last executing test programs: 3.982445175s ago: executing program 4 (id=2309): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) (async) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x14a80, 0x10, 0x38, &(0x7f00000002c0)="24006f20a01c0000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) (async) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='devices.list\x00', 0x26e1, 0x0) (async) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x61, 0x10, 0x64}, [@ldst={0x6, 0x0, 0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x0, 0x10, &(0x7f0000000080), 0xffffffffffffffb2}, 0x48) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0x58, &(0x7f0000000240)}, 0x10) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x0, 0x4, 0x4, 0x8}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000600)={{r4}, &(0x7f0000000540), 0x0}, 0x20) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={r3, 0xe0, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000000)=[0x0, 0x0], 0x0, 0x4c, &(0x7f0000000880), 0x0, 0x10, &(0x7f00000008c0), &(0x7f0000000900), 0x8, 0xb1, 0x8, 0x8, &(0x7f0000000940)}}, 0x10) r5 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xb, 0xffffffffffffffff, 0x1) close(r5) (async) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r6, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000c40)={0x6, 0x0, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r7, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x90) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x7, 0xbf, 0x0, 0x10000, 0x4, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x4}, 0x48) (async) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x2, 0x8, &(0x7f0000000b40)=ANY=[@ANYBLOB="18060000000000000000000000000000180000003157969c4acec7aa1cac1b0cb6a94fd55a08c4011da43041210f9f75c965347b2d12466305b920c511f90a0ceec1d51cc13ef10a8f44a0cdd9e7562a079ca8089c806512c517be16a14d683226464b54f35509c230ec8cd9eb5eb5fe801868c674f470b09098c3ae35f4cac9b002f156c93663852e84c341c60000000000000000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7030000006300008500000019000000b7070000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x0, 0x0, &(0x7f0000000200)='syzkaller\x00', 0x1000, 0x0, 0x0, 0x0, 0x1, '\x00', r7, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000002c0)={0x0, 0xf}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000500)=[0xffffffffffffffff, r8, 0xffffffffffffffff, 0xffffffffffffffff, r2], &(0x7f0000000540)=[{0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0xc, 0x9}], 0x10, 0x5}, 0x90) (async) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) syz_io_uring_setup(0xd79, &(0x7f00000035c0)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000003580)) (async) socket$phonet_pipe(0x23, 0x5, 0x2) 3.958947347s ago: executing program 4 (id=2310): bpf$PROG_LOAD_XDP(0x24, &(0x7f0000000100)={0xe, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000711077000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x90) 3.905052942s ago: executing program 4 (id=2313): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="184dde00000000000000e4ff000000009700fffffcffffff9500000000000000fdb7bcf2467ad9afb39c238ac85aced7facc981416a5cd53ae22d5070ed439e28284b4a92a546f7323fe85611f6b2774b7358884230544fca1f7c70ad2dc15dca55299d9d18e635a83cc89d2ec5bbfc0f3ef35f5868b9065e2c115ff389f7d45400a03a695b5081183264e4dba4f604613914faba1c49e010a74ed354bd0dc0a41f0eab9cb3462269e687f279c63315a6bb13b9171d5f37fdb2722f7"], &(0x7f0000000140)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='tlb_flush\x00', r2}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x70}, [@exit]}, &(0x7f0000003ff6)='GPL\x00', 0x15, 0xc3, &(0x7f000000cf3d)=""/195}, 0x90) r4 = syz_open_dev$loop(&(0x7f0000000000), 0x5, 0x101280) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r5, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) getsockopt$bt_BT_CHANNEL_POLICY(r5, 0x112, 0xe, 0x0, &(0x7f00000000c0)) r6 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x14, 0x4, 0x4, 0x12}, 0x48) close(r7) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x7, 0x4, 0x8, 0xff}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x3, 0x6, &(0x7f0000000400)=@framed={{0x18, 0x2}, [@map_fd={0x18, 0x1, 0x1, 0x0, r7}, @call={0x85, 0x0, 0x0, 0x86}]}, &(0x7f0000000000)='GPL\x00'}, 0x80) ioctl$RTC_UIE_ON(r6, 0x7003) ioctl$RTC_SET_TIME(r6, 0x7004, 0x0) ioctl$IOC_PR_PREEMPT(r4, 0x401870cb, &(0x7f0000000140)={0x200, 0x5, 0x5, 0xffffffff}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000200)='mm_page_free\x00'}, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$nl_audit(0x10, 0x3, 0x9) r10 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r9, 0x8933, &(0x7f0000000080)={'wg2\x00', 0x0}) sendmsg$WG_CMD_GET_DEVICE(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r10, 0x327, 0x0, 0x0, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r11}]}, 0x1c}}, 0x0) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r3}, 0x10) 3.894954182s ago: executing program 4 (id=2316): r0 = io_uring_setup(0x66a, &(0x7f0000000000)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000080)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000540)="$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") r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000040), 0xfea0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000380), 0x101bf) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000000)={0x2880008, r2}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) prctl$PR_GET_PDEATHSIG(0x18, &(0x7f0000000000)) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)) r5 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r5, 0x894b, &(0x7f0000000100)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r6, &(0x7f0000000140)=ANY=[@ANYBLOB="1e0306003c5c9801288763"], 0xffdd) close_range(r0, 0xffffffffffffffff, 0x0) 1.952573721s ago: executing program 2 (id=2354): r0 = socket(0x10, 0x80002, 0x4) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x4c, &(0x7f0000000280)={&(0x7f00000006c0)=@newtaction={0x70, 0x13, 0x53b, 0x0, 0x0, {}, [{0x214e, 0x1, [@m_sample={0x58, 0x0, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0xe80}}, @TCA_SAMPLE_RATE={0x8}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4001}, 0x0) 1.803330003s ago: executing program 2 (id=2357): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400", @ANYRES32, @ANYBLOB="0000000000000000b7020000f3ffffb0150000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7ffffdff}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1b, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6}]}) socket$rds(0x15, 0x5, 0x0) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x0, 0x2000, 0x3f, 0x5a01, 0x6f, 0x1000}) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/lblcr_expiration\x00', 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f00000003c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000240)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f00000010c0)=0x5, 0x4) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000001c0)={'bridge0\x00', 0x0}) setsockopt$packet_int(r3, 0x107, 0x7, &(0x7f0000000180)=0x8, 0x4) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="3f03fe7f0300120006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0x48, 0x0, &(0x7f0000000540)={0xc9, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) syz_emit_ethernet(0xfdef, &(0x7f0000001b80)={@multicast, @dev, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @empty=0x2, @multicast2}}}}}, 0x0) io_setup(0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x11, 0x4, 0x4, 0xc}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000071d718110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000f70000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008800000b7040000000000008500000001000000850000007d00000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r7}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r8 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) r9 = openat$cgroup_subtree(r8, &(0x7f00000001c0), 0x2, 0x0) write$cgroup_subtree(r9, &(0x7f0000000100)={[{0x2d, 'pids'}]}, 0x6) 1.786347234s ago: executing program 2 (id=2358): r0 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x1}, 0x62) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000f3ffffb0150000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x2200c407, &(0x7f0000000440)={[{@dioread_lock}, {@debug}, {@abort}, {@init_itable_val={'init_itable', 0x3d, 0xebdc}}, {@auto_da_alloc}, {@grpjquota, 0x2e}, {@nouid32}, {@delalloc}, {@jqfmt_vfsv1}, {@acl}], [], 0x2c}, 0x84, 0x4da, &(0x7f0000000f40)="$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") write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = io_uring_setup(0x7fdb, 0x0) r4 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r4, 0x402, 0x5) r5 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r5, 0x402, 0x14) close_range(r3, 0xffffffffffffffff, 0x0) 1.404715865s ago: executing program 2 (id=2363): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="6400000002060102000034e40000000000000000050001000700000005000400000000000900020073797a32000000000500050002000000140007800800060000000000080013400000000015000300686173e83a69702c706f72742c6e657400000000"], 0x64}}, 0x0) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x90) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x46, &(0x7f0000000040), 0x4) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000000240), 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r5, 0x0, 0xb) splice(r7, 0x0, r8, 0x0, 0xf3a, 0x0) write$binfmt_misc(r8, &(0x7f0000000240)=ANY=[], 0xfdef) splice(r4, 0x0, r8, 0x0, 0x80, 0x0) write(r6, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(0x0, r4) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f0000000400)={0x0, {{0xa, 0x0, 0xffff, @private1={0xfc, 0x1, '\x00', 0x1}, 0x5}}}, 0x88) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r1, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_PROG_GET_NEXT_ID(0xb, 0x0, 0x0) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a181000b00000000010000000000000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x0) 1.331505142s ago: executing program 1 (id=2367): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x1800}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1.295596874s ago: executing program 1 (id=2368): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400", @ANYRES32, @ANYBLOB="0000000000000000b7020000f3ffffb0150000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7ffffdff}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1b, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6}]}) socket$rds(0x15, 0x5, 0x0) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x0, 0x2000, 0x3f, 0x5a01, 0x6f, 0x1000}) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/lblcr_expiration\x00', 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000240)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f00000010c0)=0x5, 0x4) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000001c0)={'bridge0\x00', 0x0}) setsockopt$packet_int(r3, 0x107, 0x7, &(0x7f0000000180)=0x8, 0x4) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="3f03fe7f0300120006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0x48, 0x0, &(0x7f0000000540)={0xc9, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) syz_emit_ethernet(0xfdef, &(0x7f0000001b80)={@multicast, @dev, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @empty=0x2, @multicast2}}}}}, 0x0) io_setup(0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x11, 0x4, 0x4, 0xc}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000071d718110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000f70000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008800000b7040000000000008500000001000000850000007d00000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r7}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r8 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) r9 = openat$cgroup_subtree(r8, &(0x7f00000001c0), 0x2, 0x0) write$cgroup_subtree(r9, &(0x7f0000000100)={[{0x2d, 'pids'}]}, 0x6) 1.291293235s ago: executing program 1 (id=2369): open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r1}}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000340)="b0fef28adda655a00a8ce0bb7d504206000000000000001abe0a88f67472c3cd975c9884ae01084df2b7f556e2a043b74efe85a30267", 0x36}], 0x1}, 0x0) write$P9_RLERRORu(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000001c0)=ANY=[@ANYBLOB="ac010000170000000000000000000000000000000000000000000000000000000000000000000000fc010000000000000000000000000000fc020000000000000000000000000000e00000010000000000000000000000000000000000000000000000000c0000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff010000000000000000000000000001fe8000000000000000000000000000bb00000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000528800000000000000000000000000000000000000000000000000000000000000000000000084000500ac1414aa000000000000000000000000000000000000000000000000fe880000000000000000000000000001000000000000000000000000000000000000000020010000000000000000000000000002000000000000000000000000000000000000000000000000000000010000000000000000"], 0x1ac}}, 0x0) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000800000003003c02ffffffef3501"], 0x7c8) mount$9p_fd(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000180), 0x400, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_fscache}], [], 0x6b}}) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') pread64(r4, &(0x7f0000003280)=""/4076, 0xfec, 0x0) 1.013172357s ago: executing program 0 (id=2373): r0 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000f3ffffb0150000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newsa={0x184, 0x10, 0x713, 0x0, 0xfffffff0, {{@in6=@remote, @in=@dev}, {@in=@remote, 0x0, 0x32}, @in6=@loopback, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @algo_auth_trunc={0x4c, 0x14, {{'sha1\x00'}, 0x0, 0x7}}]}, 0x184}}, 0x0) 929.310314ms ago: executing program 3 (id=2374): r0 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x1}, 0x62) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000f3ffffb0150000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x2200c407, &(0x7f0000000440)={[{@dioread_lock}, {@debug}, {@abort}, {@init_itable_val={'init_itable', 0x3d, 0xebdc}}, {@auto_da_alloc}, {@grpjquota, 0x2e}, {@nouid32}, {@delalloc}, {@jqfmt_vfsv1}, {@acl}], [], 0x2c}, 0x84, 0x4da, &(0x7f0000000f40)="$eJzs3M1vFOUfAPDvbF+gvLXw4/f7yYuyikYi2tKCysEDGk24mJjoAY+1VIIUMLQmQohUY/Bo/AvUo4mJJy+eNDFGPfly1bsxIYYLSKKumdmZdpfult3t0or7+SS7fZ6ZZ+Z5vjPz7Lw83Q2gZ5XTtyRiU0T8FBHD1Wx9gXL1z/WrF6d+v3pxKolK5fnfkqzctasXp4qixXIb88wPFyJKbyexq0G9s+cvnJqcmZk+l+fH5k6/OjZ7/sIjJ09Pnpg+MX1m4vDhQwfHH39s4tGuxJnGdW3nG2d37zj64nvPTlXipW8+Ttu7KZ9fG0fVyIrrLEc5KrnFqYPZ+wMrXvs/y+aadNLfsEiyao2hZX0Rke6ugaz/D0dfLO684XjmrYXMl2vUQOC2Sc9NW5dM7cv/lhbOX8C/UdJRH/+j+w0BVllxxk/vf4tXMe3GKl2DrKUrT6bv01n81/NXxFB2V1RKb1pHqnfsfU2WP9J0za3d7m6KiGPzN95PX9HwOQQAQHd9nl7/PNzo+q8U/6sptyUfQxmJiP0RsS0i/hMR2yPivxFZ2f9HxF1t1l++Kb/0+uf7oY4Ca1F6/fdEPra1eP0XWfxVyUJucxb/QPLyyZnpA/k22RcD69L8+DJ1fPH0j+82m1euuf5LX2n9xbVg3o5f+9fVL3N8cm5yBSHXufJmxM7+RvEnCyMB6RbYERE7O1h/us1OPvTR7jS9ZePS+beOfxmNx5naUvkw4sHq/p+Pm+IvJNWamo1Pjq2PmekDY8VRsdS3311+rjY/UJOui399azGt7zTYBtL9v6Hh8Z/HX3SDYrx2tv06Lv/8TtN7mqX7P4lj87Ul+iM7/ms+BdLjfzB5IUsP5tNen5ybOzceMZhPqJs+sbhskS/Kp/Hv29u4/2+L+PODfLldEZEexHdHxD0RsSdv+70RcV9E7F0m/q+fuv+V5bdQ8+O/2X1nt6TxH19u/0eMJLXj9R0k+k599Vmz+lv7/DuUpfblU1r5/Gu1gSvZdgAAAHCnKGVj0ElptEjXPJzaHhtKM2dn5/aX47Uzx6tj1SMxUCqedA3XPA8dz58NF/mJm/IHI2Jr9p9GQ1l+dOrszOa1DBzIvqtT1/+jVBodrc775XY/fATWXlvjaLX/1/bJp91vDLCqujCODtyh9H/oXfo/9C79H3pXo/5/KeL6GjQFWGXO/9C79H/oXfo/9C79H3rS0q/EFz+00Mk3/RcT245miWJlHa+ncWJoxSusDHezPQuJ+faX6rsNzUgTUfujHU0TSUR0VkWUli8z2ELtq5CIiL8qEVE/q3TLxY90uFnaSOzJE+va6CCX2tyqnUexdp9JAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA3fR3AAAA//8xTNft") write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = io_uring_setup(0x7fdb, 0x0) r4 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r4, 0x402, 0x5) r5 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r5, 0x402, 0x14) close_range(r3, 0xffffffffffffffff, 0x0) 929.124224ms ago: executing program 0 (id=2375): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000060000850000006d00"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r0}, 0x10) capset(0x0, &(0x7f0000000140)) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000040)="480000001400190c09044beafd0d58560284476080ffe00600060308590002a2bc5603ca00000f7f8900000020004c000101ff0000004309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x4040820}, 0x0) socket$kcm(0x10, 0x2, 0x4) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) fchmod(r1, 0x0) 928.968274ms ago: executing program 0 (id=2376): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuacct.usage_percpu\x00', 0x275a, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r3, 0x6, 0x19, &(0x7f0000000040)=0xfffe, 0x4) bind$inet(r3, &(0x7f0000003900)={0x2, 0x4e24, @multicast1}, 0x10) connect$inet(r3, &(0x7f0000000480)={0x2, 0x4e24, @empty}, 0x10) sendto$inet(r3, &(0x7f0000000100)="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", 0xfffffffffffffdb0, 0x4040004, 0x0, 0xfffffffb) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r2, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="6c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000003000128009000100766c616e00000000200002800c0002001c0000001f0000000600050088a8000006000100", @ANYRES32], 0x6c}}, 0x0) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$nci(r4, &(0x7f0000000100)=ANY=[@ANYBLOB="60f10109f2000c0009000800"], 0xc) write$binfmt_script(r2, &(0x7f00000004c0)={'#! ', './file0', [{0x20, '/dev/virtual_nci\x00'}, {0x20, 'cpuacct.usage_percpu\x00'}, {0x20, '\\%:\\'}, {}, {}], 0xa, "6691e044d7a31fe7282d1295563368b166e90eb1644cb5db9a42d2088abd418c14a0ec4a81af2776e29ebb2773460ae00cce539318f91e83f89395e633a887b26858abcd321262c60b539d6f5442a1a61107f9bac4dbadf4e231e894c91ff00a89a2850252b89fd86461b9833ee5ee9dbc4bf6306d68a1a5d87b8100d4b60b924eaf02cffb35f5fe1ee690b9b2a92a499f00a3e20da4de07a450f15aa212a33f43d36f11de8cfa7fb1fbfc2897e36cc18e0b6775d89238af556cba07281fd7f85b19595b175dab525d195748141bee0c5cbefc4b01734b814da7ced68acee17f35e587"}, 0x11d) sendmsg$netlink(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="180000005a0600030000000000000000041f008004000080"], 0x18}], 0x1}, 0x0) 911.750006ms ago: executing program 3 (id=2377): ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x22}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}, @NFT_MSG_DELFLOWTABLE={0x34, 0x18, 0xa, 0x801, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x8, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x4}]}]}], {0x14, 0x10}}, 0xbc}}, 0x0) 883.075298ms ago: executing program 3 (id=2378): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="18010000007b00000000000000000000850000007b00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) (async) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="18010000007b00000000000000000000850000007b00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='netlink_extack\x00', r0}, 0x10) socket(0x10, 0x3, 0x0) (async) r1 = socket(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000440)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x4}}]}, 