last executing test programs: 2.640516575s ago: executing program 4 (id=3249): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1800483, &(0x7f0000000940), 0x0, 0x5ad, &(0x7f0000000180)="$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") sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x19, &(0x7f0000000340), 0x9, 0x629, &(0x7f0000000e80)="$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") ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wg1\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x0, 0x16, &(0x7f0000002f40)=ANY=[@ANYBLOB="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"/2122, @ANYRES32=0x0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', r0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0xa}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xe00}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x3, 0xf, 0x0, 0xffffffffffffffff, 0x0, '\x00', r0}, 0x48) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000200)='asymmetric\x00', &(0x7f0000000240)) rt_sigprocmask(0x0, 0x0, 0x0, 0x0) fsync(0xffffffffffffffff) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0xc00, &(0x7f0000001740)=ANY=[@ANYBLOB='cruft,block=0x0000000000000400\x00session=0x0000000000000006,check=relaxed,utf8,cruftAuid=', @ANYRES64, @ANYBLOB="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", @ANYRES16, @ANYRESHEX, @ANYRESDEC], 0x0, 0x654, &(0x7f00000028c0)="$eJzs3V1v29Ydx/EfZfkhLhAU21AEQZqcJiuQYJkiyY0DI7uYRlE2O0kUSHqwgQFF1thFEDndkgxYfNP5Zg9A9wZ215td7EXsDexd7HLAsN0N2A0HHoq2bFGW7NhO2n4/hiOK5y+eP3kU/UGLDwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHLcZrVac9T2u+sbZjy3GQadY9qzpc3qTjZxZ2K/kpP+amFBV7JZV7530Pxe+s9NXcueXdNC+rCg3Xfee/fhd8ul/PXHJHQaGrfAtPei+S9e7T591O9vPT/jRN4CKk0RtOp1/SjwO41Vz/hRYFaWl6v31lqRafltL9qMYq9j3NArxUFobrt3TG1lZcl4lc1gvbvabLS9fOaDH9ar1WXz8fxg+O99XIncNb/d9rurNiZtTmMemC9/noV4jY4x20/6W0uTkkyDatME1Ysa3hka+nq1Xq/V6vXa8v2V+w+q1fLIjOoRGok48zctvmbO7LMbeF2ltP7/w5HaWlBX69qQKfxx1VSoQJ0x7QN5/f/wnndsv8P1P6/yVw6ar8rW/+vZs+vj6v+YXIyMfUFRizNm/ul+XuiVdvVUj9RXX1t6PvUrLw3WtLD1xtlleL4/q1JZ8hUpkK+OGlqVJzOYY7SiZS2rqk+0ppYiGbXkqy1PkTYVKZanjh2TUJ4aihUolNFtubojo5pWtKIlGXmqaFOB1tXVqppq6L9Jkmzrid3uS8fkqDyoNk1QfXyIfpsOWEH9/8UX2VhS/7/NNFTbj40D3hbJYP//hG6cTzYAAAAAAOA8OPav74797v59SYlafturvum0AAAAAADAGbLf/F9LH2bTqffljNn/Ty4+NwAAAAAAcDYce46dI2nRHtTvHJwJNc1BADMXkCIAAAAAAHhN9vv/63NSYq+9dkPOifb/AQAAAADA18Afhq6xX86vsZvkX+uXJEW9eedv/55XOOvs9Ta+7+w00pbGziBm5AiAuHXVuTy4UK99mJNkn7neNefgxgCO/V3Invxre9K1/p3wSAJzM/mfLyYlsFwePNOX+iCL+WDQ7+PdkmxL1stiy297FTdoP6yp0bhcir2N+NfPnvxGCvfXc/tJf6vy6ef9xzaXvXTW3k6axxeH0ilNyuWlvd6CPeeiaI0vqZV3+cduZ9Gx/Vbz9Z9RY6c03NF06/873cxibi5mj4u7+QjY9V9I179WsUN2sPb26hDOQRa1o2teNBCFWagspVncymJu3b6VPeT5DbL4wYxUr4yOQTicRX04i8nbwvnPyLaYkEW6LZYqs4Mljcli6WRZjIwIALwp2wdVyF7EfPQa+0fr7mk+5SZX9x/v92K/h3j55yQ74XAmLRjJ/MReFmxduZ3FzMl+sJavFnyiVwd1ZWHcJ3r11NUt6+uvB/dAGqQ9ksX/kiR5WLP9/ulIVf0qfcFXY/uN2vWZdBPee7nzS3sB/NRnW59tPavXl5arH1Wr9+uatasxeKD2AAAKTL7HzsQI56P9verH//wwmzpU8b6zf0hBRZ/qc/X1WHfzWwjcKF7q4tBhCHdH91rTWHsHncOxNd0du1dna+lQbH0/Nt/FO7oHeBC7dM6jAADAxbo5oQ5PU//v5vvdt68W7ncfruVH7xA8LrZ2wVsCAIBvDy80zmL8eycM/d4ntZWVWiNe80wYuD81od9c9Yzfjb3QXWt0Vz3TC4M4cIO26YWa95teZKL1Xi8IY9MKQtMLIn/D3vndDG79HnmdRjf23ajX9hqRZ9ygGzfc2DT9yDW99Z+0/WjNC+2Lo57n+i3fbcR+0DVRsB66XsWYyPOGAv2m1439lp9Odk0v9DuNcNP8LGivdzzT9CI39HtxkC0w78vvtoKwYxdbUXLiGx0CAPBN9OLV7tNH/f7W82Mm9jQ0Jz82sDh4rmiBb3odAQDAYVRpAAAAAAAAAAAAAAAAAAAAAADeftOc/3eiiVkVNEn7c351earlODrrxMZNzA22xHBT6fQL/PvInHnlcy7tN6mg071puihLmpzGu1PE2AllE+Wz37yXpKJ3wrlN/Gg726JFMSr3+1sad9Lq/P5YlM/+v0M68ewvY5qSJEmOf/m8Rt6rU3aavlGez73GEFz8ZxGAi/X/AAAA//+xmDUB") r1 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0\x00', 0x0, 0x0) execveat(r1, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) 2.362084228s ago: executing program 4 (id=3252): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000095000000000000000000000000000011ad9c0de4d6453ff9471361a13f5804652fb48ca5b6af7c3823cb9661946be60da586956f8aea04e1b8b5483ee63054af0eab7987e056cf4ebec14fbbc4d8e19d7a351049a92d81a2f2083fca099b7c6e18903813082443bd585439e7adf3efc62210bf28d485b3f1d690f71819db157fb7f1ae7a49ab35691a9750f697bdc48945cad549d1afefef045e6099623515742b4186b84310bf8affd8d9cdb7d19d674f2d"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x45}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='fib_table_lookup\x00', r0}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000240)={'wg0\x00'}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e20, @local}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000040), 0x4) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000180)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x989, 0x0, 0x10, 0x5}, 0x9c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x0, 0x20}, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SCAUSEDIAG(r3, 0x89ec, 0x0) sched_setscheduler(0x0, 0x6, &(0x7f0000000080)=0x117) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000340)=@file={0x1, './file0\x00'}, 0xffffffffffffffa9) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f0000000580), 0x0, 0x2, 0x0) r7 = socket$inet(0x2, 0xa, 0x1) ioctl$sock_inet_SIOCSARP(r7, 0x8955, &(0x7f0000000000)={{0x2, 0x4e22, @empty}, {0x180, @broadcast}, 0x18, {0x2, 0x4e22, @multicast1}, 'geneve0\x00'}) ioctl$sock_inet_SIOCSARP(r7, 0x8955, &(0x7f0000000080)={{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x26}}, {0x307, @broadcast}, 0x0, {0x2, 0x4e23, @multicast1}, 'ip6gre0\x00'}) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r8, 0x6, 0x5, &(0x7f0000000400)=0x5, 0x4) ioctl$sock_inet_SIOCDELRT(r7, 0x890c, &(0x7f0000000140)={0x0, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x4e20, @broadcast}, {0x2, 0x4e21, @local}, 0x200, 0x0, 0x0, 0x0, 0xfffe, 0x0, 0x4765dc64, 0x6, 0xb}) unshare(0x64000600) sendmmsg$inet6(r2, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000003c0)="0021d07d4d7c691db0d0a9baed8670b63428bb166c3de34a8109b396941cc91ebbd169a4b170c325", 0x28}], 0x1}}], 0x1, 0x5) 1.952114401s ago: executing program 3 (id=3264): r0 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000f3ffffb0150000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYRESDEC=r3], 0x128}, 0x8040) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=@newsa={0x140, 0x10, 0x413, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @broadcast}, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in=@broadcast, 0x0, 0x32}, @in=@dev, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x50, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x20, 0x60, "25cac521"}}]}, 0x140}}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x128}, 0x0) recvmsg$unix(r8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r11, &(0x7f0000001b00)={0x0, 0xffffffffffffff84, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r13, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_pidfd_open(r4, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) r14 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) r15 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r15, r14, 0x0, 0x3a) 1.950910611s ago: executing program 0 (id=3266): r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x3, 0x9}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, 0x0, 0x0) sendmmsg(r0, &(0x7f0000002b00)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0xc, @mcast1}, 0x80, 0x0}, 0x5b4}], 0x1, 0x0) 1.935250363s ago: executing program 0 (id=3267): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0) r0 = syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1800483, &(0x7f0000000940), 0x0, 0x5ad, &(0x7f0000000180)="$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") sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x19, &(0x7f0000000340), 0x9, 0x629, &(0x7f0000000e80)="$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") ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wg1\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x0, 0x16, &(0x7f0000002f40)=ANY=[@ANYBLOB="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"/2122, @ANYRES32=0x0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', r1, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0xa}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xe00}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x3, 0xf, 0x0, 0xffffffffffffffff, 0x0, '\x00', r1}, 0x48) r2 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000200)='asymmetric\x00', &(0x7f0000000240)) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000780)=ANY=[@ANYRESDEC=r2, @ANYRES16, @ANYRES8=r3, @ANYRES16=r0, @ANYBLOB="9c351fc398d14932f395f221a4b3649194092d64aae6ebefc3e9abc09f2323b7d50727e2e4f2ff050352ca7da8912c3c0a58989eb56ab1dc39e85d3a970b20a409c305621f437c0ebb529588be07afe24360bda8b77e817ba56b99c35d5745387ba3160d3854acb9faa10a9024a845", @ANYRESOCT=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', r1, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x90) rt_sigprocmask(0x0, 0x0, 0x0, 0x0) fsync(0xffffffffffffffff) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) modify_ldt$write(0x1, &(0x7f0000000000)={0xfff}, 0x10) modify_ldt$write(0x1, &(0x7f0000001700)={0x800}, 0x10) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0xc00, &(0x7f0000001740)=ANY=[@ANYBLOB='cruft,block=0x0000000000000400\x00session=0x0000000000000006,check=relaxed,utf8,cruftAuid=', @ANYRES64, @ANYBLOB="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", @ANYRES16=r4, @ANYRESHEX, @ANYRESDEC], 0x0, 0x654, &(0x7f00000028c0)="$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") r8 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0\x00', 0x0, 0x0) execveat(r8, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) setpriority(0x1, 0x2, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) poll(&(0x7f0000000740)=[{r9, 0x400}], 0x1, 0xfffffff9) 1.425607794s ago: executing program 4 (id=3270): bind$inet(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet(0x2, 0x2, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000280)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x8, 0x0, 0x0}, 0x90) r2 = perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xd0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000100)='cpu&\t0\t\t\t') bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev}, 0x10) 1.324321972s ago: executing program 4 (id=3273): r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) fchdir(r0) getcwd(&(0x7f00000000c0)=""/136, 0xffffffffffffff78) socket(0x0, 0x3, 0x4) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f0000000240)={0x0, 0xf0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x8, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 1.317877783s ago: executing program 4 (id=3274): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000095000000000000000000000000000011ad9c0de4d6453ff9471361a13f5804652fb48ca5b6af7c3823cb9661946be60da586956f8aea04e1b8b5483ee63054af0eab7987e056cf4ebec14fbbc4d8e19d7a351049a92d81a2f2083fca099b7c6e18903813082443bd585439e7adf3efc62210bf28d485b3f1d690f71819db157fb7f1ae7a49ab35691a9750f697bdc48945cad549d1afefef045e6099623515742b4186b84310bf8affd8d9cdb7d19d674f2d"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x45}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='fib_table_lookup\x00', r0}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000240)={'wg0\x00'}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e20, @local}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x14, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000180)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x989, 0x0, 0x10, 0x5}, 0x9c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x0, 0x20}, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x8b}, 0x0) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SCAUSEDIAG(r3, 0x89ec, 0x0) sched_setscheduler(0x0, 0x6, &(0x7f0000000080)=0x117) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000340)=@file={0x1, './file0\x00'}, 0xffffffffffffffa9) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f0000000580), 0x0, 0x2, 0x0) r7 = socket$inet(0x2, 0xa, 0x1) ioctl$sock_inet_SIOCSARP(r7, 0x8955, &(0x7f0000000000)={{0x2, 0x4e22, @empty}, {0x180, @broadcast}, 0x18, {0x2, 0x4e22, @multicast1}, 'geneve0\x00'}) ioctl$sock_inet_SIOCSARP(r7, 0x8955, &(0x7f0000000080)={{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x26}}, {0x307, @broadcast}, 0x0, {0x2, 0x4e23, @multicast1}, 'ip6gre0\x00'}) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r8, 0x6, 0x5, &(0x7f0000000400)=0x5, 0x4) ioctl$sock_inet_SIOCDELRT(r7, 0x890c, &(0x7f0000000140)={0x0, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x4e20, @broadcast}, {0x2, 0x4e21, @local}, 0x200, 0x0, 0x0, 0x0, 0xfffe, &(0x7f0000000480)='caif0\x00', 0x4765dc64, 0x6, 0xb}) unshare(0x64000600) sendmmsg$inet6(r2, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000003c0)="0021d07d4d7c691db0d0a9baed8670b63428bb166c3de34a8109b396941cc91ebbd169a4b170c325", 0x28}], 0x1}}], 0x1, 0x5) 1.300454765s ago: executing program 1 (id=3275): sendmsg$DCCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f00000003c0)={0xd80, 0x13, 0x0, 0x0, 0x0, {}, [@INET_DIAG_REQ_BYTECODE={0x30, 0x1, "91a4fd1b29e48ea8c70b5fae567520bf352b20d599c0dfa79430f3d19f4f9bad3e29ad74de545384ad7d1ee4"}, @INET_DIAG_REQ_BYTECODE={0x7, 0x1, "6a74cd"}, @INET_DIAG_REQ_BYTECODE={0xd8, 0x1, "d0289d3b59e4667a9e6357008b9d332870e90871d0b97c195f5b6d498541fc5daf23af17975067d320709475e50477f12e57ef81ee7e581b8ec286e7599ecef93aa752edd8f824466e887170bdeeec661052ab4411d689fdf594564ecd041a552624e2399bbba576460eae6ad06c69f24c13fe3db823dbc6079681e35442759bc4f5d9dbf165ca2fbd8806606758ff2d14fdfe208d0ddef180fc3f69ddb5d2aabfc9c2fec6052e0f9415f37dbe315b86b1aa0753f0a2895582bb46ff846dc4535920e9a6365b93a64acbfa26246a1900db69adf3"}, @INET_DIAG_REQ_BYTECODE={0xb1, 0x1, "81486e59df592fe5f32997d2af158ce0bd7562cbfa11755adcf2eec574c94e433eb3f92a34fbbc7be6e05247dc70c955f9de615cb516c821aa1cb4db1a84bf4497a71df3717f22c816ccfad0dd3b99bfcae11229269a00021ffb36f07fd59a6f0aad8e9a287dc76c41fb3401a1fce7a1078b0329b59343eab7d786d3a6178005d3463347470e4139398bd4ebeb67426edb747766166dc73cc598b5a0ad400138abb811d5babe29b169e02f39ce"}, @INET_DIAG_REQ_BYTECODE={0x50, 0x1, "521cca5b0aa0beaa09c25121755f5b0798c51ed066d18faa54a7014e451d8adfc4c76fdffbbf81351c74a7e5e23a926e2252642bc6c6158b5ab211ae68e23f8d944be88df6ed5035d75c6bda"}, @INET_DIAG_REQ_BYTECODE={0xa0, 0x1, "954fe94bc52a8b89c607a47bab1bf977a1dcf969ef64fdeb4141218f86a90ee537556780fd0a8c9c675154d13166be1b481543a687fc0943ae484b2e53d12406e32522d6ae58d836aea4d33f6e295220d598e8d60225f0b2d5599e7175431cf73a509ecd39609df3b4efc38f5a0bb80d009b390290386c16c938474038b9fe86bce12511bced4e457bd8065fe4676fb7f74aaa0a4450044ac3b0b760"}, @INET_DIAG_REQ_BYTECODE={0x7b, 0x1, "535ce81c73cdb095ad90bc89c7e8161833585f87555d38065e19cd1c4c5672aef779b6cf5030d992e51c4af4ffd6717caae26634529c96a494ea8ffa1aed93c1355b3cdb93bab5934d0bfed7159e7829047f396721b9a7304c378103300fdd66d1dfb500071af4e0f173b0c4aa979a946f7659a31c0b86"}, @INET_DIAG_REQ_BYTECODE={0xa04, 0x1, "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"}]}, 0xd80}, 0x1, 0x0, 0x0, 0x20000815}, 0xd0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c812e5d6000"}) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) ppoll(&(0x7f0000000140)=[{r0, 0x4}], 0x1, 0x0, 0x0, 0x0) ioctl$TCSETA(r1, 0x402c542d, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, "dac7a15f305b57a3"}) 1.148363897s ago: executing program 2 (id=3276): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) socket$inet6_sctp(0xa, 0x0, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) epoll_create1(0x0) epoll_pwait2(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) (fail_nth: 2) 1.049745335s ago: executing program 3 (id=3277): openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x501800, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c0000003b00090000110000cd00000001000000180004"], 0x2c}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000001c0)={'erspan0\x00', &(0x7f0000000140)={'syztnl0\x00', 0x0, 0x700, 0x1, 0xd, 0x7ff, {{0x15, 0x4, 0x1, 0x0, 0x54, 0x66, 0x0, 0xd, 0x29, 0x0, @rand_addr=0x64010100, @loopback, {[@generic={0x82, 0x12, "2b05bdf19596738843f99cfdd0954a97"}, @generic={0x89, 0x3, '@'}, @lsrr={0x83, 0x7, 0x15, [@empty]}, @lsrr={0x83, 0x23, 0x0, [@rand_addr=0x64010102, @remote, @local, @multicast2, @loopback, @rand_addr=0x64010102, @remote, @multicast2]}]}}}}}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x9, '\x00', r1, 0xffffffffffffffff, 0x0, 0x800, 0x4000000}, 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000002c0)={0x0, 0x0}) capset(&(0x7f0000000200)={0x20080522, r2}, &(0x7f0000000340)={0x8, 0x5, 0x0, 0x2, 0xeb2f, 0x5}) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) dup2(r3, r4) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x100000e, 0x12, r4, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.idle_time\x00', 0x26e1, 0x0) write$cgroup_subtree(r5, &(0x7f00000009c0)=ANY=[], 0xda00) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r6, 0x0, 0x83, &(0x7f0000000080)={'filter\x00', 0x0, 0x0, 0x90, [], 0x0, 0x0, 0x20001100}, &(0x7f0000000100)=0x108) r7 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r7, 0x0, 0x82, 0x0, &(0x7f0000000400)) r8 = socket(0x840000000002, 0x3, 0x100) connect$inet(r8, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000880)={'batadv0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r8, 0x89f1, &(0x7f0000002800)={'syztnl1\x00', &(0x7f0000002780)={'syztnl1\x00', 0x0, 0x29, 0xb7, 0x4, 0x2, 0x31, @local, @private0, 0x8, 0x80, 0x3, 0x400}}) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000e00), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_FEATURES_SET(r8, &(0x7f0000000280)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x803800}, 0xc, &(0x7f0000000240)={&(0x7f0000002d80)=ANY=[@ANYBLOB="c8fe", @ANYRES16=r11, @ANYBLOB="10002abd7000fcdbdf250c0000004400018008000100", @ANYRES32=r9, @ANYBLOB="08000100", @ANYRES32=r10, @ANYBLOB="08000300020000001400020076657468315f6d6163767461700000001400020076657468315f746f5f626174616476002c0001801400020067656e65766531000000000000000000140002006272696467655f736c6176655f300000200001801400020076657468315f6d61637674617000000008000100", @ANYRES32=r9, @ANYBLOB="2400018008000100", @ANYRES32=r9, @ANYBLOB="08000100", @ANYBLOB="08000300010000000800030002000000040003803000018008000300010000000800030003000000140002006272696467655f736c6176655f30000008000100", @ANYRES32=r9, @ANYBLOB="2c000180140002006c6f0000000000000000000000000000140002006e657470636930000000000000000000"], 0x128}, 0x1, 0x0, 0x0, 0x40000}, 0x40000000) r12 = socket(0x200000100000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000000)={'syz_tun\x00'}) setsockopt$sock_int(r12, 0x1, 0x2, &(0x7f0000002f80)=0x5de9, 0x4) 1.035588186s ago: executing program 3 (id=3278): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc0ed000e, &(0x7f00000000c0)={[{@jqfmt_vfsold}, {@barrier}, {@debug}, {@noload}, {@mblk_io_submit}, {@commit={'commit', 0x3d, 0x5}}, {@init_itable_val={'init_itable', 0x3d, 0x601}}, {@debug}]}, 0xfe, 0x46d, &(0x7f0000000f00)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) open_by_handle_at(r1, &(0x7f0000000240)=@reiserfs_2={0x8, 0x2, {0xc, 0x8fd344c1}}, 0x0) r2 = syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2008082, &(0x7f0000000080), 0x1, 0x553, &(0x7f0000000ac0)="$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") r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f00000000c0)={0x0, 0x0}) r4 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r4, 0x29, 0xc8, 0x0, 0xc000000) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000180)="838a7670b429f9", 0x7}], 0x1}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)={0x1c, 0x4, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 746.42009ms ago: executing program 2 (id=3279): fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = open(0x0, 0x0, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000005b00)=0x20) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ftruncate(r1, 0x1) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x0, 0x0, 0x20}]}) fstatfs(r2, &(0x7f0000000000)=""/108) r3 = perf_event_open(&(0x7f0000000500)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_RESTRICTIONS(r0, 0xb, &(0x7f0000000440)=[@ioring_restriction_sqe_flags_allowed={0x2, 0xc}, @ioring_restriction_sqe_op, @ioring_restriction_register_op={0x0, 0x15}, @ioring_restriction_register_op={0x0, 0x14}, @ioring_restriction_sqe_flags_required={0x3, 0x11}, @ioring_restriction_sqe_op], 0x6) perf_event_open(&(0x7f0000000a80)={0x4, 0x80, 0x3, 0x30, 0x1, 0x8, 0x0, 0x0, 0x8, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x201e6, 0x0, @perf_bp={&(0x7f0000000200), 0x1}, 0x8, 0xf7e6, 0x4, 0x4, 0x9, 0x7, 0x3c, 0x0, 0xd0f, 0x0, 0x6}, 0x0, 0xc, r3, 0x11) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$int_in(r4, 0x5452, &(0x7f0000000300)=0x208) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) setsockopt$sock_int(r4, 0x1, 0x7, &(0x7f0000000180), 0x4) sendto$inet6(r4, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) poll(&(0x7f0000000040)=[{r4}], 0x1, 0x800) sendto$inet6(r4, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090011006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) shutdown(r4, 0x1) 694.218134ms ago: executing program 2 (id=3280): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f0000002a40)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='GPL\x00', 0x4, 0x1000, &(0x7f0000000300)=""/4096}, 0x90) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_aout(r0, &(0x7f00000002c0)=ANY=[], 0xc1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000005, 0x13, r0, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r1, 0x10d, 0xb, 0x0, &(0x7f00000000c0)) 659.843857ms ago: executing program 0 (id=3281): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000095000000000000000000000000000011ad9c0de4d6453ff9471361a13f5804652fb48ca5b6af7c3823cb9661946be60da586956f8aea04e1b8b5483ee63054af0eab7987e056cf4ebec14fbbc4d8e19d7a351049a92d81a2f2083fca099b7c6e18903813082443bd585439e7adf3efc62210bf28d485b3f1d690f71819db157fb7f1ae7a49ab35691a9750f697bdc48945cad549d1afefef045e6099623515742b4186b84310bf8affd8d9cdb7d19d674f2d"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x45}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='fib_table_lookup\x00', r0}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000240)={'wg0\x00'}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e20, @local}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000040), 0x4) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000180)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x989, 0x0, 0x10, 0x5}, 0x9c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x0, 0x20}, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SCAUSEDIAG(r3, 0x89ec, 0x0) sched_setscheduler(0x0, 0x6, &(0x7f0000000080)=0x117) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000340)=@file={0x1, './file0\x00'}, 0xffffffffffffffa9) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f0000000580), 0x0, 0x2, 0x0) r7 = socket$inet(0x2, 0xa, 0x1) ioctl$sock_inet_SIOCSARP(r7, 0x8955, &(0x7f0000000000)={{0x2, 0x4e22, @empty}, {0x180, @broadcast}, 0x18, {0x2, 0x4e22, @multicast1}, 'geneve0\x00'}) ioctl$sock_inet_SIOCSARP(r7, 0x8955, &(0x7f0000000080)={{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x26}}, {0x307, @broadcast}, 0x0, {0x2, 0x4e23, @multicast1}, 'ip6gre0\x00'}) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r8, 0x6, 0x5, &(0x7f0000000400)=0x5, 0x4) ioctl$sock_inet_SIOCDELRT(r7, 0x890c, &(0x7f0000000140)={0x0, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x4e20, @broadcast}, {0x2, 0x4e21, @local}, 0x200, 0x0, 0x0, 0x0, 0xfffe, 0x0, 0x4765dc64, 0x6, 0xb}) unshare(0x64000600) sendmmsg$inet6(r2, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000003c0)="0021d07d4d7c691db0d0a9baed8670b63428bb166c3de34a8109b396941cc91ebbd169a4b170c325", 0x28}], 0x1}}], 0x1, 0x5) 658.767027ms ago: executing program 2 (id=3282): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000095000000000000000000000000000011ad9c0de4d6453ff9471361a13f5804652fb48ca5b6af7c3823cb9661946be60da586956f8aea04e1b8b5483ee63054af0eab7987e056cf4ebec14fbbc4d8e19d7a351049a92d81a2f2083fca099b7c6e18903813082443bd585439e7adf3efc62210bf28d485b3f1d690f71819db157fb7f1ae7a49ab35691a9750f697bdc48945cad549d1afefef045e6099623515742b4186b84310bf8affd8d9cdb7d19d674f2d"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x45}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='fib_table_lookup\x00', r0}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000240)={'wg0\x00'}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e20, @local}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x14, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000180)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x989, 0x0, 0x10, 0x5}, 0x9c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x0, 0x20}, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SCAUSEDIAG(r3, 0x89ec, 0x0) sched_setscheduler(0x0, 0x6, &(0x7f0000000080)=0x117) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000340)=@file={0x1, './file0\x00'}, 0xffffffffffffffa9) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f0000000580), 0x0, 0x2, 0x0) r7 = socket$inet(0x2, 0xa, 0x1) ioctl$sock_inet_SIOCSARP(r7, 0x8955, &(0x7f0000000000)={{0x2, 0x4e22, @empty}, {0x180, @broadcast}, 0x18, {0x2, 0x4e22, @multicast1}, 'geneve0\x00'}) ioctl$sock_inet_SIOCSARP(r7, 0x8955, &(0x7f0000000080)={{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x26}}, {0x307, @broadcast}, 0x0, {0x2, 0x4e23, @multicast1}, 'ip6gre0\x00'}) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r8, 0x6, 0x5, &(0x7f0000000400)=0x5, 0x4) ioctl$sock_inet_SIOCDELRT(r7, 0x890c, &(0x7f0000000140)={0x0, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x4e20, @broadcast}, {0x2, 0x4e21, @local}, 0x200, 0x0, 0x0, 0x0, 0xfffe, &(0x7f0000000480)='caif0\x00', 0x4765dc64, 0x6, 0xb}) unshare(0x64000600) sendmmsg$inet6(r2, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000003c0)="0021d07d4d7c691db0d0a9baed8670b63428bb166c3de34a8109b396941cc91ebbd169a4b170c325", 0x28}], 0x1}}], 0x1, 0x5) 553.810615ms ago: executing program 3 (id=3283): r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000002b00)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0xc, @mcast1}, 0x80, 0x0}, 0x5b4}], 0x1, 0x0) 466.643903ms ago: executing program 3 (id=3284): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x3, &(0x7f0000000580), 0xfd, 0x24f, &(0x7f00000002c0)="$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") r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) mkdir(&(0x7f00000005c0)='./cgroup/../file0/file0\x00', 0xe2) r3 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0/file0\x00', 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f0000000380)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000000040), 0x12) write$cgroup_pid(r3, &(0x7f0000000080), 0x12) write$cgroup_pid(r5, &(0x7f0000000180), 0x12) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000001700)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f00000001c0)={'syztnl1\x00', r6, 0x0, 0x1, 0x3, 0x80, 0x11, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, 0x8, 0x730}}) r7 = socket$inet_udplite(0x2, 0x2, 0x88) r8 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r7, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @remote}, {0x2, 0x80, @empty}, 0x107, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x2000000000}) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r9, &(0x7f0000000d80), 0x208e24b) fdatasync(r9) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r9, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000540)={'tunl0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x2f, 0x4, 0x1f, 0x20, 0x40, @loopback, @mcast2, 0x8, 0x7800, 0x0, 0x200}}) r10 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r10, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x0, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) ioctl$sock_inet_SIOCADDRT(r8, 0x890b, &(0x7f0000000840)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @loopback}, {0x2, 0x0, @broadcast}, 0xc0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)='lo\x00'}) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) 453.594574ms ago: executing program 2 (id=3285): r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) fchdir(r0) getcwd(&(0x7f00000000c0)=""/136, 0xffffffffffffff78) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f0000000240)={0x0, 0xf0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x8, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 392.049869ms ago: executing program 1 (id=3286): socket$nl_sock_diag(0x10, 0x3, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0x1c, &(0x7f0000000440)=ANY=[@ANYBLOB="feff000002000000ebd1ea43edb94b33756692e2b88e00"/32, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bfa90000000000003509"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) r0 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r0, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="020a000402000000e4a17c45c8d260c9", 0x10}], 0x1}, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x10, &(0x7f0000000580)=@framed={{}, [@snprintf={{0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xc}, {0x3, 0x0}, {0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x4}, {0x7, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x94}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = dup(r2) write$P9_RLERRORu(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@cache_fscache}], [], 0x6b}}) open(&(0x7f00000006c0)='./file0\x00', 0x9, 0x0) socket(0x200000100000011, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f00000000c0)) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000100)) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) socket$kcm(0xa, 0x0, 0x87) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r6, 0xc0502100, &(0x7f0000000340)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r6, 0xc0182101, &(0x7f0000000180)={r7}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r6, 0xc0502100, &(0x7f0000002780)) close(r5) syz_open_dev$ttys(0xc, 0x2, 0x1) r8 = fspick(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f00000001c0)='\xff\xff\xff\xff\xff\xff', &(0x7f0000000200)='\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00'}) 383.809819ms ago: executing program 2 (id=3287): r0 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000f3ffffb0150000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYRESDEC=r3], 0x128}, 0x8040) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=@newsa={0x140, 0x10, 0x413, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @broadcast}, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in=@broadcast, 0x0, 0x32}, @in=@dev, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x50, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x20, 0x60, "25cac521"}}]}, 0x140}}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x128}, 0x0) recvmsg$unix(r8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r11, &(0x7f0000001b00)={0x0, 0xffffffffffffff84, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r13, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_pidfd_open(r4, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) r14 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) r15 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r15, r14, 0x0, 0x3a) 382.040239ms ago: executing program 4 (id=3288): r0 = syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1800483, &(0x7f0000000940), 0x0, 0x5ad, &(0x7f0000000180)="$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") ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wg1\x00', 0x0}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5}, 0x48) r2 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000200)='asymmetric\x00', &(0x7f0000000240)) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000780)=ANY=[@ANYRESDEC, @ANYRES16, @ANYRES8=r2, @ANYRES16=r0, @ANYBLOB="9c351fc398d14932f395f221a4b3649194092d64aae6ebefc3e9abc09f2323b7d50727e2e4f2ff050352ca7da8912c3c0a58989eb56ab1dc39e85d3a970b20a409c305621f437c0ebb529588be07afe24360bda8b77e817ba56b99c35d5745387ba3160d3854acb9faa10a9024a845", @ANYRESOCT=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', r1, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x90) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) modify_ldt$write(0x1, &(0x7f0000000000)={0xfff}, 0x10) modify_ldt$write(0x1, &(0x7f0000001700)={0x800}, 0x10) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0xc00, &(0x7f0000001740)=ANY=[@ANYBLOB='cruft,block=0x0000000000000400\x00session=0x0000000000000006,check=relaxed,utf8,cruftAuid=', @ANYRES64, @ANYBLOB="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", @ANYRES16=r3, @ANYRESHEX, @ANYRESDEC], 0x0, 0x654, &(0x7f00000028c0)="$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") r6 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0\x00', 0x0, 0x0) execveat(r6, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) setpriority(0x1, 0x2, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) poll(&(0x7f0000000740)=[{r7, 0x400}], 0x1, 0xfffffff9) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={0xffffffffffffffff, r6, 0x2d, 0x0, @void}, 0x10) 321.807815ms ago: executing program 0 (id=3289): syz_emit_ethernet(0x28f, &(0x7f00000004c0)={@multicast, @random="777de85bf4dd", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x259, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0xa, "a78ce54006598080a8030003004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "000000050000000026000400"}, {0x0, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x18, 0x7, "b83935c0fffe000000000000020000fe20ff3f656d00a241c300"/55}]}}}}}}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname(r0, &(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, &(0x7f00000000c0)=0x80) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x54e3, 0x0) sendto$inet6(r1, &(0x7f0000005980)="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", 0x183, 0x24080005, &(0x7f0000002fc0)={0xa, 0x4e23, 0x4, @mcast1, 0x400}, 0x1c) connect$inet6(r1, &(0x7f0000000480)={0xa, 0x4e21, 0x7, @dev={0xfe, 0x80, '\x00', 0x18}, 0x80000000}, 0x1c) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r1) 244.27739ms ago: executing program 0 (id=3290): recvmmsg(0xffffffffffffffff, &(0x7f00000037c0), 0x0, 0x0, 0x0) r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000007fc0)=[@in={0x2, 0x0, @rand_addr=0x64010102}]}, &(0x7f0000000100)=0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040), 0x55af) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x82, &(0x7f0000000080), &(0x7f0000000340)=0x1b) 243.215351ms ago: executing program 0 (id=3291): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0) r0 = syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1800483, &(0x7f0000000940), 0x0, 0x5ad, &(0x7f0000000180)="$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") sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x19, &(0x7f0000000340), 0x9, 0x629, &(0x7f0000000e80)="$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") ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wg1\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x0, 0x16, &(0x7f0000002f40)=ANY=[@ANYBLOB="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"/2122, @ANYRES32=0x0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', r1, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0xa}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xe00}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x3, 0xf, 0x0, 0xffffffffffffffff, 0x0, '\x00', r1}, 0x48) r2 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000200)='asymmetric\x00', &(0x7f0000000240)) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000780)=ANY=[@ANYRESDEC=r2, @ANYRES16, @ANYRES8=r3, @ANYRES16=r0, @ANYBLOB="9c351fc398d14932f395f221a4b3649194092d64aae6ebefc3e9abc09f2323b7d50727e2e4f2ff050352ca7da8912c3c0a58989eb56ab1dc39e85d3a970b20a409c305621f437c0ebb529588be07afe24360bda8b77e817ba56b99c35d5745387ba3160d3854acb9faa10a9024a845", @ANYRESOCT=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', r1, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x90) rt_sigprocmask(0x0, 0x0, 0x0, 0x0) fsync(0xffffffffffffffff) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) modify_ldt$write(0x1, &(0x7f0000000000)={0xfff}, 0x10) modify_ldt$write(0x1, &(0x7f0000001700)={0x800}, 0x10) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0xc00, &(0x7f0000001740)=ANY=[@ANYBLOB='cruft,block=0x0000000000000400\x00session=0x0000000000000006,check=relaxed,utf8,cruftAuid=', @ANYRES64, @ANYBLOB="2c8ef6fff25f71854bb02441c2edff2c66736dbdda08da0968bf8783e49a23113d307830303030303000bd2551db78fc65240062c543fd92499a55c4676e4ab57351fab1f21354c2000000000000a36961e03f1f9b339e1208fe76adf824d531e4f11e82cd11bccd3e4d4cd5b4502ba9708a2827923cada4e88ec20e806b355ece7f4afbb71f1eafd72d05729509434e51cc55317bb19441bd11c979ca9786b51118d9b1c2246f0b40ab6700000000000000da855836b2ae2ca015a89c5a93917ce89bf9b25873b64212817b398012e71c56a6e54fff0f5a90c26a2b31fa0443dc5e59649e4678b04b917313b3ae5df833cf837087331201356ac926fc24fb7c21d65244421f457d954663ffc16a2f5eaf7a3033e71490413eb81a78125fbe905813b0fa518e44ce2779b29087ca0c5af3a3c05c64d6d98098d8d6c16eaa61179eb9acdbb0b8523c0fb26684c472244428cd27b2c4fa7d92d28776bff943ac830c7f4e70aa6cb4352cc2c57f79ae038939e36a954e5db9ed0cd416f21922632de28ceabe2930fc2f646809fa96a6f2e6eebdcef590508b859cb3bbefab67826828f4b7a7161e15b7b6333643fd5c2f023e5fcc4d97b3c68aaff91f7d85b5d3ea153079a7fc71cb6e8675d03eb5e1dce7d6aefde356c9b1122b888d45a8e636648a127ab8b100b7aa18234d", @ANYRES16=r4, @ANYRESHEX, @ANYRESDEC], 0x0, 0x654, &(0x7f00000028c0)="$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") r8 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0\x00', 0x0, 0x0) execveat(r8, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) setpriority(0x1, 0x2, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) poll(&(0x7f0000000740)=[{r9, 0x400}], 0x1, 0xfffffff9) 184.945566ms ago: executing program 1 (id=3292): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000001400010000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) gettid() close(0xffffffffffffffff) execveat(0xffffffffffffff9c, 0x0, &(0x7f0000001440), 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(0xffffffffffffffff, 0xc0145401, 0x0) socket$packet(0x11, 0x3, 0x300) socket$nl_sock_diag(0x10, 0x3, 0x4) r1 = syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000280)='./file0\x00', 0x4c, &(0x7f00000003c0)={[{@numtail}, {@shortname_win95}, {@numtail}, {@shortname_winnt}, {@shortname_win95}, {@rodir}, {@utf8}, {@shortname_mixed}, {@shortname_win95}]}, 0x0, 0x2a8, &(0x7f0000000d00)="$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") ioctl$VFAT_IOCTL_READDIR_SHORT(r1, 0x82307202, &(0x7f0000000ac0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) ioctl$VFAT_IOCTL_READDIR_SHORT(r1, 0x82307201, &(0x7f0000000500)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) 112.183421ms ago: executing program 1 (id=3293): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f0000002a40)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='GPL\x00', 0x4, 0x1000, &(0x7f0000000300)=""/4096}, 0x90) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_aout(r0, &(0x7f00000002c0)=ANY=[], 0xc1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000005, 0x13, r0, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r1, 0x10d, 0xb, 0x0, &(0x7f00000000c0)) 111.633921ms ago: executing program 3 (id=3294): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc0ed000e, &(0x7f00000000c0)={[{@jqfmt_vfsold}, {@barrier}, {@debug}, {@noload}, {@mblk_io_submit}, {@commit={'commit', 0x3d, 0x5}}, {@init_itable_val={'init_itable', 0x3d, 0x601}}, {@debug}]}, 0xfe, 