last executing test programs: 30.607151531s ago: executing program 4 (id=39): syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$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") r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./bus\x00', 0x1c5902, 0x2d) write(r2, &(0x7f0000004200)='t', 0x1) sendfile(r2, r1, 0x0, 0x7ffff000) fallocate(r0, 0x0, 0x0, 0x1001f0) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$nci(r3, &(0x7f0000000140)=ANY=[@ANYBLOB="414601", @ANYRES32], 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) close(0xffffffffffffffff) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{r4}, &(0x7f0000000080), &(0x7f00000006c0)='%-010d \x00'}, 0x20) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x1000c16, &(0x7f0000000500), 0xff, 0x260, &(0x7f0000000980)="$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") fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 30.271884377s ago: executing program 4 (id=44): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x10000}, 0x18) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='trans=fd', @ANYRESHEX]) 30.174661758s ago: executing program 4 (id=49): memfd_create(&(0x7f0000000a80)='\x00\xc76\xbe\x91\x8d\x182)!\x9a%\xd9\x19\x17\xb0\xed|\xb3\xc2\x017h\xe9kL\xa2\xd28\xd6\x06\a\x0e\xfc\xfe\x12\x8f&\x13\xae%@T\xa3\xb0>\\\xec\xa9\xf9Q@6A\x10\x8cn|\x00\x00\x00\x00\x00\x00\x00\x00\xeb0\xdd\xe8\x87\x05=\xfb\x8b$\xdcQ\xee\xc5\x1f\x8bQ\xf7fo\"i\xa1hk\x1d\xf5z\xc1\x7f\xa4\\]\xc4\xbe3\xf9\xa8\t?:\xd8\xda\x84\xeepI[\x1c\x00\x00\x00\x00\xf9v\x00\x00\x00\x00\x00T\xb6\xbe\x0f~\xc0\x92\xe9O{\xa8\x81(\x01\x14\xfc\x83\xf9\xfb\x05\x94Tr@Lq]\xf9\x15zj\x87\xc4\x8e\xe8/\xb9-&R\x8e\xb2\xb3bBx\x1e1\x18\x8f2\xf7]#\x00\xa3\xee\xcb\xaf\xb3\xe3\'}\x18\xe8O\xa8#K\xb6\xe4R$\xaa\x00U\x92\xd2\x99\xb80xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) mount$nfs4(&(0x7f0000000040)='/', &(0x7f0000000080)='./file0\x00', 0x0, 0x197841, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 29.909187102s ago: executing program 4 (id=55): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3ff, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000080200000e"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7030000ec000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r3}, 0x18) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, &(0x7f00000000c0)={0x80, 0x6, 0x2fe, 0x4, 0x0, 0x3, 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000a00)={'ip_vti0\x00', &(0x7f0000000840)={'syztnl0\x00', 0x0, 0x8, 0x10, 0xb97, 0x0, {{0x1f, 0x4, 0x2, 0xa, 0x7c, 0x68, 0x0, 0x7, 0x2f, 0x0, @rand_addr=0x64010101, @broadcast, {[@timestamp_addr={0x44, 0x1c, 0x86, 0x1, 0x7, [{@rand_addr=0x64010101, 0x6}, {@loopback, 0xc13c}, {@local}]}, @timestamp={0x44, 0x10, 0xf4, 0x0, 0x6, [0x1, 0x7, 0x5]}, @timestamp={0x44, 0x20, 0x93, 0x0, 0x5, [0x0, 0x100, 0x9, 0x11, 0x3, 0x7, 0x9]}, @timestamp_prespec={0x44, 0x1c, 0xf4, 0x3, 0x9, [{@remote, 0x8}, {@dev={0xac, 0x14, 0x14, 0x18}, 0x5}, {@private=0xa010101, 0x29}]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000a40)={'vcan0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000a80)={'vcan0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000ac0)={'team0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000080000000300000000000000", @ANYRES32, @ANYBLOB='\x00'/15, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r8 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000000200)) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0x58, 0x24, 0xd0f, 0x3, 0x0, {0x60, 0x0, 0x0, r9, {0x0, 0x2}, {0xffff, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x10, 0x3, 0x1, 0x3, 0x400, 0x8}, [@TCA_NETEM_DELAY_DIST={0x6, 0x2, "9f2b"}, @TCA_NETEM_LOSS={0xfffffffffffffe4d}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40001d4}, 0x8840) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000b80)={'team0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000d00)={'xfrm0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000001440)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001400)={&(0x7f0000000d40)={0x684, 0x0, 0x100, 0x70bd25, 0x25dfdbfc, {}, [{{0x8}, {0x138, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1151}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x48bb, 0x8, 0xe6, 0x2}, {0x2, 0x8, 0x10, 0x8}]}}}]}}, {{0x8}, {0x14c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xb6}}}, {0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x200, 0x6, 0x2, 0x1}, {0x5, 0x87, 0x6, 0x62ec}, {0x1, 0xc5, 0x3e}, {0xa, 0x4, 0x3}, {0xab, 0x5, 0x3, 0x4}]}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r4}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r6}}}]}}, {{0x8, 0x1, r7}, {0xf8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}]}}, {{0x8, 0x1, r10}, {0x110, 0x2, 0x0, 0x1, [{0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0xacce, 0xff, 0xb, 0x7}, {0xeac, 0x8, 0x97, 0x823}, {0x40, 0x4, 0x5, 0x4}, {0x81, 0x1, 0xfb, 0x8}]}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x101}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xac83}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffff7}}, {0x8}}}]}}, {{0x8}, {0xbc, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x10000}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffffc}}, {0x8, 0x6, r11}}}]}}]}, 0x684}, 0x1, 0x0, 0x0, 0x280c0}, 0x40000) 29.462880589s ago: executing program 4 (id=64): unshare(0x62040200) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000020000040000000100000000"], 0x1c}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x2, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000280)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x7ff, @empty, 0x1}, {0xa, 0x4e20, 0x1ff, @dev={0xfe, 0x80, '\x00', 0x2f}, 0x9}, r2, 0xb}}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="0500000004000000080000000b"], 0x48) r4 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r3}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000001811", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32, @ANYRESDEC=r4], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000208500000004"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x36, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{r6, 0xffffffffffffffff}, &(0x7f0000000600), &(0x7f00000001c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000d6e3a87a0600dbff17110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000680)='flush_foreign\x00', r5, 0x0, 0x4}, 0x18) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='inet_sock_set_state\x00', r8}, 0x18) ioctl$TIOCMIWAIT(0xffffffffffffffff, 0x545c, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000700000000000000000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r9 = mq_open(&(0x7f0000000380)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\x01\x00\x00\x00a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\x00\x17\xc0\xa3\xd5\xf9\xaa\x98/\xa4v\xe4)I\xf3+[e\x95\x89\x99\xca\x8e\xc5\xd3\\T\xf0\x1a|5\xfff\xff\x99\xa4\xbb\x9e#oR\xa4\xf1\xba\x04c\xb3-\xf7R\xb85\xb5\xdb\xe9?\xfa/\xdf\xb4R\xbfx=\v_j\x8e\xb0\'\xf4\xe5\xff!\xe1\xbf\x82e\xb1\x9b\x8d\xf3L\t\xd21\x9cbwV\xc8\xcc\xe4\x96M_w\xbc\xdf9\b\r\xf6\x95\xae\xb5,\x92\x8c\xc0DQm\x80\xd1w\xa2\x1a\x12Z\xe5\xf4H\xf7D\n\x96J\x93\xfb\xf0$\x9f\xf7\xa2\xae$O\xa3\xb6\xf5\x98\xd3\v\x00\x86\xa5\x8b\x81\x04\xaf\x03s\xe5\x86>\x0e\xa6\xe6\x1aV\x17\x8b\xed\xa7\'\xd0\r_\xe8,XVR\x13\xe5%\xb9\x88\xb8W@D\'\x17A\xc8\x80\x02J\xd4V\x00wH(\xc5v\f\xc9\xb6\xdf..$\xe6P(_\xf1\'\xc1:\xa3\xcb\xd9\xd1\xc7\x13\x99Md\x1dc\xf1\'j\x03!\x13\xd1\xb8\xbf\xe6\xb2M\b/\rp\xa5\x00\x00\x00\x00', 0x40, 0x0, 0x0) fcntl$setlease(r9, 0x400, 0x0) socket$nl_route(0x10, 0x3, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f0000000380)={0x1, 0x10, 0xfa00, {0x0, r2}}, 0x18) 29.450039979s ago: executing program 32 (id=64): unshare(0x62040200) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000020000040000000100000000"], 0x1c}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x2, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000280)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x7ff, @empty, 0x1}, {0xa, 0x4e20, 0x1ff, @dev={0xfe, 0x80, '\x00', 0x2f}, 0x9}, r2, 0xb}}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="0500000004000000080000000b"], 0x48) r4 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r3}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000001811", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32, @ANYRESDEC=r4], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000208500000004"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x36, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{r6, 0xffffffffffffffff}, &(0x7f0000000600), &(0x7f00000001c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000d6e3a87a0600dbff17110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000680)='flush_foreign\x00', r5, 0x0, 0x4}, 0x18) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='inet_sock_set_state\x00', r8}, 0x18) ioctl$TIOCMIWAIT(0xffffffffffffffff, 0x545c, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000700000000000000000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r9 = mq_open(&(0x7f0000000380)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\x01\x00\x00\x00a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\x00\x17\xc0\xa3\xd5\xf9\xaa\x98/\xa4v\xe4)I\xf3+[e\x95\x89\x99\xca\x8e\xc5\xd3\\T\xf0\x1a|5\xfff\xff\x99\xa4\xbb\x9e#oR\xa4\xf1\xba\x04c\xb3-\xf7R\xb85\xb5\xdb\xe9?\xfa/\xdf\xb4R\xbfx=\v_j\x8e\xb0\'\xf4\xe5\xff!\xe1\xbf\x82e\xb1\x9b\x8d\xf3L\t\xd21\x9cbwV\xc8\xcc\xe4\x96M_w\xbc\xdf9\b\r\xf6\x95\xae\xb5,\x92\x8c\xc0DQm\x80\xd1w\xa2\x1a\x12Z\xe5\xf4H\xf7D\n\x96J\x93\xfb\xf0$\x9f\xf7\xa2\xae$O\xa3\xb6\xf5\x98\xd3\v\x00\x86\xa5\x8b\x81\x04\xaf\x03s\xe5\x86>\x0e\xa6\xe6\x1aV\x17\x8b\xed\xa7\'\xd0\r_\xe8,XVR\x13\xe5%\xb9\x88\xb8W@D\'\x17A\xc8\x80\x02J\xd4V\x00wH(\xc5v\f\xc9\xb6\xdf..$\xe6P(_\xf1\'\xc1:\xa3\xcb\xd9\xd1\xc7\x13\x99Md\x1dc\xf1\'j\x03!\x13\xd1\xb8\xbf\xe6\xb2M\b/\rp\xa5\x00\x00\x00\x00', 0x40, 0x0, 0x0) fcntl$setlease(r9, 0x400, 0x0) socket$nl_route(0x10, 0x3, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f0000000380)={0x1, 0x10, 0xfa00, {0x0, r2}}, 0x18) 1.946845239s ago: executing program 1 (id=705): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000010000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x5e27, 0x0, @mcast1}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=[{0xc, 0x29, 0x34}], 0xc}, 0x0) 1.91846406s ago: executing program 1 (id=708): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="02000000040000000400000001"], 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r1], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x6) 1.843140401s ago: executing program 1 (id=711): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_NET_NS_PID={0x8}]}, 0x28}}, 0x0) (fail_nth: 4) 1.708567513s ago: executing program 1 (id=714): r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./bus\x00', 0x1c5902, 0x2d) write(r2, &(0x7f0000004200)='t', 0x1) sendfile(r2, r1, 0x0, 0x7ffff000) fallocate(r0, 0x0, 0x0, 0x1001f0) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$nci(r3, &(0x7f0000000140)=ANY=[@ANYBLOB="414601"], 0x4) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) close(0xffffffffffffffff) socket$nl_xfrm(0x10, 0x3, 0x6) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{r5}, &(0x7f0000000080), &(0x7f00000006c0)='%-010d \x00'}, 0x20) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x1000c16, &(0x7f0000000500), 0xff, 0x260, &(0x7f0000000980)="$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") fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r4, 0x0, 0x80000000}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 1.640523364s ago: executing program 5 (id=716): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000a50000002a00000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030007e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000400)='kfree\x00'}, 0x10) request_key(&(0x7f0000000000)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1, 0xc}, &(0x7f0000001fee)='R\x10rust\xe3c*sgrVex:Di', 0x0) 1.519432896s ago: executing program 5 (id=719): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x1c1341, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr=0x64010101, @local}, @time_exceeded={0x80, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @loopback}}}}}}, 0x0) 1.469601937s ago: executing program 5 (id=723): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x9, 0x4, 0x7ffc0002}]}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYBLOB, @ANYRES32=0x0], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setrlimit(0x40000000000008, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = inotify_init() r1 = inotify_add_watch(r0, &(0x7f0000000200)='.\x00', 0x82000714) inotify_rm_watch(r0, r1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r4, 0x1, 0x70bd2b, 0x25dfdbfc}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x10000) sendmsg$TIPC_CMD_SET_NODE_ADDR(r3, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x80011}, 0x404c8c4) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0x20, &(0x7f0000000080)={@in={{0x2, 0x0, @remote}}, 0x3, 0x0, 0x1a, 0x0, "5e3b86774ef89ec669fabcaff49c2eeb8c4614c85b196a0c67a7768e058e3008931c08d43101cb8242bc42b8e0662749302c1ffcd1d1190000000000000000000000000000000000000000000200"}, 0xd8) sendto$inet(r2, 0x0, 0x0, 0x24000087, &(0x7f0000000180)={0x2, 0x4e23, @remote}, 0x10) r5 = fsmount(0xffffffffffffffff, 0x0, 0x20) openat(r5, &(0x7f00000000c0)='./file1\x00', 0x20800, 0x52abe154ad664fa4) getsockopt(0xffffffffffffffff, 0x9, 0xba, &(0x7f0000000180)=""/36, &(0x7f00000001c0)=0x24) 1.385428328s ago: executing program 0 (id=726): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={0xffffffffffffffff, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000007d, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) io_setup(0xb2, &(0x7f0000000200)=0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = syz_io_uring_setup(0x3edf, &(0x7f00000001c0)={0x0, 0x0, 0x100, 0x10, 0x0, 0x0, 0x0}, &(0x7f0000002000), &(0x7f0000ffd000)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r2, 0x3, 0x0, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x101002) io_submit(0x0, 0x0, 0x0) preadv(r3, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000380)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000000a40)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x441, 0x20) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) truncate(&(0x7f0000000900)='./file1\x00', 0x3000000) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYRES16=r1], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0xce56fe61a68fc369, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) fallocate(r4, 0x8, 0x4000, 0x4000) ppoll(&(0x7f0000000180)=[{r0}], 0x1, 0x0, 0x0, 0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) shutdown(r0, 0x0) 1.371591768s ago: executing program 1 (id=727): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb0100180000000000000010000000100000000200a728dcc600000000000100006d00000000000300"], 0x0, 0x2a, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, @void, @value}, 0x94) r1 = gettid() r2 = socket$l2tp(0x2, 0x2, 0x73) read(r2, &(0x7f0000000000)=""/78, 0x4e) tkill(r1, 0x7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f00000002c0)='rpm_return_int\x00', r0}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000380)='rpm_return_int\x00', r0}, 0x18) syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) pipe(&(0x7f00000001c0)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) syz_emit_ethernet(0x32, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x1d, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000780)={[{@bsdgroups}, {@nodiscard}, {@oldalloc}, {@grpjquota}, {@nobarrier}, {@noquota}, {@abort}, {@nodiscard}, {@nodiscard}]}, 0x64, 0x50d, &(0x7f0000000200)="$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") mknodat$loop(0xffffffffffffff9c, 0x0, 0x4000, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000c, @void, @value}, 0x94) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00012abd7000ffdbdf25080000000c000380010000000000000014000380081003000000000008000200f5ffffff"], 0x34}, 0x1, 0x0, 0x0, 0x44890}, 0x40000) 1.314568179s ago: executing program 2 (id=732): r0 = socket(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) connect$netlink(r0, &(0x7f0000000300)=@proc={0x10, 0x0, 0x25dfdffc}, 0xc) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r3, 0x0, 0x0, 0x2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000400008500000001000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000080)='signal_generate\x00', r1, 0x0, 0x3}, 0x18) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) sendmsg$nl_route_sched(r0, 0x0, 0x0) 1.259506s ago: executing program 2 (id=734): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x50}}, 0x4820) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000000000), 0x4) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000012c0)=ANY=[@ANYBLOB="1b00000000000000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="0000000000000000b7020000111e6ca5b703000000000000850000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x1008017, &(0x7f00000000c0)=ANY=[], 0x4, 0x7d8, &(0x7f0000000a80)="$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") open(&(0x7f00000001c0)='./file1\x00', 0x14923e, 0x60) setsockopt$MRT_ADD_MFC_PROXY(r1, 0x0, 0xd2, &(0x7f0000000280)={@broadcast, @empty, 0x3, "614af285791a63abd0f993af8000b7cd01e03d64a831681cdc3fd440829c82ae", 0x2, 0xfffffff9}, 0x3c) setsockopt$MRT_FLUSH(r1, 0x0, 0xd4, &(0x7f0000000780)=0x2, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000240)='kfree\x00'}, 0x18) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020e0000150000000000000000000000030005000000000002004e24ac1e00010000000000000000030006003c000000020000fc34000000000000000000000001001800000000000800120000000200fcffffff0000000006003300000000000000000000000000fe8000000000000000000000000000aa00000000000000000000000000000000040003"], 