid indirect mapped block 4294967295 (level 1) [ 44.494888][ T4222] EXT4-fs (loop0): Remounting filesystem read-only [ 44.502815][ T4222] EXT4-fs (loop0): 2 truncates cleaned up [ 44.509411][ T4222] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.522361][ T4222] SELinux: (dev loop0, type ext4) getxattr errno 5 [ 44.530083][ T4222] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.536880][ T4242] netlink: 'syz.3.291': attribute type 21 has an invalid length. [ 44.547177][ T4242] netlink: 132 bytes leftover after parsing attributes in process `syz.3.291'. [ 44.581015][ T4245] loop3: detected capacity change from 0 to 512 [ 44.590673][ T4245] EXT4-fs (loop3): too many log groups per flexible block group [ 44.598465][ T4245] EXT4-fs (loop3): failed to initialize mballoc (-12) [ 44.616881][ T4245] EXT4-fs (loop3): mount failed [ 44.653137][ T4253] loop0: detected capacity change from 0 to 512 [ 44.653609][ T4255] IPVS: Error joining to the multicast group [ 44.683017][ T4253] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.701442][ T4253] ext4 filesystem being mounted at /90/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 44.712438][ T4253] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.724879][ T4261] tipc: Enabling of bearer <th:sy> rejected, media not registered [ 44.907248][ T4275] random: crng reseeded on system resumption [ 45.019322][ T4275] loop0: detected capacity change from 0 to 128 [ 45.048441][ T4275] syz.0.303: attempt to access beyond end of device [ 45.048441][ T4275] loop0: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 45.061930][ T4275] Buffer I/O error on dev loop0, logical block 128, lost async page write [ 45.194756][ T4282] netlink: 'syz.0.306': attribute type 21 has an invalid length. [ 45.202736][ T4282] netlink: 132 bytes leftover after parsing attributes in process `syz.0.306'. [ 45.229713][ T4284] loop0: detected capacity change from 0 to 512 [ 45.244890][ T4284] EXT4-fs (loop0): too many log groups per flexible block group [ 45.252686][ T4284] EXT4-fs (loop0): failed to initialize mballoc (-12) [ 45.261570][ T4288] random: crng reseeded on system resumption [ 45.263516][ T4284] EXT4-fs (loop0): mount failed [ 45.368878][ T4291] tipc: Enabling of bearer <th:sy> rejected, media not registered [ 45.382108][ T4288] loop2: detected capacity change from 0 to 128 [ 45.420558][ T4288] syz.2.308: attempt to access beyond end of device [ 45.420558][ T4288] loop2: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 45.421358][ T4297] IPVS: Error joining to the multicast group [ 45.434021][ T4288] Buffer I/O error on dev loop2, logical block 128, lost async page write [ 45.461432][ T4299] random: crng reseeded on system resumption [ 45.476934][ T4301] bond1: entered promiscuous mode [ 45.482112][ T4301] bond1: entered allmulticast mode [ 45.487717][ T4301] 8021q: adding VLAN 0 to HW filter on device bond1 [ 45.500890][ T4301] bond1 (unregistering): Released all slaves [ 45.585479][ T4299] loop1: detected capacity change from 0 to 128 [ 45.626675][ T4299] syz.1.314: attempt to access beyond end of device [ 45.626675][ T4299] loop1: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 45.640087][ T4299] Buffer I/O error on dev loop1, logical block 128, lost async page write [ 45.732952][ T4320] loop0: detected capacity change from 0 to 512 [ 45.764894][ T4320] EXT4-fs (loop0): too many log groups per flexible block group [ 45.772757][ T4320] EXT4-fs (loop0): failed to initialize mballoc (-12) [ 45.779700][ T4320] EXT4-fs (loop0): mount failed [ 45.819108][ T4329] tipc: Enabling of bearer <th:sy> rejected, media not registered [ 45.928446][ T4339] loop0: detected capacity change from 0 to 128 [ 45.997376][ T4335] syz.0.325: attempt to access beyond end of device [ 45.997376][ T4335] loop0: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 46.010904][ T4335] Buffer I/O error on dev loop0, logical block 128, lost async page write [ 46.273403][ T4360] tipc: Enabling of bearer <th:sy> rejected, media not registered [ 46.403500][ T4374] random: crng reseeded on system resumption [ 46.416220][ T4370] bond1: entered promiscuous mode [ 46.421411][ T4370] bond1: entered allmulticast mode [ 46.427307][ T4370] 8021q: adding VLAN 0 to HW filter on device bond1 [ 46.459984][ T4370] bond1 (unregistering): Released all slaves [ 46.469883][ T4372] IPVS: Error joining to the multicast group [ 46.512333][ T4374] loop1: detected capacity change from 0 to 128 [ 46.535512][ T4382] netlink: 'syz.3.345': attribute type 21 has an invalid length. [ 46.544145][ T4382] netlink: 132 bytes leftover after parsing attributes in process `syz.3.345'. [ 46.608008][ T4388] bond1: entered promiscuous mode [ 46.613209][ T4388] bond1: entered allmulticast mode [ 46.618668][ T4388] 8021q: adding VLAN 0 to HW filter on device bond1 [ 46.641874][ T4388] bond1 (unregistering): Released all slaves [ 46.660188][ T4391] netlink: 28 bytes leftover after parsing attributes in process `syz.3.349'. [ 46.669505][ T4391] netlink: 28 bytes leftover after parsing attributes in process `syz.3.349'. [ 46.682818][ T4391] erspan0: entered promiscuous mode [ 46.690688][ T4391] erspan0: left promiscuous mode [ 46.727388][ T4402] bond1: entered promiscuous mode [ 46.732595][ T4402] bond1: entered allmulticast mode [ 46.738556][ T4402] 8021q: adding VLAN 0 to HW filter on device bond1 [ 46.750301][ T4402] bond1 (unregistering): Released all slaves [ 46.799089][ T4407] random: crng reseeded on system resumption [ 46.930848][ T4407] loop3: detected capacity change from 0 to 128 [ 46.943147][ T4415] netlink: 8 bytes leftover after parsing attributes in process `syz.4.357'. [ 46.976256][ T4417] netlink: 'syz.0.358': attribute type 21 has an invalid length. [ 46.986821][ T4407] syz.3.355: attempt to access beyond end of device [ 46.986821][ T4407] loop3: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 46.990003][ T4417] netlink: 132 bytes leftover after parsing attributes in process `syz.0.358'. [ 47.000270][ T4407] Buffer I/O error on dev loop3, logical block 128, lost async page write [ 47.052513][ T4421] random: crng reseeded on system resumption [ 47.161670][ T4421] loop0: detected capacity change from 0 to 128 [ 47.176715][ T4429] loop4: detected capacity change from 0 to 128 [ 47.204910][ T4429] syz.4.363: attempt to access beyond end of device [ 47.204910][ T4429] loop4: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 47.218474][ T4429] Buffer I/O error on dev loop4, logical block 128, lost async page write [ 47.259392][ T4433] bond1: entered promiscuous mode [ 47.264509][ T4433] bond1: entered allmulticast mode [ 47.270319][ T4433] 8021q: adding VLAN 0 to HW filter on device bond1 [ 47.282314][ T4433] bond1 (unregistering): Released all slaves [ 47.388046][ T4444] netlink: 8 bytes leftover after parsing attributes in process `syz.2.369'. [ 47.462316][ T29] kauditd_printk_skb: 802 callbacks suppressed [ 47.462333][ T29] audit: type=1326 audit(1730706494.596:2458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4435 comm="syz.0.366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0555dbe719 code=0x7ffc0000 [ 47.493768][ T29] audit: type=1326 audit(1730706494.596:2459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4435 comm="syz.0.366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0555dbe719 code=0x7ffc0000 [ 47.517251][ T29] audit: type=1326 audit(1730706494.596:2460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4435 comm="syz.0.366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0555dbe719 code=0x7ffc0000 [ 47.540605][ T29] audit: type=1326 audit(1730706494.596:2461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4435 comm="syz.0.366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0555dbe719 code=0x7ffc0000 [ 47.563996][ T29] audit: type=1326 audit(1730706494.596:2462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4435 comm="syz.0.366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0555dbe719 code=0x7ffc0000 [ 47.587512][ T29] audit: type=1326 audit(1730706494.596:2463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4435 comm="syz.0.366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0555dbe719 code=0x7ffc0000 [ 47.611126][ T29] audit: type=1326 audit(1730706494.596:2464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4435 comm="syz.0.366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0555dbe719 code=0x7ffc0000 [ 47.634576][ T29] audit: type=1326 audit(1730706494.596:2465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4435 comm="syz.0.366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f0555dbe719 code=0x7ffc0000 [ 47.657991][ T29] audit: type=1326 audit(1730706494.596:2466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4435 comm="syz.0.366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0555dbe719 code=0x7ffc0000 [ 47.681557][ T29] audit: type=1326 audit(1730706494.596:2467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4435 comm="syz.0.366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f0555dbe719 code=0x7ffc0000 [ 47.739825][ T4461] random: crng reseeded on system resumption [ 47.755412][ T4465] loop3: detected capacity change from 0 to 512 [ 47.812959][ T4471] netlink: 8 bytes leftover after parsing attributes in process `syz.1.380'. [ 47.818720][ T4465] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.378: invalid indirect mapped block 4294967295 (level 1) [ 47.843997][ T4465] EXT4-fs (loop3): Remounting filesystem read-only [ 47.851196][ T4465] EXT4-fs (loop3): 2 truncates cleaned up [ 47.858211][ T4465] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.872218][ T4470] loop0: detected capacity change from 0 to 128 [ 47.887612][ T4476] loop1: detected capacity change from 0 to 512 [ 47.894542][ T4465] SELinux: (dev loop3, type ext4) getxattr errno 5 [ 47.903063][ T4465] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.936710][ T4476] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.949481][ T4476] ext4 filesystem being mounted at /62/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 47.962616][ T4480] random: crng reseeded on system resumption [ 48.000502][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.100356][ T4489] bond1: entered promiscuous mode [ 48.105556][ T4489] bond1: entered allmulticast mode [ 48.107329][ T4484] loop3: detected capacity change from 0 to 128 [ 48.111335][ T4489] 8021q: adding VLAN 0 to HW filter on device bond1 [ 48.128994][ T4489] bond1 (unregistering): Released all slaves [ 48.231919][ T4484] syz.3.383: attempt to access beyond end of device [ 48.231919][ T4484] loop3: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 48.245553][ T4484] Buffer I/O error on dev loop3, logical block 128, lost async page write [ 48.274762][ T4505] bond1: entered promiscuous mode [ 48.280007][ T4505] bond1: entered allmulticast mode [ 48.288433][ T4505] 8021q: adding VLAN 0 to HW filter on device bond1 [ 48.308562][ T4505] bond1 (unregistering): Released all slaves [ 48.380049][ T4512] loop1: detected capacity change from 0 to 512 [ 48.390647][ T4512] EXT4-fs (loop1): too many log groups per flexible block group [ 48.398410][ T4512] EXT4-fs (loop1): failed to initialize mballoc (-12) [ 48.409909][ T4512] EXT4-fs (loop1): mount failed [ 48.471428][ T4525] loop4: detected capacity change from 0 to 128 [ 48.512043][ T4525] syz.4.396: attempt to access beyond end of device [ 48.512043][ T4525] loop4: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 48.525457][ T4525] Buffer I/O error on dev loop4, logical block 128, lost async page write [ 48.547239][ T4531] IPVS: Error joining to the multicast group [ 48.587205][ T4533] loop2: detected capacity change from 0 to 512 [ 48.631742][ T4533] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.656603][ T4533] ext4 filesystem being mounted at /66/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 48.676505][ T4533] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.710653][ T4544] netlink: 'syz.0.409': attribute type 21 has an invalid length. [ 48.815715][ T4549] random: crng reseeded on system resumption [ 48.923872][ T4549] loop0: detected capacity change from 0 to 128 [ 49.008505][ T4563] netlink: 'syz.3.418': attribute type 21 has an invalid length. [ 49.059279][ T4571] netlink: 'syz.1.420': attribute type 21 has an invalid length. [ 49.119616][ T4575] tipc: Enabling of bearer <th:sy> rejected, media not registered [ 49.135534][ T4579] IPVS: Error joining to the multicast group [ 49.273371][ T4595] random: crng reseeded on system resumption [ 49.402042][ T4603] loop3: detected capacity change from 0 to 512 [ 49.411970][ T4608] loop0: detected capacity change from 0 to 128 [ 49.436541][ T4603] EXT4-fs (loop3): too many log groups per flexible block group [ 49.444291][ T4603] EXT4-fs (loop3): failed to initialize mballoc (-12) [ 49.454538][ T4614] __nla_validate_parse: 7 callbacks suppressed [ 49.454555][ T4614] netlink: 8 bytes leftover after parsing attributes in process `syz.2.438'. [ 49.482898][ T4603] EXT4-fs (loop3): mount failed [ 49.490574][ T4612] tipc: Enabling of bearer <th:sy> rejected, media not registered [ 49.549953][ T4618] bond1: entered promiscuous mode [ 49.555111][ T4618] bond1: entered allmulticast mode [ 49.560554][ T4618] 8021q: adding VLAN 0 to HW filter on device bond1 [ 49.572945][ T4618] bond1 (unregistering): Released all slaves [ 49.661793][ T4630] loop4: detected capacity change from 0 to 512 [ 49.680848][ T4630] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.723896][ T4630] ext4 filesystem being mounted at /71/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 49.755235][ T4630] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.917439][ T4646] netlink: 8 bytes leftover after parsing attributes in process `syz.0.449'. [ 50.005046][ T4648] random: crng reseeded on system resumption [ 50.167740][ T4648] loop0: detected capacity change from 0 to 128 [ 50.241393][ T4668] tipc: Enabling of bearer <th:sy> rejected, media not registered [ 50.285861][ T4673] netlink: 8 bytes leftover after parsing attributes in process `syz.4.460'. [ 50.364597][ T4676] random: crng reseeded on system resumption [ 50.489148][ T4665] nfs: Unknown parameter ' [ 50.489148][ T4665] ' [ 50.670855][ T4691] loop2: detected capacity change from 0 to 512 [ 50.721264][ T4691] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.745310][ T4691] ext4 filesystem being mounted at /78/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 50.767493][ T4691] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.810332][ T4696] loop4: detected capacity