0x46d, &(0x7f0000000f00)="$eJzs3M1vFOUfAPDvTF94+/FrRXwBQapoJL60tLzIwYtGEw6amOgB46m2hVQKNbQmQohWD3g0JN6N/4XxpBejXjTxqndDQgwXUC9rZmemLMtu2aXbLnQ/n2S6zzPzdJ/nOzPP7jPz7G4APWsk+5NE/C8ifo+IoTx7a4GR/OHGtYtTf1+7OJVEpfLWX0m13PVrF6fKouX/bcszlUqR39Sg3kvvRkzOzc2cK/Jji2c+GFs4f+GF2TOTp2ZOzZydOHbs8KG9g0cnjnQkziyu67s/nt+z6/g7l9+YOnH5vZ+S/sjjjro4OmUk37sNPd3pyrpse026umOX7fvlZrrRmUA39UVEdrgGqv1/KPpiy/K2oXjts642DlhTlUqlssKr8lIF2MCS6HYLgO4o3+iz699yWaehxz3h6sv5BVAW941iybf0R5on9g3UXd920khEnFj656tsiTW6DwEAUOu7bPzzfKPxXxoP54nB7M//izmU4Yh4ICJ2RMSDEbEzIh6KqJZ9JCIebbP++hmS28c/6ZW7Dq4F2fjvpWJu69bxX1oWGe4rctur8Q8kJ2fnZg4W++RADGw6OZvMjK9Qx/ev/vZFs221479syeovx4JFO670192gm55cnFxNzLWufhqxu79R/EmU0zhJROyKiN13Wcfss/1Nt905/hU0f9qWVb6OeCY//ktRF38paTo/Of7i0YkjY5tjbubgWHlW3O7nXy+92az+VcXfAdnx39rw/F+OfzjZHLFw/sLp6nztQvt1XPrj86bXNG2e/8e3F+f/YPJ2dcVgseGjycXFc+MRg8nrt6+fuPlsZb4sn8V/YH/j/r8jbu6JxyJiT0TsjYjHs4vCou1PRMSTEbF/hfh/fOWp99uPf33mSrP4p+90/KP2+Lef6Dv9w7d3jn9zRDQ7/oerqQPFmlZe/1pt4Gr2HQAAANwv0upn4JN0dDmdpqOj+Wf4d8bWdG5+YfG5k/Mfnp3OPys/HANpeadrqOZ+6Hhxb7jMT9TlDxX3jb/s21LNj07Nz013O3jocdua9P/Mn33dbh2w5jowjwbcp/R/6F36P/SmRP+Hnqb/Q+9q1P8/aVp69Js1bQywrrz/Q+9qof8v5Q/NRwXA/cn7P/Qu/R96UtPvxqer+sr/uif+LX7P8F5pz8ZPRHpPNGPjJ/pb/jGLNhKVobz/Z2s2NSzT7VcmAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAzvgvAAD//w3J5b0=") r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) open_by_handle_at(r1, &(0x7f0000000240)=@reiserfs_2={0x8, 0x2, {0xc, 0x8fd344c1}}, 0x0) r2 = syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2008082, &(0x7f0000000080), 0x1, 0x553, &(0x7f0000000ac0)="$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") r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f00000000c0)={0x0, 0x0}) r4 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r4, 0x29, 0xc8, 0x0, 0xc000000) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000180)="838a7670b429f9", 0x7}], 0x1}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)={0x1c, 0x4, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 320.281µs ago: executing program 1 (id=3295): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)='%-010d \x00'}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x4, &(0x7f00000002c0)={{r0}, &(0x7f0000000200), &(0x7f0000000280)='%pI4 \x00'}, 0x20) 0s ago: executing program 1 (id=3296): sendmsg$DCCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f00000003c0)={0xd80, 0x13, 0x0, 0x0, 0x0, {}, [@INET_DIAG_REQ_BYTECODE={0x30, 0x1, "91a4fd1b29e48ea8c70b5fae567520bf352b20d599c0dfa79430f3d19f4f9bad3e29ad74de545384ad7d1ee4"}, @INET_DIAG_REQ_BYTECODE={0x7, 0x1, "6a74cd"}, @INET_DIAG_REQ_BYTECODE={0xd8, 0x1, "d0289d3b59e4667a9e6357008b9d332870e90871d0b97c195f5b6d498541fc5daf23af17975067d320709475e50477f12e57ef81ee7e581b8ec286e7599ecef93aa752edd8f824466e887170bdeeec661052ab4411d689fdf594564ecd041a552624e2399bbba576460eae6ad06c69f24c13fe3db823dbc6079681e35442759bc4f5d9dbf165ca2fbd8806606758ff2d14fdfe208d0ddef180fc3f69ddb5d2aabfc9c2fec6052e0f9415f37dbe315b86b1aa0753f0a2895582bb46ff846dc4535920e9a6365b93a64acbfa26246a1900db69adf3"}, @INET_DIAG_REQ_BYTECODE={0xb1, 0x1, "81486e59df592fe5f32997d2af158ce0bd7562cbfa11755adcf2eec574c94e433eb3f92a34fbbc7be6e05247dc70c955f9de615cb516c821aa1cb4db1a84bf4497a71df3717f22c816ccfad0dd3b99bfcae11229269a00021ffb36f07fd59a6f0aad8e9a287dc76c41fb3401a1fce7a1078b0329b59343eab7d786d3a6178005d3463347470e4139398bd4ebeb67426edb747766166dc73cc598b5a0ad400138abb811d5babe29b169e02f39ce"}, @INET_DIAG_REQ_BYTECODE={0x50, 0x1, "521cca5b0aa0beaa09c25121755f5b0798c51ed066d18faa54a7014e451d8adfc4c76fdffbbf81351c74a7e5e23a926e2252642bc6c6158b5ab211ae68e23f8d944be88df6ed5035d75c6bda"}, @INET_DIAG_REQ_BYTECODE={0xa0, 0x1, "954fe94bc52a8b89c607a47bab1bf977a1dcf969ef64fdeb4141218f86a90ee537556780fd0a8c9c675154d13166be1b481543a687fc0943ae484b2e53d12406e32522d6ae58d836aea4d33f6e295220d598e8d60225f0b2d5599e7175431cf73a509ecd39609df3b4efc38f5a0bb80d009b390290386c16c938474038b9fe86bce12511bced4e457bd8065fe4676fb7f74aaa0a4450044ac3b0b760"}, @INET_DIAG_REQ_BYTECODE={0x7b, 0x1, "535ce81c73cdb095ad90bc89c7e8161833585f87555d38065e19cd1c4c5672aef779b6cf5030d992e51c4af4ffd6717caae26634529c96a494ea8ffa1aed93c1355b3cdb93bab5934d0bfed7159e7829047f396721b9a7304c378103300fdd66d1dfb500071af4e0f173b0c4aa979a946f7659a31c0b86"}, @INET_DIAG_REQ_BYTECODE={0xa04, 0x1, "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"}]}, 0xd80}, 0x1, 0x0, 0x0, 0x20000815}, 0xd0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c812e5d6000"}) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) ppoll(&(0x7f0000000140)=[{r0, 0x4}], 0x1, 0x0, 0x0, 0x0) ioctl$TCSETA(r1, 0x402c542d, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, "dac7a15f305b57a3"}) kernel console output (not intermixed with test programs): [ 187.231130][T12027] [ 187.265162][T11540] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 187.275685][T11540] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.285788][T11540] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 187.296300][T11540] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.306281][T11540] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 187.316796][T11540] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.326729][T11540] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 187.337302][T11540] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.347185][T11540] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 187.357607][T11540] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.367419][T11540] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 187.377905][T11540] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.391977][T11540] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 187.437491][T12045] loop4: detected capacity change from 0 to 512 [ 187.457878][T12045] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 187.462258][T11760] veth0_vlan: entered promiscuous mode [ 187.476590][T12045] ext4 filesystem being mounted at /420/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 187.500158][T11540] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 187.510653][T11540] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.520495][T11540] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 187.530925][T11540] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.540772][T11540] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 187.551185][T11540] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.560986][T11540] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 187.571411][T11540] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.581235][T11540] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 187.591686][T11540] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.601526][T11540] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 187.611979][T11540] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.625748][T11540] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 187.634437][T11540] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.634628][ T6563] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.643146][T11540] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.660817][T11540] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.669564][T11540] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.679516][T12047] __nla_validate_parse: 7 callbacks suppressed [ 187.679571][T12047] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2660'. [ 187.694684][T12047] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2660'. [ 187.707508][T12051] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2662'. [ 187.716645][T12051] netlink: 1 bytes leftover after parsing attributes in process `syz.2.2662'. [ 187.726529][T12051] netlink: 1 bytes leftover after parsing attributes in process `syz.2.2662'. [ 187.740699][ T29] audit: type=1326 audit(1720740968.741:2114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12050 comm="syz.2.2662" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3c1689bbd9 code=0x0 [ 187.786187][T11760] veth1_vlan: entered promiscuous mode [ 187.796254][ T29] audit: type=1326 audit(1720740968.801:2115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12058 comm="syz.4.2665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb33c498bd9 code=0x7ffc0000 [ 187.819962][ T29] audit: type=1326 audit(1720740968.801:2116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12058 comm="syz.4.2665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb33c498bd9 code=0x7ffc0000 [ 187.834080][T12061] loop3: detected capacity change from 0 to 8192 [ 187.853872][ T29] audit: type=1326 audit(1720740968.851:2117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12058 comm="syz.4.2665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fb33c498bd9 code=0x7ffc0000 [ 187.870223][T11760] veth0_macvtap: entered promiscuous mode [ 187.877372][ T29] audit: type=1326 audit(1720740968.851:2118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12058 comm="syz.4.2665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb33c498bd9 code=0x7ffc0000 [ 187.885851][T11760] veth1_macvtap: entered promiscuous mode [ 187.906396][ T29] audit: type=1326 audit(1720740968.851:2119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12058 comm="syz.4.2665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb33c498bd9 code=0x7ffc0000 [ 187.935558][ T29] audit: type=1326 audit(1720740968.851:2120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12058 comm="syz.4.2665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7fb33c498bd9 code=0x7ffc0000 [ 187.958950][ T29] audit: type=1326 audit(1720740968.851:2121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12058 comm="syz.4.2665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb33c498bd9 code=0x7ffc0000 [ 187.982477][ T29] audit: type=1326 audit(1720740968.851:2122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12058 comm="syz.4.2665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fb33c498bd9 code=0x7ffc0000 [ 188.022200][T11760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 188.032858][T11760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.042858][T11760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 188.053595][T11760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.063501][T11760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 188.063517][T11760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.063535][T11760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 188.063547][T11760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.063559][T11760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 188.114818][T11760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.114835][T11760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 188.135263][T11760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.145151][T11760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 188.155583][T11760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.168726][T11760] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 188.185764][T12072] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2670'. [ 188.191681][T11760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 188.205139][T11760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.208361][T12072] loop4: detected capacity change from 0 to 128 [ 188.215031][T11760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 188.223018][T12072] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 188.231610][T11760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.250514][T11760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 188.261032][T11760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.270937][T11760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 188.281528][T11760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.291328][T11760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 188.301821][T11760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.311698][T11760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 188.322173][T11760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.332042][T11760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 188.342445][T11760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.355371][T11760] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 188.365273][T11760] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.373968][T11760] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.382770][T11760] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.391519][T11760] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.429015][T12084] loop1: detected capacity change from 0 to 512 [ 188.433242][T12083] netlink: 'syz.3.2675': attribute type 1 has an invalid length. [ 188.458656][T12090] sg_write: data in/out 68/14 bytes for SCSI command 0x0-- guessing data in; [ 188.458656][T12090] program syz.0.2575 not setting count and/or reply_len properly [ 188.480839][T12084] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 188.516229][T12084] ext4 filesystem being mounted at /2/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 188.567644][T12084] netlink: 'syz.1.2674': attribute type 10 has an invalid length. [ 188.575575][T12084] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2674'. [ 188.621025][T12108] FAULT_INJECTION: forcing a failure. [ 188.621025][T12108] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 188.623103][T12084] team0: Port device geneve1 added [ 188.634206][T12108] CPU: 0 PID: 12108 Comm: syz.0.2680 Tainted: G W 6.10.0-rc7-syzkaller-00139-g8a18fda0febb #0 [ 188.650967][T12108] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 188.661165][T12108] Call Trace: [ 188.664443][T12108] [ 188.667445][T12108] dump_stack_lvl+0xf2/0x150 [ 188.672048][T12108] dump_stack+0x15/0x20 [ 188.676213][T12108] should_fail_ex+0x229/0x230 [ 188.681002][T12108] should_fail+0xb/0x10 [ 188.685241][T12108] should_fail_usercopy+0x1a/0x20 [ 188.690280][T12108] _copy_to_user+0x1e/0xa0 [ 188.694783][T12108] simple_read_from_buffer+0xa0/0x110 [ 188.700169][T12108] proc_fail_nth_read+0xfc/0x140 [ 188.705114][T12108] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 188.710783][T12108] vfs_read+0x1a2/0x6e0 [ 188.714947][T12108] ? __rcu_read_unlock+0x4e/0x70 [ 188.719894][T12108] ? __fget_files+0x1da/0x210 [ 188.724587][T12108] ksys_read+0xeb/0x1b0 [ 188.728779][T12108] __x64_sys_read+0x42/0x50 [ 188.733378][T12108] x64_sys_call+0x27e5/0x2d70 [ 188.738039][T12108] do_syscall_64+0xc9/0x1c0 [ 188.742529][T12108] ? clear_bhb_loop+0x55/0xb0 [ 188.747188][T12108] ? clear_bhb_loop+0x55/0xb0 [ 188.751911][T12108] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.757852][T12108] RIP: 0033:0x7fa45c85d6bc [ 188.762243][T12108] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8c 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 1f 8d 02 00 48 [ 188.775739][T12115] program syz.2.2683 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 188.781871][T12108] RSP: 002b:00007fa45bae0040 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 188.781895][T12108] RAX: ffffffffffffffda RBX: 00007fa45c9ecf60 RCX: 00007fa45c85d6bc [ 188.781906][T12108] RDX: 000000000000000f RSI: 00007fa45bae00b0 RDI: 0000000000000004 [ 188.815462][T12108] RBP: 00007fa45bae00a0 R08: 0000000000000000 R09: 0000000000000000 [ 188.823433][T12108] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 188.831408][T12108] R13: 000000000000000b R14: 00007fa45c9ecf60 R15: 00007ffda65a1318 [ 188.839370][T12108] [ 188.847151][T11540] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.907214][T12125] loop1: detected capacity change from 0 to 1024 [ 188.913946][T12125] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 188.924881][T12125] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 188.938209][T12125] jbd2_journal_init_inode: Cannot locate journal superblock [ 188.945575][T12125] EXT4-fs (loop1): Could not load journal inode [ 188.989160][T12125] loop1: detected capacity change from 0 to 1024 [ 188.995902][T12125] EXT4-fs (loop1): first meta block group too large: 7 (group descriptor block count 1) [ 189.014906][T12131] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2688'. [ 189.049487][T12125] loop1: detected capacity change from 0 to 164 [ 189.056530][T12125] rock: corrupted directory entry. extent=41, offset=65536, size=8 [ 189.065979][T12125] rock: corrupted directory entry. extent=41, offset=65536, size=8 [ 189.089779][T12137] loop3: detected capacity change from 0 to 2048 [ 189.107518][T12137] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 189.124195][T12137] FAULT_INJECTION: forcing a failure. [ 189.124195][T12137] name failslab, interval 1, probability 0, space 0, times 0 [ 189.136882][T12137] CPU: 0 PID: 12137 Comm: syz.3.2690 Tainted: G W 6.10.0-rc7-syzkaller-00139-g8a18fda0febb #0 [ 189.148503][T12137] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 189.158624][T12137] Call Trace: [ 189.161903][T12137] [ 189.164825][T12137] dump_stack_lvl+0xf2/0x150 [ 189.169512][T12137] dump_stack+0x15/0x20 [ 189.173741][T12137] should_fail_ex+0x229/0x230 [ 189.178417][T12137] ? __alloc_skb+0x10b/0x300 [ 189.183061][T12137] __should_failslab+0x92/0xa0 [ 189.187825][T12137] should_failslab+0x9/0x20 [ 189.192337][T12137] kmem_cache_alloc_node_noprof+0x51/0x2b0 [ 189.198163][T12137] __alloc_skb+0x10b/0x300 [ 189.202609][T12137] netlink_alloc_large_skb+0xad/0xe0 [ 189.207938][T12137] netlink_sendmsg+0x3b4/0x6e0 [ 189.212761][T12137] ? __pfx_netlink_sendmsg+0x10/0x10 [ 189.218039][T12137] __sock_sendmsg+0x140/0x180 [ 189.222714][T12137] ____sys_sendmsg+0x312/0x410 [ 189.227480][T12137] __sys_sendmsg+0x1e9/0x280 [ 189.232061][T12137] __x64_sys_sendmsg+0x46/0x50 [ 189.236802][T12137] x64_sys_call+0xb25/0x2d70 [ 189.241433][T12137] do_syscall_64+0xc9/0x1c0 [ 189.245919][T12137] ? clear_bhb_loop+0x55/0xb0 [ 189.250629][T12137] ? clear_bhb_loop+0x55/0xb0 [ 189.255286][T12137] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.261159][T12137] RIP: 0033:0x7fd0a21a1bd9 [ 189.265548][T12137] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 189.285207][T12137] RSP: 002b:00007fd0a1423048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 189.293612][T12137] RAX: ffffffffffffffda RBX: 00007fd0a232ff60 RCX: 00007fd0a21a1bd9 [ 189.301638][T12137] RDX: 0000000000000000 RSI: 0000000020001200 RDI: 0000000000000008 [ 189.309601][T12137] RBP: 00007fd0a14230a0 R08: 0000000000000000 R09: 0000000000000000 [ 189.317612][T12137] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 189.325592][T12137] R13: 000000000000000b R14: 00007fd0a232ff60 R15: 00007ffe2edb2928 [ 189.333548][T12137] [ 189.406687][T12154] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2695'. [ 189.425779][T12158] loop1: detected capacity change from 0 to 1024 [ 189.440248][T11743] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.454013][T12162] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2699'. [ 189.522394][T12172] loop4: detected capacity change from 0 to 1024 [ 189.529351][T12172] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 189.540330][T12172] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 189.558895][T12172] jbd2_journal_init_inode: Cannot locate journal superblock [ 189.562238][T12179] loop3: detected capacity change from 0 to 512 [ 189.566186][T12172] EXT4-fs (loop4): Could not load journal inode [ 189.579719][T12179] EXT4-fs: Ignoring removed mblk_io_submit option [ 189.586777][T12179] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 189.597364][T12179] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a042c118, mo2=0002] [ 189.605875][T12179] System zones: 1-12 [ 189.610025][T12179] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2234: inode #15: comm syz.3.2705: corrupted in-inode xattr: e_value size too large [ 189.624416][T12179] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz.3.2705: couldn't read orphan inode 15 (err -117) [ 189.637764][T12179] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 189.642131][T12172] loop4: detected capacity change from 0 to 1024 [ 189.656860][T12172] EXT4-fs (loop4): first meta block group too large: 7 (group descriptor block count 1) [ 189.730854][T12172] loop4: detected capacity change from 0 to 164 [ 189.741781][T12187] loop1: detected capacity change from 0 to 512 [ 189.748702][T11743] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.748750][T12187] EXT4-fs: Ignoring removed nobh option [ 189.763415][T12187] EXT4-fs: test_dummy_encryption option not supported [ 189.770587][T12172] rock: corrupted directory entry. extent=41, offset=65536, size=8 [ 189.778941][T12172] rock: corrupted directory entry. extent=41, offset=65536, size=8 [ 189.816716][T12191] bond1: entered promiscuous mode [ 189.821770][T12191] bond1: entered allmulticast mode [ 189.827626][T12191] 8021q: adding VLAN 0 to HW filter on device bond1 [ 189.843113][T12191] bond1 (unregistering): Released all slaves [ 189.854342][T12197] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 189.866798][T12200] FAULT_INJECTION: forcing a failure. [ 189.866798][T12200] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 189.879907][T12200] CPU: 1 PID: 12200 Comm: syz.1.2713 Tainted: G W 6.10.0-rc7-syzkaller-00139-g8a18fda0febb #0 [ 189.891544][T12200] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 189.901620][T12200] Call Trace: [ 189.904953][T12200] [ 189.907876][T12200] dump_stack_lvl+0xf2/0x150 [ 189.912489][T12200] dump_stack+0x15/0x20 [ 189.916660][T12200] should_fail_ex+0x229/0x230 [ 189.921394][T12200] should_fail+0xb/0x10 [ 189.925629][T12200] should_fail_usercopy+0x1a/0x20 [ 189.930652][T12200] _copy_from_user+0x1e/0xd0 [ 189.935240][T12200] copy_msghdr_from_user+0x54/0x2a0 [ 189.940572][T12200] __sys_sendmsg+0x17d/0x280 [ 189.945178][T12200] __x64_sys_sendmsg+0x46/0x50 [ 189.949977][T12200] x64_sys_call+0xb25/0x2d70 [ 189.954573][T12200] do_syscall_64+0xc9/0x1c0 [ 189.959169][T12200] ? clear_bhb_loop+0x55/0xb0 [ 189.963852][T12200] ? clear_bhb_loop+0x55/0xb0 [ 189.968535][T12200] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.974501][T12200] RIP: 0033:0x7f815e8d4bd9 [ 189.978917][T12200] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 189.998655][T12200] RSP: 002b:00007f815db56048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 190.007061][T12200] RAX: ffffffffffffffda RBX: 00007f815ea62f60 RCX: 00007f815e8d4bd9 [ 190.015106][T12200] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000003 [ 190.023094][T12200] RBP: 00007f815db560a0 R08: 0000000000000000 R09: 0000000000000000 [ 190.031103][T12200] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 190.039138][T12200] R13: 000000000000000b R14: 00007f815ea62f60 R15: 00007fff6cee19d8 [ 190.047091][T12200] [ 190.161436][T12218] loop4: detected capacity change from 0 to 512 [ 190.168176][T12218] EXT4-fs: Ignoring removed mblk_io_submit option [ 190.175636][T12218] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 190.182899][T12215] loop2: detected capacity change from 0 to 8192 [ 190.186138][T12218] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a042c118, mo2=0002] [ 190.196449][T12221] loop1: detected capacity change from 0 to 128 [ 190.199806][T12218] System zones: 1-12 [ 190.204507][T12221] EXT4-fs: Ignoring removed nobh option [ 190.208458][T12218] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2234: inode #15: comm syz.4.2719: corrupted in-inode xattr: e_value size too large [ 190.216196][T12221] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 190.231191][T12218] EXT4-fs error (device loop4): ext4_orphan_get:1399: comm syz.4.2719: couldn't read orphan inode 15 (err -117) [ 190.239845][T12221] ext4 filesystem being mounted at /10/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 190.254026][T12218] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 190.278746][T12216] sctp: [Deprecated]: syz.1.2715 (pid 12216) Use of int in max_burst socket option deprecated. [ 190.278746][T12216] Use struct sctp_assoc_value instead [ 190.354844][ T6563] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.369512][T12230] loop2: detected capacity change from 0 to 1024 [ 190.378003][T12230] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 190.388926][T12230] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 190.399061][T12230] jbd2_journal_init_inode: Cannot locate journal superblock [ 190.406491][T12230] EXT4-fs (loop2): Could not load journal inode [ 190.442011][T12230] loop2: detected capacity change from 0 to 1024 [ 190.449022][T12230] EXT4-fs (loop2): first meta block group too large: 7 (group descriptor block count 1) [ 190.478611][T12230] loop2: detected capacity change from 0 to 164 [ 190.485793][T12230] rock: corrupted directory entry. extent=41, offset=65536, size=8 [ 190.494092][T12230] rock: corrupted directory entry. extent=41, offset=65536, size=8 [ 190.572837][T12240] loop2: detected capacity change from 0 to 512 [ 190.587878][T12240] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 190.600494][T12240] ext4 filesystem being mounted at /279/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 190.617194][T12240] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 190.623320][T12246] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 190.631662][T12240] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 2 with error 28 [ 190.653398][T12240] EXT4-fs (loop2): This should not happen!! Data will be lost [ 190.653398][T12240] [ 190.663039][T12240] EXT4-fs (loop2): Total free blocks count 0 [ 190.669044][T12240] EXT4-fs (loop2): Free/Dirty block details [ 190.675021][T12240] EXT4-fs (loop2): free_blocks=65280 [ 190.680308][T12240] EXT4-fs (loop2): dirty_blocks=2 [ 190.685344][T12240] EXT4-fs (loop2): Block reservation details [ 190.691324][T12240] EXT4-fs (loop2): i_reserved_data_blocks=2 [ 190.708551][ T8294] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.791016][T12250] loop2: detected capacity change from 0 to 8192 [ 190.926630][T11540] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 190.959500][T12255] loop4: detected capacity change from 0 to 512 [ 190.966649][T12255] EXT4-fs: Ignoring removed mblk_io_submit option [ 190.977690][T12255] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 190.987205][T12255] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a042c118, mo2=0002] [ 190.987537][T12258] loop3: detected capacity change from 0 to 1024 [ 190.997279][T12255] System zones: 1-12 [ 191.005977][T12255] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2234: inode #15: comm syz.4.2734: corrupted in-inode xattr: e_value size too large [ 191.007562][T12258] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 191.023105][T12255] EXT4-fs error (device loop4): ext4_orphan_get:1399: comm syz.4.2734: couldn't read orphan inode 15 (err -117) [ 191.031007][T12258] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 191.055886][T12258] jbd2_journal_init_inode: Cannot locate journal superblock [ 191.058237][T12255] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 191.063154][T12258] EXT4-fs (loop3): Could not load journal inode [ 191.113823][T12258] loop3: detected capacity change from 0 to 1024 [ 191.120638][T12258] EXT4-fs (loop3): first meta block group too large: 7 (group descriptor block count 1) [ 191.139149][ T6563] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.206830][T12270] loop4: detected capacity change from 0 to 1024 [ 191.223976][T12270] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 191.234975][T12270] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 191.265841][T12270] jbd2_journal_init_inode: Cannot locate journal superblock [ 191.273140][T12270] EXT4-fs (loop4): Could not load journal inode [ 191.334755][T12268] FAULT_INJECTION: forcing a failure. [ 191.334755][T12268] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 191.347878][T12268] CPU: 0 PID: 12268 Comm: syz.0.2739 Tainted: G W 6.10.0-rc7-syzkaller-00139-g8a18fda0febb #0 [ 191.359537][T12268] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 191.369640][T12268] Call Trace: [ 191.372915][T12268] [ 191.375843][T12268] dump_stack_lvl+0xf2/0x150 [ 191.380445][T12268] dump_stack+0x15/0x20 [ 191.384665][T12268] should_fail_ex+0x229/0x230 [ 191.389405][T12268] should_fail+0xb/0x10 [ 191.393552][T12268] should_fail_usercopy+0x1a/0x20 [ 191.398575][T12268] _copy_to_user+0x1e/0xa0 [ 191.402990][T12268] simple_read_from_buffer+0xa0/0x110 [ 191.408456][T12268] proc_fail_nth_read+0xfc/0x140 [ 191.413395][T12268] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 191.418935][T12268] vfs_read+0x1a2/0x6e0 [ 191.423131][T12268] ? __rcu_read_unlock+0x4e/0x70 [ 191.428079][T12268] ? __fget_files+0x1da/0x210 [ 191.432756][T12268] ksys_read+0xeb/0x1b0 [ 191.436152][T12273] loop3: detected capacity change from 0 to 164 [ 191.436903][T12268] __x64_sys_read+0x42/0x50 [ 191.443965][T12273] rock: corrupted directory entry. extent=41, offset=65536, size=8 [ 191.447609][T12268] x64_sys_call+0x27e5/0x2d70 [ 191.447638][T12268] do_syscall_64+0xc9/0x1c0 [ 191.457356][T12273] rock: corrupted directory entry. extent=41, offset=65536, size=8 [ 191.460207][T12268] ? clear_bhb_loop+0x55/0xb0 [ 191.477304][T12268] ? clear_bhb_loop+0x55/0xb0 [ 191.481974][T12268] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.487857][T12268] RIP: 0033:0x7fa45c85d6bc [ 191.492253][T12268] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8c 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 1f 8d 02 00 48 [ 191.511901][T12268] RSP: 002b:00007fa45bae0040 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 191.520299][T12268] RAX: ffffffffffffffda RBX: 00007fa45c9ecf60 RCX: 00007fa45c85d6bc [ 191.528316][T12268] RDX: 000000000000000f RSI: 00007fa45bae00b0 RDI: 0000000000000004 [ 191.536269][T12268] RBP: 00007fa45bae00a0 R08: 0000000000000000 R09: 0000000000000000 [ 191.544224][T12268] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 191.552178][T12268] R13: 000000000000000b R14: 00007fa45c9ecf60 R15: 00007ffda65a1318 [ 191.560137][T12268] [ 191.571821][T12270] loop4: detected capacity change from 0 to 1024 [ 191.578645][T12270] EXT4-fs (loop4): first meta block group too large: 7 (group descriptor block count 1) [ 191.638254][T12270] loop4: detected capacity change from 0 to 164 [ 191.645839][T12270] rock: corrupted directory entry. extent=41, offset=65536, size=8 [ 191.659468][T12270] rock: corrupted directory entry. extent=41, offset=65536, size=8 [ 191.733766][T12278] loop4: detected capacity change from 0 to 128 [ 191.761501][T12278] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 191.852514][T12280] loop2: detected capacity change from 0 to 8192 [ 191.931963][ T29] kauditd_printk_skb: 33 callbacks suppressed [ 191.931976][ T29] audit: type=1326 audit(1720740972.931:2156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12285 comm="syz.1.2744" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f815e8d4bd9 code=0x0 [ 192.039372][T12302] loop0: detected capacity change from 0 to 1024 [ 192.048947][T12302] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 192.059985][T12302] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 192.085806][T12302] jbd2_journal_init_inode: Cannot locate journal superblock [ 192.093196][T12302] EXT4-fs (loop0): Could not load journal inode [ 192.141790][T12302] loop0: detected capacity change from 0 to 1024 [ 192.148395][T12302] EXT4-fs (loop0): first meta block group too large: 7 (group descriptor block count 1) [ 192.208506][T12302] loop0: detected capacity change from 0 to 164 [ 192.215564][T12302] rock: corrupted directory entry. extent=41, offset=65536, size=8 [ 192.223848][T12302] rock: corrupted directory entry. extent=41, offset=65536, size=8 [ 192.292207][T12308] loop0: detected capacity change from 0 to 128 [ 192.300271][T12308] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 192.387403][T12312] loop0: detected capacity change from 0 to 1024 [ 192.448458][T12314] loop0: detected capacity change from 0 to 1024 [ 192.455411][T12314] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 192.466332][T12314] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 192.476430][T12314] jbd2_journal_init_inode: Cannot locate journal superblock [ 192.483747][T12314] EXT4-fs (loop0): Could not load journal inode [ 192.529109][T12314] loop0: detected capacity change from 0 to 1024 [ 192.536030][T12314] EXT4-fs (loop0): first meta block group too large: 7 (group descriptor block count 1) [ 192.756102][T12318] loop0: detected capacity change from 0 to 164 [ 192.763395][T12318] rock: corrupted directory entry. extent=41, offset=65536, size=8 [ 192.771865][T12318] rock: corrupted directory entry. extent=41, offset=65536, size=8 [ 192.976706][T12331] loop2: detected capacity change from 0 to 1024 [ 192.977349][T12334] loop1: detected capacity change from 0 to 128 [ 192.990364][T12334] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 193.011430][T12331] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 193.022623][T12331] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 193.043123][T12331] jbd2_journal_init_inode: Cannot locate journal superblock [ 193.050511][T12331] EXT4-fs (loop2): Could not load journal inode [ 193.132266][T12331] loop2: detected capacity change from 0 to 1024 [ 193.139222][T12331] EXT4-fs (loop2): first meta block group too large: 7 (group descriptor block count 1) [ 193.179591][T12331] loop2: detected capacity change from 0 to 164 [ 193.186413][T12331] rock: corrupted directory entry. extent=41, offset=65536, size=8 [ 193.195194][T12331] rock: corrupted directory entry. extent=41, offset=65536, size=8 [ 193.283381][T12349] loop2: detected capacity change from 0 to 512 [ 193.301245][T12349] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 193.301298][T12349] ext4 filesystem being mounted at /286/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 193.321475][ T8294] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.396713][T12362] loop3: detected capacity change from 0 to 128 [ 193.400527][T12362] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 193.551056][T12378] loop3: detected capacity change from 0 to 512 [ 193.551287][T12378] EXT4-fs: Ignoring removed mblk_io_submit option [ 193.564517][T12378] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 193.577293][T12378] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a042c118, mo2=0002] [ 193.577321][T12378] System zones: 1-12 [ 193.588909][T12378] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2234: inode #15: comm syz.3.2781: corrupted in-inode xattr: e_value size too large [ 193.589223][T12378] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz.3.2781: couldn't read orphan inode 15 (err -117) [ 193.629118][T12378] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 193.750455][T11743] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.841730][T12390] __nla_validate_parse: 9 callbacks suppressed [ 193.841762][T12390] netlink: 476 bytes leftover after parsing attributes in process `syz.3.2784'. [ 193.857063][T12390] netlink: 'syz.3.2784': attribute type 5 has an invalid length. [ 193.899414][T12393] loop3: detected capacity change from 0 to 128 [ 193.907496][T12393] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 194.269273][T12418] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 194.292166][T12413] FAULT_INJECTION: forcing a failure. [ 194.292166][T12413] name failslab, interval 1, probability 0, space 0, times 0 [ 194.304847][T12413] CPU: 1 PID: 12413 Comm: syz.3.2790 Tainted: G W 6.10.0-rc7-syzkaller-00139-g8a18fda0febb #0 [ 194.316467][T12413] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 194.326520][T12413] Call Trace: [ 194.329798][T12413] [ 194.332724][T12413] dump_stack_lvl+0xf2/0x150 [ 194.337408][T12413] dump_stack+0x15/0x20 [ 194.341568][T12413] should_fail_ex+0x229/0x230 [ 194.346244][T12413] ? __sigqueue_alloc+0xf6/0x180 [ 194.351183][T12413] __should_failslab+0x92/0xa0 [ 194.355947][T12413] should_failslab+0x9/0x20 [ 194.360518][T12413] kmem_cache_alloc_noprof+0x4c/0x290 [ 194.365902][T12413] __sigqueue_alloc+0xf6/0x180 [ 194.370667][T12413] __send_signal_locked+0x139/0x700 [ 194.375942][T12413] send_signal_locked+0x28f/0x3a0 [ 194.380988][T12413] do_send_sig_info+0x9f/0xf0 [ 194.385671][T12413] send_sig+0x53/0x60 [ 194.389647][T12413] inode_newsize_ok+0x96/0x130 [ 194.394412][T12413] shmem_fallocate+0xd0/0x860 [ 194.399092][T12413] ? selinux_file_permission+0x32c/0x360 [ 194.404782][T12413] vfs_fallocate+0x380/0x3e0 [ 194.409383][T12413] __x64_sys_fallocate+0x79/0xc0 [ 194.414325][T12413] x64_sys_call+0x27b3/0x2d70 [ 194.419071][T12413] do_syscall_64+0xc9/0x1c0 [ 194.423654][T12413] ? clear_bhb_loop+0x55/0xb0 [ 194.428337][T12413] ? clear_bhb_loop+0x55/0xb0 [ 194.433167][T12413] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.439069][T12413] RIP: 0033:0x7fd0a21a1bd9 [ 194.443498][T12413] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 194.463111][T12413] RSP: 002b:00007fd0a13e1048 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 194.471526][T12413] RAX: ffffffffffffffda RBX: 00007fd0a2330110 RCX: 00007fd0a21a1bd9 [ 194.479493][T12413] RDX: 0400000000000000 RSI: 0000000000000000 RDI: 0000000000000006 [ 194.487457][T12413] RBP: 00007fd0a13e10a0 R08: 0000000000000000 R09: 0000000000000000 [ 194.495422][T12413] R10: 0000000000000007 R11: 0000000000000246 R12: 0000000000000001 [ 194.503424][T12413] R13: 000000000000006e R14: 00007fd0a2330110 R15: 00007ffe2edb2928 [ 194.511413][T12413] [ 194.539334][T12429] loop2: detected capacity change from 0 to 1024 [ 194.557143][T12429] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 194.560360][T12431] loop4: detected capacity change from 0 to 1024 [ 194.568071][T12429] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 194.618292][T12431] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 194.629183][T12431] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 194.658338][T12429] jbd2_journal_init_inode: Cannot locate journal superblock [ 194.665715][T12429] EXT4-fs (loop2): Could not load journal inode [ 194.693817][T12431] jbd2_journal_init_inode: Cannot locate journal superblock [ 194.701241][T12431] EXT4-fs (loop4): Could not load journal inode [ 194.789866][T12429] loop2: detected capacity change from 0 to 1024 [ 194.802736][T12431] loop4: detected capacity change from 0 to 1024 [ 194.809505][T12429] EXT4-fs (loop2): first meta block group too large: 7 (group descriptor block count 1) [ 194.819282][T12431] EXT4-fs (loop4): first meta block group too large: 7 (group descriptor block count 1) [ 194.861185][T12429] loop2: detected capacity change from 0 to 164 [ 194.869308][T12429] rock: corrupted directory entry. extent=41, offset=65536, size=8 [ 194.871251][T12431] loop4: detected capacity change from 0 to 164 [ 194.889765][T12431] rock: corrupted directory entry. extent=41, offset=65536, size=8 [ 194.889801][T12429] rock: corrupted directory entry. extent=41, offset=65536, size=8 [ 194.907104][T12431] rock: corrupted directory entry. extent=41, offset=65536, size=8 [ 194.967831][T12435] bridge0: port 2(bridge_slave_1) entered listening state [ 195.059847][T12449] loop4: detected capacity change from 0 to 128 [ 195.094056][T12449] FAT-fs (loop4): Unrecognized mount option "" or missing value [ 195.346029][T12468] loop2: detected capacity change from 0 to 1024 [ 195.353834][T12468] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 195.353856][T12468] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 195.354760][T12468] jbd2_journal_init_inode: Cannot locate journal superblock [ 195.354771][T12468] EXT4-fs (loop2): Could not load journal inode [ 195.366585][T12470] loop3: detected capacity change from 0 to 764 [ 195.399884][T12470] rock: directory entry would overflow storage [ 195.399893][T12470] rock: sig=0x4654, size=5, remaining=4 [ 195.424366][T12468] loop2: detected capacity change from 0 to 1024 [ 195.424681][T12468] EXT4-fs (loop2): first meta block group too large: 7 (group descriptor block count 1) [ 195.445935][ T29] audit: type=1326 audit(1720740976.451:2157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12469 comm="syz.3.2810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0a21a1bd9 code=0x7ffc0000 [ 195.446036][ T29] audit: type=1326 audit(1720740976.451:2158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12469 comm="syz.3.2810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0a21a1bd9 