0xa8}}, 0x0) 1.200939741s ago: executing program 2 (id=737): r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./bus\x00', 0x1c5902, 0x2d) write(r2, &(0x7f0000004200)='t', 0x1) sendfile(r2, r1, 0x0, 0x7ffff000) fallocate(r0, 0x0, 0x0, 0x1001f0) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$nci(r3, &(0x7f0000000140)=ANY=[@ANYBLOB="414601"], 0x4) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) close(0xffffffffffffffff) socket$nl_xfrm(0x10, 0x3, 0x6) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{r5}, &(0x7f0000000080), &(0x7f00000006c0)='%-010d \x00'}, 0x20) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x1000c16, &(0x7f0000000500), 0xff, 0x260, &(0x7f0000000980)="$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") fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r4, 0x0, 0x80000000}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 803.349187ms ago: executing program 3 (id=749): symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, 0x0}, &(0x7f0000000100)=0xc) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = creat(&(0x7f0000000140)='./file0\x00', 0x28) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000580)={{{@in6=@loopback, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@empty}}, &(0x7f0000000300)=0xe8) lstat(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000000680)={{0x1, 0x1, 0x18, r1, {r3, r4}}, './file0\x00'}) getgroups(0x5, &(0x7f0000000140)=[0xee01, 0xee01, 0xee01, 0xffffffffffffffff, 0x0]) r6 = creat(&(0x7f00000000c0)='./file0\x00', 0x9c) r7 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x4f0, 0x340, 0x25, 0x148, 0x0, 0x60, 0x458, 0x2a8, 0x2a8, 0x458, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'geneve0\x00', {0x44, 0x0, 0x9, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz0\x00'}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth1_to_bond\x00', 'veth0\x00', {0xff}}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@unspec=@cgroup0={{0x28}, {0x4}}, @common=@unspec=@statistic={{0x38}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x8000, 'syz0\x00', {0x481c}}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x550) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000007c0)={0xffffffffffffffff}, 0x13f, 0x5}}, 0x20) stat(&(0x7f0000001c40)='./file0\x00', &(0x7f0000001c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r11 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r11, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="38000000031401002dbd7000000000000900020073797a30000000000800410073697700140033006c6f0000fffffffffffffff000000000"], 0xffaf}, 0x1, 0x0, 0x0, 0x854}, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001d40)={&(0x7f0000000580)=@proc={0x10, 0x0, 0x25dfdbfd, 0x40}, 0xc, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYRES8=r7, @ANYRESDEC=r6, @ANYRES32, @ANYRES32, @ANYBLOB="00000000000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="3075253f97c78b70e75f469022b12c3de45ca0c79c5217f2f164e61a5f0967ad748f3e080d98a0bd726374b642dda15d32f838df70ab74d927f8eef21675a01f18cc2a8a1a94005aa96ffde0a7d0c10ec126e5ad3b33a9b21f814bac9b701c92d22baa8ef2ff024dc09d10", @ANYRES16, @ANYRES32, @ANYRES32], 0xffffffffffffff41, 0x24040094}, 0x80) lchown(&(0x7f0000000000)='./file0\x00', 0x0, r10) ioctl$LOOP_SET_BLOCK_SIZE(r6, 0x4c09, 0x3) r12 = getegid() fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000000b00)=ANY=[@ANYRESDEC, @ANYRES32=0x0, @ANYBLOB="02000400", @ANYRES64=r6, @ANYBLOB="020002", @ANYRES32=0x0, @ANYRES32=r9, @ANYBLOB="0ffe0500", @ANYRES64, @ANYBLOB="02000000", @ANYRES8=r8, @ANYBLOB="02000300", @ANYRES64, @ANYBLOB="02000200", @ANYRES32=0xee00, @ANYRES8=r11, @ANYBLOB="7de0de6148d7d44c4d01eeff92df69b773e9c6727f8fbda7576c2a151378b664926695450adc68e74593831c634553c00cb92a5f09f1c013283b5c41e9b48b6df05700293ee4dfd9070d460cc6774ad5cb408f22ce", @ANYRESDEC=r9, @ANYRESDEC, @ANYRES32=0x0, @ANYBLOB="080006", @ANYRES32=r10, @ANYBLOB="08000300", @ANYRES32=0xee00, @ANYBLOB="08000400", @ANYRES32=r12, @ANYBLOB="10000400000000002000000000000000"], 0x94, 0x1) setxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000a40)={{}, {0x1, 0x4}, [{0x2, 0x4, 0xee00}], {0x4, 0xe}, [{0x8, 0x2, r0}, {0x8, 0x7, r4}, {0x8, 0x2, r5}, {0x8, 0x0, 0xee01}, {0x8, 0x1, 0xffffffffffffffff}, {0x8, 0x6, r10}], {0x10, 0x7}, {0x20, 0x4}}, 0x5c, 0x3) syz_mount_image$ext4(&(0x7f00000001c0)='ext3\x00', &(0x7f0000003040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x0, &(0x7f0000000200)={[], [{@uid_lt={'uid<', 0xffffffffffffffff}}, {@appraise}, {@obj_role={'obj_role', 0x3d, 'CREDS_CHEC\xf0'}}]}, 0x0, 0x78e, &(0x7f0000000280)="$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") get_mempolicy(&(0x7f0000000ac0), &(0x7f0000000c00), 0x3, &(0x7f0000ffc000/0x1000)=nil, 0xd7b781ef02d104b1) 649.923949ms ago: executing program 0 (id=750): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b40)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x32, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r1) sendmsg$NL80211_CMD_GET_WIPHY(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="59bb22bd70000000200011"], 0x28}}, 0x0) 593.54885ms ago: executing program 3 (id=751): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000940)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000002000000e00000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000064010102000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x310) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) 592.96888ms ago: executing program 5 (id=752): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002080)={&(0x7f0000000300)='kfree\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x20, 0x1, 0x1, 0x301, 0x0, 0x0, {0x1, 0x0, 0xa}, [@CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x4ad}]}]}, 0x20}}, 0x0) (fail_nth: 2) 583.49354ms ago: executing program 3 (id=753): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3ff, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000080200000e"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7030000ec000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r3}, 0x18) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, &(0x7f00000000c0)={0x80, 0x6, 0x2fe, 0x4, 0x0, 0x3, 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000a00)={'ip_vti0\x00', &(0x7f0000000840)={'syztnl0\x00', 0x0, 0x8, 0x10, 0xb97, 0x0, {{0x1f, 0x4, 0x2, 0xa, 0x7c, 0x68, 0x0, 0x7, 0x2f, 0x0, @rand_addr=0x64010101, @broadcast, {[@timestamp_addr={0x44, 0x1c, 0x86, 0x1, 0x7, [{@rand_addr=0x64010101, 0x6}, {@loopback, 0xc13c}, {@local}]}, @timestamp={0x44, 0x10, 0xf4, 0x0, 0x6, [0x1, 0x7, 0x5]}, @timestamp={0x44, 0x20, 0x93, 0x0, 0x5, [0x0, 0x100, 0x9, 0x11, 0x3, 0x7, 0x9]}, @timestamp_prespec={0x44, 0x1c, 0xf4, 0x3, 0x9, [{@remote, 0x8}, {@dev={0xac, 0x14, 0x14, 0x18}, 0x5}, {@private=0xa010101, 0x29}]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000a40)={'vcan0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000a80)={'vcan0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000ac0)={'team0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000080000000300000000000000", @ANYRES32, @ANYBLOB='\x00'/15, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r8 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000000200)) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0x58, 0x24, 0xd0f, 0x3, 0x0, {0x60, 0x0, 0x0, r9, {0x0, 0x2}, {0xffff, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x10, 0x3, 0x1, 0x3, 0x400, 0x8}, [@TCA_NETEM_DELAY_DIST={0x6, 0x2, "9f2b"}, @TCA_NETEM_LOSS={0xfffffffffffffe4d}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40001d4}, 0x8840) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000b80)={'team0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000d00)={'xfrm0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000001440)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001400)={&(0x7f0000000d40)={0x684, 0x0, 0x100, 0x70bd25, 0x25dfdbfc, {}, [{{0x8}, {0x138, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1151}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x48bb, 0x8, 0xe6, 0x2}, {0x2, 0x8, 0x10, 0x8}]}}}]}}, {{0x8}, {0x144, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xb6}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x200, 0x6, 0x2, 0x1}, {0x5, 0x87, 0x6, 0x62ec}, {0x1, 0xc5, 0x3e}, {0xa, 0x4, 0x3}]}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r4}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r6}}}]}}, {{0x8, 0x1, r7}, {0xf8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}]}}, {{0x8, 0x1, r10}, {0x118, 0x2, 0x0, 0x1, [{0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0xacce, 0xff, 0xb, 0x7}, {0xeac, 0x8, 0x97, 0x823}, {0xffde, 0x4, 0x10, 0x3}, {0x40, 0x4, 0x5, 0x4}, {0x81, 0x1, 0xfb, 0x8}]}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x101}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xac83}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffff7}}, {0x8}}}]}}, {{0x8}, {0xbc, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x10000}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffffc}}, {0x8, 0x6, r11}}}]}}]}, 0x684}, 0x1, 0x0, 0x0, 0x280c0}, 0x40000) 531.411341ms ago: executing program 0 (id=754): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="02000000040000000400000001"], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r1], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1}, &(0x7f0000000000), &(0x7f00000005c0)=r0}, 0x20) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) fcntl$setpipe(r3, 0x407, 0x6) 327.444084ms ago: executing program 2 (id=755): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x34, r1, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x5}, @ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) (fail_nth: 4) 324.543594ms ago: executing program 1 (id=756): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80a, &(0x7f0000000940)={[{@barrier_val}, {@resuid}, {@block_validity}, {@errors_remount}]}, 0x1, 0x79b, &(0x7f0000000180)="$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") r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b70300000000000085000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x1dc) getdents64(r1, 0x0, 0x0) 322.261425ms ago: executing program 5 (id=757): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000a50000002a00000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100003020702500000000002020207b1af8ff00000000bfa1000000000000070100003affffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000400)='kfree\x00', r1}, 0x10) request_key(&(0x7f0000000000)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1, 0xc}, &(0x7f0000001fee)='R\x10rust\xe3c*sgrVex:Di', 0x0) 298.736625ms ago: executing program 3 (id=758): memfd_create(&(0x7f0000000a80)='\x00\xc76\xbe\x91\x8d\x182)!\x9a%\xd9\x19\x17\xb0\xed|\xb3\xc2\x017h\xe9kL\xa2\xd28\xd6\x06\a\x0e\xfc\xfe\x12\x8f&\x13\xae%@T\xa3\xb0>\\\xec\xa9\xf9Q@6A\x10\x8cn|\x00\x00\x00\x00\x00\x00\x00\x00\xeb0\xdd\xe8\x87\x05=\xfb\x8b$\xdcQ\xee\xc5\x1f\x8bQ\xf7fo\"i\xa1hk\x1d\xf5z\xc1\x7f\xa4\\]\xc4\xbe3\xf9\xa8\t?:\xd8\xda\x84\xeepI[\x1c\x00\x00\x00\x00\xf9v\x00\x00\x00\x00\x00T\xb6\xbe\x0f~\xc0\x92\xe9O{\xa8\x81(\x01\x14\xfc\x83\xf9\xfb\x05\x94Tr@Lq]\xf9\x15zj\x87\xc4\x8e\xe8/\xb9-&R\x8e\xb2\xb3bBx\x1e1\x18\x8f2\xf7]#\x00\xa3\xee\xcb\xaf\xb3\xe3\'}\x18\xe8O\xa8#K\xb6\xe4R$\xaa\x00U\x92\xd2\x99\xb80xffffffffffffffff, 0xffffffffffffffff}, 0x80800) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r3}, 0x10) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x8080, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d5304948) (fail_nth: 7) 162.902657ms ago: executing program 5 (id=763): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x9, 0x4, 0x7ffc0002}]}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYBLOB, @ANYRES32=0x0], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setrlimit(0x40000000000008, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = inotify_init() r1 = inotify_add_watch(r0, &(0x7f0000000200)='.\x00', 0x82000714) inotify_rm_watch(r0, r1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r4, 0x1, 0x70bd2b, 0x25dfdbfc}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x10000) sendmsg$TIPC_CMD_SET_NODE_ADDR(r3, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x80011}, 0x404c8c4) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0x20, &(0x7f0000000080)={@in={{0x2, 0x0, @remote}}, 0x3, 0x0, 0x1a, 0x0, "5e3b86774ef89ec669fabcaff49c2eeb8c4614c85b196a0c67a7768e058e3008931c08d43101cb8242bc42b8e0662749302c1ffcd1d1190000000000000000000000000000000000000000000200"}, 0xd8) sendto$inet(r2, 0x0, 0x0, 0x24000087, &(0x7f0000000180)={0x2, 0x4e23, @remote}, 0x10) r5 = fsmount(0xffffffffffffffff, 0x0, 0x20) openat(r5, &(0x7f00000000c0)='./file1\x00', 0x20800, 0x52abe154ad664fa4) getsockopt(0xffffffffffffffff, 0x9, 0xba, &(0x7f0000000180)=""/36, &(0x7f00000001c0)=0x24) 157.653117ms ago: executing program 2 (id=764): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000010000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x5e27, 0x0, @mcast1}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=[{0xc, 0x29, 0x34}], 0xc}, 0x0) 10.67256ms ago: executing program 0 (id=765): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000010000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x18) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x19, 0x1, 0x70bd2d, 0x0, {{@in=@multicast1=0xe0000002, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x0, 0x32}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0xfffffffffffffffb}, {0x0, 0x5, 0x0, 0x400000}, 0xffffffff}}, 0xb8}}, 0x0) 0s ago: executing program 3 (id=766): syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$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") r0 = open(0x0, 0x14927e, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./bus\x00', 0x1c5902, 0x2d) write(r2, &(0x7f0000004200)='t', 0x1) sendfile(r2, r1, 0x0, 0x7ffff000) fallocate(r0, 0x0, 0x0, 0x1001f0) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$nci(r3, &(0x7f0000000140)=ANY=[@ANYBLOB="414601"], 0x4) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) close(0xffffffffffffffff) socket$nl_xfrm(0x10, 0x3, 0x6) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{r5}, &(0x7f0000000080), &(0x7f00000006c0)='%-010d \x00'}, 0x20) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x1000c16, &(0x7f0000000500), 0xff, 0x260, &(0x7f0000000980)="$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") fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r4, 0x0, 0x80000000}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) kernel console output (not intermixed with test programs): .044662][ T3309] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.051688][ T3309] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.077623][ T3309] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.088724][ T3306] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.095814][ T3306] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.121715][ T3306] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.137400][ T3314] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.148579][ T3305] hsr_slave_0: entered promiscuous mode [ 27.154519][ T3305] hsr_slave_1: entered promiscuous mode [ 27.161498][ T3311] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.170894][ T3309] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.177846][ T3309] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.204160][ T3309] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.221718][ T3314] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.236606][ T3311] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.266392][ T3314] team0: Port device team_slave_0 added [ 27.291631][ T3314] team0: Port device team_slave_1 added [ 27.302364][ T3311] team0: Port device team_slave_0 added [ 27.309941][ T3309] hsr_slave_0: entered promiscuous mode [ 27.316069][ T3309] hsr_slave_1: entered promiscuous mode [ 27.321990][ T3309] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 27.329527][ T3309] Cannot create hsr debugfs directory [ 27.350524][ T3306] hsr_slave_0: entered promiscuous mode [ 27.356436][ T3306] hsr_slave_1: entered promiscuous mode [ 27.362181][ T3306] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 27.369721][ T3306] Cannot create hsr debugfs directory [ 27.376236][ T3311] team0: Port device team_slave_1 added [ 27.388547][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.395551][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.421537][ T3314] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.432891][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.439880][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.465896][ T3314] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.488862][ T3311] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.495930][ T3311] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.521850][ T3311] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.550553][ T3311] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.557534][ T3311] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.583550][ T3311] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.625199][ T3314] hsr_slave_0: entered promiscuous mode [ 27.631240][ T3314] hsr_slave_1: entered promiscuous mode [ 27.637021][ T3314] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 27.644596][ T3314] Cannot create hsr debugfs directory [ 27.683577][ T3311] hsr_slave_0: entered promiscuous mode [ 27.689670][ T3311] hsr_slave_1: entered promiscuous mode [ 27.695513][ T3311] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 27.703153][ T3311] Cannot create hsr debugfs directory [ 27.806257][ T3305] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 27.823015][ T3305] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 27.837354][ T3305] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 