0x34}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'hsr0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x4c}}, 0x0) r7 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) socket$inet_sctp(0x2, 0x5, 0x84) (async) r9 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r9, 0x84, 0x7b, &(0x7f0000000140)={r8}, &(0x7f00000002c0)=0x8) (async) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r9, 0x84, 0x7b, &(0x7f0000000140)={r8}, &(0x7f00000002c0)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000140)={r8, @in6={{0xa, 0x4e20, 0x8, @loopback, 0x9}}, 0xe, 0x2}, &(0x7f0000000380)=0x90) 809.231334ms ago: executing program 4 (id=2379): syz_io_uring_setup(0x0, &(0x7f00000003c0), &(0x7f0000000000), 0x0) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$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") r0 = open(&(0x7f0000000180)='./bus\x00', 0x1492fe, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r0, 0x0) fallocate(r0, 0x0, 0x0, 0x1001f0) fallocate(r0, 0x3, 0x0, 0x10000) bpf$MAP_CREATE(0x0, &(0x7f00000023c0), 0x48) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000500)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x3fe, 0x0, 0x0, 0x0, 0x0, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5c9d000ff8ee09e737ff0edf110ff4117639c2eb4b78c66ee677df701905b9aafab4afaaf755a3f6a004", "cba3d625780820d1cbf7db710382060000e9009600fdff0000000000000000000000f700000000000500", "be1d0000ae9ef30bea2a004000010000000000008000"}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="180000002a00250025000000000000009500000000000000aecd48d6494d614dcc6fab5335ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad96ed406f21caf5adcf920569c00cc1199684fa7c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c1faca0f9d9924be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fca4e0b6fab1aa7d55545a34effa077faa55c59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afd8cc2e47a7d8b85a5e3d77ac463920e231b7ae0da8616d2b79db2e3d5986c82b5aa94e539b204d58f91f5da6c025d060ab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c78fbfe5ab0255f347160ec83070000020000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab8b4b380a00d72b0000000000001cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2cc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78ac02ca3cdf6a662db1c9c89c9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e559d17879570c8ad943e392955f4f979ea13201bafedcd2063d11dd665647223c78a996810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151ffdf6f7820549cda6cb799c6e924966a7f90bf8fd1e75ee76bd89346cfbb5567e54d3504723177d356c4604b7a492ecec37e83efceefd7ca2533659edc8be05cc85451c6a14507434eb54b6f43caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffca9ec9a7a3755e0f209150a07682c4e14e3a83558df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e561a9845e4ff29e2bdb1d0b923b272341c5e093fd66a294351c5356c1d06c92cf8ce3c7c56cd31121624d74517fd3666277f670e812b28e2f30d035cee5d0e77a3c7220000000000000005a474816bc59d2e2a00092419304b338a987e9d3044d856ce24f370030be3b5f79f034b8d3ebce68663ef5af469abe75b314fae31a0445859a5ece8fb11a4ee8e46354c9c3a041e12282ce24463aaf28345bd168b4177ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f09000000000000004fc4bda3453602004535a976eacd3adaa4d2ee6fe0d072ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d401adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb40f7f02f750d6c977a191852c9ae031db044b2353199546609f9f69a6cfefdf879d447df53f3b9b70d10355b00300000000000000553d18a6cc50feeb7bfad9b7be3283b6450d264e7712d2f1d7004548b19162cef04d18d4f5987baab97a9bfbd8f185b5631820420bf5b6522c0e21c882c66f4f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe527340935aa3c0b4f3f45bfff2418a18217747ae442e31560e5b741445ea2a1acee2a81425ff000000d2a0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa6623920dacc107f532348cc21164efe794874eac73381e961f3d9c8c21578fe3245097c280abe51427b9f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f88735fce5115dc83ed73d8ee4a91322608c6fc01e1b9e16587bb5f721303e6b89e5c54d680ac66d09af90dbf5000000000000fa08ad0731c4b839688b22c4da2a6bc4cf45854d221a2d5f96bc64647f15daa2ba79cd0f4254ed55217912ef84bd2927df82fc061aef2920c49b2a90886da75561173fa186cb7ee86dd4285c4721eb428c953296bb2f5d825da54dbef07c1b349b4901e093d13e6b9a0000009b5b22e887bc061d40bcaf0aa18623fd9b7179ccc692ba74b531b65c4decf9d080a8ac7e82d4cde1267aa64b2a94fd87a009e6742c2ddc3a9d7eccbb1831b1fa218277c2814a91cab7cb59c697166d6f1bb1a360470000000000000000000000000000000000000000000000000000f9f9b4ce7e871f507084c8c88e0652decbe579b03ed84ea94597dd1059620a050f69ea03b99b4e19d35f4a3b54e96ae2172effecec80f6baa4bf69a6ebf5392882df78b0983e662dc0cb64b77f3f006b6b25443197ae93f0be6de5a703d003f00720943c0e4b33af000000000000000000"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000002080)={0xc, {"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", 0x1000}}, 0x1006) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) socket$inet6(0xa, 0x0, 0x0) 808.874754ms ago: executing program 0 (id=2380): creat(0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) r1 = gettid() r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r2, &(0x7f0000000200)=""/209, 0xd1) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, 0x0) prlimit64(0x0, 0xa, &(0x7f0000000140)={0x8, 0x3}, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000600)={0x0, 0x0, 0x0, 'queue1\x00'}) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x2010000, &(0x7f0000000840)=ANY=[@ANYBLOB="6e6f6e756d7461696c3d30722c696f636861727365743d63703836342c756e695f786c6174653d312c636f6465706167653d313235302c73686f72746e616d653d6c6f7765722c756e695f786c6174653d302c726f6469722c6e6f6e756d7461696c3d302c696f636861727365743d63703836322c726f6469722c73686f72746e616d653d77696e39352c6e6f6e756d0000696c3d302c002aa220cdeeb5ba33c93123800bef80e5155d8840d88fc461c604630000000000"], 0x25, 0x336, &(0x7f0000000500)="$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") ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r2, 0x402c5342, &(0x7f0000000500)) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r2, 0x80045300, 0x0) tkill(r1, 0x7) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x5, &(0x7f0000000400)=ANY=[@ANYBLOB="180000af060000000000000051ee00000000000000000000000000850000081ffb"], &(0x7f00000000c0)='syzkaller\x00'}, 0x90) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000004c0)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='tlb_flush\x00', r3}, 0x10) write$cgroup_int(r0, &(0x7f0000000000), 0xffffff6a) 752.203279ms ago: executing program 3 (id=2381): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b70300000000002085000000730000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='netlink_extack\x00', r0}, 0x10) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="2c0000001600090400000000000000000a000000000000000000000008001e00000000000800040000000000fee39a2da26c8734cf6a27837dc486bbda5052293895b7"], 0x2c}}, 0x0) 681.886034ms ago: executing program 3 (id=2382): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a0300000000000000f400010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000240000000001800038014000100626f6e64300000000000000000000000080001400000000048000000180a01010000000000000000010000000900020073797a30"], 0xe8}}, 0x0) 628.442789ms ago: executing program 3 (id=2383): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000b40), 0x2b842ac, 0x0) unshare(0x0) socket$netlink(0x10, 0x3, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001780)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2f4ab1da1e07673b3d9feb01001800f63258ca3bf5c19d00000000"], 0x0, 0x26}, 0x20) gettid() bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(0xffffffffffffffff, 0x891c, &(0x7f0000000140)={'wg1\x00', {0x2, 0x0, @empty}}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000e9acc7ec0f9f6df23d03ec70c2213d8a2915b1715f1bbade085b5a5359a2794282dbbc29"], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000440)='rxrpc_local\x00', r4}, 0x10) r5 = socket$rxrpc(0x21, 0x2, 0xa) socket$rxrpc(0x21, 0x2, 0xa) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c00}, 0x0) connect$rxrpc(r5, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast1}}, 0x24) sendmsg$inet(r5, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c00}, 0x0) 478.886211ms ago: executing program 4 (id=2384): syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') socket$kcm(0xa, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x46, 0x0, 0x0) dup(0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x3000490, &(0x7f00000001c0)={[{@dioread_lock}, {@usrjquota}, {@errors_remount}, {@norecovery}, {@auto_da_alloc}, {@noquota}, {@grpquota}, {@barrier_val}, {@grpjquota}, {@jqfmt_vfsold}]}, 0x45, 0x7b1, &(0x7f00000004c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000000), 0xffffff6a) fallocate(r0, 0x604000000000000, 0x0, 0x2c2) 478.634841ms ago: executing program 0 (id=2385): quotactl$Q_QUOTAON(0x0, 0x0, 0x0, &(0x7f0000000300)='./file0/../file0/../file0\x00') r0 = socket(0x2, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000), 0xfea7) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x1, 0x10012, r1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0xa00000000000000, 0x80, &(0x7f00000000c0)=@broute={'broute\x00', 0x20, 0x1, 0x990, [0x0, 0x900, 0x0, 0x0, 0x0, 0x20000e00], 0x0, 0x0, &(0x7f0000000e00)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff010000000b00000000000000000062726964676530000000000000000000766c616e300000000000000000000000736974300000000000000000000000007465716c3000000000000000000000000000000000000000000000000180c20000000000000000000000b8080000b808000030090000616d6f6e670000000000000000000000000000002000000000000000000000002008000000000000140400000c000000000000000a000000000000040000000000000000000000000000080000000000000000000000000000b085da05d603888318a0cce400000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000fdffffffff00000000000000000000e4ff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000000000000000000000000000000000000000000000000000000000000000006fb7cd02b734bcce41ef6e95bd000000008000000000000000000000000000000000000000000000000000000000000000eeff3f000000008fc7660c490587b3ab213098a6767c000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f8f0000000000000000dbd5a834b3ab2a0cc27081310000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000440a05000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000f18a0afe993500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4f016fa70c1255400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008c7f8f1b44f000000000feffffff00000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000062f75a00627f34dd71012eed00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e0ffffff00000000000000000000000000000000000000000000001b00000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000f200000000000000000000000000000000000000000000000000000000000000fffffff90000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f2573bd04a330000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000ff7f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000cb33322c9c564ae5f8eef74d5aa7cc9c000000000000000000000000000000000000000000000000000000000500000000000000000000000000000000000000003f7f1c00000000000000000000000000000000ecffffffffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000afe96d981b6f119c000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d3d2e85100000000000000000000000000000000000000000000000000844caab24e79bd260000000000000000000000000000000000000000005080000000000000000000000000000000010000a600a9e85725d89818472e65aba21d9bbc1b20e8331c6fd24a5aceaeefe102e42a013ac2c00eeb782c34eab997013e0506220c21a44cc58ff5bc83d5e4066c7700"/2448]}, 0xa08) 475.426401ms ago: executing program 2 (id=2386): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) (async, rerun: 64) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) (rerun: 64) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000000)) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) (async, rerun: 64) write$cgroup_int(r0, &(0x7f0000000200), 0xf03f) (rerun: 64) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$smc(&(0x7f0000000980), 0xffffffffffffffff) (async, rerun: 32) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000040)={'ip6gre0\x00', &(0x7f0000000000)=@ethtool_sfeatures={0x2f}}) (async) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async, rerun: 64) r6 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) (rerun: 64) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000007940)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000008}, 0x0) (async) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r8) (async) r9 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r8, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) (async) listen(r9, 0x0) (async) syz_emit_ethernet(0x5a, &(0x7f0000000180)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ff00f5", 0x24, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x9, 0xc2, 0x0, 0x0, 0x0, {[@mptcp=@add_addr={0x1e, 0x10, 0x2, 0x10, 0x0, @dev={0xac, 0x3}, 0x0, "20f0ddf9a66a"}]}}}}}}}}, 0x0) (async, rerun: 32) sendmsg$SMC_PNETID_ADD(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x34, r6, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'wg0\x00'}]}, 0x34}}, 0x0) (rerun: 32) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002ac0)=@delchain={0xf8, 0x65, 0x0, 0x0, 0x0, {}, [@TCA_CHAIN={0x8}, @TCA_CHAIN={0x8}, @filter_kind_options=@f_route={{0xa}, {0xb8, 0x2, [@TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_ACT={0xac, 0x6, [@m_nat={0x7c, 0x0, 0x0, 0x0, {{0x8}, {0x54, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{}, @rand_addr, @loopback}}, @TCA_NAT_PARMS={0x28, 0x1, {{}, @rand_addr, @broadcast}}]}, {0x4}, {0xc}, {0xc}}}, @m_bpf={0x2c, 0x0, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0xf8}}, 0x0) (async) r10 = socket(0x10, 0x803, 0x0) sendto(r10, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r10, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x7b}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x8}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) (async) sendmsg$SMC_PNETID_GET(r2, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000580)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="3943000000000000000001000000316168ff1f5db9b25ebe9312bff8dd6630502a0a9f88e6d98842eebb8eacd7de6bedf16a817ff133694f7781bc1d8cdf851c40d240a673460690db9c8cff9809565cccc580b52387691b48f2"], 0x14}}, 0x0) 424.189475ms ago: executing program 1 (id=2387): socket$inet6_mptcp(0xa, 0x1, 0x106) syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="2503000019002551075c0165ff0ffc02802000030004", 0x16) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.events\x00', 0x275a, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180500001c000000000000000000000c850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) write$binfmt_script(r0, &(0x7f0000000000), 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x800001, 0x10012, r0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0xb00, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x220, 0x128, 0xa, 0xd0e0000, 0x128, 0x100, 0x228, 0x1d8, 0x1d8, 0x128, 0x1d8, 0x3, 0x0, {[{{@ip={@loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'ip6tnl0\x00', 'rose0\x00'}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x280) getpeername$packet(0xffffffffffffffff, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000500)=0x14) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x0, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) 293.183516ms ago: executing program 0 (id=2388): pipe(&(0x7f0000002900)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_SECURITY(r3, 0x0, 0x1, &(0x7f0000000980), &(0x7f00000009c0)=0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmsg$AUDIT_ADD_RULE(r0, &(0x7f0000000440)={&(0x7f0000000200), 0xc, &(0x7f00000002c0)={&(0x7f00000004c0)={0x438, 0x3f3, 0x6, 0x70bd26, 0x25dfdbfc, {0x0, 0x2, 0x33, [0x800, 0x5, 0x5, 0xfa, 0x27cf, 0x401, 0x9, 0x7, 0x3, 0x7, 0xe, 0x0, 0x9, 0xc, 0x9, 0x592, 0x8, 0x4, 0xfffffffd, 0xffff05e2, 0x80000000, 0x5, 0x100, 0xfffffc00, 0x4, 0x0, 0x7, 0xe, 0x1, 0x3, 0x3, 0x2, 0x8001, 0x3, 0x4, 0xfffffff8, 0x7, 0x7, 0x9, 0x0, 0x40, 0xa, 0x7, 0x6, 0x4, 0x1, 0x0, 0x1, 0x8, 0xa, 0x29, 0x9, 0x20000000, 0x800, 0x0, 0x3, 0x4, 0x4, 0xfffffffa, 0x7, 0x2, 0x40, 0xffffffff, 0x80], [0xb9, 0x0, 0x7, 0xe, 0x7, 0x0, 0x10, 0x5, 0xffffffff, 0x401, 0x7fff, 0x400, 0x25b, 0x8, 0x0, 0x8, 0x0, 0xfffffffd, 0x3, 0x5, 0x7, 0xffff0001, 0xfffffff9, 0x7ff, 0xffffffff, 0x6, 0x5, 0x8, 0x2, 0x3, 0x9, 0x7da, 0xffff8001, 0x43, 0xfff, 0x1ff, 0x3, 0x17, 0x7, 0xfffffff5, 0x1ff, 0x7, 0x3, 0x9, 0x45, 0x6, 0x800, 0x9, 0xb, 0x1, 0xd19d, 0xfff, 0x6, 0x6c75, 0x5, 0x4, 0x4, 0x7ff, 0x5, 0x4, 0x7, 0x10000000, 0x5a406a6, 0x3], [0x9, 0xaa19, 0xfffffffa, 0x0, 0x9, 0x0, 0x9, 0xa0f0, 0x800, 0x9, 0x3, 0x0, 0x4, 0x7, 0x800, 0xffffd26b, 0x9, 0x101, 0x7, 0x0, 0x0, 0x1, 0x9, 0x1, 0x4, 0x4, 0xffffffff, 0xc, 0x2, 0x0, 0x8000, 0x0, 0x8, 0xfffffff9, 0xfffffff7, 0x1, 0x4, 0x1, 0xb00, 0xcb3, 0x8a, 0x7ff, 0x5c7a, 0x0, 0x9, 0x2, 0x6, 0xf43d, 0xe9, 0x2, 0x4, 0xfe, 0x30b, 0x2, 0xdc3, 0x9, 0x3, 0x401, 0xfffffff9, 0x4, 0x0, 0xa, 0x3e55, 0x80000001], [0x55491e4c, 0x2, 0x3, 0x0, 0x8, 0x40, 0x6, 0x1, 0x101, 0x9, 0x3, 0x4, 0x3, 0x5, 0xeb98, 0x6, 0x6, 0x3, 0x7f, 0x4, 0xffffff3c, 0x7, 0x9, 0x101, 0x0, 0x8, 0xc, 0xffff, 0x4, 0x8, 0x2, 0x9, 0x90d, 0x7, 0x6, 0x8, 0x2, 0x0, 0x5, 0x5, 0xf2, 0x10, 0x9, 0x9, 0x7ff, 0x3, 0x49b2, 0x1, 0xe, 0xffff9086, 0xb, 0x4, 0xd7, 0x7, 0x101, 0x6, 0x5, 0x0, 0x17c8, 0x7, 0x4, 0x1, 0x3, 0x52ed], 0x15, ['syzkaller\x00', '##([$\'%[)}\x00']}, ["", "", ""]}, 0x438}, 0x1, 0x0, 0x0, 0x4002}, 0x8010) r6 = syz_io_uring_setup(0x4120, &(0x7f0000000900)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000380)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x6, [@func_proto={0x0, 0x0, 0x0, 0xd, 0x2}, @typedef={0x4, 0x0, 0x0, 0x8, 0x2}]}, {0x0, [0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x36, 0x0, 0x8}, 0x20) io_uring_enter(r6, 0x10002def, 0x0, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f0000000400)=[{{0x0, 0xf5ffffff, 0x0, 0x0, 0x0, 0x4000000}}], 0xf00, 0x0, 0x0) shutdown(r5, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r4) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x8a, &(0x7f0000000000)={[{@jqfmt_vfsold}, {@usrjquota, 0x22}, {@errors_continue}, {@noload}, {@data_err_ignore}, {@usrjquota, 0x22}, {@errors_continue}, {@errors_remount}, {@noblock_validity}]}, 0x1, 0x44e, &(0x7f0000000d80)="$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") vmsplice(r1, &(0x7f00000001c0)=[{&(0x7f0000000040)="76bc192c0a59b7debadf855ebdda5dce4a7ed9991823dc71e4cf02dbfadee511cc04399933a30a7f7086814f46d28e281b22bd2eeeae48db8c7ac2fbfd6ba7bfdfefddc5e5e38c3f03e421acd745f4655aa5523382ec54954b80", 0x5a}, {&(0x7f0000000300)="dd005389f09b9d1e54f5eb769b67ebfe125c0064bde97122f066782682964c4b6cc481b098b366d262fb484558a1a2502166016d400cce50dddde6ac25b315a840d67777bf7a5a88095f950c2639bf998ec75d3f5061aed0e548ae98f38d558d552534d9b3ead72e2e404616507de1d80293ff5f240065e0d6fb6469d1826f1bdbe342367df154d90cb83b32ff0364fdfef1089b0572c5e2fcd32d97a7186a13e35cb6f9ada8545603dcb72073af8ba9011c3ce36ce974ac58d0388dc4acb9f7e7d894e2edb75bb949a05d3e958663cbbe41d78acc5189dd9f9461466e59d6649e79c88362fbf900"/255, 