code=0x7ffc0000 [ 195.446206][ T29] audit: type=1326 audit(1720740976.451:2159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12469 comm="syz.3.2810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=289 compat=0 ip=0x7fd0a21a1bd9 code=0x7ffc0000 [ 195.446229][ T29] audit: type=1326 audit(1720740976.451:2160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12469 comm="syz.3.2810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0a21a1bd9 code=0x7ffc0000 [ 195.446305][ T29] audit: type=1326 audit(1720740976.451:2161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12469 comm="syz.3.2810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0a21a1bd9 code=0x7ffc0000 [ 195.503634][T12468] loop2: detected capacity change from 0 to 164 [ 195.578484][T12468] rock: corrupted directory entry. extent=41, offset=65536, size=8 [ 195.583444][T12468] rock: corrupted directory entry. extent=41, offset=65536, size=8 [ 195.686945][T12482] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2815'. [ 195.762912][T12491] loop3: detected capacity change from 0 to 256 [ 195.780423][T12491] FAT-fs (loop3): Unrecognized mount option "rrors=remount-ro" or missing value [ 195.891874][T12501] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2822'. [ 195.944050][T12507] loop3: detected capacity change from 0 to 1024 [ 195.963504][T12507] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 195.974655][T12507] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 196.037618][T12507] jbd2_journal_init_inode: Cannot locate journal superblock [ 196.042090][T12518] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2828'. [ 196.044956][T12507] EXT4-fs (loop3): Could not load journal inode [ 196.121206][T12507] loop3: detected capacity change from 0 to 1024 [ 196.128574][T12507] EXT4-fs (loop3): first meta block group too large: 7 (group descriptor block count 1) [ 196.156594][T12520] FAULT_INJECTION: forcing a failure. [ 196.156594][T12520] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 196.169734][T12520] CPU: 1 PID: 12520 Comm: syz.0.2830 Tainted: G W 6.10.0-rc7-syzkaller-00139-g8a18fda0febb #0 [ 196.181415][T12520] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 196.191457][T12520] Call Trace: [ 196.194727][T12520] [ 196.197676][T12520] dump_stack_lvl+0xf2/0x150 [ 196.202321][T12520] dump_stack+0x15/0x20 [ 196.206469][T12520] should_fail_ex+0x229/0x230 [ 196.211133][T12520] should_fail+0xb/0x10 [ 196.215403][T12520] should_fail_usercopy+0x1a/0x20 [ 196.220463][T12520] _copy_to_user+0x1e/0xa0 [ 196.224867][T12520] bpf_verifier_vlog+0x2ef/0x4d0 [ 196.229798][T12520] btf_verifier_log+0xaf/0xf0 [ 196.234461][T12520] ? btf_parse_hdr+0x3b/0x3a0 [ 196.239127][T12520] ? should_fail_ex+0xd7/0x230 [ 196.243952][T12520] btf_parse_hdr+0x306/0x3a0 [ 196.248596][T12520] btf_new_fd+0x270/0x790 [ 196.252920][T12520] bpf_btf_load+0x115/0x130 [ 196.257413][T12520] __sys_bpf+0x686/0x7a0 [ 196.261692][T12520] __x64_sys_bpf+0x43/0x50 [ 196.266096][T12520] x64_sys_call+0x2655/0x2d70 [ 196.270824][T12520] do_syscall_64+0xc9/0x1c0 [ 196.275318][T12520] ? clear_bhb_loop+0x55/0xb0 [ 196.280027][T12520] ? clear_bhb_loop+0x55/0xb0 [ 196.284741][T12520] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.290632][T12520] RIP: 0033:0x7fa45c85ebd9 [ 196.295111][T12520] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 196.314729][T12520] RSP: 002b:00007fa45bae0048 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 196.323129][T12520] RAX: ffffffffffffffda RBX: 00007fa45c9ecf60 RCX: 00007fa45c85ebd9 [ 196.331132][T12520] RDX: 0000000000000020 RSI: 0000000020000080 RDI: 0000000000000012 [ 196.339174][T12520] RBP: 00007fa45bae00a0 R08: 0000000000000000 R09: 0000000000000000 [ 196.347160][T12520] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 196.355115][T12520] R13: 000000000000000b R14: 00007fa45c9ecf60 R15: 00007ffda65a1318 [ 196.363071][T12520] [ 196.372118][T12524] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 196.389195][T12524] vhci_hcd: invalid port number 23 [ 196.399378][T12507] loop3: detected capacity change from 0 to 164 [ 196.407081][T12507] rock: corrupted directory entry. extent=41, offset=65536, size=8 [ 196.415532][T12507] rock: corrupted directory entry. extent=41, offset=65536, size=8 [ 196.449283][T12532] syzkaller0: entered allmulticast mode [ 196.468764][T12532] syzkaller0 (unregistering): left allmulticast mode [ 196.539463][T12539] loop1: detected capacity change from 0 to 1024 [ 196.568193][T12544] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2836'. [ 196.568871][T12539] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 196.598354][T12536] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2835'. [ 196.613112][T12536] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2835'. [ 196.622140][T12536] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2835'. [ 196.634998][T12536] ip6_vti0: Master is either lo or non-ether device [ 196.638806][T12551] loop2: detected capacity change from 0 to 2048 [ 196.661925][T12554] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2234: inode #15: comm syz.1.2837: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 196.663502][T12553] loop4: detected capacity change from 0 to 1024 [ 196.685241][T12553] EXT4-fs (loop4): first meta block group too large: 7 (group descriptor block count 1) [ 196.720274][T12551] loop2: p1 p3 p4 < p5 p6 p7 p8 p9 p10 p11 p12 p13 p14 p15 p16 p17 p18 p19 p20 p21 p22 p23 p24 p25 p26 p27 p28 p29 p30 p31 p32 p33 p34 p35 p36 p37 p38 p39 p40 p41 p42 p43 p44 p45 p46 p47 p48 p49 p50 p51 p52 p53 p54 p55 p56 p57 p58 p59 p60 p61 p62 p63 p64 p65 p66 p67 p68 p69 p70 p71 p72 p73 p74 p75 p76 p77 p78 p79 p80 p81 p82 p83 p84 p85 p86 p87 p88 p89 p90 p91 p92 p93 p94 p95 p96 p97 p98 p99 p100 p101 p102 p103 p104 p105 p106 p107 p108 p109 p110 p111 p112 p113 p114 p115 p116 p117 p118 p119 p120 p121 p122 p123 p124 p125 p126 p127 p128 p129 p130 p131 p132 p133 p134 p135 p136 p137 p138 p139 p140 p141 p142 p143 p144 p145 p146 p147 p148 p149 p150 p151 p152 p153 p154 p155 p156 p157 p158 p159 p160 p161 p162 p163 p164 p165 p166 p167 p168 p169 p170 p171 p172 p173 p174 p175 p176 p177 p178 p179 p180 p181 p182 p183 p184 p185 p186 p187 p188 p189 p190 p191 p192 p193 p194 p195 p196 p197 p198 p199 p200 p201 p202 p203 p204 p205 p206 p207 p208 p209 p210 p211 p212 p213 p214 p215 p216 p217 p218 p219 p220 p221 p222 p223 p224 p2 [ 196.720818][T12551] loop2: p3 start 4259840 is beyond EOD, truncated [ 196.950333][T12556] loop3: detected capacity change from 0 to 8192 [ 197.009980][T12559] loop4: detected capacity change from 0 to 164 [ 197.021668][T12559] rock: corrupted directory entry. extent=41, offset=65536, size=8 [ 197.030413][T12559] rock: corrupted directory entry. extent=41, offset=65536, size=8 [ 197.175865][T12561] FAULT_INJECTION: forcing a failure. [ 197.175865][T12561] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 197.189129][T12561] CPU: 1 PID: 12561 Comm: syz.3.2844 Tainted: G W 6.10.0-rc7-syzkaller-00139-g8a18fda0febb #0 [ 197.200756][T12561] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 197.210804][T12561] Call Trace: [ 197.214077][T12561] [ 197.214208][ T29] audit: type=1400 audit(1720740978.211:2162): avc: denied { getopt } for pid=12562 comm="syz.2.2843" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 197.216985][T12561] dump_stack_lvl+0xf2/0x150 [ 197.241003][T12561] dump_stack+0x15/0x20 [ 197.245184][T12561] should_fail_ex+0x229/0x230 [ 197.249858][T12561] should_fail+0xb/0x10 [ 197.254069][T12561] should_fail_usercopy+0x1a/0x20 [ 197.259098][T12561] _copy_to_user+0x1e/0xa0 [ 197.263514][T12561] sk_getsockopt+0x1086/0x1690 [ 197.268343][T12561] ? selinux_socket_getsockopt+0x182/0x1b0 [ 197.269681][T12565] loop0: detected capacity change from 0 to 1024 [ 197.274185][T12561] do_sock_getsockopt+0x9e/0x1a0 [ 197.274215][T12561] __sys_getsockopt+0x19a/0x210 [ 197.274241][T12561] __x64_sys_getsockopt+0x66/0x80 [ 197.283484][T12565] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 197.285462][T12561] x64_sys_call+0x2d21/0x2d70 [ 197.285491][T12561] do_syscall_64+0xc9/0x1c0 [ 197.290335][T12565] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 197.295322][T12561] ? clear_bhb_loop+0x55/0xb0 [ 197.295382][T12561] ? clear_bhb_loop+0x55/0xb0 [ 197.309594][T12565] jbd2_journal_init_inode: Cannot locate journal superblock [ 197.310848][T12561] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.315352][T12565] EXT4-fs (loop0): Could not load journal inode [ 197.324838][T12561] RIP: 0033:0x7fd0a21a1bd9 [ 197.324855][T12561] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 197.324879][T12561] RSP: 002b:00007fd0a1423048 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 197.324898][T12561] RAX: ffffffffffffffda RBX: 00007fd0a232ff60 RCX: 00007fd0a21a1bd9 [ 197.394078][T12561] RDX: 0000000000000004 RSI: 0000000000000001 RDI: 0000000000000003 [ 197.394091][T12561] RBP: 00007fd0a14230a0 R08: 0000000020000100 R09: 0000000000000000 [ 197.394181][T12561] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 197.394267][T12561] R13: 000000000000000b R14: 00007fd0a232ff60 R15: 00007ffe2edb2928 [ 197.394281][T12561] [ 197.532243][T11540] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.592480][T12565] loop0: detected capacity change from 0 to 1024 [ 197.601449][T12565] EXT4-fs (loop0): first meta block group too large: 7 (group descriptor block count 1) [ 197.658644][T12565] loop0: detected capacity change from 0 to 164 [ 197.666594][T12565] rock: corrupted directory entry. extent=41, offset=65536, size=8 [ 197.675501][T12565] rock: corrupted directory entry. extent=41, offset=65536, size=8 [ 197.752688][T12584] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2848'. [ 197.789793][T12584] loop1: detected capacity change from 0 to 512 [ 197.817169][T12589] 9pnet_fd: Insufficient options for proto=fd [ 198.582099][T12618] loop3: detected capacity change from 0 to 1024 [ 198.589586][T12618] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 198.600559][T12618] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 198.620971][T12618] jbd2_journal_init_inode: Cannot locate journal superblock [ 198.628295][T12618] EXT4-fs (loop3): Could not load journal inode [ 198.671866][T12618] loop3: detected capacity change from 0 to 1024 [ 198.678898][T12618] EXT4-fs (loop3): first meta block group too large: 7 (group descriptor block count 1) [ 198.713104][T12621] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.723930][T12621] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 198.747032][T12618] loop3: detected capacity change from 0 to 164 [ 198.754075][T12618] rock: corrupted directory entry. extent=41, offset=65536, size=8 [ 198.762399][T12618] rock: corrupted directory entry. extent=41, offset=65536, size=8 [ 198.896443][T12633] loop3: detected capacity change from 0 to 128 [ 198.905055][ T29] audit: type=1400 audit(1720740979.911:2163): avc: denied { setopt } for pid=12632 comm="syz.3.2867" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 198.996154][T12638] loop3: detected capacity change from 0 to 512 [ 199.002736][T12638] EXT4-fs: Ignoring removed i_version option [ 199.010045][T12638] EXT4-fs error (device loop3): __ext4_iget:4906: inode #11: block 1: comm syz.3.2869: invalid block [ 199.021224][T12638] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz.3.2869: couldn't read orphan inode 11 (err -117) [ 199.033522][T12638] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 199.081823][T12649] 9pnet_fd: Insufficient options for proto=fd [ 199.089336][T11743] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.139179][ T29] audit: type=1400 audit(1720740980.141:2164): avc: denied { compute_member } for pid=12652 comm="syz.3.2874" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 199.192097][T12658] loop3: detected capacity change from 0 to 512 [ 199.198760][T12658] EXT4-fs: Ignoring removed nomblk_io_submit option [ 199.206832][T12658] EXT4-fs error (device loop3): ext4_expand_extra_isize_ea:2806: inode #11: comm syz.3.2876: corrupted xattr block 95: invalid header [ 199.220821][T12658] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.2876: bg 0: block 7: invalid block bitmap [ 199.233295][T12658] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 199.242156][T12658] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2972: inode #11: comm syz.3.2876: corrupted xattr block 95: invalid header [ 199.255824][T12658] EXT4-fs warning (device loop3): ext4_evict_inode:271: xattr delete (err -117) [ 199.264875][T12658] EXT4-fs (loop3): 1 orphan inode deleted [ 199.270851][T12658] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 199.290082][T11743] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.687629][ T29] audit: type=1326 audit(1720740980.691:2165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12693 comm="syz.2.2889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c1689bbd9 code=0x7ffc0000 [ 199.711280][ T29] audit: type=1326 audit(1720740980.691:2166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12693 comm="syz.2.2889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=439 compat=0 ip=0x7f3c1689bbd9 code=0x7ffc0000 [ 199.725666][T12699] delete_channel: no stack [ 199.734900][ T29] audit: type=1326 audit(1720740980.691:2167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12693 comm="syz.2.2889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c1689bbd9 code=0x7ffc0000 [ 199.762868][ T29] audit: type=1326 audit(1720740980.691:2168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12693 comm="syz.2.2889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c1689bbd9 code=0x7ffc0000 [ 199.812319][T12701] __find_get_block_slow() failed. block=144115188075855872, b_blocknr=0, b_state=0x00106019, b_size=4096, device sda1 blocksize: 4096 [ 199.822609][T12706] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2893'. [ 199.842364][T12701] grow_buffers: requested out-of-range block 144115188075855872 for device sda1 [ 199.851471][T12701] EXT4-fs warning (device sda1): ext4_resize_fs:2018: can't read last block, resize aborted [ 200.029997][T12726] FAULT_INJECTION: forcing a failure. [ 200.029997][T12726] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 200.043202][T12726] CPU: 1 PID: 12726 Comm: syz.1.2899 Tainted: G W 6.10.0-rc7-syzkaller-00139-g8a18fda0febb #0 [ 200.054858][T12726] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 200.064905][T12726] Call Trace: [ 200.068169][T12726] [ 200.071086][T12726] dump_stack_lvl+0xf2/0x150 [ 200.075683][T12726] dump_stack+0x15/0x20 [ 200.079937][T12726] should_fail_ex+0x229/0x230 [ 200.084598][T12726] should_fail+0xb/0x10 [ 200.088826][T12726] should_fail_usercopy+0x1a/0x20 [ 200.093828][T12726] _copy_from_user+0x1e/0xd0 [ 200.098397][T12726] kstrtouint_from_user+0x76/0xe0 [ 200.103454][T12726] proc_fail_nth_write+0x4f/0x160 [ 200.108461][T12726] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 200.114069][T12726] vfs_write+0x28b/0x900 [ 200.118353][T12726] ? __fget_files+0x1da/0x210 [ 200.123043][T12726] ksys_write+0xeb/0x1b0 [ 200.127334][T12726] __x64_sys_write+0x42/0x50 [ 200.131904][T12726] x64_sys_call+0x27ef/0x2d70 [ 200.136565][T12726] do_syscall_64+0xc9/0x1c0 [ 200.141108][T12726] ? clear_bhb_loop+0x55/0xb0 [ 200.145770][T12726] ? clear_bhb_loop+0x55/0xb0 [ 200.150501][T12726] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.156377][T12726] RIP: 0033:0x7f815e8d375f [ 200.160766][T12726] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 29 8c 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 7c 8c 02 00 48 [ 200.180349][T12726] RSP: 002b:00007f815db56040 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 200.188736][T12726] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f815e8d375f [ 200.196684][T12726] RDX: 0000000000000001 RSI: 00007f815db560b0 RDI: 0000000000000005 [ 200.204637][T12726] RBP: 00007f815db560a0 R08: 0000000000000000 R09: 0000000000000000 [ 200.212613][T12726] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 200.220627][T12726] R13: 000000000000000b R14: 00007f815ea62f60 R15: 00007fff6cee19d8 [ 200.228595][T12726] [ 200.377335][T12738] loop2: detected capacity change from 0 to 2048 [ 200.395810][T12738] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 200.451528][T12738] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 200.477738][T12738] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 32 with error 28 [ 200.490086][T12738] EXT4-fs (loop2): This should not happen!! Data will be lost [ 200.490086][T12738] [ 200.499808][T12738] EXT4-fs (loop2): Total free blocks count 0 [ 200.505838][T12738] EXT4-fs (loop2): Free/Dirty block details [ 200.511723][T12738] EXT4-fs (loop2): free_blocks=2415919104 [ 200.517506][T12738] EXT4-fs (loop2): dirty_blocks=32 [ 200.522611][T12738] EXT4-fs (loop2): Block reservation details [ 200.528610][T12738] EXT4-fs (loop2): i_reserved_data_blocks=2 [ 200.547260][T12750] 9pnet_fd: Insufficient options for proto=fd [ 200.559656][ T8294] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.607668][T12755] loop1: detected capacity change from 0 to 8192 [ 200.692028][T12770] loop2: detected capacity change from 0 to 1024 [ 200.701814][T12770] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 200.712730][T12770] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 200.722866][T12770] jbd2_journal_init_inode: Cannot locate journal superblock [ 200.730171][T12770] EXT4-fs (loop2): Could not load journal inode [ 200.771069][ T29] audit: type=1400 audit(1720740981.771:2169): avc: denied { getopt } for pid=12767 comm="syz.1.2913" lport=44001 faddr=::ffff:10.1.1.1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 200.819363][T12775] loop4: detected capacity change from 0 to 2048 [ 200.835648][T12775] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 200.906948][ T6563] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.921799][T12781] loop0: detected capacity change from 0 to 1024 [ 200.930109][T12781] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 200.941068][T12781] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 200.963141][T12783] loop4: detected capacity change from 0 to 1024 [ 200.970059][T12781] jbd2_journal_init_inode: Cannot locate journal superblock [ 200.977362][T12781] EXT4-fs (loop0): Could not load journal inode [ 200.986066][T12783] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 200.997024][T12783] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 201.007229][T12783] jbd2_journal_init_inode: Cannot locate journal superblock [ 201.014641][T12783] EXT4-fs (loop4): Could not load journal inode [ 201.025372][T12784] loop2: detected capacity change from 0 to 164 [ 201.032552][T12784] rock: corrupted directory entry. extent=41, offset=65536, size=8 [ 201.041642][T12781] loop0: detected capacity change from 0 to 1024 [ 201.043895][T12784] rock: corrupted directory entry. extent=41, offset=65536, size=8 [ 201.058678][T12781] EXT4-fs (loop0): first meta block group too large: 7 (group descriptor block count 1) [ 201.103003][T12783] loop4: detected capacity change from 0 to 1024 [ 201.109926][T12783] EXT4-fs (loop4): first meta block group too large: 7 (group descriptor block count 1) [ 201.364214][T12788] loop4: detected capacity change from 0 to 164 [ 201.372885][T12788] rock: corrupted directory entry. extent=41, offset=65536, size=8 [ 201.384161][T12788] rock: corrupted directory entry. extent=41, offset=65536, size=8 [ 201.568348][T12791] loop0: detected capacity change from 0 to 164 [ 201.621028][T12791] rock: corrupted directory entry. extent=41, offset=65536, size=8 [ 201.636737][T12791] rock: corrupted directory entry. extent=41, offset=65536, size=8 [ 201.731829][T12794] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2920'. [ 201.881767][T12796] loop2: detected capacity change from 0 to 8192 [ 201.894514][ C1] bridge0: port 2(bridge_slave_1) entered learning state [ 201.953411][T12808] loop3: detected capacity change from 0 to 2048 [ 