27.849726][ T3305] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 27.865919][ T3309] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 27.874695][ T3309] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 27.886265][ T3309] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 27.894747][ T3309] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 27.925070][ T3306] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 27.934681][ T3306] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 27.943743][ T3306] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 27.956017][ T3306] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 27.993019][ T3311] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 28.001973][ T3311] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 28.016716][ T3311] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 28.025607][ T3311] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 28.049775][ T3314] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 28.060550][ T3314] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 28.070736][ T3314] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 28.079021][ T3314] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 28.102067][ T3306] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.113495][ T3305] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.122590][ T3309] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.138402][ T3306] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.156175][ T3305] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.173065][ T3309] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.180992][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.188109][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.197003][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.204071][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.217012][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.224096][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.232481][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.239500][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.254516][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.261667][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.274094][ T3311] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.300646][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.307720][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.330768][ T3311] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.355694][ T335] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.362786][ T335] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.379431][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.386611][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.400181][ T3309] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 28.410694][ T3309] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 28.449639][ T3305] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.465698][ T3314] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.504810][ T3314] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.527107][ T3306] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.541733][ T3309] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.558372][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.565471][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.574780][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.581844][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.606665][ T3314] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 28.625956][ T3305] veth0_vlan: entered promiscuous mode [ 28.665210][ T3305] veth1_vlan: entered promiscuous mode [ 28.722916][ T3311] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.731588][ T3305] veth0_macvtap: entered promiscuous mode [ 28.738760][ T3305] veth1_macvtap: entered promiscuous mode [ 28.769703][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 28.784975][ T3314] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.794931][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 28.813472][ T3306] veth0_vlan: entered promiscuous mode [ 28.825122][ T3309] veth0_vlan: entered promiscuous mode [ 28.831807][ T3305] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.840693][ T3305] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.849416][ T3305] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.858160][ T3305] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.872304][ T3306] veth1_vlan: entered promiscuous mode [ 28.884725][ T3309] veth1_vlan: entered promiscuous mode [ 28.920019][ T3306] veth0_macvtap: entered promiscuous mode [ 28.934777][ T3309] veth0_macvtap: entered promiscuous mode [ 28.954606][ T3305] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 28.965061][ T3306] veth1_macvtap: entered promiscuous mode [ 28.989012][ T3309] veth1_macvtap: entered promiscuous mode [ 29.034443][ T3309] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.044678][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.056425][ T3314] veth0_vlan: entered promiscuous mode [ 29.063182][ T3311] veth0_vlan: entered promiscuous mode [ 29.069916][ T3309] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.078910][ T3311] veth1_vlan: entered promiscuous mode [ 29.086717][ T3314] veth1_vlan: entered promiscuous mode [ 29.103071][ T3309] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.111894][ T3309] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.120815][ T3309] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.129536][ T3309] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.150522][ T3476] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4'. [ 29.151696][ T3474] infiniband syz!: set active [ 29.159645][ T3476] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4'. [ 29.163896][ T3474] infiniband syz!: added team_slave_0 [ 29.172332][ T3474] RDS/IB: syz!: added [ 29.185905][ T3474] smc: adding ib device syz! with port count 1 [ 29.192119][ T3474] smc: ib device syz! port 1 has pnetid [ 29.215320][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.224020][ T3306] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.232870][ T3306] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.241715][ T3306] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.250479][ T3306] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.287970][ T3311] veth0_macvtap: entered promiscuous mode [ 29.305884][ T3311] veth1_macvtap: entered promiscuous mode [ 29.335161][ T3311] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.358829][ T3311] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.385977][ T3311] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.394863][ T3311] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.403911][ T3311] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.412674][ T3311] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.452063][ T3314] veth0_macvtap: entered promiscuous mode [ 29.470149][ T3314] veth1_macvtap: entered promiscuous mode [ 29.479605][ T3486] loop1: detected capacity change from 0 to 2048 [ 29.494329][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.521224][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.532620][ T3486] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 29.553292][ T3314] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.557403][ T29] kauditd_printk_skb: 78 callbacks suppressed [ 29.557417][ T29] audit: type=1326 audit(1750649114.255:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3489 comm="syz.4.5" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1ed083e929 code=0x7ffc0000 [ 29.562111][ T3314] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.568112][ T29] audit: type=1326 audit(1750649114.255:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3489 comm="syz.4.5" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ed083e929 code=0x7ffc0000 [ 29.591168][ T3314] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.599851][ T29] audit: type=1326 audit(1750649114.255:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3489 comm="syz.4.5" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f1ed083e929 code=0x7ffc0000 [ 29.622930][ T3314] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.631664][ T29] audit: type=1326 audit(1750649114.255:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3489 comm="syz.4.5" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ed083e929 code=0x7ffc0000 [ 29.686996][ T29] audit: type=1326 audit(1750649114.255:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3489 comm="syz.4.5" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1ed083e929 code=0x7ffc0000 [ 29.710176][ T29] audit: type=1326 audit(1750649114.255:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3489 comm="syz.4.5" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ed083e929 code=0x7ffc0000 [ 29.734073][ T29] audit: type=1400 audit(1750649114.365:156): avc: denied { mount } for pid=3483 comm="syz.1.2" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 29.755434][ T29] audit: type=1326 audit(1750649114.365:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3483 comm="syz.1.2" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f123765d290 code=0x7ffc0000 [ 29.778510][ T29] audit: type=1326 audit(1750649114.365:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3483 comm="syz.1.2" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7f123765d677 code=0x7ffc0000 [ 29.801632][ T29] audit: type=1326 audit(1750649114.365:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3483 comm="syz.1.2" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f123765d290 code=0x7ffc0000 [ 29.847475][ T3486] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2'. [ 29.856979][ T3474] syz.3.4 (3474) used greatest stack depth: 10616 bytes left [ 29.871140][ T3486] IPVS: Error joining to the multicast group [ 29.884017][ T3486] EXT4-fs error (device loop1): ext4_find_extent:939: inode #2: comm syz.1.2: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 29.927594][ T3486] EXT4-fs (loop1): Remounting filesystem read-only [ 29.962425][ T3496] loop3: detected capacity change from 0 to 512 [ 29.980803][ T3486] SELinux: syz.1.2 (3486) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 29.989255][ T3496] ======================================================= [ 29.989255][ T3496] WARNING: The mand mount option has been deprecated and [ 29.989255][ T3496] and is ignored by this kernel. Remove the mand [ 29.989255][ T3496] option from the mount to silence this warning. [ 29.989255][ T3496] ======================================================= [ 30.049468][ T3496] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 30.102785][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 30.119069][ T3498] syz.2.3 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 30.172142][ T3496] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 30.214196][ T3498] loop2: detected capacity change from 0 to 2048 [ 30.222284][ T3496] ext4 filesystem being mounted at /1/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 30.301193][ T3498] EXT4-fs (loop2): failed to initialize system zone (-117) [ 30.308557][ T3498] EXT4-fs (loop2): mount failed [ 30.323110][ T3496] EXT4-fs error (device loop3): ext4_xattr_block_get:593: inode #15: comm syz.3.6: corrupted xattr block 19: overlapping e_value [ 30.346565][ T3496] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 30.355734][ T3513] loop1: detected capacity change from 0 to 2048 [ 30.365828][ T3496] EXT4-fs error (device loop3): ext4_xattr_block_get:593: inode #15: comm syz.3.6: corrupted xattr block 19: overlapping e_value [ 30.382344][ T3496] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 30.403360][ T3496] EXT4-fs error (device loop3): ext4_xattr_block_get:593: inode #15: comm syz.3.6: corrupted xattr block 19: overlapping e_value [ 30.407733][ T3513] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 30.776376][ T3489] syz.4.5 (3489) used greatest stack depth: 10560 bytes left [ 30.796982][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 30.836710][ T3508] syz.4.5 (3508) used greatest stack depth: 9976 bytes left [ 30.850852][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 30.985821][ T3526] loop1: detected capacity change from 0 to 2048 [ 31.036125][ T3527] Illegal XDP return value 4294967274 on prog (id 12) dev N/A, expect packet loss! [ 31.053624][ T3526] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 31.441813][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.470028][ T3551] sch_fq: defrate 4294967295 ignored. [ 31.535385][ T3504] syz.4.5 (3504) used greatest stack depth: 6952 bytes left [ 31.622122][ T3571] loop4: detected capacity change from 0 to 512 [ 31.660718][ T3574] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2 sclass=netlink_route_socket pid=3574 comm=syz.1.23 [ 31.673933][ T3571] EXT4-fs (loop4): too many log groups per flexible block group [ 31.681726][ T3571] EXT4-fs (loop4): failed to initialize mballoc (-12) [ 31.719747][ T3571] EXT4-fs (loop4): mount failed [ 31.818969][ T3579] netlink: 104 bytes leftover after parsing attributes in process `syz.0.24'. [ 31.925453][ T3582] loop1: detected capacity change from 0 to 2048 [ 31.995353][ T3582] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 32.334288][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.419865][ T3608] loop2: detected capacity change from 0 to 2048 [ 32.473275][ T3608] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 32.485960][ T3594] netlink: 8 bytes leftover after parsing attributes in process `syz.4.29'. [ 32.819617][ T3628] loop4: detected capacity change from 0 to 2048 [ 32.832865][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.844800][ T3629] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 32.872205][ T3628] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 33.082011][ T3644] 9pnet_fd: Insufficient options for proto=fd [ 33.106927][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.167022][ T3651] 9pnet: Could not find request transport: fd0xffffffffffffffff [ 33.171687][ T3654] netlink: 56 bytes leftover after parsing attributes in process `syz.3.47'. [ 33.450934][ T3674] netlink: 4 bytes leftover after parsing attributes in process `syz.2.52'. [ 33.507307][ T3677] netlink: 4 bytes leftover after parsing attributes in process `syz.1.54'. [ 33.552025][ T3684] FAULT_INJECTION: forcing a failure. [ 33.552025][ T3684] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 33.565631][ T3684] CPU: 1 UID: 0 PID: 3684 Comm: syz.1.58 Not tainted 6.16.0-rc2-syzkaller-00378-gb67ec639010f #0 PREEMPT(voluntary) [ 33.565673][ T3684] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 33.565685][ T3684] Call Trace: [ 33.565743][ T3684] [ 33.565751][ T3684] __dump_stack+0x1d/0x30 [ 33.565774][ T3684] dump_stack_lvl+0xe8/0x140 [ 33.565796][ T3684] dump_stack+0x15/0x1b [ 33.565815][ T3684] should_fail_ex+0x265/0x280 [ 33.565845][ T3684] should_fail+0xb/0x20 [ 33.565948][ T3684] should_fail_usercopy+0x1a/0x20 [ 33.565978][ T3684] _copy_to_user+0x20/0xa0 [ 33.566001][ T3684] simple_read_from_buffer+0xb5/0x130 [ 33.566034][ T3684] proc_fail_nth_read+0x100/0x140 [ 33.566135][ T3684] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 33.566170][ T3684] vfs_read+0x1a0/0x6f0 [ 33.566207][ T3684] ? __rcu_read_unlock+0x4f/0x70 [ 33.566229][ T3684] ? __rcu_read_unlock+0x4f/0x70 [ 33.566251][ T3684] ? __fget_files+0x184/0x1c0 [ 33.566348][ T3684] ksys_read+0xda/0x1a0 [ 33.566376][ T3684] __x64_sys_read+0x40/0x50 [ 33.566469][ T3684] x64_sys_call+0x2d77/0x2fb0 [ 33.566489][ T3684] do_syscall_64+0xd2/0x200 [ 33.566564][ T3684] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 33.566652][ T3684] ? clear_bhb_loop+0x40/0x90 [ 33.566720][ T3684] ? clear_bhb_loop+0x40/0x90 [ 33.566739][ T3684] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 33.566759][ T3684] RIP: 0033:0x7f123765d33c [ 33.566773][ T3684] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 33.566836][ T3684] RSP: 002b:00007f1235cc7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 33.566877][ T3684] RAX: ffffffffffffffda RBX: 00007f1237885fa0 RCX: 00007f123765d33c [ 33.566890][ T3684] RDX: 000000000000000f RSI: 00007f1235cc70a0 RDI: 0000000000000006 [ 33.566903][ T3684] RBP: 00007f1235cc7090 R08: 0000000000000000 R09: 0000000000000000 [ 33.566916][ T3684] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 33.567005][ T3684] R13: 0000000000000000 R14: 00007f1237885fa0 R15: 00007ffd79069078 [ 33.567024][ T3684] [ 33.573352][ T3681] loop2: detected capacity change from 0 to 2048 [ 33.804956][ T3681] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 33.818816][ T3681] EXT4-fs error (device loop2): ext4_find_extent:939: inode #2: comm syz.2.57: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 33.835333][ T3681] EXT4-fs (loop2): Remounting filesystem read-only [ 33.853447][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.874185][ T41] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 33.925083][ T41] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 33.952912][ T3699] loop0: detected capacity change from 0 to 764 [ 33.967164][ T3699] Symlink component flag not implemented [ 33.974062][ T3699] Symlink component flag not implemented (7) [ 33.983638][ T41] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 33.995012][ T3699] FAULT_INJECTION: forcing a failure. [ 33.995012][ T3699] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 34.008233][ T3699] CPU: 1 UID: 0 PID: 3699 Comm: syz.0.66 Not tainted 6.16.0-rc2-syzkaller-00378-gb67ec639010f #0 PREEMPT(voluntary) [ 34.008261][ T3699] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 34.008274][ T3699] Call Trace: [ 34.008282][ T3699] [ 34.008291][ T3699] __dump_stack+0x1d/0x30 [ 34.008313][ T3699] dump_stack_lvl+0xe8/0x140 [ 34.008331][ T3699] dump_stack+0x15/0x1b [ 34.008402][ T3699] should_fail_ex+0x265/0x280 [ 34.008430][ T3699] should_fail+0xb/0x20 [ 34.008454][ T3699] should_fail_usercopy+0x1a/0x20 [ 34.008530][ T3699] _copy_from_user+0x1c/0xb0 [ 34.008658][ T3699] perf_copy_attr+0x145/0x610 [ 34.008767][ T3699] __se_sys_perf_event_open+0x67/0x11c0 [ 34.008874][ T3699] ? bpf_get_current_comm+0x7c/0xb0 [ 34.008922][ T3699] ? __rcu_read_unlock+0x4f/0x70 [ 34.008946][ T3699] ? bpf_trace_run2+0x124/0x1c0 [ 34.008987][ T3699] __x64_sys_perf_event_open+0x67/0x80 [ 34.009011][ T3699] x64_sys_call+0x27ec/0x2fb0 [ 34.009029][ T3699] do_syscall_64+0xd2/0x200 [ 34.009049][ T3699] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 34.009079][ T3699] ? clear_bhb_loop+0x40/0x90 [ 34.009175][ T3699] ? clear_bhb_loop+0x40/0x90 [ 34.009198][ T3699] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 34.009221][ T3699] RIP: 0033:0x7efd4be5e929 [ 34.009239][ T3699] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 34.009300][ T3699] RSP: 002b:00007efd4a4c7038 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 34.009322][ T3699] RAX: ffffffffffffffda RBX: 00007efd4c085fa0 RCX: 00007efd4be5e929 [ 34.009336][ T3699] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000000 [ 34.009350][ T3699] RBP: 00007efd4a4c7090 R08: 0000000000000000 R09: 0000000000000000 [ 34.009363][ T3699] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 34.009377][ T3699] R13: 0000000000000000 R14: 00007efd4c085fa0 R15: 00007fff38fd0b18 [ 34.009397][ T3699] [ 34.224428][ T41] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 34.252656][ T3699] SELinux: failed to load policy [ 34.298080][ T41] bridge_slave_1: left allmulticast mode [ 34.303837][ T41] bridge_slave_1: left promiscuous mode [ 34.309539][ T41] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.319836][ T41] bridge_slave_0: left allmulticast mode [ 34.325620][ T41] bridge_slave_0: left promiscuous mode [ 34.331463][ T41] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.432878][ T41] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 34.444724][ T41] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 34.454107][ T41] bond0 (unregistering): Released all slaves [ 34.465427][ T3715] netlink: 4 bytes leftover after parsing attributes in process `syz.0.69'. [ 34.588460][ T29] kauditd_printk_skb: 328 callbacks suppressed [ 34.588475][ T29] audit: type=1400 audit(1750649119.285:488): avc: denied { add_name } for pid=3719 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 34.618211][ T29] audit: type=1400 audit(1750649119.285:489): avc: denied { create } for pid=3719 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 34.640537][ T29] audit: type=1400 audit(1750649119.285:490): avc: denied { write } for pid=3719 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.eth1.link" dev="tmpfs" ino=983 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 34.666604][ T29] audit: type=1400 audit(1750649119.285:491): avc: denied { append } for pid=3719 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" dev="tmpfs" ino=983 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 34.691402][ T29] audit: type=1400 audit(1750649119.285:492): avc: denied { setopt } for pid=3733 comm="syz.0.72" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 34.710848][ T29] audit: type=1400 audit(1750649119.295:493): avc: denied { write } for pid=3733 comm="syz.0.72" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 34.730044][ T29] audit: type=1400 audit(1750649119.295:494): avc: denied { create } for pid=3733 comm="syz.0.72" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 34.750452][ T41] hsr_slave_0: left promiscuous mode [ 34.752344][ T29] audit: type=1400 audit(1750649119.395:495): avc: denied { remove_name } for pid=3738 comm="rm" name="resolv.conf.eth1.link" dev="tmpfs" ino=983 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 34.779454][ T29] audit: type=1400 audit(1750649119.395:496): avc: denied { unlink } for pid=3738 comm="rm" name="resolv.conf.eth1.link" dev="tmpfs" ino=983 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 34.808901][ T41] hsr_slave_1: left promiscuous mode [ 34.811632][ T29] audit: type=1400 audit(1750649119.505:497): avc: denied { create } for pid=3741 comm="syz.0.75" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 34.841489][ T41] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 34.848951][ T41] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 34.860454][ T3750] loop2: detected capacity change from 0 to 2048 [ 34.867358][ T41] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 34.874870][ T41] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 34.886399][ T41] veth1_macvtap: left promiscuous mode [ 34.892055][ T41] veth0_macvtap: left promiscuous mode [ 34.898139][ T41] veth1_vlan: left promiscuous mode [ 34.903471][ T41] veth0_vlan: left promiscuous mode [ 34.909838][ T3750] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 34.918465][ T3752] netlink: 8 bytes leftover after parsing attributes in process `syz.3.77'. [ 34.992069][ T3756] process 'syz.1.76' launched '/dev/fd/8' with NULL argv: empty string added [ 35.002735][ T41] team0 (unregistering): Port device team_slave_1 removed [ 35.026399][ T41] team0 (unregistering): Port device team_slave_0 removed [ 35.082294][ T3752] IPVS: Error joining to the multicast group [ 35.094373][ T3700] chnl_net:caif_netlink_parms(): no params data found [ 35.153007][ T3765] netlink: 96 bytes leftover after parsing attributes in process `syz.3.79'. [ 35.163946][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.221097][ T3700] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.228270][ T3700] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.240903][ T3700] bridge_slave_0: entered allmulticast mode [ 35.247538][ T3700] bridge_slave_0: entered promiscuous mode [ 35.254512][ T3700] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.261697][ T3700] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.268898][ T3700] bridge_slave_1: entered allmulticast mode [ 35.275454][ T3700] bridge_slave_1: entered promiscuous mode [ 35.342782][ T3700] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.374486][ T3793] FAULT_INJECTION: forcing a failure. [ 35.374486][ T3793] name failslab, interval 1, probability 0, space 0, times 1 [ 35.387182][ T3793] CPU: 0 UID: 0 PID: 3793 Comm: syz.0.84 Not tainted 6.16.0-rc2-syzkaller-00378-gb67ec639010f #0 PREEMPT(voluntary) [ 35.387213][ T3793] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 35.387227][ T3793] Call Trace: [ 35.387247][ T3793] [ 35.387256][ T3793] __dump_stack+0x1d/0x30 [ 35.387278][ T3793] dump_stack_lvl+0xe8/0x140 [ 35.387355][ T3793] dump_stack+0x15/0x1b [ 35.387379][ T3793] should_fail_ex+0x265/0x280 [ 35.387414][ T3793] should_failslab+0x8c/0xb0 [ 35.387441][ T3793] kmem_cache_alloc_noprof+0x50/0x310 [ 35.387510][ T3793] ? __kernfs_iattrs+0x6d/0x170 [ 35.387542][ T3793] __kernfs_iattrs+0x6d/0x170 [ 35.387576][ T3793] kernfs_vfs_xattr_set+0x47/0xb0 [ 35.387664][ T3793] ? __pfx_kernfs_vfs_xattr_set+0x10/0x10 [ 35.387699][ T3793] __vfs_removexattr+0x2c7/0x2f0 [ 35.387739][ T3793] __vfs_removexattr_locked+0x18a/0x1d0 [ 35.387800][ T3793] vfs_removexattr+0x75/0x170 [ 35.387818][ T3793] path_removexattrat+0x2c6/0x570 [ 35.387915][ T3793] __x64_sys_removexattr+0x38/0x50 [ 35.387935][ T3793] x64_sys_call+0x2c7a/0x2fb0 [ 35.388031][ T3793] do_syscall_64+0xd2/0x200 [ 35.388111][ T3793] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 35.388146][ T3793] ? clear_bhb_loop+0x40/0x90 [ 35.388169][ T3793] ? clear_bhb_loop+0x40/0x90 [ 35.388203][ T3793] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 35.388223][ T3793] RIP: 0033:0x7efd4be5e929 [ 35.388238][ T3793] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 35.388255][ T3793] RSP: 002b:00007efd4a4c7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000c5 [ 35.388278][ T3793] RAX: ffffffffffffffda RBX: 00007efd4c085fa0 RCX: 00007efd4be5e929 [ 35.388292][ T3793] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 00002000000002c0 [ 35.388303][ T3793] RBP: 00007efd4a4c7090 R08: 0000000000000000 R09: 0000000000000000 [ 35.388338][ T3793] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 35.388352][ T3793] R13: 0000000000000000 R14: 00007efd4c085fa0 R15: 00007fff38fd0b18 [ 35.388380][ T3793] [ 35.406198][ T3700] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.631720][ T3700] team0: Port device team_slave_0 added [ 35.638411][ T3700] team0: Port device team_slave_1 added [ 35.663022][ T3802] loop0: detected capacity change from 0 to 2048 [ 35.727974][ T3802] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.747228][ T3804] loop1: detected capacity change from 0 to 2048 [ 35.764968][ T3700] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 35.772070][ T3700] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 35.798079][ T3700] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 35.818939][ T3809] mmap: syz.2.89 (3809) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 35.842070][ T3700] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 35.849048][ T3700] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 35.875047][ T3700] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 35.924416][ T3804] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.939236][ T3802] netlink: 8 bytes leftover after parsing attributes in process `syz.0.87'. [ 35.952043][ T3700] hsr_slave_0: entered promiscuous mode [ 35.957995][ T3700] hsr_slave_1: entered promiscuous mode [ 35.964345][ T3700] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 35.972677][ T3700] Cannot create hsr debugfs directory [ 35.985581][ T3802] IPVS: Error joining to the multicast group [ 36.031631][ T3804] netlink: 8 bytes leftover after parsing attributes in process `syz.1.88'. [ 36.061893][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.075018][ T3804] IPVS: Error joining to the multicast group [ 36.106880][ T3804] EXT4-fs error (device loop1): ext4_find_extent:939: inode #2: comm syz.1.88: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 36.158358][ T3835] loop2: detected capacity change from 0 to 764 [ 36.160532][ T3804] EXT4-fs (loop1): Remounting filesystem read-only [ 36.172232][ T3700] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 36.192438][ T3700] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 36.211596][ T3835] Symlink component flag not implemented [ 36.223868][ T3835] Symlink component flag not implemented (116) [ 36.233495][ T3700] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 36.246247][ T3700] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 36.264543][ T3839] SELinux: policydb version 780220106 does not match my version range 15-34 [ 36.273990][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.279814][ T3839] SELinux: failed to load policy [ 36.356802][ T3852] loop1: detected capacity change from 0 to 2048 [ 36.363817][ T3700] 8021q: adding VLAN 0 to HW filter on device bond0 [ 36.382491][ T3852] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.396332][ T3700] 8021q: adding VLAN 0 to HW filter on device team0 [ 36.409922][ T3846] netlink: 8 bytes leftover after parsing attributes in process `syz.3.96'. [ 36.415255][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.425751][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.434803][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.441967][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.452747][ T3846] IPVS: Error joining to the multicast group [ 36.483395][ T3852] EXT4-fs error (device loop1): ext4_find_extent:939: inode #2: comm syz.1.94: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 36.519322][ T3852] EXT4-fs (loop1): Remounting filesystem read-only [ 36.563047][ T3700] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 36.594525][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.805518][ T3700] veth0_vlan: entered promiscuous mode [ 36.826629][ T3700] veth1_vlan: entered promiscuous mode [ 36.862573][ T3700] veth0_macvtap: entered promiscuous mode [ 36.869917][ T3700] veth1_macvtap: entered promiscuous mode [ 36.898191][ T3700] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 36.928105][ T3700] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 36.965198][ T3700] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.974046][ T3700] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.983097][ T3700] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.991917][ T3700] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.007685][ T3911] FAULT_INJECTION: forcing a failure. [ 37.007685][ T3911] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 37.020901][ T3911] CPU: 1 UID: 0 PID: 3911 Comm: syz.0.102 Not tainted 6.16.0-rc2-syzkaller-00378-gb67ec639010f #0 PREEMPT(voluntary) [ 37.020997][ T3911] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 37.021009][ T3911] Call Trace: [ 37.021015][ T3911] [ 37.021023][ T3911] __dump_stack+0x1d/0x30 [ 37.021056][ T3911] dump_stack_lvl+0xe8/0x140 [ 37.021078][ T3911] dump_stack+0x15/0x1b [ 37.021093][ T3911] should_fail_ex+0x265/0x280 [ 37.021130][ T3911] should_fail+0xb/0x20 [ 37.021157][ T3911] should_fail_usercopy+0x1a/0x20 [ 37.021204][ T3911] _copy_from_iter+0xcf/0xe40 [ 37.021234][ T3911] ? __build_skb_around+0x1a0/0x200 [ 37.021314][ T3911] ? __alloc_skb+0x223/0x320 [ 37.021400][ T3911] netlink_sendmsg+0x471/0x6b0 [ 37.021424][ T3911] ? __pfx_netlink_sendmsg+0x10/0x10 [ 37.021468][ T3911] __sock_sendmsg+0x142/0x180 [ 37.021494][ T3911] ____sys_sendmsg+0x31e/0x4e0 [ 37.021658][ T3911] ___sys_sendmsg+0x17b/0x1d0 [ 37.021761][ T3911] __x64_sys_sendmsg+0xd4/0x160 [ 37.021876][ T3911] x64_sys_call+0x2999/0x2fb0 [ 37.021895][ T3911] do_syscall_64+0xd2/0x200 [ 37.021911][ T3911] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 37.021939][ T3911] ? clear_bhb_loop+0x40/0x90 [ 37.021970][ T3911] ? clear_bhb_loop+0x40/0x90 [ 37.022038][ T3911] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 37.022198][ T3911] RIP: 0033:0x7efd4be5e929 [ 37.022213][ T3911] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 37.022309][ T3911] RSP: 002b:00007efd4a4c7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 37.022330][ T3911] RAX: ffffffffffffffda RBX: 00007efd4c085fa0 RCX: 00007efd4be5e929 [ 37.022342][ T3911] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000005 [ 37.022354][ T3911] RBP: 00007efd4a4c7090 R08: 0000000000000000 R09: 0000000000000000 [ 37.022429][ T3911] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 37.022441][ T3911] R13: 0000000000000000 R14: 00007efd4c085fa0 R15: 00007fff38fd0b18 [ 37.022459][ T3911] [ 37.247743][ T3912] loop1: detected capacity change from 0 to 2048 [ 37.271969][ T3912] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.295020][ T3912] netlink: 8 bytes leftover after parsing attributes in process `syz.1.101'. [ 37.304403][ T3912] IPVS: Error joining to the multicast group [ 37.341628][ T3922] bridge0: entered promiscuous mode [ 37.347809][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.359241][ T3922] bridge0: port 3(macvlan2) entered blocking state [ 37.365848][ T3922] bridge0: port 3(macvlan2) entered disabled state [ 37.386270][ T3922] macvlan2: entered allmulticast mode [ 37.391820][ T3922] bridge0: entered allmulticast mode [ 37.503070][ T3922] macvlan2: left allmulticast mode [ 37.508289][ T3922] bridge0: left allmulticast mode [ 37.514218][ T3922] bridge0: left promiscuous mode [ 37.529317][ T3934] netlink: 4 bytes leftover after parsing attributes in process `syz.3.107'. [ 37.540180][ T3914] FAULT_INJECTION: forcing a failure. [ 37.540180][ T3914] name failslab, interval 1, probability 0, space 0, times 0 [ 37.552910][ T3914] CPU: 1 UID: 0 PID: 3914 Comm: syz.0.103 Not tainted 6.16.0-rc2-syzkaller-00378-gb67ec639010f #0 PREEMPT(voluntary) [ 37.552938][ T3914] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 37.552950][ T3914] Call Trace: [ 37.552956][ T3914] [ 37.552963][ T3914] __dump_stack+0x1d/0x30 [ 37.553057][ T3914] dump_stack_lvl+0xe8/0x140 [ 37.553074][ T3914] dump_stack+0x15/0x1b [ 37.553089][ T3914] should_fail_ex+0x265/0x280 [ 37.553182][ T3914] should_failslab+0x8c/0xb0 [ 37.553208][ T3914] kmem_cache_alloc_noprof+0x50/0x310 [ 37.553240][ T3914] ? skb_clone+0x151/0x1f0 [ 37.553301][ T3914] skb_clone+0x151/0x1f0 [ 37.553383][ T3914] __netlink_deliver_tap+0x2c9/0x500 [ 37.553419][ T3914] netlink_unicast+0x64c/0x670 [ 37.553445][ T3914] netlink_sendmsg+0x58b/0x6b0 [ 37.553464][ T3914] ? __pfx_netlink_sendmsg+0x10/0x10 [ 37.553522][ T3914] __sock_sendmsg+0x142/0x180 [ 37.553548][ T3914] ____sys_sendmsg+0x31e/0x4e0 [ 37.553586][ T3914] ___sys_sendmsg+0x17b/0x1d0 [ 37.553692][ T3914] __x64_sys_sendmsg+0xd4/0x160 [ 37.553729][ T3914] x64_sys_call+0x2999/0x2fb0 [ 37.553752][ T3914] do_syscall_64+0xd2/0x200 [ 37.553843][ T3914] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 37.553917][ T3914] ? clear_bhb_loop+0x40/0x90 [ 37.553989][ T3914] ? clear_bhb_loop+0x40/0x90 [ 37.554053][ T3914] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 37.554075][ T3914] RIP: 0033:0x7efd4be5e929 [ 37.554090][ T3914] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 37.554106][ T3914] RSP: 002b:00007efd4a4c7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 37.554126][ T3914] RAX: ffffffffffffffda RBX: 00007efd4c085fa0 RCX: 00007efd4be5e929 [ 37.554221][ T3914] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000008 [ 37.554235][ T3914] RBP: 00007efd4a4c7090 R08: 0000000000000000 R09: 0000000000000000 [ 37.554248][ T3914] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 37.554296][ T3914] R13: 0000000000000000 R14: 00007efd4c085fa0 R15: 00007fff38fd0b18 [ 37.554313][ T3914] [ 37.561431][ T3946] netlink: 132 bytes leftover after parsing attributes in process `syz.1.105'. [ 37.798757][ T3956] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.857621][ T3957] netlink: 4 bytes leftover after parsing attributes in process `syz.2.109'. [ 37.877006][ T3972] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 37.903316][ T3972] loop0: detected capacity change from 0 to 256 [ 37.917827][ T3956] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.940090][ T3972] FAT-fs (loop0): bogus number of FAT sectors [ 37.946269][ T3972] FAT-fs (loop0): Can't find a valid FAT filesystem [ 37.999006][ T3980] loop2: detected capacity change from 0 to 2048 [ 38.014002][ T3956] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.033999][ T3980] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.105830][ T3956] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.118553][ T3980] IPVS: Error joining to the multicast group [ 38.140097][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.251264][ C0] hrtimer: interrupt took 35458 ns [ 38.260519][ T4017] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 38.268043][ T4017] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 38.276600][ T4017] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 38.284101][ T4017] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 38.305118][ T4013] loop0: detected capacity change from 0 to 1024 [ 38.316885][ T4013] EXT4-fs: Ignoring removed i_version option [ 38.323341][ T4013] EXT4-fs: Ignoring removed nobh option [ 38.343083][ T4013] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.358605][ T4013] EXT4-fs warning (device loop0): ext4_rename_delete:3726: inode #12: comm syz.0.120: Deleting old file: nlink 2, error=-2 [ 38.435103][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.485370][ T4035] 9pnet: Could not find request transport: fd0xffffffffffffffff [ 38.551195][ T4041] loop0: detected capacity change from 0 to 2048 [ 38.581996][ T4041] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.587306][ T4045] loop2: detected capacity change from 0 to 8192 [ 38.598619][ T4041] EXT4-fs error (device loop0): ext4_find_extent:939: inode #2: comm syz.0.125: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 38.604304][ T4045] FAULT_INJECTION: forcing a failure. [ 38.604304][ T4045] name failslab, interval 1, probability 0, space 0, times 0 [ 38.629511][ T4045] CPU: 0 UID: 0 PID: 4045 Comm: syz.2.127 Not tainted 6.16.0-rc2-syzkaller-00378-gb67ec639010f #0 PREEMPT(voluntary) [ 38.629543][ T4045] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 38.629556][ T4045] Call Trace: [ 38.629563][ T4045] [ 38.629571][ T4045] __dump_stack+0x1d/0x30 [ 38.629605][ T4045] dump_stack_lvl+0xe8/0x140 [ 38.629623][ T4045] dump_stack+0x15/0x1b [ 38.629637][ T4045] should_fail_ex+0x265/0x280 [ 38.629669][ T4045] should_failslab+0x8c/0xb0 [ 38.629769][ T4045] kmem_cache_alloc_noprof+0x50/0x310 [ 38.629798][ T4045] ? getname_flags+0x80/0x3b0 [ 38.629824][ T4045] getname_flags+0x80/0x3b0 [ 38.629849][ T4045] __x64_sys_rename+0x33/0x70 [ 38.629871][ T4045] x64_sys_call+0x2aee/0x2fb0 [ 38.629946][ T4045] do_syscall_64+0xd2/0x200 [ 38.629966][ T4045] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 38.630033][ T4045] ? clear_bhb_loop+0x40/0x90 [ 38.630057][ T4045] ? clear_bhb_loop+0x40/0x90 [ 38.630081][ T4045] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 38.630106][ T4045] RIP: 0033:0x7f467310e929 [ 38.630141][ T4045] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 38.630160][ T4045] RSP: 002b:00007f4671777038 EFLAGS: 00000246 ORIG_RAX: 0000000000000052 [ 38.630225][ T4045] RAX: ffffffffffffffda RBX: 00007f4673335fa0 RCX: 00007f467310e929 [ 38.630239][ T4045] RDX: 0000000000000000 RSI: 0000200000001300 RDI: 0000200000000040 [ 38.630252][ T4045] RBP: 00007f4671777090 R08: 0000000000000000 R09: 0000000000000000 [ 38.630282][ T4045] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 38.630359][ T4045] R13: 0000000000000000 R14: 00007f4673335fa0 R15: 00007ffd504c4f08 [ 38.630458][ T4045] [ 38.820703][ T4041] EXT4-fs (loop0): Remounting filesystem read-only [ 38.846757][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.898927][ T4051] loop2: detected capacity change from 0 to 2048 [ 38.935934][ T4051] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.953347][ T4051] EXT4-fs error (device loop2): ext4_find_extent:939: inode #2: comm syz.2.128: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 38.970730][ T4051] EXT4-fs (loop2): Remounting filesystem read-only [ 38.992022][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.038426][ T4067] FAULT_INJECTION: forcing a failure. [ 39.038426][ T4067] name failslab, interval 1, probability 0, space 0, times 0 [ 39.051173][ T4067] CPU: 0 UID: 0 PID: 4067 Comm: syz.2.134 Not tainted 6.16.0-rc2-syzkaller-00378-gb67ec639010f #0 PREEMPT(voluntary) [ 39.051193][ T4067] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 39.051228][ T4067] Call Trace: [ 39.051233][ T4067] [ 39.051239][ T4067] __dump_stack+0x1d/0x30 [ 39.051263][ T4067] dump_stack_lvl+0xe8/0x140 [ 39.051279][ T4067] dump_stack+0x15/0x1b [ 39.051293][ T4067] should_fail_ex+0x265/0x280 [ 39.051314][ T4067] should_failslab+0x8c/0xb0 [ 39.051330][ T4067] kmem_cache_alloc_noprof+0x50/0x310 [ 39.051372][ T4067] ? audit_log_start+0x365/0x6c0 [ 39.051394][ T4067] audit_log_start+0x365/0x6c0 [ 39.051468][ T4067] ? __rcu_read_unlock+0x4f/0x70 [ 39.051487][ T4067] audit_seccomp+0x48/0x100 [ 39.051508][ T4067] ? __seccomp_filter+0x68c/0x10d0 [ 39.051606][ T4067] __seccomp_filter+0x69d/0x10d0 [ 39.051629][ T4067] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 39.051738][ T4067] ? vfs_write+0x75e/0x8e0 [ 39.051768][ T4067] ? __rcu_read_unlock+0x4f/0x70 [ 39.051866][ T4067] ? __fget_files+0x184/0x1c0 [ 39.051912][ T4067] __secure_computing+0x82/0x150 [ 39.051937][ T4067] syscall_trace_enter+0xcf/0x1e0 [ 39.051955][ T4067] do_syscall_64+0xac/0x200 [ 39.051967][ T4067] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 39.052001][ T4067] ? clear_bhb_loop+0x40/0x90 [ 39.052014][ T4067] ? clear_bhb_loop+0x40/0x90 [ 39.052027][ T4067] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 39.052122][ T4067] RIP: 0033:0x7f467310d33c [ 39.052196][ T4067] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 39.052206][ T4067] RSP: 002b:00007f4671777030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 39.052277][ T4067] RAX: ffffffffffffffda RBX: 00007f4673335fa0 RCX: 00007f467310d33c [ 39.052284][ T4067] RDX: 000000000000000f RSI: 00007f46717770a0 RDI: 0000000000000006 [ 39.052290][ T4067] RBP: 00007f4671777090 R08: 0000000000000000 R09: 0000000000000000 [ 39.052296][ T4067] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 39.052302][ T4067] R13: 0000000000000000 R14: 00007f4673335fa0 R15: 00007ffd504c4f08 [ 39.052312][ T4067] [ 39.311679][ T4069] 9pnet: Could not find request transport: fd0xffffffffffffffff [ 39.501629][ T4091] loop2: detected capacity change from 0 to 2048 [ 39.645998][ T4096] FAULT_INJECTION: forcing a failure. [ 39.645998][ T4096] name failslab, interval 1, probability 0, space 0, times 0 [ 39.658893][ T4096] CPU: 0 UID: 0 PID: 4096 Comm: syz.0.140 Not tainted 6.16.0-rc2-syzkaller-00378-gb67ec639010f #0 PREEMPT(voluntary) [ 39.658921][ T4096] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 39.658934][ T4096] Call Trace: [ 39.658941][ T4096] [ 39.659005][ T4096] __dump_stack+0x1d/0x30 [ 39.659035][ T4096] dump_stack_lvl+0xe8/0x140 [ 39.659108][ T4096] dump_stack+0x15/0x1b [ 39.659127][ T4096] should_fail_ex+0x265/0x280 [ 39.659192][ T4096] should_failslab+0x8c/0xb0 [ 39.659217][ T4096] __kmalloc_noprof+0xa5/0x3e0 [ 39.659245][ T4096] ? genl_family_rcv_msg_attrs_parse+0x75/0x190 [ 39.659324][ T4096] genl_family_rcv_msg_attrs_parse+0x75/0x190 [ 39.659353][ T4096] genl_family_rcv_msg_doit+0x48/0x1b0 [ 39.659383][ T4096] ? security_capable+0x83/0x90 [ 39.659412][ T4096] ? ns_capable+0x7d/0xb0 [ 39.659508][ T4096] genl_rcv_msg+0x422/0x460 [ 39.659546][ T4096] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 39.659578][ T4096] netlink_rcv_skb+0x120/0x220 [ 39.659604][ T4096] ? __pfx_genl_rcv_msg+0x10/0x10 [ 39.659662][ T4096] genl_rcv+0x28/0x40 [ 39.659686][ T4096] netlink_unicast+0x59e/0x670 [ 39.659744][ T4096] netlink_sendmsg+0x58b/0x6b0 [ 39.659764][ T4096] ? __pfx_netlink_sendmsg+0x10/0x10 [ 39.659781][ T4096] __sock_sendmsg+0x142/0x180 [ 39.659803][ T4096] ____sys_sendmsg+0x31e/0x4e0 [ 39.659892][ T4096] ___sys_sendmsg+0x17b/0x1d0 [ 39.659935][ T4096] __x64_sys_sendmsg+0xd4/0x160 [ 39.660058][ T4096] x64_sys_call+0x2999/0x2fb0 [ 39.660079][ T4096] do_syscall_64+0xd2/0x200 [ 39.660112][ T4096] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 39.660141][ T4096] ? clear_bhb_loop+0x40/0x90 [ 39.660164][ T4096] ? clear_bhb_loop+0x40/0x90 [ 39.660202][ T4096] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 39.660225][ T4096] RIP: 0033:0x7efd4be5e929 [ 39.660240][ T4096] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 39.660260][ T4096] RSP: 002b:00007efd4a485038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 39.660309][ T4096] RAX: ffffffffffffffda RBX: 00007efd4c086160 RCX: 00007efd4be5e929 [ 39.660320][ T4096] RDX: 0000000000000040 RSI: 00002000000001c0 RDI: 0000000000000006 [ 39.660332][ T4096] RBP: 00007efd4a485090 R08: 0000000000000000 R09: 0000000000000000 [ 39.660347][ T4096] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 39.660362][ T4096] R13: 0000000000000000 R14: 00007efd4c086160 R15: 00007fff38fd0b18 [ 39.660424][ T4096] [ 39.952133][ T4091] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.981343][ T29] kauditd_printk_skb: 487 callbacks suppressed [ 39.981361][ T29] audit: type=1326 audit(1750649124.675:983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4090 comm="syz.2.144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f467310d290 code=0x7ffc0000 [ 39.995968][ T4091] EXT4-fs error (device loop2): ext4_find_extent:939: inode #2: comm syz.2.144: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 40.013570][ T29] audit: type=1326 audit(1750649124.685:984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4090 comm="syz.2.144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7f467310d677 code=0x7ffc0000 [ 40.050741][ T29] audit: type=1326 audit(1750649124.685:985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4090 comm="syz.2.144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f467310d290 code=0x7ffc0000 [ 40.054262][ T4091] EXT4-fs (loop2): Remounting filesystem read-only [ 40.074185][ T29] audit: type=1326 audit(1750649124.685:986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4090 comm="syz.2.144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f467310e929 code=0x7ffc0000 [ 40.074219][ T29] audit: type=1326 audit(1750649124.685:987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4090 comm="syz.2.144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4673110847 code=0x7ffc0000 [ 40.074268][ T29] audit: type=1326 audit(1750649124.685:988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4090 comm="syz.2.144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f46731107bc code=0x7ffc0000 [ 40.127391][ T4107] loop1: detected capacity change from 0 to 512 [ 40.150452][ T29] audit: type=1326 audit(1750649124.685:989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4090 comm="syz.2.144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f46731106f4 code=0x7ffc0000 [ 40.179992][ T29] audit: type=1326 audit(1750649124.685:990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4090 comm="syz.2.144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f46731106f4 code=0x7ffc0000 [ 40.203857][ T29] audit: type=1326 audit(1750649124.685:991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4090 comm="syz.2.144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f467310d58a code=0x7ffc0000 [ 40.227465][ T29] audit: type=1326 audit(1750649124.685:992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4090 comm="syz.2.144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f467310e929 code=0x7ffc0000 [ 40.283653][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.304466][ T4107] EXT4-fs warning (device loop1): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 40.322989][ T4107] EXT4-fs (loop1): mount failed [ 40.340069][ T4120] loop2: detected capacity change from 0 to 128 [ 40.341561][ T4107] netlink: 'syz.1.146': attribute type 4 has an invalid length. [ 40.373542][ T4107] __nla_validate_parse: 2 callbacks suppressed [ 40.373557][ T4107] netlink: 28 bytes leftover after parsing attributes in process `syz.1.146'. [ 40.466564][ T4107] loop1: detected capacity change from 0 to 512 [ 40.484725][ T4107] EXT4-fs: Ignoring removed nomblk_io_submit option [ 40.521259][ T4107] EXT4-fs: Ignoring removed nomblk_io_submit option [ 40.544657][ T4140] loop2: detected capacity change from 0 to 128 [ 40.554751][ T4107] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 40.574166][ T4107] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 40.584247][ T4107] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2 [ 40.594763][ T4107] EXT4-fs (loop1): 1 truncate cleaned up [ 40.602020][ T4107] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.617532][ T4145] netlink: 4 bytes leftover after parsing attributes in process `syz.0.157'. [ 40.630655][ T4148] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 40.638826][ T4148] FAT-fs (loop2): Filesystem has been set read-only [ 40.652351][ T4107] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.674175][ T4148] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 40.682610][ T4148] syz.2.156: attempt to access beyond end of device [ 40.682610][ T4148] loop2: rw=2049, sector=2065, nr_sectors = 8 limit=128 [ 40.729976][ T4153] loop1: detected capacity change from 0 to 128 [ 40.754613][ T4153] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 40.768787][ T4153] ext4 filesystem being mounted at /31/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 40.822335][ T3309] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 41.386051][ T3956] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.406069][ T3956] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.471757][ T3956] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.519129][ T3956] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.617528][ T4184] loop5: detected capacity change from 0 to 2048 [ 41.728020][ T4184] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.734883][ T4184] EXT4-fs error (device loop5): ext4_find_extent:939: inode #2: comm syz.5.169: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 41.739503][ T4184] EXT4-fs (loop5): Remounting filesystem read-only [ 41.782227][ T4194] SELinux: policydb version 780220106 does not match my version range 15-34 [ 41.795846][ T4195] netlink: 12 bytes leftover after parsing attributes in process `syz.2.171'. [ 41.812187][ T4194] SELinux: failed to load policy [ 41.818005][ T3700] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.853422][ T4189] capability: warning: `syz.2.171' uses 32-bit capabilities (legacy support in use) [ 41.864340][ T4189] loop2: detected capacity change from 0 to 128 [ 41.879262][ T4189] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 41.913685][ T4200] 9pnet: Could not find request transport: fd0xffffffffffffffff [ 41.925970][ T4189] ext4 filesystem being mounted at /37/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 41.990369][ T4206] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.157496][ T4206] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.185953][ T4215] loop1: detected capacity change from 0 to 2048 [ 42.236830][ T4215] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.241653][ T3314] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 42.252843][ T4215] EXT4-fs error (device loop1): ext4_find_extent:939: inode #2: comm syz.1.180: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 42.274763][ T4215] EXT4-fs (loop1): Remounting filesystem read-only [ 42.292495][ T4206] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.307933][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.436378][ T4231] netlink: 256 bytes leftover after parsing attributes in process `syz.0.179'. [ 42.447307][ T4206] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.033787][ T4241] netlink: 4 bytes leftover after parsing attributes in process `syz.1.187'. [ 43.075218][ T4245] SELinux: policydb version 780220106 does not match my version range 15-34 [ 43.085110][ T4245] SELinux: failed to load policy [ 43.124242][ T4249] 9pnet: Could not find request transport: fd0xffffffffffffffff [ 43.139637][ T4252] loop1: detected capacity change from 0 to 2048 [ 43.194487][ T4252] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.214831][ T4252] EXT4-fs error (device loop1): ext4_find_extent:939: inode #2: comm syz.1.192: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 43.234259][ T4257] loop0: detected capacity change from 0 to 2048 [ 43.257210][ T4257] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.275650][ T4252] EXT4-fs (loop1): Remounting filesystem read-only [ 43.296861][ T4267] netlink: 4 bytes leftover after parsing attributes in process `syz.3.196'. [ 43.309901][ T4257] EXT4-fs error (device loop0): ext4_find_extent:939: inode #2: comm syz.0.193: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 43.327047][ T4257] EXT4-fs (loop0): Remounting filesystem read-only [ 43.352984][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.363604][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.506473][ T4290] netlink: 'syz.3.206': attribute type 4 has an invalid length. [ 43.603548][ T4298] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2 sclass=netlink_route_socket pid=4298 comm=syz.2.208 [ 43.622058][ T4301] netlink: 4626 bytes leftover after parsing attributes in process `syz.3.209'. [ 43.631736][ T4300] netlink: 4626 bytes leftover after parsing attributes in process `syz.3.209'. [ 43.794412][ T4314] loop1: detected capacity change from 0 to 512 [ 43.806553][ T4314] EXT4-fs error (device loop1): ext4_orphan_get:1393: inode #15: comm syz.1.214: iget: bad extended attribute block 