last executing test programs: 3.91551016s ago: executing program 4 (id=876): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x30d4, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$packet(0x11, 0x3, 0x300) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000002000000000000000100000d030000000000000003000000000000000000000105000000080000000000000000000003000000000200000002"], 0x0, 0x56, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.stat\x00', 0x26e1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = creat(&(0x7f0000000340)='./file0\x00', 0x0) close(r1) r2 = socket$inet6(0xa, 0x6, 0x0) listen(r2, 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r3}, 0x8) ioctl$SIOCSIFHWADDR(r0, 0x89f0, &(0x7f0000000900)={'bridge0\x00', @random='\x00\x00\x00 \x00'}) 1.282484772s ago: executing program 2 (id=947): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_msfilter(r2, 0x0, 0x29, 0x0, 0x1c) 1.268518404s ago: executing program 2 (id=948): syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f0000002580)={0x0, 0x0, &(0x7f0000002540)={0x0, 0x2c}}, 0x0) 1.253258415s ago: executing program 2 (id=950): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setreuid(0x0, 0xee00) bind$bt_hci(r1, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x5, &(0x7f00000002c0)=0x0) io_submit(r2, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x20000097ff, 0x4, 0x0, 0x1, 0x0, r1, &(0x7f0000000040)="0200ffff0000", 0x6, 0x0, 0x0, 0x2}]) 1.08644702s ago: executing program 2 (id=960): r0 = syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x21081e, &(0x7f00000002c0), 0x1, 0x4f2, &(0x7f0000000d40)="$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") r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb010018000000000000000000000300000000040000000100000003000000100000000000000700000000fcffffff00000002040000000000000000000003000000000500000003000000080000000f0000000000000b00800000060000000000000b01000000005f2e5f0030304f305f0000"], &(0x7f0000000680)=""/227, 0x84, 0xe3, 0x0, 0x3, 0x10000, @value}, 0x28) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0500000001000000ff0f00000700000000000000016b45b8097d6cf6d3e098ec8e8357cc4b3f", @ANYRES32, @ANYBLOB='T\v\x00'/20, @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="00000000000000000200"/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000001c00)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) chdir(0x0) ustat(0xb, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ptrace$ARCH_GET_MAX_TAG_BITS(0x1e, 0x0, 0x0, 0x4003) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) unlinkat(r0, &(0x7f0000000200)='./file0\x00', 0x0) r6 = socket$unix(0x1, 0x5, 0x0) bind$unix(r6, &(0x7f0000000200)=@file={0x1, './file0\x00'}, 0x6e) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup(r7) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r8}, 0x2c, {'wfdno', 0x3d, r6}}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000780)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xf0, 0xf0, 0x7, [@union={0xb, 0x3, 0x0, 0x5, 0x0, 0x1, [{0xd, 0x3, 0x5}, {0x0, 0x2, 0x6fa2}, {0x7, 0x2, 0xe}]}, @datasec={0x10, 0x5, 0x0, 0xf, 0x1, [{0x2, 0x7, 0x8000}, {0x4, 0x6, 0x3ff}, {0x4, 0x3, 0x5}, {0x2, 0x2, 0x8}, {0x3, 0x6, 0x38e463c3}], 'E'}, @union={0xa, 0x1, 0x0, 0x5, 0x1, 0x6, [{0xa, 0x2, 0x73}]}, @datasec={0x5, 0x1, 0x0, 0xf, 0x3, [{0x1, 0x3, 0x6}], "63db3f"}, @var={0x1, 0x0, 0x0, 0xe, 0x5, 0x1}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x7, 0x4}]}, @func={0x2, 0x0, 0x0, 0xc, 0x5}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0xb, 0x1}]}]}, {0x0, [0x5f, 0x0, 0x61, 0x0, 0x30]}}, &(0x7f00000008c0)=""/242, 0x10f, 0xf2, 0x1, 0x4, 0x10000, @value=r8}, 0x28) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r9}, 0x10) 855.461732ms ago: executing program 4 (id=973): syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f0000002580)={0x0, 0x0, &(0x7f0000002540)={0x0, 0x2c}}, 0x0) 854.923862ms ago: executing program 1 (id=974): socket$nl_route(0x10, 0x3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000200)={[{@abort}, {@jqfmt_vfsv1}]}, 0x1, 0x79c, &(0x7f0000001700)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000004e6c87972033da653a95fb9f5d00", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0500000004000000e27f00000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000002000000000000000000007635d6b53f69a5c9b70ce7034a39da183f022b95e75512a8d3083abaebd549e0c9ca44fcb5e0d81700a084174974d5eb7fc6186c8eb4e22db80b07e8a18794db46e014ddb2fb45ca5f9f0bf6159904437192a9442980fb1a0bc139d940ef118248590c28c338bba6d43c9faa29996e8ac2958cd1649adf7a95cf90e669836e15c9bb39b46cf789228681"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000180)='ext4_ext_show_extent\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = socket$unix(0x1, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000180)='ext4_ext_show_extent\x00', r3}, 0x10) bind$unix(r2, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 702.078446ms ago: executing program 4 (id=976): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000001e00100000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000fcffffffb702000004000000b7030000000000de850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r2, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0xe}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44012}, 0x40002000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_OPENQRY(r3, 0x5603, 0xfffffffffffffffc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup2(r7, r6) r9 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r6, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_ADD(r9, 0x2, r8, 0x0) r10 = memfd_secret(0x0) r11 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) r12 = fcntl$dupfd(r11, 0x0, r10) ioctl$SCSI_IOCTL_GET_PCI(r12, 0x2284, &(0x7f0000000000)) 355.928028ms ago: executing program 0 (id=977): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000700007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xb, 0x7, 0x2, 0xff22, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x3, &(0x7f0000000100)={r2, 0x0, 0x0}, 0x20) 355.699318ms ago: executing program 4 (id=978): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020"], &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_msfilter(r2, 0x0, 0x29, 0x0, 0x1c) 355.427768ms ago: executing program 3 (id=979): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) prctl$PR_SET_THP_DISABLE(0x35, 0x88) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x4000, &(0x7f00000002c0)={[{}, {@noacl}, {@init_itable}, {@user_xattr}, {@nomblk_io_submit}], [{@dont_appraise}, {@euid_eq}, {@audit}, {@fowner_gt}, {@pcr={'pcr', 0x3d, 0x32}}, {@hash}, {@appraise_type}, {@fscontext={'fscontext', 0x3d, 'unconfined_u'}}]}, 0x2, 0xbd7, &(0x7f0000000c00)="$eJzs3M1rG2caAPBnxrLiJN61syzLJpf1siwJLCvbWRw2YWGTJcte9lBor4UYR06NlQ9sl9SOD3L7D5S250IvhbahpYfmnEtLe+2lTa4tPRRCceMWSj9cRh+2GkuO00gZ4/x+8Gredx5J7/NokGZekBTAY2sku0kjDkfEuSRiqLE/jYhirTcQUa3fb211eerb1eWpJNbXn/wqiSQi7q4uTzWfK2lsDzYGAxHx8X+S+N0LW+edX1yanaxUynON8ejCxSuj84tLf5+5OHmhfKF8afzEPyeOT5wYOznRtVq/++z0jW/+/L8vqt+/+eP1r19+PYnTMdiItdbRLSMxsvGatCpExGS3J8tJX6Oe1jqTwn0elPY4KQAAOkpbruH+EEPRF5sXb0Px/ie5JgcAAAB0xXpfxDoAAACwxyXW/wAAALDHNb8HcHd1earZ8v1GwqN150xEDNfrX2u0eqQQ1dp2IPoj4sDdJFp/1prUH/bQRiLi89sn38la9Oh3yNuprkTEH9sd/6RW/3DtV9z1+lulETHWhflH7hnv5vpbj39W/+kuzJ93/QA8nm6eqZ/Itp7/0o3rn2hz/iu0OXf9Gnmf/5rXf2tbrv826+/rcP33xA7nuPbGq1c7xbL6/3Xjv283WzZ/tn2ooh7AnZWII4V29Scb9Scd6j+3wzmGfrpa7hTLu/711yKORvv6m5Lt/59odHqmUh6r37adY+Wjibc6zZ93/dnxP9Ch/ub/P3U6/ld2OMfTZ8++u2Xn7c3u9vWnXxaTp2q9YmPPc5MLC3PjEcXk/1v3H98+l+Z9ms+R1X/sL9u//9vVn30mVBuvQ7YWWGlss/Hz98z57+vX3uuUT3P9l+fxP9/h+LfW/2Fh6/F/cYdz/PWDl451irWuf7OWzd9cCwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAUxoRg5GkpY1+mpZKEQcj4vdxIK1cnl/42/TlZy+dz2IRw9GfTs9UymMR0VcfJ9l4vNbfHB+/Z/yPiDgUEa8M7a+NS1OXK+fzLh4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIANByNiMJK0FBFpRKwNpWmplHdWAAAAQNcN550AAAAA0HPW/wAAALD3ta7/R488wAOTHiQDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAXnToTzdvJRFRPbW/1jLFRqw/18yAXkvzTgDITV/eCQC5KeSdAJCbB1zju1yAPSi5T3ygY2Rf13MBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYPc6evjmrSQiqqf211qm2Ij155oZ0Gtp3gkAuenbLlh4dHkAj563ODy+rPGB5D7xgc37VH8Z2deznAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADYfQZrLUlLEVFs7CuVIn4TEcPRn0zPVMpjEfHbiPh0qH9fNh7POWcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC6b35xaXayUinPZZ00Gp2NPTqbnaT+ilV3Sz5d6fywO9LIpVOMtqG1yjO7JcM8O3l/MgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAkIf5xaXZyUqlPDefdyYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABA3uYXl2YnK5XyXA87edcIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEB+fg4AAP//y0QLxw==") r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000340)=ANY=[], 0x2, 0x7bc, &(0x7f0000000a80)="$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") 334.774359ms ago: executing program 1 (id=980): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={0x0}}, 0x0) 297.440732ms ago: executing program 0 (id=981): bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b0000000000000000000000008000", @ANYRES32], 0x48) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x8000) 296.905173ms ago: executing program 3 (id=982): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x80000}, 0x18) r2 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$selinux_load(r2, &(0x7f0000000140)={0xf97cff8c, 0x8}, 0x10) 289.031414ms ago: executing program 0 (id=983): mknod(&(0x7f0000000140)='./file0\x00', 0x1000, 0x0) lsetxattr$security_selinux(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100), &(0x7f0000000140)='system_u:object_r:crond_initrc_exec_t:s0\x00', 0x29, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x47, &(0x7f00000003c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffeb, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) r1 = dup(r0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) sendmsg$inet(r1, &(0x7f0000000040)={&(0x7f00000001c0)={0x2, 0x0, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000440)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @empty}}}], 0x20}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r3}, 0x0, &(0x7f0000000040)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) syz_clone(0x22023500, 0x0, 0x0, 0x0, 0x0, 0x0) 280.049734ms ago: executing program 3 (id=984): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_msfilter(r2, 0x0, 0x29, 0x0, 0x1c) 239.260498ms ago: executing program 3 (id=985): r0 = syz_open_procfs(0x0, 0x0) preadv(r0, &(0x7f0000000480)=[{&(0x7f0000000180)=""/176, 0x3c}, {&(0x7f0000000280)=""/200, 0xc8}], 0x2, 0x0, 0x3) 238.961908ms ago: executing program 3 (id=986): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x59}, 0x0, 0x2, 0x0, 0x6, 0x0, 0xfffffffe, 0x0, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0, 0xffffffffffffffff, r1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r3 = fcntl$dupfd(r2, 0x0, r2) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) write$sndseq(r3, &(0x7f0000000800)=[{0x20, 0x0, 0x0, 0x0, @time={0x10b, 0x3}, {}, {0x0, 0x3}, @connect}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x0, 0x0}}], 0x38) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x10e, &(0x7f0000000280)={[{@grpjquota_path={'grpjquota', 0x3d, './bus'}}, {@nodelalloc}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2c}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x10000}}, {@block_validity}, {@quota}]}, 0x3, 0x44d, &(0x7f0000000a40)="$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") r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$cgroup_int(r7, &(0x7f00000000c0), 0x12) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0x5) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000005c0)=ANY=[@ANYRES32=r8, @ANYRES32=r8, @ANYBLOB='/'], 0x20) 238.792458ms ago: executing program 4 (id=987): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000001, 0x5d031, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0) io_uring_setup(0x0, &(0x7f0000001940)) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000180000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r2, &(0x7f00000002c0)=ANY=[], 0x200002e6) fcntl$setpipe(r2, 0x407, 0x7000000) 200.200822ms ago: executing program 0 (id=988): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r0}, 0x10) r1 = bpf$ITER_CREATE(0xb, 0x0, 0x0) close(r1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) socket$l2tp(0x2, 0x2, 0x73) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x40004, &(0x7f0000000100)={0xa, 0x4e23, 0x6, @loopback}, 0x1c) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a30000000003c000000090a01040000000000553f000100fffe08000a40000000000900020073797a32000000000900010073797a3000000000080005400000000f840000000c0a01030000000000000000010000000900020073797a32000000005800038054000080080003400000000248000b80200001800a00010071756f7461000000100002800c0001400000000000000000100001800c000100636f756e74657200140001800a00010072616e6765000000040002800900010073797a30"], 0x108}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, 0xffffffffffffffff}}, './file0\x00'}) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) 199.686132ms ago: executing program 2 (id=989): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x6, &(0x7f00000004c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x7d}, @initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x6}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) (async) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) fsopen(&(0x7f0000000040)='ramfs\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x20000000000000f4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x20000000000000f4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10) r6 = socket(0x10, 0x3, 0x0) write(r6, &(0x7f00000002c0)="240000001a001deb23713f48f97319b528aca4b2d1000050e4088356b1bf4aecf49f0514", 0x24) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000740)='scsi_dispatch_cmd_start\x00', r7}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000740)='scsi_dispatch_cmd_start\x00', r7}, 0x10) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYRESDEC=r4, @ANYRES64=r2, @ANYRESHEX=r2], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='scsi_dispatch_cmd_start\x00', r8}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='scsi_dispatch_cmd_start\x00', r8}, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000180)) (async) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r10, 0x0, 0xfffffecc) write$binfmt_elf64(r10, 0x0, 0xfd14) write$P9_RFLUSH(r10, &(0x7f00000001c0)={0x7, 0x6d, 0x1}, 0x7) syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), 0xffffffffffffffff) (async) r11 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="c8010000", @ANYRES16=r11, @ANYBLOB="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"], 0x1c8}}, 0x0) r12 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000340)='/sys/kernel/notes', 0x0, 0x4) read$char_usb(r12, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x21, 0x7, 0x8, 0x8, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) 180.781754ms ago: executing program 0 (id=990): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000080)) socket$kcm(0xa, 0x0, 0x87) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f00000000c0), r1) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00"/12], 0x48) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000180)={0x0, 0xfff}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000240)={r2, 0x3a, "3b5f1880891f1bb9bfe1c923426f9fc48c711d0578bb4e8efbddb7174b51ce6f2933e4113764ae2a6e3469d980702aa8f13b3172901ae18ef7de"}, &(0x7f00000002c0)=0x42) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) mkdirat(0xffffffffffffffff, &(0x7f0000002040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, &(0x7f0000000100)) 93.074842ms ago: executing program 1 (id=991): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000700007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xb, 0x7, 0x2, 0xff22, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x3, &(0x7f0000000100)={r2, 0x0, 0x0}, 0x20) 92.836282ms ago: executing program 2 (id=992): socket$nl_route(0x10, 0x3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000200)={[{@abort}, {@jqfmt_vfsv1}]}, 0x1, 