change from 0 to 128 [ 50.841507][ T4696] syz.4.461: attempt to access beyond end of device [ 50.841507][ T4696] loop4: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 50.854920][ T4696] Buffer I/O error on dev loop4, logical block 128, lost async page write [ 50.948437][ T4698] bond1: entered promiscuous mode [ 50.953517][ T4698] bond1: entered allmulticast mode [ 50.960493][ T4698] 8021q: adding VLAN 0 to HW filter on device bond1 [ 50.972482][ T4698] bond1 (unregistering): Released all slaves [ 51.130441][ T4708] loop1: detected capacity change from 0 to 512 [ 51.149585][ T4708] EXT4-fs (loop1): too many log groups per flexible block group [ 51.157318][ T4708] EXT4-fs (loop1): failed to initialize mballoc (-12) [ 51.165735][ T4708] EXT4-fs (loop1): mount failed [ 51.221869][ T4712] loop4: detected capacity change from 0 to 2048 [ 51.268570][ T4712] loop4: p1 p3 [ 51.272229][ T4712] loop4: p1 size 33024 extends beyond EOD, truncated [ 51.281361][ T4712] loop4: p3 start 4284289 is beyond EOD, truncated [ 51.607753][ T4716] random: crng reseeded on system resumption [ 51.736984][ T3018] loop4: p1 p3 [ 51.744324][ T4716] loop3: detected capacity change from 0 to 128 [ 51.753192][ T4720] tipc: Enabling of bearer <th:sy> rejected, media not registered [ 51.761552][ T3018] loop4: p1 size 33024 extends beyond EOD, truncated [ 51.776786][ T3018] loop4: p3 start 4284289 is beyond EOD, truncated [ 51.903586][ T4731] udevd[4731]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 51.932724][ T4733] bond1: entered promiscuous mode [ 51.937852][ T4733] bond1: entered allmulticast mode [ 51.947649][ T4733] 8021q: adding VLAN 0 to HW filter on device bond1 [ 51.971883][ T4733] bond1 (unregistering): Released all slaves [ 51.979889][ T4743] FAULT_INJECTION: forcing a failure. [ 51.979889][ T4743] name failslab, interval 1, probability 0, space 0, times 0 [ 51.992579][ T4743] CPU: 1 UID: 0 PID: 4743 Comm: syz.2.483 Not tainted 6.12.0-rc5-syzkaller-00330-ga33ab3f94f51 #0 [ 52.003235][ T4743] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 52.013367][ T4743] Call Trace: [ 52.016692][ T4743] [ 52.019872][ T4743] dump_stack_lvl+0xf2/0x150 [ 52.024512][ T4743] dump_stack+0x15/0x20 [ 52.028711][ T4743] should_fail_ex+0x223/0x230 [ 52.033532][ T4743] ? security_inode_alloc+0x37/0x100 [ 52.038853][ T4743] should_failslab+0x8f/0xb0 [ 52.043527][ T4743] kmem_cache_alloc_noprof+0x4c/0x290 [ 52.048996][ T4743] security_inode_alloc+0x37/0x100 [ 52.054116][ T4743] inode_init_always_gfp+0x444/0x490 [ 52.059413][ T4743] ? __pfx_hugetlbfs_alloc_inode+0x10/0x10 [ 52.065320][ T4743] alloc_inode+0x82/0x160 [ 52.069763][ T4743] new_inode+0x1e/0x100 [ 52.073917][ T4743] hugetlbfs_get_inode+0x82/0x2b0 [ 52.079025][ T4743] hugetlb_file_setup+0x188/0x3c0 [ 52.084078][ T4743] ksys_mmap_pgoff+0x172/0x330 [ 52.088965][ T4743] x64_sys_call+0x1884/0x2d60 [ 52.093691][ T4743] do_syscall_64+0xc9/0x1c0 [ 52.098236][ T4743] ? clear_bhb_loop+0x55/0xb0 [ 52.102921][ T4743] ? clear_bhb_loop+0x55/0xb0 [ 52.107596][ T4743] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.113558][ T4743] RIP: 0033:0x7f25bd4fe719 [ 52.117978][ T4743] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 52.137617][ T4743] RSP: 002b:00007f25bc177038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 52.146047][ T4743] RAX: ffffffffffffffda RBX: 00007f25bd6b5f80 RCX: 00007f25bd4fe719 [ 52.154131][ T4743] RDX: 0000000006000003 RSI: 0000000000800000 RDI: 0000000020800000 [ 52.162101][ T4743] RBP: 00007f25bc177090 R08: ffffffffffffffff R09: 0000000000000000 [ 52.170165][ T4743] R10: 0000000000042031 R11: 0000000000000246 R12: 0000000000000001 [ 52.178170][ T4743] R13: 0000000000000000 R14: 00007f25bd6b5f80 R15: 00007ffffa94f6c8 [ 52.186147][ T4743] [ 52.193576][ T4738] netlink: 'syz.3.481': attribute type 21 has an invalid length. [ 52.201953][ T4738] netlink: 132 bytes leftover after parsing attributes in process `syz.3.481'. [ 52.242179][ T4747] tipc: Enabling of bearer <th:sy> rejected, media not registered [ 52.261499][ T4750] mmap: syz.4.487 (4750) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 52.361433][ T4760] loop2: detected capacity change from 0 to 512 [ 52.396734][ T4760] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.409477][ T4760] ext4 filesystem being mounted at /87/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 52.467772][ T4770] random: crng reseeded on system resumption [ 52.474482][ T29] kauditd_printk_skb: 846 callbacks suppressed [ 52.474497][ T29] audit: type=1326 audit(1730706499.616:3314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4772 comm="syz.3.493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02a83de719 code=0x7ffc0000 [ 52.507827][ T29] audit: type=1326 audit(1730706499.646:3315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4772 comm="syz.3.493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02a83de719 code=0x7ffc0000 [ 52.531325][ T29] audit: type=1326 audit(1730706499.646:3316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4772 comm="syz.3.493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f02a83de719 code=0x7ffc0000 [ 52.554763][ T29] audit: type=1326 audit(1730706499.646:3317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4772 comm="syz.3.493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02a83de719 code=0x7ffc0000 [ 52.578091][ T29] audit: type=1326 audit(1730706499.646:3318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4772 comm="syz.3.493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02a83de719 code=0x7ffc0000 [ 52.597400][ T4774] loop4: detected capacity change from 0 to 128 [ 52.601437][ T29] audit: type=1326 audit(1730706499.646:3319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4772 comm="syz.3.493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f02a83de719 code=0x7ffc0000 [ 52.631106][ T29] audit: type=1326 audit(1730706499.646:3320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4772 comm="syz.3.493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02a83de719 code=0x7ffc0000 [ 52.654549][ T29] audit: type=1326 audit(1730706499.646:3321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4772 comm="syz.3.493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f02a83de719 code=0x7ffc0000 [ 52.662577][ T4778] loop3: detected capacity change from 0 to 128 [ 52.678198][ T29] audit: type=1326 audit(1730706499.666:3322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4769 comm="syz.4.491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa68bd3e719 code=0x7ffc0000 [ 52.707611][ T29] audit: type=1326 audit(1730706499.666:3323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4769 comm="syz.4.491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa68bd3e719 code=0x7ffc0000 [ 52.749982][ T4782] netlink: 'syz.1.496': attribute type 21 has an invalid length. [ 52.756136][ T4775] syz.3.493: attempt to access beyond end of device [ 52.756136][ T4775] loop3: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 52.757752][ T4782] netlink: 132 bytes leftover after parsing attributes in process `syz.1.496'. [ 52.780383][ T4775] Buffer I/O error on dev loop3, logical block 128, lost async page write [ 52.789191][ T4784] xt_CT: No such helper "netbios-ns" [ 52.808910][ T4787] tipc: Enabling of bearer <th:sy> rejected, media not registered [ 52.860295][ T4795] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 52.872448][ T4795] syz.1.501 uses obsolete (PF_INET,SOCK_PACKET) [ 52.917531][ T4795] netdevsim netdevsim1: Direct firmware load for ÿÿÿÿ failed with error -2 [ 52.941213][ T4795] netlink: 24 bytes leftover after parsing attributes in process `syz.1.501'. [ 53.152635][ T4810] netlink: 'syz.1.507': attribute type 21 has an invalid length. [ 53.161144][ T4810] netlink: 132 bytes leftover after parsing attributes in process `syz.1.507'. [ 53.181753][ T3328] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.186571][ T4812] netlink: 'syz.1.508': attribute type 4 has an invalid length. [ 53.225495][ T4816] tipc: Enabling of bearer <th:sy> rejected, media not registered [ 53.316061][ T4826] loop2: detected capacity change from 0 to 512 [ 53.330380][ T4826] EXT4-fs (loop2): too many log groups per flexible block group [ 53.338212][ T4826] EXT4-fs (loop2): failed to initialize mballoc (-12) [ 53.345154][ T4826] EXT4-fs (loop2): mount failed [ 53.370123][ T4830] random: crng reseeded on system resumption [ 53.449253][ T4838] netlink: 'syz.3.518': attribute type 21 has an invalid length. [ 53.457342][ T4838] netlink: 132 bytes leftover after parsing attributes in process `syz.3.518'. [ 53.497015][ T4832] ucma_write: process 314 (syz.0.516) changed security contexts after opening file descriptor, this is not allowed. [ 53.516066][ T4834] loop2: detected capacity change from 0 to 128 [ 53.555622][ T4834] syz.2.515: attempt to access beyond end of device [ 53.555622][ T4834] loop2: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 53.565014][ T4847] tipc: Enabling of bearer <th:sy> rejected, media not registered [ 53.568986][ T4834] Buffer I/O error on dev loop2, logical block 128, lost async page write [ 53.614902][ T4845] xt_CT: No such helper "netbios-ns" [ 53.713528][ T4858] loop3: detected capacity change from 0 to 512 [ 53.764729][ T4858] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.773462][ T4866] loop0: detected capacity change from 0 to 512 [ 53.777910][ T4858] ext4 filesystem being mounted at /100/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 53.820893][ T4866] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.833609][ T4866] ext4 filesystem being mounted at /142/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 53.844670][ T4866] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.942383][ T4871] netlink: 'syz.4.529': attribute type 21 has an invalid length. [ 53.951301][ T4871] netlink: 132 bytes leftover after parsing attributes in process `syz.4.529'. [ 53.987973][ T4875] FAULT_INJECTION: forcing a failure. [ 53.987973][ T4875] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 54.001076][ T4875] CPU: 0 UID: 0 PID: 4875 Comm: syz.4.531 Not tainted 6.12.0-rc5-syzkaller-00330-ga33ab3f94f51 #0 [ 54.011768][ T4875] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 54.021943][ T4875] Call Trace: [ 54.025230][ T4875] [ 54.028252][ T4875] dump_stack_lvl+0xf2/0x150 [ 54.032967][ T4875] dump_stack+0x15/0x20 [ 54.037125][ T4875] should_fail_ex+0x223/0x230 [ 54.041915][ T4875] should_fail+0xb/0x10 [ 54.046084][ T4875] should_fail_usercopy+0x1a/0x20 [ 54.051177][ T4875] _copy_from_iter+0xd5/0xd00 [ 54.055897][ T4875] ? _copy_from_iter+0x169/0xd00 [ 54.060868][ T4875] copy_page_from_iter+0x14f/0x280 [ 54.065993][ T4875] skb_copy_datagram_from_iter+0x224/0x460 [ 54.071861][ T4875] tun_get_user+0xb7c/0x24e0 [ 54.076484][ T4875] ? _parse_integer+0x27/0x30 [ 54.081234][ T4875] ? ref_tracker_alloc+0x1f5/0x2f0 [ 54.086386][ T4875] tun_chr_write_iter+0x188/0x240 [ 54.091440][ T4875] vfs_write+0x77f/0x920 [ 54.095758][ T4875] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 54.101336][ T4875] ksys_write+0xeb/0x1b0 [ 54.105651][ T4875] __x64_sys_write+0x42/0x50 [ 54.110348][ T4875] x64_sys_call+0x27dd/0x2d60 [ 54.115101][ T4875] do_syscall_64+0xc9/0x1c0 [ 54.119675][ T4875] ? clear_bhb_loop+0x55/0xb0 [ 54.124451][ T4875] ? clear_bhb_loop+0x55/0xb0 [ 54.129211][ T4875] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 54.134926][ T4879] tipc: Enabling of bearer <th:sy> rejected, media not registered [ 54.135145][ T4875] RIP: 0033:0x7fa68bd3d1ff [ 54.135165][ T4875] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8d 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 1c 8e 02 00 48 [ 54.135188][ T4875] RSP: 002b:00007fa68a9b7000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 54.175600][ T4875] RAX: ffffffffffffffda RBX: 00007fa68bef5f80 RCX: 00007fa68bd3d1ff [ 54.183617][ T4875] RDX: 000000000000fdef RSI: 0000000020000180 RDI: 00000000000000c8 [ 54.191647][ T4875] RBP: 00007fa68a9b7090 R08: 0000000000000000 R09: 0000000000000000 [ 54.199657][ T4875] R10: 000000000000fdef R11: 0000000000000293 R12: 0000000000000002 [ 54.207671][ T4875] R13: 0000000000000000 R14: 00007fa68bef5f80 R15: 00007fffb88ae548 [ 54.215703][ T4875] [ 54.246640][ T4883] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 54.256509][ T4883] process 'syz.1.535' launched './file1' with NULL argv: empty string added [ 54.550396][ T3330] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.569258][ T4905] netlink: 'syz.3.543': attribute type 21 has an invalid length. [ 54.577075][ T4905] netlink: 132 bytes leftover after parsing attributes in process `syz.3.543'. [ 54.602318][ T4907] tipc: Enabling of bearer <th:sy> rejected, media not registered [ 54.684995][ T4913] bond1: entered promiscuous mode [ 54.685573][ T4916] random: crng reseeded on system resumption [ 54.690161][ T4913] bond1: entered allmulticast mode [ 54.690466][ T4913] 8021q: adding VLAN 0 to HW filter on device bond1 [ 54.714734][ T4913] bond1 (unregistering): Released all slaves [ 54.794441][ T4916] loop0: detected capacity change from 0 to 128 [ 54.823905][ T4916] syz.0.548: attempt to access beyond end of device [ 54.823905][ T4916] loop0: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 54.837329][ T4916] Buffer I/O error on dev loop0, logical block 128, lost async page write [ 55.051276][ T4932] netdevsim netdevsim3: Direct firmware load for ÿÿÿÿ failed with error -2 [ 55.064526][ T4932] netlink: 24 bytes leftover after parsing attributes in process `syz.3.554'. [ 55.195063][ T4939] loop1: detected capacity change from 0 to 512 [ 55.219482][ T4939] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.240754][ T4939] ext4 filesystem being mounted at /111/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 55.253065][ T4939] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.303179][ T4948] netlink: 'syz.3.560': attribute type 21 has an invalid length. [ 55.333224][ T4948] netlink: 132 bytes leftover after parsing attributes in process `syz.3.560'. [ 55.363013][ T4957] FAULT_INJECTION: forcing a failure. [ 55.363013][ T4957] name failslab, interval 1, probability 0, space 0, times 0 [ 55.375764][ T4957] CPU: 0 UID: 0 PID: 4957 Comm: syz.2.562 Not tainted 6.12.0-rc5-syzkaller-00330-ga33ab3f94f51 #0 [ 55.386460][ T4957] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 55.396526][ T4957] Call Trace: [ 55.399858][ T4957] [ 55.402802][ T4957] dump_stack_lvl+0xf2/0x150 [ 55.407417][ T4957] dump_stack+0x15/0x20 [ 55.411600][ T4957] should_fail_ex+0x223/0x230 [ 55.416351][ T4957] ? cond_bools_copy+0x30/0x80 [ 55.421185][ T4957] should_failslab+0x8f/0xb0 [ 55.425796][ T4957] __kmalloc_node_track_caller_noprof+0xa6/0x380 [ 55.432249][ T4957] kmemdup_noprof+0x2a/0x60 [ 55.436790][ T4957] cond_bools_copy+0x30/0x80 [ 55.441434][ T4957] hashtab_duplicate+0x12c/0x370 [ 55.446426][ T4957] ? __pfx_cond_bools_copy+0x10/0x10 [ 55.451745][ T4957] ? __pfx_cond_bools_destroy+0x10/0x10 [ 55.457349][ T4957] cond_policydb_dup+0xdb/0x710 [ 55.462262][ T4957] ? __kmalloc_node_track_caller_noprof+0x17e/0x380 [ 55.468985][ T4957] security_set_bools+0xa8/0x350 [ 55.473973][ T4957] ? sel_commit_bools_write+0x164/0x260 [ 55.479571][ T4957] sel_commit_bools_write+0x1de/0x260 [ 55.484986][ T4957] vfs_writev+0x3fb/0x880 [ 55.489343][ T4957] ? __pfx_sel_commit_bools_write+0x10/0x10 [ 55.495271][ T4957] ? mutex_lock+0xd/0x40 [ 55.499547][ T4957] do_writev+0xf8/0x220 [ 55.503807][ T4957] __x64_sys_writev+0x45/0x50 [ 55.508499][ T4957] x64_sys_call+0x1f18/0x2d60 [ 55.513233][ T4957] do_syscall_64+0xc9/0x1c0 [ 55.517782][ T4957] ? clear_bhb_loop+0x55/0xb0 [ 55.522473][ T4957] ? clear_bhb_loop+0x55/0xb0 [ 55.527198][ T4957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 55.533187][ T4957] RIP: 0033:0x7f25bd4fe719 [ 55.537622][ T4957] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 55.557388][ T4957] RSP: 002b:00007f25bc177038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 55.565825][ T4957] RAX: ffffffffffffffda RBX: 00007f25bd6b5f80 RCX: 00007f25bd4fe719 [ 55.573812][ T4957] RDX: 0000000000000001 RSI: 00000000200025c0 RDI: 0000000000000008 [ 55.581854][ T4957] RBP: 00007f25bc177090 R08: 0000000000000000 R09: 0000000000000000 [ 55.589860][ T4957] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 55.597838][ T4957] R13: 0000000000000000 R14: 00007f25bd6b5f80 R15: 00007ffffa94f6c8 [ 55.605821][ T4957] [ 55.662794][ T4968] FAULT_INJECTION: forcing a failure. [ 55.662794][ T4968] name failslab, interval 1, probability 0, space 0, times 0 [ 55.675577][ T4968] CPU: 0 UID: 0 PID: 4968 Comm: syz.4.568 Not tainted 6.12.0-rc5-syzkaller-00330-ga33ab3f94f51 #0 [ 55.686201][ T4968] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 55.696278][ T4968] Call Trace: [ 55.699572][ T4968] [ 55.702498][ T4968] dump_stack_lvl+0xf2/0x150 [ 55.707102][ T4968] dump_stack+0x15/0x20 [ 55.711317][ T4968] should_fail_ex+0x223/0x230 [ 55.716060][ T4968] ? getname_flags+0x81/0x3b0 [ 55.720759][ T4968] should_failslab+0x8f/0xb0 [ 55.725414][ T4968] kmem_cache_alloc_noprof+0x4c/0x290 [ 55.730857][ T4968] getname_flags+0x81/0x3b0 [ 55.735386][ T4968] user_path_at+0x26/0x110 [ 55.739826][ T4968] __x64_sys_umount+0x85/0xe0 [ 55.744573][ T4968] x64_sys_call+0x2599/0x2d60 [ 55.749434][ T4968] do_syscall_64+0xc9/0x1c0 [ 55.753973][ T4968] ? clear_bhb_loop+0x55/0xb0 [ 55.758758][ T4968] ? clear_bhb_loop+0x55/0xb0 [ 55.763436][ T4968] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 55.769479][ T4968] RIP: 0033:0x7fa68bd3e719 [ 55.773893][ T4968] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 55.784909][ T4972] netlink: 'syz.3.569': attribute type 1 has an invalid length. [ 55.793489][ T4968] RSP: 002b:00007fa68a9b7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 55.803284][ T4972] 9pnet_fd: Insufficient options for proto=fd [ 55.809653][ T4968] RAX: ffffffffffffffda RBX: 00007fa68bef5f80 RCX: 00007fa68bd3e719 [ 55.809682][ T4968] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000200006c0 [ 55.831764][ T4968] RBP: 00007fa68a9b7090 R08: 0000000000000000 R09: 0000000000000000 [ 55.839736][ T4968] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 55.847802][ T4968] R13: 0000000000000000 R14: 00007fa68bef5f80 R15: 00007fffb88ae548 [ 55.855793][ T4968] [ 55.935601][ T4986] netlink: 'syz.0.574': attribute type 21 has an invalid length. [ 55.944726][ T4986] netlink: 132 bytes leftover after parsing attributes in process `syz.0.574'. [ 55.973443][ T4990] random: crng reseeded on system resumption [ 56.087838][ T4994] loop0: detected capacity change from 0 to 128 [ 56.100341][ T4993] loop4: detected capacity change from 0 to 128 [ 56.102058][ T5000] pim6reg1: entered promiscuous mode [ 56.112040][ T5000] pim6reg1: entered allmulticast mode [ 56.141490][ T4994] syz.0.577: attempt to access beyond end of device [ 56.141490][ T4994] loop0: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 56.146040][ T4993] syz.4.576: attempt to access beyond end of device [ 56.146040][ T4993] loop4: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 56.154940][ T4994] Buffer I/O error on dev loop0, logical block 128, lost async page write [ 56.168258][ T4993] Buffer I/O error on dev loop4, logical block 128, lost async page write [ 56.495092][ C0] hrtimer: interrupt took 36522 ns [ 56.505685][ T5006] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 56.515747][ T5006] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 56.565567][ T5006] loop2: detected capacity change from 0 to 512 [ 56.594739][ T5006] EXT4-fs error (device loop2): ext4_acquire_dquot:6879: comm syz.2.582: Failed to acquire dquot type 1 [ 56.608165][ T5006] EXT4-fs (loop2): 1 truncate cleaned up [ 56.618101][ T5006] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.631448][ T5006] ext4 filesystem being mounted at /103/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 56.645174][ T5006] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.827591][ T5022] tipc: Enabling of bearer <th:sy> rejected, media not registered [ 56.901894][ T5026] loop4: detected capacity change from 0 to 512 [ 56.930209][ T5026] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.946711][ T5026] ext4 filesystem being mounted at /99/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 57.215678][ T5051] tipc: Enabling of bearer <th:sy> rejected, media not registered [ 57.326014][ T5063] bond1: entered promiscuous mode [ 57.331185][ T5063] bond1: entered allmulticast mode [ 57.336448][ T5063] 8021q: adding VLAN 0 to HW filter on device bond1 [ 57.347441][ T5063] bond1 (unregistering): Released all slaves [ 57.524975][ T29] kauditd_printk_skb: 380 callbacks suppressed [ 57.524990][ T29] audit: type=1326 audit(1730706504.656:3702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5076 comm="syz.2.611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25bd4fe719 code=0x7ffc0000 [ 57.556192][ T29] audit: type=1326 audit(1730706504.656:3703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5076 comm="syz.2.611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25bd4fe719 code=0x7ffc0000 [ 57.579702][ T29] audit: type=1326 audit(1730706504.656:3704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5076 comm="syz.2.611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f25bd4fe719 code=0x7ffc0000 [ 57.603308][ T29] audit: type=1326 audit(1730706504.656:3705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5076 comm="syz.2.611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25bd4fe719 code=0x7ffc0000 [ 57.626737][ T29] audit: type=1326 audit(1730706504.656:3706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5076 comm="syz.2.611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25bd4fe719 code=0x7ffc0000 [ 57.650135][ T29] audit: type=1326 audit(1730706504.666:3707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5076 comm="syz.2.611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f25bd4fe719 code=0x7ffc0000 [ 57.673770][ T29] audit: type=1326 audit(1730706504.696:3708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5076 comm="syz.2.611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25bd4fe719 code=0x7ffc0000 [ 57.697397][ T29] audit: type=1326 audit(1730706504.696:3709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5076 comm="syz.2.611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f25bd4fe719 code=0x7ffc0000 [ 57.720955][ T29] audit: type=1326 audit(1730706504.696:3710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5076 comm="syz.2.611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25bd4fe719 code=0x7ffc0000 [ 57.744435][ T29] audit: type=1326 audit(1730706504.696:3711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5076 comm="syz.2.611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f25bd4fe719 code=0x7ffc0000 [ 57.751133][ T5079] tipc: Enabling of bearer <th:sy> rejected, media not registered [ 57.811435][ T3325] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.964797][ T5089] bond1: entered promiscuous mode [ 57.970078][ T5089] bond1: entered allmulticast mode [ 57.991211][ T5089] 8021q: adding VLAN 0 to HW filter on device bond1 [ 58.018450][ T5089] bond1 (unregistering): Released all slaves [ 58.046020][ T5109] loop2: detected capacity change from 0 to 512 [ 58.070182][ T5109] EXT4-fs (loop2): too many log groups per flexible block group [ 58.077916][ T5109] EXT4-fs (loop2): failed to initialize mballoc (-12) [ 58.086073][ T5109] EXT4-fs (loop2): mount failed [ 58.110283][ T5117] tipc: Enabling of bearer <th:sy> rejected, media not registered [ 58.314333][ T5142] tipc: Enabling of bearer <th:sy> rejected, media not registered [ 58.320936][ T5143] loop4: detected capacity change from 0 to 512 [ 58.330256][ T5143] EXT4-fs: Mount option(s) incompatible with ext2 [ 58.366282][ T5145] loop3: detected capacity change from 0 to 128 [ 58.420493][ T5145] syz.3.640: attempt to access beyond end of device [ 58.420493][ T5145] loop3: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 58.434046][ T5145] Buffer I/O error on dev loop3, logical block 128, lost async page write [ 58.439237][ T5154] netlink: 44 bytes leftover after parsing attributes in process `syz.2.644'. [ 58.555748][ T5169] tipc: Enabling of bearer <th:sy> rejected, media not registered [ 58.593210][ T5177] loop0: detected capacity change from 0 to 2048 [ 58.603158][ T5177] EXT4-fs: Ignoring removed mblk_io_submit option [ 58.634812][ T5177] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 58.666495][ T5177] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.653: bg 0: block 234: padding at end of block bitmap is not set [ 58.666643][ T5187] loop4: detected capacity change from 0 to 512 [ 58.683060][ T5177] EXT4-fs (loop0): Remounting filesystem read-only [ 58.705017][ T5187] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 58.708634][ T5177] syz.0.653 (5177) used greatest stack depth: 10072 bytes left [ 58.718926][ T5187] ext4 filesystem being mounted at /111/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 58.726293][ T3323] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.736756][ T5187] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.860528][ T5204] random: crng reseeded on system resumption [ 58.980437][ T5210] FAULT_INJECTION: forcing a failure. [ 58.980437][ T5210] name failslab, interval 1, probability 0, space 0, times 0 [ 58.993272][ T5210] CPU: 0 UID: 0 PID: 5210 Comm: syz.2.667 Not tainted 6.12.0-rc5-syzkaller-00330-ga33ab3f94f51 #0 [ 59.004024][ T5210] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 59.014165][ T5210] Call Trace: [ 59.017472][ T5210] [ 59.020479][ T5210] dump_stack_lvl+0xf2/0x150 [ 59.025151][ T5210] dump_stack+0x15/0x20 [ 59.029391][ T5210] should_fail_ex+0x223/0x230 [ 59.034080][ T5210] ? audit_log_d_path+0x96/0x250 [ 59.039037][ T5210] should_failslab+0x8f/0xb0 [ 59.043684][ T5210] __kmalloc_cache_noprof+0x4b/0x2a0 [ 59.049069][ T5210] audit_log_d_path+0x96/0x250 [ 59.053883][ T5210] ? get_file_rcu+0xeb/0x100 [ 59.058533][ T5210] ? __rcu_read_unlock+0x4e/0x70 [ 59.063483][ T5210] audit_log_d_path_exe+0x42/0x70 [ 59.068512][ T5210] audit_log_task+0x155/0x180 [ 59.073292][ T5210] audit_seccomp+0x68/0x130 [ 59.077796][ T5210] __seccomp_filter+0x6fa/0x1180 [ 59.082875][ T5210] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 59.088513][ T5210] ? vfs_write+0x596/0x920 [ 59.092951][ T5210] ? __rcu_read_unlock+0x4e/0x70 [ 59.098010][ T5210] ? __fget_files+0x1d4/0x210 [ 59.102705][ T5210] __secure_computing+0x9f/0x1c0 [ 59.107678][ T5210] syscall_trace_enter+0xd1/0x1f0 [ 59.112741][ T5210] ? fpregs_assert_state_consistent+0x83/0xa0 [ 59.118834][ T5210] do_syscall_64+0xaa/0x1c0 [ 59.123475][ T5210] ? clear_bhb_loop+0x55/0xb0 [ 59.128161][ T5210] ? clear_bhb_loop+0x55/0xb0 [ 59.132853][ T5210] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 59.138842][ T5210] RIP: 0033:0x7f25bd4fe719 [ 59.143350][ T5210] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 59.162983][ T5210] RSP: 002b:00007f25bc177038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed [ 59.171431][ T5210] RAX: ffffffffffffffda RBX: 00007f25bd6b5f80 RCX: 00007f25bd4fe719 [ 59.179407][ T5210] RDX: 0000000000000000 RSI: 0000000000004000 RDI: 0000000020ffc000 [ 59.187434][ T5210] RBP: 00007f25bc177090 R08: 0000000000000000 R09: 0000000000000003 [ 59.195604][ T5210] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 59.203580][ T5210] R13: 0000000000000000 R14: 00007f25bd6b5f80 R15: 00007ffffa94f6c8 [ 59.211651][ T5210] [ 59.362997][ T5227] 9pnet_fd: Insufficient options for proto=fd [ 59.366835][ T5232] bond1: entered promiscuous mode [ 59.374268][ T5232] bond1: entered allmulticast mode [ 59.379816][ T5232] 8021q: adding VLAN 0 to HW filter on device bond1 [ 59.392797][ T5232] bond1 (unregistering): Released all slaves [ 59.400376][ T5235] loop2: detected capacity change from 0 to 512 [ 59.420770][ T5235] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 59.433516][ T5235] ext4 filesystem being mounted at /138/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 59.444604][ T5235] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.641653][ T5249] loop2: detected capacity change from 0 to 512 [ 59.665391][ T5249] EXT4-fs (loop2): too many log groups per flexible block group [ 59.673132][ T5249] EXT4-fs (loop2): failed to initialize mballoc (-12) [ 59.681474][ T5249] EXT4-fs (loop2): mount failed [ 59.720601][ T5259] loop4: detected capacity change from 0 to 512 [ 59.754586][ T5259] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.687: invalid indirect mapped block 256 (level 2) [ 59.771674][ T5259] EXT4-fs (loop4): 2 truncates cleaned up [ 59.779367][ T5267] random: crng reseeded on system resumption [ 59.780588][ T5259] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 59.817899][ T5261] IPVS: Error connecting to the multicast addr [ 59.884554][ T5274] loop2: detected capacity change from 0 to 512 [ 59.911188][ T5274] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 59.923817][ T5274] ext4 filesystem being mounted at /141/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 59.934978][ T5274] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.945250][ T3325] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.060470][ T5288] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=5288 comm=syz.0.697 [ 60.132988][ T5293] random: crng reseeded on system resumption [ 60.287333][ T5293] loop0: detected capacity change from 0 to 128 [ 60.353904][ T5316] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=5316 comm=syz.1.709 [ 60.355460][ T5318] loop2: detected capacity change from 0 to 128 [ 60.386058][ T5317] bond1: entered promiscuous mode [ 60.391162][ T5317] bond1: entered allmulticast mode [ 60.398423][ T5293] syz.0.699: attempt to access beyond end of device [ 60.398423][ T5293] loop0: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 60.411831][ T5293] Buffer I/O error on dev loop0, logical block 128, lost async page write [ 60.418265][ T5317] 8021q: adding VLAN 0 to HW filter on device bond1 [ 60.434322][ T5317] bond1 (unregistering): Released all slaves [ 60.527543][ T5326] bond1: entered promiscuous mode [ 60.532721][ T5326] bond1: entered allmulticast mode [ 60.538031][ T5326] 8021q: adding VLAN 0 to HW filter on device bond1 [ 60.552292][ T5326] bond1 (unregistering): Released all slaves [ 60.561662][ T5330] tipc: Enabling of bearer <th:sy> rejected, media not registered [ 60.752074][ T5359] loop2: detected capacity change from 0 to 512 [ 60.782037][ T5359] EXT4-fs (loop2): too many log groups per flexible block group [ 60.789782][ T5359] EXT4-fs (loop2): failed to initialize mballoc (-12) [ 60.796864][ T5359] EXT4-fs (loop2): mount failed [ 60.799550][ T5364] loop4: detected capacity change from 0 to 128 [ 60.871817][ T5374] loop2: detected capacity change from 0 to 128 [ 60.891662][ T5374] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 60.905968][ T5374] ext4 filesystem being mounted at /152/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 60.910953][ T5380] FAULT_INJECTION: forcing a failure. [ 60.910953][ T5380] name failslab, interval 1, probability 0, space 0, times 0 [ 60.929346][ T5380] CPU: 1 UID: 0 PID: 5380 Comm: syz.3.737 Not tainted 6.12.0-rc5-syzkaller-00330-ga33ab3f94f51 #0 [ 60.939964][ T5380] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 60.950053][ T5380] Call Trace: [ 60.953341][ T5380] [ 60.956270][ T5380] dump_stack_lvl+0xf2/0x150 [ 60.960931][ T5380] dump_stack+0x15/0x20 [ 60.965106][ T5380] should_fail_ex+0x223/0x230 [ 60.970415][ T5380] ? __kernfs_new_node+0x6a/0x380 [ 60.975559][ T5380] should_failslab+0x8f/0xb0 [ 60.980151][ T5380] kmem_cache_alloc_noprof+0x4c/0x290 [ 60.985605][ T5380] ? kstrdup+0x55/0x80 [ 60.989689][ T5380] __kernfs_new_node+0x6a/0x380 [ 60.994622][ T5380] ? make_kgid+0x113/0x300 [ 60.999123][ T5380] ? bpf_send_signal_common+0x1a5/0x230 [ 61.004983][ T5380] kernfs_create_dir_ns+0xc8/0x1b0 [ 61.010157][ T5380] sysfs_create_dir_ns+0xd7/0x1e0 [ 61.015197][ T5380] kobject_add_internal+0x49e/0x7a0 [ 61.020412][ T5380] kobject_init_and_add+0x15e/0x210 [ 61.025779][ T5380] ? sock_do_ioctl+0x11c/0x260 [ 61.030561][ T5380] ? sock_ioctl+0x46a/0x640 [ 61.035095][ T5380] ? __se_sys_ioctl+0xcd/0x140 [ 61.039867][ T5380] ? __x64_sys_ioctl+0x43/0x50 [ 61.044683][ T5380] ? __x64_sys_ioctl+0x43/0x50 [ 61.049570][ T5380] net_rx_queue_update_kobjects+0x15b/0x410 [ 61.055506][ T5380] netif_set_real_num_rx_queues+0xdb/0x160 [ 61.061387][ T5380] veth_set_channels+0x247/0x870 [ 61.066359][ T5380] ethtool_set_channels+0x36b/0x3d0 [ 61.072273][ T5380] dev_ethtool+0xf55/0x14c0 [ 61.076853][ T5380] ? __rcu_read_unlock+0x4e/0x70 [ 61.081805][ T5380] dev_ioctl+0x854/0xab0 [ 61.086146][ T5380] sock_do_ioctl+0x11c/0x260 [ 61.090801][ T5380] sock_ioctl+0x46a/0x640 [ 61.095164][ T5380] ? __pfx_sock_ioctl+0x10/0x10 [ 61.100065][ T5380] __se_sys_ioctl+0xcd/0x140 [ 61.104675][ T5380] __x64_sys_ioctl+0x43/0x50 [ 61.109369][ T5380] x64_sys_call+0x15cc/0x2d60 [ 61.114129][ T5380] do_syscall_64+0xc9/0x1c0 [ 61.118678][ T5380] ? clear_bhb_loop+0x55/0xb0 [ 61.123358][ T5380] ? clear_bhb_loop+0x55/0xb0 [ 61.128047][ T5380] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 61.134006][ T5380] RIP: 0033:0x7f02a83de719 [ 61.138441][ T5380] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 61.158083][ T5380] RSP: 002b:00007f02a7057038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 61.166503][ T5380] RAX: ffffffffffffffda RBX: 00007f02a8595f80 RCX: 00007f02a83de719 [ 61.174486][ T5380] RDX: 00000000200002c0 RSI: 0000000000008946 RDI: 0000000000000003 [ 61.182455][ T5380] RBP: 00007f02a7057090 R08: 0000000000000000 R09: 0000000000000000 [ 61.190471][ T5380] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 61.198444][ T5380] R13: 0000000000000000 R14: 00007f02a8595f80 R15: 00007ffd236173d8 [ 61.206502][ T5380] [ 61.210114][ T5380] kobject: kobject_add_internal failed for rx-1 (error: -12 parent: queues) [ 61.212028][ T3328] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 61.333623][ T5398] netlink: 20 bytes leftover after parsing attributes in process `syz.2.746'. [ 61.359002][ T5402] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 61.387065][ T5409] tipc: Enabling of bearer <th:sy> rejected, media not registered [ 61.395910][ T5403] random: crng reseeded on system resumption [ 61.473727][ T5417] loop2: detected capacity change from 0 to 512 [ 61.491202][ T5417] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 61.506382][ T5417] ext4 filesystem being mounted at /156/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 61.533891][ T5417] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.540117][ T5403] loop0: detected capacity change from 0 to 128 [ 61.657008][ T5433] random: crng reseeded on system resumption [ 61.830429][ T5441] validate_nla: 1 callbacks suppressed [ 61.830521][ T5441] netlink: 'syz.0.760': attribute type 21 has an invalid length. [ 61.852146][ T5433] loop4: detected capacity change from 0 to 128 [ 61.863934][ T5441] netlink: 132 bytes leftover after parsing attributes in process `syz.0.760'. [ 61.976063][ T5433] syz.4.757: attempt to access beyond end of device [ 61.976063][ T5433] loop4: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 61.989545][ T5433] Buffer I/O error on dev loop4, logical block 128, lost async page write [ 62.048751][ T5456] loop0: detected capacity change from 0 to 256 [ 62.081964][ T5453] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 62.123438][ T5463] loop3: detected capacity change from 0 to 512 [ 62.139823][ T5467] FAULT_INJECTION: forcing a failure. [ 62.139823][ T5467] name failslab, interval 1, probability 0, space 0, times 0 [ 62.152546][ T5467] CPU: 0 UID: 0 PID: 5467 Comm: syz.0.772 Not tainted 6.12.0-rc5-syzkaller-00330-ga33ab3f94f51 #0 [ 62.163158][ T5467] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 62.173225][ T5467] Call Trace: [ 62.176509][ T5467] [ 62.179463][ T5467] dump_stack_lvl+0xf2/0x150 [ 62.184077][ T5467] dump_stack+0x15/0x20 [ 62.188295][ T5467] should_fail_ex+0x223/0x230 [ 62.193002][ T5467] ? __kvmalloc_node_noprof+0x72/0x170 [ 62.198500][ T5467] should_failslab+0x8f/0xb0 [ 62.203145][ T5467] __kmalloc_node_noprof+0xa8/0x380 [ 62.208606][ T5467] __kvmalloc_node_noprof+0x72/0x170 [ 62.212953][ T5463] EXT4-fs (loop3): too many log groups per flexible block group [ 62.213935][ T5467] nf_hook_entries_grow+0x1bd/0x470 [ 62.221616][ T5463] EXT4-fs (loop3): failed to initialize mballoc (-12) [ 62.226744][ T5467] __nf_register_net_hook+0x16b/0x480 [ 62.238906][ T5467] nf_register_net_hook+0x88/0x130 [ 62.244138][ T5467] nf_register_net_hooks+0x41/0x140 [ 62.244178][ T5467] nf_ct_netns_do_get+0x2a6/0x370 [ 62.244212][ T5467] ? pcpu_chunk_relocate+0x183/0x280 [ 62.244267][ T5467] nf_ct_netns_get+0x83/0xb0 [ 62.244300][ T5467] xt_ct_tg_check+0x81/0x790 [ 62.244330][ T5467] xt_ct_tg_check_v1+0x49/0x60 [ 62.244351][ T5467] xt_check_target+0x266/0x480 [ 62.244383][ T5467] ? strnlen+0x28/0x50 [ 62.244417][ T5467] ? strcmp+0x21/0x50 [ 62.244443][ T5467] ? xt_find_target+0x1bd/0x1e0 [ 62.244467][ T5467] translate_table+0xc1e/0xf70 [ 62.244542][ T5467] do_ipt_set_ctl+0x7bd/0x8b0 [ 62.244567][ T5467] ? tcp_release_cb+0xfe/0x380 [ 62.244641][ T5467] nf_setsockopt+0x195/0x1b0 [ 62.244683][ T5467] ip_setsockopt+0xea/0x100 [ 62.244713][ T5467] tcp_setsockopt+0x93/0xb0 [ 62.244817][ T5467] sock_common_setsockopt+0x64/0x80 [ 62.244880][ T5467] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 62.244915][ T5467] __sys_setsockopt+0x1cc/0x240 [ 62.245044][ T5467] __x64_sys_setsockopt+0x66/0x80 [ 62.245080][ T5467] x64_sys_call+0x278d/0x2d60 [ 62.245113][ T5467] do_syscall_64+0xc9/0x1c0 [ 62.245176][ T5467] ? clear_bhb_loop+0x55/0xb0 [ 62.245195][ T5467] ? clear_bhb_loop+0x55/0xb0 [ 62.245219][ T5467] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 62.245321][ T5467] RIP: 0033:0x7f0555dbe719 [ 62.245340][ T5467] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 62.245360][ T5467] RSP: 002b:00007f0554a37038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 62.245429][ T5467] RAX: ffffffffffffffda RBX: 00007f0555f75f80 RCX: 00007f0555dbe719 [ 62.245445][ T5467] RDX: 0000000000000040 RSI: 0004000000000000 RDI: 0000000000000003 [ 62.245461][ T5467] RBP: 00007f0554a37090 R08: 00000000000002b8 R09: 0000000000000000 [ 62.245477][ T5467] R10: 0000000020000780 R11: 0000000000000246 R12: 0000000000000002 [ 62.245492][ T5467] R13: 0000000000000000 R14: 00007f0555f75f80 R15: 00007fffc08b2228 [ 62.245570][ T5467] [ 62.246028][ T5463] EXT4-fs (loop3): mount failed [ 62.531575][ T29] kauditd_printk_skb: 1488 callbacks suppressed [ 62.531590][ T29] audit: type=1400 audit(1730706509.666:5200): avc: denied { create } for pid=5478 comm="syz.2.777" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 62.562520][ T5479] netlink: 76 bytes leftover after parsing attributes in process `syz.2.777'. [ 62.587609][ T29] audit: type=1400 audit(1730706509.696:5201): avc: denied { write } for pid=5478 comm="syz.2.777" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 62.607902][ T29] audit: type=1400 audit(1730706509.696:5202): avc: denied { nlmsg_write } for pid=5478 comm="syz.2.777" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 62.661888][ T29] audit: type=1400 audit(1730706509.796:5203): avc: denied { create } for pid=5490 comm="syz.4.783" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 62.681259][ T29] audit: type=1400 audit(1730706509.796:5204): avc: denied { connect } for pid=5490 comm="syz.4.783" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 62.710845][ T29] audit: type=1400 audit(1730706509.846:5205): avc: denied { read } for pid=5484 comm="syz.3.780" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 62.735199][ T29] audit: type=1400 audit(1730706509.846:5206): avc: denied { open } for pid=5484 comm="syz.3.780" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 62.759856][ T29] audit: type=1326 audit(1730706509.846:5207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5484 comm="syz.3.780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02a83de719 code=0x7ffc0000 [ 62.783319][ T29] audit: type=1326 audit(1730706509.846:5208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5484 comm="syz.3.780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=64 compat=0 ip=0x7f02a83de719 code=0x7ffc0000 [ 62.806723][ T29] audit: type=1326 audit(1730706509.846:5209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5484 comm="syz.3.780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02a83de719 code=0x7ffc0000 [ 62.836772][ T5499] loop0: detected capacity change from 0 to 512 [ 62.872606][ T5499] EXT4-fs (loop0): too many log groups per flexible block group [ 62.880354][ T5499] EXT4-fs (loop0): failed to initialize mballoc (-12) [ 62.897927][ T5502] loop2: detected capacity change from 0 to 256 [ 62.904349][ T5499] EXT4-fs (loop0): mount failed [ 62.915989][ T5502] FAT-fs (loop2): bogus logical sector size 0 [ 62.922158][ T5502] FAT-fs (loop2): Can't find a valid FAT filesystem [ 63.002090][ T5511] bond1: entered promiscuous mode [ 63.007193][ T5511] bond1: entered allmulticast mode [ 63.016339][ T5511] 8021q: adding VLAN 0 to HW filter on device bond1 [ 63.137280][ T5511] bond1 (unregistering): Released all slaves [ 63.240122][ T5517] syzkaller0: entered allmulticast mode [ 63.268225][ T5523] tipc: Enabling of bearer <th:sy> rejected, media not registered [ 63.447705][ T5536] loop3: detected capacity change from 0 to 512 [ 63.459195][ T5530] delete_channel: no stack [ 63.472407][ T5536] EXT4-fs (loop3): too many log groups per flexible block group [ 63.480223][ T5536] EXT4-fs (loop3): failed to initialize mballoc (-12) [ 63.487232][ T5536] EXT4-fs (loop3): mount failed [ 63.565311][ T5552] loop4: detected capacity change from 0 to 1024 [ 63.577422][ T5552] EXT4-fs: test_dummy_encryption option not supported [ 63.702179][ T5562] loop3: detected capacity change from 0 to 2048 [ 63.733084][ T5562] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 63.858434][ T5514] syzkaller0: left allmulticast mode [ 63.903780][ T3330] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.156537][ T5576] FAULT_INJECTION: forcing a failure. [ 64.156537][ T5576] name failslab, interval 1, probability 0, space 0, times 0 [ 64.169217][ T5576] CPU: 1 UID: 0 PID: 5576 Comm: syz.0.807 Not tainted 6.12.0-rc5-syzkaller-00330-ga33ab3f94f51 #0 [ 64.179833][ T5576] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 64.189910][ T5576] Call Trace: [ 64.193202][ T5576] [ 64.196163][ T5576] dump_stack_lvl+0xf2/0x150 [ 64.200851][ T5576] dump_stack+0x15/0x20 [ 64.205029][ T5576] should_fail_ex+0x223/0x230 [ 64.209747][ T5576] ? sidtab_sid2str_get+0xb8/0x140 [ 64.214896][ T5576] should_failslab+0x8f/0xb0 [ 64.219527][ T5576] __kmalloc_node_track_caller_noprof+0xa6/0x380 [ 64.225950][ T5576] ? vsnprintf+0xdd8/0xe30 [ 64.230412][ T5576] kmemdup_noprof+0x2a/0x60 [ 64.235024][ T5576] sidtab_sid2str_get+0xb8/0x140 [ 64.240005][ T5576] security_sid_to_context_core+0x1eb/0x2f0 [ 64.246019][ T5576] security_sid_to_context+0x27/0x30 [ 64.251370][ T5576] selinux_secid_to_secctx+0x22/0x30 [ 64.256797][ T5576] security_secid_to_secctx+0x48/0x90 [ 64.262198][ T5576] audit_log_task_context+0x8c/0x1b0 [ 64.267548][ T5576] audit_log_task+0xfb/0x180 [ 64.272151][ T5576] audit_seccomp+0x68/0x130 [ 64.276673][ T5576] __seccomp_filter+0x6fa/0x1180 [ 64.281645][ T5576] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 64.287330][ T5576] ? vfs_write+0x596/0x920 [ 64.291818][ T5576] ? __rcu_read_unlock+0x4e/0x70 [ 64.296795][ T5576] ? __rcu_read_unlock+0x4e/0x70 [ 64.301766][ T5576] __secure_computing+0x9f/0x1c0 [ 64.306845][ T5576] syscall_trace_enter+0xd1/0x1f0 [ 64.311900][ T5576] ? fpregs_assert_state_consistent+0x83/0xa0 [ 64.318007][ T5576] do_syscall_64+0xaa/0x1c0 [ 64.322625][ T5576] ? clear_bhb_loop+0x55/0xb0 [ 64.327346][ T5576] ? clear_bhb_loop+0x55/0xb0 [ 64.332094][ T5576] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 64.338051][ T5576] RIP: 0033:0x7f0555dbd15c [ 64.342487][ T5576] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 64.362137][ T5576] RSP: 002b:00007f0554a37030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 64.370571][ T5576] RAX: ffffffffffffffda RBX: 00007f0555f75f80 RCX: 00007f0555dbd15c [ 64.378571][ T5576] RDX: 000000000000000f RSI: 00007f0554a370a0 RDI: 0000000000000006 [ 64.386636][ T5576] RBP: 00007f0554a37090 R08: 0000000000000000 R09: 0000000000000000 [ 64.394625][ T5576] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 64.402625][ T5576] R13: 0000000000000000 R14: 00007f0555f75f80 R15: 00007fffc08b2228 [ 64.410629][ T5576] [ 64.529572][ T5596] random: crng reseeded on system resumption [ 64.600317][ T5600] loop2: detected capacity change from 0 to 128 [ 64.613544][ T5595] loop4: detected capacity change from 0 to 8192 [ 64.640140][ T5596] syz.2.816: attempt to access beyond end of device [ 64.640140][ T5596] loop2: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 64.653515][ T5596] Buffer I/O error on dev loop2, logical block 128, lost async page write [ 64.754699][ T5620] syz.2.825[5620] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 64.754763][ T5620] syz.2.825[5620] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 64.766639][ T5620] syz.2.825[5620] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 64.805279][ T5618] 9pnet_fd: Insufficient options for proto=fd [ 64.844517][ T5622] loop2: detected capacity change from 0 to 256 [ 64.863209][ T5622] FAT-fs (loop2): Directory bread(block 64) failed [ 64.870003][ T5622] FAT-fs (loop2): Directory bread(block 65) failed [ 64.883746][ T5622] FAT-fs (loop2): Directory bread(block 66) failed [ 64.890471][ T5622] FAT-fs (loop2): Directory bread(block 67) failed [ 64.898729][ T5622] FAT-fs (loop2): Directory bread(block 68) failed [ 64.908816][ T5622] FAT-fs (loop2): Directory bread(block 69) failed [ 64.915570][ T5622] FAT-fs (loop2): Directory bread(block 70) failed [ 64.927920][ T5628] bond1: entered promiscuous mode [ 64.933334][ T5622] FAT-fs (loop2): Directory bread(block 71) failed [ 64.933544][ T5622] FAT-fs (loop2): Directory bread(block 72) failed [ 64.940146][ T5628] bond1: entered allmulticast mode [ 64.942422][ T5628] 8021q: adding VLAN 0 to HW filter on device bond1 [ 64.947014][ T5622] FAT-fs (loop2): Directory bread(block 73) failed [ 64.968323][ T5628] bond1 (unregistering): Released all slaves [ 65.063524][ T5634] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.113099][ T5636] random: crng reseeded on system resumption [ 65.120233][ T5634] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.182066][ T5644] loop3: detected capacity change from 0 to 128 [ 65.210109][ T5636] syz.3.831: attempt to access beyond end of device [ 65.210109][ T5636] loop3: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 65.223514][ T5636] Buffer I/O error on dev loop3, logical block 128, lost async page write [ 65.238126][ T5634] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.297823][ T5649] netlink: 4 bytes leftover after parsing attributes in process `syz.3.836'. [ 65.308446][ T5634] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.320650][ T5649] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5649 comm=syz.3.836 [ 65.362047][ T5658] program syz.3.841 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 65.383268][ T5634] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.396291][ T5658] loop3: detected capacity change from 0 to 2048 [ 65.406262][ T5634] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.431346][ T5634] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.443986][ T5634] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.492655][ T5665] netlink: 16 bytes leftover after parsing attributes in process `syz.3.841'. [ 65.512392][ T5669] random: crng reseeded on system resumption [ 65.565494][ T5673] loop4: detected capacity change from 0 to 128 [ 65.612304][ T5669] syz.4.845: attempt to access beyond end of device [ 65.612304][ T5669] loop4: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 65.625682][ T5669] Buffer I/O error on dev loop4, logical block 128, lost async page write [ 65.651100][ T5677] bond1: entered promiscuous mode [ 65.656238][ T5677] bond1: entered allmulticast mode [ 65.661842][ T5677] 8021q: adding VLAN 0 to HW filter on device bond1 [ 65.684800][ T5677] bond1 (unregistering): Released all slaves [ 65.715908][ T5679] bond1: entered promiscuous mode [ 65.721103][ T5679] bond1: entered allmulticast mode [ 65.725664][ T5691] loop4: detected capacity change from 0 to 512 [ 65.727196][ T5679] 8021q: adding VLAN 0 to HW filter on device bond1 [ 65.749511][ T5679] bond1 (unregistering): Released all slaves [ 65.763220][ T5691] EXT4-fs (loop4): too many log groups per flexible block group [ 65.770989][ T5691] EXT4-fs (loop4): failed to initialize mballoc (-12) [ 65.782531][ T5691] EXT4-fs (loop4): mount failed [ 65.797804][ T5702] netlink: 36 bytes leftover after parsing attributes in process `syz.0.856'. [ 65.841011][ T5704] smc: net device bond0 applied user defined pnetid SYZ0 [ 65.849415][ T5708] netlink: 4 bytes leftover after parsing attributes in process `syz.2.859'. [ 65.854823][ T5704] smc: net device bond0 erased user defined pnetid SYZ0 [ 65.867155][ T5704] netlink: 76 bytes leftover after parsing attributes in process `+}[@'. [ 65.888143][ T5708] team0 (unregistering): Port device team_slave_0 removed [ 65.900500][ T5708] team0 (unregistering): Port device team_slave_1 removed [ 65.924868][ T5713] tipc: Started in network mode [ 65.929898][ T5713] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 65.945570][ T5713] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 65.954238][ T5713] tipc: Enabled bearer , priority 10 [ 66.066450][ T5739] random: crng reseeded on system resumption [ 66.091560][ T5741] netlink: 20 bytes leftover after parsing attributes in process `syz.4.872'. [ 66.100676][ T5741] netlink: 24 bytes leftover after parsing attributes in process `syz.4.872'. [ 66.176636][ T5750] loop4: detected capacity change from 0 to 512 [ 66.190832][ T5750] ext4 filesystem being mounted at /175/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 66.195898][ C1] dccp_check_seqno: Step 6 failed for CLOSEREQ packet, (LSWL(271642059872409) <= P.seqno(271642059872408) <= S.SWH(271642059872432)) and (P.ackno exists or LAWL(200011389131610) <= P.ackno(200011389131610) <= S.AWH(200011389131611), sending SYNC... [ 66.314064][ T5757] loop3: detected capacity change from 0 to 128 [ 66.415775][ T5765] netlink: 268 bytes leftover after parsing attributes in process `syz.4.881'. [ 66.424855][ T5765] unsupported nla_type 65024 [ 66.434085][ T5767] loop3: detected capacity change from 0 to 512 [ 66.441427][ T5767] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 66.454297][ T5767] EXT4-fs (loop3): 1 truncate cleaned up [ 66.462021][ T5767] netlink: 24 bytes leftover after parsing attributes in process `syz.3.882'. [ 66.496316][ T5774] bond1: entered promiscuous mode [ 66.501495][ T5774] bond1: entered allmulticast mode [ 66.507085][ T5774] 8021q: adding VLAN 0 to HW filter on device bond1 [ 66.519799][ T5774] bond1 (unregistering): Released all slaves [ 66.636746][ T5803] netlink: 'syz.4.890': attribute type 29 has an invalid length. [ 66.645559][ T5803] netlink: 'syz.4.890': attribute type 29 has an invalid length. [ 66.719868][ T5815] loop2: detected capacity change from 0 to 512 [ 66.734804][ T5815] EXT4-fs: Ignoring removed mblk_io_submit option [ 66.743124][ T5815] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 66.761196][ T5815] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a042c118, mo2=0002] [ 66.761246][ T5823] loop4: detected capacity change from 0 to 128 [ 66.775795][ T5815] System zones: 1-12 [ 66.780729][ T5815] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2240: inode #15: comm syz.2.895: corrupted in-inode xattr: e_value size too large [ 66.787723][ T5830] loop3: detected capacity change from 0 to 512 [ 66.796684][ T5815] EXT4-fs error (device loop2): ext4_orphan_get:1393: comm syz.2.895: couldn't read orphan inode 15 (err -117) [ 66.811308][ T5830] EXT4-fs: Ignoring removed nobh option [ 66.812775][ T5823] ext4 filesystem being mounted at /188/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 66.822874][ T5830] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -13 [ 66.837828][ T5823] netlink: zone id is out of range [ 66.839054][ T5830] EXT4-fs error (device loop3): ext4_clear_blocks:876: inode #13: comm syz.3.901: attempt to clear invalid blocks 2 len 1 [ 66.852166][ T5823] netlink: zone id is out of range [ 66.862208][ T5830] EXT4-fs (loop3): Remounting filesystem read-only [ 66.862796][ T5823] netlink: zone id is out of range [ 66.874203][ T5830] EXT4-fs (loop3): 1 truncate cleaned up [ 66.874585][ T5823] netlink: zone id is out of range [ 66.885794][ T5830] SELinux: (dev loop3, type ext4) getxattr errno 5 [ 66.886551][ T5823] netlink: zone id is out of range [ 66.901147][ T5823] netlink: zone id is out of range [ 66.906483][ T5823] netlink: zone id is out of range [ 66.913217][ T5823] netlink: zone id is out of range [ 66.918383][ T5823] netlink: zone id is out of range [ 66.958360][ T1039] tipc: Node number set to 1 [ 67.003334][ T5840] loop0: detected capacity change from 0 to 2048 [ 67.074017][ T5840] loop0: p1 p2 p3 [ 67.107147][ T5861] bond1: entered promiscuous mode [ 67.112540][ T5861] bond1: entered allmulticast mode [ 67.117990][ T5867] FAULT_INJECTION: forcing a failure. [ 67.117990][ T5867] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 67.131249][ T5867] CPU: 0 UID: 0 PID: 5867 Comm: syz.0.919 Not tainted 6.12.0-rc5-syzkaller-00330-ga33ab3f94f51 #0 [ 67.141878][ T5867] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 67.151956][ T5867] Call Trace: [ 67.155279][ T5867] [ 67.158223][ T5867] dump_stack_lvl+0xf2/0x150 [ 67.162843][ T5867] dump_stack+0x15/0x20 [ 67.167063][ T5867] should_fail_ex+0x223/0x230 [ 67.171830][ T5867] should_fail+0xb/0x10 [ 67.176103][ T5867] should_fail_usercopy+0x1a/0x20 [ 67.181151][ T5867] strncpy_from_user+0x25/0x210 [ 67.186038][ T5867] ? kmem_cache_alloc_noprof+0x10c/0x290 [ 67.191708][ T5867] getname_flags+0xb0/0x3b0 [ 67.196332][ T5867] user_path_at+0x26/0x110 [ 67.200783][ T5867] __se_sys_name_to_handle_at+0x90/0x490 [ 67.206666][ T5867] ? ksys_write+0x17a/0x1b0 [ 67.211390][ T5867] __x64_sys_name_to_handle_at+0x67/0x80 [ 67.217126][ T5867] x64_sys_call+0x28ff/0x2d60 [ 67.221882][ T5867] do_syscall_64+0xc9/0x1c0 [ 67.226449][ T5867] ? clear_bhb_loop+0x55/0xb0 [ 67.231166][ T5867] ? clear_bhb_loop+0x55/0xb0 [ 67.235942][ T5867] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 67.241872][ T5867] RIP: 0033:0x7f0555dbe719 [ 67.246308][ T5867] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 67.265948][ T5867] RSP: 002b:00007f0554a37038 EFLAGS: 00000246 ORIG_RAX: 000000000000012f [ 67.274396][ T5867] RAX: ffffffffffffffda RBX: 00007f0555f75f80 RCX: 00007f0555dbe719 [ 67.282474][ T5867] RDX: 0000000000000000 RSI: 0000000020000080 RDI: ffffffffffffffff [ 67.290567][ T5867] RBP: 00007f0554a37090 R08: 0000000000000000 R09: 0000000000000000 [ 67.298552][ T5867] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 67.306672][ T5867] R13: 0000000000000000 R14: 00007f0555f75f80 R15: 00007fffc08b2228 [ 67.314737][ T5867] [ 67.322586][ T5861] 8021q: adding VLAN 0 to HW filter on device bond1 [ 67.352296][ T5861] bond1 (unregistering): Released all slaves [ 67.369901][ T5871] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.377138][ T5871] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.390286][ T5871] bridge0: entered allmulticast mode [ 67.403854][ T5877] netlink: 'syz.0.921': attribute type 29 has an invalid length. [ 67.415816][ T5877] netlink: 'syz.0.921': attribute type 29 has an invalid length. [ 67.510166][ T5883] loop3: detected capacity change from 0 to 1024 [ 67.547056][ T29] kauditd_printk_skb: 954 callbacks suppressed [ 67.547070][ T29] audit: type=1400 audit(1730706514.674:6163): avc: denied { block_suspend } for pid=5890 comm="syz.0.927" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 67.598469][ T5883] EXT4-fs warning (device loop3): ext4_enable_quotas:7097: Failed to enable quota tracking (type=2, err=-13, ino=12). Please run e2fsck to fix. [ 67.642093][ T5891] pim6reg1: entered promiscuous mode [ 67.647550][ T5891] pim6reg1: entered allmulticast mode [ 67.658073][ T5883] EXT4-fs (loop3): mount failed [ 67.665702][ T29] audit: type=1400 audit(1730706514.754:6164): avc: denied { module_load } for pid=5890 comm="syz.0.927" path="/sys/power/wakeup_count" dev="sysfs" ino=193 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=system permissive=1 [ 67.787584][ T29] audit: type=1400 audit(1730706514.914:6165): avc: denied { create } for pid=5903 comm="syz.4.931" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 67.816766][ T29] audit: type=1400 audit(1730706514.944:6166): avc: denied { getopt } for pid=5903 comm="syz.4.931" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 67.872701][ T29] audit: type=1400 audit(1730706514.974:6167): avc: denied { name_bind } for pid=5905 comm="syz.0.932" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 67.881697][ T5908] netlink: 'syz.4.934': attribute type 29 has an invalid length. [ 67.894427][ T29] audit: type=1400 audit(1730706514.984:6168): avc: denied { node_bind } for pid=5905 comm="syz.0.932" saddr=172.20.20.170 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 67.926346][ T29] audit: type=1400 audit(1730706515.064:6169): avc: denied { write } for pid=3000 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 67.947903][ T29] audit: type=1400 audit(1730706515.064:6170): avc: denied { remove_name } for pid=3000 comm="syslogd" name="messages" dev="tmpfs" ino=6 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 67.970623][ T29] audit: type=1400 audit(1730706515.064:6171): avc: denied { rename } for pid=3000 comm="syslogd" name="messages" dev="tmpfs" ino=6 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 67.992994][ T29] audit: type=1400 audit(1730706515.064:6172): avc: denied { add_name } for pid=3000 comm="syslogd" name="messages.0" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 68.016071][ T5910] netlink: 'syz.4.934': attribute type 29 has