1 [ 43.852402][ T4314] EXT4-fs error (device loop1): ext4_orphan_get:1398: comm syz.1.214: couldn't read orphan inode 15 (err -117) [ 43.876955][ T4314] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.891927][ T4314] EXT4-fs error (device loop1): ext4_map_blocks:780: inode #2: block 13: comm syz.1.214: lblock 0 mapped to illegal pblock 13 (length 1) [ 43.911829][ T4323] netlink: 4 bytes leftover after parsing attributes in process `syz.3.217'. [ 43.953554][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.027009][ T4335] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2 sclass=netlink_route_socket pid=4335 comm=syz.1.220 [ 44.378616][ T4358] netlink: 4 bytes leftover after parsing attributes in process `syz.2.230'. [ 44.434446][ T4365] loop2: detected capacity change from 0 to 2048 [ 44.466994][ T4365] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.483479][ T4365] EXT4-fs error (device loop2): ext4_find_extent:939: inode #2: comm syz.2.233: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 44.503174][ T4365] EXT4-fs (loop2): Remounting filesystem read-only [ 44.550080][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.584109][ T4379] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2 sclass=netlink_route_socket pid=4379 comm=syz.1.235 [ 44.957834][ T4400] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 44.994171][ T29] kauditd_printk_skb: 335 callbacks suppressed [ 44.994187][ T29] audit: type=1400 audit(1750649129.695:1327): avc: denied { unmount } for pid=3309 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 45.047141][ T4404] syzkaller0: entered allmulticast mode [ 45.054847][ T4402] syzkaller0: left allmulticast mode [ 45.088076][ T4408] SELinux: policydb version 780220106 does not match my version range 15-34 [ 45.097772][ T4408] SELinux: failed to load policy [ 45.182820][ T29] audit: type=1326 audit(1750649129.885:1328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4414 comm="syz.1.249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f123765e929 code=0x7ffc0000 [ 45.206365][ T29] audit: type=1326 audit(1750649129.885:1329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4414 comm="syz.1.249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f123765e929 code=0x7ffc0000 [ 45.229786][ T29] audit: type=1326 audit(1750649129.885:1330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4414 comm="syz.1.249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f123765e929 code=0x7ffc0000 [ 45.253095][ T29] audit: type=1326 audit(1750649129.885:1331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4414 comm="syz.1.249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f123765e929 code=0x7ffc0000 [ 45.253441][ T4415] loop1: detected capacity change from 0 to 2048 [ 45.279819][ T29] audit: type=1326 audit(1750649129.885:1332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4414 comm="syz.1.249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f123765e929 code=0x7ffc0000 [ 45.306162][ T29] audit: type=1326 audit(1750649129.945:1333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4414 comm="syz.1.249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f123765e929 code=0x7ffc0000 [ 45.329528][ T29] audit: type=1326 audit(1750649129.945:1334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4414 comm="syz.1.249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f123765e963 code=0x7ffc0000 [ 45.352706][ T29] audit: type=1326 audit(1750649129.945:1335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4414 comm="syz.1.249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f123765d3df code=0x7ffc0000 [ 45.375950][ T29] audit: type=1326 audit(1750649129.955:1336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4414 comm="syz.1.249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f123765e9b7 code=0x7ffc0000 [ 45.407956][ T4415] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.430751][ T4415] EXT4-fs error (device loop1): ext4_find_extent:939: inode #2: comm syz.1.249: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 45.447285][ T4415] EXT4-fs (loop1): Remounting filesystem read-only [ 45.466614][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.564141][ T4424] loop1: detected capacity change from 0 to 8192 [ 45.627855][ T4429] loop2: detected capacity change from 0 to 2048 [ 45.683391][ T4429] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.027998][ T4429] EXT4-fs error (device loop2): ext4_find_extent:939: inode #2: comm syz.2.253: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 46.087557][ T4429] EXT4-fs (loop2): Remounting filesystem read-only [ 46.194771][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.285118][ T4435] __nla_validate_parse: 1 callbacks suppressed [ 46.285133][ T4435] netlink: 12 bytes leftover after parsing attributes in process `syz.2.254'. [ 46.307824][ T4435] loop2: detected capacity change from 0 to 128 [ 46.320280][ T4435] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 46.337701][ T4435] ext4 filesystem being mounted at /55/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 46.533786][ T4445] netlink: 4 bytes leftover after parsing attributes in process `syz.1.257'. [ 46.615615][ T4206] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.627804][ T4206] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.639546][ T4206] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.651711][ T3314] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 46.665336][ T4206] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.705014][ T4453] loop1: detected capacity change from 0 to 2048 [ 46.724832][ T4453] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.737168][ T4457] loop5: detected capacity change from 0 to 2048 [ 46.758542][ T4453] EXT4-fs error (device loop1): ext4_find_extent:939: inode #2: comm syz.1.261: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 46.768446][ T4457] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.776300][ T4453] EXT4-fs (loop1): Remounting filesystem read-only [ 46.808026][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.904322][ T3700] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.068907][ T4480] netlink: 4 bytes leftover after parsing attributes in process `syz.5.270'. [ 47.182363][ T4487] loop5: detected capacity change from 0 to 2048 [ 47.201985][ T4487] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.219285][ T4487] EXT4-fs error (device loop5): ext4_find_extent:939: inode #2: comm syz.5.273: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 47.235871][ T4487] EXT4-fs (loop5): Remounting filesystem read-only [ 47.252443][ T3700] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.399660][ T4509] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2 sclass=netlink_route_socket pid=4509 comm=syz.5.288 [ 47.455531][ T4511] FAULT_INJECTION: forcing a failure. [ 47.455531][ T4511] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 47.468707][ T4511] CPU: 0 UID: 0 PID: 4511 Comm: syz.5.281 Not tainted 6.16.0-rc2-syzkaller-00378-gb67ec639010f #0 PREEMPT(voluntary) [ 47.468732][ T4511] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 47.468743][ T4511] Call Trace: [ 47.468750][ T4511] [ 47.468757][ T4511] __dump_stack+0x1d/0x30 [ 47.468797][ T4511] dump_stack_lvl+0xe8/0x140 [ 47.468813][ T4511] dump_stack+0x15/0x1b [ 47.468828][ T4511] should_fail_ex+0x265/0x280 [ 47.468853][ T4511] should_fail+0xb/0x20 [ 47.468887][ T4511] should_fail_usercopy+0x1a/0x20 [ 47.468913][ T4511] _copy_to_user+0x20/0xa0 [ 47.468932][ T4511] simple_read_from_buffer+0xb5/0x130 [ 47.468960][ T4511] proc_fail_nth_read+0x100/0x140 [ 47.469043][ T4511] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 47.469080][ T4511] vfs_read+0x1a0/0x6f0 [ 47.469104][ T4511] ? __rcu_read_unlock+0x4f/0x70 [ 47.469122][ T4511] ? __fget_files+0x184/0x1c0 [ 47.469218][ T4511] ksys_read+0xda/0x1a0 [ 47.469245][ T4511] __x64_sys_read+0x40/0x50 [ 47.469289][ T4511] x64_sys_call+0x2d77/0x2fb0 [ 47.469307][ T4511] do_syscall_64+0xd2/0x200 [ 47.469324][ T4511] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 47.469346][ T4511] ? clear_bhb_loop+0x40/0x90 [ 47.469373][ T4511] ? clear_bhb_loop+0x40/0x90 [ 47.469459][ T4511] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 47.469477][ T4511] RIP: 0033:0x7fa3fa73d33c [ 47.469491][ T4511] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 47.469506][ T4511] RSP: 002b:00007fa3f8da7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 47.469524][ T4511] RAX: ffffffffffffffda RBX: 00007fa3fa965fa0 RCX: 00007fa3fa73d33c [ 47.469535][ T4511] RDX: 000000000000000f RSI: 00007fa3f8da70a0 RDI: 0000000000000004 [ 47.469572][ T4511] RBP: 00007fa3f8da7090 R08: 0000000000000000 R09: 0000000000000000 [ 47.469583][ T4511] R10: 000000000000003e R11: 0000000000000246 R12: 0000000000000001 [ 47.469593][ T4511] R13: 0000000000000000 R14: 00007fa3fa965fa0 R15: 00007ffd5cca6968 [ 47.469609][ T4511] [ 47.924550][ T4537] loop2: detected capacity change from 0 to 2048 [ 47.944779][ T4537] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.001669][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.084464][ T4552] netlink: 4 bytes leftover after parsing attributes in process `syz.2.296'. [ 48.109094][ T4555] 9pnet: Could not find request transport: fd0xffffffffffffffff [ 48.193015][ T4563] FAULT_INJECTION: forcing a failure. [ 48.193015][ T4563] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 48.206461][ T4563] CPU: 0 UID: 0 PID: 4563 Comm: syz.0.303 Not tainted 6.16.0-rc2-syzkaller-00378-gb67ec639010f #0 PREEMPT(voluntary) [ 48.206487][ T4563] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 48.206498][ T4563] Call Trace: [ 48.206504][ T4563] [ 48.206512][ T4563] __dump_stack+0x1d/0x30 [ 48.206532][ T4563] dump_stack_lvl+0xe8/0x140 [ 48.206553][ T4563] dump_stack+0x15/0x1b [ 48.206579][ T4563] should_fail_ex+0x265/0x280 [ 48.206609][ T4563] should_fail+0xb/0x20 [ 48.206635][ T4563] should_fail_usercopy+0x1a/0x20 [ 48.206684][ T4563] _copy_to_user+0x20/0xa0 [ 48.206723][ T4563] bpf_test_finish+0x106/0x500 [ 48.206751][ T4563] bpf_prog_test_run_xdp+0x578/0x910 [ 48.206779][ T4563] ? __rcu_read_unlock+0x4f/0x70 [ 48.206801][ T4563] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 48.206893][ T4563] bpf_prog_test_run+0x22a/0x390 [ 48.206927][ T4563] __sys_bpf+0x3dc/0x790 [ 48.206957][ T4563] __x64_sys_bpf+0x41/0x50 [ 48.206980][ T4563] x64_sys_call+0x2478/0x2fb0 [ 48.206998][ T4563] do_syscall_64+0xd2/0x200 [ 48.207014][ T4563] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 48.207066][ T4563] ? clear_bhb_loop+0x40/0x90 [ 48.207084][ T4563] ? clear_bhb_loop+0x40/0x90 [ 48.207162][ T4563] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 48.207223][ T4563] RIP: 0033:0x7efd4be5e929 [ 48.207277][ T4563] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 48.207335][ T4563] RSP: 002b:00007efd4a4c7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 48.207353][ T4563] RAX: ffffffffffffffda RBX: 00007efd4c085fa0 RCX: 00007efd4be5e929 [ 48.207364][ T4563] RDX: 0000000000000050 RSI: 0000200000000340 RDI: 000000000000000a [ 48.207375][ T4563] RBP: 00007efd4a4c7090 R08: 0000000000000000 R09: 0000000000000000 [ 48.207385][ T4563] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 48.207396][ T4563] R13: 0000000000000000 R14: 00007efd4c085fa0 R15: 00007fff38fd0b18 [ 48.207412][ T4563] [ 48.453654][ T4567] loop0: detected capacity change from 0 to 2048 [ 48.482588][ T4567] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.664177][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.806276][ T4595] netlink: 4 bytes leftover after parsing attributes in process `syz.2.310'. [ 48.820597][ T4600] 9pnet: Could not find request transport: fd0xffffffffffffffff [ 48.974193][ T4629] loop1: detected capacity change from 0 to 512 [ 48.991022][ T4629] EXT4-fs error (device loop1): ext4_orphan_get:1393: inode #15: comm syz.1.320: iget: bad extended attribute block 1 [ 49.011400][ T4629] EXT4-fs error (device loop1): ext4_orphan_get:1398: comm syz.1.320: couldn't read orphan inode 15 (err -117) [ 49.048401][ T4629] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.095678][ T4629] EXT4-fs error (device loop1): ext4_map_blocks:780: inode #2: block 13: comm syz.1.320: lblock 0 mapped to illegal pblock 13 (length 1) [ 49.144734][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.214019][ T4638] loop1: detected capacity change from 0 to 512 [ 49.230502][ T4638] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 49.252284][ T4638] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.298940][ T4647] loop0: detected capacity change from 0 to 2048 [ 49.311905][ T4638] ext4 filesystem being mounted at /74/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 49.338642][ T4638] EXT4-fs error (device loop1): ext4_xattr_block_get:593: inode #15: comm syz.1.323: corrupted xattr block 19: overlapping e_value [ 49.354023][ T4645] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 49.371945][ T4647] EXT4-fs (loop0): failed to initialize system zone (-117) [ 49.391509][ T4647] EXT4-fs (loop0): mount failed [ 49.448227][ T4638] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 49.522686][ T4638] EXT4-fs error (device loop1): ext4_xattr_block_get:593: inode #15: comm syz.1.323: corrupted xattr block 19: overlapping e_value [ 49.707684][ T4638] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 49.806332][ T4638] EXT4-fs error (device loop1): ext4_xattr_block_get:593: inode #15: comm syz.1.323: corrupted xattr block 19: overlapping e_value [ 49.904242][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.038448][ T4684] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 50.102679][ T4684] netlink: 4 bytes leftover after parsing attributes in process `syz.2.331'. [ 50.150976][ T4684] netlink: 4 bytes leftover after parsing attributes in process `syz.2.331'. [ 50.174279][ T4695] loop1: detected capacity change from 0 to 512 [ 50.192797][ T4695] EXT4-fs error (device loop1): ext4_orphan_get:1393: inode #15: comm syz.1.334: iget: bad extended attribute block 1 [ 50.307362][ T4695] EXT4-fs error (device loop1): ext4_orphan_get:1398: comm syz.1.334: couldn't read orphan inode 15 (err -117) [ 50.366401][ T4695] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.392826][ T4695] EXT4-fs error (device loop1): ext4_map_blocks:780: inode #2: block 13: comm syz.1.334: lblock 0 mapped to illegal pblock 13 (length 1) [ 50.451405][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.472014][ T29] kauditd_printk_skb: 193 callbacks suppressed [ 50.472029][ T29] audit: type=1326 audit(1750649135.175:1530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4720 comm="syz.3.336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a2489e929 code=0x7ffc0000 [ 50.501732][ T29] audit: type=1326 audit(1750649135.175:1531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4720 comm="syz.3.336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f9a2489e929 code=0x7ffc0000 [ 50.525028][ T29] audit: type=1326 audit(1750649135.175:1532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4720 comm="syz.3.336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a2489e929 code=0x7ffc0000 [ 50.548453][ T29] audit: type=1326 audit(1750649135.175:1533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4720 comm="syz.3.336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f9a2489e929 code=0x7ffc0000 [ 50.571871][ T29] audit: type=1326 audit(1750649135.175:1534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4720 comm="syz.3.336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f9a2489e963 code=0x7ffc0000 [ 50.645406][ T29] audit: type=1326 audit(1750649135.305:1535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4720 comm="syz.3.336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f9a2489d3df code=0x7ffc0000 [ 50.668818][ T29] audit: type=1326 audit(1750649135.315:1536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4720 comm="syz.3.336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f9a2489e9b7 code=0x7ffc0000 [ 50.692248][ T29] audit: type=1326 audit(1750649135.315:1537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4720 comm="syz.3.336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9a2489d290 code=0x7ffc0000 [ 50.715824][ T29] audit: type=1326 audit(1750649135.315:1538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4720 comm="syz.3.336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f9a2489d58a code=0x7ffc0000 [ 50.718568][ T4731] loop1: detected capacity change from 0 to 2048 [ 50.739042][ T29] audit: type=1326 audit(1750649135.315:1539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4720 comm="syz.3.336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a2489e929 code=0x7ffc0000 [ 50.814169][ T4731] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.846902][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.852543][ T4750] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2 sclass=netlink_route_socket pid=4750 comm=syz.0.341 [ 50.953826][ T4761] 9pnet_fd: Insufficient options for proto=fd [ 50.977505][ T4756] loop1: detected capacity change from 0 to 2048 [ 51.013266][ T4756] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.117530][ T4777] 9pnet: Could not find request transport: fd0xffffffffffffffff [ 51.248664][ T4795] loop2: detected capacity change from 0 to 2048 [ 51.296106][ T4795] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.398010][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.505067][ T4823] loop0: detected capacity change from 0 to 2048 [ 51.540082][ T4823] EXT4-fs error (device loop0): ext4_find_extent:939: inode #2: comm syz.0.353: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 51.585923][ T4823] EXT4-fs (loop0): Remounting filesystem read-only [ 51.622666][ T4832] loop2: detected capacity change from 0 to 2048 [ 51.633280][ T4834] loop1: detected capacity change from 0 to 2048 [ 51.671145][ T4834] EXT4-fs error (device loop1): ext4_find_extent:939: inode #2: comm syz.1.355: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 51.696005][ T4834] EXT4-fs (loop1): Remounting filesystem read-only [ 51.716599][ T4842] 9pnet_fd: Insufficient options for proto=fd [ 51.742837][ T4844] loop1: detected capacity change from 0 to 2048 [ 51.766007][ T4846] loop0: detected capacity change from 0 to 512 [ 51.804334][ T4846] EXT4-fs error (device loop0): ext4_orphan_get:1393: inode #15: comm syz.0.359: iget: bad extended attribute block 1 [ 51.824719][ T4853] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2 sclass=netlink_route_socket pid=4853 comm=syz.3.360 [ 51.828645][ T4844] EXT4-fs error (device loop1): ext4_find_extent:939: inode #2: comm syz.1.358: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 51.837289][ T4846] EXT4-fs error (device loop0): ext4_orphan_get:1398: comm syz.0.359: couldn't read orphan inode 15 (err -117) [ 51.865841][ T4844] EXT4-fs (loop1): Remounting filesystem read-only [ 51.906203][ T4846] EXT4-fs error (device loop0): ext4_map_blocks:780: inode #2: block 13: comm syz.0.359: lblock 0 mapped to illegal pblock 13 (length 1) [ 51.975648][ T4859] loop0: detected capacity change from 0 to 2048 [ 52.068712][ T4863] netlink: 4 bytes leftover after parsing attributes in process `syz.1.366'. [ 52.115073][ T4873] loop1: detected capacity change from 0 to 2048 [ 52.144090][ T4879] loop2: detected capacity change from 0 to 2048 [ 52.159364][ T4871] 9pnet_fd: Insufficient options for proto=fd [ 52.185752][ T4879] EXT4-fs error (device loop2): ext4_find_extent:939: inode #2: comm syz.2.371: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 52.187206][ T4873] EXT4-fs error (device loop1): ext4_find_extent:939: inode #2: comm syz.1.368: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 52.220623][ T4879] EXT4-fs (loop2): Remounting filesystem read-only [ 52.229751][ T4873] EXT4-fs (loop1): Remounting filesystem read-only [ 52.367743][ T4902] netlink: 4 bytes leftover after parsing attributes in process `syz.1.379'. [ 52.376640][ T4903] loop2: detected capacity change from 0 to 512 [ 52.386270][ T4903] EXT4-fs error (device loop2): ext4_orphan_get:1393: inode #15: comm syz.2.380: iget: bad extended attribute block 1 [ 52.411203][ T4903] EXT4-fs error (device loop2): ext4_orphan_get:1398: comm syz.2.380: couldn't read orphan inode 15 (err -117) [ 52.429585][ T4903] EXT4-fs error (device loop2): ext4_map_blocks:780: inode #2: block 13: comm syz.2.380: lblock 0 mapped to illegal pblock 13 (length 1) [ 52.448843][ T4912] SELinux: policydb version 780220106 does not match my version range 15-34 [ 52.458024][ T4912] SELinux: failed to load policy [ 52.556503][ T4920] loop1: detected capacity change from 0 to 2048 [ 52.583579][ T4920] EXT4-fs error (device loop1): ext4_find_extent:939: inode #2: comm syz.1.387: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 52.590691][ T4923] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2 sclass=netlink_route_socket pid=4923 comm=syz.2.386 [ 52.600947][ T4920] EXT4-fs (loop1): Remounting filesystem read-only [ 52.659180][ T4925] loop1: detected capacity change from 0 to 2048 [ 52.684831][ T4925] EXT4-fs error (device loop1): ext4_find_extent:939: inode #2: comm syz.1.388: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 52.702105][ T4925] EXT4-fs (loop1): Remounting filesystem read-only [ 52.748969][ T4933] netlink: 4 bytes leftover after parsing attributes in process `syz.1.391'. [ 52.839536][ T4945] loop2: detected capacity change from 0 to 512 [ 52.848850][ T4945] EXT4-fs error (device loop2): ext4_orphan_get:1393: inode #15: comm syz.2.397: iget: bad extended attribute block 1 [ 52.861752][ T4945] EXT4-fs error (device loop2): ext4_orphan_get:1398: comm syz.2.397: couldn't read orphan inode 15 (err -117) [ 52.875487][ T4945] EXT4-fs error (device loop2): ext4_map_blocks:780: inode #2: block 13: comm syz.2.397: lblock 0 mapped to illegal pblock 13 (length 1) [ 52.917284][ T4948] loop2: detected capacity change from 0 to 2048 [ 52.933859][ T4948] EXT4-fs error (device loop2): ext4_find_extent:939: inode #2: comm syz.2.398: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 52.950835][ T4948] EXT4-fs (loop2): Remounting filesystem read-only [ 52.982198][ T4952] loop2: detected capacity change from 0 to 2048 [ 53.013271][ T4952] EXT4-fs error (device loop2): ext4_find_extent:939: inode #2: comm syz.2.399: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 53.029840][ T4952] EXT4-fs (loop2): Remounting filesystem read-only [ 53.073966][ T4958] loop2: detected capacity change from 0 to 2048 [ 53.094113][ T4958] EXT4-fs error (device loop2): ext4_find_extent:939: inode #2: comm syz.2.401: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 53.111910][ T4958] EXT4-fs (loop2): Remounting filesystem read-only [ 53.231834][ T4980] netlink: 4 bytes leftover after parsing attributes in process `syz.2.405'. [ 53.328181][ T4987] Zero length message leads to an empty skb [ 53.451675][ T4999] loop5: detected capacity change from 0 to 2048 [ 53.477479][ T4999] EXT4-fs error (device loop5): ext4_find_extent:939: inode #2: comm syz.5.418: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 53.496785][ T4999] EXT4-fs (loop5): Remounting filesystem read-only [ 53.735143][ T5023] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2 sclass=netlink_route_socket pid=5023 comm=syz.3.428 [ 54.162180][ T5028] loop2: detected capacity change from 0 to 2048 [ 54.174257][ T5028] EXT4-fs error (device loop2): ext4_find_extent:939: inode #2: comm syz.2.430: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 54.191017][ T5028] EXT4-fs (loop2): Remounting filesystem read-only [ 54.356128][ T5051] netlink: 56 bytes leftover after parsing attributes in process `syz.0.440'. [ 54.479082][ T5066] loop5: detected capacity change from 0 to 2048 [ 54.508495][ T5066] EXT4-fs error (device loop5): ext4_find_extent:939: inode #2: comm syz.5.448: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 54.554856][ T5072] 9pnet_fd: Insufficient options for proto=fd [ 54.582292][ T5066] EXT4-fs (loop5): Remounting filesystem read-only [ 54.592798][ T5051] loop0: detected capacity change from 0 to 32768 [ 54.631415][ T5079] 9pnet_fd: Insufficient options for proto=fd [ 54.655185][ T5051] loop0: p1 p2 p3 < > [ 54.659401][ T5051] loop0: p1 size 242222080 extends beyond EOD, truncated [ 54.671408][ T5051] loop0: p2 start 4294967295 is beyond EOD, truncated [ 55.256961][ T5115] loop2: detected capacity change from 0 to 2048 [ 55.267291][ T5117] netlink: 'syz.1.470': attribute type 1 has an invalid length. [ 55.275274][ T5117] netlink: 224 bytes leftover after parsing attributes in process `syz.1.470'. [ 55.311607][ T5115] EXT4-fs error (device loop2): ext4_find_extent:939: inode #2: comm syz.2.469: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 55.317315][ T5125] loop0: detected capacity change from 0 to 2048 [ 55.337785][ T5115] EXT4-fs (loop2): Remounting filesystem read-only [ 55.349382][ T5125] EXT4-fs error (device loop0): ext4_find_extent:939: inode #2: comm syz.0.471: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 55.374756][ T5125] EXT4-fs (loop0): Remounting filesystem read-only [ 55.498544][ T5142] loop2: detected capacity change from 0 to 512 [ 55.510455][ T5142] EXT4-fs error (device loop2): ext4_orphan_get:1393: inode #15: comm syz.2.478: iget: bad extended attribute block 1 [ 55.527776][ T5142] EXT4-fs error (device loop2): ext4_orphan_get:1398: comm syz.2.478: couldn't read orphan inode 15 (err -117) [ 55.543603][ T5142] EXT4-fs error (device loop2): ext4_map_blocks:780: inode #2: block 13: comm syz.2.478: lblock 0 mapped to illegal pblock 13 (length 1) [ 55.588804][ T5145] netlink: 56 bytes leftover after parsing attributes in process `syz.2.479'. [ 55.709006][ T29] kauditd_printk_skb: 641 callbacks suppressed [ 55.709022][ T29] audit: type=1326 audit(1750649140.405:2181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5147 comm="syz.0.480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd4be5e929 code=0x7ffc0000 [ 55.781404][ T29] audit: type=1326 audit(1750649140.405:2182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5147 comm="syz.0.480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd4be5e929 code=0x7ffc0000 [ 55.804934][ T29] audit: type=1326 audit(1750649140.405:2183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5147 comm="syz.0.480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7efd4be5e929 code=0x7ffc0000 [ 55.828615][ T29] audit: type=1326 audit(1750649140.405:2184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5147 comm="syz.0.480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd4be5e929 code=0x7ffc0000 [ 55.852023][ T29] audit: type=1326 audit(1750649140.405:2185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5147 comm="syz.0.480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=129 compat=0 ip=0x7efd4be5e929 code=0x7ffc0000 [ 55.875400][ T29] audit: type=1326 audit(1750649140.405:2186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5147 comm="syz.0.480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7efd4be558e7 code=0x7ffc0000 [ 55.875573][ T5145] loop2: detected capacity change from 0 to 32768 [ 55.898628][ T29] audit: type=1326 audit(1750649140.405:2187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5147 comm="syz.0.480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7efd4bdfab19 code=0x7ffc0000 [ 55.898658][ T29] audit: type=1326 audit(1750649140.405:2188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5147 comm="syz.0.480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd4be5e929 code=0x7ffc0000 [ 55.952978][ T5158] 9pnet_fd: Insufficient options for proto=fd [ 56.051538][ T5145] loop2: p1 p2 p3 < > [ 56.055781][ T5145] loop2: p1 size 242222080 extends beyond EOD, truncated [ 56.064727][ T5145] loop2: p2 start 4294967295 is beyond EOD, truncated [ 56.071893][ T5167] loop5: detected capacity change from 0 to 1024 [ 56.079190][ T5167] EXT4-fs: Ignoring removed i_version option [ 56.079653][ T2996] loop2: p1 p2 p3 < > [ 56.089715][ T2996] loop2: p1 size 242222080 extends beyond EOD, truncated [ 56.090045][ T5167] EXT4-fs: Ignoring removed nobh option [ 56.097330][ T2996] loop2: p2 start 4294967295 is beyond EOD, truncated [ 56.135461][ T29] audit: type=1400 audit(1750649140.835:2189): avc: denied { rename } for pid=5166 comm="syz.5.487" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop5" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 56.178903][ T5167] EXT4-fs warning (device loop5): ext4_rename_delete:3726: inode #12: comm syz.5.487: Deleting old file: nlink 2, error=-2 [ 56.258469][ T29] audit: type=1326 audit(1750649140.955:2190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5179 comm="syz.5.489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3fa73e929 code=0x7ffc0000 [ 56.311683][ T5183] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2 sclass=netlink_route_socket pid=5183 comm=syz.0.500 [ 56.325284][ T5180] loop5: detected capacity change from 0 to 2048 [ 56.380750][ T5180] EXT4-fs error (device loop5): ext4_find_extent:939: inode #2: comm syz.5.489: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 56.408774][ T5180] EXT4-fs (loop5): Remounting filesystem read-only [ 56.476639][ T5190] netlink: 4 bytes leftover after parsing attributes in process `syz.2.494'. [ 56.553522][ T5200] loop2: detected capacity change from 0 to 2048 [ 56.599486][ T5200] EXT4-fs error (device loop2): ext4_find_extent:939: inode #2: comm syz.2.496: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 56.617190][ T5200] EXT4-fs (loop2): Remounting filesystem read-only [ 56.665715][ T5208] loop2: detected capacity change from 0 to 2048 [ 56.688951][ T5208] EXT4-fs error (device loop2): ext4_find_extent:939: inode #2: comm syz.2.501: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 56.716069][ T5208] EXT4-fs (loop2): Remounting filesystem read-only [ 56.780614][ T5218] loop2: detected capacity change from 0 to 2048 [ 56.795239][ T5218] EXT4-fs error (device loop2): ext4_find_extent:939: inode #2: comm syz.2.505: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 56.812255][ T5218] EXT4-fs (loop2): Remounting filesystem read-only [ 56.881540][ T5227] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2 sclass=netlink_route_socket pid=5227 comm=syz.0.506 [ 56.984013][ T5237] netlink: 'syz.0.513': attribute type 1 has an invalid length. [ 56.991976][ T5237] netlink: 224 bytes leftover after parsing attributes in process `syz.0.513'. [ 57.027113][ T5247] netlink: 4 bytes leftover after parsing attributes in process `syz.0.516'. [ 57.140815][ T5261] loop0: detected capacity change from 0 to 2048 [ 57.156863][ T5261] EXT4-fs error (device loop0): ext4_find_extent:939: inode #2: comm syz.0.523: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 57.174262][ T5261] EXT4-fs (loop0): Remounting filesystem read-only [ 57.219387][ T5271] netlink: 4 bytes leftover after parsing attributes in process `syz.0.527'. [ 57.398892][ T5297] netlink: 4 bytes leftover after parsing attributes in process `syz.5.540'. [ 57.509337][ T5307] netlink: 'syz.0.545': attribute type 1 has an invalid length. [ 57.517063][ T5307] netlink: 224 bytes leftover after parsing attributes in process `syz.0.545'. [ 57.566215][ T5318] loop5: detected capacity change from 0 to 2048 [ 57.587369][ T5325] netlink: 4 bytes leftover after parsing attributes in process `syz.1.553'. [ 57.719479][ T5340] loop0: detected capacity change from 0 to 2048 [ 57.735253][ T5351] netlink: 12 bytes leftover after parsing attributes in process `syz.3.561'. [ 57.777405][ T5340] EXT4-fs error (device loop0): ext4_find_extent:939: inode #2: comm syz.0.556: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 57.808887][ T5340] EXT4-fs (loop0): Remounting filesystem read-only [ 58.067620][ T5393] netlink: 'syz.5.580': attribute type 1 has an invalid length. [ 58.075391][ T5393] netlink: 224 bytes leftover after parsing attributes in process `syz.5.580'. [ 58.185062][ T5410] netlink: 'syz.2.586': attribute type 1 has an invalid length. [ 58.192785][ T5410] netlink: 224 bytes leftover after parsing attributes in process `syz.2.586'. [ 58.242750][ T5420] loop2: detected capacity change from 0 to 2048 [ 58.263309][ T5420] EXT4-fs error (device loop2): ext4_find_extent:939: inode #2: comm syz.2.591: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 58.286482][ T5420] EXT4-fs (loop2): Remounting filesystem read-only [ 58.380410][ T5433] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2 sclass=netlink_route_socket pid=5433 comm=syz.3.595 [ 58.667511][ T5457] loop2: detected capacity change from 0 to 2048 [ 58.689600][ T5457] EXT4-fs error (device loop2): ext4_find_extent:939: inode #2: comm syz.2.616: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 58.706296][ T5457] EXT4-fs (loop2): Remounting filesystem read-only [ 58.750613][ T5466] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2 sclass=netlink_route_socket pid=5466 comm=syz.3.608 [ 58.940673][ T5479] loop1: detected capacity change from 0 to 2048 [ 58.983072][ T5479] EXT4-fs error (device loop1): ext4_find_extent:939: inode #2: comm syz.1.615: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 59.028650][ T5479] EXT4-fs (loop1): Remounting filesystem read-only [ 59.127972][ T5503] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2 sclass=netlink_route_socket pid=5503 comm=syz.1.624 [ 59.412468][ T5537] loop5: detected capacity change from 0 to 764 [ 59.445408][ T5537] Symlink component flag not implemented [ 59.466562][ T5537] Symlink component flag not implemented (116) [ 59.518390][ T5544] loop0: detected capacity change from 0 to 764 [ 59.531776][ T5544] Symlink component flag not implemented [ 59.537543][ T5544] Symlink component flag not implemented (116) [ 59.617151][ T5555] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2 sclass=netlink_route_socket pid=5555 comm=syz.5.649 [ 59.679608][ T5559] loop0: detected capacity change from 0 to 2048 [ 59.713541][ T5563] loop1: detected capacity change from 0 to 764 [ 59.715318][ T5559] EXT4-fs error (device loop0): ext4_find_extent:939: inode #2: comm syz.0.653: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 59.759597][ T5563] Symlink component flag not implemented [ 59.773791][ T5563] Symlink component flag not implemented (116) [ 59.785840][ T5559] EXT4-fs (loop0): Remounting filesystem read-only [ 59.836613][ T5575] loop1: detected capacity change from 0 to 764 [ 59.857520][ T5575] Symlink component flag not implemented [ 59.871801][ T5575] Symlink component flag not implemented (116) [ 59.901254][ T5583] FAULT_INJECTION: forcing a failure. [ 59.901254][ T5583] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 59.914444][ T5583] CPU: 1 UID: 0 PID: 5583 Comm: syz.2.663 Not tainted 6.16.0-rc2-syzkaller-00378-gb67ec639010f #0 PREEMPT(voluntary) [ 59.914474][ T5583] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 59.914488][ T5583] Call Trace: [ 59.914495][ T5583] [ 59.914503][ T5583] __dump_stack+0x1d/0x30 [ 59.914580][ T5583] dump_stack_lvl+0xe8/0x140 [ 59.914598][ T5583] dump_stack+0x15/0x1b [ 59.914613][ T5583] should_fail_ex+0x265/0x280 [ 59.914642][ T5583] should_fail+0xb/0x20 [ 59.914740][ T5583] should_fail_usercopy+0x1a/0x20 [ 59.914855][ T5583] _copy_from_user+0x1c/0xb0 [ 59.914908][ T5583] __sys_bpf+0x178/0x790 [ 59.914947][ T5583] __x64_sys_bpf+0x41/0x50 [ 59.914975][ T5583] x64_sys_call+0x2478/0x2fb0 [ 59.915015][ T5583] do_syscall_64+0xd2/0x200 [ 59.915089][ T5583] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 59.915114][ T5583] ? clear_bhb_loop+0x40/0x90 [ 59.915138][ T5583] ? clear_bhb_loop+0x40/0x90 [ 59.915159][ T5583] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 59.915190][ T5583] RIP: 0033:0x7f467310e929 [ 59.915205][ T5583] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 