0xff}], 0x2, 0x0) rt_sigprocmask(0x0, &(0x7f000078b000), 0x0, 0x8) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0x7, &(0x7f0000000a00)={0x5, 0xb1a, 0x2, 0x1}, 0x10) 263.440579ms ago: executing program 2 (id=2389): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x11, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newtclass={0x30, 0x28, 0x0, 0x0, 0x0, {}, [@tclass_kind_options=@c_htb={{0x8}, {0x4}}]}, 0x30}}, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) r2 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7020000f3ffffb0150000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r4) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000040)) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r6, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r7 = dup(r6) write$P9_RLERRORu(r7, &(0x7f0000000040)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r7, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r7}, 0x2c, {[], [], 0x6b}}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x48, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r8}, @IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x48}}, 0x0) 196.336054ms ago: executing program 1 (id=2390): perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x66, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000004c0)=@newqdisc={0x7c, 0x24, 0xf0b, 0x1100, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x8002, @TCA_SFB_PARMS={0xffffffffffffffcb}}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c}, {0x4}}]}]}, 0x7c}}, 0x0) 0s ago: executing program 1 (id=2391): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x1f, &(0x7f0000000740)=ANY=[@ANYBLOB="18630000070000000000000040000000b7080000000000007b8af8ff00000000b7080000090000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180000000100000000000000020000008520000003000000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000004b70500000800000085000000a50000003bf2e6177fc00ed3470ddbe6de78c3aa03caa764aa046453f3c8c808864cb24735258df7d14db72ab631a56e39cc454ac2c870851cd5a7da9a2c3b8821db1f5c603907938ce36456b01197dc25704de505c9e8a7edd46187323423da6d3324774736efa1eaf883af6ec85226d059d0211fdd42246f2b4f46bd66ba810564b94625930304db54c07ead8d98d5b80cd4b6529fc3b3649c7bb1428d00fe0bc754713954db2f7fee"], &(0x7f00000002c0)='syzkaller\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x9}, 0x10}, 0x90) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000100)=@assoc_value, &(0x7f0000000040)=0x8) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)={0x30, r2, 0xf81, 0x70bd28, 0x0, {{}, {@val={0x8}, @val={0x8}, @val={0xc}}}}, 0x30}}, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) r5 = syz_genetlink_get_family_id$smc(&(0x7f00000010c0), r4) sendmsg$SMC_PNETID_DEL(r4, &(0x7f0000001180)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001140)={&(0x7f0000001100)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="00042abd7000fcdbdf25030000001400020076657468305f746f5f62726964676500050004ea020000000500040001000000"], 0x38}, 0x1, 0x0, 0x0, 0x4802}, 0x20008801) sendmsg$SMC_PNETID_DEL(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x4044014}, 0x200480c4) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) dup2(r6, r7) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x6, 0x12, r7, 0x4000) r8 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x1}, 0x62) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800"/14, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000", @ANYRES32=r9], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r10) r11 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f0000000340)=ANY=[@ANYRESHEX, @ANYRESHEX=r3, @ANYRES64], &(0x7f00000002c0)='syzkaller\x00', 0x800000, 0x0, 0x0, 0x40f00, 0x45, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff16}, 0xfffffffffffffcb9) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000), 0x10) syz_emit_ethernet(0xfdef, &(0x7f0000000040)=ANY=[], 0x0) fcntl$dupfd(r6, 0x0, r6) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, 0x4, 0x0, 0x0, 0x0, 0x200000}, 0x0, 0x2, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x0, 0x1, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) kernel console output (not intermixed with test programs): eaned up [ 132.884741][ T9572] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 132.929459][ T9584] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 132.968188][ T9572] loop1: detected capacity change from 512 to 64 [ 132.981065][ T9587] SELinux: inode_doinit_use_xattr: getxattr returned 12 for dev=loop1 ino=15 [ 132.995679][ T9587] SELinux: inode_doinit_use_xattr: getxattr returned 12 for dev=loop1 ino=15 [ 133.015977][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 133.016003][ T29] audit: type=1400 audit(1720665040.672:1107): avc: denied { setattr } for pid=9571 comm="syz.1.1927" name="file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 133.058813][ T6939] EXT4-fs warning (device loop1): ext4_empty_dir:3116: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 133.072768][ T6939] EXT4-fs warning (device loop1): ext4_empty_dir:3116: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 133.086589][ T6939] EXT4-fs warning (device loop1): ext4_empty_dir:3116: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 133.118159][ T6939] EXT4-fs warning (device loop1): ext4_empty_dir:3116: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 133.136907][ T6939] EXT4-fs warning (device loop1): ext4_empty_dir:3116: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 133.137194][ T9586] dccp_close: ABORT with 11 bytes unread [ 133.153746][ T6939] EXT4-fs warning (device loop1): ext4_empty_dir:3116: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 133.173375][ T6939] EXT4-fs warning (device loop1): ext4_empty_dir:3116: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 133.188017][ T6939] EXT4-fs warning (device loop1): ext4_empty_dir:3116: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 133.201917][ T6939] EXT4-fs warning (device loop1): ext4_empty_dir:3116: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 133.216264][ T6939] EXT4-fs warning (device loop1): ext4_empty_dir:3116: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 133.321143][ T9593] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1936'. [ 133.330979][ T9593] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9593 comm=syz.2.1936 [ 133.344777][ T9593] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1936'. [ 133.353842][ T9593] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 133.361554][ T9593] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 133.371498][ T9593] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 133.379218][ T9593] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 133.455541][ T4631] EXT4-fs error: 20488 callbacks suppressed [ 133.455560][ T4631] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5731: Out of memory [ 133.471076][ T4631] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #18: comm kworker/u8:19: mark_inode_dirty error [ 133.483032][ T4631] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5731: Out of memory [ 133.492315][ T4631] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #18: comm kworker/u8:19: mark_inode_dirty error [ 133.504825][ T4631] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5731: Out of memory [ 133.514219][ T4631] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #18: comm kworker/u8:19: mark_inode_dirty error [ 133.526017][ T4631] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5731: Out of memory [ 133.535164][ T4631] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #18: comm kworker/u8:19: mark_inode_dirty error [ 133.547573][ T4631] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5731: Out of memory [ 133.556976][ T6939] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.557030][ T4631] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #18: comm kworker/u8:19: mark_inode_dirty error [ 133.582728][ T3304] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.691243][ T3304] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.777998][ T9595] chnl_net:caif_netlink_parms(): no params data found [ 133.792417][ T3304] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.815949][ T5941] kmmpd-loop3: attempt to access beyond end of device [ 133.815949][ T5941] loop3: rw=14337, sector=48, nr_sectors = 4 limit=1 [ 133.829421][ T5941] Buffer I/O error on dev loop3, logical block 12, lost sync page write [ 133.851596][ T3304] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.877416][ T9595] bridge0: port 1(bridge_slave_0) entered blocking state [ 133.884582][ T9595] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.892203][ T9595] bridge_slave_0: entered allmulticast mode [ 133.899138][ T9595] bridge_slave_0: entered promiscuous mode [ 133.910307][ T9595] bridge0: port 2(bridge_slave_1) entered blocking state [ 133.917761][ T9595] bridge0: port 2(bridge_slave_1) entered disabled state [ 133.925064][ T9595] bridge_slave_1: entered allmulticast mode [ 133.931813][ T9595] bridge_slave_1: entered promiscuous mode [ 133.958523][ T9595] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 133.973277][ T9595] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 134.007896][ T9595] team0: Port device team_slave_0 added [ 134.014105][ T3304] bridge_slave_1: left allmulticast mode [ 134.019865][ T3304] bridge_slave_1: left promiscuous mode [ 134.025580][ T3304] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.033772][ T3304] bridge_slave_0: left allmulticast mode [ 134.039648][ T3304] bridge_slave_0: left promiscuous mode [ 134.045452][ T3304] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.072204][ T9610] FAULT_INJECTION: forcing a failure. [ 134.072204][ T9610] name failslab, interval 1, probability 0, space 0, times 0 [ 134.085112][ T9610] CPU: 1 PID: 9610 Comm: syz.4.1939 Not tainted 6.10.0-rc7-syzkaller-00012-g34afb82a3c67 #0 [ 134.095270][ T9610] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 134.105546][ T9610] Call Trace: [ 134.108839][ T9610] [ 134.111785][ T9610] dump_stack_lvl+0xf2/0x150 [ 134.116542][ T9610] dump_stack+0x15/0x20 [ 134.120722][ T9610] should_fail_ex+0x229/0x230 [ 134.125430][ T9610] ? v9fs_mount+0x53/0x560 [ 134.129870][ T9610] __should_failslab+0x92/0xa0 [ 134.134726][ T9610] should_failslab+0x9/0x20 [ 134.139287][ T9610] kmalloc_trace_noprof+0x4b/0x2a0 [ 134.144464][ T9610] v9fs_mount+0x53/0x560 [ 134.148730][ T9610] ? __pfx_v9fs_mount+0x10/0x10 [ 134.153599][ T9610] legacy_get_tree+0x77/0xd0 [ 134.158255][ T9610] vfs_get_tree+0x56/0x1d0 [ 134.162746][ T9610] do_new_mount+0x227/0x690 [ 134.167296][ T9610] path_mount+0x49b/0xb30 [ 134.171681][ T9610] __se_sys_mount+0x27f/0x2d0 [ 134.176443][ T9610] __x64_sys_mount+0x67/0x80 [ 134.181038][ T9610] x64_sys_call+0x25c9/0x2d70 [ 134.185729][ T9610] do_syscall_64+0xc9/0x1c0 [ 134.190293][ T9610] ? clear_bhb_loop+0x55/0xb0 [ 134.195106][ T9610] ? clear_bhb_loop+0x55/0xb0 [ 134.199860][ T9610] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.205831][ T9610] RIP: 0033:0x7fef88d82bd9 [ 134.210337][ T9610] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 134.230168][ T9610] RSP: 002b:00007fef88004048 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 134.238659][ T9610] RAX: ffffffffffffffda RBX: 00007fef88f10f60 RCX: 00007fef88d82bd9 [ 134.246673][ T9610] RDX: 0000000020000080 RSI: 0000000020000040 RDI: 0000000000000000 [ 134.254704][ T9610] RBP: 00007fef880040a0 R08: 0000000020000480 R09: 0000000000000000 [ 134.262796][ T9610] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 134.270862][ T9610] R13: 000000000000000b R14: 00007fef88f10f60 R15: 00007ffd38412398 [ 134.278865][ T9610] [ 134.389975][ T3304] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 134.403437][ T3304] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 134.415003][ T3304] bond0 (unregistering): Released all slaves [ 134.425454][ T3304] bond1 (unregistering): Released all slaves [ 134.438579][ T9595] team0: Port device team_slave_1 added [ 134.472634][ T9595] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 134.479842][ T9595] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 134.505920][ T9595] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 134.518911][ T9595] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 134.526070][ T9595] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 134.552113][ T9595] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 134.563453][ T3304] IPVS: stopping backup sync thread 8420 ... [ 134.588917][ T3304] hsr_slave_0: left promiscuous mode [ 134.595027][ T3304] hsr_slave_1: left promiscuous mode [ 134.601977][ T3304] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 134.609898][ T3304] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 134.617776][ T3304] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 134.625221][ T3304] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 134.636730][ T3304] veth1_macvtap: left promiscuous mode [ 134.642263][ T3304] veth0_macvtap: left promiscuous mode [ 134.647910][ T3304] veth1_vlan: left promiscuous mode [ 134.653263][ T3304] veth0_vlan: left promiscuous mode [ 134.784521][ T3304] team0 (unregistering): Port device team_slave_1 removed [ 134.804672][ T3304] team0 (unregistering): Port device team_slave_0 removed [ 134.852029][ T9595] hsr_slave_0: entered promiscuous mode [ 134.861009][ T9595] hsr_slave_1: entered promiscuous mode [ 134.870813][ T9595] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 134.878485][ T9595] Cannot create hsr debugfs directory [ 134.884090][ T9616] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1941'. [ 135.194389][ T9595] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 135.204328][ T9595] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 135.213531][ T9595] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 135.222966][ T9595] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 135.273563][ T9595] 8021q: adding VLAN 0 to HW filter on device bond0 [ 135.288872][ T9595] 8021q: adding VLAN 0 to HW filter on device team0 [ 135.300567][ T3161] bridge0: port 1(bridge_slave_0) entered blocking state [ 135.307843][ T3161] bridge0: port 1(bridge_slave_0) entered forwarding state [ 135.327043][ T3161] bridge0: port 2(bridge_slave_1) entered blocking state [ 135.334224][ T3161] bridge0: port 2(bridge_slave_1) entered forwarding state [ 135.405620][ T9595] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 135.492429][ T9595] veth0_vlan: entered promiscuous mode [ 135.502266][ T9595] veth1_vlan: entered promiscuous mode [ 135.525580][ T9595] veth0_macvtap: entered promiscuous mode [ 135.534172][ T9595] veth1_macvtap: entered promiscuous mode [ 135.548863][ T9595] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 135.559418][ T9595] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.569462][ T9595] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 135.580653][ T9595] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.590569][ T9595] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 135.601149][ T9595] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.611019][ T9595] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 135.621474][ T9595] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.631437][ T9595] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 135.641920][ T9595] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.651878][ T9595] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 135.662554][ T9595] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.672443][ T9595] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 135.682997][ T9595] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.692944][ T9595] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 135.703613][ T9595] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.716205][ T9595] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 135.733175][ T9595] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 135.743972][ T9595] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.753969][ T9595] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 135.764651][ T9595] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.774636][ T9595] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 135.785366][ T9595] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.795232][ T9595] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 135.806157][ T9595] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.816047][ T9595] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 135.826661][ T9595] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.836587][ T9595] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 135.847045][ T9595] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.856943][ T9595] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 135.867433][ T9595] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.877289][ T9595] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 135.887858][ T9595] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.907966][ T9595] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 135.919407][ T9636] FAULT_INJECTION: forcing a failure. [ 135.919407][ T9636] name failslab, interval 1, probability 0, space 0, times 0 [ 135.932098][ T9636] CPU: 1 PID: 9636 Comm: syz.4.1944 Not tainted 6.10.0-rc7-syzkaller-00012-g34afb82a3c67 #0 [ 135.942342][ T9636] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 135.952539][ T9636] Call Trace: [ 135.955878][ T9636] [ 135.958950][ T9636] dump_stack_lvl+0xf2/0x150 [ 135.963654][ T9636] dump_stack+0x15/0x20 [ 135.967854][ T9636] should_fail_ex+0x229/0x230 [ 135.972591][ T9636] ? __alloc_skb+0x10b/0x300 [ 135.977296][ T9636] __should_failslab+0x92/0xa0 [ 135.982107][ T9636] should_failslab+0x9/0x20 [ 135.986686][ T9636] kmem_cache_alloc_node_noprof+0x51/0x2b0 [ 135.992596][ T9636] __alloc_skb+0x10b/0x300 [ 135.997044][ T9636] netlink_alloc_large_skb+0xad/0xe0 [ 136.002481][ T9636] netlink_sendmsg+0x3b4/0x6e0 [ 136.007335][ T9636] ? __pfx_netlink_sendmsg+0x10/0x10 [ 136.012650][ T9636] __sock_sendmsg+0x140/0x180 [ 136.017372][ T9636] ____sys_sendmsg+0x312/0x410 [ 136.022180][ T9636] __sys_sendmsg+0x1e9/0x280 [ 136.026903][ T9636] __x64_sys_sendmsg+0x46/0x50 [ 136.031801][ T9636] x64_sys_call+0xb25/0x2d70 [ 136.036437][ T9636] do_syscall_64+0xc9/0x1c0 [ 136.041125][ T9636] ? clear_bhb_loop+0x55/0xb0 [ 136.045895][ T9636] ? clear_bhb_loop+0x55/0xb0 [ 136.050818][ T9636] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.056785][ T9636] RIP: 0033:0x7fef88d82bd9 [ 136.061220][ T9636] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 136.080945][ T9636] RSP: 002b:00007fef88004048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 136.089386][ T9636] RAX: ffffffffffffffda RBX: 00007fef88f10f60 RCX: 00007fef88d82bd9 [ 136.097416][ T9636] RDX: 0000000000000000 RSI: 00000000200005c0 RDI: 0000000000000003 [ 136.105465][ T9636] RBP: 00007fef880040a0 R08: 0000000000000000 R09: 0000000000000000 [ 136.113459][ T9636] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 136.121444][ T9636] R13: 000000000000000b R14: 00007fef88f10f60 R15: 00007ffd38412398 [ 136.129423][ T9636] [ 136.138533][ T9595] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.147472][ T9595] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.156385][ T9595] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.165100][ T9595] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.195503][ T9639] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.210121][ T29] audit: type=1400 audit(1720665043.862:1108): avc: denied { validate_trans } for pid=9638 comm="syz.4.1945" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 136.395253][ T29] audit: type=1400 audit(1720665044.042:1109): avc: granted { setsecparam } for pid=9644 comm="syz.1.1938" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 136.440364][ T29] audit: type=1326 audit(1720665044.082:1110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9644 comm="syz.1.1938" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0b15c35bd9 code=0x0 [ 136.509321][ T9655] loop4: detected capacity change from 0 to 128 [ 137.142438][ T9676] loop4: detected capacity change from 0 to 65536 [ 137.171856][ T29] audit: type=1400 audit(1720665044.822:1111): avc: denied { name_bind } for pid=9678 comm="syz.2.1957" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 137.211102][ T9682] loop1: detected capacity change from 0 to 512 [ 137.322440][ T9689] loop1: detected capacity change from 0 to 512 [ 137.330891][ T9689] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a806c018, mo2=0103] [ 137.339671][ T9689] System zones: 1-12 [ 137.343927][ T9689] EXT4-fs error (device loop1): ext4_init_orphan_info:586: comm syz.1.1962: inode #0: comm syz.1.1962: iget: illegal inode # [ 137.357547][ T9689] EXT4-fs (loop1): get orphan inode failed [ 137.357639][ T9689] EXT4-fs (loop1): mount failed [ 137.458640][ T9692] loop4: detected capacity change from 0 to 256 [ 137.476274][ T9692] FAT-fs (loop4): Directory bread(block 64) failed [ 137.483039][ T9692] FAT-fs (loop4): Directory bread(block 65) failed [ 137.490722][ T9692] FAT-fs (loop4): Directory bread(block 66) failed [ 137.497743][ T9692] FAT-fs (loop4): Directory bread(block 67) failed [ 137.504432][ T9692] FAT-fs (loop4): Directory bread(block 68) failed [ 137.511109][ T9692] FAT-fs (loop4): Directory bread(block 69) failed [ 137.517879][ T9692] FAT-fs (loop4): Directory bread(block 70) failed [ 137.524494][ T9692] FAT-fs (loop4): Directory bread(block 71) failed [ 137.531262][ T9692] FAT-fs (loop4): Directory bread(block 72) failed [ 137.538018][ T9692] FAT-fs (loop4): Directory bread(block 73) failed [ 137.564135][ T9692] syz.4.1963: attempt to access beyond end of device [ 137.564135][ T9692] loop4: rw=2049, sector=1224, nr_sectors = 32 limit=256 [ 137.579023][ T9692] syz.4.1963: attempt to access beyond end of device [ 137.579023][ T9692] loop4: rw=2049, sector=1352, nr_sectors = 88 limit=256 [ 137.765035][ T9715] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8 sclass=netlink_route_socket pid=9715 comm=syz.4.1972 [ 137.973210][ T29] audit: type=1400 audit(1720665045.622:1112): avc: denied { create } for pid=9746 comm="syz.4.1980" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=caif_socket permissive=1 [ 138.159425][ T9761] loop2: detected capacity change from 0 to 128 [ 138.166645][ T9761] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 138.262930][ T9765] loop2: detected capacity change from 0 to 1024 [ 138.277795][ T9765] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 138.302441][ T9442] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.351745][ T9769] loop2: detected capacity change from 0 to 512 [ 138.358841][ T9769] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 138.379759][ T9769] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 138.392533][ T9769] ext4 filesystem being mounted at /18/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 138.462026][ T9442] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.471193][ T4631] EXT4-fs error: 23583 callbacks suppressed [ 138.471207][ T4631] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #18: comm kworker/u8:19: mark_inode_dirty error [ 138.489553][ T4631] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5731: Out of memory [ 138.500803][ T4631] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #18: comm kworker/u8:19: mark_inode_dirty error [ 138.512654][ T4631] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5731: Out of memory [ 138.512835][ T4631] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #18: comm kworker/u8:19: mark_inode_dirty error [ 138.513041][ T4631] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5731: Out of memory [ 138.513263][ T4631] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #18: comm kworker/u8:19: mark_inode_dirty error [ 138.556031][ T4631] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5731: Out of memory [ 138.565346][ T4631] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #18: comm kworker/u8:19: mark_inode_dirty error [ 138.578098][ T4631] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5731: Out of memory [ 138.601597][ T9777] loop2: detected capacity change from 0 to 512 [ 138.609787][ T9777] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a806c018, mo2=0103] [ 138.620110][ T9777] System zones: 1-12 [ 138.624329][ T9777] EXT4-fs error (device loop2): ext4_init_orphan_info:586: comm syz.2.1990: inode #0: comm syz.2.1990: iget: illegal inode # [ 138.637742][ T9777] EXT4-fs (loop2): get orphan inode failed [ 138.643671][ T9777] EXT4-fs (loop2): mount failed [ 138.740592][ T29] audit: type=1326 audit(1720665046.392:1113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9779 comm="syz.2.1991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d3a696bd9 code=0x7ffc0000 [ 138.764204][ T29] audit: type=1326 audit(1720665046.392:1114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9779 comm="syz.2.1991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d3a696bd9 code=0x7ffc0000 [ 138.789548][ T9780] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1991'. [ 138.799243][ T29] audit: type=1326 audit(1720665046.452:1115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9779 comm="syz.2.1991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2d3a696bd9 code=0x7ffc0000 [ 138.822854][ T29] audit: type=1326 audit(1720665046.452:1116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9779 comm="syz.2.1991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d3a696bd9 code=0x7ffc0000 [ 138.846287][ T29] audit: type=1326 audit(1720665046.452:1117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9779 comm="syz.2.1991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d3a696bd9 code=0x7ffc0000 [ 138.859316][ T5941] kmmpd-loop3: attempt to access beyond end of device [ 138.859316][ T5941] loop3: rw=14337, sector=48, nr_sectors = 4 limit=1 [ 138.869792][ T29] audit: type=1326 audit(1720665046.452:1118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9779 comm="syz.2.1991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f2d3a696bd9 code=0x7ffc0000 [ 138.883296][ T5941] Buffer I/O error on dev loop3, logical block 12, lost sync page write [ 138.915192][ T29] audit: type=1326 audit(1720665046.452:1119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9779 comm="syz.2.1991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d3a696bd9 code=0x7ffc0000 [ 138.939066][ T29] audit: type=1326 audit(1720665046.452:1120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9779 comm="syz.2.1991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d3a696bd9 code=0x7ffc0000 [ 138.962692][ T29] audit: type=1326 audit(1720665046.452:1121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9779 comm="syz.2.1991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f2d3a696bd9 code=0x7ffc0000 [ 138.986157][ T29] audit: type=1326 audit(1720665046.452:1122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9779 comm="syz.2.1991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d3a696bd9 code=0x7ffc0000 [ 139.034103][ T9784] netlink: 'syz.4.1993': attribute type 7 has an invalid length. [ 139.044348][ T9784] loop4: detected capacity change from 0 to 128 [ 139.356746][ T9794] netlink: 'syz.4.1995': attribute type 4 has an invalid length. [ 139.387817][ T9794] loop4: detected capacity change from 0 to 256 [ 139.908332][ T9802] usb usb7: usbfs: process 9802 (syz.2.1999) did not claim interface 0 before use [ 140.064036][ T9809] loop2: detected capacity change from 0 to 512 [ 140.072532][ T9809] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a806c018, mo2=0103] [ 140.080996][ T9809] System zones: 1-12 [ 140.091340][ T9809] EXT4-fs error (device loop2): ext4_init_orphan_info:586: comm syz.2.2001: inode #0: comm syz.2.2001: iget: illegal inode # [ 140.106629][ T9809] EXT4-fs (loop2): get orphan inode failed [ 140.112782][ T9809] EXT4-fs (loop2): mount failed [ 140.149803][ T9812] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 140.179699][ T9814] loop2: detected capacity change from 0 to 128 [ 140.261336][ T9826] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2006'. [ 140.270426][ T9826] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2006'. [ 140.479669][ T9839] loop2: detected capacity change from 0 to 256 [ 140.487838][ T9839] FAT-fs (loop2): Unrecognized mount option "nonumtail=0r" or missing value [ 141.096148][ T9845] loop4: detected capacity change from 0 to 1024 [ 141.110076][ T9845] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 141.131395][ T8532] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.211655][ T9849] loop4: detected capacity change from 0 to 512 [ 141.226022][ T9849] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a806c018, mo2=0103] [ 141.241119][ T9849] System zones: 1-12 [ 141.245162][ T9849] EXT4-fs error (device loop4): ext4_init_orphan_info:586: comm syz.4.2013: inode #0: comm syz.4.2013: iget: illegal inode # [ 141.264301][ T9849] EXT4-fs (loop4): get orphan inode failed [ 141.274433][ T9849] EXT4-fs (loop4): mount failed [ 141.364537][ T9862] loop4: detected capacity change from 0 to 1024 [ 141.410608][ T9862] loop4: detected capacity change from 0 to 512 [ 141.499391][ T9867] loop2: detected capacity change from 0 to 512 [ 141.506745][ T9867] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 141.516313][ T9867] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 141.524884][ T9867] EXT4-fs (loop2): 1 truncate cleaned up [ 141.531257][ T9867] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 141.572567][ T9442] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.651440][ T9886] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2027'. [ 141.695996][ T9893] loop2: detected capacity change from 0 to 512 [ 141.703805][ T9893] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a806c018, mo2=0103] [ 141.711993][ T9893] System zones: 1-12 [ 141.718133][ T9893] EXT4-fs error (device loop2): ext4_init_orphan_info:586: comm syz.2.2029: inode #0: comm syz.2.2029: iget: illegal inode # [ 141.731552][ T9893] EXT4-fs (loop2): get orphan inode failed [ 141.738404][ T9893] EXT4-fs (loop2): mount failed [ 141.869109][ T9903] FAULT_INJECTION: forcing a failure. [ 141.869109][ T9903] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 141.882345][ T9903] CPU: 0 PID: 9903 Comm: syz.1.2032 Not tainted 6.10.0-rc7-syzkaller-00012-g34afb82a3c67 #0 [ 141.892630][ T9903] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 141.902732][ T9903] Call Trace: [ 141.906019][ T9903] [ 141.908983][ T9903] dump_stack_lvl+0xf2/0x150 [ 141.913633][ T9903] dump_stack+0x15/0x20 [ 141.917845][ T9903] should_fail_ex+0x229/0x230 [ 141.922605][ T9903] should_fail+0xb/0x10 [ 141.926780][ T9903] should_fail_usercopy+0x1a/0x20 [ 141.931823][ T9903] _copy_to_user+0x1e/0xa0 [ 141.936436][ T9903] generic_map_lookup_batch+0x5d2/0x7e0 [ 141.942021][ T9903] bpf_map_do_batch+0x239/0x440 [ 141.946926][ T9903] ? __pfx_generic_map_lookup_batch+0x10/0x10 [ 141.953085][ T9903] __sys_bpf+0x5de/0x7a0 [ 141.957392][ T9903] __x64_sys_bpf+0x43/0x50 [ 141.961856][ T9903] x64_sys_call+0x2655/0x2d70 [ 141.966569][ T9903] do_syscall_64+0xc9/0x1c0 [ 141.971136][ T9903] ? clear_bhb_loop+0x55/0xb0 [ 141.975849][ T9903] ? clear_bhb_loop+0x55/0xb0 [ 141.980587][ T9903] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.986521][ T9903] RIP: 0033:0x7f0b15c35bd9 [ 141.990974][ T9903] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 142.010617][ T9903] RSP: 002b:00007f0b14eb7048 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 142.019113][ T9903] RAX: ffffffffffffffda RBX: 00007f0b15dc3f60 RCX: 00007f0b15c35bd9 [ 142.027162][ T9903] RDX: 0000000000000038 RSI: 00000000200001c0 RDI: 0000000000000018 [ 142.035154][ T9903] RBP: 00007f0b14eb70a0 R08: 0000000000000000 R09: 0000000000000000 [ 142.043155][ T9903] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 142.051215][ T9903] R13: 000000000000000b R14: 00007f0b15dc3f60 R15: 00007ffd42a35988 [ 142.059212][ T9903] [ 142.172506][ T9915] loop1: detected capacity change from 0 to 512 [ 142.189503][ T9915] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 142.200881][ T9915] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 142.218425][ T9915] EXT4-fs (loop1): 1 truncate cleaned up [ 142.233528][ T9915] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 142.249995][ T9902] chnl_net:caif_netlink_parms(): no params data found [ 142.307932][ T9595] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.321345][ T3303] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.355229][ T9902] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.362505][ T9902] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.393859][ T9902] bridge_slave_0: entered allmulticast mode [ 142.411170][ T9902] bridge_slave_0: entered promiscuous mode [ 142.420851][ T9934] loop4: detected capacity change from 0 to 512 [ 142.439006][ T9902] bridge0: port 2(bridge_slave_1) entered blocking state [ 142.446234][ T9902] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.460078][ T9934] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a806c018, mo2=0103] [ 142.468391][ T9902] bridge_slave_1: entered allmulticast mode [ 142.474804][ T9934] System zones: 1-12 [ 142.479063][ T9934] EXT4-fs error (device loop4): ext4_init_orphan_info:586: comm syz.4.2040: inode #0: comm syz.4.2040: iget: illegal inode # [ 142.479312][ T9934] EXT4-fs (loop4): get orphan inode failed [ 142.479418][ T9934] EXT4-fs (loop4): mount failed [ 142.480694][ T9902] bridge_slave_1: entered promiscuous mode [ 142.485016][ T3303] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.501116][ T9943] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2041'. [ 142.558753][ T3303] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.584024][ T9902] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 142.603029][ T9902] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 142.628756][ T9902] team0: Port device team_slave_0 added [ 142.641189][ T3303] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.659168][ T3162] IPVS: starting estimator thread 0... [ 142.666030][ T9902] team0: Port device team_slave_1 added [ 142.686629][ T9902] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 142.693758][ T9902] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 142.719976][ T9902] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 142.734431][ T9961] loop2: detected capacity change from 0 to 512 [ 142.741876][ T9902] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 142.748935][ T9902] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 142.775068][ T9902] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 142.777902][ T9961] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 142.788700][ T9962] IPVS: using max 2256 ests per chain, 112800 per kthread [ 142.810379][ T9961] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 142.819263][ T9961] EXT4-fs (loop2): 1 truncate cleaned up [ 142.826340][ T9961] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 142.844025][ T9902] hsr_slave_0: entered promiscuous mode [ 142.853419][ T9902] hsr_slave_1: entered promiscuous mode [ 142.859970][ T9902] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 142.867997][ T9902] Cannot create hsr debugfs directory [ 142.881019][ T9442] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.926251][ T3303] bridge_slave_1: left allmulticast mode [ 142.932010][ T3303] bridge_slave_1: left promiscuous mode [ 142.937759][ T3303] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.959267][ T9971] loop2: detected capacity change from 0 to 128 [ 142.983636][ T3303] bridge_slave_0: left allmulticast mode [ 142.989441][ T3303] bridge_slave_0: left promiscuous mode [ 142.995184][ T3303] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.064319][ T9976] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 143.106596][ T9978] loop2: detected capacity change from 0 to 512 [ 143.114719][ T9978] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a806c018, mo2=0103] [ 143.123072][ T9978] System zones: 1-12 [ 143.127237][ T9978] EXT4-fs error (device loop2): ext4_init_orphan_info:586: comm syz.2.2053: inode #0: comm syz.2.2053: iget: illegal inode # [ 143.140700][ T9978] EXT4-fs (loop2): get orphan inode failed [ 143.146894][ T9978] EXT4-fs (loop2): mount failed [ 143.152346][ T3303] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 143.164080][ T3303] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 143.174937][ T3303] bond0 (unregistering): Released all slaves [ 143.272237][ T3303] hsr_slave_0: left promiscuous mode [ 143.281781][ T3303] hsr_slave_1: left promiscuous mode [ 143.289993][ T3303] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 143.297676][ T3303] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 143.316738][ T3303] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 143.324260][ T3303] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 143.337654][ T9994] loop2: detected capacity change from 0 to 512 [ 143.346916][ T3303] veth1_macvtap: left promiscuous mode [ 143.352471][ T3303] veth0_macvtap: left promiscuous mode [ 143.358137][ T3303] veth1_vlan: left promiscuous mode [ 143.363479][ T3303] veth0_vlan: left promiscuous mode [ 143.370734][ T9994] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2234: inode #15: comm syz.2.2057: corrupted in-inode xattr: invalid ea_ino [ 143.390076][ T9994] EXT4-fs error (device loop2): ext4_orphan_get:1399: comm syz.2.2057: couldn't read orphan inode 15 (err -117) [ 143.402568][ T9994] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 143.475521][ T4631] EXT4-fs error: 21798 callbacks suppressed [ 143.475541][ T4631] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #18: comm kworker/u8:19: mark_inode_dirty error [ 143.486607][ T9442] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.505261][ T4631] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5731: Out of memory [ 143.514928][ T4631] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #18: comm kworker/u8:19: mark_inode_dirty error [ 143.533266][ T4631] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5731: Out of memory [ 143.552648][ T4631] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #18: comm kworker/u8:19: mark_inode_dirty error [ 143.581129][T10009] loop1: detected capacity change from 0 to 512 [ 143.592531][ T4631] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5731: Out of memory [ 143.602022][ T4631] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #18: comm kworker/u8:19: mark_inode_dirty error [ 143.633863][ T3303] team0 (unregistering): Port device team_slave_1 removed [ 143.652370][ T4631] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5731: Out of memory [ 143.671281][ T3303] team0 (unregistering): Port device team_slave_0 removed [ 143.684688][ T4631] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #18: comm kworker/u8:19: mark_inode_dirty error [ 143.710296][T10009] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a806c018, mo2=0103] [ 143.785945][T10009] System zones: 1-12 [ 143.824907][T10009] EXT4-fs error (device loop1): ext4_init_orphan_info:586: comm syz.1.2062: inode #0: comm syz.1.2062: iget: illegal inode # [ 143.868327][ T4631] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5731: Out of memory [ 143.882333][T10009] EXT4-fs (loop1): get orphan inode failed [ 143.890696][T10009] EXT4-fs (loop1): mount failed [ 143.902539][ T5941] kmmpd-loop3: attempt to access beyond end of device [ 143.902539][ T5941] loop3: rw=14337, sector=48, nr_sectors = 4 limit=1 [ 143.916359][ T5941] Buffer I/O error on dev loop3, logical block 12, lost sync page write [ 144.011880][ T29] kauditd_printk_skb: 128 callbacks suppressed [ 144.011896][ T29] audit: type=1326 audit(1720665051.662:1251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10016 comm="syz.1.2064" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0b15c35bd9 code=0x0 [ 144.071317][T10020] program syz.1.2064 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 144.093391][ T9972] chnl_net:caif_netlink_parms(): no params data found [ 144.190648][ T9972] bridge0: port 1(bridge_slave_0) entered blocking state [ 144.197978][ T9972] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.207327][ T9972] bridge_slave_0: entered allmulticast mode [ 144.214202][ T9972] bridge_slave_0: entered promiscuous mode [ 144.240808][ T9972] bridge0: port 2(bridge_slave_1) entered blocking state [ 144.247980][ T9972] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.266380][T10031] loop2: detected capacity change from 0 to 256 [ 144.273054][ T9972] bridge_slave_1: entered allmulticast mode [ 144.280695][ T9972] bridge_slave_1: entered promiscuous mode [ 144.310382][T10031] FAT-fs (loop2): Directory bread(block 64) failed [ 144.317289][T10031] FAT-fs (loop2): Directory bread(block 65) failed [ 144.324181][T10031] FAT-fs (loop2): Directory bread(block 66) failed [ 144.335242][ T9972] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 144.341975][T10031] FAT-fs (loop2): Directory bread(block 67) failed [ 144.353306][T10031] FAT-fs (loop2): Directory bread(block 68) failed [ 144.353735][ T9902] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 144.362590][T10031] FAT-fs (loop2): Directory bread(block 69) failed [ 144.377757][T10031] FAT-fs (loop2): Directory bread(block 70) failed [ 144.392764][T10031] FAT-fs (loop2): Directory bread(block 71) failed [ 144.401718][ T9902] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 144.409002][T10031] FAT-fs (loop2): Directory bread(block 72) failed [ 144.417797][T10031] FAT-fs (loop2): Directory bread(block 73) failed [ 144.420037][ T9972] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 144.439754][ T9902] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 144.456494][ T9902] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 144.479438][ T9972] team0: Port device team_slave_0 added [ 144.486533][ T9972] team0: Port device team_slave_1 added [ 144.509518][ T9972] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 144.516675][ T9972] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 144.542931][ T9972] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 144.560307][ T9972] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 144.567499][ T9972] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 144.593721][ T9972] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 144.604832][ T29] audit: type=1400 audit(1720665052.252:1252): avc: denied { setopt } for pid=10043 comm="syz.2.2072" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 144.664748][ T9972] hsr_slave_0: entered promiscuous mode [ 144.671905][ T9972] hsr_slave_1: entered promiscuous mode [ 144.678289][ T9972] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 144.685928][ T9972] Cannot create hsr debugfs directory [ 144.704887][T10046] loop2: detected capacity change from 0 to 2048 [ 144.745501][ T9902] 8021q: adding VLAN 0 to HW filter on device bond0 [ 144.756602][T10046] loop2: p1 < > p4 [ 144.761090][T10046] loop2: p4 size 8388608 extends beyond EOD, truncated [ 144.788498][ T9902] 8021q: adding VLAN 0 to HW filter on device team0 [ 144.811884][ T3162] bridge0: port 1(bridge_slave_0) entered blocking state [ 144.819037][ T3162] bridge0: port 1(bridge_slave_0) entered forwarding state [ 144.858760][ T9972] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.862927][T10051] loop1: detected capacity change from 0 to 512 [ 144.901300][ T3162] bridge0: port 2(bridge_slave_1) entered blocking state [ 144.908496][ T3162] bridge0: port 2(bridge_slave_1) entered forwarding state [ 144.926720][T10051] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 144.949520][T10051] ext4 filesystem being mounted at /18/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 144.966374][ T9972] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.968715][T10058] loop2: detected capacity change from 0 to 512 [ 145.000134][T10058] EXT4-fs warning (device loop2): dx_probe:877: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 145.011735][T10058] EXT4-fs warning (device loop2): dx_probe:880: Enable large directory feature to access it [ 145.021972][T10058] EXT4-fs warning (device loop2): dx_probe:965: inode #2: comm syz.2.2076: Corrupt directory, running e2fsck is recommended [ 145.046824][T10058] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 145.055317][T10058] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2234: inode #15: comm syz.2.2076: corrupted in-inode xattr: invalid ea_ino [ 145.069493][T10058] EXT4-fs error (device loop2): ext4_orphan_get:1399: comm syz.2.2076: couldn't read orphan inode 15 (err -117) [ 145.087263][ T9972] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.097318][T10058] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 145.118074][T10061] netlink: 'syz.1.2075': attribute type 48 has an invalid length. [ 145.144757][ T9442] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.152432][ T9902] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 145.177307][ T9972] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.210176][T10069] loop2: detected capacity change from 0 to 1024 [ 145.217571][T10069] EXT4-fs: Ignoring removed orlov option [ 145.223363][T10069] EXT4-fs: Ignoring removed nomblk_io_submit option [ 145.253303][ T9595] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.262110][ T9972] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 145.273745][T10069] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 145.285343][ T9972] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 145.298848][ T9972] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 145.419477][ T9972] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 145.732438][ T9442] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.842893][ T9902] veth0_vlan: entered promiscuous mode [ 145.853927][ T9972] 8021q: adding VLAN 0 to HW filter on device bond0 [ 145.870975][ T9902] veth1_vlan: entered promiscuous mode [ 145.900540][ T9972] 8021q: adding VLAN 0 to HW filter on device team0 [ 145.927536][ T3161] bridge0: port 1(bridge_slave_0) entered blocking state [ 145.934713][ T3161] bridge0: port 1(bridge_slave_0) entered forwarding state [ 145.950710][ T3161] bridge0: port 2(bridge_slave_1) entered blocking state [ 145.958119][ T3161] bridge0: port 2(bridge_slave_1) entered forwarding state [ 145.984207][ T9902] veth0_macvtap: entered promiscuous mode [ 146.001970][ T9902] veth1_macvtap: entered promiscuous mode [ 146.025331][ T9902] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 146.035882][ T9902] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.045834][ T9902] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 146.056398][ T9902] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.066232][ T9902] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 146.076754][ T9902] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.086600][ T9902] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 146.097157][ T9902] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.107242][ T9902] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 146.117818][ T9902] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.127721][ T9902] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 146.138245][ T9902] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.148180][ T9902] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 146.158762][ T9902] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.168664][ T9902] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 146.179212][ T9902] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.245909][ T9902] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 146.257346][ T9972] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 146.268019][ T9972] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 146.289445][ T9902] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 146.300039][ T9902] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.310098][ T9902] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 146.320595][ T9902] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.330537][ T9902] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 146.341051][ T9902] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.350910][ T9902] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 146.361381][ T9902] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.371302][ T9902] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 146.381786][ T9902] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.391739][ T9902] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 146.402347][ T9902] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.412218][ T9902] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 146.422757][ T9902] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.432675][ T9902] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 146.443260][ T9902] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.456591][T10107] loop4: detected capacity change from 0 to 256 [ 146.463257][T10107] FAT-fs (loop4): Unrecognized mount option "nonumtail=0r" or missing value [ 146.473417][ T9902] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 146.492823][ T9902] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.501701][ T9902] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.510609][ T9902] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.519427][ T9902] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.592453][ T9972] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 146.682032][T10125] Process accounting resumed [ 146.705337][ T9972] veth0_vlan: entered promiscuous mode [ 146.727723][ T9972] veth1_vlan: entered promiscuous mode [ 146.778238][ T9972] veth0_macvtap: entered promiscuous mode [ 146.788720][T10131] netlink: 'syz.0.2090': attribute type 5 has an invalid length. [ 146.813252][ T9972] veth1_macvtap: entered promiscuous mode [ 146.818290][T10137] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2093'. [ 146.852214][ T9972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 146.863893][ T9972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.874888][ T9972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 146.885605][ T9972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.895666][ T9972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 146.906192][ T9972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.916043][ T9972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 146.926524][ T9972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.936411][ T9972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 146.947014][ T9972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.957076][ T9972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 146.967690][ T9972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.977566][ T9972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 146.988099][ T9972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.998010][ T9972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 147.008479][ T9972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.018657][ T9972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 147.029169][ T9972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.114563][ T9972] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 147.152030][ T9972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 147.162663][ T9972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.172512][ T9972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 147.183126][ T9972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.192981][ T9972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 147.203510][ T9972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.213383][ T9972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 147.223961][ T9972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.233815][ T9972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 147.244316][ T9972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.254259][ T9972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 147.264763][ T9972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.274700][ T9972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 147.285191][ T9972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.295273][ T9972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 147.305981][ T9972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.316075][ T9972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 147.326545][ T9972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.533714][ T9972] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 147.698560][ T9972] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.707462][ T9972] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.716226][ T9972] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.724947][ T9972] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.798128][T10168] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2102'. [ 147.838077][T10172] loop1: detected capacity change from 0 to 512 [ 147.857861][T10172] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2234: inode #15: comm syz.1.2103: corrupted in-inode xattr: invalid ea_ino [ 147.877726][T10172] EXT4-fs error (device loop1): ext4_orphan_get:1399: comm syz.1.2103: couldn't read orphan inode 15 (err -117) [ 147.890575][T10172] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 147.904795][ T29] audit: type=1326 audit(1720665055.552:1253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10173 comm="syz.2.2104" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2d3a696bd9 code=0x0 [ 147.945503][T10178] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2105'. [ 147.991127][ T9595] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.033920][ T29] audit: type=1400 audit(1720665055.672:1254): avc: denied { view } for pid=10177 comm="syz.4.2105" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 148.036374][T10186] 9pnet: Could not find request transport: fd0xffffffffffffffff [ 148.063332][ T29] audit: type=1326 audit(1720665055.712:1255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10177 comm="syz.4.2105" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fef88d82bd9 code=0x0 [ 148.081392][T10190] loop2: detected capacity change from 0 to 1024 [ 148.109466][T10190] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 148.486407][ T4631] EXT4-fs error: 11198 callbacks suppressed [ 148.486469][ T4631] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #18: comm kworker/u8:19: mark_inode_dirty error [ 148.508828][ T4631] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5731: Out of memory [ 148.519809][ T4631] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #18: comm kworker/u8:19: mark_inode_dirty error [ 148.533723][ T4631] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5731: Out of memory [ 148.549563][ T4631] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #18: comm kworker/u8:19: mark_inode_dirty error [ 148.564619][ T4631] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5731: Out of memory [ 148.577167][ T4631] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #18: comm kworker/u8:19: mark_inode_dirty error [ 148.590553][ T4631] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5731: Out of memory [ 148.601541][ T4631] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #18: comm kworker/u8:19: mark_inode_dirty error [ 148.643232][ T4631] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5731: Out of memory [ 148.715029][ T9442] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.796894][T10204] netlink: 80 bytes leftover after parsing attributes in process `syz.4.2111'. [ 148.830388][T10208] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=64528 sclass=netlink_xfrm_socket pid=10208 comm=syz.4.2113 [ 148.907139][T10220] xt_policy: neither incoming nor outgoing policy selected [ 148.915574][T10220] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2117'. [ 148.924617][T10220] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2117'. [ 148.937191][ T5941] kmmpd-loop3: attempt to access beyond end of device [ 148.937191][ T5941] loop3: rw=14337, sector=48, nr_sectors = 4 limit=1 [ 148.950624][ T5941] Buffer I/O error on dev loop3, logical block 12, lost sync page write [ 148.974482][T10226] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 149.017100][T10230] loop4: detected capacity change from 0 to 1024 [ 149.024197][T10230] EXT4-fs: Ignoring removed orlov option [ 149.029998][T10230] EXT4-fs: Ignoring removed nomblk_io_submit option [ 149.043755][T10224] loop1: detected capacity change from 0 to 512 [ 149.057319][T10234] netlink: 80 bytes leftover after parsing attributes in process `syz.0.2122'. [ 149.058960][T10230] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 149.079405][T10224] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 149.095141][T10224] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 149.104408][T10224] EXT4-fs (loop1): 1 truncate cleaned up [ 149.110524][T10224] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 149.111065][ T8532] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.154090][ T9595] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.190332][T10247] loop4: detected capacity change from 0 to 1024 [ 149.205621][T10247] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 149.215920][T10249] loop1: detected capacity change from 0 to 512 [ 149.233677][T10247] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=f04ec01c, mo2=0002] [ 149.245122][T10249] EXT4-fs error (device