202.004328][T12818] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2931'. [ 202.014270][T12808] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 202.078382][T12826] loop2: detected capacity change from 0 to 1024 [ 202.095630][T11743] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.108545][T12826] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 202.119521][T12826] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 202.157790][T12826] jbd2_journal_init_inode: Cannot locate journal superblock [ 202.165136][T12826] EXT4-fs (loop2): Could not load journal inode [ 202.211967][T12830] loop0: detected capacity change from 0 to 512 [ 202.227136][T12826] loop2: detected capacity change from 0 to 1024 [ 202.233898][T12826] EXT4-fs (loop2): first meta block group too large: 7 (group descriptor block count 1) [ 202.247613][T12830] EXT4-fs error (device loop0): ext4_xattr_inode_iget:436: comm syz.0.2935: Parent and EA inode have the same ino 15 [ 202.260635][T12830] EXT4-fs (loop0): 1 orphan inode deleted [ 202.269237][T12830] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 202.282527][T12830] FAULT_INJECTION: forcing a failure. [ 202.282527][T12830] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 202.295823][T12830] CPU: 1 PID: 12830 Comm: syz.0.2935 Tainted: G W 6.10.0-rc7-syzkaller-00139-g8a18fda0febb #0 [ 202.307449][T12830] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 202.317623][T12830] Call Trace: [ 202.320903][T12830] [ 202.323886][T12830] dump_stack_lvl+0xf2/0x150 [ 202.328630][T12830] dump_stack+0x15/0x20 [ 202.332835][T12830] should_fail_ex+0x229/0x230 [ 202.337708][T12830] __should_fail_alloc_page+0xfd/0x110 [ 202.343174][T12830] __alloc_pages_noprof+0x109/0x360 [ 202.348498][T12830] alloc_pages_mpol_noprof+0xb1/0x1e0 [ 202.353895][T12830] alloc_pages_noprof+0xe1/0x100 [ 202.358917][T12830] get_zeroed_page_noprof+0x17/0x40 [ 202.363503][T12838] loop4: detected capacity change from 0 to 8192 [ 202.364108][T12830] simple_transaction_get+0x4c/0x120 [ 202.364135][T12830] selinux_transaction_write+0x8c/0x100 [ 202.381239][T12830] ? __pfx_selinux_transaction_write+0x10/0x10 [ 202.387412][T12830] vfs_write+0x28b/0x900 [ 202.391660][T12830] ? __fget_files+0x1da/0x210 [ 202.396341][T12830] ksys_write+0xeb/0x1b0 [ 202.400614][T12830] __x64_sys_write+0x42/0x50 [ 202.405312][T12830] x64_sys_call+0x27ef/0x2d70 [ 202.410077][T12830] do_syscall_64+0xc9/0x1c0 [ 202.414605][T12830] ? clear_bhb_loop+0x55/0xb0 [ 202.419284][T12830] ? clear_bhb_loop+0x55/0xb0 [ 202.423946][T12830] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.429823][T12830] RIP: 0033:0x7fa45c85ebd9 [ 202.434282][T12830] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 202.453929][T12830] RSP: 002b:00007fa45bae0048 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 202.462406][T12830] RAX: ffffffffffffffda RBX: 00007fa45c9ecf60 RCX: 00007fa45c85ebd9 [ 202.470357][T12830] RDX: 0000000000000067 RSI: 00000000200008c0 RDI: 0000000000000006 [ 202.478313][T12830] RBP: 00007fa45bae00a0 R08: 0000000000000000 R09: 0000000000000000 [ 202.486268][T12830] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 202.494221][T12830] R13: 000000000000000b R14: 00007fa45c9ecf60 R15: 00007ffda65a1318 [ 202.502183][T12830] [ 202.518472][T11760] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.666456][T12856] loop4: detected capacity change from 0 to 512 [ 202.727752][T12857] loop2: detected capacity change from 0 to 164 [ 202.736125][T12857] rock: corrupted directory entry. extent=41, offset=65536, size=8 [ 202.746846][T12857] rock: corrupted directory entry. extent=41, offset=65536, size=8 [ 202.906148][T12856] EXT4-fs error (device loop4): ext4_xattr_inode_iget:436: comm syz.4.2945: Parent and EA inode have the same ino 15 [ 203.007810][T12856] EXT4-fs (loop4): 1 orphan inode deleted [ 203.013785][T12856] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 203.105116][ T6563] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.307517][T12874] loop4: detected capacity change from 0 to 8192 [ 203.399023][T12888] loop4: detected capacity change from 0 to 2048 [ 203.407373][T12890] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2957'. [ 203.418557][T12888] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 203.460430][ T6563] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.992722][T12915] loop2: detected capacity change from 0 to 8192 [ 204.056819][T12919] sctp: [Deprecated]: syz.2.2967 (pid 12919) Use of int in max_burst socket option deprecated. [ 204.056819][T12919] Use struct sctp_assoc_value instead [ 204.304026][T12928] loop0: detected capacity change from 0 to 2048 [ 204.357770][T12931] loop4: detected capacity change from 0 to 2048 [ 204.372958][T12928] bond1: entered promiscuous mode [ 204.378307][T12928] bond1: entered allmulticast mode [ 204.383928][T12928] 8021q: adding VLAN 0 to HW filter on device bond1 [ 204.397594][T12931] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 204.436464][ T6563] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.476831][T12947] loop0: detected capacity change from 0 to 1024 [ 204.483747][T12947] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 204.494670][T12947] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 204.508182][T12947] jbd2_journal_init_inode: Cannot locate journal superblock [ 204.515083][T12956] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2975'. [ 204.515502][T12947] EXT4-fs (loop0): Could not load journal inode [ 204.605521][T12947] loop0: detected capacity change from 0 to 1024 [ 204.608167][T12968] loop4: detected capacity change from 0 to 256 [ 204.624713][T12947] EXT4-fs (loop0): first meta block group too large: 7 (group descriptor block count 1) [ 204.683774][ T29] audit: type=1400 audit(1720740985.681:2170): avc: denied { setattr } for pid=12978 comm="syz.2.2987" path="/dev/ptmx" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ptmx_t tclass=chr_file permissive=1 [ 204.773430][T12986] loop2: detected capacity change from 0 to 2048 [ 204.818381][T12986] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 204.880771][ T8294] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.999806][T13008] loop2: detected capacity change from 0 to 1024 [ 205.016106][T13008] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 205.017657][T13010] loop0: detected capacity change from 0 to 164 [ 205.027067][T13008] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 205.045073][T13010] rock: corrupted directory entry. extent=41, offset=65536, size=8 [ 205.058166][T13010] rock: corrupted directory entry. extent=41, offset=65536, size=8 [ 205.066294][T13008] jbd2_journal_init_inode: Cannot locate journal superblock [ 205.073592][T13008] EXT4-fs (loop2): Could not load journal inode [ 205.132214][T13008] loop2: detected capacity change from 0 to 1024 [ 205.142138][T13008] EXT4-fs (loop2): first meta block group too large: 7 (group descriptor block count 1) [ 205.402938][T13013] loop2: detected capacity change from 0 to 164 [ 205.425588][T13013] rock: corrupted directory entry. extent=41, offset=65536, size=8 [ 205.434788][T13013] rock: corrupted directory entry. extent=41, offset=65536, size=8 [ 205.566654][T13021] loop4: detected capacity change from 0 to 2048 [ 205.577921][T13021] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 205.647633][ T6563] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.757364][T13029] loop0: detected capacity change from 0 to 1024 [ 205.768444][T13029] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 205.779355][T13029] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 205.798533][T13029] jbd2_journal_init_inode: Cannot locate journal superblock [ 205.805857][T13029] EXT4-fs (loop0): Could not load journal inode [ 205.882157][T13042] loop1: detected capacity change from 0 to 1024 [ 205.905690][T13043] sctp: [Deprecated]: syz.3.3009 (pid 13043) Use of int in max_burst socket option deprecated. [ 205.905690][T13043] Use struct sctp_assoc_value instead [ 205.924311][T13042] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 205.935303][T13042] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 205.988777][T13042] jbd2_journal_init_inode: Cannot locate journal superblock [ 205.996137][T13042] EXT4-fs (loop1): Could not load journal inode [ 206.077429][T13042] loop1: detected capacity change from 0 to 1024 [ 206.097484][T13042] EXT4-fs (loop1): first meta block group too large: 7 (group descriptor block count 1) [ 206.169856][T13056] loop0: detected capacity change from 0 to 164 [ 206.194951][T13053] loop2: detected capacity change from 0 to 2048 [ 206.203688][T13056] rock: corrupted directory entry. extent=41, offset=65536, size=8 [ 206.222073][T13056] rock: corrupted directory entry. extent=41, offset=65536, size=8 [ 206.231836][T13053] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 206.279012][ T8294] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 206.381110][T13064] loop1: detected capacity change from 0 to 164 [ 206.401061][T13064] rock: corrupted directory entry. extent=41, offset=65536, size=8 [ 206.435943][T13064] rock: corrupted directory entry. extent=41, offset=65536, size=8 [ 206.971010][T13106] loop1: detected capacity change from 0 to 8192 [ 207.051590][T13113] sctp: [Deprecated]: syz.1.3034 (pid 13113) Use of int in max_burst socket option deprecated. [ 207.051590][T13113] Use struct sctp_assoc_value instead [ 207.109780][T13121] loop4: detected capacity change from 0 to 2048 [ 207.143377][T13121] bond0: entered promiscuous mode [ 207.148488][T13121] bond0: entered allmulticast mode [ 207.154000][T13121] 8021q: adding VLAN 0 to HW filter on device bond0 [ 207.242243][T13125] loop4: detected capacity change from 0 to 2048 [ 207.249322][T13125] EXT4-fs: Ignoring removed bh option [ 207.266844][T13125] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 207.280471][T13125] IPv6: Can't replace route, no match found [ 207.295311][ T6563] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 207.297352][T13136] loop1: detected capacity change from 0 to 1024 [ 207.311769][T13136] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 207.322700][T13136] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 207.335070][T13136] jbd2_journal_init_inode: Cannot locate journal superblock [ 207.342513][T13136] EXT4-fs (loop1): Could not load journal inode [ 207.381581][T13138] loop4: detected capacity change from 0 to 8192 [ 207.402984][T13136] loop1: detected capacity change from 0 to 1024 [ 207.411176][T13136] EXT4-fs (loop1): first meta block group too large: 7 (group descriptor block count 1) [ 207.603249][ T29] audit: type=1400 audit(1720740988.601:2171): avc: denied { mount } for pid=13153 comm="syz.2.3048" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 207.627212][T13154] loop2: detected capacity change from 0 to 128 [ 207.632223][T13157] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3049'. [ 207.637859][T13154] FAT-fs (loop2): Unrecognized mount option "ÿ" or missing value [ 207.642581][ T29] audit: type=1400 audit(1720740988.641:2172): avc: denied { mounton } for pid=13153 comm="syz.2.3048" path="/345/file0/bus" dev="bpf" ino=45721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=dir permissive=1 [ 207.688526][T13160] loop1: detected capacity change from 0 to 164 [ 207.724332][ T29] audit: type=1400 audit(1720740988.721:2173): avc: denied { unmount } for pid=8294 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 207.726034][T13159] sctp: [Deprecated]: syz.0.3050 (pid 13159) Use of int in max_burst socket option deprecated. [ 207.726034][T13159] Use struct sctp_assoc_value instead [ 207.764974][T13160] rock: corrupted directory entry. extent=41, offset=65536, size=8 [ 207.776392][T13160] rock: corrupted directory entry. extent=41, offset=65536, size=8 [ 208.008432][T13171] loop2: detected capacity change from 0 to 8192 [ 208.214449][ T3562] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 208.346625][T13188] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3060'. [ 208.523095][T13198] FAULT_INJECTION: forcing a failure. [ 208.523095][T13198] name failslab, interval 1, probability 0, space 0, times 0 [ 208.535780][T13198] CPU: 1 PID: 13198 Comm: syz.3.3064 Tainted: G W 6.10.0-rc7-syzkaller-00139-g8a18fda0febb #0 [ 208.547439][T13198] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 208.557472][T13198] Call Trace: [ 208.560731][T13198] [ 208.563664][T13198] dump_stack_lvl+0xf2/0x150 [ 208.568309][T13198] dump_stack+0x15/0x20 [ 208.572527][T13198] should_fail_ex+0x229/0x230 [ 208.577196][T13198] ? vm_area_dup+0x2c/0x130 [ 208.581681][T13198] __should_failslab+0x92/0xa0 [ 208.586541][T13198] should_failslab+0x9/0x20 [ 208.591032][T13198] kmem_cache_alloc_noprof+0x4c/0x290 [ 208.596410][T13198] ? __vm_enough_memory+0xdf/0x2b0 [ 208.601525][T13198] vm_area_dup+0x2c/0x130 [ 208.605937][T13198] copy_mm+0x6a5/0x11d0 [ 208.610079][T13198] copy_process+0xee1/0x1f90 [ 208.614683][T13198] kernel_clone+0x167/0x5e0 [ 208.619179][T13198] ? vfs_write+0x5a5/0x900 [ 208.623653][T13198] __x64_sys_clone+0xe8/0x120 [ 208.628384][T13198] x64_sys_call+0x23e7/0x2d70 [ 208.633048][T13198] do_syscall_64+0xc9/0x1c0 [ 208.637543][T13198] ? clear_bhb_loop+0x55/0xb0 [ 208.642229][T13198] ? clear_bhb_loop+0x55/0xb0 [ 208.646958][T13198] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.652979][T13198] RIP: 0033:0x7fd0a21a1bd9 [ 208.657423][T13198] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 208.677031][T13198] RSP: 002b:00007fd0a1422ff8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 208.685424][T13198] RAX: ffffffffffffffda RBX: 00007fd0a232ff60 RCX: 00007fd0a21a1bd9 [ 208.693372][T13198] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 208.701324][T13198] RBP: 00007fd0a14230a0 R08: 0000000000000000 R09: 0000000000000000 [ 208.709271][T13198] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 208.717264][T13198] R13: 000000000000000b R14: 00007fd0a232ff60 R15: 00007ffe2edb2928 [ 208.725263][T13198] [ 208.737695][T13201] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=32862 sclass=netlink_route_socket pid=13201 comm=syz.3.3065 [ 208.805261][ T29] audit: type=1400 audit(1720740989.811:2174): avc: denied { create } for pid=13200 comm="syz.3.3065" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 208.827961][ T29] audit: type=1400 audit(1720740989.811:2175): avc: denied { setopt } for pid=13200 comm="syz.3.3065" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 208.857316][ T29] audit: type=1400 audit(1720740989.861:2176): avc: denied { write } for pid=13200 comm="syz.3.3065" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 208.944951][ T1196] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 209.029253][ T29] audit: type=1400 audit(1720740990.031:2177): avc: denied { read write } for pid=8294 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 209.054733][ T29] audit: type=1400 audit(1720740990.031:2178): avc: denied { open } for pid=8294 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 209.066124][T13206] sctp: [Deprecated]: syz.2.3066 (pid 13206) Use of int in max_burst socket option deprecated. [ 209.066124][T13206] Use struct sctp_assoc_value instead [ 209.078911][ T29] audit: type=1400 audit(1720740990.031:2179): avc: denied { ioctl } for pid=8294 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=102 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 209.255120][ T922] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 209.289617][T13218] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 209.293786][T13209] loop4: detected capacity change from 0 to 8192 [ 209.303617][T13218] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 209.317920][T13218] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 209.327048][T13218] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 209.486891][T13228] FAULT_INJECTION: forcing a failure. [ 209.486891][T13228] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 209.500056][T13228] CPU: 1 PID: 13228 Comm: syz.2.3074 Tainted: G W 6.10.0-rc7-syzkaller-00139-g8a18fda0febb #0 [ 209.511682][T13228] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 209.521754][T13228] Call Trace: [ 209.525023][T13228] [ 209.528012][T13228] dump_stack_lvl+0xf2/0x150 [ 209.532682][T13228] dump_stack+0x15/0x20 [ 209.536839][T13228] should_fail_ex+0x229/0x230 [ 209.541515][T13228] should_fail+0xb/0x10 [ 209.545692][T13228] should_fail_usercopy+0x1a/0x20 [ 209.550786][T13228] strncpy_from_user+0x25/0x270 [ 209.555641][T13228] ? should_failslab+0x9/0x20 [ 209.560321][T13228] ? kmem_cache_alloc_noprof+0x10c/0x290 [ 209.565992][T13228] getname_flags+0xb4/0x360 [ 209.570551][T13228] user_path_at_empty+0x2c/0x120 [ 209.575486][T13228] do_faccessat+0x399/0x650 [ 209.580009][T13228] ? __secure_computing+0x9f/0x1c0 [ 209.585115][T13228] __x64_sys_faccessat2+0x51/0x60 [ 209.590141][T13228] x64_sys_call+0x2be1/0x2d70 [ 209.594817][T13228] do_syscall_64+0xc9/0x1c0 [ 209.599374][T13228] ? clear_bhb_loop+0x55/0xb0 [ 209.603079][T13232] loop4: detected capacity change from 0 to 164 [ 209.604156][T13228] ? clear_bhb_loop+0x55/0xb0 [ 209.615083][T13228] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 209.621096][T13228] RIP: 0033:0x7f3c1689bbd9 [ 209.625494][T13228] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 209.645088][T13228] RSP: 002b:00007f3c15b1d048 EFLAGS: 00000246 ORIG_RAX: 00000000000001b7 [ 209.653516][T13228] RAX: ffffffffffffffda RBX: 00007f3c16a29f60 RCX: 00007f3c1689bbd9 [ 209.661543][T13228] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffffffffffff [ 209.669501][T13228] RBP: 00007f3c15b1d0a0 R08: 0000000000000000 R09: 0000000000000000 [ 209.677538][T13228] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 209.685493][T13228] R13: 000000000000000b R14: 00007f3c16a29f60 R15: 00007fffafb8ae08 [ 209.693539][T13228] [ 209.699972][T13218] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 209.708355][T13218] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 209.721079][ T3155] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 209.744248][ T29] kauditd_printk_skb: 43 callbacks suppressed [ 209.744260][ T29] audit: type=1326 audit(1720740990.751:2223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13227 comm="syz.2.3074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f3c1689a6bc code=0x7ffc0000 [ 209.795027][T13232] rock: corrupted directory entry. extent=41, offset=65536, size=8 [ 209.813073][ T29] audit: type=1400 audit(1720740990.801:2224): avc: denied { mount } for pid=13219 comm="syz.4.3072" name="/" dev="loop4" ino=1792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 209.835559][ T29] audit: type=1326 audit(1720740990.801:2225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13227 comm="syz.2.3074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f3c1689a75f code=0x7ffc0000 [ 209.858929][ T29] audit: type=1326 audit(1720740990.801:2226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13227 comm="syz.2.3074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f3c1689a90a code=0x7ffc0000 [ 209.882301][ T29] audit: type=1326 audit(1720740990.801:2227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13227 comm="syz.2.3074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c1689bbd9 code=0x7ffc0000 [ 209.882580][T13232] rock: corrupted directory entry. extent=41, offset=65536, size=8 [ 209.905846][ T29] audit: type=1326 audit(1720740990.811:2228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13227 comm="syz.2.3074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c1689bbd9 code=0x7ffc0000 [ 209.948564][ T29] audit: type=1400 audit(1720740990.951:2229): avc: denied { setopt } for pid=13240 comm="syz.3.3078" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 210.010777][ T29] audit: type=1400 audit(1720740990.981:2230): avc: denied { name_bind } for pid=13239 comm="syz.1.3077" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 210.032586][ T29] audit: type=1400 audit(1720740990.981:2231): avc: denied { node_bind } for pid=13239 comm="syz.1.3077" saddr=172.20.20.170 