59.915230][ T5583] RSP: 002b:00007f4671777038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 59.915273][ T5583] RAX: ffffffffffffffda RBX: 00007f4673335fa0 RCX: 00007f467310e929 [ 59.915289][ T5583] RDX: 0000000000000020 RSI: 0000200000000080 RDI: 0000000000000003 [ 59.915301][ T5583] RBP: 00007f4671777090 R08: 0000000000000000 R09: 0000000000000000 [ 59.915312][ T5583] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 59.915324][ T5583] R13: 0000000000000000 R14: 00007f4673335fa0 R15: 00007ffd504c4f08 [ 59.915344][ T5583] [ 60.365437][ T5616] loop1: detected capacity change from 0 to 128 [ 60.413260][ T5618] loop2: detected capacity change from 0 to 2048 [ 60.481084][ T5616] ext4 filesystem being mounted at /146/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 60.481161][ T5618] EXT4-fs error (device loop2): ext4_find_extent:939: inode #2: comm syz.2.678: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 60.526865][ T5618] EXT4-fs (loop2): Remounting filesystem read-only [ 60.556891][ T5639] netlink: 4 bytes leftover after parsing attributes in process `syz.3.686'. [ 60.625716][ T5651] FAULT_INJECTION: forcing a failure. [ 60.625716][ T5651] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 60.638871][ T5651] CPU: 0 UID: 0 PID: 5651 Comm: syz.5.691 Not tainted 6.16.0-rc2-syzkaller-00378-gb67ec639010f #0 PREEMPT(voluntary) [ 60.638900][ T5651] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 60.638913][ T5651] Call Trace: [ 60.638920][ T5651] [ 60.638928][ T5651] __dump_stack+0x1d/0x30 [ 60.639026][ T5651] dump_stack_lvl+0xe8/0x140 [ 60.639044][ T5651] dump_stack+0x15/0x1b [ 60.639059][ T5651] should_fail_ex+0x265/0x280 [ 60.639087][ T5651] should_fail+0xb/0x20 [ 60.639165][ T5651] should_fail_usercopy+0x1a/0x20 [ 60.639198][ T5651] _copy_from_iter+0xcf/0xe40 [ 60.639230][ T5651] ? __build_skb_around+0x1a0/0x200 [ 60.639258][ T5651] ? __alloc_skb+0x223/0x320 [ 60.639396][ T5651] netlink_sendmsg+0x471/0x6b0 [ 60.639419][ T5651] ? __pfx_netlink_sendmsg+0x10/0x10 [ 60.639438][ T5651] __sock_sendmsg+0x142/0x180 [ 60.639504][ T5651] ____sys_sendmsg+0x31e/0x4e0 [ 60.639537][ T5651] ___sys_sendmsg+0x17b/0x1d0 [ 60.639637][ T5651] __x64_sys_sendmsg+0xd4/0x160 [ 60.639674][ T5651] x64_sys_call+0x2999/0x2fb0 [ 60.639699][ T5651] do_syscall_64+0xd2/0x200 [ 60.639715][ T5651] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 60.639809][ T5651] ? clear_bhb_loop+0x40/0x90 [ 60.639831][ T5651] ? clear_bhb_loop+0x40/0x90 [ 60.639850][ T5651] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 60.639908][ T5651] RIP: 0033:0x7fa3fa73e929 [ 60.639926][ T5651] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 60.639945][ T5651] RSP: 002b:00007fa3f8da7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 60.639997][ T5651] RAX: ffffffffffffffda RBX: 00007fa3fa965fa0 RCX: 00007fa3fa73e929 [ 60.640011][ T5651] RDX: 0000000000000000 RSI: 000020000000c2c0 RDI: 0000000000000003 [ 60.640033][ T5651] RBP: 00007fa3f8da7090 R08: 0000000000000000 R09: 0000000000000000 [ 60.640046][ T5651] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 60.640057][ T5651] R13: 0000000000000000 R14: 00007fa3fa965fa0 R15: 00007ffd5cca6968 [ 60.640073][ T5651] [ 60.851380][ T5652] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2 sclass=netlink_route_socket pid=5652 comm=syz.3.689 [ 60.863963][ T5649] loop0: detected capacity change from 0 to 512 [ 60.881420][ T5649] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 60.935611][ T5649] ext4 filesystem being mounted at /131/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 61.053524][ T5669] netlink: 4 bytes leftover after parsing attributes in process `syz.5.698'. [ 61.084998][ T29] kauditd_printk_skb: 556 callbacks suppressed [ 61.085016][ T29] audit: type=1400 audit(1750649145.785:2747): avc: denied { name_bind } for pid=5648 comm="syz.0.690" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 61.168354][ T29] audit: type=1326 audit(1750649145.835:2748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5672 comm="syz.2.699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f467310e929 code=0x7ffc0000 [ 61.191734][ T29] audit: type=1326 audit(1750649145.835:2749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5672 comm="syz.2.699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f467310e929 code=0x7ffc0000 [ 61.215351][ T29] audit: type=1326 audit(1750649145.835:2750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5672 comm="syz.2.699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f467310e929 code=0x7ffc0000 [ 61.238954][ T29] audit: type=1326 audit(1750649145.835:2751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5672 comm="syz.2.699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f467310e929 code=0x7ffc0000 [ 61.239048][ T5678] loop2: detected capacity change from 0 to 2048 [ 61.262315][ T29] audit: type=1326 audit(1750649145.835:2752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5672 comm="syz.2.699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f467310e929 code=0x7ffc0000 [ 61.262369][ T29] audit: type=1326 audit(1750649145.835:2753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5672 comm="syz.2.699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f467310e929 code=0x7ffc0000 [ 61.315454][ T29] audit: type=1326 audit(1750649145.835:2754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5672 comm="syz.2.699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f467310e929 code=0x7ffc0000 [ 61.328497][ T5681] batadv_slave_1: entered promiscuous mode [ 61.338802][ T29] audit: type=1326 audit(1750649145.835:2755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5672 comm="syz.2.699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f467310e929 code=0x7ffc0000 [ 61.368567][ T29] audit: type=1326 audit(1750649145.835:2756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5672 comm="syz.2.699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f467310e929 code=0x7ffc0000 [ 61.372838][ T5678] EXT4-fs error (device loop2): ext4_find_extent:939: inode #2: comm syz.2.702: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 61.411861][ T5678] EXT4-fs (loop2): Remounting filesystem read-only [ 61.471131][ T5691] batadv_slave_1: left promiscuous mode [ 61.542388][ T5701] FAULT_INJECTION: forcing a failure. [ 61.542388][ T5701] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 61.542511][ T5703] netlink: 197276 bytes leftover after parsing attributes in process `syz.0.710'. [ 61.555599][ T5701] CPU: 1 UID: 0 PID: 5701 Comm: syz.1.711 Not tainted 6.16.0-rc2-syzkaller-00378-gb67ec639010f #0 PREEMPT(voluntary) [ 61.555630][ T5701] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 61.555642][ T5701] Call Trace: [ 61.555649][ T5701] [ 61.555658][ T5701] __dump_stack+0x1d/0x30 [ 61.555681][ T5701] dump_stack_lvl+0xe8/0x140 [ 61.555714][ T5701] dump_stack+0x15/0x1b [ 61.555730][ T5701] should_fail_ex+0x265/0x280 [ 61.555758][ T5701] should_fail+0xb/0x20 [ 61.555860][ T5701] should_fail_usercopy+0x1a/0x20 [ 61.555890][ T5701] _copy_from_iter+0xcf/0xe40 [ 61.555927][ T5701] ? __build_skb_around+0x1a0/0x200 [ 61.556018][ T5701] ? __alloc_skb+0x223/0x320 [ 61.556046][ T5701] netlink_sendmsg+0x471/0x6b0 [ 61.556068][ T5701] ? __pfx_netlink_sendmsg+0x10/0x10 [ 61.556156][ T5701] __sock_sendmsg+0x142/0x180 [ 61.556207][ T5701] ____sys_sendmsg+0x31e/0x4e0 [ 61.556256][ T5701] ___sys_sendmsg+0x17b/0x1d0 [ 61.556296][ T5701] __x64_sys_sendmsg+0xd4/0x160 [ 61.556336][ T5701] x64_sys_call+0x2999/0x2fb0 [ 61.556356][ T5701] do_syscall_64+0xd2/0x200 [ 61.556374][ T5701] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 61.556398][ T5701] ? clear_bhb_loop+0x40/0x90 [ 61.556431][ T5701] ? clear_bhb_loop+0x40/0x90 [ 61.556452][ T5701] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 61.556508][ T5701] RIP: 0033:0x7f123765e929 [ 61.556524][ T5701] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 61.556541][ T5701] RSP: 002b:00007f1235cc7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 61.556562][ T5701] RAX: ffffffffffffffda RBX: 00007f1237885fa0 RCX: 00007f123765e929 [ 61.556575][ T5701] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 61.556588][ T5701] RBP: 00007f1235cc7090 R08: 0000000000000000 R09: 0000000000000000 [ 61.556600][ T5701] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 61.556637][ T5701] R13: 0000000000000000 R14: 00007f1237885fa0 R15: 00007ffd79069078 [ 61.556655][ T5701] [ 61.784875][ T5717] loop2: detected capacity change from 0 to 2048 [ 61.841752][ T5717] EXT4-fs error (device loop2): ext4_find_extent:939: inode #2: comm syz.2.718: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 61.868247][ T5717] EXT4-fs (loop2): Remounting filesystem read-only [ 61.925387][ T5718] loop1: detected capacity change from 0 to 128 [ 61.954417][ T5718] ext4 filesystem being mounted at /151/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 62.100133][ T5759] loop0: detected capacity change from 0 to 1024 [ 62.107960][ T5759] EXT4-fs: Ignoring removed nobh option [ 62.113700][ T5759] EXT4-fs: Ignoring removed bh option [ 62.120147][ T5763] loop2: detected capacity change from 0 to 764 [ 62.128157][ T5763] Symlink component flag not implemented [ 62.134389][ T5763] Symlink component flag not implemented (116) [ 62.146130][ T5758] loop1: detected capacity change from 0 to 512 [ 62.152838][ T5758] EXT4-fs: Ignoring removed oldalloc option [ 62.164061][ T5758] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 62.183686][ T5758] EXT4-fs (loop1): orphan cleanup on readonly fs [ 62.205289][ T5758] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.727: Failed to acquire dquot type 1 [ 62.236071][ T5758] EXT4-fs (loop1): 1 truncate cleaned up [ 62.277700][ T5778] loop2: detected capacity change from 0 to 128 [ 62.316911][ T5778] ext4 filesystem being mounted at /151/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 62.531054][ T5744] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4113: comm syz.0.726: Allocating blocks 497-513 which overlap fs metadata [ 62.593725][ T5802] lo speed is unknown, defaulting to 1000 [ 62.605744][ T5802] lo speed is unknown, defaulting to 1000 [ 62.619177][ T5802] lo speed is unknown, defaulting to 1000 [ 62.626352][ T5802] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 62.635502][ T5802] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 62.647412][ T5802] lo speed is unknown, defaulting to 1000 [ 62.654908][ T5802] lo speed is unknown, defaulting to 1000 [ 62.667417][ T5802] lo speed is unknown, defaulting to 1000 [ 62.681200][ T5802] lo speed is unknown, defaulting to 1000 [ 62.687700][ T5802] lo speed is unknown, defaulting to 1000 [ 62.707911][ T5741] EXT4-fs (loop0): pa ffff888106a961c0: logic 448, phys. 385, len 8 [ 62.715976][ T5741] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 1 [ 62.795562][ T5809] FAULT_INJECTION: forcing a failure. [ 62.795562][ T5809] name failslab, interval 1, probability 0, space 0, times 0 [ 62.808265][ T5809] CPU: 1 UID: 0 PID: 5809 Comm: syz.5.752 Not tainted 6.16.0-rc2-syzkaller-00378-gb67ec639010f #0 PREEMPT(voluntary) [ 62.808295][ T5809] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 62.808307][ T5809] Call Trace: [ 62.808313][ T5809] [ 62.808320][ T5809] __dump_stack+0x1d/0x30 [ 62.808344][ T5809] dump_stack_lvl+0xe8/0x140 [ 62.808435][ T5809] dump_stack+0x15/0x1b [ 62.808454][ T5809] should_fail_ex+0x265/0x280 [ 62.808489][ T5809] should_failslab+0x8c/0xb0 [ 62.808565][ T5809] kmem_cache_alloc_node_noprof+0x57/0x320 [ 62.808628][ T5809] ? __alloc_skb+0x101/0x320 [ 62.808660][ T5809] __alloc_skb+0x101/0x320 [ 62.808686][ T5809] netlink_alloc_large_skb+0xba/0xf0 [ 62.808712][ T5809] netlink_sendmsg+0x3cf/0x6b0 [ 62.808749][ T5809] ? __pfx_netlink_sendmsg+0x10/0x10 [ 62.808771][ T5809] __sock_sendmsg+0x142/0x180 [ 62.808798][ T5809] ____sys_sendmsg+0x31e/0x4e0 [ 62.808895][ T5809] ___sys_sendmsg+0x17b/0x1d0 [ 62.808941][ T5809] __x64_sys_sendmsg+0xd4/0x160 [ 62.809027][ T5809] x64_sys_call+0x2999/0x2fb0 [ 62.809047][ T5809] do_syscall_64+0xd2/0x200 [ 62.809067][ T5809] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 62.809096][ T5809] ? clear_bhb_loop+0x40/0x90 [ 62.809120][ T5809] ? clear_bhb_loop+0x40/0x90 [ 62.809141][ T5809] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 62.809165][ T5809] RIP: 0033:0x7fa3fa73e929 [ 62.809182][ T5809] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 62.809246][ T5809] RSP: 002b:00007fa3f8da7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 62.809270][ T5809] RAX: ffffffffffffffda RBX: 00007fa3fa965fa0 RCX: 00007fa3fa73e929 [ 62.809282][ T5809] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000005 [ 62.809296][ T5809] RBP: 00007fa3f8da7090 R08: 0000000000000000 R09: 0000000000000000 [ 62.809309][ T5809] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 62.809322][ T5809] R13: 0000000000000000 R14: 00007fa3fa965fa0 R15: 00007ffd5cca6968 [ 62.809338][ T5809] [ 63.061952][ T5811] netlink: 4 bytes leftover after parsing attributes in process `syz.3.753'. [ 63.101983][ T5821] FAULT_INJECTION: forcing a failure. [ 63.101983][ T5821] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 63.115180][ T5821] CPU: 0 UID: 0 PID: 5821 Comm: syz.2.755 Not tainted 6.16.0-rc2-syzkaller-00378-gb67ec639010f #0 PREEMPT(voluntary) [ 63.115212][ T5821] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 63.115232][ T5821] Call Trace: [ 63.115238][ T5821] [ 63.115296][ T5821] __dump_stack+0x1d/0x30 [ 63.115320][ T5821] dump_stack_lvl+0xe8/0x140 [ 63.115341][ T5821] dump_stack+0x15/0x1b [ 63.115358][ T5821] should_fail_ex+0x265/0x280 [ 63.115391][ T5821] should_fail+0xb/0x20 [ 63.115436][ T5821] should_fail_usercopy+0x1a/0x20 [ 63.115469][ T5821] _copy_from_iter+0xcf/0xe40 [ 63.115534][ T5821] ? __build_skb_around+0x1a0/0x200 [ 63.115566][ T5821] ? __alloc_skb+0x223/0x320 [ 63.115597][ T5821] netlink_sendmsg+0x471/0x6b0 [ 63.115632][ T5821] ? __pfx_netlink_sendmsg+0x10/0x10 [ 63.115653][ T5821] __sock_sendmsg+0x142/0x180 [ 63.115722][ T5821] ____sys_sendmsg+0x31e/0x4e0 [ 63.115760][ T5821] ___sys_sendmsg+0x17b/0x1d0 [ 63.115832][ T5821] __x64_sys_sendmsg+0xd4/0x160 [ 63.115926][ T5821] x64_sys_call+0x2999/0x2fb0 [ 63.115949][ T5821] do_syscall_64+0xd2/0x200 [ 63.115970][ T5821] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 63.115995][ T5821] ? clear_bhb_loop+0x40/0x90 [ 63.116067][ T5821] ? clear_bhb_loop+0x40/0x90 [ 63.116085][ T5821] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 63.116103][ T5821] RIP: 0033:0x7f467310e929 [ 63.116117][ T5821] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 63.116164][ T5821] RSP: 002b:00007f4671777038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 63.116191][ T5821] RAX: ffffffffffffffda RBX: 00007f4673335fa0 RCX: 00007f467310e929 [ 63.116202][ T5821] RDX: 0000000020000000 RSI: 0000200000000240 RDI: 0000000000000003 [ 63.116213][ T5821] RBP: 00007f4671777090 R08: 0000000000000000 R09: 0000000000000000 [ 63.116238][ T5821] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 63.116249][ T5821] R13: 0000000000000000 R14: 00007f4673335fa0 R15: 00007ffd504c4f08 [ 63.116265][ T5821] [ 63.120324][ T5817] loop1: detected capacity change from 0 to 2048 [ 63.130799][ T5827] loop0: detected capacity change from 0 to 2048 [ 63.183713][ T5826] syz!: rxe_newlink: already configured on team_slave_0 [ 63.233758][ T5827] EXT4-fs error (device loop0): ext4_find_extent:939: inode #2: comm syz.0.761: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 63.270524][ T5817] EXT4-fs error (device loop1): ext4_find_extent:939: inode #2: comm syz.1.756: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 63.277753][ T5827] EXT4-fs (loop0): Remounting filesystem read-only [ 63.324839][ T5817] EXT4-fs (loop1): Remounting filesystem read-only [ 63.392935][ T3306] ================================================================== [ 63.401111][ T3306] BUG: KCSAN: data-race in __lru_add_drain_all / folio_add_lru [ 63.408691][ T3306] [ 63.411022][ T3306] read-write to 0xffff888237d25e68 of 1 bytes by task 5840 on cpu 1: [ 63.419100][ T3306] folio_add_lru+0xa5/0x1f0 [ 63.423626][ T3306] shmem_get_folio_gfp+0x7ab/0xd60 [ 63.428755][ T3306] shmem_write_begin+0xa8/0x190 [ 63.433624][ T3306] generic_perform_write+0x181/0x490 [ 63.438927][ T3306] shmem_file_write_iter+0xc5/0xf0 [ 63.444046][ T3306] vfs_write+0x4a0/0x8e0 [ 63.448304][ T3306] ksys_write+0xda/0x1a0 [ 63.452570][ T3306] __x64_sys_write+0x40/0x50 [ 63.457166][ T3306] x64_sys_call+0x2cdd/0x2fb0 [ 63.461855][ T3306] do_syscall_64+0xd2/0x200 [ 63.466359][ T3306] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 63.472261][ T3306] [ 63.474588][ T3306] read to 0xffff888237d25e68 of 1 bytes by task 3306 on cpu 0: [ 63.482136][ T3306] __lru_add_drain_all+0x12b/0x3f0 [ 63.487258][ T3306] lru_add_drain_all+0x10/0x20 [ 63.492035][ T3306] invalidate_bdev+0x47/0x70 [ 63.496627][ T3306] ext4_put_super+0x624/0x7d0 [ 63.501315][ T3306] generic_shutdown_super+0xe3/0x210 [ 63.506609][ T3306] kill_block_super+0x2a/0x70 [ 63.511308][ T3306] ext4_kill_sb+0x42/0x80 [ 63.515646][ T3306] deactivate_locked_super+0x72/0x1c0 [ 63.521034][ T3306] deactivate_super+0x97/0xa0 [ 63.525721][ T3306] cleanup_mnt+0x269/0x2e0 [ 63.530142][ T3306] __cleanup_mnt+0x19/0x20 [ 63.534564][ T3306] task_work_run+0x12e/0x1a0 [ 63.539168][ T3306] exit_to_user_mode_loop+0xe4/0x100 [ 63.544467][ T3306] do_syscall_64+0x1d6/0x200 [ 63.549146][ T3306] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 63.555043][ T3306] [ 63.557369][ T3306] value changed: 0x05 -> 0x06 [ 63.562040][ T3306] [ 63.564366][ T3306] Reported by Kernel Concurrency Sanitizer on: [ 63.570514][ T3306] CPU: 0 UID: 0 PID: 3306 Comm: syz-executor Not tainted 6.16.0-rc2-syzkaller-00378-gb67ec639010f #0 PREEMPT(voluntary) [ 63.583102][ T3306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 63.593175][ T3306] ==================================================================