loop1): ext4_orphan_get:1394: inode #15: comm syz.1.2126: casefold flag without casefold feature [ 149.272168][T10247] System zones: 0-1, 3-36 [ 149.286137][T10247] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 149.304553][T10249] EXT4-fs error (device loop1): ext4_orphan_get:1399: comm syz.1.2126: couldn't read orphan inode 15 (err -117) [ 149.325548][ T29] audit: type=1400 audit(1720665056.982:1256): avc: denied { read write } for pid=10246 comm="syz.4.2124" name="file2" dev="loop4" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 149.348355][ T29] audit: type=1400 audit(1720665056.982:1257): avc: denied { open } for pid=10246 comm="syz.4.2124" path="/122/file0/file2" dev="loop4" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 149.371552][ T29] audit: type=1400 audit(1720665056.982:1258): avc: denied { map } for pid=10246 comm="syz.4.2124" path="/122/file0/file2" dev="loop4" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 149.396019][T10249] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 149.409850][ T8532] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.598458][ T9595] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.750058][T10267] loop4: detected capacity change from 0 to 4096 [ 149.769096][T10267] EXT4-fs: Ignoring removed i_version option [ 149.775211][T10267] EXT4-fs: Ignoring removed nomblk_io_submit option [ 149.819352][T10267] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 149.922904][T10267] EXT4-fs error (device loop4): ext4_find_dest_de:2111: inode #2: block 16: comm syz.4.2131: bad entry in directory: rec_len is smaller than minimal - offset=44, inode=83886092, rec_len=0, size=4096 fake=0 [ 149.972773][ T8532] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.050114][T10278] loop4: detected capacity change from 0 to 512 [ 150.062010][T10279] loop1: detected capacity change from 0 to 256 [ 150.073399][T10278] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 150.073408][T10279] FAT-fs (loop1): Unrecognized mount option "nonumtail=0r" or missing value [ 150.091579][T10278] EXT4-fs (loop4): blocks per group (39) and clusters per group (32768) inconsistent [ 150.201488][T10285] netlink: 556 bytes leftover after parsing attributes in process `syz.4.2138'. [ 150.264695][ T29] audit: type=1400 audit(1720665057.912:1259): avc: denied { bind } for pid=10293 comm="syz.4.2141" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 150.306935][ T29] audit: type=1400 audit(1720665057.942:1260): avc: denied { nlmsg_read } for pid=10293 comm="syz.4.2141" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 150.488126][T10311] loop1: detected capacity change from 0 to 512 [ 150.498779][T10311] EXT4-fs error (device loop1): ext4_orphan_get:1394: inode #15: comm syz.1.2148: casefold flag without casefold feature [ 150.516028][T10309] loop4: detected capacity change from 0 to 512 [ 150.516521][T10311] EXT4-fs error (device loop1): ext4_orphan_get:1399: comm syz.1.2148: couldn't read orphan inode 15 (err -117) [ 150.533636][T10309] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 150.537038][T10311] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 150.578954][T10309] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 150.654535][T10309] EXT4-fs (loop4): 1 truncate cleaned up [ 150.678127][ T9595] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.693288][T10309] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 150.722789][ T29] audit: type=1326 audit(1720665058.372:1261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10324 comm="syz.0.2153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4542dbbd9 code=0x7ffc0000 [ 150.746477][ T29] audit: type=1326 audit(1720665058.372:1262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10324 comm="syz.0.2153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7ff4542dbbd9 code=0x7ffc0000 [ 150.770003][ T29] audit: type=1326 audit(1720665058.372:1263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10324 comm="syz.0.2153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4542dbbd9 code=0x7ffc0000 [ 150.793783][ T29] audit: type=1326 audit(1720665058.372:1264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10324 comm="syz.0.2153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7ff4542dbbd9 code=0x7ffc0000 [ 150.817317][ T29] audit: type=1326 audit(1720665058.372:1265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10324 comm="syz.0.2153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4542dbbd9 code=0x7ffc0000 [ 150.956648][ T8532] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.984099][T10331] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10331 comm=syz.1.2154 [ 151.023141][T10339] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2158'. [ 151.151139][T10352] 9pnet_fd: Insufficient options for proto=fd [ 151.642643][T10364] loop1: detected capacity change from 0 to 512 [ 151.650489][T10364] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 151.660384][T10364] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 151.669637][T10364] EXT4-fs (loop1): 1 truncate cleaned up [ 151.677253][T10364] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 151.713522][ T9595] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.758860][T10374] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 151.766171][T10374] IPv6: NLM_F_CREATE should be set when creating new route [ 151.773583][T10374] IPv6: NLM_F_CREATE should be set when creating new route [ 151.790102][T10374] loop1: detected capacity change from 0 to 1024 [ 151.798059][T10374] EXT4-fs: Ignoring removed oldalloc option [ 151.804234][T10374] EXT4-fs: Ignoring removed i_version option [ 151.810331][T10374] EXT4-fs: Ignoring removed orlov option [ 151.817031][T10374] EXT4-fs (loop1): stripe (127) is not aligned with cluster size (16), stripe is disabled [ 151.839933][T10374] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 151.901078][T10380] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2169'. [ 151.910277][T10380] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2169'. [ 151.925695][T10380] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 151.937780][ T9595] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.952707][T10380] bond2: entered allmulticast mode [ 151.958211][T10380] 8021q: adding VLAN 0 to HW filter on device bond2 [ 151.967125][T10382] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2169'. [ 152.006958][T10384] loop1: detected capacity change from 0 to 2048 [ 152.020494][T10384] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 152.045731][T10384] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 152.063555][T10384] EXT4-fs (loop1): Remounting filesystem read-only [ 152.161291][ T9595] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.283278][T10401] loop4: detected capacity change from 0 to 256 [ 152.290092][T10401] FAT-fs (loop4): Unrecognized mount option "nonumtail=0r" or missing value [ 153.137586][T10434] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 153.165757][T10434] batman_adv: batadv0: Adding interface: gretap1 [ 153.172208][T10434] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 153.197756][T10434] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 153.495602][ T4631] EXT4-fs error: 11333 callbacks suppressed [ 153.495625][ T4631] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5731: Out of memory [ 153.545093][ T4631] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #18: comm kworker/u8:19: mark_inode_dirty error [ 153.572374][ T4631] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5731: Out of memory [ 153.594253][ T4631] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #18: comm kworker/u8:19: mark_inode_dirty error [ 153.608890][ T4631] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5731: Out of memory [ 153.618448][ T4631] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #18: comm kworker/u8:19: mark_inode_dirty error [ 153.632642][ T4631] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5731: Out of memory [ 153.641955][ T4631] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #18: comm kworker/u8:19: mark_inode_dirty error [ 153.671053][ T4631] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5731: Out of memory [ 153.682918][ T4631] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #18: comm kworker/u8:19: mark_inode_dirty error [ 153.814859][T10463] loop4: detected capacity change from 0 to 2048 [ 153.823625][T10437] dccp_close: ABORT with 11 bytes unread [ 153.844789][T10463] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 153.905792][T10463] loop4: detected capacity change from 2048 to 2046 [ 153.927685][T10463] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.2196: bg 0: block 8226: padding at end of block bitmap is not set [ 153.958340][ T8532] EXT4-fs error (device loop4): ext4_readdir:260: inode #2: block 16: comm syz-executor: path /139/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=2048 fake=0 [ 153.987684][ T5941] kmmpd-loop3: attempt to access beyond end of device [ 153.987684][ T5941] loop3: rw=14337, sector=48, nr_sectors = 4 limit=1 [ 154.001070][ T5941] Buffer I/O error on dev loop3, logical block 12, lost sync page write [ 154.029606][ T8532] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.191349][ T338] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.248519][T10499] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 154.269617][ T338] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.296856][T10499] loop1: detected capacity change from 0 to 1024 [ 154.333024][T10499] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 154.365839][ T338] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.379217][T10499] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.411443][T10471] chnl_net:caif_netlink_parms(): no params data found [ 154.435231][ T338] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.500316][T10471] bridge0: port 1(bridge_slave_0) entered blocking state [ 154.507492][T10471] bridge0: port 1(bridge_slave_0) entered disabled state [ 154.515969][T10471] bridge_slave_0: entered allmulticast mode [ 154.522843][T10471] bridge_slave_0: entered promiscuous mode [ 154.530529][T10471] bridge0: port 2(bridge_slave_1) entered blocking state [ 154.538026][T10471] bridge0: port 2(bridge_slave_1) entered disabled state [ 154.550244][T10471] bridge_slave_1: entered allmulticast mode [ 154.558868][T10471] bridge_slave_1: entered promiscuous mode [ 154.592035][T10471] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 154.606339][T10471] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 154.615872][ T338] bridge_slave_1: left allmulticast mode [ 154.621584][ T338] bridge_slave_1: left promiscuous mode [ 154.627302][ T338] bridge0: port 2(bridge_slave_1) entered disabled state [ 154.635972][ T338] bridge_slave_0: left allmulticast mode [ 154.641667][ T338] bridge_slave_0: left promiscuous mode [ 154.647362][ T338] bridge0: port 1(bridge_slave_0) entered disabled state [ 154.778100][ T338] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 154.789498][ T338] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 154.803057][ T338] bond0 (unregistering): Released all slaves [ 154.837729][T10471] team0: Port device team_slave_0 added [ 154.846215][T10471] team0: Port device team_slave_1 added [ 154.881751][T10471] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 154.888818][T10471] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 154.915097][T10471] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 154.932800][T10471] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 154.940044][T10471] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 154.966043][T10471] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 155.000746][ T338] hsr_slave_0: left promiscuous mode [ 155.012077][ T338] hsr_slave_1: left promiscuous mode [ 155.024070][ T338] veth1_macvtap: left promiscuous mode [ 155.028688][ T29] kauditd_printk_skb: 12 callbacks suppressed [ 155.028769][ T29] audit: type=1400 audit(1720665062.682:1278): avc: denied { create } for pid=10520 comm="syz.0.2212" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=packet_socket permissive=1 [ 155.029787][ T338] veth0_macvtap: left promiscuous mode [ 155.035828][ T29] audit: type=1400 audit(1720665062.682:1279): avc: denied { setopt } for pid=10520 comm="syz.0.2212" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=packet_socket permissive=1 [ 155.056466][ T338] veth1_vlan: left promiscuous mode [ 155.087746][ T338] veth0_vlan: left promiscuous mode [ 155.096566][ T29] audit: type=1400 audit(1720665062.712:1280): avc: denied { ioctl } for pid=10520 comm="syz.0.2212" path="socket:[34324]" dev="sockfs" ino=34324 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=packet_socket permissive=1 [ 155.123878][ T29] audit: type=1400 audit(1720665062.772:1281): avc: denied { create } for pid=10520 comm="syz.0.2212" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 155.251471][ T338] team0 (unregistering): Port device team_slave_1 removed [ 155.264868][ T338] team0 (unregistering): Port device team_slave_0 removed [ 155.319649][T10528] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2213'. [ 155.329774][T10529] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2213'. [ 155.348751][T10471] hsr_slave_0: entered promiscuous mode [ 155.355901][T10471] hsr_slave_1: entered promiscuous mode [ 155.362788][T10471] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 155.375444][T10471] Cannot create hsr debugfs directory [ 155.667164][T10509] chnl_net:caif_netlink_parms(): no params data found [ 155.894278][ T338] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.994388][ T338] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.067938][T10509] bridge0: port 1(bridge_slave_0) entered blocking state [ 156.075158][T10509] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.082724][T10509] bridge_slave_0: entered allmulticast mode [ 156.089656][T10509] bridge_slave_0: entered promiscuous mode [ 156.097029][T10509] bridge0: port 2(bridge_slave_1) entered blocking state [ 156.104186][T10509] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.111613][T10509] bridge_slave_1: entered allmulticast mode [ 156.118448][T10509] bridge_slave_1: entered promiscuous mode [ 156.130781][T10555] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 156.142092][ T338] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.145486][T10555] loop1: detected capacity change from 0 to 1024 [ 156.161684][T10555] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 156.176130][T10555] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.190006][T10509] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 156.202367][ T338] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.219035][T10509] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 156.249008][T10509] team0: Port device team_slave_0 added [ 156.259353][T10509] team0: Port device team_slave_1 added [ 156.272512][T10471] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 156.290615][T10509] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 156.297734][T10509] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 156.323722][T10509] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 156.335333][T10509] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 156.342475][T10509] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 156.368595][T10509] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 156.383613][T10471] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 156.428546][T10471] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 156.440753][T10471] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 156.506894][ T338] bridge_slave_1: left allmulticast mode [ 156.512595][ T338] bridge_slave_1: left promiscuous mode [ 156.518516][ T338] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.529758][ T338] bridge_slave_0: left allmulticast mode [ 156.535516][ T338] bridge_slave_0: left promiscuous mode [ 156.541181][ T338] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.779746][ T338] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 156.790574][ T338] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 156.801430][ T338] bond0 (unregistering): Released all slaves [ 156.811023][ T338] bond1 (unregistering): Released all slaves [ 156.820960][ T338] bond2 (unregistering): Released all slaves [ 156.832279][T10509] hsr_slave_0: entered promiscuous mode [ 156.838812][T10509] hsr_slave_1: entered promiscuous mode [ 156.845111][T10509] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 156.853401][T10509] Cannot create hsr debugfs directory [ 156.904144][ T29] audit: type=1400 audit(1720665064.552:1282): avc: denied { append } for pid=10570 comm="syz.0.2226" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 156.930663][ T29] audit: type=1326 audit(1720665064.582:1283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10570 comm="syz.0.2226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4542dbbd9 code=0x7ffc0000 [ 156.954365][ T29] audit: type=1326 audit(1720665064.582:1284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10570 comm="syz.0.2226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4542dbbd9 code=0x7ffc0000 [ 157.017948][ T338] hsr_slave_0: left promiscuous mode [ 157.027415][ T338] hsr_slave_1: left promiscuous mode [ 157.033678][ T338] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 157.041360][ T338] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 157.050559][ T338] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 157.058260][ T338] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 157.068320][ T338] veth1_macvtap: left promiscuous mode [ 157.073904][ T338] veth0_macvtap: left promiscuous mode [ 157.079555][ T338] veth1_vlan: left promiscuous mode [ 157.084890][ T338] veth0_vlan: left promiscuous mode [ 157.299773][ T338] team0 (unregistering): Port device team_slave_1 removed [ 157.506240][ T338] team0 (unregistering): Port device team_slave_0 removed [ 157.725210][T10471] 8021q: adding VLAN 0 to HW filter on device bond0 [ 157.740821][T10588] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2232'. [ 157.754919][T10471] 8021q: adding VLAN 0 to HW filter on device team0 [ 157.768407][T10590] dccp_invalid_packet: P.Data Offset(172) too large [ 157.768579][ T3156] bridge0: port 1(bridge_slave_0) entered blocking state [ 157.782315][ T3156] bridge0: port 1(bridge_slave_0) entered forwarding state [ 157.804411][ T3158] bridge0: port 2(bridge_slave_1) entered blocking state [ 157.811585][ T3158] bridge0: port 2(bridge_slave_1) entered forwarding state [ 157.833296][T10596] FAULT_INJECTION: forcing a failure. [ 157.833296][T10596] name failslab, interval 1, probability 0, space 0, times 0 [ 157.844113][T10471] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 157.846111][T10596] CPU: 0 PID: 10596 Comm: syz.1.2236 Not tainted 6.10.0-rc7-syzkaller-00012-g34afb82a3c67 #0 [ 157.856491][T10471] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 157.866612][T10596] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 157.866626][T10596] Call Trace: [ 157.866633][T10596] [ 157.866642][T10596] dump_stack_lvl+0xf2/0x150 [ 157.898157][T10596] dump_stack+0x15/0x20 [ 157.902357][T10596] should_fail_ex+0x229/0x230 [ 157.907188][T10596] ? security_inode_alloc+0x32/0xd0 [ 157.912451][T10596] __should_failslab+0x92/0xa0 [ 157.917280][T10596] should_failslab+0x9/0x20 [ 157.921880][T10596] kmem_cache_alloc_noprof+0x4c/0x290 [ 157.927318][T10596] security_inode_alloc+0x32/0xd0 [ 157.932424][T10596] inode_init_always+0x428/0x470 [ 157.937668][T10596] ? __pfx_sock_alloc_inode+0x10/0x10 [ 157.943119][T10596] alloc_inode+0x7d/0x160 [ 157.947501][T10596] new_inode_pseudo+0x17/0x70 [ 157.952343][T10596] sock_create_lite+0x90/0x2a0 [ 157.957188][T10596] ? __wake_up+0x88/0xb0 [ 157.961598][T10596] __netlink_kernel_create+0xb3/0x5a0 [ 157.967108][T10596] ? __netlink_kernel_create+0x580/0x5a0 [ 157.972843][T10596] audit_net_init+0x90/0x180 [ 157.978038][T10596] ? __pfx_audit_receive+0x10/0x10 [ 157.983301][T10596] ? __pfx_audit_multicast_bind+0x10/0x10 [ 157.989098][T10596] ? __pfx_audit_multicast_unbind+0x10/0x10 [ 157.995110][T10596] ops_init+0x1ef/0x2b0 [ 157.999302][T10596] ? mutex_lock+0xd/0x40 [ 158.003569][T10596] setup_net+0x2ea/0x7c0 [ 158.007916][T10596] ? __should_failslab+0x92/0xa0 [ 158.012873][T10596] copy_net_ns+0x37b/0x510 [ 158.017312][T10596] create_new_namespaces+0x228/0x430 [ 158.022613][T10596] unshare_nsproxy_namespaces+0xe6/0x120 [ 158.028282][T10596] ksys_unshare+0x3da/0x720 [ 158.032918][T10596] ? ksys_write+0x178/0x1b0 [ 158.037439][T10596] __x64_sys_unshare+0x1f/0x30 [ 158.042237][T10596] x64_sys_call+0x2ca9/0x2d70 [ 158.046931][T10596] do_syscall_64+0xc9/0x1c0 [ 158.051484][T10596] ? clear_bhb_loop+0x55/0xb0 [ 158.056192][T10596] ? clear_bhb_loop+0x55/0xb0 [ 158.060974][T10596] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.067023][T10596] RIP: 0033:0x7f0b15c35bd9 [ 158.071445][T10596] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 158.091063][T10596] RSP: 002b:00007f0b14eb7048 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 158.099484][T10596] RAX: ffffffffffffffda RBX: 00007f0b15dc3f60 RCX: 00007f0b15c35bd9 [ 158.107461][T10596] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000042000000 [ 158.115455][T10596] RBP: 00007f0b14eb70a0 R08: 0000000000000000 R09: 0000000000000000 [ 158.123490][T10596] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 158.131543][T10596] R13: 000000000000000b R14: 00007f0b15dc3f60 R15: 00007ffd42a35988 [ 158.139575][T10596] [ 158.143129][T10596] audit: cannot initialize netlink socket in namespace [ 158.221614][T10471] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 158.344293][T10622] netlink: 44306 bytes leftover after parsing attributes in process `syz.0.2242'. [ 158.357559][T10471] veth0_vlan: entered promiscuous mode [ 158.373387][T10471] veth1_vlan: entered promiscuous mode [ 158.426559][ T338] IPVS: stop unused estimator thread 0... [ 158.507311][ T4631] EXT4-fs error: 13775 callbacks suppressed [ 158.507330][ T4631] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #18: comm kworker/u8:19: mark_inode_dirty error [ 158.520090][T10471] veth0_macvtap: entered promiscuous mode [ 158.539877][T10509] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 158.541728][ T4631] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5731: Out of memory [ 158.556034][ T4631] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #18: comm kworker/u8:19: mark_inode_dirty error [ 158.558492][T10509] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 158.577454][T10509] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 158.584514][ T4631] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5731: Out of memory [ 158.597102][T10471] veth1_macvtap: entered promiscuous mode [ 158.613072][T10509] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 158.691444][T10509] 8021q: adding VLAN 0 to HW filter on device bond0 [ 158.708216][T10471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 158.719079][T10471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.729114][T10471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 158.739621][T10471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.749544][T10471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 158.760208][T10471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.770166][T10471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 158.780809][T10471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.790900][T10471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 158.801630][T10471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.811534][T10471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 158.821983][T10471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.831937][T10471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 158.842639][T10471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.852480][T10471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 158.862947][T10471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.873150][T10471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 158.884357][T10471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.902236][ T4631] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #18: comm kworker/u8:19: mark_inode_dirty error [ 158.903351][T10471] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 158.915173][ T4631] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5731: Out of memory [ 158.922519][T10471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 158.940935][T10471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.951039][T10471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 158.961820][T10471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.971189][ T4631] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #18: comm kworker/u8:19: mark_inode_dirty error [ 158.971684][T10471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 158.993662][T10471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.997993][ T4631] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5731: Out of memory [ 159.003520][T10471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 159.024260][T10471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.026330][ T5941] kmmpd-loop3: attempt to access beyond end of device [ 159.026330][ T5941] loop3: rw=14337, sector=48, nr_sectors = 4 limit=1 [ 159.034470][T10471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 159.047540][ T5941] Buffer I/O error on dev loop3, logical block 12, lost sync page write [ 159.057898][T10471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.076209][T10471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 159.086721][T10471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.096576][T10471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 159.107094][T10471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.117000][T10471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 159.127565][T10471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.137417][T10471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 159.148138][T10471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.152749][ T4631] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #18: comm kworker/u8:19: mark_inode_dirty error [ 159.173051][ T4631] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5731: Out of memory [ 159.204890][T10471] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 159.225370][T10509] 8021q: adding VLAN 0 to HW filter on device team0 [ 159.247245][T10471] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.256158][T10471] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.264918][T10471] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.273652][T10471] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.306478][ T3160] bridge0: port 1(bridge_slave_0) entered blocking state [ 159.313720][ T3160] bridge0: port 1(bridge_slave_0) entered forwarding state [ 159.352363][ T29] audit: type=1400 audit(1720665066.992:1285): avc: denied { override_creds } for pid=10642 comm="syz.1.2249" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 159.386389][ T24] bridge0: port 2(bridge_slave_1) entered blocking state [ 159.393548][ T24] bridge0: port 2(bridge_slave_1) entered forwarding state [ 159.481377][T10656] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 159.539008][T10660] netlink: 'syz.2.2252': attribute type 4 has an invalid length. [ 159.546868][T10660] netlink: 17 bytes leftover after parsing attributes in process `syz.2.2252'. [ 159.577912][T10636] chnl_net:caif_netlink_parms(): no params data found [ 159.646644][T10509] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 159.657862][T10678] loop2: detected capacity change from 0 to 2048 [ 159.662910][T10636] bridge0: port 1(bridge_slave_0) entered blocking state [ 159.671389][T10636] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.682873][T10678] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 159.695546][T10636] bridge_slave_0: entered allmulticast mode [ 159.703338][T10636] bridge_slave_0: entered promiscuous mode [ 159.710585][T10636] bridge0: port 2(bridge_slave_1) entered blocking state [ 159.717856][T10636] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.725642][T10636] bridge_slave_1: entered allmulticast mode [ 159.732927][T10636] bridge_slave_1: entered promiscuous mode [ 159.754225][T10636] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 159.768195][T10636] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 159.800693][T10636] team0: Port device team_slave_0 added [ 159.813176][T10636] team0: Port device team_slave_1 added [ 159.841483][T10636] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 159.848559][T10636] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 159.874646][T10636] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 159.900725][T10636] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 159.907842][T10636] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 159.934048][T10636] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 160.007169][T10636] hsr_slave_0: entered promiscuous mode [ 160.029328][T10636] hsr_slave_1: entered promiscuous mode [ 160.038680][T10684] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 160.053992][T10636] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 160.062928][T10636] Cannot create hsr debugfs directory [ 160.069693][T10684] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 32 with error 28 [ 160.082051][T10684] EXT4-fs (loop2): This should not happen!! Data will be lost [ 160.082051][T10684] [ 160.091935][T10684] EXT4-fs (loop2): Total free blocks count 0 [ 160.097981][T10684] EXT4-fs (loop2): Free/Dirty block details [ 160.103887][T10684] EXT4-fs (loop2): free_blocks=2415919104 [ 160.109710][T10684] EXT4-fs (loop2): dirty_blocks=8192 [ 160.115065][T10684] EXT4-fs (loop2): Block reservation details [ 160.121208][T10684] EXT4-fs (loop2): i_reserved_data_blocks=512 [ 160.130285][T10686] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 32 with max blocks 2048 with error 28 [ 160.138682][T10509] veth0_vlan: entered promiscuous mode [ 160.183407][T10509] veth1_vlan: entered promiscuous mode [ 160.264638][T10509] veth0_macvtap: entered promiscuous mode [ 160.337520][T10509] veth1_macvtap: entered promiscuous mode [ 160.365859][T10636] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.442486][T10509] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 160.453241][T10509] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.463218][T10509] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 160.473786][T10509] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.483635][T10509] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 160.494154][T10509] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.503982][T10509] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 160.514425][T10509] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.524293][T10509] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 160.534836][T10509] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.545030][T10509] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 160.555518][T10509] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.565326][T10509] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 160.575778][T10509] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.585614][T10509] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 160.596214][T10509] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.606171][T10509] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 160.616651][T10509] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.626599][T10509] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 160.637055][T10509] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.729608][T10509] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 160.793655][ T29] audit: type=1400 audit(1720665068.442:1286): avc: denied { connect } for pid=10708 comm="syz.0.2260" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 160.813731][ T29] audit: type=1400 audit(1720665068.442:1287): avc: denied { setopt } for pid=10708 comm="syz.0.2260" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 160.837502][T10713] loop2: detected capacity change from 0 to 512 [ 160.844297][ T29] audit: type=1400 audit(1720665068.482:1288): avc: denied { read } for pid=10708 comm="syz.0.2260" path="socket:[35161]" dev="sockfs" ino=35161 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 160.870044][T10636] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.872003][T10713] EXT4-fs error (device loop2): ext4_ext_check_inode:520: inode #15: comm syz.2.2261: pblk 0 bad header/extent: invalid eh_entries - magic f30a, entries 24833, max 4(4), depth 0(0) [ 160.901081][T10713] EXT4-fs error (device loop2): ext4_orphan_get:1399: comm syz.2.2261: couldn't read orphan inode 15 (err -117) [ 160.909798][T10509] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 160.915891][T10713] EXT4-fs (loop2): mounted filesystem ffffff7f-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 160.923417][T10509] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.935487][T10713] ext4 filesystem being mounted at /6/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 160.946377][T10509] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 160.966271][T10509] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.976133][T10509] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 160.986646][T10509] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.996678][T10509] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 161.007172][T10509] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.017142][T10509] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 161.027640][T10509] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.037487][T10509] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 161.048001][T10509] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.057925][T10509] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 161.068455][T10509] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.078300][T10509] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 161.088815][T10509] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.098731][T10509] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 161.109198][T10509] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.119065][T10509] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 161.129512][T10509] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.151515][T10509] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 161.182233][T10509] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.191162][T10509] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.200007][T10509] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.208834][T10509] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.234562][T10636] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.303554][T10636] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.330788][ T29] audit: type=1400 audit(1720665068.982:1289): avc: denied { watch watch_reads } for pid=10731 comm="syz.1.2266" path="/syzcgroup/cpu/syz1/cpuset.cpus" dev="cgroup" ino=195 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1 [ 161.365933][T10471] EXT4-fs (loop2): unmounting filesystem ffffff7f-0000-0000-0000-000000000000. [ 161.407139][T10636] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 161.418292][T10636] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 161.428253][T10636] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 161.441006][T10636] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 161.532957][T10636] 8021q: adding VLAN 0 to HW filter on device bond0 [ 161.609534][T10636] 8021q: adding VLAN 0 to HW filter on device team0 [ 161.624461][ T3161] bridge0: port 1(bridge_slave_0) entered blocking state [ 161.631670][ T3161] bridge0: port 1(bridge_slave_0) entered forwarding state [ 161.668168][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 161.675295][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 161.837820][T10751] sctp: [Deprecated]: syz.0.2272 (pid 10751) Use of int in max_burst socket option deprecated. [ 161.837820][T10751] Use struct sctp_assoc_value instead [ 161.882321][T10636] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 162.104646][T10636] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 162.131297][T10773] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 162.139884][T10773] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2278'. [ 162.237830][T10636] veth0_vlan: entered promiscuous mode [ 162.259064][T10636] veth1_vlan: entered promiscuous mode [ 162.269635][T10776] loop2: detected capacity change from 0 to 164 [ 162.290000][T10776] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 162.298246][T10636] veth0_macvtap: entered promiscuous mode [ 162.317728][T10776] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 162.328726][T10636] veth1_macvtap: entered promiscuous mode [ 162.355861][T10636] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 162.366423][T10636] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.376674][T10636] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 162.387135][T10636] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.397029][T10636] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 162.407607][T10636] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.417558][T10636] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 162.428031][T10636] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.437909][T10636] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 162.448388][T10636] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.458383][T10636] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 162.468854][T10636] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.478764][T10636] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 162.489259][T10636] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.499110][T10636] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 162.509586][T10636] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.519436][T10636] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 162.529871][T10636] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.539864][T10636] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 