an invalid length. [ 68.087891][ T5916] bond1: entered promiscuous mode [ 68.093079][ T5916] bond1: entered allmulticast mode [ 68.112518][ T5916] 8021q: adding VLAN 0 to HW filter on device bond1 [ 68.136289][ T5916] bond1 (unregistering): Released all slaves [ 68.356498][ T5944] loop2: detected capacity change from 0 to 512 [ 68.370867][ T5931] delete_channel: no stack [ 68.386952][ T5944] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.947: invalid indirect mapped block 256 (level 2) [ 68.408533][ T5944] EXT4-fs (loop2): 2 truncates cleaned up [ 68.416148][ T5944] EXT4-fs mount: 10 callbacks suppressed [ 68.416208][ T5944] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.446271][ T3328] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.492802][ T5957] loop4: detected capacity change from 0 to 512 [ 68.542476][ T5964] bond1: entered promiscuous mode [ 68.547566][ T5964] bond1: entered allmulticast mode [ 68.550573][ T5957] EXT4-fs (loop4): too many log groups per flexible block group [ 68.557951][ T5964] 8021q: adding VLAN 0 to HW filter on device bond1 [ 68.560590][ T5957] EXT4-fs (loop4): failed to initialize mballoc (-12) [ 68.576137][ T5957] EXT4-fs (loop4): mount failed [ 68.577215][ T5964] bond1 (unregistering): Released all slaves [ 68.657998][ T5982] random: crng reseeded on system resumption [ 68.787037][ T5975] delete_channel: no stack [ 68.832990][ T5982] loop4: detected capacity change from 0 to 128 [ 68.855749][ T6008] loop0: detected capacity change from 0 to 512 [ 68.890564][ T6008] EXT4-fs (loop0): too many log groups per flexible block group [ 68.898369][ T6008] EXT4-fs (loop0): failed to initialize mballoc (-12) [ 68.914478][ T6013] bond1: entered promiscuous mode [ 68.919617][ T6013] bond1: entered allmulticast mode [ 68.926361][ T6008] EXT4-fs (loop0): mount failed [ 68.932931][ T6013] 8021q: adding VLAN 0 to HW filter on device bond1 [ 68.945949][ T6013] bond1 (unregistering): Released all slaves [ 68.953096][ T6021] loop3: detected capacity change from 0 to 128 [ 68.977177][ T6023] netlink: 20 bytes leftover after parsing attributes in process `syz.0.977'. [ 68.987112][ T6023] netlink: 8 bytes leftover after parsing attributes in process `syz.0.977'. [ 69.112034][ T6033] serio: Serial port pts0 [ 69.747915][ T6049] bond1: entered promiscuous mode [ 69.753054][ T6049] bond1: entered allmulticast mode [ 69.758597][ T6049] 8021q: adding VLAN 0 to HW filter on device bond1 [ 69.769780][ T6049] bond1 (unregistering): Released all slaves [ 69.875183][ T6056] random: crng reseeded on system resumption [ 70.016312][ T6075] loop0: detected capacity change from 0 to 128 [ 70.163968][ T6076] batadv0: entered promiscuous mode [ 70.193564][ T6076] batadv_slave_0: entered promiscuous mode [ 70.201133][ T6076] batadv_slave_0: left promiscuous mode [ 70.204931][ T6092] serio: Serial port pts1 [ 70.218574][ T6076] batadv0: left promiscuous mode [ 70.290933][ T6100] loop3: detected capacity change from 0 to 512 [ 70.311667][ T6100] EXT4-fs (loop3): too many log groups per flexible block group [ 70.319544][ T6100] EXT4-fs (loop3): failed to initialize mballoc (-12) [ 70.338200][ T6100] EXT4-fs (loop3): mount failed [ 70.344501][ T6114] FAULT_INJECTION: forcing a failure. [ 70.344501][ T6114] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 70.357714][ T6114] CPU: 1 UID: 0 PID: 6114 Comm: syz.0.1012 Not tainted 6.12.0-rc5-syzkaller-00330-ga33ab3f94f51 #0 [ 70.368422][ T6114] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 70.378515][ T6114] Call Trace: [ 70.381810][ T6114] [ 70.384741][ T6114] dump_stack_lvl+0xf2/0x150 [ 70.389426][ T6114] dump_stack+0x15/0x20 [ 70.393665][ T6114] should_fail_ex+0x223/0x230 [ 70.398362][ T6114] should_fail+0xb/0x10 [ 70.402534][ T6114] should_fail_usercopy+0x1a/0x20 [ 70.407574][ T6114] _copy_to_user+0x20/0xa0 [ 70.412050][ T6114] simple_read_from_buffer+0xa0/0x110 [ 70.417451][ T6114] proc_fail_nth_read+0xf9/0x140 [ 70.422458][ T6114] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 70.428026][ T6114] vfs_read+0x1a2/0x700 [ 70.432221][ T6114] ? __fget_files+0x1d4/0x210 [ 70.436918][ T6114] ksys_read+0xeb/0x1b0 [ 70.441125][ T6114] __x64_sys_read+0x42/0x50 [ 70.445672][ T6114] x64_sys_call+0x27d3/0x2d60 [ 70.450362][ T6114] do_syscall_64+0xc9/0x1c0 [ 70.454952][ T6114] ? clear_bhb_loop+0x55/0xb0 [ 70.459644][ T6114] ? clear_bhb_loop+0x55/0xb0 [ 70.464325][ T6114] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 70.470308][ T6114] RIP: 0033:0x7f0555dbd15c [ 70.474777][ T6114] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 70.494400][ T6114] RSP: 002b:00007f0554a37030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 70.502905][ T6114] RAX: ffffffffffffffda RBX: 00007f0555f75f80 RCX: 00007f0555dbd15c [ 70.510885][ T6114] RDX: 000000000000000f RSI: 00007f0554a370a0 RDI: 0000000000000006 [ 70.518990][ T6114] RBP: 00007f0554a37090 R08: 0000000000000000 R09: 0000000000000000 [ 70.526981][ T6114] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000001 [ 70.534976][ T6114] R13: 0000000000000000 R14: 00007f0555f75f80 R15: 00007fffc08b2228 [ 70.542998][ T6114] [ 70.578938][ T6118] pim6reg1: entered promiscuous mode [ 70.584340][ T6118] pim6reg1: entered allmulticast mode [ 70.648726][ T6128] FAULT_INJECTION: forcing a failure. [ 70.648726][ T6128] name failslab, interval 1, probability 0, space 0, times 0 [ 70.661489][ T6128] CPU: 0 UID: 0 PID: 6128 Comm: syz.0.1019 Not tainted 6.12.0-rc5-syzkaller-00330-ga33ab3f94f51 #0 [ 70.672182][ T6128] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 70.682241][ T6128] Call Trace: [ 70.685593][ T6128] [ 70.688551][ T6128] dump_stack_lvl+0xf2/0x150 [ 70.693164][ T6128] dump_stack+0x15/0x20 [ 70.697322][ T6128] should_fail_ex+0x223/0x230 [ 70.702077][ T6128] ? iovec_from_user+0x84/0x210 [ 70.706961][ T6128] should_failslab+0x8f/0xb0 [ 70.711593][ T6128] __kmalloc_noprof+0xa5/0x370 [ 70.716449][ T6128] iovec_from_user+0x84/0x210 [ 70.721204][ T6128] __import_iovec+0xf0/0x560 [ 70.725801][ T6128] import_iovec+0xbc/0xd0 [ 70.730140][ T6128] copy_msghdr_from_user+0x24e/0x2a0 [ 70.735557][ T6128] __sys_sendmmsg+0x21a/0x500 [ 70.740439][ T6128] __x64_sys_sendmmsg+0x57/0x70 [ 70.745372][ T6128] x64_sys_call+0xa49/0x2d60 [ 70.750105][ T6128] do_syscall_64+0xc9/0x1c0 [ 70.754621][ T6128] ? clear_bhb_loop+0x55/0xb0 [ 70.759346][ T6128] ? clear_bhb_loop+0x55/0xb0 [ 70.764216][ T6128] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 70.770119][ T6128] RIP: 0033:0x7f0555dbe719 [ 70.774539][ T6128] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 70.794443][ T6128] RSP: 002b:00007f0554a37038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 70.802874][ T6128] RAX: ffffffffffffffda RBX: 00007f0555f75f80 RCX: 00007f0555dbe719 [ 70.811052][ T6128] RDX: 0400000000000172 RSI: 0000000020003cc0 RDI: 0000000000000003 [ 70.819033][ T6128] RBP: 00007f0554a37090 R08: 0000000000000000 R09: 0000000000000000 [ 70.827066][ T6128] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 70.835053][ T6128] R13: 0000000000000000 R14: 00007f0555f75f80 R15: 00007fffc08b2228 [ 70.843084][ T6128] [ 70.895665][ T6138] loop3: detected capacity change from 0 to 512 [ 70.909456][ T6138] EXT4-fs (loop3): too many log groups per flexible block group [ 70.917246][ T6138] EXT4-fs (loop3): failed to initialize mballoc (-12) [ 70.924237][ T6138] EXT4-fs (loop3): mount failed [ 71.028926][ T6153] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1026'. [ 71.094509][ T6165] loop0: detected capacity change from 0 to 512 [ 71.111105][ T6165] EXT4-fs (loop0): too many log groups per flexible block group [ 71.118858][ T6165] EXT4-fs (loop0): failed to initialize mballoc (-12) [ 71.125941][ T6165] EXT4-fs (loop0): mount failed [ 71.156957][ T6172] random: crng reseeded on system resumption [ 71.166486][ T6174] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=27731 sclass=netlink_audit_socket pid=6174 comm=syz.2.1038 [ 71.208981][ T6177] hsr0: entered allmulticast mode [ 71.214147][ T6177] hsr_slave_0: entered allmulticast mode [ 71.220352][ T6177] hsr_slave_1: entered allmulticast mode [ 71.228086][ T6177] syz.1.1039[6177] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 71.228220][ T6177] syz.1.1039[6177] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 71.240912][ T6177] syz.1.1039[6177] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 71.254310][ T6177] hsr_slave_0: left promiscuous mode [ 71.271499][ T6177] hsr_slave_1: left promiscuous mode [ 71.279727][ T6177] hsr0 (unregistering): left allmulticast mode [ 71.300218][ T6172] loop0: detected capacity change from 0 to 128 [ 71.327321][ T6172] syz.0.1037: attempt to access beyond end of device [ 71.327321][ T6172] loop0: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 71.340830][ T6172] Buffer I/O error on dev loop0, logical block 128, lost async page write [ 71.629890][ T6193] delete_channel: no stack [ 71.700381][ T6203] FAULT_INJECTION: forcing a failure. [ 71.700381][ T6203] name failslab, interval 1, probability 0, space 0, times 0 [ 71.713087][ T6203] CPU: 0 UID: 0 PID: 6203 Comm: syz.1.1049 Not tainted 6.12.0-rc5-syzkaller-00330-ga33ab3f94f51 #0 [ 71.723914][ T6203] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 71.733981][ T6203] Call Trace: [ 71.737260][ T6203] [ 71.740198][ T6203] dump_stack_lvl+0xf2/0x150 [ 71.744825][ T6203] dump_stack+0x15/0x20 [ 71.749006][ T6203] should_fail_ex+0x223/0x230 [ 71.753799][ T6203] ? audit_log_d_path+0x96/0x250 [ 71.758850][ T6203] should_failslab+0x8f/0xb0 [ 71.763517][ T6203] __kmalloc_cache_noprof+0x4b/0x2a0 [ 71.768823][ T6203] audit_log_d_path+0x96/0x250 [ 71.773597][ T6203] ? get_file_rcu+0xeb/0x100 [ 71.778214][ T6203] ? __rcu_read_unlock+0x4e/0x70 [ 71.783239][ T6203] audit_log_d_path_exe+0x42/0x70 [ 71.788271][ T6203] audit_log_task+0x155/0x180 [ 71.792963][ T6203] audit_seccomp+0x68/0x130 [ 71.797562][ T6203] __seccomp_filter+0x6fa/0x1180 [ 71.802603][ T6203] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 71.808248][ T6203] ? vfs_write+0x596/0x920 [ 71.812714][ T6203] ? __rcu_read_unlock+0x4e/0x70 [ 71.817697][ T6203] ? __fget_files+0x1d4/0x210 [ 71.822431][ T6203] __secure_computing+0x9f/0x1c0 [ 71.827482][ T6203] syscall_trace_enter+0xd1/0x1f0 [ 71.832524][ T6203] ? fpregs_assert_state_consistent+0x83/0xa0 [ 71.838661][ T6203] do_syscall_64+0xaa/0x1c0 [ 71.843179][ T6203] ? clear_bhb_loop+0x55/0xb0 [ 71.847986][ T6203] ? clear_bhb_loop+0x55/0xb0 [ 71.852720][ T6203] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 71.858717][ T6203] RIP: 0033:0x7f0f0912e719 [ 71.863139][ T6203] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 71.882859][ T6203] RSP: 002b:00007f0f07da7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000087 [ 71.891327][ T6203] RAX: ffffffffffffffda RBX: 00007f0f092e5f80 RCX: 00007f0f0912e719 [ 71.899308][ T6203] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000008 [ 71.907350][ T6203] RBP: 00007f0f07da7090 R08: 0000000000000000 R09: 0000000000000000 [ 71.915323][ T6203] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 71.923319][ T6203] R13: 0000000000000000 R14: 00007f0f092e5f80 R15: 00007ffebff1c5c8 [ 71.931301][ T6203] [ 72.166738][ T6221] netlink: 100 bytes leftover after parsing attributes in process `syz.0.1057'. [ 72.178314][ T6221] net_ratelimit: 60 callbacks suppressed [ 72.178332][ T6221] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 72.235610][ T6223] loop0: detected capacity change from 0 to 512 [ 72.259231][ T6223] EXT4-fs (loop0): too many log groups per flexible block group [ 72.267063][ T6223] EXT4-fs (loop0): failed to initialize mballoc (-12) [ 72.274038][ T6223] EXT4-fs (loop0): mount failed [ 72.297441][ T6227] loop0: detected capacity change from 0 to 512 [ 72.310220][ T6227] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.322852][ T6227] ext4 filesystem being mounted at /238/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 72.333914][ T6227] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.829572][ T29] kauditd_printk_skb: 625 callbacks suppressed [ 72.829587][ T29] audit: type=1326 audit(1730706519.964:6798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6232 comm="syz.1.1060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f0912e719 code=0x7ffc0000 [ 72.859221][ T29] audit: type=1326 audit(1730706519.964:6799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6232 comm="syz.1.1060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0f0912e719 code=0x7ffc0000 [ 72.882734][ T29] audit: type=1326 audit(1730706519.964:6800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6232 comm="syz.1.1060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f0912e719 code=0x7ffc0000 [ 72.906197][ T29] audit: type=1326 audit(1730706519.964:6801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6232 comm="syz.1.1060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0f0912e719 code=0x7ffc0000 [ 72.929698][ T29] audit: type=1326 audit(1730706519.964:6802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6232 comm="syz.1.1060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f0912e719 code=0x7ffc0000 [ 72.953223][ T29] audit: type=1326 audit(1730706519.964:6803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6232 comm="syz.1.1060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0f0912e719 code=0x7ffc0000 [ 72.953513][ T6235] SELinux: policydb string does not match my string SE Linux [ 72.990940][ T29] audit: type=1326 audit(1730706519.964:6804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6232 comm="syz.1.1060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f0912e719 code=0x7ffc0000 [ 72.998658][ T6235] SELinux: failed to load policy [ 73.014648][ T29] audit: type=1326 audit(1730706519.964:6805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6232 comm="syz.1.1060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0f0912e719 code=0x7ffc0000 [ 73.043123][ T29] audit: type=1326 audit(1730706520.014:6806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6232 comm="syz.1.1060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f0912e719 code=0x7ffc0000 [ 73.066675][ T29] audit: type=1326 audit(1730706520.014:6807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6232 comm="syz.1.1060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f0912e719 code=0x7ffc0000 [ 73.137712][ T6240] bond1: entered promiscuous mode [ 73.143003][ T6240] bond1: entered allmulticast mode [ 73.150762][ T6254] loop3: detected capacity change from 0 to 512 [ 73.157913][ T6240] 8021q: adding VLAN 0 to HW filter on device bond1 [ 73.188278][ T6254] EXT4-fs (loop3): too many log groups per flexible block group [ 73.196045][ T6254] EXT4-fs (loop3): failed to initialize mballoc (-12) [ 73.216745][ T6254] EXT4-fs (loop3): mount failed [ 73.230158][ T6264] random: crng reseeded on system resumption [ 73.304390][ T6256] loop4: detected capacity change from 0 to 512 [ 73.312001][ T6256] EXT4-fs: Ignoring removed nobh option [ 73.331697][ T6256] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -13 [ 73.350722][ T6256] EXT4-fs error (device loop4): ext4_clear_blocks:876: inode #13: comm syz.4.1066: attempt to clear invalid blocks 2 len 1 [ 73.360567][ T6264] loop0: detected capacity change from 0 to 128 [ 73.367463][ T6256] EXT4-fs (loop4): Remounting filesystem read-only [ 73.376644][ T6256] EXT4-fs (loop4): 1 truncate cleaned up [ 73.382999][ T6256] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.395629][ T6256] SELinux: (dev loop4, type ext4) getxattr errno 5 [ 73.403143][ T6256] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.411696][ T6264] syz.0.1070: attempt to access beyond end of device [ 73.411696][ T6264] loop0: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 73.425535][ T6264] Buffer I/O error on dev loop0, logical block 128, lost async page write [ 73.526234][ T6298] loop4: detected capacity change from 0 to 512 [ 73.540021][ T6298] EXT4-fs (loop4): too many log groups per flexible block group [ 73.547720][ T6298] EXT4-fs (loop4): failed to initialize mballoc (-12) [ 73.554799][ T6298] EXT4-fs (loop4): mount failed [ 73.722596][ T6310] hsr_slave_0: left promiscuous mode [ 73.728676][ T6310] hsr_slave_1: left promiscuous mode [ 73.891784][ T6325] syzkaller0: entered promiscuous mode [ 73.897281][ T6325] syzkaller0: entered allmulticast mode [ 73.956496][ T6328] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1095'. [ 73.970994][ T6332] loop3: detected capacity change from 0 to 512 [ 73.981469][ T6332] EXT4-fs (loop3): too many log groups per flexible block group [ 73.989212][ T6332] EXT4-fs (loop3): failed to initialize mballoc (-12) [ 73.996005][ T6332] EXT4-fs (loop3): mount failed [ 74.153638][ T6352] random: crng reseeded on system resumption [ 74.260071][ T6352] loop0: detected capacity change from 0 to 128 [ 74.284417][ T6352] syz.0.1103: attempt to access beyond end of device [ 74.284417][ T6352] loop0: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 74.297913][ T6352] Buffer I/O error on dev loop0, logical block 128, lost async page write [ 74.307345][ T6359] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.330795][ T6361] FAULT_INJECTION: forcing a failure. [ 74.330795][ T6361] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 74.344007][ T6361] CPU: 0 UID: 0 PID: 6361 Comm: syz.2.1107 Not tainted 6.12.0-rc5-syzkaller-00330-ga33ab3f94f51 #0 [ 74.354718][ T6361] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 74.364795][ T6361] Call Trace: [ 74.368168][ T6361] [ 74.371204][ T6361] dump_stack_lvl+0xf2/0x150 [ 74.375827][ T6361] dump_stack+0x15/0x20 [ 74.380056][ T6361] should_fail_ex+0x223/0x230 [ 74.384839][ T6361] should_fail+0xb/0x10 [ 74.389031][ T6361] should_fail_usercopy+0x1a/0x20 [ 74.394143][ T6361] _copy_to_user+0x20/0xa0 [ 74.398657][ T6361] simple_read_from_buffer+0xa0/0x110 [ 74.404067][ T6361] proc_fail_nth_read+0xf9/0x140 [ 74.409124][ T6361] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 74.414705][ T6361] vfs_read+0x1a2/0x700 [ 74.418961][ T6361] ? __fget_files+0x1d4/0x210 [ 74.423664][ T6361] ksys_read+0xeb/0x1b0 [ 74.427831][ T6361] __x64_sys_read+0x42/0x50 [ 74.432341][ T6361] x64_sys_call+0x27d3/0x2d60 [ 74.437225][ T6361] do_syscall_64+0xc9/0x1c0 [ 74.441743][ T6361] ? clear_bhb_loop+0x55/0xb0 [ 74.446419][ T6361] ? clear_bhb_loop+0x55/0xb0 [ 74.451096][ T6361] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.457014][ T6361] RIP: 0033:0x7f25bd4fd15c [ 74.461429][ T6361] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 74.481467][ T6361] RSP: 002b:00007f25bc177030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 74.489945][ T6361] RAX: ffffffffffffffda RBX: 00007f25bd6b5f80 RCX: 00007f25bd4fd15c [ 74.497932][ T6361] RDX: 000000000000000f RSI: 00007f25bc1770a0 RDI: 0000000000000004 [ 74.505907][ T6361] RBP: 00007f25bc177090 R08: 0000000000000000 R09: 0000000000000000 [ 74.513908][ T6361] R10: 0000000004008000 R11: 0000000000000246 R12: 0000000000000001 [ 74.521879][ T6361] R13: 0000000000000000 R14: 00007f25bd6b5f80 R15: 00007ffffa94f6c8 [ 74.529869][ T6361] [ 74.542899][ T6371] loop3: detected capacity change from 0 to 512 [ 74.577349][ T6371] EXT4-fs error (device loop3): ext4_orphan_get:1388: inode #15: comm syz.3.1112: casefold flag without casefold feature [ 74.591376][ T6371] EXT4-fs error (device loop3): ext4_orphan_get:1393: comm syz.3.1112: couldn't read orphan inode 15 (err -117) [ 74.604369][ T6371] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.873401][ T6392] loop4: detected capacity change from 0 to 512 [ 74.889681][ T6392] EXT4-fs (loop4): too many log groups per flexible block group [ 74.897471][ T6392] EXT4-fs (loop4): failed to initialize mballoc (-12) [ 74.904408][ T6392] EXT4-fs (loop4): mount failed [ 75.047573][ T6411] ipvlan1: entered promiscuous mode [ 75.053620][ T6411] ipvlan1: left promiscuous mode [ 75.097346][ T6413] netlink: 'syz.4.1127': attribute type 3 has an invalid length. [ 75.108861][ T6413] loop4: detected capacity change from 0 to 512 [ 75.120964][ T6413] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.135593][ T6413] ext4 filesystem being mounted at /224/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 75.164034][ T3325] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.231782][ T6430] pim6reg1: entered promiscuous mode [ 75.237117][ T6430] pim6reg1: entered allmulticast mode [ 75.245255][ T6430] loop4: detected capacity change from 0 to 128 [ 75.252011][ T6430] journal_path: Lookup failure for './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa' [ 75.275989][ T6430] EXT4-fs: error: could not find journal device path [ 75.284246][ T6430] netlink: 240 bytes leftover after parsing attributes in process `syz.4.1133'. [ 75.295155][ T3330] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.340446][ T6435] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1135'. [ 75.366423][ T6437] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1136'. [ 75.375547][ T6437] bridge_slave_1: left allmulticast mode [ 75.381283][ T6437] bridge_slave_1: left promiscuous mode [ 75.387009][ T6437] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.396895][ T6437] bridge_slave_0: left allmulticast mode [ 75.402660][ T6437] bridge_slave_0: left promiscuous mode [ 75.408324][ T6437] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.415382][ T6441] loop3: detected capacity change from 0 to 256 [ 75.423614][ T6441] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 75.550647][ T6460] FAULT_INJECTION: forcing a failure. [ 75.550647][ T6460] name failslab, interval 1, probability 0, space 0, times 0 [ 75.564297][ T6460] CPU: 1 UID: 0 PID: 6460 Comm: syz.4.1147 Not tainted 6.12.0-rc5-syzkaller-00330-ga33ab3f94f51 #0 [ 75.575004][ T6460] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 75.585159][ T6460] Call Trace: [ 75.588475][ T6460] [ 75.591418][ T6460] dump_stack_lvl+0xf2/0x150 [ 75.596066][ T6460] dump_stack+0x15/0x20 [ 75.600250][ T6460] should_fail_ex+0x223/0x230 [ 75.605029][ T6460] ? alloc_vmap_area+0x1e1/0x1830 [ 75.610136][ T6460] should_failslab+0x8f/0xb0 [ 75.614757][ T6460] kmem_cache_alloc_node_noprof+0x51/0x2b0 [ 75.620587][ T6460] alloc_vmap_area+0x1e1/0x1830 [ 75.625447][ T6460] ? __rcu_read_unlock+0x4e/0x70 [ 75.630410][ T6460] ? should_fail_ex+0xd7/0x230 [ 75.635256][ T6460] __get_vm_area_node+0x15e/0x1b0 [ 75.640327][ T6460] __vmalloc_node_range_noprof+0x2c3/0xec0 [ 75.646139][ T6460] ? bpf_prog_alloc_no_stats+0x49/0x360 [ 75.651749][ T6460] ? mntput_no_expire+0x70/0x3c0 [ 75.656828][ T6460] ? avc_has_perm_noaudit+0x1cc/0x210 [ 75.662284][ T6460] ? selinux_capable+0x1f2/0x260 [ 75.667300][ T6460] ? bpf_prog_alloc_no_stats+0x49/0x360 [ 75.672880][ T6460] __vmalloc_noprof+0x5e/0x70 [ 75.677622][ T6460] ? bpf_prog_alloc_no_stats+0x49/0x360 [ 75.683294][ T6460] bpf_prog_alloc_no_stats+0x49/0x360 [ 75.688740][ T6460] ? bpf_prog_alloc+0x28/0x150 [ 75.693614][ T6460] bpf_prog_alloc+0x3a/0x150 [ 75.698235][ T6460] bpf_prog_load+0x4d1/0x1070 [ 75.702969][ T6460] ? __rcu_read_unlock+0x4e/0x70 [ 75.707948][ T6460] __sys_bpf+0x463/0x7a0 [ 75.712206][ T6460] __x64_sys_bpf+0x43/0x50 [ 75.716653][ T6460] x64_sys_call+0x2625/0x2d60 [ 75.721384][ T6460] do_syscall_64+0xc9/0x1c0 [ 75.725905][ T6460] ? clear_bhb_loop+0x55/0xb0 [ 75.730590][ T6460] ? clear_bhb_loop+0x55/0xb0 [ 75.735318][ T6460] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.741233][ T6460] RIP: 0033:0x7fa68bd3e719 [ 75.745652][ T6460] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 75.765286][ T6460] RSP: 002b:00007fa68a9b7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 75.773731][ T6460] RAX: ffffffffffffffda RBX: 00007fa68bef5f80 RCX: 00007fa68bd3e719 [ 75.781721][ T6460] RDX: 0000000000000094 RSI: 00000000200000c0 RDI: 0000000000000005 [ 75.789700][ T6460] RBP: 00007fa68a9b7090 R08: 0000000000000000 R09: 0000000000000000 [ 75.797683][ T6460] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 75.805769][ T6460] R13: 0000000000000000 R14: 00007fa68bef5f80 R15: 00007fffb88ae548 [ 75.813750][ T6460] [ 75.816879][ T6460] syz.4.1147: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0 [ 75.833595][ T6460] CPU: 1 UID: 0 PID: 6460 Comm: syz.4.1147 Not tainted 6.12.0-rc5-syzkaller-00330-ga33ab3f94f51 #0 [ 75.844358][ T6460] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 75.854450][ T6460] Call Trace: [ 75.857812][ T6460] [ 75.860747][ T6460] dump_stack_lvl+0xf2/0x150 [ 75.865402][ T6460] dump_stack+0x15/0x20 [ 75.869651][ T6460] warn_alloc+0x145/0x1b0 [ 75.874062][ T6460] __vmalloc_node_range_noprof+0x2e8/0xec0 [ 75.880074][ T6460] ? mntput_no_expire+0x70/0x3c0 [ 75.885041][ T6460] ? avc_has_perm_noaudit+0x1cc/0x210 [ 75.890444][ T6460] ? selinux_capable+0x1f2/0x260 [ 75.895453][ T6460] ? bpf_prog_alloc_no_stats+0x49/0x360 [ 75.901027][ T6460] __vmalloc_noprof+0x5e/0x70 [ 75.905718][ T6460] ? bpf_prog_alloc_no_stats+0x49/0x360 [ 75.911382][ T6460] bpf_prog_alloc_no_stats+0x49/0x360 [ 75.916777][ T6460] ? bpf_prog_alloc+0x28/0x150 [ 75.921577][ T6460] bpf_prog_alloc+0x3a/0x150 [ 75.926209][ T6460] bpf_prog_load+0x4d1/0x1070 [ 75.930904][ T6460] ? __rcu_read_unlock+0x4e/0x70 [ 75.935969][ T6460] __sys_bpf+0x463/0x7a0 [ 75.940288][ T6460] __x64_sys_bpf+0x43/0x50 [ 75.944949][ T6460] x64_sys_call+0x2625/0x2d60 [ 75.949682][ T6460] do_syscall_64+0xc9/0x1c0 [ 75.954194][ T6460] ? clear_bhb_loop+0x55/0xb0 [ 75.958878][ T6460] ? clear_bhb_loop+0x55/0xb0 [ 75.963744][ T6460] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.969674][ T6460] RIP: 0033:0x7fa68bd3e719 [ 75.974094][ T6460] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 75.993832][ T6460] RSP: 002b:00007fa68a9b7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 76.002325][ T6460] RAX: ffffffffffffffda RBX: 00007fa68bef5f80 RCX: 00007fa68bd3e719 [ 76.010301][ T6460] RDX: 0000000000000094 RSI: 00000000200000c0 RDI: 0000000000000005 [ 76.018297][ T6460] RBP: 00007fa68a9b7090 R08: 0000000000000000 R09: 0000000000000000 [ 76.026307][ T6460] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 76.034288][ T6460] R13: 0000000000000000 R14: 00007fa68bef5f80 R15: 00007fffb88ae548 [ 76.043641][ T6460] [ 76.046856][ T6460] Mem-Info: [ 76.050426][ T6460] active_anon:2952 inactive_anon:0 isolated_anon:0 [ 76.050426][ T6460] active_file:15673 inactive_file:4974 isolated_file:0 [ 76.050426][ T6460] unevictable:0 dirty:468 writeback:0 [ 76.050426][ T6460] slab_reclaimable:2760 slab_unreclaimable:14031 [ 76.050426][ T6460] mapped:20810 shmem:233 pagetables:654 [ 76.050426][ T6460] sec_pagetables:0 bounce:0 [ 76.050426][ T6460] kernel_misc_reclaimable:0 [ 76.050426][ T6460] free:1900386 free_pcp:2096 free_cma:0 [ 76.095459][ T6460] Node 0 active_anon:11924kB inactive_anon:0kB active_file:62692kB inactive_file:19896kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:83356kB dirty:1872kB writeback:0kB shmem:932kB writeback_tmp:0kB kernel_stack:2832kB pagetables:2732kB sec_pagetables:0kB all_unreclaimable? no [ 76.123312][ T6460] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 76.150237][ T6460] lowmem_reserve[]: 0 2866 7844 0 [ 76.155435][ T6460] Node 0 DMA32 free:2950276kB boost:0kB min:4136kB low:7068kB high:10000kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2953908kB mlocked:0kB bounce:0kB free_pcp:3632kB local_pcp:3532kB free_cma:0kB [ 76.184269][ T6460] lowmem_reserve[]: 0 0 4978 0 [ 76.185666][ T6464] lo speed is unknown, defaulting to 1000 [ 76.189109][ T6460] Node 0 Normal free:4635780kB boost:0kB min:7184kB low:12280kB high:17376kB reserved_highatomic:0KB active_anon:11924kB inactive_anon:0kB active_file:62692kB inactive_file:19896kB unevictable:0kB writepending:1872kB present:5242880kB managed:5098208kB mlocked:0kB bounce:0kB free_pcp:4932kB local_pcp:1276kB free_cma:0kB [ 76.198219][ T6464] lo speed is unknown, defaulting to 1000 [ 76.225187][ T6460] lowmem_reserve[]: 0 0 0 0 [ 76.232618][ T6464] lo speed is unknown, defaulting to 1000 [ 76.235401][ T6460] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 76.241732][ T6464] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 76.253981][ T6460] Node 0 DMA32: 3*4kB (M) 1*8kB (M) 1*16kB (M) 3*32kB (M) 2*64kB (M) 3*128kB (M) 2*256kB (M) 2*512kB (M) 3*1024kB (M) 2*2048kB (M) 718*4096kB (M) = 2950276kB [ 76.263666][ T6464] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 76.277092][ T6460] Node 0 Normal: 779*4kB (ME) 619*8kB (UME) 620*16kB (UME) 455*32kB (UME) 247*64kB (UME) 87*128kB (UME) 92*256kB (UME) 36*512kB (UM) 20*1024kB (UM) 14*2048kB (UM) 1095*4096kB (UM) = 4635748kB [ 76.289865][ T6464] lo speed is unknown, defaulting to 1000 [ 76.303401][ T6460] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 76.312259][ T6464] lo speed is unknown, defaulting to 1000 [ 76.318426][ T6460] 20873 total pagecache pages [ 76.324515][ T6464] lo speed is unknown, defaulting to 1000 [ 76.328817][ T6460] 0 pages in swap cache [ 76.328826][ T6460] Free swap = 124996kB [ 76.328834][ T6460] Total swap = 124996kB [ 76.328842][ T6460] 2097051 pages RAM [ 76.328849][ T6460] 0 pages HighMem/MovableOnly [ 76.328857][ T6460] 80182 pages reserved [ 76.337086][ T6464] lo speed is unknown, defaulting to 1000 [ 76.368814][ T6464] lo speed is unknown, defaulting to 1000 [ 76.385040][ T6464] lo speed is unknown, defaulting to 1000 [ 76.393999][ T6479] vhci_hcd: default hub control req: 7f06 v0006 i0000 l0 [ 76.463259][ T6495] loop3: detected capacity change from 0 to 512 [ 76.478498][ T6495] EXT4-fs (loop3): blocks per group (64) and clusters per group (20800) inconsistent [ 76.594178][ T6511] loop4: detected capacity change from 0 to 256 [ 76.601868][ T6511] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 76.634414][ T6516] loop4: detected capacity change from 0 to 1024 [ 76.641569][ T6516] EXT4-fs: Ignoring removed orlov option [ 76.649281][ T6516] EXT4-fs (loop4): can't mount with journal_async_commit, fs mounted w/o journal [ 76.664567][ T6516] loop4: detected capacity change from 0 to 512 [ 76.671916][ T6516] EXT4-fs (loop4): bad geometry: block count 3825205504 exceeds size of device (256 blocks) [ 76.755424][ T6530] loop0: detected capacity change from 0 to 512 [ 76.765806][ T6530] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 76.776972][ T6530] EXT4-fs (loop0): warning: checktime reached, running e2fsck is recommended [ 76.786105][ T6530] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c01c, mo2=0002] [ 76.794234][ T6530] System zones: 0-2, 18-18, 34-34 [ 76.799602][ T6530] EXT4-fs error (device loop0): ext4_orphan_get:1414: comm syz.0.1172: bad orphan inode 15 [ 76.809954][ T6530] ext4_test_bit(bit=14, block=18) = 1 [ 76.815351][ T6530] is_bad_inode(inode)=0 [ 76.819574][ T6530] NEXT_ORPHAN(inode)=2264924160 [ 76.824474][ T6530] max_ino=32 [ 76.827671][ T6530] i_nlink=0 [ 76.830989][ T6530] EXT4-fs warning (device loop0): ext4_update_dynamic_rev:1138: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 76.845946][ T6530] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.1172: bg 0: block 80: padding at end of block bitmap is not set [ 76.860902][ T6530] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 76.870336][ T6530] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.884872][ T6530] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: none. [ 77.310810][ T6544] loop2: detected capacity change from 0 to 8192 [ 77.358583][ T6544] loop2: p1 [ 77.436592][ T6562] IPv6: NLM_F_CREATE should be specified when creating new route [ 77.594379][ T3323] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.665808][ T6589] loop4: detected capacity change from 0 to 512 [ 77.705118][ T6589] EXT4-fs (loop4): too many log groups per flexible block group [ 77.712917][ T6589] EXT4-fs (loop4): failed to initialize mballoc (-12) [ 77.734761][ T6584] loop3: detected capacity change from 0 to 8192 [ 77.742770][ T6589] EXT4-fs (loop4): mount failed [ 77.748382][ T6584] vfat: Unknown parameter 'ÿ' [ 77.798718][ T6603] serio: Serial port pts0 [ 77.832797][ T6607] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1203'. [ 77.875922][ T6607] team0 (unregistering): Port device team_slave_0 removed [ 77.887984][ T6607] team0 (unregistering): Port device team_slave_1 removed [ 77.901772][ T6613] tipc: Started in network mode [ 77.906685][ T6613] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 77.915923][ T6613] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 77.924443][ T6613] tipc: Enabled bearer , priority 10 [ 77.995612][ T6619] loop2: detected capacity change from 0 to 2048 [ 78.012012][ T6619] EXT4-fs: Ignoring removed mblk_io_submit option [ 78.029938][ T6619] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 78.046922][ T6619] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 78.060013][ T29] kauditd_printk_skb: 492 callbacks suppressed [ 78.060029][ T29] audit: type=1326 audit(1730706525.194:7300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6628 comm="syz.0.1211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0555dbe719 code=0x7ffc0000 [ 78.108435][ T29] audit: type=1326 audit(1730706525.224:7301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6628 comm="syz.0.1211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0555dbe719 code=0x7ffc0000 [ 78.132037][ T29] audit: type=1326 audit(1730706525.224:7302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6628 comm="syz.0.1211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0555dbe719 code=0x7ffc0000 [ 78.155561][ T29] audit: type=1326 audit(1730706525.224:7303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6628 comm="syz.0.1211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0555dbe719 code=0x7ffc0000 [ 78.179099][ T29] audit: type=1326 audit(1730706525.224:7304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6628 comm="syz.0.1211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0555dbe719 code=0x7ffc0000 [ 78.202499][ T29] audit: type=1326 audit(1730706525.224:7305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6628 comm="syz.0.1211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0555dbe719 code=0x7ffc0000 [ 78.226048][ T29] audit: type=1326 audit(1730706525.224:7306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6628 comm="syz.0.1211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0555dbe719 code=0x7ffc0000 [ 78.233269][ T6633] loop0: detected capacity change from 0 to 512 [ 78.249602][ T29] audit: type=1326 audit(1730706525.224:7307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6628 comm="syz.0.1211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7f0555dbe719 code=0x7ffc0000 [ 78.279618][ T29] audit: type=1326 audit(1730706525.224:7308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6628 comm="syz.0.1211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0555dbe719 code=0x7ffc0000 [ 78.303208][ T29] audit: type=1326 audit(1730706525.224:7309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6628 comm="syz.0.1211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0555dbe719 code=0x7ffc0000 [ 78.339086][ T3328] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.362675][ T6633] EXT4-fs (loop0): too many log groups per flexible block group [ 78.370475][ T6633] EXT4-fs (loop0): failed to initialize mballoc (-12) [ 78.392185][ T6633] EXT4-fs (loop0): mount failed [ 78.462273][ T6657] random: crng reseeded on system resumption [ 78.476813][ T6659] loop2: detected capacity change from 0 to 512 [ 78.501309][ T6659] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.515156][ T6659] ext4 filesystem being mounted at /248/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 78.527491][ T6659] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.698043][ T6679] loop4: detected capacity change from 0 to 128 [ 78.721375][ T6679] syz.4.1226: attempt to access beyond end of device [ 78.721375][ T6679] loop4: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 78.734943][ T6679] Buffer I/O error on dev loop4, logical block 128, lost async page write [ 78.758088][ T6683] loop2: detected capacity change from 0 to 128 [ 78.785703][ T6683] syz.2.1230: attempt to access beyond end of device [ 78.785703][ T6683] loop2: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 78.799238][ T6683] Buffer I/O error on dev loop2, logical block 128, lost async page write [ 78.947857][ T6699] serio: Serial port pts0 [ 78.958379][ T3392] tipc: Node number set to 1 [ 79.424926][ T6709] serio: Serial port pts1 [ 79.594155][ T6726] loop2: detected capacity change from 0 to 1024 [ 79.601303][ T6726] EXT4-fs: Ignoring removed nomblk_io_submit option [ 79.608839][ T6726] EXT4-fs (loop2): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 79.641551][ T6726] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.657032][ T6726] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 79.669189][ T6726] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1247'. [ 79.685961][ T3328] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.796996][ T6749] loop3: detected capacity change from 0 to 512 [ 79.803716][ T6749] EXT4-fs: Ignoring removed mblk_io_submit option [ 79.810593][ T6749] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 79.819819][ T6749] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a042c118, mo2=0002] [ 79.827784][ T6749] System zones: 1-12 [ 79.832082][ T6749] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2240: inode #15: comm syz.3.1255: corrupted in-inode xattr: e_value size too large [ 79.846243][ T6749] EXT4-fs error (device loop3): ext4_orphan_get:1393: comm syz.3.1255: couldn't read orphan inode 15 (err -117) [ 79.858839][ T6749] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.900874][ T3330] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.922855][ T6754] bond1: entered promiscuous mode [ 79.927985][ T6754] bond1: entered allmulticast mode [ 79.933579][ T6754] 8021q: adding VLAN 0 to HW filter on device bond1 [ 79.944825][ T6754] bond1 (unregistering): Released all slaves [ 79.999382][ T6768] loop2: detected capacity change from 0 to 256 [ 80.007040][ T6768] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 80.102831][ T6779] FAULT_INJECTION: forcing a failure. [ 80.102831][ T6779] name failslab, interval 1, probability 0, space 0, times 0 [ 80.115599][ T6779] CPU: 0 UID: 0 PID: 6779 Comm: syz.3.1267 Not tainted 6.12.0-rc5-syzkaller-00330-ga33ab3f94f51 #0 [ 80.126343][ T6779] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 80.136402][ T6779] Call Trace: [ 80.139679][ T6779] [ 80.142656][ T6779] dump_stack_lvl+0xf2/0x150 [ 80.147324][ T6779] dump_stack+0x15/0x20 [ 80.151484][ T6779] should_fail_ex+0x223/0x230 [ 80.156200][ T6779] ? bpf_ctx_init+0x7a/0x160 [ 80.160832][ T6779] should_failslab+0x8f/0xb0 [ 80.165426][ T6779] __kmalloc_noprof+0xa5/0x370 [ 80.170271][ T6779] bpf_ctx_init+0x7a/0x160 [ 80.174715][ T6779] bpf_prog_test_run_xdp+0x1d9/0x8b0 [ 80.180145][ T6779] ? kstrtouint_from_user+0xb0/0xe0 [ 80.185356][ T6779] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 80.191197][ T6779] bpf_prog_test_run+0x20f/0x3a0 [ 80.196171][ T6779] __sys_bpf+0x400/0x7a0 [ 80.200414][ T6779] __x64_sys_bpf+0x43/0x50 [ 80.204915][ T6779] x64_sys_call+0x2625/0x2d60 [ 80.209686][ T6779] do_syscall_64+0xc9/0x1c0 [ 80.214259][ T6779] ? clear_bhb_loop+0x55/0xb0 [ 80.218962][ T6779] ? clear_bhb_loop+0x55/0xb0 [ 80.223653][ T6779] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.229602][ T6779] RIP: 0033:0x7f02a83de719 [ 80.234158][ T6779] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 80.253793][ T6779] RSP: 002b:00007f02a7057038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 80.262283][ T6779] RAX: ffffffffffffffda RBX: 00007f02a8595f80 RCX: 00007f02a83de719 [ 80.270325][ T6779] RDX: 0000000000000048 RSI: 0000000020000040 RDI: 000000000000000a [ 80.278498][ T6779] RBP: 00007f02a7057090 R08: 0000000000000000 R09: 0000000000000000 [ 80.286495][ T6779] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 80.294474][ T6779] R13: 0000000000000000 R14: 00007f02a8595f80 R15: 00007ffd236173d8 [ 80.302489][ T6779] [ 80.366236][ T6791] loop3: detected capacity change from 0 to 512 [ 80.389857][ T6791] EXT4-fs (loop3): too many log groups per flexible block group [ 80.393832][ T6796] loop2: detected capacity change from 0 to 256 [ 80.397576][ T6791] EXT4-fs (loop3): failed to initialize mballoc (-12) [ 80.413072][ T6791] EXT4-fs (loop3): mount failed [ 80.420202][ T6796] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 80.447230][ T6803] loop0: detected capacity change from 0 to 512 [ 80.467953][ T6803] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.485743][ T6803] ext4 filesystem being mounted at /273/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 80.500244][ T6803] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.509996][ T6815] ================================================================== [ 80.518116][ T6815] BUG: KCSAN: data-race in mas_walk / mas_wmb_replace [ 80.524908][ T6815] [ 80.527238][ T6815] write to 0xffff888114e9d700 of 8 bytes by task 6814 on cpu 0: [ 80.534871][ T6815] mas_wmb_replace+0x222/0x14d0 [ 80.539744][ T6815] mas_wr_store_entry+0x163c/0x2d00 [ 80.544952][ T6815] mas_store_prealloc+0x6bf/0x960 [ 80.549987][ T6815] vma_complete+0x3a7/0x760 [ 80.554504][ T6815] __split_vma+0x620/0x6a0 [ 80.558937][ T6815] vma_modify+0x2cb/0xcd0 [ 80.563305][ T6815] vma_modify_flags+0xf1/0x120 [ 80.568089][ T6815] mprotect_fixup+0x31a/0x5e0 [ 80.572781][ T6815] do_mprotect_pkey+0x655/0x970 [ 80.577649][ T6815] __x64_sys_mprotect+0x48/0x60 [ 80.582618][ T6815] x64_sys_call+0x26cf/0x2d60 [ 80.587306][ T6815] do_syscall_64+0xc9/0x1c0 [ 80.591815][ T6815] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.597738][ T6815] [ 80.600063][ T6815] read to 0xffff888114e9d700 of 8 bytes by task 6815 on cpu 1: [ 80.607607][ T6815] mas_walk+0x123/0x320 [ 80.611770][ T6815] lock_vma_under_rcu+0x95/0x260 [ 80.616719][ T6815] exc_page_fault+0x150/0x650 [ 80.621427][ T6815] asm_exc_page_fault+0x26/0x30 [ 80.626309][ T6815] [ 80.628628][ T6815] value changed: 0xffff888114988581 -> 0xffff888114e9d700 [ 80.635732][ T6815] [ 80.638055][ T6815] Reported by Kernel Concurrency Sanitizer on: [ 80.644204][ T6815] CPU: 1 UID: 0 PID: 6815 Comm: syz.4.1283 Not tainted 6.12.0-rc5-syzkaller-00330-ga33ab3f94f51 #0 [ 80.654880][ T6815] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 80.664934][ T6815] ================================================================== [ 80.689293][ T6819] loop2: detected capacity change from 0 to 512 [ 80.702029][ T6819] EXT4-fs (loop2): orphan cleanup on readonly fs [ 80.733737][ T6819] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1284: bg 0: block 248: padding at end of block bitmap is not set [ 80.749837][ T6819] EXT4-fs error (device loop2): ext4_acquire_dquot:6879: comm syz.2.1284: Failed to acquire dquot type 1 [ 80.762242][ T6819] EXT4-fs (loop2): 1 truncate cleaned up [ 80.769850][ T6819] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 80.786725][ T6819] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 80.808781][ T6819] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 80.827026][ T6819] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 80.858000][ T6816] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 80.870003][ T6816] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 80.902537][ T6816] geneve0: left allmulticast mode [ 80.907786][ T6816] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.916889][ T6816] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.925952][ T6816] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.935085][ T6816] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.944562][ T6819] syz.2.1284 (6819) used greatest stack depth: 9352 bytes left [ 80.955002][ T3328] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.