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 210.055384][ T29] audit: type=1400 audit(1720740991.001:2232): avc: denied { read } for pid=13240 comm="syz.3.3078" path="socket:[46725]" dev="sockfs" ino=46725 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 210.081539][T13246] sctp: [Deprecated]: syz.2.3079 (pid 13246) Use of int in max_burst socket option deprecated. [ 210.081539][T13246] Use struct sctp_assoc_value instead [ 210.241049][T13251] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3081'. [ 210.269921][T13252] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3081'. [ 210.353434][T13255] loop2: detected capacity change from 0 to 8192 [ 210.848030][T13281] ucma_write: process 196 (syz.1.3090) changed security contexts after opening file descriptor, this is not allowed. [ 210.883500][T13285] loop1: detected capacity change from 0 to 1024 [ 210.890623][T13285] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 210.901593][T13285] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 210.911799][T13285] jbd2_journal_init_inode: Cannot locate journal superblock [ 210.919097][T13285] EXT4-fs (loop1): Could not load journal inode [ 211.060278][T13288] sctp: [Deprecated]: syz.0.3093 (pid 13288) Use of int in max_burst socket option deprecated. [ 211.060278][T13288] Use struct sctp_assoc_value instead [ 211.155760][T13289] loop1: detected capacity change from 0 to 164 [ 211.165347][T13289] rock: corrupted directory entry. extent=41, offset=65536, size=8 [ 211.174028][T13289] rock: corrupted directory entry. extent=41, offset=65536, size=8 [ 211.304387][T13297] loop0: detected capacity change from 0 to 1024 [ 211.305989][T13297] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 211.322269][T13297] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 211.356915][T13299] loop4: detected capacity change from 0 to 8192 [ 211.357720][T13297] jbd2_journal_init_inode: Cannot locate journal superblock [ 211.371266][T13297] EXT4-fs (loop0): Could not load journal inode [ 211.432147][T13297] loop0: detected capacity change from 0 to 1024 [ 211.438816][T13297] EXT4-fs (loop0): first meta block group too large: 7 (group descriptor block count 1) [ 211.801710][T13323] loop0: detected capacity change from 0 to 164 [ 211.813641][T13323] rock: corrupted directory entry. extent=41, offset=65536, size=8 [ 211.813993][T13323] rock: corrupted directory entry. extent=41, offset=65536, size=8 [ 212.393419][T13334] sctp: [Deprecated]: syz.3.3107 (pid 13334) Use of int in max_burst socket option deprecated. [ 212.393419][T13334] Use struct sctp_assoc_value instead [ 212.630206][T13344] loop2: detected capacity change from 0 to 8192 [ 212.749044][T13352] FAULT_INJECTION: forcing a failure. [ 212.749044][T13352] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 212.762254][T13352] CPU: 1 PID: 13352 Comm: syz.1.3113 Tainted: G W 6.10.0-rc7-syzkaller-00139-g8a18fda0febb #0 [ 212.773907][T13352] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 212.783940][T13352] Call Trace: [ 212.787198][T13352] [ 212.790104][T13352] dump_stack_lvl+0xf2/0x150 [ 212.794759][T13352] dump_stack+0x15/0x20 [ 212.798921][T13352] should_fail_ex+0x229/0x230 [ 212.803597][T13352] should_fail+0xb/0x10 [ 212.807732][T13352] should_fail_usercopy+0x1a/0x20 [ 212.812741][T13352] _copy_to_user+0x1e/0xa0 [ 212.817141][T13352] copy_to_sockptr+0x65/0xa0 [ 212.821714][T13352] ipv6_get_msfilter+0x207/0x270 [ 212.826645][T13352] do_ipv6_getsockopt+0xb3a/0x1430 [ 212.831764][T13352] ? avc_has_perm_noaudit+0x1cc/0x210 [ 212.837201][T13352] ? avc_has_perm+0xd4/0x160 [ 212.841913][T13352] ipv6_getsockopt+0x75/0x1f0 [ 212.846629][T13352] udpv6_getsockopt+0x73/0x80 [ 212.851299][T13352] sock_common_getsockopt+0x5b/0x70 [ 212.856484][T13352] do_sock_getsockopt+0x121/0x1a0 [ 212.861531][T13352] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 212.867478][T13352] __sys_getsockopt+0x19a/0x210 [ 212.872376][T13352] __x64_sys_getsockopt+0x66/0x80 [ 212.877386][T13352] x64_sys_call+0x2d21/0x2d70 [ 212.882127][T13352] do_syscall_64+0xc9/0x1c0 [ 212.886614][T13352] ? clear_bhb_loop+0x55/0xb0 [ 212.891288][T13352] ? clear_bhb_loop+0x55/0xb0 [ 212.895948][T13352] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.901953][T13352] RIP: 0033:0x7f815e8d4bd9 [ 212.906348][T13352] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 212.925975][T13352] RSP: 002b:00007f815db56048 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 212.934369][T13352] RAX: ffffffffffffffda RBX: 00007f815ea62f60 RCX: 00007f815e8d4bd9 [ 212.942331][T13352] RDX: 0000000000000030 RSI: 0000000000000029 RDI: 0000000000000003 [ 212.950311][T13352] RBP: 00007f815db560a0 R08: 0000000020001000 R09: 0000000000000000 [ 212.958279][T13352] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000001 [ 212.966237][T13352] R13: 000000000000000b R14: 00007f815ea62f60 R15: 00007fff6cee19d8 [ 212.974261][T13352] [ 213.017302][T13360] loop1: detected capacity change from 0 to 1024 [ 213.024086][T13360] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 213.035091][T13360] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 213.045150][T13360] jbd2_journal_init_inode: Cannot locate journal superblock [ 213.052478][T13360] EXT4-fs (loop1): Could not load journal inode [ 213.089688][T13360] loop1: detected capacity change from 0 to 1024 [ 213.096629][T13360] EXT4-fs (loop1): first meta block group too large: 7 (group descriptor block count 1) [ 213.244894][T13365] loop3: detected capacity change from 0 to 1024 [ 213.252758][T13365] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 213.263707][T13365] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 213.274707][T13365] jbd2_journal_init_inode: Cannot locate journal superblock [ 213.282006][T13365] EXT4-fs (loop3): Could not load journal inode [ 213.327097][T13366] loop1: detected capacity change from 0 to 164 [ 213.334660][T13365] loop3: detected capacity change from 0 to 1024 [ 213.354429][T13365] EXT4-fs (loop3): first meta block group too large: 7 (group descriptor block count 1) [ 213.374049][T13366] rock: corrupted directory entry. extent=41, offset=65536, size=8 [ 213.405081][T13366] rock: corrupted directory entry. extent=41, offset=65536, size=8 [ 213.416255][ T3562] net_ratelimit: 8 callbacks suppressed [ 213.416267][ T3562] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 213.708662][T13381] loop3: detected capacity change from 0 to 164 [ 213.725839][T13381] rock: corrupted directory entry. extent=41, offset=65536, size=8 [ 213.752817][T13381] rock: corrupted directory entry. extent=41, offset=65536, size=8 [ 214.101784][T13393] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 214.116031][T13393] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 214.130218][T13393] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 214.139777][T13393] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 214.153342][T13393] sctp: [Deprecated]: syz.1.3130 (pid 13393) Use of int in max_burst socket option deprecated. [ 214.153342][T13393] Use struct sctp_assoc_value instead [ 214.281277][T13393] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 214.289550][T13393] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 214.305984][T13393] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 214.454333][ T3562] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 214.694485][ T11] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 214.873226][T13427] netlink: 5 bytes leftover after parsing attributes in process `syz.4.3141'. [ 214.935937][ T29] kauditd_printk_skb: 34 callbacks suppressed [ 214.935951][ T29] audit: type=1400 audit(1720740995.941:2267): avc: denied { write } for pid=13426 comm="syz.4.3141" path="socket:[47261]" dev="sockfs" ino=47261 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 214.939051][T13427] loop4: detected capacity change from 0 to 512 [ 214.942058][ T29] audit: type=1400 audit(1720740995.941:2268): avc: denied { nlmsg_read } for pid=13426 comm="syz.4.3141" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 214.972877][T13427] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 215.003308][T13427] EXT4-fs (loop4): warning: maximal mount count reached, running e2fsck is recommended [ 215.013552][T13427] EXT4-fs error (device loop4): ext4_orphan_get:1394: comm syz.4.3141: inode #15: comm syz.4.3141: iget: illegal inode # [ 215.024265][ T29] audit: type=1400 audit(1720740996.011:2269): avc: denied { map } for pid=13430 comm="syz.2.3143" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=48191 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 215.026558][T13427] EXT4-fs error (device loop4): ext4_orphan_get:1399: comm syz.4.3141: couldn't read orphan inode 15 (err -117) [ 215.050451][ T29] audit: type=1400 audit(1720740996.011:2270): avc: denied { read write } for pid=13430 comm="syz.2.3143" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=48191 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 215.062665][T13427] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 215.104215][T13427] netlink: 104 bytes leftover after parsing attributes in process `syz.4.3141'. [ 215.105227][ T29] audit: type=1400 audit(1720740996.101:2271): avc: denied { mount } for pid=13426 comm="syz.4.3141" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 215.135033][ T29] audit: type=1400 audit(1720740996.111:2272): avc: denied { nlmsg_read } for pid=13426 comm="syz.4.3141" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 215.158414][ T6563] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 215.168132][ T29] audit: type=1400 audit(1720740996.141:2273): avc: denied { unmount } for pid=6563 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 215.329135][ T29] audit: type=1400 audit(1720740996.331:2274): avc: denied { write } for pid=13447 comm="syz.4.3145" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 215.375973][ T29] audit: type=1400 audit(1720740996.381:2275): avc: denied { create } for pid=13436 comm="syz.2.3144" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 215.397471][T13450] loop2: detected capacity change from 0 to 2048 [ 215.429574][T13450] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 215.461768][T13450] ext4 filesystem being mounted at /374/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 215.506546][T13462] loop4: detected capacity change from 0 to 4096 [ 215.513018][T13462] ext4: Bad value for 'journal_dev' [ 215.588377][T13465] loop4: detected capacity change from 0 to 1024 [ 215.597386][T13465] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 215.608289][T13465] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 215.620009][T13465] jbd2_journal_init_inode: Cannot locate journal superblock [ 215.627412][T13465] EXT4-fs (loop4): Could not load journal inode [ 215.834182][T13467] loop4: detected capacity change from 0 to 164 [ 215.844397][T13467] rock: corrupted directory entry. extent=41, offset=65536, size=8 [ 215.852754][T13467] rock: corrupted directory entry. extent=41, offset=65536, size=8 [ 215.998646][ T8294] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 216.042538][T13470] loop2: detected capacity change from 0 to 256 [ 216.050293][ T29] audit: type=1400 audit(1720740997.051:2276): avc: denied { mount } for pid=13469 comm="syz.2.3155" name="/" dev="loop2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 216.189936][T13475] loop2: detected capacity change from 0 to 512 [ 216.196958][T13475] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 216.207291][T13475] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e12c, mo2=0002] [ 216.215300][T13475] EXT4-fs (loop2): orphan cleanup on readonly fs [ 216.222312][T13475] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.3156: bg 0: block 361: padding at end of block bitmap is not set [ 216.236773][T13475] EXT4-fs (loop2): Remounting filesystem read-only [ 216.243507][T13475] EXT4-fs (loop2): 1 truncate cleaned up [ 216.249375][T13475] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 216.261282][T13475] SELinux: (dev loop2, type ext4) getxattr errno 5 [ 216.268099][T13475] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 216.375519][T13475] veth0_vlan: left promiscuous mode [ 216.381091][T13475] veth0_vlan: entered promiscuous mode [ 216.773413][T13515] FAULT_INJECTION: forcing a failure. [ 216.773413][T13515] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 216.786565][T13515] CPU: 0 PID: 13515 Comm: syz.1.3172 Tainted: G W 6.10.0-rc7-syzkaller-00139-g8a18fda0febb #0 [ 216.798243][T13515] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 216.808377][T13515] Call Trace: [ 216.811636][T13515] [ 216.814624][T13515] dump_stack_lvl+0xf2/0x150 [ 216.819251][T13515] dump_stack+0x15/0x20 [ 216.823397][T13515] should_fail_ex+0x229/0x230 [ 216.828063][T13515] should_fail+0xb/0x10 [ 216.832203][T13515] should_fail_usercopy+0x1a/0x20 [ 216.837341][T13515] _copy_to_user+0x1e/0xa0 [ 216.841745][T13515] simple_read_from_buffer+0xa0/0x110 [ 216.847108][T13515] proc_fail_nth_read+0xfc/0x140 [ 216.852072][T13515] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 216.857601][T13515] vfs_read+0x1a2/0x6e0 [ 216.861765][T13515] ? __rcu_read_unlock+0x4e/0x70 [ 216.866718][T13515] ? __fget_files+0x1da/0x210 [ 216.871397][T13515] ksys_read+0xeb/0x1b0 [ 216.875619][T13515] __x64_sys_read+0x42/0x50 [ 216.880119][T13515] x64_sys_call+0x27e5/0x2d70 [ 216.884786][T13515] do_syscall_64+0xc9/0x1c0 [ 216.889335][T13515] ? clear_bhb_loop+0x55/0xb0 [ 216.894002][T13515] ? clear_bhb_loop+0x55/0xb0 [ 216.898691][T13515] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.904574][T13515] RIP: 0033:0x7f815e8d36bc [ 216.909005][T13515] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8c 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 1f 8d 02 00 48 [ 216.928597][T13515] RSP: 002b:00007f815db56040 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 216.936998][T13515] RAX: ffffffffffffffda RBX: 00007f815ea62f60 RCX: 00007f815e8d36bc [ 216.944964][T13515] RDX: 000000000000000f RSI: 00007f815db560b0 RDI: 0000000000000005 [ 216.952983][T13515] RBP: 00007f815db560a0 R08: 0000000000000000 R09: 0000000000000000 [ 216.960944][T13515] R10: 00000000200000c0 R11: 0000000000000246 R12: 0000000000000001 [ 216.968982][T13515] R13: 000000000000000b R14: 00007f815ea62f60 R15: 00007fff6cee19d8 [ 216.976942][T13515] [ 217.046955][T13537] FAULT_INJECTION: forcing a failure. [ 217.046955][T13537] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 217.060027][T13537] CPU: 0 PID: 13537 Comm: syz.1.3178 Tainted: G W 6.10.0-rc7-syzkaller-00139-g8a18fda0febb #0 [ 217.071763][T13537] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 217.081822][T13537] Call Trace: [ 217.085127][T13537] [ 217.088075][T13537] dump_stack_lvl+0xf2/0x150 [ 217.092678][T13537] dump_stack+0x15/0x20 [ 217.096841][T13537] should_fail_ex+0x229/0x230 [ 217.101545][T13537] should_fail+0xb/0x10 [ 217.105697][T13537] should_fail_usercopy+0x1a/0x20 [ 217.110716][T13537] _copy_from_user+0x1e/0xd0 [ 217.115298][T13537] kstrtouint_from_user+0x76/0xe0 [ 217.120396][T13537] proc_fail_nth_write+0x4f/0x160 [ 217.125461][T13537] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 217.131079][T13537] vfs_write+0x28b/0x900 [ 217.135379][T13537] ? __fget_files+0x1da/0x210 [ 217.140084][T13537] ksys_write+0xeb/0x1b0 [ 217.144318][T13537] __x64_sys_write+0x42/0x50 [ 217.148897][T13537] x64_sys_call+0x27ef/0x2d70 [ 217.153615][T13537] do_syscall_64+0xc9/0x1c0 [ 217.158114][T13537] ? clear_bhb_loop+0x55/0xb0 [ 217.162780][T13537] ? clear_bhb_loop+0x55/0xb0 [ 217.167443][T13537] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.173387][T13537] RIP: 0033:0x7f815e8d375f [ 217.177792][T13537] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 29 8c 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 7c 8c 02 00 48 [ 217.197431][T13537] RSP: 002b:00007f815db56040 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 217.205826][T13537] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f815e8d375f [ 217.213781][T13537] RDX: 0000000000000001 RSI: 00007f815db560b0 RDI: 0000000000000005 [ 217.221734][T13537] RBP: 00007f815db560a0 R08: 0000000000000000 R09: 0000000000000000 [ 217.229703][T13537] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 217.237663][T13537] R13: 000000000000000b R14: 00007f815ea62f60 R15: 00007fff6cee19d8 [ 217.245651][T13537] [ 217.250306][T13539] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3180'. [ 217.259370][ C1] bridge0: port 2(bridge_slave_1) entered forwarding state [ 217.298625][T13544] loop4: detected capacity change from 0 to 512 [ 217.341107][T13544] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 217.356759][T13554] Can't find ip_set type hash:neT,net [ 217.368221][T13544] ext4 filesystem being mounted at /541/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 217.416773][ T6563] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 217.499339][ T1196] macvlan0 (unregistering): left promiscuous mode [ 217.591558][T13579] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3190'. [ 217.728272][T13588] loop3: detected capacity change from 0 to 512 [ 217.745908][T13588] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 217.758506][T13588] ext4 filesystem being mounted at /123/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 217.770700][T13588] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 217.782219][T13588] x_tables: ip6_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING [ 217.797029][T11743] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 217.861379][T13594] loop3: detected capacity change from 0 to 512 [ 217.875754][T13594] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 217.888338][T13594] ext4 filesystem being mounted at /125/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 217.938916][T11743] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 218.406966][T13634] loop4: detected capacity change from 0 to 512 [ 218.427364][T13634] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 218.427378][T13634] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8843c01c, mo2=0002] [ 218.427463][T13634] EXT4-fs (loop4): couldn't mount RDWR because of unsupported optional features (80) [ 218.427478][T13634] EXT4-fs (loop4): Skipping orphan cleanup due to unknown ROCOMPAT features [ 218.427916][T13634] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0004-000000000000 ro without journal. Quota mode: none. [ 218.453581][T13634] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0004-000000000000 ro. Quota mode: none. [ 218.453854][T13634] EXT4-fs warning (device loop4): dx_probe:892: inode #2: comm syz.4.3210: dx entry: limit 65535 != root limit 120 [ 218.496109][T13634] EXT4-fs warning (device loop4): dx_probe:965: inode #2: comm syz.4.3210: Corrupt directory, running e2fsck is recommended [ 218.513221][T13636] EXT4-fs warning (device loop4): dx_probe:892: inode #2: comm syz.4.3210: dx entry: limit 65535 != root limit 120 [ 218.513298][T13636] EXT4-fs warning (device loop4): dx_probe:965: inode #2: comm syz.4.3210: Corrupt directory, running e2fsck is recommended [ 218.514462][T13636] EXT4-fs warning (device loop4): dx_probe:892: inode #2: comm syz.4.3210: dx entry: limit 65535 != root limit 120 [ 218.552952][T13636] EXT4-fs warning (device loop4): dx_probe:965: inode #2: comm syz.4.3210: Corrupt directory, running e2fsck is recommended [ 218.571531][ T6563] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0004-000000000000. [ 218.615181][ T8] net_ratelimit: 15 callbacks suppressed [ 218.615195][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 218.649920][T13639] loop4: detected capacity change from 0 to 2048 [ 218.668740][T13639] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 218.693079][ T6563] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 218.810641][ T8] IPVS: starting estimator thread 0... [ 218.816740][T13652] loop4: detected capacity change from 0 to 128 [ 218.847403][T13652] syz.4.3215: attempt to access beyond end of device [ 