162.550332][T10636] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.560268][T10636] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 162.570719][T10636] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.588688][T10801] ALSA: seq fatal error: cannot create timer (-22) [ 162.632302][T10808] hub 9-0:1.0: USB hub found [ 162.639598][T10808] hub 9-0:1.0: 8 ports detected [ 162.656872][ T29] audit: type=1326 audit(1720665070.302:1290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10809 comm="syz.2.2288" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5e9d9ddbd9 code=0x0 [ 162.694978][T10636] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 162.711593][T10636] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 162.722177][T10636] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.732023][T10636] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 162.742512][T10636] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.752600][T10636] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 162.763140][T10636] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.773368][T10636] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 162.783939][T10636] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.793795][T10636] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 162.804330][T10636] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.814171][T10636] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 162.824658][T10636] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.834531][T10636] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 162.845043][T10636] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.854963][T10636] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 162.865953][T10636] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.876079][T10636] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 162.886554][T10636] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.896512][T10636] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 162.906959][T10636] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.916803][T10636] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 162.927266][T10636] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.939932][T10636] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 162.951484][T10821] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2292'. [ 162.970550][T10636] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.979487][T10636] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.988403][T10636] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.997619][T10636] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.197858][T10841] x_tables: duplicate underflow at hook 3 [ 163.270482][ T29] audit: type=1326 audit(1720665070.922:1291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10842 comm="syz.4.2299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcf25dfbd9 code=0x7ffc0000 [ 163.315245][ T29] audit: type=1326 audit(1720665070.952:1292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10842 comm="syz.4.2299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcf25dfbd9 code=0x7ffc0000 [ 163.339146][ T29] audit: type=1326 audit(1720665070.952:1293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10842 comm="syz.4.2299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efcf25dfbd9 code=0x7ffc0000 [ 163.362717][ T29] audit: type=1326 audit(1720665070.952:1294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10842 comm="syz.4.2299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcf25dfbd9 code=0x7ffc0000 [ 163.386202][ T29] audit: type=1326 audit(1720665070.952:1295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10842 comm="syz.4.2299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcf25dfbd9 code=0x7ffc0000 [ 163.520498][ T4631] EXT4-fs error: 8339 callbacks suppressed [ 163.520516][ T4631] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5731: Out of memory [ 163.555212][T10848] sg_write: data in/out 197376/54 bytes for SCSI command 0x7-- guessing data in; [ 163.555212][T10848] program syz.2.2301 not setting count and/or reply_len properly [ 163.590215][ T4631] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #18: comm kworker/u8:19: mark_inode_dirty error [ 163.604598][ T4631] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5731: Out of memory [ 163.637403][ T4631] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #18: comm kworker/u8:19: mark_inode_dirty error [ 163.651262][ T4631] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5731: Out of memory [ 163.668757][ T4631] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #18: comm kworker/u8:19: mark_inode_dirty error [ 163.681815][ T4631] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5731: Out of memory [ 163.699034][ T4631] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #18: comm kworker/u8:19: mark_inode_dirty error [ 163.711694][ T4631] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5731: Out of memory [ 163.722064][ T4631] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #18: comm kworker/u8:19: mark_inode_dirty error [ 163.759934][T10875] IPv6: addrconf: prefix option has invalid lifetime [ 163.822491][T10887] loop4: detected capacity change from 0 to 512 [ 163.855146][T10887] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 163.871313][T10887] ext4 filesystem being mounted at /16/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 164.013467][T10887] syzkaller0: entered promiscuous mode [ 164.019187][T10887] syzkaller0: entered allmulticast mode [ 164.027040][T10902] FAULT_INJECTION: forcing a failure. [ 164.027040][T10902] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 164.040207][T10902] CPU: 1 PID: 10902 Comm: syz.2.2321 Not tainted 6.10.0-rc7-syzkaller-00012-g34afb82a3c67 #0 [ 164.050419][T10902] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 164.060544][T10902] Call Trace: [ 164.063840][T10902] [ 164.066873][T10902] dump_stack_lvl+0xf2/0x150 [ 164.071577][T10902] dump_stack+0x15/0x20 [ 164.075768][T10902] should_fail_ex+0x229/0x230 [ 164.080472][T10902] should_fail+0xb/0x10 [ 164.084657][T10902] should_fail_usercopy+0x1a/0x20 [ 164.089865][T10902] _copy_from_iter+0xd3/0xb00 [ 164.094561][T10902] ? kmalloc_reserve+0x16e/0x190 [ 164.099671][T10902] ? __build_skb_around+0x196/0x1f0 [ 164.104946][T10902] ? __alloc_skb+0x217/0x300 [ 164.109563][T10902] ? __virt_addr_valid+0x1dd/0x240 [ 164.114699][T10902] ? __check_object_size+0x35b/0x510 [ 164.120073][T10902] netlink_sendmsg+0x460/0x6e0 [ 164.124885][T10902] ? __pfx_netlink_sendmsg+0x10/0x10 [ 164.130202][T10902] __sock_sendmsg+0x140/0x180 [ 164.134908][T10902] ____sys_sendmsg+0x312/0x410 [ 164.139732][T10902] __sys_sendmsg+0x1e9/0x280 [ 164.144393][T10902] __x64_sys_sendmsg+0x46/0x50 [ 164.149298][T10902] x64_sys_call+0xb25/0x2d70 [ 164.153923][T10902] do_syscall_64+0xc9/0x1c0 [ 164.158471][T10902] ? clear_bhb_loop+0x55/0xb0 [ 164.163211][T10902] ? clear_bhb_loop+0x55/0xb0 [ 164.167956][T10902] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.174050][T10902] RIP: 0033:0x7f5e9d9ddbd9 [ 164.178489][T10902] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 164.198213][T10902] RSP: 002b:00007f5e9cc5f048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 164.206692][T10902] RAX: ffffffffffffffda RBX: 00007f5e9db6bf60 RCX: 00007f5e9d9ddbd9 [ 164.214787][T10902] RDX: 0000000000000000 RSI: 0000000020000200 RDI: 0000000000000003 [ 164.222854][T10902] RBP: 00007f5e9cc5f0a0 R08: 0000000000000000 R09: 0000000000000000 [ 164.230863][T10902] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 164.238861][T10902] R13: 000000000000000b R14: 00007f5e9db6bf60 R15: 00007ffcb082cd08 [ 164.246918][T10902] [ 164.254048][ T5941] kmmpd-loop3: attempt to access beyond end of device [ 164.254048][ T5941] loop3: rw=14337, sector=48, nr_sectors = 4 limit=1 [ 164.267456][ T5941] Buffer I/O error on dev loop3, logical block 12, lost sync page write [ 164.371584][T10921] program syz.2.2328 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 164.393012][T10921] loop2: detected capacity change from 0 to 128 [ 165.196791][T10968] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=784 sclass=netlink_route_socket pid=10968 comm=syz.1.2344 [ 165.220775][T10968] loop1: detected capacity change from 0 to 2048 [ 165.308746][T10968] loop1: unable to read partition table [ 165.318527][T10968] loop1: partition table beyond EOD, truncated [ 165.324748][T10968] loop_reread_partitions: partition scan of loop1 () failed (rc=-5) [ 165.435342][T10979] loop1: detected capacity change from 0 to 128 [ 165.443599][T10979] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 165.457917][T10979] ext4 filesystem being mounted at /86/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 165.472192][T10979] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 165.524213][T10983] loop2: detected capacity change from 0 to 512 [ 165.537944][T10983] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 165.550667][T10983] ext4 filesystem being mounted at /29/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 165.594293][T10471] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.645822][T10989] netlink: 'syz.2.2351': attribute type 6 has an invalid length. [ 165.654519][T10989] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2351'. [ 165.701663][T10993] loop2: detected capacity change from 0 to 2048 [ 165.718654][T10993] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 165.752719][T10471] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.936456][T11007] loop2: detected capacity change from 0 to 512 [ 165.947941][T11007] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a806c018, mo2=0103] [ 165.957967][T11007] System zones: 1-12 [ 165.962287][T11007] EXT4-fs error (device loop2): ext4_init_orphan_info:586: comm syz.2.2358: inode #0: comm syz.2.2358: iget: illegal inode # [ 165.986468][T11007] EXT4-fs (loop2): get orphan inode failed [ 165.992758][T11007] EXT4-fs (loop2): mount failed [ 166.085343][ T9595] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 166.358253][T11034] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2366'. [ 166.367849][T11034] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 166.559416][T11054] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2371'. [ 166.589315][T11047] netlink: 'syz.2.2363': attribute type 10 has an invalid length. [ 166.600226][T11047] syz_tun: entered promiscuous mode [ 166.613382][ T29] kauditd_printk_skb: 19 callbacks suppressed [ 166.613400][ T29] audit: type=1400 audit(1720665074.262:1315): avc: denied { bind } for pid=11055 comm="syz.3.2372" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 166.631059][T11047] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 166.833255][T11071] hsr0: entered promiscuous mode [ 166.852627][T11071] hsr0: left promiscuous mode [ 166.862367][T10509] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.937609][T11078] loop4: detected capacity change from 0 to 2048 [ 166.967401][T11083] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2381'. [ 166.980552][T11078] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 167.038744][T11085] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2382'. [ 167.045507][T11078] loop4: detected capacity change from 2048 to 2046 [ 167.059448][T11078] EXT4-fs error (device loop4): ext4_find_extent:936: inode #18: comm syz.4.2379: pblk 128 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(0) [ 167.079343][T11078] EXT4-fs error (device loop4): ext4_find_extent:936: inode #18: comm syz.4.2379: pblk 128 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(0) [ 167.097533][T11077] EXT4-fs error (device loop4): ext4_find_extent:936: inode #18: comm syz.4.2379: pblk 128 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(0) [ 167.114554][T11077] EXT4-fs error (device loop4): ext4_find_extent:936: inode #18: comm syz.4.2379: pblk 128 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(0) [ 167.195462][T10509] EXT4-fs error (device loop4): ext4_readdir:260: inode #2: block 16: comm syz-executor: path /17/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=2048 fake=0 [ 167.243653][ T4636] EXT4-fs error (device loop4): ext4_find_extent:936: inode #18: comm kworker/u8:21: pblk 128 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(0) [ 167.538333][ T4636] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2 with error 117 [ 167.550808][ T4636] EXT4-fs (loop4): This should not happen!! Data will be lost [ 167.550808][ T4636] [ 167.580724][T11110] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2390'. [ 167.678869][ T25] ================================================================== [ 167.683911][ T4636] EXT4-fs error (device loop4): ext4_find_extent:936: inode #18: comm kworker/u8:21: pblk 128 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(0) [ 167.686988][ T25] BUG: KCSAN: data-race in bt_for_each / flush_end_io [ 167.687028][ T25] [ 167.687032][ T25] write to 0xffff888100e4e420 of 4 bytes by interrupt on cpu 0: [ 167.720684][ T25] flush_end_io+0x444/0x780 [ 167.725224][ T25] __blk_mq_end_request+0x308/0x390 [ 167.730453][ T25] blk_mq_end_request+0x3b/0x50 [ 167.735343][ T25] lo_complete_rq+0xce/0x180 [ 167.735381][ T25] blk_done_softirq+0x74/0xb0 [ 167.735417][ T25] handle_softirqs+0xc3/0x280 [ 167.735447][ T25] run_ksoftirqd+0x1c/0x30 [ 167.735481][ T25] smpboot_thread_fn+0x31c/0x4c0 [ 167.735510][ T25] kthread+0x1d1/0x210 [ 167.735541][ T25] ret_from_fork+0x4b/0x60 [ 167.735567][ T25] ret_from_fork_asm+0x1a/0x30 [ 167.735597][ T25] [ 167.735608][ T25] read to 0xffff888100e4e420 of 4 bytes by task 25 on cpu 1: [ 167.735625][ T25] bt_for_each+0x291/0x480 [ 167.735646][ T25] blk_mq_queue_tag_busy_iter+0x1a4/0x330 [ 167.735672][ T25] blk_mq_timeout_work+0xc4/0x350 [ 167.735707][ T25] process_scheduled_works+0x483/0x9a0 [ 167.735730][ T25] worker_thread+0x526/0x720 [ 167.735758][ T25] kthread+0x1d1/0x210 [ 167.735791][ T25] ret_from_fork+0x4b/0x60 [ 167.735812][ T25] ret_from_fork_asm+0x1a/0x30 [ 167.735838][ T25] [ 167.735841][ T25] value changed: 0x00000062 -> 0xffffffff [ 167.735852][ T25] [ 167.735855][ T25] Reported by Kernel Concurrency Sanitizer on: [ 167.735863][ T25] CPU: 1 PID: 25 Comm: kworker/1:0H Not tainted 6.10.0-rc7-syzkaller-00012-g34afb82a3c67 #0 [ 167.735890][ T25] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 167.735905][ T25] Workqueue: kblockd blk_mq_timeout_work [ 167.735938][ T25] ================================================================== [ 167.742791][ T4636] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 4 with max blocks 2 with error 117 [ 167.886584][ T4636] EXT4-fs (loop4): This should not happen!! Data will be lost [ 167.886584][ T4636] [ 167.898295][T10509] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.164065][ T4657] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.199679][ T4657] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.249959][ T4657] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.299495][ T4657] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.371235][ T4657] bridge_slave_1: left allmulticast mode [ 168.377147][ T4657] bridge_slave_1: left promiscuous mode [ 168.382873][ T4657] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.390832][ T4657] bridge_slave_0: left allmulticast mode [ 168.396582][ T4657] bridge_slave_0: left promiscuous mode [ 168.402229][ T4657] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.520244][ T4657] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 168.528816][ T4631] EXT4-fs error: 15903 callbacks suppressed [ 168.528837][ T4631] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #18: comm kworker/u8:19: mark_inode_dirty error [ 168.529070][ T4631] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5731: Out of memory [ 168.555793][ T4631] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #18: comm kworker/u8:19: mark_inode_dirty error [ 168.567559][ T4631] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5731: Out of memory [ 168.577117][ T4631] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #18: comm kworker/u8:19: mark_inode_dirty error [ 168.577494][ T4657] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 168.590307][ T4631] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5731: Out of memory [ 168.607388][ T4631] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #18: comm kworker/u8:19: mark_inode_dirty error [ 168.608996][ T4657] bond0 (unregistering): Released all slaves [ 168.623688][ T4631] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5731: Out of memory [ 168.634225][ T4631] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #18: comm kworker/u8:19: mark_inode_dirty error [ 168.645922][ T4631] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5731: Out of memory [ 168.718990][ T4657] hsr_slave_0: left promiscuous mode [ 168.724896][ T4657] hsr_slave_1: left promiscuous mode [ 168.732694][ T4657] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 168.740197][ T4657] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 168.748360][ T4657] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 168.755878][ T4657] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 168.766917][ T4657] veth1_macvtap: left promiscuous mode [ 168.772425][ T4657] veth0_macvtap: left promiscuous mode [ 168.778017][ T4657] veth1_vlan: left promiscuous mode [ 168.783273][ T4657] veth0_vlan: left promiscuous mode [ 168.894251][ T4657] team0 (unregistering): Port device team_slave_1 removed [ 168.905651][ T4657] team0 (unregistering): Port device team_slave_0 removed [ 169.255477][ T5941] kmmpd-loop3: attempt to access beyond end of device [ 169.255477][ T5941] loop3: rw=14337, sector=48, nr_sectors = 4 limit=1 [ 169.268875][ T5941] Buffer I/O error on dev loop3, logical block 12, lost sync page write [ 173.535606][ T4631] EXT4-fs error: 26899 callbacks suppressed [ 173.535624][ T4631] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5731: Out of memory [ 173.550817][ T4631] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #18: comm kworker/u8:19: mark_inode_dirty error [ 173.562559][ T4631] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5731: Out of memory [ 173.571760][ T4631] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #18: comm kworker/u8:19: mark_inode_dirty error [ 173.583615][ T4631] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5731: Out of memory [ 173.593005][ T4631] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #18: comm kworker/u8:19: mark_inode_dirty error [ 173.604866][ T4631] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5731: Out of memory [ 173.614066][ T4631] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #18: comm kworker/u8:19: mark_inode_dirty error [ 173.625923][ T4631] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5731: Out of memory [ 173.635141][ T4631] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #18: comm kworker/u8:19: mark_inode_dirty error [ 174.296040][ T5941] kmmpd-loop3: attempt to access beyond end of device [ 174.296040][ T5941] loop3: rw=14337, sector=48, nr_sectors = 4 limit=1 [ 174.309461][ T5941] Buffer I/O error on dev loop3, logical block 12, lost sync page write