0x79c, &(0x7f0000001700)="$eJzs3c9rXNUeAPDvnck0Tdr3kgcP3qurgKCB0ompsVVwUXEhgoWCrm2HyTS0mWRKZlKaELBFBDeCFheCbrquWndu/bHV/8KFtFSbFisuJHInM+00mUmTJpkp5POB255zf53zvef+OJN7mAlgzxpJ/8lEHIqIj5OIocb8JCJy9VRfxInV9e4vLxXTKYmVlbd/T+rr3FteKkbLNqkDjcz/I+KHDyIOZ9aXW11YnC6Uy6W5Rn6sNnNhrLqweOTcTGGqNFWaPTY+MXH0+EvHj+1crH/8vHjw1idvPP/1ib/e/9+Nj35M4kQcbCxrjWOnjMRI45jk0kP4iNd3urAeS3pdAZ5IemlmV6/yOBRDka2nOhjoZs0AgN3yXkSsAAB7TOL5DwB7TPPvAPeWl4rNqbd/keiu269FxP7V+JvvN1eX9DXe2e2vvwcdvJc88mYkiYjhHSh/JCK++PbdL9Mpduk9JEA7l69ExJnhkfX3/2TdmIWtemET66x92+z+B93zXdr/ebld/y/zoP8Tbfo//c2xY9u0dh/rr//MzR0opqO0//dqy9i2+y3xNwxnG7l/1ft8ueTsuXIpvbf9OyJGI9ef5sc3KGP07t93Oy1r7f/duXr+elr+nWxcf7hG5mZf/yObZLcV8Bq3r0Q809cu/uRB+ycd+r+nNlnGm698+HmnZWn8adzNqR7/1fPXtxXUFqxci3iubfs/HNGWtBufOJVrjE8cq58OY82Too1vfvlssFP5re2fTmn5zc8C3ZC2/+DG8Q8nreM1q1sv46drQ993XJh5XPzrzv+YLNQK+5J36ul9jXmXCrXa3HjEvuSt9fOPPty2mW+un8Y/+mz763+j8z/9THhmk/H33frtq07Lnob2n9xS+289ceP+dMd71uPjT9t/op4abcxJ2/9xcW22gts5dgAAAAAAAAAAAAAAAAAAAAAAAACwWZmIOBhJJv8gncnk86u/4f3fGMyUK9Xa4bOV+dnJqP9W9nDkMs2vuhxq+T7U8cb34TfzR9fkX4yI/0TEp/0D9Xy+WClP9jp4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGg40OH3/1O/9ve6dgDArtnf6woAAF3n+Q8Ae8/Wnv8Du1YPAKB7fP4HgL3H8x8A9h7PfwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHbZqZMn02nlz+WlYpqfvLgwP125eGSyVJ3Oz8wX88XK3IX8VKUyVS7li5WZjju6vPpfuVK5MBGz85fGaqVqbay6sHh6pjI/Wzt9bqYwVTpdynUtMgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADYvOrC4nShXC7NbSeR7mgn9tOtRP/TUQ2JriaysXtF5OKJNs9GRK8Py0YXddNAz+5PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAE+7fwIAAP//IIQicg==") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000004e6c87972033da653a95fb9f5d00", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0500000004000000e27f00000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000002000000000000000000007635d6b53f69a5c9b70ce7034a39da183f022b95e75512a8d3083abaebd549e0c9ca44fcb5e0d81700a084174974d5eb7fc6186c8eb4e22db80b07e8a18794db46e014ddb2fb45ca5f9f0bf6159904437192a9442980fb1a0bc139d940ef118248590c28c338bba6d43c9faa29996e8ac2958cd1649adf7a95cf90e669836e15c9bb39b46cf789228681"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000180)='ext4_ext_show_extent\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = socket$unix(0x1, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000180)='ext4_ext_show_extent\x00', r3}, 0x10) bind$unix(r2, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 80.111383ms ago: executing program 0 (id=993): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000800000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x4000, &(0x7f00000002c0)={[{}, {@noacl}, {@init_itable}, {@user_xattr}, {@nomblk_io_submit}], [{@dont_appraise}, {@euid_eq}, {@audit}, {@fowner_gt}, {@pcr={'pcr', 0x3d, 0x32}}, {@hash}, {@appraise_type}, {@fscontext={'fscontext', 0x3d, 'unconfined_u'}}]}, 0x2, 0xbd7, &(0x7f0000000c00)="$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") r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000340)=ANY=[], 0x2, 0x7bc, &(0x7f0000000a80)="$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") 69.567254ms ago: executing program 1 (id=994): bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b0000000000000000000000008000", @ANYRES32], 0x48) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x8000) 66.366664ms ago: executing program 3 (id=995): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_msfilter(r2, 0x0, 0x29, 0x0, 0x1c) 27.023458ms ago: executing program 1 (id=996): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x80000}, 0x18) r2 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$selinux_load(r2, &(0x7f0000000140)={0xf97cff8c, 0x8}, 0x10) 9.207979ms ago: executing program 1 (id=997): r0 = syz_open_procfs(0x0, 0x0) preadv(r0, &(0x7f0000000480)=[{&(0x7f0000000180)=""/176, 0x3c}, {&(0x7f0000000280)=""/200, 0xc8}], 0x2, 0x0, 0x3) 0s ago: executing program 4 (id=998): mknod(&(0x7f0000000140)='./file0\x00', 0x1000, 0x0) lsetxattr$security_selinux(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100), &(0x7f0000000140)='system_u:object_r:crond_initrc_exec_t:s0\x00', 0x29, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x47, &(0x7f00000003c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffeb, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) r1 = dup(r0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) sendmsg$inet(r1, &(0x7f0000000040)={&(0x7f00000001c0)={0x2, 0x0, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000440)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @empty}}}], 0x20}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r3}, 0x0, &(0x7f0000000040)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_clone(0x22023500, 0x0, 0x0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): ps until 2038-01-19 (0x7fffffff) [ 40.809845][ T4139] random: crng reseeded on system resumption [ 40.812174][ T4137] loop3: detected capacity change from 0 to 512 [ 40.830903][ T3257] udevd[3257]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 40.842998][ T3494] udevd[3494]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 40.854845][ T4123] Process accounting resumed [ 40.875811][ T4123] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 40.911450][ T4145] loop2: detected capacity change from 0 to 2048 [ 40.922037][ T4137] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.936911][ T4137] ext4 filesystem being mounted at /25/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 40.947765][ T4145] loop2: p1 < > p4 [ 40.952191][ T4145] loop2: p4 size 8388608 extends beyond EOD, truncated [ 40.954338][ T3267] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.971658][ T2967] loop2: p1 < > p4 [ 40.987940][ T2967] loop2: p4 size 8388608 extends beyond EOD, truncated [ 40.990063][ T4148] loop1: detected capacity change from 0 to 4096 [ 41.020324][ T4137] Process accounting resumed [ 41.038373][ T4148] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 41.059979][ T4153] loop4: detected capacity change from 0 to 4096 [ 41.067430][ T4137] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 41.070927][ T4151] loop0: detected capacity change from 0 to 4096 [ 41.085769][ T3494] udevd[3494]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 41.104531][ T4153] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.119455][ T3257] udevd[3257]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 41.129459][ T4148] loop1: detected capacity change from 0 to 764 [ 41.139331][ T4151] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.144187][ T4148] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 41.153281][ T3649] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.194459][ T4166] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=4166 comm=syz.3.277 [ 41.228244][ T4171] loop1: detected capacity change from 0 to 512 [ 41.255767][ T4171] EXT4-fs (loop1): too many log groups per flexible block group [ 41.263451][ T4171] EXT4-fs (loop1): failed to initialize mballoc (-12) [ 41.270379][ T4171] EXT4-fs (loop1): mount failed [ 41.387665][ T4187] loop2: detected capacity change from 0 to 764 [ 41.395240][ T4187] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 41.446253][ T4191] loop2: detected capacity change from 0 to 512 [ 41.463242][ T4189] sch_tbf: burst 0 is lower than device netdevsim2 mtu (1514) ! [ 41.518956][ T4192] 9pnet_fd: Insufficient options for proto=fd [ 41.566724][ T4191] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.586702][ T4191] ext4 filesystem being mounted at /77/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 41.601330][ T4191] Process accounting resumed [ 41.746457][ T4191] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 41.766672][ T3272] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.838142][ T4209] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=4209 comm=syz.3.291 [ 41.894233][ T3267] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.908665][ T3268] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.909078][ T4213] usb usb7: usbfs: process 4213 (syz.3.294) did not claim interface 0 before use [ 42.246868][ T4224] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow [ 42.282128][ T4230] loop0: detected capacity change from 0 to 512 [ 42.317068][ T4230] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.341694][ T4230] ext4 filesystem being mounted at /52/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 42.367026][ T4239] usb usb7: usbfs: process 4239 (syz.1.302) did not claim interface 0 before use [ 42.372643][ T4230] Process accounting resumed [ 42.381844][ T4237] usb usb7: usbfs: process 4237 (syz.3.303) did not claim interface 0 before use [ 42.414864][ T4230] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 42.442221][ T4241] loop1: detected capacity change from 0 to 4096 [ 42.458145][ T4245] usb usb7: usbfs: process 4245 (syz.4.306) did not claim interface 0 before use [ 42.479452][ T3268] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.495210][ T4241] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.513409][ T4248] netlink: 'syz.3.308': attribute type 4 has an invalid length. [ 42.536246][ T4250] usb usb7: usbfs: process 4250 (syz.4.309) did not claim interface 0 before use [ 42.536686][ T4252] loop0: detected capacity change from 0 to 764 [ 42.569646][ T4252] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 42.581384][ T4254] loop3: detected capacity change from 0 to 512 [ 42.665517][ T4254] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.678098][ T4254] ext4 filesystem being mounted at /42/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 42.698669][ T4254] Process accounting resumed [ 42.711624][ T4254] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 42.732342][ T4269] usb usb7: usbfs: process 4269 (syz.2.316) did not claim interface 0 before use [ 42.742546][ T3649] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.831757][ T4277] loop2: detected capacity change from 0 to 512 [ 42.927627][ T4277] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.952130][ T4277] ext4 filesystem being mounted at /80/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 43.003168][ T4287] netlink: 'syz.3.321': attribute type 4 has an invalid length. [ 43.027732][ T4277] Process accounting resumed [ 43.072757][ T4289] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow [ 43.085472][ T4277] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 43.130852][ T3272] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.184070][ T4302] netem: incorrect ge model size [ 43.189040][ T4302] netem: change failed [ 43.200926][ T4301] loop2: detected capacity change from 0 to 2048 [ 43.216337][ T4306] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=4306 comm=syz.4.330 [ 43.234685][ T4301] loop2: p1 < > p4 [ 43.239238][ T4301] loop2: p4 size 8388608 extends beyond EOD, truncated [ 43.244414][ T4308] loop4: detected capacity change from 0 to 512 [ 43.256062][ T3266] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.258445][ T2967] loop2: p1 < > p4 [ 43.270450][ T2967] loop2: p4 size 8388608 extends beyond EOD, truncated [ 43.300020][ T4308] EXT4-fs (loop4): too many log groups per flexible block group [ 43.307874][ T4308] EXT4-fs (loop4): failed to initialize mballoc (-12) [ 43.321285][ T4314] loop1: detected capacity change from 0 to 764 [ 43.327999][ T4308] EXT4-fs (loop4): mount failed [ 43.333286][ T4314] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 43.337766][ T4315] loop2: detected capacity change from 0 to 128 [ 43.375435][ T3494] udevd[3494]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 43.388952][ T3259] udevd[3259]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 43.417056][ T3257] udevd[3257]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 43.428241][ T3494] udevd[3494]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 43.572384][ T4335] loop1: detected capacity change from 0 to 512 [ 43.666495][ T4336] 9pnet_fd: Insufficient options for proto=fd [ 43.761967][ T4335] EXT4-fs (loop1): too many log groups per flexible block group [ 43.769670][ T4335] EXT4-fs (loop1): failed to initialize mballoc (-12) [ 43.846970][ T4345] loop0: detected capacity change from 0 to 512 [ 43.863244][ T4335] EXT4-fs (loop1): mount failed [ 43.878616][ T4345] EXT4-fs: Ignoring removed nomblk_io_submit option [ 43.889104][ T4345] EXT4-fs: journaled quota format not specified [ 44.341143][ T29] kauditd_printk_skb: 251 callbacks suppressed [ 44.341156][ T29] audit: type=1326 audit(1728103815.976:1249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4359 comm="syz.4.348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8e403dff9 code=0x7ffc0000 [ 44.370752][ T29] audit: type=1326 audit(1728103815.976:1250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4359 comm="syz.4.348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8e403dff9 code=0x7ffc0000 [ 44.639656][ T4365] loop2: detected capacity change from 0 to 512 [ 44.676499][ T4368] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 44.689643][ T29] audit: type=1400 audit(1728103816.316:1251): avc: denied { ioctl } for pid=4367 comm="syz.4.352" path="/dev/raw-gadget" dev="devtmpfs" ino=118 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 44.741441][ T4368] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 44.828074][ T4365] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.852935][ T4374] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=4374 comm=syz.1.354 [ 44.876018][ T29] audit: type=1326 audit(1728103816.506:1252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4376 comm="syz.0.353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83d9fbdff9 code=0x7ffc0000 [ 44.899392][ T29] audit: type=1326 audit(1728103816.506:1253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4376 comm="syz.0.353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83d9fbdff9 code=0x7ffc0000 [ 44.899500][ T4365] ext4 filesystem being mounted at /84/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 44.922879][ T29] audit: type=1326 audit(1728103816.506:1254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4376 comm="syz.0.353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f83d9fbdff9 code=0x7ffc0000 [ 44.950055][ T4365] Process accounting resumed [ 44.956677][ T29] audit: type=1326 audit(1728103816.506:1255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4376 comm="syz.0.353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83d9fbdff9 code=0x7ffc0000 [ 44.984760][ T29] audit: type=1326 audit(1728103816.506:1256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4376 comm="syz.0.353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83d9fbdff9 code=0x7ffc0000 [ 45.004899][ T4384] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow [ 45.008202][ T29] audit: type=1326 audit(1728103816.506:1257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4376 comm="syz.0.353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f83d9fbdff9 code=0x7ffc0000 [ 45.041163][ T29] audit: type=1326 audit(1728103816.506:1258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4376 comm="syz.0.353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83d9fbdff9 code=0x7ffc0000 [ 45.069495][ T4365] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 45.119421][ T4390] loop0: detected capacity change from 0 to 512 [ 45.132973][ T4390] EXT4-fs: Ignoring removed nomblk_io_submit option [ 45.147259][ T4392] netem: incorrect ge model size [ 45.152240][ T4392] netem: change failed [ 45.168625][ T3272] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.183410][ T4396] loop1: detected capacity change from 0 to 512 [ 45.188206][ T4390] EXT4-fs: journaled quota format not specified [ 45.228038][ T4400] loop2: detected capacity change from 0 to 4096 [ 45.234851][ T4396] EXT4-fs (loop1): too many log groups per flexible block group [ 45.242568][ T4396] EXT4-fs (loop1): failed to initialize mballoc (-12) [ 45.250021][ T4398] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 45.258213][ T4398] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 45.262866][ T4404] loop0: detected capacity change from 0 to 4096 [ 45.273218][ T4404] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 45.282201][ T4396] EXT4-fs (loop1): mount failed [ 45.288459][ T4400] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.389610][ T4411] loop4: detected capacity change from 0 to 512 [ 45.398746][ T4415] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=4415 comm=syz.0.366 [ 45.417525][ T4411] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.438857][ T4411] ext4 filesystem being mounted at /79/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 45.455650][ T4420] capability: warning: `syz.3.369' uses deprecated v2 capabilities in a way that may be insecure [ 45.475735][ T4411] Process accounting resumed [ 45.784626][ T4434] loop3: detected capacity change from 0 to 4096 [ 45.787478][ T4411] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 45.791321][ T4434] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 45.822095][ T4434] loop3: detected capacity change from 0 to 764 [ 45.828834][ T4434] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 45.860999][ T4438] netlink: 'syz.3.374': attribute type 4 has an invalid length. [ 45.882896][ T3267] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.896009][ T4436] loop0: detected capacity change from 0 to 2048 [ 45.924349][ T4436] loop0: p1 < > p4 [ 45.928660][ T4436] loop0: p4 size 8388608 extends beyond EOD, truncated [ 45.935847][ T4444] loop3: detected capacity change from 0 to 4096 [ 45.953161][ T4444] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 45.997575][ T4444] loop3: detected capacity change from 0 to 764 [ 46.005504][ T4444] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 46.043434][ T3272] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.111260][ T4460] netem: incorrect ge model size [ 46.116432][ T4460] netem: change failed [ 46.129587][ T4463] loop1: detected capacity change from 0 to 512 [ 46.155151][ T4466] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=4466 comm=syz.4.388 [ 46.171073][ T4463] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.189775][ T4463] ext4 filesystem being mounted at /61/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 46.202045][ T4463] Process accounting resumed [ 46.208779][ T4463] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 46.226339][ T4457] loop0: detected capacity change from 0 to 4096 [ 46.237972][ T4457] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 46.249716][ T4473] loop4: detected capacity change from 0 to 512 [ 46.293894][ T3266] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.321636][ T4473] EXT4-fs (loop4): too many log groups per flexible block group [ 46.329426][ T4473] EXT4-fs (loop4): failed to initialize mballoc (-12) [ 46.338681][ T4480] loop2: detected capacity change from 0 to 2048 [ 46.349957][ T4473] EXT4-fs (loop4): mount failed [ 46.373379][ T4491] netem: incorrect ge model size [ 46.378453][ T4491] netem: change failed [ 46.385498][ T4489] netem: incorrect ge model size [ 46.390445][ T4489] netem: change failed [ 46.420181][ T4480] loop2: p1 < > p4 [ 46.424896][ T4480] loop2: p4 size 8388608 extends beyond EOD, truncated [ 46.511707][ T3259] udevd[3259]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 46.518153][ T4505] loop2: detected capacity change from 0 to 764 [ 46.535243][ T3519] udevd[3519]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 46.546633][ T4505] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 46.738086][ T4517] netem: incorrect ge model size [ 46.743070][ T4517] netem: change failed [ 46.787442][ T4519] netem: incorrect ge model size [ 46.792416][ T4519] netem: change failed [ 46.963811][ T4526] loop3: detected capacity change from 0 to 512 [ 46.971775][ T4521] usb usb7: usbfs: process 4521 (syz.2.410) did not claim interface 0 before use [ 46.982549][ T4527] netem: incorrect ge model size [ 46.987594][ T4527] netem: change failed [ 46.996448][ T4526] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.009002][ T4526] ext4 filesystem being mounted at /74/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 47.027897][ T4526] Process accounting resumed [ 47.036368][ T4526] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 47.072357][ T4537] tipc: Enabling of bearer <th:syz> rejected, media not registered [ 47.113693][ T3649] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.217733][ T4553] FAULT_INJECTION: forcing a failure. [ 47.217733][ T4553] name failslab, interval 1, probability 0, space 0, times 1 [ 47.230559][ T4553] CPU: 1 UID: 0 PID: 4553 Comm: syz.1.423 Not tainted 6.12.0-rc1-syzkaller-00257-g2f91ff27b0ee #0 [ 47.241282][ T4553] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 47.251479][ T4553] Call Trace: [ 47.254801][ T4553] [ 47.257829][ T4553] dump_stack_lvl+0xf2/0x150 [ 47.262413][ T4553] dump_stack+0x15/0x20 [ 47.266613][ T4553] should_fail_ex+0x223/0x230 [ 47.271287][ T4553] ? proc_thread_self_get_link+0xac/0x120 [ 47.277000][ T4553] should_failslab+0x8f/0xb0 [ 47.281584][ T4553] __kmalloc_cache_noprof+0x4b/0x2a0 [ 47.287189][ T4553] proc_thread_self_get_link+0xac/0x120 [ 47.292731][ T4553] ? __pfx_proc_thread_self_get_link+0x10/0x10 [ 47.298898][ T4553] pick_link+0x4a0/0x7e0 [ 47.303208][ T4553] step_into+0x725/0x810 [ 47.307525][ T4553] link_path_walk+0x54c/0x820 [ 47.312209][ T4553] path_openat+0x1af/0x1fa0 [ 47.316771][ T4553] do_filp_open+0xf7/0x200 [ 47.321203][ T4553] do_sys_openat2+0xab/0x120 [ 47.325783][ T4553] __x64_sys_openat+0xf3/0x120 [ 47.330615][ T4553] x64_sys_call+0x1025/0x2d60 [ 47.335283][ T4553] do_syscall_64+0xc9/0x1c0 [ 47.339847][ T4553] ? clear_bhb_loop+0x55/0xb0 [ 47.344536][ T4553] ? clear_bhb_loop+0x55/0xb0 [ 47.349377][ T4553] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 47.355276][ T4553] RIP: 0033:0x7f2186a8dff9 [ 47.359694][ T4553] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 47.379374][ T4553] RSP: 002b:00007f2185701038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 47.387805][ T4553] RAX: ffffffffffffffda RBX: 00007f2186c45f80 RCX: 00007f2186a8dff9 [ 47.395766][ T4553] RDX: 000000000000275a RSI: 00000000200001c0 RDI: ffffffffffffff9c [ 47.403790][ T4553] RBP: 00007f2185701090 R08: 0000000000000000 R09: 0000000000000000 [ 47.411748][ T4553] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 47.419854][ T4553] R13: 0000000000000000 R14: 00007f2186c45f80 R15: 00007ffc04334f98 [ 47.427843][ T4553] [ 47.437271][ T4554] loop2: detected capacity change from 0 to 764 [ 47.438630][ T4547] loop3: detected capacity change from 0 to 4096 [ 47.460378][ T4547] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 47.477881][ T4554] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 47.523632][ T4561] loop0: detected capacity change from 0 to 512 [ 47.525186][ T4547] loop3: detected capacity change from 0 to 764 [ 47.537049][ T4547] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 47.561697][ T4559] usb usb7: usbfs: process 4559 (syz.4.427) did not claim interface 0 before use [ 47.585471][ T4567] tipc: Enabling of bearer <th:sy> rejected, media not registered [ 47.606938][ T4570] loop1: detected capacity change from 0 to 512 [ 47.637318][ T4561] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.661113][ T4561] ext4 filesystem being mounted at /77/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 47.690800][ T4561] Process accounting resumed [ 47.706141][ T4570] EXT4-fs (loop1): too many log groups per flexible block group [ 47.713880][ T4570] EXT4-fs (loop1): failed to initialize mballoc (-12) [ 47.714916][ T4583] loop2: detected capacity change from 0 to 2048 [ 47.728301][ T4570] EXT4-fs (loop1): mount failed [ 47.738048][ T4561] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 47.753141][ T4583] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.793590][ T4593] loop4: detected capacity change from 0 to 764 [ 47.801880][ T3268] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.823406][ T4593] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 47.841457][ T3272] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.020778][ T4609] loop0: detected capacity change from 0 to 512 [ 48.176537][ T4609] EXT4-fs: Ignoring removed nomblk_io_submit option [ 48.267198][ T4609] EXT4-fs: journaled quota format not specified [ 48.308452][ T4624] loop3: detected capacity change from 0 to 764 [ 48.309202][ T4627] loop4: detected capacity change from 0 to 512 [ 48.332769][ T4629] loop2: detected capacity change from 0 to 512 [ 48.345395][ T4624] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 48.346843][ T4629] EXT4-fs error (device loop2): ext4_read_inode_bitmap:139: comm syz.2.456: Invalid inode bitmap blk 4 in block_group 0 [ 48.362065][ T4609] netlink: 28 bytes leftover after parsing attributes in process `syz.0.444'. [ 48.367505][ T4629] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.391018][ T4627] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.403807][ T4627] ext4 filesystem being mounted at /91/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 48.435069][ T4627] Process accounting resumed [ 48.463264][ T4639] loop0: detected capacity change from 0 to 4096 [ 48.469978][ T4639] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 48.488731][ T4639] loop0: detected capacity change from 0 to 764 [ 48.495226][ T4639] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 48.524694][ T4646] netlink: 12 bytes leftover after parsing attributes in process `syz.0.461'. [ 48.548107][ T4649] loop3: detected capacity change from 0 to 512 [ 48.571832][ T4643] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 7969 vs 220 free clusters [ 48.589073][ T4627] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 48.612995][ T3267] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.632504][ T4657] loop0: detected capacity change from 0 to 764 [ 48.650193][ T4660] loop4: detected capacity change from 0 to 128 [ 48.660313][ T4657] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 48.668574][ T4665] loop1: detected capacity change from 0 to 512 [ 48.678259][ T4649] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.700346][ T4649] ext4 filesystem being mounted at /87/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 48.720906][ T4660] syz.4.466: attempt to access beyond end of device [ 48.720906][ T4660] loop4: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 48.750121][ T4665] EXT4-fs error (device loop1): ext4_orphan_get:1388: inode #15: comm syz.1.469: casefold flag without casefold feature [ 48.751706][ T3649] EXT4-fs error (device loop3): ext4_readdir:261: inode #12: block 32: comm syz-executor: path /87/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 48.770309][ T4660] syz.4.466: attempt to access beyond end of device [ 48.770309][ T4660] loop4: rw=524288, sector=145, nr_sectors = 224 limit=128 [ 48.793521][ T4669] loop0: detected capacity change from 0 to 4096 [ 48.797620][ T4660] syz.4.466: attempt to access beyond end of device [ 48.797620][ T4660] loop4: rw=0, sector=169, nr_sectors = 8 limit=128 [ 48.805242][ T4665] EXT4-fs error (device loop1): ext4_orphan_get:1393: comm syz.1.469: couldn't read orphan inode 15 (err -117) [ 48.816863][ T4660] syz.4.466: attempt to access beyond end of device [ 48.816863][ T4660] loop4: rw=0, sector=169, nr_sectors = 8 limit=128 [ 48.830217][ T4669] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 48.842298][ T4660] syz.4.466: attempt to access beyond end of device [ 48.842298][ T4660] loop4: rw=0, sector=169, nr_sectors = 8 limit=128 [ 48.863601][ T4660] syz.4.466: attempt to access beyond end of device [ 48.863601][ T4660] loop4: rw=0, sector=169, nr_sectors = 8 limit=128 [ 48.875287][ T4665] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.910367][ T4665] EXT4-fs error (device loop1): ext4_map_blocks:671: inode #2: block 4: comm syz.1.469: lblock 0 mapped to illegal pblock 4 (length 1) [ 48.946630][ T4669] loop0: detected capacity change from 0 to 764 [ 48.953241][ T4669] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 48.995420][ T3266] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.057720][ T4680] loop0: detected capacity change from 0 to 512 [ 49.077224][ T4682] pim6reg1: entered promiscuous mode [ 49.082573][ T4682] pim6reg1: entered allmulticast mode [ 49.105944][ T4680] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.125285][ T4680] ext4 filesystem being mounted at /86/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 49.151791][ T4680] Process accounting resumed [ 49.177642][ T3272] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.187674][ T4680] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 49.220823][ T4694] usb usb7: usbfs: process 4694 (syz.2.481) did not claim interface 0 before use [ 49.230423][ T3268] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.245121][ T4697] FAULT_INJECTION: forcing a failure. [ 49.245121][ T4697] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 49.247771][ T4692] x_tables: duplicate underflow at hook 3 [ 49.258226][ T4697] CPU: 0 UID: 0 PID: 4697 Comm: syz.1.482 Not tainted 6.12.0-rc1-syzkaller-00257-g2f91ff27b0ee #0 [ 49.274669][ T4697] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 49.284889][ T4697] Call Trace: [ 49.288283][ T4697] [ 49.291201][ T4697] dump_stack_lvl+0xf2/0x150 [ 49.295782][ T4697] dump_stack+0x15/0x20 [ 49.299943][ T4697] should_fail_ex+0x223/0x230 [ 49.304693][ T4697] should_fail+0xb/0x10 [ 49.308842][ T4697] should_fail_usercopy+0x1a/0x20 [ 49.313864][ T4697] _copy_from_iter+0xd3/0xd20 [ 49.318687][ T4697] ? kmalloc_reserve+0x16e/0x190 [ 49.323617][ T4697] ? __build_skb_around+0x196/0x1f0 [ 49.328806][ T4697] ? __alloc_skb+0x21f/0x310 [ 49.333418][ T4697] ? __virt_addr_valid+0x1ed/0x250 [ 49.338524][ T4697] ? __check_object_size+0x364/0x520 [ 49.343818][ T4697] netlink_sendmsg+0x460/0x6e0 [ 49.348582][ T4697] ? __pfx_netlink_sendmsg+0x10/0x10 [ 49.353894][ T4697] __sock_sendmsg+0x140/0x180 [ 49.358564][ T4697] ____sys_sendmsg+0x312/0x410 [ 49.363358][ T4697] __sys_sendmsg+0x1d9/0x270 [ 49.367972][ T4697] __x64_sys_sendmsg+0x46/0x50 [ 49.372762][ T4697] x64_sys_call+0x2689/0x2d60 [ 49.377509][ T4697] do_syscall_64+0xc9/0x1c0 [ 49.382011][ T4697] ? clear_bhb_loop+0x55/0xb0 [ 49.386927][ T4697] ? clear_bhb_loop+0x55/0xb0 [ 49.391598][ T4697] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 49.397904][ T4697] RIP: 0033:0x7f2186a8dff9 [ 49.402428][ T4697] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 49.422076][ T4697] RSP: 002b:00007f2185701038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 49.430478][ T4697] RAX: ffffffffffffffda RBX: 00007f2186c45f80 RCX: 00007f2186a8dff9 [ 49.438474][ T4697] RDX: 0000000000000000 RSI: 00000000200006c0 RDI: 0000000000000003 [ 49.446435][ T4697] RBP: 00007f2185701090 R08: 0000000000000000 R09: 0000000000000000 [ 49.454539][ T4697] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 49.462498][ T4697] R13: 0000000000000000 R14: 00007f2186c45f80 R15: 00007ffc04334f98 [ 49.470461][ T4697] [ 49.500628][ T4700] loop2: detected capacity change from 0 to 764 [ 49.516039][ T4700] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 49.620508][ T4712] loop0: detected capacity change from 0 to 4096 [ 49.628028][ T4712] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 49.672229][ T4712] loop0: detected capacity change from 0 to 764 [ 49.681108][ T4712] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 49.746951][ T4717] netem: incorrect ge model size [ 49.751912][ T4717] netem: change failed [ 49.776325][ T4719] netlink: 'syz.0.491': attribute type 4 has an invalid length. [ 49.825139][ T29] kauditd_printk_skb: 211 callbacks suppressed [ 49.825156][ T29] audit: type=1400 audit(1728103821.456:1470): avc: denied { create } for pid=4720 comm="syz.0.492" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 49.853041][ T29] audit: type=1400 audit(1728103821.486:1471): avc: denied { bind } for pid=4720 comm="syz.0.492" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 49.873039][ T29] audit: type=1400 audit(1728103821.486:1472): avc: denied { connect } for pid=4720 comm="syz.0.492" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 49.893487][ T29] audit: type=1400 audit(1728103821.486:1473): avc: denied { write } for pid=4720 comm="syz.0.492" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 49.950722][ T29] audit: type=1400 audit(1728103821.586:1474): avc: denied { create } for pid=4726 comm="syz.0.496" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 49.955600][ T4727] netlink: 32 bytes leftover after parsing attributes in process `syz.0.496'. [ 49.970185][ T29] audit: type=1400 audit(1728103821.586:1475): avc: denied { bind } for pid=4726 comm="syz.0.496" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 49.998301][ T29] audit: type=1400 audit(1728103821.586:1476): avc: denied { name_bind } for pid=4726 comm="syz.0.496" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 50.019285][ T29] audit: type=1400 audit(1728103821.586:1477): avc: denied { node_bind } for pid=4726 comm="syz.0.496" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=dccp_socket permissive=1 [ 50.040149][ T29] audit: type=1400 audit(1728103821.586:1478): avc: denied { listen } for pid=4726 comm="syz.0.496" lport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 50.061203][ T29] audit: type=1326 audit(1728103821.586:1479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4724 comm="syz.1.494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2186a8dff9 code=0x7ffc0000 [ 50.107004][ T4731] loop1: detected capacity change from 0 to 512 [ 50.242650][ T4744] netem: incorrect ge model size [ 50.247713][ T4744] netem: change failed [ 50.294337][ T4749] loop2: detected capacity change from 0 to 512 [ 50.478995][ T4749] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.491634][ T4749] ext4 filesystem being mounted at /118/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 50.525318][ T4749] Process accounting resumed [ 50.530283][ T4757] loop4: detected capacity change from 0 to 2048 [ 50.554533][ T4749] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 50.570295][ T4759] loop0: detected capacity change from 0 to 764 [ 50.577981][ T4757] loop4: p1 < > p4 [ 50.590224][ T4757] loop4: p4 size 8388608 extends beyond EOD, truncated [ 50.604317][ T4759] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 50.655093][ T3272] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.674185][ T4765] netlink: 'syz.0.512': attribute type 4 has an invalid length. [ 50.704696][ T4770] loop4: detected capacity change from 0 to 512 [ 50.749853][ T4770] EXT4-fs error (device loop4): ext4_orphan_get:1388: inode #17: comm +}[@: iget: bogus i_mode (0) [ 50.768423][ T4770] EXT4-fs error (device loop4): ext4_orphan_get:1393: comm +}[@: couldn't read orphan inode 17 (err -117) [ 50.785214][ T4779] bond1: entered promiscuous mode [ 50.790259][ T4779] bond1: entered allmulticast mode [ 50.795620][ T4779] 8021q: adding VLAN 0 to HW filter on device bond1 [ 50.820730][ T4770] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.859698][ T4784] FAULT_INJECTION: forcing a failure. [ 50.859698][ T4784] name failslab, interval 1, probability 0, space 0, times 0 [ 50.872386][ T4784] CPU: 1 UID: 0 PID: 4784 Comm: syz.0.518 Not tainted 6.12.0-rc1-syzkaller-00257-g2f91ff27b0ee #0 [ 50.882987][ T4784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 50.893193][ T4784] Call Trace: [ 50.896467][ T4784] [ 50.899521][ T4784] dump_stack_lvl+0xf2/0x150 [ 50.904180][ T4784] dump_stack+0x15/0x20 [ 50.908323][ T4784] should_fail_ex+0x223/0x230 [ 50.913073][ T4784] ? skb_clone+0x154/0x1f0 [ 50.917522][ T4784] should_failslab+0x8f/0xb0 [ 50.922143][ T4784] kmem_cache_alloc_noprof+0x4c/0x290 [ 50.927579][ T4784] ? should_failslab+0x8f/0xb0 [ 50.932384][ T4784] skb_clone+0x154/0x1f0 [ 50.936702][ T4784] pfkey_broadcast_one+0x65/0x1a0 [ 50.941740][ T4784] pfkey_broadcast+0x232/0x260 [ 50.946508][ T4784] pfkey_sendmsg+0x827/0x970 [ 50.951287][ T4784] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 50.956414][ T4784] __sock_sendmsg+0x140/0x180 [ 50.961083][ T4784] ____sys_sendmsg+0x312/0x410 [ 50.965844][ T4784] __sys_sendmsg+0x1d9/0x270 [ 50.970438][ T4784] __x64_sys_sendmsg+0x46/0x50 [ 50.975263][ T4784] x64_sys_call+0x2689/0x2d60 [ 50.979940][ T4784] do_syscall_64+0xc9/0x1c0 [ 50.984485][ T4784] ? clear_bhb_loop+0x55/0xb0 [ 50.989290][ T4784] ? clear_bhb_loop+0x55/0xb0 [ 50.994030][ T4784] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.999919][ T4784] RIP: 0033:0x7f83d9fbdff9 [ 51.004325][ T4784] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 51.023919][ T4784] RSP: 002b:00007f83d8c37038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 51.032325][ T4784] RAX: ffffffffffffffda RBX: 00007f83da175f80 RCX: 00007f83d9fbdff9 [ 51.040441][ T4784] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 51.048532][ T4784] RBP: 00007f83d8c37090 R08: 0000000000000000 R09: 0000000000000000 [ 51.056495][ T4784] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 51.064493][ T4784] R13: 0000000000000000 R14: 00007f83da175f80 R15: 00007fff76e2b638 [ 51.072470][ T4784] [ 51.077320][ T4777] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm ext4lazyinit: bg 0: block 7: invalid block bitmap [ 51.136366][ T3267] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.193505][ T4794] loop4: detected capacity change from 0 to 512 [ 51.217657][ T4795] netlink: 300 bytes leftover after parsing attributes in process `syz.2.521'. [ 51.249774][ T4794] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.262578][ T4794] ext4 filesystem being mounted at /103/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 51.276030][ T4794] Process accounting resumed [ 51.532630][ T4806] netem: incorrect ge model size [ 51.537707][ T4806] netem: change failed [ 51.565355][ T4808] netlink: 'syz.1.525': attribute type 4 has an invalid length. [ 51.613004][ T4812] netlink: 12 bytes leftover after parsing attributes in process `syz.1.527'. [ 51.626768][ T4812] netlink: 8 bytes leftover after parsing attributes in process `syz.1.527'. [ 51.692585][ T4814] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 51.866578][ T4794] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 51.870945][ T4816] loop2: detected capacity change from 0 to 512 [ 51.885741][ T4816] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 51.916197][ T3267] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.925523][ T4816] EXT4-fs error (device loop2): ext4_orphan_get:1414: comm syz.2.529: bad orphan inode 131083 [ 51.942398][ T4816] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.989675][ T3257] udevd[3257]: inotify_add_watch(7, /dev/loop11, 10) failed: No such file or directory [ 52.057274][ T4828] loop4: detected capacity change from 0 to 4096 [ 52.077341][ T4828] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 52.145595][ T4828] loop4: detected capacity change from 0 to 764 [ 52.183681][ T4828] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 52.197757][ T4838] loop0: detected capacity change from 0 to 512 [ 52.232446][ T4838] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.263301][ T4838] ext4 filesystem being mounted at /105/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 52.291325][ T4838] Process accounting resumed [ 52.303271][ T4838] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 52.329530][ T4847] FAULT_INJECTION: forcing a failure. [ 52.329530][ T4847] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 52.342635][ T4847] CPU: 0 UID: 0 PID: 4847 Comm: syz.4.536 Not tainted 6.12.0-rc1-syzkaller-00257-g2f91ff27b0ee #0 [ 52.353223][ T4847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 52.363295][ T4847] Call Trace: [ 52.366587][ T4847] [ 52.369506][ T4847] dump_stack_lvl+0xf2/0x150 [ 52.374530][ T4847] dump_stack+0x15/0x20 [ 52.378809][ T4847] should_fail_ex+0x223/0x230 [ 52.383612][ T4847] should_fail+0xb/0x10 [ 52.387796][ T4847] should_fail_usercopy+0x1a/0x20 [ 52.392885][ T4847] _copy_to_user+0x1e/0xa0 [ 52.397304][ T4847] simple_read_from_buffer+0xa0/0x110 [ 52.402680][ T4847] proc_fail_nth_read+0xf9/0x140 [ 52.407623][ T4847] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 52.413180][ T4847] vfs_read+0x195/0x720 [ 52.417364][ T4847] ? __rcu_read_unlock+0x4e/0x70 [ 52.422313][ T4847] ? __fget_files+0x1d4/0x210 [ 52.427142][ T4847] ksys_read+0xeb/0x1b0 [ 52.431297][ T4847] __x64_sys_read+0x42/0x50 [ 52.435803][ T4847] x64_sys_call+0x27d3/0x2d60 [ 52.440548][ T4847] do_syscall_64+0xc9/0x1c0 [ 52.445048][ T4847] ? clear_bhb_loop+0x55/0xb0 [ 52.449789][ T4847] ? clear_bhb_loop+0x55/0xb0 [ 52.454550][ T4847] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.460537][ T4847] RIP: 0033:0x7ff8e403ca3c [ 52.464951][ T4847] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 52.484631][ T4847] RSP: 002b:00007ff8e2cb1030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 52.493167][ T4847] RAX: ffffffffffffffda RBX: 00007ff8e41f5f80 RCX: 00007ff8e403ca3c [ 52.501141][ T4847] RDX: 000000000000000f RSI: 00007ff8e2cb10a0 RDI: 0000000000000006 [ 52.509117][ T4847] RBP: 00007ff8e2cb1090 R08: 0000000000000000 R09: 0000000000000000 [ 52.517134][ T4847] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 52.525135][ T4847] R13: 0000000000000000 R14: 00007ff8e41f5f80 R15: 00007fff65527098 [ 52.533114][ T4847] [ 52.569767][ T3268] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.935032][ T3272] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.966633][ T4858] usb usb7: usbfs: process 4858 (syz.4.542) did not claim interface 0 before use [ 53.139370][ T4863] loop0: detected capacity change from 0 to 2048 [ 53.222517][ T4856] x_tables: eb_tables: snat.0 target: invalid size 16 (kernel) != (user) 0 [ 53.231506][ T4863] loop0: p1 < > p4 [ 53.242471][ T4863] loop0: p4 size 8388608 extends beyond EOD, truncated [ 53.293719][ T2967] loop0: p1 < > p4 [ 53.311789][ T2967] loop0: p4 size 8388608 extends beyond EOD, truncated [ 53.435394][ T3257] udevd[3257]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 53.436493][ T4882] loop1: detected capacity change from 0 to 764 [ 53.453066][ T3494] udevd[3494]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 53.490648][ T4882] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 53.529775][ T4888] netem: incorrect ge model size [ 53.534829][ T4888] netem: change failed [ 53.596021][ T4894] usb usb7: usbfs: process 4894 (syz.4.555) did not claim interface 0 before use [ 53.650948][ T4899] loop2: detected capacity change from 0 to 2048 [ 53.774740][ T4899] loop2: p1 < > p4 [ 53.806510][ T4899] loop2: p4 size 8388608 extends beyond EOD, truncated [ 53.867235][ T4906] loop0: detected capacity change from 0 to 128 [ 53.977716][ T4906] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 53.995551][ T4907] loop4: detected capacity change from 0 to 1024 [ 54.024363][ T4906] ext4 filesystem being mounted at /110/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 54.061186][ T4907] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.103013][ T3267] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.115747][ T4917] FAULT_INJECTION: forcing a failure. [ 54.115747][ T4917] name failslab, interval 1, probability 0, space 0, times 0 [ 54.123975][ T4906] loop0: detected capacity change from 128 to 0 [ 54.128419][ T4917] CPU: 0 UID: 0 PID: 4917 Comm: syz.2.562 Not tainted 6.12.0-rc1-syzkaller-00257-g2f91ff27b0ee #0 [ 54.141791][ T3268] syz-executor: attempt to access beyond end of device [ 54.141791][ T3268] loop0: rw=12288, sector=8, nr_sectors = 2 limit=0 [ 54.145125][ T4917] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 54.145137][ T4917] Call Trace: [ 54.145143][ T4917] [ 54.145150][ T4917] dump_stack_lvl+0xf2/0x150 [ 54.173963][ T3268] EXT4-fs warning (device loop0): htree_dirblock_to_tree:1083: inode #2: lblock 0: comm syz-executor: error -5 reading directory block [ 54.174676][ T4917] dump_stack+0x15/0x20 [ 54.179327][ T3268] syz-executor: attempt to access beyond end of device [ 54.179327][ T3268] loop0: rw=524288, sector=72, nr_sectors = 2 limit=0 [ 54.192991][ T4917] should_fail_ex+0x223/0x230 [ 54.193021][ T4917] ? selinux_bpf_prog_load+0x35/0xe0 [ 54.193039][ T4917] should_failslab+0x8f/0xb0 [ 54.193101][ T4917] __kmalloc_cache_noprof+0x4b/0x2a0 [ 54.193127][ T4917] ? should_fail+0xb/0x10 [ 54.234745][ T4917] selinux_bpf_prog_load+0x35/0xe0 [ 54.239931][ T4917] security_bpf_prog_load+0x47/0x80 [ 54.245167][ T4917] bpf_prog_load+0xe81/0x1070 [ 54.249874][ T4917] ? __rcu_read_unlock+0x4e/0x70 [ 54.254962][ T4917] __sys_bpf+0x463/0x7a0 [ 54.259203][ T4917] __x64_sys_bpf+0x43/0x50 [ 54.263617][ T4917] x64_sys_call+0x2625/0x2d60 [ 54.268374][ T4917] do_syscall_64+0xc9/0x1c0 [ 54.272864][ T4917] ? clear_bhb_loop+0x55/0xb0 [ 54.277615][ T4917] ? clear_bhb_loop+0x55/0xb0 [ 54.282324][ T4917] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 54.288217][ T4917] RIP: 0033:0x7f769f2cdff9 [ 54.292620][ T4917] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 54.312220][ T4917] RSP: 002b:00007f769df47038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 54.320734][ T4917] RAX: ffffffffffffffda RBX: 00007f769f485f80 RCX: 00007f769f2cdff9 [ 54.328731][ T4917] RDX: 0000000000000094 RSI: 0000000020000440 RDI: 0000000000000005 [ 54.336714][ T4917] RBP: 00007f769df47090 R08: 0000000000000000 R09: 0000000000000000 [ 54.344685][ T4917] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 54.352812][ T4917] R13: 0000000000000000 R14: 00007f769f485f80 R15: 00007ffc830a4838 [ 54.360783][ T4917] [ 54.367892][ T3268] syz-executor: attempt to access beyond end of device [ 54.367892][ T3268] loop0: rw=12288, sector=70, nr_sectors = 2 limit=0 [ 54.428480][ T3268] EXT4-fs error (device loop0): ext4_get_inode_loc:4541: inode #2: block 35: comm syz-executor: unable to read itable block [ 54.442405][ T3268] syz-executor: attempt to access beyond end of device [ 54.442405][ T3268] loop0: rw=145409, sector=2, nr_sectors = 2 limit=0 [ 54.455998][ T3268] Buffer I/O error on dev loop0, logical block 1, lost sync page write [ 54.468795][ T3268] EXT4-fs (loop0): I/O error while writing superblock [ 54.475614][ T3268] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5780: IO failure [ 54.485423][ T3268] syz-executor: attempt to access beyond end of device [ 54.485423][ T3268] loop0: rw=145409, sector=2, nr_sectors = 2 limit=0 [ 54.498874][ T3268] Buffer I/O error on dev loop0, logical block 1, lost sync page write [ 54.510200][ T3268] EXT4-fs (loop0): I/O error while writing superblock [ 54.517080][ T3268] EXT4-fs error (device loop0): ext4_dirty_inode:5984: inode #2: comm syz-executor: mark_inode_dirty error [ 54.517909][ T4921] netlink: 'syz.2.566': attribute type 4 has an invalid length. [ 54.530006][ T3268] syz-executor: attempt to access beyond end of device [ 54.530006][ T3268] loop0: rw=145409, sector=2, nr_sectors = 2 limit=0 [ 54.549987][ T3268] Buffer I/O error on dev loop0, logical block 1, lost sync page write [ 54.563910][ T3268] EXT4-fs (loop0): I/O error while writing superblock [ 54.579371][ T3376] kworker/u8:7: attempt to access beyond end of device [ 54.579371][ T3376] loop0: rw=524288, sector=70, nr_sectors = 2 limit=0 [ 54.592916][ T3376] kworker/u8:7: attempt to access beyond end of device [ 54.592916][ T3376] loop0: rw=12288, sector=72, nr_sectors = 2 limit=0 [ 54.607785][ T3376] EXT4-fs error (device loop0): __ext4_get_inode_loc_noinmem:4526: inode #12: block 36: comm kworker/u8:7: unable to read itable block [ 54.621664][ T3376] kworker/u8:7: attempt to access beyond end of device [ 54.621664][ T3376] loop0: rw=145409, sector=2, nr_sectors = 2 limit=0 [ 54.635319][ T3376] Buffer I/O error on dev loop0, logical block 1, lost sync page write [ 54.651126][ T3376] EXT4-fs (loop0): I/O error while writing superblock [ 54.658524][ T3376] kworker/u8:7: attempt to access beyond end of device [ 54.658524][ T3376] loop0: rw=524288, sector=70, nr_sectors = 2 limit=0 [ 54.680571][ T3376] EXT4-fs error (device loop0): __ext4_get_inode_loc_noinmem:4526: inode #13: block 36: comm kworker/u8:7: unable to read itable block [ 54.724497][ T3376] Buffer I/O error on dev loop0, logical block 1, lost sync page write [ 54.732876][ T3376] EXT4-fs (loop0): I/O error while writing superblock [ 54.759524][ T4929] loop1: detected capacity change from 0 to 1024 [ 54.777814][ T3376] EXT4-fs error (device loop0): __ext4_get_inode_loc_noinmem:4526: inode #2: block 35: comm kworker/u8:7: unable to read itable block [ 54.793261][ T3376] Buffer I/O error on dev loop0, logical block 1, lost sync page write [ 54.803026][ T3376] EXT4-fs (loop0): I/O error while writing superblock [ 54.812494][ T4932] netem: incorrect ge model size [ 54.817670][ T4932] netem: change failed [ 54.854818][ T3268] Buffer I/O error on dev loop0, logical block 1, lost sync page write [ 54.863226][ T3268] EXT4-fs (loop0): I/O error while writing superblock [ 54.880374][ T4935] netlink: 'syz.2.570': attribute type 4 has an invalid length. [ 54.930434][ T4937] loop4: detected capacity change from 0 to 4096 [ 54.967940][ T29] kauditd_printk_skb: 195 callbacks suppressed [ 54.967953][ T29] audit: type=1400 audit(1728103826.606:1673): avc: denied { read } for pid=4928 comm="syz.1.569" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 55.014225][ T29] audit: type=1400 audit(1728103826.656:1674): avc: denied { open } for pid=4928 comm="syz.1.569" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 55.052235][ T29] audit: type=1400 audit(1728103826.686:1675): avc: denied { create } for pid=4936 comm="syz.4.571" name="cpu.stat" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 55.082587][ T29] audit: type=1400 audit(1728103826.716:1676): avc: denied { read append open } for pid=4936 comm="syz.4.571" path="/118/file2/cpu.stat" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 55.109226][ T29] audit: type=1400 audit(1728103826.746:1677): avc: denied { ioctl } for pid=4936 comm="syz.4.571" path="/118/file2/cpu.stat" dev="loop4" ino=18 ioctlcmd=0x583b scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 55.147604][ T4945] loop2: detected capacity change from 0 to 512 [ 55.176224][ T4945] ext4 filesystem being mounted at /135/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 55.188381][ T29] audit: type=1400 audit(1728103826.826:1678): avc: denied { unlink } for pid=4943 comm="syz.2.574" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 55.212287][ T4944] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 55.309692][ T29] audit: type=1400 audit(1728103826.866:1679): avc: denied { rename } for pid=4943 comm="syz.2.574" name="file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 55.353295][ T29] audit: type=1326 audit(1728103826.976:1680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4943 comm="syz.2.574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f769f2cdff9 code=0x7fc00000 [ 55.376772][ T29] audit: type=1326 audit(1728103826.976:1681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4943 comm="syz.2.574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f769f2cdff9 code=0x7fc00000 [ 55.400136][ T29] audit: type=1326 audit(1728103826.976:1682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4943 comm="syz.2.574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f769f2cdff9 code=0x7fc00000 [ 55.467550][ T4952] loop2: detected capacity change from 0 to 128 [ 55.570595][ T4952] FAT-fs (loop2): Directory bread(block 32) failed [ 55.578251][ T4952] FAT-fs (loop2): Directory bread(block 33) failed [ 55.595044][ T4952] FAT-fs (loop2): Directory bread(block 34) failed [ 55.601673][ T4952] FAT-fs (loop2): Directory bread(block 35) failed [ 55.608811][ T4952] FAT-fs (loop2): Directory bread(block 36) failed [ 55.616505][ T4952] FAT-fs (loop2): Directory bread(block 37) failed [ 55.623259][ T4952] FAT-fs (loop2): Directory bread(block 38) failed [ 55.647747][ T40] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.736868][ T40] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.756725][ T4952] FAT-fs (loop2): Directory bread(block 39) failed [ 55.804638][ T4952] FAT-fs (loop2): Directory bread(block 40) failed [ 55.847743][ T40] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.867741][ T4952] FAT-fs (loop2): Directory bread(block 41) failed [ 55.947799][ T40] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.971917][ T4952] x_tables: duplicate underflow at hook 2 [ 56.007128][ T4965] netlink: 80 bytes leftover after parsing attributes in process `syz.2.576'. [ 56.032590][ T4965] netlink: 80 bytes leftover after parsing attributes in process `syz.2.576'. [ 56.042853][ T4972] netem: incorrect ge model size [ 56.047847][ T4972] netem: change failed [ 56.074421][ T40] bridge_slave_1: left allmulticast mode [ 56.080094][ T40] bridge_slave_1: left promiscuous mode [ 56.085807][ T40] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.113051][ T40] bridge_slave_0: left allmulticast mode [ 56.118873][ T40] bridge_slave_0: left promiscuous mode [ 56.124554][ T40] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.189567][ T40] bond0 (unregistering): (slave geneve1): Releasing backup interface [ 56.247211][ T40] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 56.259132][ T40] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 56.269542][ T40] bond0 (unregistering): Released all slaves [ 56.349331][ T4995] netem: incorrect ge model size [ 56.354486][ T4995] netem: change failed [ 56.360683][ T40] hsr_slave_0: left promiscuous mode [ 56.367836][ T40] hsr_slave_1: left promiscuous mode [ 56.373737][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 56.381295][ T40] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 56.411421][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 56.418924][ T40] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 56.420927][ T5001] serio: Serial port ptm0 [ 56.428435][ T4999] loop1: detected capacity change from 0 to 764 [ 56.451383][ T4999] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 56.466335][ T40] veth1_vlan: left promiscuous mode [ 56.471603][ T40] veth0_vlan: left promiscuous mode [ 56.602061][ T40] team0 (unregistering): Port device team_slave_1 removed [ 56.617039][ T40] team0 (unregistering): Port device team_slave_0 removed [ 56.881985][ T4958] chnl_net:caif_netlink_parms(): no params data found [ 57.029065][ T5055] loop1: detected capacity change from 0 to 512 [ 57.153047][ T4958] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.160170][ T4958] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.192306][ T5055] ext4 filesystem being mounted at /111/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 57.285849][ T4958] bridge_slave_0: entered allmulticast mode [ 57.296785][ T4958] bridge_slave_0: entered promiscuous mode [ 57.325294][ T5054] Process accounting resumed [ 57.346605][ T5054] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 57.369106][ T4958] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.376273][ T4958] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.409286][ T4958] bridge_slave_1: entered allmulticast mode [ 57.428775][ T4958] bridge_slave_1: entered promiscuous mode [ 57.483194][ T5082] program syz.1.602 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 57.483526][ T4958] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.505237][ T4958] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.542039][ T4958] team0: Port device team_slave_0 added [ 57.558454][ T4958] team0: Port device team_slave_1 added [ 57.595942][ T5094] loop1: detected capacity change from 0 to 512 [ 57.649064][ T4958] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.656259][ T4958] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.682191][ T4958] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.694771][ T5094] ext4 filesystem being mounted at /115/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 57.700166][ T4958] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.712259][ T4958] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.738503][ T4958] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.811269][ T4958] hsr_slave_0: entered promiscuous mode [ 57.819205][ T4958] hsr_slave_1: entered promiscuous mode [ 57.836185][ T5106] usb usb7: usbfs: process 5106 (syz.2.607) did not claim interface 0 before use [ 57.982124][ T5121] loop2: detected capacity change from 0 to 512 [ 58.025101][ T5121] ext4 filesystem being mounted at /144/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 58.066183][ T5121] Process accounting resumed [ 58.073973][ T5131] dvmrp0: entered allmulticast mode [ 58.097150][ T5121] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 58.535573][ T4958] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 58.591849][ T5162] loop2: detected capacity change from 0 to 512 [ 58.617443][ T4958] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 58.641963][ T4958] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 58.651729][ T4958] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 58.665991][ T5162] EXT4-fs (loop2): orphan cleanup on readonly fs [ 58.679524][ T5162] EXT4-fs warning (device loop2): ext4_enable_quotas:7097: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 58.714193][ T5162] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 58.717956][ T4958] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.722114][ T5162] EXT4-fs error (device loop2): ext4_ext_check_inode:524: inode #13: comm syz.2.617: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 58.731907][ T4958] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.754454][ T5162] EXT4-fs error (device loop2): ext4_orphan_get:1393: comm syz.2.617: couldn't read orphan inode 13 (err -117) [ 58.799201][ T28] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.806344][ T28] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.832382][ T4958] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 58.842782][ T4958] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 58.856833][ T4985] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.863888][ T4985] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.962417][ T5185] loop2: detected capacity change from 0 to 512 [ 58.970156][ T5186] loop4: detected capacity change from 0 to 764 [ 58.997571][ T4958] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.011591][ T5186] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 59.079933][ T5206] FAULT_INJECTION: forcing a failure. [ 59.079933][ T5206] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 59.089192][ T5185] EXT4-fs (loop2): too many log groups per flexible block group [ 59.093311][ T5206] CPU: 0 UID: 0 PID: 5206 Comm: syz.1.626 Not tainted 6.12.0-rc1-syzkaller-00257-g2f91ff27b0ee #0 [ 59.100841][ T5185] EXT4-fs (loop2): failed to initialize mballoc (-12) [ 59.111442][ T5206] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 59.111458][ T5206] Call Trace: [ 59.118510][ T5185] EXT4-fs (loop2): mount failed [ 59.128264][ T5206] [ 59.128274][ T5206] dump_stack_lvl+0xf2/0x150 [ 59.144091][ T5206] dump_stack+0x15/0x20 [ 59.148276][ T5206] should_fail_ex+0x223/0x230 [ 59.152950][ T5206] should_fail_alloc_page+0xfd/0x110 [ 59.158333][ T5206] __alloc_pages_noprof+0x109/0x360 [ 59.163534][ T5206] ___kmalloc_large_node+0x7a/0x120 [ 59.168733][ T5206] __kmalloc_large_node_noprof+0x17/0xa0 [ 59.174413][ T5206] ? proc_ioctl+0xca/0x400 [ 59.178918][ T5206] __kmalloc_noprof+0x236/0x370 [ 59.183785][ T5206] proc_ioctl+0xca/0x400 [ 59.188036][ T5206] ? usbdev_ioctl+0x1ef1/0x3e00 [ 59.193034][ T5206] usbdev_ioctl+0x1f01/0x3e00 [ 59.197792][ T5206] ? do_vfs_ioctl+0x96e/0x1530 [ 59.202553][ T5206] ? selinux_file_ioctl+0x2f7/0x380 [ 59.207840][ T5206] ? __fget_files+0x1d4/0x210 [ 59.212707][ T5206] ? __pfx_usbdev_ioctl+0x10/0x10 [ 59.217889][ T5206] __se_sys_ioctl+0xcd/0x140 [ 59.222475][ T5206] __x64_sys_ioctl+0x43/0x50 [ 59.227058][ T5206] x64_sys_call+0x15cc/0x2d60 [ 59.231815][ T5206] do_syscall_64+0xc9/0x1c0 [ 59.236340][ T5206] ? clear_bhb_loop+0x55/0xb0 [ 59.241262][ T5206] ? clear_bhb_loop+0x55/0xb0 [ 59.246010][ T5206] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 59.251929][ T5206] RIP: 0033:0x7f2186a8dff9 [ 59.256341][ T5206] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 59.276192][ T5206] RSP: 002b:00007f2185701038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 59.284599][ T5206] RAX: ffffffffffffffda RBX: 00007f2186c45f80 RCX: 00007f2186a8dff9 [ 59.292565][ T5206] RDX: 0000000020000080 RSI: 00000000c0105512 RDI: 0000000000000003 [ 59.300644][ T5206] RBP: 00007f2185701090 R08: 0000000000000000 R09: 0000000000000000 [ 59.308684][ T5206] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 59.316643][ T5206] R13: 0000000000000000 R14: 00007f2186c45f80 R15: 00007ffc04334f98 [ 59.324698][ T5206] [ 59.475820][ T5222] netlink: 'syz.1.628': attribute type 4 has an invalid length. [ 59.883390][ T40] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.922143][ T4958] veth0_vlan: entered promiscuous mode [ 59.954606][ T4958] veth1_vlan: entered promiscuous mode [ 59.993540][ T29] kauditd_printk_skb: 149 callbacks suppressed [ 59.993555][ T29] audit: type=1400 audit(1728103831.626:1832): avc: denied { lock } for pid=5253 comm="syz.4.632" path="socket:[9101]" dev="sockfs" ino=9101 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 60.036697][ T5258] loop2: detected capacity change from 0 to 512 [ 60.055666][ T40] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.064576][ T29] audit: type=1400 audit(1728103831.706:1833): avc: denied { connect } for pid=5253 comm="syz.4.632" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 60.086989][ T5258] EXT4-fs (loop2): too many log groups per flexible block group [ 60.088038][ T4958] veth0_macvtap: entered promiscuous mode [ 60.094728][ T5258] EXT4-fs (loop2): failed to initialize mballoc (-12) [ 60.102163][ T4958] veth1_macvtap: entered promiscuous mode [ 60.113773][ T29] audit: type=1400 audit(1728103831.746:1834): avc: denied { unlink } for pid=2949 comm="syslogd" name="messages.0" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 60.127862][ T5258] EXT4-fs (loop2): mount failed [ 60.137585][ T29] audit: type=1400 audit(1728103831.746:1835): avc: denied { create } for pid=5253 comm="syz.4.632" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 60.148948][ T5265] loop1: detected capacity change from 0 to 128 [ 60.160906][ T29] audit: type=1400 audit(1728103831.746:1836): avc: denied { setopt } for pid=5253 comm="syz.4.632" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 60.195427][ T40] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.207344][ T5265] ext4 filesystem being mounted at /126/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 60.243529][ T4958] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.254127][ T4958] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.263978][ T4958] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.274407][ T4958] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.284284][ T4958] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.294761][ T4958] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.304557][ T4958] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.315011][ T4958] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.324860][ T4958] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.335362][ T4958] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.349294][ T29] audit: type=1400 audit(1728103831.986:1837): avc: denied { create } for pid=5264 comm="syz.1.635" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=chr_file permissive=1 [ 60.361974][ T4958] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.369912][ T29] audit: type=1400 audit(1728103831.986:1838): avc: denied { read } for pid=5264 comm="syz.1.635" name="file0" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=chr_file permissive=1 [ 60.377170][ T5197] chnl_net:caif_netlink_parms(): no params data found [ 60.399090][ T29] audit: type=1400 audit(1728103831.986:1839): avc: denied { open } for pid=5264 comm="syz.1.635" path="/126/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=chr_file permissive=1 [ 60.450497][ T29] audit: type=1400 audit(1728103831.986:1840): avc: denied { unlink } for pid=5264 comm="syz.1.635" name="file0" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=chr_file permissive=1 [ 60.509613][ T40] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.569986][ T4958] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.580530][ T4958] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.590373][ T4958] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.600841][ T4958] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.610751][ T4958] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.621185][ T4958] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.631068][ T4958] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.641491][ T4958] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.651316][ T4958] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.661735][ T4958] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.749312][ T4958] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.787479][ T5298] loop1: detected capacity change from 0 to 2048 [ 60.838612][ T4958] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.847427][ T4958] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.856189][ T4958] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.864954][ T4958] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.896503][ T5298] loop1: p1 < > p4 [ 60.906729][ T5298] loop1: p4 size 8388608 extends beyond EOD, truncated [ 60.913280][ T5309] loop2: detected capacity change from 0 to 512 [ 60.926727][ T5197] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.933868][ T5197] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.941202][ T5197] bridge_slave_0: entered allmulticast mode [ 60.948098][ T5197] bridge_slave_0: entered promiscuous mode [ 60.985227][ T5309] ext4 filesystem being mounted at /149/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 60.986415][ T5307] netem: incorrect ge model size [ 61.000657][ T5307] netem: change failed [ 61.005313][ T5197] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.012372][ T5197] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.020855][ T5197] bridge_slave_1: entered allmulticast mode [ 61.029640][ T5197] bridge_slave_1: entered promiscuous mode [ 61.054606][ T3494] udevd[3494]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 61.075624][ T3494] udevd[3494]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 61.114061][ T40] bridge_slave_1: left allmulticast mode [ 61.120019][ T40] bridge_slave_1: left promiscuous mode [ 61.125751][ T40] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.139162][ T40] bridge_slave_0: left allmulticast mode [ 61.144900][ T40] bridge_slave_0: left promiscuous mode [ 61.150534][ T40] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.266453][ T40] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 61.276781][ T40] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 61.287266][ T40] bond0 (unregistering): Released all slaves [ 61.301188][ T5197] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.310997][ T5331] netem: incorrect ge model size [ 61.316007][ T5331] netem: change failed [ 61.327341][ T5197] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.363630][ T29] audit: type=1400 audit(1728103832.996:1841): avc: denied { mount } for pid=4958 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 61.387615][ T40] hsr_slave_0: left promiscuous mode [ 61.390529][ T5362] loop4: detected capacity change from 0 to 764 [ 61.405644][ T40] hsr_slave_1: left promiscuous mode [ 61.414730][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 61.422280][ T40] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 61.430039][ T5362] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 61.456305][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 61.463755][ T40] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 61.469578][ T5360] loop2: detected capacity change from 0 to 256 [ 61.511787][ T5373] loop0: detected capacity change from 0 to 2048 [ 61.522769][ T40] veth1_vlan: left promiscuous mode [ 61.528057][ T40] veth0_vlan: left promiscuous mode [ 61.555757][ T5373] loop0: p1 < > p4 [ 61.560443][ T5373] loop0: p4 size 8388608 extends beyond EOD, truncated [ 61.584671][ T2967] loop0: p1 < > p4 [ 61.590378][ T2967] loop0: p4 size 8388608 extends beyond EOD, truncated [ 61.634131][ T5380] loop0: detected capacity change from 0 to 512 [ 61.660485][ T3494] udevd[3494]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 61.699024][ T5380] ext4 filesystem being mounted at /2/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 61.728902][ T3257] udevd[3257]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 61.763847][ T5385] Process accounting resumed [ 61.799315][ T40] team0 (unregistering): Port device team_slave_1 removed [ 61.834727][ T40] team0 (unregistering): Port device team_slave_0 removed [ 61.939569][ T5378] netem: incorrect ge model size [ 61.944634][ T5378] netem: change failed [ 61.962254][ T5197] team0: Port device team_slave_0 added [ 61.971698][ T5197] team0: Port device team_slave_1 added [ 62.046908][ T5197] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.053977][ T5197] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.080052][ T5197] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.097216][ T5197] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.104314][ T5197] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.130322][ T5197] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.148653][ T5403] loop0: detected capacity change from 0 to 2048 [ 62.161337][ T5409] netem: incorrect ge model size [ 62.166394][ T5409] netem: change failed [ 62.188106][ T5414] devtmpfs: Unknown parameter 'uCsrquota' [ 62.217416][ T5404] netlink: 'syz.2.656': attribute type 4 has an invalid length. [ 62.272495][ T5197] hsr_slave_0: entered promiscuous mode [ 62.288130][ T5197] hsr_slave_1: entered promiscuous mode [ 62.305960][ T5430] loop2: detected capacity change from 0 to 512 [ 62.306004][ T5428] loop0: detected capacity change from 0 to 4096 [ 62.318884][ T5428] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 62.319002][ T5197] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.343470][ T5197] Cannot create hsr debugfs directory [ 62.355514][ T5428] loop0: detected capacity change from 0 to 764 [ 62.366511][ T5428] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 62.392677][ T5430] ext4 filesystem being mounted at /156/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 62.411295][ T5437] loop4: detected capacity change from 0 to 512 [ 62.440380][ T5437] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR [ 62.440417][ T5437] EXT4-fs: failed to create workqueue [ 62.455380][ T5437] EXT4-fs (loop4): mount failed [ 62.472421][ T5445] sg_write: data in/out 231/14 bytes for SCSI command 0x0-- guessing data in; [ 62.472421][ T5445] program syz.1.667 not setting count and/or reply_len properly [ 62.495017][ T5430] Process accounting resumed [ 62.512858][ T5445] loop1: detected capacity change from 0 to 512 [ 62.528433][ T5430] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 62.545289][ T5445] EXT4-fs: quotafile must be on filesystem root [ 62.575287][ T5455] SELinux: failed to load policy [ 62.653017][ T5463] loop2: detected capacity change from 0 to 764 [ 62.671506][ T5463] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 62.694490][ T5468] netem: incorrect ge model size [ 62.699524][ T5468] netem: change failed [ 62.734656][ T5474] loop0: detected capacity change from 0 to 764 [ 62.763563][ T5474] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 62.777884][ T5476] loop2: detected capacity change from 0 to 2048 [ 62.836785][ T5476] loop2: p1 < > p4 [ 62.841126][ T5476] loop2: p4 size 8388608 extends beyond EOD, truncated [ 62.876983][ T3494] udevd[3494]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 62.889951][ T5485] loop0: detected capacity change from 0 to 4096 [ 62.897149][ T3257] udevd[3257]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 62.899925][ T5485] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 62.949690][ T5197] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 62.971902][ T5485] loop0: detected capacity change from 0 to 764 [ 62.995052][ T5197] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 63.002659][ T5485] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 63.032586][ T5507] syz.2.681 (5507) used greatest stack depth: 9920 bytes left [ 63.038463][ T5197] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 63.084697][ T5197] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 63.096153][ T5516] netlink: 'syz.1.684': attribute type 4 has an invalid length. [ 63.178126][ T5197] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.191678][ T5197] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.201983][ T5531] netem: incorrect ge model size [ 63.207115][ T5531] netem: change failed [ 63.213772][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.220913][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.240007][ T5527] loop0: detected capacity change from 0 to 4096 [ 63.253843][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.260981][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.312609][ T5197] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 63.323032][ T5197] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 63.422663][ T5563] loop4: detected capacity change from 0 to 4096 [ 63.427972][ T5561] netlink: 'syz.1.696': attribute type 4 has an invalid length. [ 63.430680][ T5563] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 63.454129][ T5197] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.469912][ T5572] usb usb7: usbfs: process 5572 (syz.1.698) did not claim interface 0 before use [ 63.502648][ T5563] loop4: detected capacity change from 0 to 764 [ 63.519983][ T5563] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 63.596759][ T5592] loop4: detected capacity change from 0 to 512 [ 63.620655][ T5197] veth0_vlan: entered promiscuous mode [ 63.638427][ T5592] ext4 filesystem being mounted at /148/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 63.656621][ T5197] veth1_vlan: entered promiscuous mode [ 63.674880][ T5197] veth0_macvtap: entered promiscuous mode [ 63.686037][ T5197] veth1_macvtap: entered promiscuous mode [ 63.693209][ T5592] Process accounting resumed [ 63.702284][ T5197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.712801][ T5197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.722735][ T5197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.733267][ T5197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.743191][ T5197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.753716][ T5197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.763622][ T5197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.774088][ T5197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.783896][ T5197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.794344][ T5197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.805071][ T5592] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 63.805632][ T5197] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.825008][ T5197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.835502][ T5197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.845353][ T5197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.855884][ T5197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.865732][ T5197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.876625][ T5197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.886608][ T5197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.897046][ T5197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.906892][ T5197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.917345][ T5197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.928432][ T5197] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.951728][ T5197] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.960561][ T5197] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.969416][ T5197] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.978315][ T5197] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.988736][ T5611] netlink: 28 bytes leftover after parsing attributes in process `syz.4.704'. [ 63.997761][ T5611] netlink: 28 bytes leftover after parsing attributes in process `syz.4.704'. [ 64.057409][ T5619] loop4: detected capacity change from 0 to 512 [ 64.084108][ T5624] loop0: detected capacity change from 0 to 764 [ 64.107465][ T5629] SELinux: failed to load policy [ 64.121296][ T5627] loop1: detected capacity change from 0 to 4096 [ 64.128063][ T5627] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 64.148961][ T5624] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 64.155654][ T5627] loop1: detected capacity change from 0 to 764 [ 64.166160][ T5627] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 64.172919][ T5619] ext4 filesystem being mounted at /150/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 64.237794][ T5619] Process accounting resumed [ 64.256951][ T5639] loop2: detected capacity change from 0 to 4096 [ 64.265378][ T5640] usb usb7: usbfs: process 5640 (syz.1.715) did not claim interface 0 before use [ 64.309649][ T5619] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 64.322225][ T5650] netem: incorrect ge model size [ 64.327280][ T5650] netem: change failed [ 64.379372][ T5662] loop4: detected capacity change from 0 to 2048 [ 64.402353][ T5664] loop1: detected capacity change from 0 to 2048 [ 64.416168][ T5667] loop3: detected capacity change from 0 to 764 [ 64.428046][ T5667] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 64.446780][ T5664] loop1: p1 < > p4 [ 64.451053][ T5664] loop1: p4 size 8388608 extends beyond EOD, truncated [ 64.508794][ T5670] loop3: detected capacity change from 0 to 4096 [ 64.515920][ T5670] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 64.535950][ T5670] loop3: detected capacity change from 0 to 764 [ 64.542743][ T5670] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 64.567985][ T3494] loop4: p1 < > p4 [ 64.572340][ T3494] loop4: p4 size 8388608 extends beyond EOD, truncated [ 64.607121][ T5672] loop3: detected capacity change from 0 to 4096 [ 64.613810][ T5672] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 64.634371][ T5672] loop3: detected capacity change from 0 to 764 [ 64.640899][ T5672] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 64.664780][ T5662] loop4: p1 < > p4 [ 64.669505][ T2967] loop1: p1 < > p4 [ 64.677073][ T5662] loop4: p4 size 8388608 extends beyond EOD, truncated [ 64.684481][ T2967] loop1: p4 size 8388608 extends beyond EOD, truncated [ 64.756358][ T3259] udevd[3259]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 64.773875][ T3257] udevd[3257]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 64.786420][ T3519] udevd[3519]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 64.818389][ T3259] udevd[3259]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 64.885519][ T5683] usb usb7: usbfs: process 5683 (syz.1.730) did not claim interface 0 before use [ 64.902188][ T5687] netem: incorrect ge model size [ 64.907355][ T5687] netem: change failed [ 64.941464][ T5692] loop4: detected capacity change from 0 to 512 [ 64.953462][ T5693] loop0: detected capacity change from 0 to 512 [ 64.964953][ T5692] EXT4-fs mount: 31 callbacks suppressed [ 64.964968][ T5692] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 64.981118][ T5695] loop3: detected capacity change from 0 to 4096 [ 64.990048][ T5692] ext4 filesystem being mounted at /153/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 65.009059][ T5695] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 65.010122][ T5699] loop1: detected capacity change from 0 to 512 [ 65.029332][ T5692] Process accounting resumed [ 65.040753][ T5693] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 65.053419][ T5693] ext4 filesystem being mounted at /18/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 65.055499][ T3272] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.071312][ T5693] Process accounting resumed [ 65.076330][ T5699] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 65.090500][ T5699] ext4 filesystem being mounted at /165/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 65.090667][ T29] kauditd_printk_skb: 83 callbacks suppressed [ 65.090678][ T29] audit: type=1326 audit(1728103836.736:1925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5691 comm="syz.4.736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8e403dff9 code=0x7ffc0000 [ 65.132550][ T5693] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 65.152950][ T29] audit: type=1326 audit(1728103836.766:1926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5691 comm="syz.4.736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8e403dff9 code=0x7ffc0000 [ 65.176468][ T29] audit: type=1400 audit(1728103836.786:1927): avc: denied { write } for pid=5698 comm="syz.1.737" name="cgroup.controllers" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 65.188438][ T5712] netem: incorrect ge model size [ 65.199499][ T29] audit: type=1326 audit(1728103836.786:1928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5691 comm="syz.4.736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff8e403dff9 code=0x7ffc0000 [ 65.204353][ T5712] netem: change failed [ 65.231895][ T29] audit: type=1326 audit(1728103836.786:1929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5691 comm="syz.4.736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8e403dff9 code=0x7ffc0000 [ 65.242865][ T5714] loop2: detected capacity change from 0 to 2048 [ 65.255353][ T29] audit: type=1326 audit(1728103836.786:1930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5691 comm="syz.4.736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8e403dff9 code=0x7ffc0000 [ 65.255424][ T29] audit: type=1326 audit(1728103836.786:1931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5691 comm="syz.4.736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff8e403dff9 code=0x7ffc0000 [ 65.296648][ T5714] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 65.308440][ T29] audit: type=1326 audit(1728103836.786:1932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5691 comm="syz.4.736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8e403dff9 code=0x7ffc0000 [ 65.308466][ T29] audit: type=1326 audit(1728103836.786:1933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5691 comm="syz.4.736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8e403dff9 code=0x7ffc0000 [ 65.367213][ T29] audit: type=1326 audit(1728103836.786:1934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5691 comm="syz.4.736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff8e403dff9 code=0x7ffc0000 [ 65.393045][ T4958] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.403205][ T5692] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 65.415556][ T5714] bond_slave_0: entered promiscuous mode [ 65.421264][ T5714] bond_slave_1: entered promiscuous mode [ 65.428361][ T3266] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.440292][ T5714] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 65.454902][ T5714] bond_slave_0: left promiscuous mode [ 65.460357][ T5714] bond_slave_1: left promiscuous mode [ 65.479156][ T3267] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.542875][ T3272] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.552083][ T5723] loop0: detected capacity change from 0 to 4096 [ 65.563331][ T5723] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 65.612750][ T5740] usb usb7: usbfs: process 5740 (syz.1.752) did not claim interface 0 before use [ 65.623678][ T5723] loop0: detected capacity change from 0 to 764 [ 65.636163][ T5723] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 65.705956][ T5755] SELinux: failed to load policy [ 65.719564][ T5754] loop4: detected capacity change from 0 to 764 [ 65.734613][ T5754] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 65.753890][ T5757] loop0: detected capacity change from 0 to 2048 [ 65.796090][ T5197] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.796285][ T5757] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 65.823587][ T5768] loop1: detected capacity change from 0 to 2048 [ 65.838347][ T5767] loop4: detected capacity change from 0 to 764 [ 65.851629][ T5770] sch_tbf: burst 0 is lower than device bridge_slave_0 mtu (1514) ! [ 65.860941][ T4958] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.871022][ T5767] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 65.879774][ T5768] loop1: p1 < > p4 [ 65.891490][ T5768] loop1: p4 size 8388608 extends beyond EOD, truncated [ 65.947333][ T5780] loop1: detected capacity change from 0 to 512 [ 65.962400][ T5783] netem: incorrect ge model size [ 65.967498][ T5783] netem: change failed [ 65.991554][ T5780] EXT4-fs (loop1): too many log groups per flexible block group [ 65.999317][ T5780] EXT4-fs (loop1): failed to initialize mballoc (-12) [ 66.007290][ T5778] loop4: detected capacity change from 0 to 2048 [ 66.015741][ T5780] EXT4-fs (loop1): mount failed [ 66.033243][ T5794] netlink: 4 bytes leftover after parsing attributes in process `syz.3.776'. [ 66.056117][ T5794] hsr_slave_1 (unregistering): left promiscuous mode [ 66.086063][ T5792] loop0: detected capacity change from 0 to 4096 [ 66.095686][ T5778] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 66.113003][ T5778] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 66.118231][ T5792] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 66.136174][ T5778] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 1 with error 28 [ 66.152614][ T5778] EXT4-fs (loop4): This should not happen!! Data will be lost [ 66.152614][ T5778] [ 66.162358][ T5778] EXT4-fs (loop4): Total free blocks count 0 [ 66.168374][ T5778] EXT4-fs (loop4): Free/Dirty block details [ 66.174288][ T5778] EXT4-fs (loop4): free_blocks=2415919104 [ 66.180018][ T5778] EXT4-fs (loop4): dirty_blocks=16 [ 66.185167][ T5778] EXT4-fs (loop4): Block reservation details [ 66.191226][ T5778] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 66.203770][ T5799] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 11 with error 28 [ 66.611901][ T5829] loop4: detected capacity change from 0 to 512 [ 66.627120][ T5829] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 66.639768][ T5829] ext4 filesystem being mounted at /174/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 66.652185][ T5829] Process accounting resumed [ 66.658047][ T5829] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 66.679390][ T3267] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.887130][ T4958] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.897195][ T5854] loop4: detected capacity change from 0 to 4096 [ 66.903858][ T5854] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 66.951337][ T5854] loop4: detected capacity change from 0 to 764 [ 66.958631][ T5854] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 66.977207][ T5865] loop0: detected capacity change from 0 to 2048 [ 66.997260][ T5865] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 67.035948][ T4958] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.044910][ T5876] loop1: detected capacity change from 0 to 512 [ 67.109445][ T5876] EXT4-fs (loop1): too many log groups per flexible block group [ 67.117236][ T5876] EXT4-fs (loop1): failed to initialize mballoc (-12) [ 67.124371][ T5876] EXT4-fs (loop1): mount failed [ 67.578567][ T5901] netlink: 4 bytes leftover after parsing attributes in process `syz.4.814'. [ 67.598094][ T5901] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 67.626407][ T5901] hsr_slave_1 (unregistering): left promiscuous mode [ 68.035817][ T5904] batadv_slave_0: entered promiscuous mode [ 68.059713][ T5904] loop4: detected capacity change from 0 to 1024 [ 68.089207][ T5904] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.155986][ T5910] loop1: detected capacity change from 0 to 2048 [ 68.202040][ T5919] FAULT_INJECTION: forcing a failure. [ 68.202040][ T5919] name failslab, interval 1, probability 0, space 0, times 0 [ 68.204731][ T5910] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 68.214719][ T5919] CPU: 1 UID: 0 PID: 5919 Comm: syz.3.822 Not tainted 6.12.0-rc1-syzkaller-00257-g2f91ff27b0ee #0 [ 68.237294][ T5919] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 68.247438][ T5919] Call Trace: [ 68.250718][ T5919] [ 68.253647][ T5919] dump_stack_lvl+0xf2/0x150 [ 68.258240][ T5919] dump_stack+0x15/0x20 [ 68.262488][ T5919] should_fail_ex+0x223/0x230 [ 68.267408][ T5919] ? __kthread_create_on_node+0xce/0x230 [ 68.273051][ T5919] should_failslab+0x8f/0xb0 [ 68.277649][ T5919] __kmalloc_node_track_caller_noprof+0xa6/0x380 [ 68.284076][ T5919] kvasprintf+0x8c/0x110 [ 68.288317][ T5919] ? __kmalloc_cache_noprof+0x10b/0x2a0 [ 68.293920][ T5919] ? __pfx_rxrpc_io_thread+0x10/0x10 [ 68.299213][ T5919] __kthread_create_on_node+0xce/0x230 [ 68.304665][ T5919] ? __pfx_rxrpc_io_thread+0x10/0x10 [ 68.309962][ T5919] kthread_create_on_node+0x8a/0xc0 [ 68.315153][ T5919] ? _raw_spin_unlock_bh+0x36/0x40 [ 68.320270][ T5919] ? release_sock+0x117/0x150 [ 68.324942][ T5919] rxrpc_lookup_local+0x977/0xca0 [ 68.330095][ T5919] ? __pfx_rxrpc_encap_rcv+0x10/0x10 [ 68.335458][ T5919] ? __pfx_rxrpc_encap_err_rcv+0x10/0x10 [ 68.341199][ T5919] rxrpc_sendmsg+0x344/0x520 [ 68.345799][ T5919] ? __pfx_rxrpc_sendmsg+0x10/0x10 [ 68.350905][ T5919] __sock_sendmsg+0x140/0x180 [ 68.355576][ T5919] ____sys_sendmsg+0x312/0x410 [ 68.360357][ T5919] __sys_sendmsg+0x1d9/0x270 [ 68.364981][ T5919] __x64_sys_sendmsg+0x46/0x50 [ 68.369929][ T5919] x64_sys_call+0x2689/0x2d60 [ 68.374612][ T5919] do_syscall_64+0xc9/0x1c0 [ 68.379217][ T5919] ? clear_bhb_loop+0x55/0xb0 [ 68.383897][ T5919] ? clear_bhb_loop+0x55/0xb0 [ 68.388656][ T5919] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.394649][ T5919] RIP: 0033:0x7f4f4580dff9 [ 68.399057][ T5919] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 68.418659][ T5919] RSP: 002b:00007f4f44487038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 68.427066][ T5919] RAX: ffffffffffffffda RBX: 00007f4f459c5f80 RCX: 00007f4f4580dff9 [ 68.435042][ T5919] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000003 [ 68.443008][ T5919] RBP: 00007f4f44487090 R08: 0000000000000000 R09: 0000000000000000 [ 68.450983][ T5919] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 68.459007][ T5919] R13: 0000000000000000 R14: 00007f4f459c5f80 R15: 00007fff9c0c9ee8 [ 68.467146][ T5919] [ 68.481541][ T3266] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.526437][ T5924] loop0: detected capacity change from 0 to 4096 [ 68.534423][ T5924] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 68.558233][ T5902] batadv_slave_0: left promiscuous mode [ 68.566346][ T5936] FAULT_INJECTION: forcing a failure. [ 68.566346][ T5936] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 68.579499][ T5936] CPU: 1 UID: 0 PID: 5936 Comm: syz.3.828 Not tainted 6.12.0-rc1-syzkaller-00257-g2f91ff27b0ee #0 [ 68.590107][ T5936] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 68.600255][ T5936] Call Trace: [ 68.603561][ T5936] [ 68.606529][ T5936] dump_stack_lvl+0xf2/0x150 [ 68.611164][ T5936] dump_stack+0x15/0x20 [ 68.615341][ T5936] should_fail_ex+0x223/0x230 [ 68.620059][ T5936] should_fail+0xb/0x10 [ 68.624267][ T5936] should_fail_usercopy+0x1a/0x20 [ 68.629289][ T5936] _copy_from_user+0x1e/0xd0 [ 68.633871][ T5936] do_ipv6_setsockopt+0x1ef/0x2250 [ 68.638973][ T5936] ? kstrtoull+0x110/0x140 [ 68.643479][ T5936] ? __rcu_read_unlock+0x4e/0x70 [ 68.648482][ T5936] ? avc_has_perm_noaudit+0x1cc/0x210 [ 68.653852][ T5936] ? selinux_netlbl_socket_setsockopt+0xe5/0x2d0 [ 68.660230][ T5936] ipv6_setsockopt+0x57/0x130 [ 68.664911][ T5936] sctp_setsockopt+0x141/0xea0 [ 68.669729][ T5936] sock_common_setsockopt+0x64/0x80 [ 68.674928][ T5936] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 68.680895][ T5936] __sys_setsockopt+0x1cc/0x240 [ 68.685744][ T5936] __x64_sys_setsockopt+0x66/0x80 [ 68.690882][ T5936] x64_sys_call+0x278d/0x2d60 [ 68.695593][ T5936] do_syscall_64+0xc9/0x1c0 [ 68.700143][ T5936] ? clear_bhb_loop+0x55/0xb0 [ 68.704841][ T5936] ? clear_bhb_loop+0x55/0xb0 [ 68.709594][ T5936] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.715559][ T5936] RIP: 0033:0x7f4f4580dff9 [ 68.719964][ T5936] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 68.739636][ T5936] RSP: 002b:00007f4f44487038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 68.748110][ T5936] RAX: ffffffffffffffda RBX: 00007f4f459c5f80 RCX: 00007f4f4580dff9 [ 68.756149][ T5936] RDX: 000000000000004c RSI: 0000000000000029 RDI: 0000000000000003 [ 68.764137][ T5936] RBP: 00007f4f44487090 R08: 0000000000000004 R09: 0000000000000000 [ 68.772174][ T5936] R10: 0000000020000240 R11: 0000000000000246 R12: 0000000000000001 [ 68.780138][ T5936] R13: 0000000000000000 R14: 00007f4f459c5f80 R15: 00007fff9c0c9ee8 [ 68.788134][ T5936] [ 68.804102][ T5924] loop0: detected capacity change from 0 to 764 [ 68.810625][ T5924] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 68.872618][ T5938] loop1: detected capacity change from 0 to 764 [ 68.883436][ T5938] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 68.919587][ T5949] loop0: detected capacity change from 0 to 4096 [ 68.935371][ T5949] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 68.949182][ T3267] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.000983][ T5966] loop2: detected capacity change from 0 to 512 [ 69.021907][ T5968] netlink: 4 bytes leftover after parsing attributes in process `syz.0.839'. [ 69.039610][ T5970] loop4: detected capacity change from 0 to 2048 [ 69.053057][ T5966] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.067354][ T5966] ext4 filesystem being mounted at /176/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 69.090396][ T5973] loop1: detected capacity change from 0 to 2048 [ 69.093129][ T5970] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.109278][ T5968] hsr_slave_1 (unregistering): left promiscuous mode [ 69.126143][ T3267] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.132230][ T5982] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 69.141895][ T5973] EXT4-fs (loop1): corrupt root inode, run e2fsck [ 69.149005][ T5973] EXT4-fs (loop1): mount failed [ 69.156006][ T5985] Process accounting resumed [ 69.173037][ C0] hrtimer: interrupt took 47778 ns [ 69.197729][ T5985] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 69.251559][ T3272] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.298602][ T6001] sg_write: data in/out 231/14 bytes for SCSI command 0x0-- guessing data in; [ 69.298602][ T6001] program syz.4.852 not setting count and/or reply_len properly [ 69.303705][ T6007] SELinux: failed to load policy [ 69.319762][ T6001] loop4: detected capacity change from 0 to 512 [ 69.329640][ T6005] loop2: detected capacity change from 0 to 4096 [ 69.331277][ T6001] EXT4-fs: quotafile must be on filesystem root [ 69.341633][ T6005] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 69.373453][ T6005] loop2: detected capacity change from 0 to 764 [ 69.396130][ T6005] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 69.442545][ T6011] loop3: detected capacity change from 0 to 4096 [ 69.461456][ T6011] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.471350][ T6015] loop0: detected capacity change from 0 to 4096 [ 69.480623][ T6015] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 69.532248][ T6028] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 69.533904][ T6025] loop4: detected capacity change from 0 to 512 [ 69.542157][ T6028] FAULT_INJECTION: forcing a failure. [ 69.542157][ T6028] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 69.559422][ T6028] CPU: 0 UID: 0 PID: 6028 Comm: syz.0.863 Not tainted 6.12.0-rc1-syzkaller-00257-g2f91ff27b0ee #0 [ 69.570090][ T6028] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 69.580185][ T6028] Call Trace: [ 69.583475][ T6028] [ 69.586402][ T6028] dump_stack_lvl+0xf2/0x150 [ 69.590985][ T6028] dump_stack+0x15/0x20 [ 69.595184][ T6028] should_fail_ex+0x223/0x230 [ 69.599870][ T6028] should_fail_alloc_page+0xfd/0x110 [ 69.605323][ T6028] __alloc_pages_noprof+0x109/0x360 [ 69.610590][ T6028] alloc_pages_mpol_noprof+0xb1/0x1e0 [ 69.615991][ T6028] alloc_pages_noprof+0xe1/0x100 [ 69.620927][ T6028] pte_alloc_one+0x32/0xf0 [ 69.625352][ T6028] __pte_alloc+0x33/0x270 [ 69.629712][ T6028] handle_mm_fault+0x1b05/0x2a80 [ 69.634745][ T6028] ? mt_find+0x72a/0x890 [ 69.638989][ T6028] __get_user_pages+0xf2c/0x2670 [ 69.643930][ T6028] __gup_longterm_locked+0xa7b/0x10b0 [ 69.649432][ T6028] ? down_read_killable+0x172/0x6b0 [ 69.654674][ T6028] ? down_read+0x171/0x4b0 [ 69.659117][ T6028] pin_user_pages_remote+0x7f/0xb0 [ 69.664298][ T6028] process_vm_rw+0x4f7/0x8c0 [ 69.668897][ T6028] ? ksys_write+0x17a/0x1b0 [ 69.673491][ T6028] __x64_sys_process_vm_writev+0x7a/0x90 [ 69.679178][ T6028] x64_sys_call+0x1a4/0x2d60 [ 69.683881][ T6028] do_syscall_64+0xc9/0x1c0 [ 69.688453][ T6028] ? clear_bhb_loop+0x55/0xb0 [ 69.693165][ T6028] ? clear_bhb_loop+0x55/0xb0 [ 69.697885][ T6028] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.703774][ T6028] RIP: 0033:0x7fe27e98dff9 [ 69.708177][ T6028] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 69.727845][ T6028] RSP: 002b:00007fe27d607038 EFLAGS: 00000246 ORIG_RAX: 0000000000000137 [ 69.736249][ T6028] RAX: ffffffffffffffda RBX: 00007fe27eb45f80 RCX: 00007fe27e98dff9 [ 69.744211][ T6028] RDX: 0000000000000001 RSI: 0000000020000000 RDI: 0000000000000066 [ 69.752180][ T6028] RBP: 00007fe27d607090 R08: 000000000000023a R09: 0000000000000000 [ 69.760214][ T6028] R10: 0000000020121000 R11: 0000000000000246 R12: 0000000000000001 [ 69.768177][ T6028] R13: 0000000000000000 R14: 00007fe27eb45f80 R15: 00007ffdc79cd918 [ 69.776149][ T6028] [ 69.798047][ T6035] SELinux: failed to load policy [ 69.807121][ T6025] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.822445][ T6025] ext4 filesystem being mounted at /198/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 69.863551][ T6044] loop2: detected capacity change from 0 to 4096 [ 69.870307][ T6044] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 69.890566][ T6044] loop2: detected capacity change from 0 to 764 [ 69.897351][ T6044] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 69.929065][ T6051] sg_write: data in/out 231/14 bytes for SCSI command 0x0-- guessing data in; [ 69.929065][ T6051] program syz.0.872 not setting count and/or reply_len properly [ 69.953835][ T6022] Process accounting resumed [ 69.972861][ T6051] loop0: detected capacity change from 0 to 512 [ 69.980793][ T6051] EXT4-fs: quotafile must be on filesystem root [ 69.980949][ T6053] loop2: detected capacity change from 0 to 4096 [ 69.991171][ T3267] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.997076][ T6053] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 70.023865][ T6055] loop1: detected capacity change from 0 to 2048 [ 70.069638][ T6055] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.069830][ T6053] loop2: detected capacity change from 0 to 764 [ 70.088149][ T6061] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 70.088660][ T6053] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 70.109548][ T6061] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 70.131384][ T29] kauditd_printk_skb: 226 callbacks suppressed [ 70.131398][ T29] audit: type=1400 audit(1728103841.766:2161): avc: denied { mounton } for pid=6059 comm="syz.4.876" path="/200/file0" dev="tmpfs" ino=1121 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 70.152266][ T3266] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.238689][ T5197] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.239897][ T6084] loop2: detected capacity change from 0 to 764 [ 70.258260][ T6084] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 70.291917][ T6089] loop0: detected capacity change from 0 to 128 [ 70.312182][ T6093] netem: incorrect ge model size [ 70.314629][ T6089] ext4: Unknown parameter 'euid' [ 70.317271][ T6093] netem: change failed [ 70.408840][ T6104] loop3: detected capacity change from 0 to 2048 [ 70.447603][ T6104] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.507956][ T6115] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 70.513631][ T5197] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.529041][ T29] audit: type=1400 audit(1728103842.166:2162): avc: denied { watch } for pid=6076 comm="syz.1.884" path="/192" dev="tmpfs" ino=1051 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 70.529711][ T6112] loop0: detected capacity change from 0 to 4096 [ 70.586372][ T6119] loop3: detected capacity change from 0 to 764 [ 70.601758][ T6112] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.622014][ T6119] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 70.666002][ T6129] FAULT_INJECTION: forcing a failure. [ 70.666002][ T6129] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 70.666026][ T6129] CPU: 0 UID: 0 PID: 6129 Comm: syz.2.903 Not tainted 6.12.0-rc1-syzkaller-00257-g2f91ff27b0ee #0 [ 70.666050][ T6129] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 70.682833][ T6128] loop3: detected capacity change from 0 to 512 [ 70.689724][ T6129] Call Trace: [ 70.689734][ T6129] [ 70.689742][ T6129] dump_stack_lvl+0xf2/0x150 [ 70.689765][ T6129] dump_stack+0x15/0x20 [ 70.717043][ T29] audit: type=1326 audit(1728103842.356:2163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6125 comm="syz.1.905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2186a8dff9 code=0x7ffc0000 [ 70.720889][ T6129] should_fail_ex+0x223/0x230 [ 70.748900][ T6129] should_fail+0xb/0x10 [ 70.748928][ T6129] should_fail_usercopy+0x1a/0x20 [ 70.748955][ T6129] _copy_from_user+0x1e/0xd0 [ 70.748998][ T6129] ____sys_sendmsg+0x1a4/0x410 [ 70.749031][ T6129] __sys_sendmmsg+0x259/0x500 [ 70.749085][ T6129] __x64_sys_sendmmsg+0x57/0x70 [ 70.749112][ T6129] x64_sys_call+0xa49/0x2d60 [ 70.749134][ T6129] do_syscall_64+0xc9/0x1c0 [ 70.749151][ T6129] ? clear_bhb_loop+0x55/0xb0 [ 70.749283][ T6129] ? clear_bhb_loop+0x55/0xb0 [ 70.749310][ T6129] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 70.749335][ T6129] RIP: 0033:0x7f769f2cdff9 [ 70.749348][ T6129] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 70.749366][ T6129] RSP: 002b:00007f769df26038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 70.749451][ T6129] RAX: ffffffffffffffda RBX: 00007f769f486058 RCX: 00007f769f2cdff9 [ 70.749464][ T6129] RDX: 0000000000000001 RSI: 0000000020000bc0 RDI: 0000000000000006 [ 70.749476][ T6129] RBP: 00007f769df26090 R08: 0000000000000000 R09: 0000000000000000 [ 70.749488][ T6129] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 70.749501][ T6129] R13: 0000000000000001 R14: 00007f769f486058 R15: 00007ffc830a4838 [ 70.749534][ T6129] [ 70.751616][ T29] audit: type=1326 audit(1728103842.356:2164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6125 comm="syz.1.905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=74 compat=0 ip=0x7f2186a8dff9 code=0x7ffc0000 [ 70.751664][ T29] audit: type=1326 audit(1728103842.356:2165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6125 comm="syz.1.905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2186a8dff9 code=0x7ffc0000 [ 70.751685][ T29] audit: type=1326 audit(1728103842.356:2166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6125 comm="syz.1.905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f2186a8dff9 code=0x7ffc0000 [ 70.751745][ T29] audit: type=1326 audit(1728103842.356:2167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6125 comm="syz.1.905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2186a8dff9 code=0x7ffc0000 [ 70.751769][ T29] audit: type=1326 audit(1728103842.356:2168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6125 comm="syz.1.905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2186a8dff9 code=0x7ffc0000 [ 70.751793][ T29] audit: type=1326 audit(1728103842.356:2169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6125 comm="syz.1.905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2186a8dff9 code=0x7ffc0000 [ 70.751819][ T29] audit: type=1326 audit(1728103842.356:2170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6125 comm="syz.1.905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f2186a8dff9 code=0x7ffc0000 [ 71.048164][ T6128] EXT4-fs (loop3): too many log groups per flexible block group [ 71.048227][ T6128] EXT4-fs (loop3): failed to initialize mballoc (-12) [ 71.062738][ T6128] EXT4-fs (loop3): mount failed [ 71.171889][ T6146] SELinux: failed to load policy [ 71.216540][ T6150] loop1: detected capacity change from 0 to 4096 [ 71.226035][ T6150] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 71.416698][ T4958] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.427360][ T6156] loop1: detected capacity change from 0 to 764 [ 71.442155][ T6156] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 71.638773][ T6164] loop1: detected capacity change from 0 to 2048 [ 71.681932][ T6164] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.723812][ T6179] loop2: detected capacity change from 0 to 4096 [ 71.736906][ T6177] loop3: detected capacity change from 0 to 4096 [ 71.743621][ T6177] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 71.748710][ T6181] loop0: detected capacity change from 0 to 2048 [ 71.761899][ T6177] loop3: detected capacity change from 0 to 764 [ 71.768803][ T6179] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.779726][ T6177] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 71.796954][ T6181] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.806385][ T3266] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.825863][ T6186] loop3: detected capacity change from 0 to 512 [ 71.888577][ T6186] EXT4-fs (loop3): too many log groups per flexible block group [ 71.896325][ T6186] EXT4-fs (loop3): failed to initialize mballoc (-12) [ 71.903272][ T6186] EXT4-fs (loop3): mount failed [ 71.914075][ T6196] loop1: detected capacity change from 0 to 764 [ 71.926784][ T6196] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 72.020269][ T6200] loop1: detected capacity change from 0 to 512 [ 72.043622][ T28] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 72.047089][ T6200] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.059847][ T28] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 72.070731][ T6200] ext4 filesystem being mounted at /207/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 72.083148][ T28] EXT4-fs (loop0): This should not happen!! Data will be lost [ 72.083148][ T28] [ 72.083164][ T28] EXT4-fs (loop0): Total free blocks count 0 [ 72.083174][ T28] EXT4-fs (loop0): Free/Dirty block details [ 72.083184][ T28] EXT4-fs (loop0): free_blocks=66060288 [ 72.098550][ T6200] Process accounting resumed [ 72.103651][ T28] EXT4-fs (loop0): dirty_blocks=8192 [ 72.131480][ T28] EXT4-fs (loop0): Block reservation details [ 72.137522][ T28] EXT4-fs (loop0): i_reserved_data_blocks=512 [ 72.166982][ T28] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 72.462223][ T6200] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 72.486900][ T3266] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.543373][ T3272] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.602378][ T6221] loop0: detected capacity change from 0 to 2048 [ 72.607530][ T6229] netem: incorrect ge model size [ 72.613709][ T6229] netem: change failed [ 72.646473][ T6221] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.698655][ T4958] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.719026][ T6246] SELinux: failed to load policy [ 72.739924][ T6250] syz.2.950[6250] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 72.739984][ T6250] syz.2.950[6250] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 72.786076][ T6250] syz.2.950[6250] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 72.796386][ T6261] netem: incorrect ge model size [ 72.813611][ T6261] netem: change failed [ 72.818959][ T6260] SELinux: Context Ü is not valid (left unmapped). [ 72.847568][ T6264] loop1: detected capacity change from 0 to 2048 [ 72.879808][ T6264] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.903139][ T6273] loop2: detected capacity change from 0 to 512 [ 72.920635][ T3266] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.942735][ T6273] EXT4-fs (loop2): too many log groups per flexible block group [ 72.950484][ T6273] EXT4-fs (loop2): failed to initialize mballoc (-12) [ 72.969539][ T6273] EXT4-fs (loop2): mount failed [ 72.985047][ T6285] SELinux: failed to load policy [ 73.038924][ T6293] netem: incorrect ge model size [ 73.043901][ T6293] netem: change failed [ 73.132723][ T6302] netlink: 'syz.3.972': attribute type 21 has an invalid length. [ 73.141273][ T6302] netlink: 132 bytes leftover after parsing attributes in process `syz.3.972'. [ 73.258096][ T6308] loop1: detected capacity change from 0 to 2048 [ 73.301254][ T6314] FAULT_INJECTION: forcing a failure. [ 73.301254][ T6314] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 73.314455][ T6314] CPU: 0 UID: 0 PID: 6314 Comm: syz.0.975 Not tainted 6.12.0-rc1-syzkaller-00257-g2f91ff27b0ee #0 [ 73.325051][ T6314] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 73.335104][ T6314] Call Trace: [ 73.338381][ T6314] [ 73.341303][ T6314] dump_stack_lvl+0xf2/0x150 [ 73.345900][ T6314] dump_stack+0x15/0x20 [ 73.350069][ T6314] should_fail_ex+0x223/0x230 [ 73.354852][ T6314] should_fail+0xb/0x10 [ 73.359022][ T6314] should_fail_usercopy+0x1a/0x20 [ 73.364110][ T6314] _copy_from_iter+0xd3/0xd20 [ 73.368796][ T6314] ? alloc_pages_mpol_noprof+0xd5/0x1e0 [ 73.374350][ T6314] copy_page_from_iter+0x14f/0x280 [ 73.379540][ T6314] tun_get_user+0x686/0x24e0 [ 73.384225][ T6314] ? kstrtoull+0x110/0x140 [ 73.388643][ T6314] ? ref_tracker_alloc+0x1f5/0x2f0 [ 73.393766][ T6314] tun_chr_write_iter+0x188/0x240 [ 73.398801][ T6314] vfs_write+0x76a/0x910 [ 73.403056][ T6314] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 73.408607][ T6314] ksys_write+0xeb/0x1b0 [ 73.412849][ T6314] __x64_sys_write+0x42/0x50 [ 73.417448][ T6314] x64_sys_call+0x27dd/0x2d60 [ 73.422136][ T6314] do_syscall_64+0xc9/0x1c0 [ 73.426695][ T6314] ? clear_bhb_loop+0x55/0xb0 [ 73.431381][ T6314] ? clear_bhb_loop+0x55/0xb0 [ 73.436057][ T6314] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 73.441979][ T6314] RIP: 0033:0x7fe27e98cadf [ 73.446412][ T6314] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8d 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 1c 8e 02 00 48 [ 73.466022][ T6314] RSP: 002b:00007fe27d607000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 73.474601][ T6314] RAX: ffffffffffffffda RBX: 00007fe27eb45f80 RCX: 00007fe27e98cadf [ 73.482665][ T6314] RDX: 0000000000000422 RSI: 00000000200011c0 RDI: 00000000000000c8 [ 73.490861][ T6314] RBP: 00007fe27d607090 R08: 0000000000000000 R09: 0000000000000000 [ 73.498881][ T6314] R10: 0000000000000422 R11: 0000000000000293 R12: 0000000000000001 [ 73.507084][ T6314] R13: 0000000000000000 R14: 00007fe27eb45f80 R15: 00007ffdc79cd918 [ 73.515184][ T6314] [ 73.578086][ T6313] sd 0:0:1:0: device reset [ 73.588727][ T6308] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.648987][ T6322] loop3: detected capacity change from 0 to 4096 [ 73.655663][ T6322] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 73.685626][ T6327] SELinux: failed to load policy [ 73.728859][ T3266] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.807722][ T6344] sg_write: data in/out 231/14 bytes for SCSI command 0x0-- guessing data in; [ 73.807722][ T6344] program syz.3.986 not setting count and/or reply_len properly [ 73.835067][ T6344] loop3: detected capacity change from 0 to 512 [ 73.874304][ T6344] EXT4-fs: quotafile must be on filesystem root [ 73.920249][ T6356] loop2: detected capacity change from 0 to 2048 [ 73.956475][ T6364] SELinux: failed to load policy [ 73.985834][ T50] ================================================================== [ 73.992552][ T6358] loop0: detected capacity change from 0 to 4096 [ 73.993934][ T50] BUG: KCSAN: data-race in atime_needs_update / touch_atime [ 73.993959][ T50] [ 73.993964][ T50] write to 0xffff8881158f7828 of 4 bytes by task 28 on cpu 1: [ 73.993979][ T50] touch_atime+0x1f3/0x350 [ 73.993999][ T50] shmem_file_read_iter+0x4aa/0x550 [ 73.994017][ T50] do_iter_readv_writev+0x394/0x450 [ 74.001019][ T6358] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 74.007592][ T50] vfs_iter_read+0x171/0x3b0 [ 74.007626][ T50] loop_process_work+0x79a/0x1220 [ 74.022774][ T6358] loop0: detected capacity change from 0 to 764 [ 74.026955][ T50] loop_workfn+0x31/0x40 [ 74.026988][ T50] process_scheduled_works+0x483/0x9a0 [ 74.032427][ T6358] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 74.040819][ T50] worker_thread+0x51d/0x6f0 [ 74.040843][ T50] kthread+0x1d1/0x210 [ 74.040859][ T50] ret_from_fork+0x4b/0x60 [ 74.040878][ T50] ret_from_fork_asm+0x1a/0x30 [ 74.040900][ T50] [ 74.040905][ T50] read to 0xffff8881158f7828 of 4 bytes by task 50 on cpu 0: [ 74.040919][ T50] atime_needs_update+0x261/0x3e0 [ 74.040938][ T50] touch_atime+0x4a/0x350 [ 74.111792][ T50] shmem_file_read_iter+0x4aa/0x550 [ 74.117002][ T50] do_iter_readv_writev+0x394/0x450 [ 74.122199][ T50] vfs_iter_read+0x171/0x3b0 [ 74.126783][ T50] loop_process_work+0x79a/0x1220 [ 74.131803][ T50] loop_rootcg_workfn+0x22/0x30 [ 74.136659][ T50] process_scheduled_works+0x483/0x9a0 [ 74.142114][ T50] worker_thread+0x51d/0x6f0 [ 74.146721][ T50] kthread+0x1d1/0x210 [ 74.150776][ T50] ret_from_fork+0x4b/0x60 [ 74.155202][ T50] ret_from_fork_asm+0x1a/0x30 [ 74.159958][ T50] [ 74.162264][ T50] value changed: 0x24bd2e66 -> 0x2555c4e6 [ 74.167959][ T50] [ 74.170264][ T50] Reported by Kernel Concurrency Sanitizer on: [ 74.176395][ T50] CPU: 0 UID: 0 PID: 50 Comm: kworker/u8:3 Not tainted 6.12.0-rc1-syzkaller-00257-g2f91ff27b0ee #0 [ 74.187054][ T50] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 74.197132][ T50] Workqueue: loop2 loop_rootcg_workfn [ 74.202509][ T50] ================================================================== [ 74.236449][ T6356] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.264694][ T3272] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.