218.847403][T13652] loop4: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 218.868015][T13652] syz.4.3215: attempt to access beyond end of device [ 218.868015][T13652] loop4: rw=0, sector=177, nr_sectors = 1 limit=128 [ 218.881794][T13650] syz.4.3215: attempt to access beyond end of device [ 218.881794][T13650] loop4: rw=524288, sector=145, nr_sectors = 32 limit=128 [ 218.898859][T13650] syz.4.3215: attempt to access beyond end of device [ 218.898859][T13650] loop4: rw=524288, sector=185, nr_sectors = 184 limit=128 [ 218.912919][T13653] IPVS: using max 2880 ests per chain, 144000 per kthread [ 219.232178][T13677] loop4: detected capacity change from 0 to 1024 [ 219.347546][T13700] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 219.381352][T13706] loop1: detected capacity change from 0 to 128 [ 219.390728][T13706] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3232'. [ 219.403119][T13708] loop2: detected capacity change from 0 to 128 [ 219.410053][T13708] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 219.471939][T13712] loop1: detected capacity change from 0 to 512 [ 219.481194][T13712] EXT4-fs: Ignoring removed mblk_io_submit option [ 219.485931][T13714] loop2: detected capacity change from 0 to 1024 [ 219.489002][T13712] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 219.499826][T13714] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 219.506006][T13712] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a042c118, mo2=0002] [ 219.513005][T13714] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 219.520878][T13712] System zones: 1-12 [ 219.533973][T13714] jbd2_journal_init_inode: Cannot locate journal superblock [ 219.534704][T13712] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2234: inode #15: comm syz.1.3235: corrupted in-inode xattr: e_value size too large [ 219.541782][T13714] EXT4-fs (loop2): Could not load journal inode [ 219.562225][T13712] EXT4-fs error (device loop1): ext4_orphan_get:1399: comm syz.1.3235: couldn't read orphan inode 15 (err -117) [ 219.574494][T13712] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 219.611741][T13714] loop2: detected capacity change from 0 to 1024 [ 219.618351][T13714] EXT4-fs (loop2): first meta block group too large: 7 (group descriptor block count 1) [ 219.648036][T11540] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 219.657215][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 219.667772][ T3160] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 219.677105][T13714] loop2: detected capacity change from 0 to 164 [ 219.683953][T13714] rock: corrupted directory entry. extent=41, offset=65536, size=8 [ 219.692260][T13714] rock: corrupted directory entry. extent=41, offset=65536, size=8 [ 219.720777][T13717] bridge0: port 2(bridge_slave_1) entered listening state [ 219.763595][T13721] loop3: detected capacity change from 0 to 1024 [ 219.770496][T13721] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 219.781630][T13721] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 219.791058][T13723] sctp: [Deprecated]: syz.2.3238 (pid 13723) Use of int in max_burst socket option deprecated. [ 219.791058][T13723] Use struct sctp_assoc_value instead [ 219.794982][T13721] jbd2_journal_init_inode: Cannot locate journal superblock [ 219.814379][T13721] EXT4-fs (loop3): Could not load journal inode [ 219.821964][ T3202] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 219.873870][T13721] loop3: detected capacity change from 0 to 1024 [ 219.880557][T13721] EXT4-fs (loop3): first meta block group too large: 7 (group descriptor block count 1) [ 220.053876][T13739] loop4: detected capacity change from 0 to 128 [ 220.060884][T13739] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 220.115211][T13744] loop3: detected capacity change from 0 to 164 [ 220.133729][T13746] loop0: detected capacity change from 0 to 128 [ 220.140938][T13744] rock: corrupted directory entry. extent=41, offset=65536, size=8 [ 220.142782][T13746] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (39871!=39978) [ 220.160818][T13744] rock: corrupted directory entry. extent=41, offset=65536, size=8 [ 220.169733][T13746] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: none. [ 220.190469][ T29] kauditd_printk_skb: 30 callbacks suppressed [ 220.190482][ T29] audit: type=1400 audit(1720741001.191:2307): avc: denied { read } for pid=13745 comm="syz.0.3248" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 220.224164][ T29] audit: type=1400 audit(1720741001.191:2308): avc: denied { open } for pid=13745 comm="syz.0.3248" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 220.247883][ T29] audit: type=1400 audit(1720741001.191:2309): avc: denied { ioctl } for pid=13745 comm="syz.0.3248" path="/dev/autofs" dev="devtmpfs" ino=91 ioctlcmd=0x937d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 220.279959][T13752] loop4: detected capacity change from 0 to 1024 [ 220.286897][T13752] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 220.297880][T13752] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 220.310334][T13752] jbd2_journal_init_inode: Cannot locate journal superblock [ 220.317736][T13752] EXT4-fs (loop4): Could not load journal inode [ 220.327129][T11760] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 220.391936][T13752] loop4: detected capacity change from 0 to 1024 [ 220.398594][T13752] EXT4-fs (loop4): first meta block group too large: 7 (group descriptor block count 1) [ 220.458140][T13752] loop4: detected capacity change from 0 to 164 [ 220.464840][ T3150] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 220.476465][T13752] rock: corrupted directory entry. extent=41, offset=65536, size=8 [ 220.485195][T13752] rock: corrupted directory entry. extent=41, offset=65536, size=8 [ 220.599392][T13765] sctp: [Deprecated]: syz.4.3252 (pid 13765) Use of int in max_burst socket option deprecated. [ 220.599392][T13765] Use struct sctp_assoc_value instead [ 220.694629][ T3150] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 220.781357][T13776] loop1: detected capacity change from 0 to 128 [ 220.798497][T13776] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 220.924802][T13799] loop1: detected capacity change from 0 to 1024 [ 220.936232][T13799] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 220.941166][T13803] loop0: detected capacity change from 0 to 1024 [ 220.947125][T13799] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 220.951252][T13799] jbd2_journal_init_inode: Cannot locate journal superblock [ 220.956566][ T29] audit: type=1400 audit(1720741001.961:2310): avc: denied { sys_module } for pid=13786 comm="syz.2.3261" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 220.963047][T13799] EXT4-fs (loop1): Could not load journal inode [ 220.992884][T13803] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 221.008813][T13803] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 221.019609][T13803] jbd2_journal_init_inode: Cannot locate journal superblock [ 221.026932][T13803] EXT4-fs (loop0): Could not load journal inode [ 221.045786][T13800] loop2: detected capacity change from 0 to 512 [ 221.052463][T13800] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 221.065475][T13800] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e12c, mo2=0002] [ 221.073458][T13800] EXT4-fs (loop2): orphan cleanup on readonly fs [ 221.077858][T13799] loop1: detected capacity change from 0 to 1024 [ 221.086495][T13799] EXT4-fs (loop1): first meta block group too large: 7 (group descriptor block count 1) [ 221.087370][T13800] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.3261: bg 0: block 361: padding at end of block bitmap is not set [ 221.107809][T13803] loop0: detected capacity change from 0 to 1024 [ 221.111811][T13800] EXT4-fs (loop2): Remounting filesystem read-only [ 221.119627][T13803] EXT4-fs (loop0): first meta block group too large: 7 (group descriptor block count 1) [ 221.125541][T13800] EXT4-fs (loop2): 1 truncate cleaned up [ 221.139319][T13800] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 221.152156][T13800] SELinux: (dev loop2, type ext4) getxattr errno 5 [ 221.154873][T13799] loop1: detected capacity change from 0 to 164 [ 221.158918][T13800] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 221.166141][T13799] rock: corrupted directory entry. extent=41, offset=65536, size=8 [ 221.188522][T13799] rock: corrupted directory entry. extent=41, offset=65536, size=8 [ 221.242481][T13814] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 221.256957][T13814] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 221.273993][T13814] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 221.384458][T13817] loop0: detected capacity change from 0 to 164 [ 221.414472][T13817] rock: corrupted directory entry. extent=41, offset=65536, size=8 [ 221.440576][T13817] rock: corrupted directory entry. extent=41, offset=65536, size=8 [ 221.457070][ T29] audit: type=1400 audit(1720741002.461:2311): avc: denied { create } for pid=13818 comm="syz.4.3270" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 221.497236][ T29] audit: type=1400 audit(1720741002.491:2312): avc: denied { bind } for pid=13818 comm="syz.4.3270" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 221.516747][ T29] audit: type=1400 audit(1720741002.491:2313): avc: denied { node_bind } for pid=13818 comm="syz.4.3270" saddr=172.20.20.0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 221.727798][ T29] audit: type=1326 audit(1720741002.731:2314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13833 comm="syz.2.3276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c1689bbd9 code=0x7ffc0000 [ 221.751462][ T29] audit: type=1326 audit(1720741002.731:2315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13833 comm="syz.2.3276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c1689bbd9 code=0x7ffc0000 [ 221.774972][ T29] audit: type=1326 audit(1720741002.731:2316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13833 comm="syz.2.3276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3c1689bbd9 code=0x7ffc0000 [ 221.831830][T13836] FAULT_INJECTION: forcing a failure. [ 221.831830][T13836] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 221.843980][T13843] loop3: detected capacity change from 0 to 512 [ 221.844952][T13836] CPU: 0 PID: 13836 Comm: syz.2.3276 Tainted: G W 6.10.0-rc7-syzkaller-00139-g8a18fda0febb #0 [ 221.862859][T13836] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 221.872931][T13836] Call Trace: [ 221.876241][T13836] [ 221.879159][T13836] dump_stack_lvl+0xf2/0x150 [ 221.883798][T13836] dump_stack+0x15/0x20 [ 221.888022][T13836] should_fail_ex+0x229/0x230 [ 221.892688][T13836] should_fail+0xb/0x10 [ 221.896921][T13836] should_fail_usercopy+0x1a/0x20 [ 221.901961][T13836] _copy_from_user+0x1e/0xd0 [ 221.906579][T13836] kstrtouint_from_user+0x76/0xe0 [ 221.911668][T13836] proc_fail_nth_write+0x4f/0x160 [ 221.916708][T13836] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 221.922351][T13836] vfs_write+0x28b/0x900 [ 221.926594][T13836] ? __fget_files+0x1da/0x210 [ 221.931326][T13836] ksys_write+0xeb/0x1b0 [ 221.935566][T13836] __x64_sys_write+0x42/0x50 [ 221.940150][T13836] x64_sys_call+0x27ef/0x2d70 [ 221.944817][T13836] do_syscall_64+0xc9/0x1c0 [ 221.949309][T13836] ? clear_bhb_loop+0x55/0xb0 [ 221.953975][T13836] ? clear_bhb_loop+0x55/0xb0 [ 221.958670][T13836] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.964571][T13836] RIP: 0033:0x7f3c1689a75f [ 221.968979][T13836] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 29 8c 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 7c 8c 02 00 48 [ 221.988571][T13836] RSP: 002b:00007f3c15afc040 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 221.997010][T13836] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f3c1689a75f [ 222.004981][T13836] RDX: 0000000000000001 RSI: 00007f3c15afc0b0 RDI: 0000000000000004 [ 222.013004][T13836] RBP: 00007f3c15afc0a0 R08: 0000000000000000 R09: 0000000000000000 [ 222.020955][T13836] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 222.028911][T13836] R13: 000000000000006e R14: 00007f3c16a2a038 R15: 00007fffafb8ae08 [ 222.036940][T13836] [ 222.041277][T13843] EXT4-fs: Ignoring removed mblk_io_submit option [ 222.055327][T13843] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 222.082932][T13843] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a042c118, mo2=0002] [ 222.093779][T13843] System zones: 1-12 [ 222.102643][T13843] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2234: inode #15: comm syz.3.3278: corrupted in-inode xattr: e_value size too large [ 222.152218][T13843] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz.3.3278: couldn't read orphan inode 15 (err -117) [ 222.191188][T13843] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 222.245760][T13854] sctp: [Deprecated]: syz.0.3281 (pid 13854) Use of int in max_burst socket option deprecated. [ 222.245760][T13854] Use struct sctp_assoc_value instead [ 222.310076][T11743] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 222.400245][T13860] loop3: detected capacity change from 0 to 128 [ 222.415558][T13860] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (39871!=39978) [ 222.435857][T13860] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: none. [ 222.483458][T13860] EXT4-fs warning (device loop3): ext4_dirblock_csum_verify:405: inode #2: comm syz.3.3284: No space for directory leaf checksum. Please run e2fsck -D. [ 222.490506][T13868] loop4: detected capacity change from 0 to 1024 [ 222.499073][T13860] EXT4-fs error (device loop3): __ext4_find_entry:1695: inode #2: comm syz.3.3284: checksumming directory block 0 [ 222.518920][T13868] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 222.529889][T13868] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 222.545901][T13860] EXT4-fs warning (device loop3): ext4_dirblock_csum_verify:405: inode #2: comm syz.3.3284: No space for directory leaf checksum. Please run e2fsck -D. [ 222.559694][T13868] jbd2_journal_init_inode: Cannot locate journal superblock [ 222.561289][T13860] EXT4-fs error (device loop3): __ext4_find_entry:1695: inode #2: comm syz.3.3284: checksumming directory block 0 [ 222.568537][T13868] EXT4-fs (loop4): Could not load journal inode [ 222.597491][T13860] EXT4-fs warning (device loop3): ext4_dirblock_csum_verify:405: inode #2: comm syz.3.3284: No space for directory leaf checksum. Please run e2fsck -D. [ 222.608379][T13879] loop0: detected capacity change from 0 to 1024 [ 222.612876][T13860] EXT4-fs error (device loop3): __ext4_find_entry:1695: inode #2: comm syz.3.3284: checksumming directory block 0 [ 222.623398][T13879] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 222.642402][T13879] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 222.658146][T13860] EXT4-fs warning (device loop3): ext4_dirblock_csum_verify:405: inode #2: comm syz.3.3284: No space for directory leaf checksum. Please run e2fsck -D. [ 222.673648][T13860] EXT4-fs error (device loop3): __ext4_find_entry:1695: inode #2: comm syz.3.3284: checksumming directory block 0 [ 222.694221][T13879] jbd2_journal_init_inode: Cannot locate journal superblock [ 222.701526][T13879] EXT4-fs (loop0): Could not load journal inode [ 222.718745][T13883] loop1: detected capacity change from 0 to 128 [ 222.726076][T13883] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 222.727535][T13860] xt_hashlimit: invalid rate [ 222.750925][T11743] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 222.773561][T13879] loop0: detected capacity change from 0 to 1024 [ 222.784501][T13879] EXT4-fs (loop0): first meta block group too large: 7 (group descriptor block count 1) [ 222.809001][T13889] loop3: detected capacity change from 0 to 512 [ 222.819841][T13889] EXT4-fs: Ignoring removed mblk_io_submit option [ 222.827422][T13889] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 222.849244][T13889] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a042c118, mo2=0002] [ 222.876708][T13889] System zones: 1-12 [ 222.899446][ T1196] ================================================================== [ 222.899471][T13889] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2234: inode #15: comm syz.3.3294: corrupted in-inode xattr: e_value size too large [ 222.907517][ T1196] BUG: KCSAN: data-race in n_tty_receive_char_flow_ctrl / tty_set_termios [ 222.907545][ T1196] [ 222.907550][ T1196] write to 0xffff8881122aed22 of 1 bytes by task 13897 on cpu 0: [ 222.907564][ T1196] tty_set_termios+0x4c9/0x8b0 [ 222.907586][ T1196] set_termios+0x497/0x4e0 [ 222.907604][ T1196] tty_mode_ioctl+0x391/0x5d0 [ 222.907624][ T1196] n_tty_ioctl_helper+0x8d/0x240 [ 222.958726][ T1196] n_tty_ioctl+0xfd/0x200 [ 222.963042][ T1196] tty_ioctl+0x886/0xbe0 [ 222.967272][ T1196] __se_sys_ioctl+0xd3/0x150 [ 222.971850][ T1196] __x64_sys_ioctl+0x43/0x50 [ 222.976428][ T1196] x64_sys_call+0x1581/0x2d70 [ 222.981094][ T1196] do_syscall_64+0xc9/0x1c0 [ 222.985592][ T1196] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.991472][ T1196] [ 222.993777][ T1196] read to 0xffff8881122aed22 of 1 bytes by task 1196 on cpu 1: [ 223.001301][ T1196] n_tty_receive_char_flow_ctrl+0x58/0x1a0 [ 223.007098][ T1196] n_tty_lookahead_flow_ctrl+0xee/0x130 [ 223.012628][ T1196] tty_port_default_lookahead_buf+0x8a/0xc0 [ 223.018514][ T1196] flush_to_ldisc+0x31c/0x410 [ 223.023179][ T1196] process_scheduled_works+0x483/0x9a0 [ 223.028626][ T1196] worker_thread+0x526/0x720 [ 223.033201][ T1196] kthread+0x1d1/0x210 [ 223.037262][ T1196] ret_from_fork+0x4b/0x60 [ 223.041749][ T1196] ret_from_fork_asm+0x1a/0x30 [ 223.046502][ T1196] [ 223.048805][ T1196] value changed: 0x13 -> 0x61 [ 223.053456][ T1196] [ 223.055760][ T1196] Reported by Kernel Concurrency Sanitizer on: [ 223.061887][ T1196] CPU: 1 PID: 1196 Comm: kworker/u8:4 Tainted: G W 6.10.0-rc7-syzkaller-00139-g8a18fda0febb #0 [ 223.073583][ T1196] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 223.083621][ T1196] Workqueue: events_unbound flush_to_ldisc [ 223.089420][ T1196] ================================================================== [ 223.104309][T13889] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz.3.3294: couldn't read orphan inode 15 (err -117) [ 223.117870][T13889] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 223.151532][T13898] loop4: detected capacity change from 0 to 164 [ 223.169666][T13898] rock: corrupted directory entry. extent=41, offset=65536, size=8 [ 223.187063][T13898] rock: corrupted directory entry. extent=41, offset=65536, size=8 [ 223.211792][T11743] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 223.348903][T13901] loop0: detected capacity change from 0 to 164 [ 223.365358][T13901] rock: corrupted directory entry. extent=41, offset=65536, size=8 [ 223.385508][T13901] rock: corrupted directory entry. extent=41, offset=65536, size=8 [ 223.898110][ T8] net_ratelimit: 7 callbacks suppressed [ 223.898163][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 224.936101][ T3562] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 225.584503][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 225.592727][ T3157] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 225.976407][ T6648] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 226.214478][ T3160] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 226.854446][ T3562] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 227.020358][ T3150] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 227.496723][ T3562] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 228.066623][ T3562] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 229.096401][ T6648] net_ratelimit: 1 callbacks suppressed [ 229.096417][ T6648] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 230.148032][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 231.190636][ T922] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 231.334442][ T3092] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 232.216300][ T922] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog