last executing test programs: 1.043099844s ago: executing program 1 (id=3847): perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) r1 = socket(0xa, 0x6, 0x0) getsockopt$inet6_mreq(r1, 0x10d, 0x83, 0x0, &(0x7f0000000040)) 1.042588354s ago: executing program 0 (id=3848): ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) perf_event_open(&(0x7f0000000240)={0x0, 0x80, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f00000000c0)={0x0, 0x7}, 0x8) socket(0x10, 0x803, 0x0) (async) r0 = socket(0x200000100000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00'}) (async) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x14, 0x2, 0x0, 0x3, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x4}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000000)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) (async) syz_open_procfs(0x0, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f00000002c0)) (rerun: 64) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) (async) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) write$binfmt_script(r4, 0x0, 0xfffffe5d) (async) getsockname$packet(r4, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="3c00000010008506000000ff0100000000000000", @ANYRES32=r5, @ANYBLOB="01ff00e1c2ed00001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) getsockname$packet(r4, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0x14) (async, rerun: 64) r6 = socket(0x10, 0x80002, 0x0) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r7, @ANYBLOB="008104000040000008000a00", @ANYRES32=r5, @ANYBLOB="f163d43ea50ea4ad383ab384d85d01fa17a83e29ddeca50eea3eed6ba911840443e18ee65dcd40b61f511a2ec157a4979f974bfbd36d63cd72ce211ab775c51c918e737f3af715147353c8c043d5daf2a5e63cfbcfccdf5ac838ca3181103357adcd8d136d37"], 0x28}, 0x1, 0x0, 0x0, 0x50}, 0x80) (async) sendmsg$NFT_BATCH(r1, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r8 = socket$packet(0x11, 0x0, 0x300) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, 0x0, 0x0) 966.393911ms ago: executing program 1 (id=3849): syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socket$kcm(0x2, 0x0, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$ITER_CREATE(0xb, 0x0, 0x0) close(0xffffffffffffffff) ioctl$RTC_PIE_OFF(0xffffffffffffffff, 0x7006) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x301) syz_open_dev$tty1(0xc, 0x4, 0x1) openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600, 0x9000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}) 964.4096ms ago: executing program 1 (id=3853): perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x5, 0x0, 0x57, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xfffffffffffffffc, 0x7fffffff, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_io_uring_setup(0x1114, &(0x7f0000000300), &(0x7f0000000140), &(0x7f0000000000)) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000022a2970c0000000000feff00760000000f00000055000000a000020095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='io_uring_register\x00', r1}, 0x10) io_uring_register$IORING_UNREGISTER_PBUF_RING(r0, 0x17, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2}, 0x1) socket$kcm(0x10, 0x2, 0x0) r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) fcntl$notify(r2, 0x402, 0x8000003d) fcntl$setsig(r2, 0xa, 0x21) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x48, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2e}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x5}]}], {0x14, 0x10}}, 0x90}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_config_ext={0x0, 0x4}, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x4101}, 0x10) sendmsg$nl_route(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000001a00010000000000000004000a8000000001"], 0x24}}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) setsockopt$inet6_tcp_int(r5, 0x6, 0x1b, &(0x7f0000000000)=0x1, 0x4) listen(r5, 0xfff) syz_emit_ethernet(0x4a, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0086dd6000000000140600fe8000000000000000000000000000bbfe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="6a50a9cc2bd9016c"], 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000000000000000000195"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x83c00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000001c0)='inet_sk_error_report\x00', r6}, 0x10) socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) 915.805094ms ago: executing program 0 (id=3854): socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000001100)=0xfffffff8) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000640)={0x54, r1, 0x1, 0x0, 0x0, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8}, {0x6}, {0x5}}]}, 0x54}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x0) r2 = accept$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @initdev}, &(0x7f0000000040)=0x10) setsockopt$IP_VS_SO_SET_EDITDEST(r2, 0x0, 0x489, &(0x7f0000000080)={{0x0, @empty, 0x4e22, 0x4, 'ovf\x00', 0x1, 0x5, 0x2c}, {@private=0xa010100, 0x4e24, 0x2000, 0x4, 0x1, 0x2}}, 0x44) socket$inet6_sctp(0xa, 0x801, 0x84) socket$inet(0x2, 0x80001, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$netlink(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001080)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff4a2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={0x14, r5, 0x1}, 0x14}, 0x3}, 0x0) socket(0x1, 0x5, 0x0) socket$l2tp(0x2, 0x2, 0x73) pipe(&(0x7f0000000100)) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000000480)=@gettaction={0xec, 0x32, 0x300, 0x70bd2a, 0x25dfdbfc, {}, [@action_gd=@TCA_ACT_TAB={0x3c, 0x1, [{0x10, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0x10, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}, @action_gd=@TCA_ACT_TAB={0x2c, 0x1, [{0xc, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0x10, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x1a, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}, @action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x6}, @action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}]}, @action_gd=@TCA_ACT_TAB={0x28, 0x1, [{0xc, 0x18, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x3}]}, 0xec}, 0x1, 0x0, 0x0, 0x8000}, 0x80) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x9, 0x3, 0x270, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x0, 0x4}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2d0) read$char_usb(0xffffffffffffffff, &(0x7f0000000040)=""/4122, 0x101a) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'bond0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18}}}]}, 0x48}}, 0x0) 908.862955ms ago: executing program 1 (id=3857): r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0x1c, &(0x7f0000000040)=ANY=[@ANYBLOB="1808000000000000000000004000000000000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090100000000009500000000000000b7020000000000007b2af8ff00000000b509030000000000dbaaf8fff1000000bf8600000000000007080000f8ffffffbfa400000000000007090000f0ffffffc70200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f1ff76000000bf9800000000000056080000000000008500000007000000b7000000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6d, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) creat(&(0x7f00000000c0)='./file0\x00', 0xecf86c37d53049cc) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) sendto(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000004c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) write(0xffffffffffffffff, 0x0, 0x0) quotactl_fd$Q_QUOTAON(0xffffffffffffffff, 0x0, 0x0, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004b74ffec850000006d000000850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000680)='virtio_transport_alloc_pkt\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000100850000007600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='virtio_transport_alloc_pkt\x00', r3}, 0x10) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000500)={0x28, 0x0, 0x0, @my=0x1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x15, 0x8, &(0x7f0000000900)=ANY=[@ANYRES8=r2], &(0x7f0000000480)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x22, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x1}, 0x8, 0x10, &(0x7f0000000000)={0xfffffffc, 0x0, 0x4, 0x200000}, 0x10}, 0x90) io_pgetevents(0x0, 0x0, 0x20, 0x0, 0x0, 0x0) 875.167918ms ago: executing program 0 (id=3859): r0 = socket$igmp(0x2, 0x3, 0x2) sendmmsg$inet(r0, &(0x7f0000004840)=[{{&(0x7f0000000000)={0x2, 0x0, @multicast2=0xe0000029}, 0x10, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="240000000000000001"], 0x48}}], 0x1, 0x0) 815.653523ms ago: executing program 0 (id=3860): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000140)=[{}, {0x6c}, {0x6, 0x0, 0x0, 0x7fffffff}]}) r0 = socket$packet(0x11, 0x3, 0x300) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000480)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) select(0x300, 0x0, 0x0, &(0x7f0000000400)={0x0, 0x3}, &(0x7f0000000440)={0x0, 0x2710}) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000001c0)=@generic={&(0x7f00000000c0)='./file0\x00'}, 0x18) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'vlan0\x00', 0x0}) r3 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000040)={0x1d, 0x0, 0x1, {0x0, 0x0, 0x2}}, 0x18) bind$can_j1939(r3, &(0x7f0000000140)={0x1d, r4}, 0x18) sendto$packet(r0, &(0x7f0000000180)="0b03feffe0ffe0ff02004788aa96a13bb1000011000088ca1a00", 0x1fffc, 0x0, &(0x7f0000000140)={0x11, 0x0, r2}, 0x14) r5 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r5, 0x29, 0xc8, 0x0, 0xc000054) setsockopt$MRT6_DONE(r5, 0x29, 0xcd, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000140a0b04000000000021000002000000200004801c0001800a00010072656469723300000c00028008000140000000150900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a"], 0x74}}, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x66, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x44}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getresgid(&(0x7f0000000000), &(0x7f0000000180), &(0x7f0000000140)) r6 = syz_io_uring_setup(0x3f9b, &(0x7f00000002c0)={0x0, 0xeccb, 0x400, 0x1, 0x5b}, &(0x7f0000000100), &(0x7f00000001c0)) io_uring_setup(0x776, &(0x7f00000003c0)={0x0, 0xe, 0x2000, 0x2000002, 0x332, 0x0, r6}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0)) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000006c0), 0xfe, 0x246, &(0x7f0000000ac0)="$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") 680.704964ms ago: executing program 0 (id=3865): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x22}, 0x44) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000006c0), 0xfe, 0x246, &(0x7f0000000ac0)="$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") r1 = creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) socket$inet6(0xa, 0x0, 0x0) link(&(0x7f0000001240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x400, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2000000, &(0x7f0000000880)={[{@user_xattr}, {@test_dummy_encryption}, {@nombcache}, {@jqfmt_vfsv0}, {@lazytime}, {@errors_remount}, {@usrjquota_path={'usrjquota', 0x3d, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}}]}, 0x1, 0x522, &(0x7f0000000f80)="$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") r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0x4) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000022, &(0x7f0000000040)=0x1, 0x4) prlimit64(0x0, 0x0, &(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000840)) r3 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) setsockopt$inet6_group_source_req(r3, 0x29, 0x2f, &(0x7f0000000480)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) setsockopt$inet6_group_source_req(r3, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x8d3, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e21, 0x80, @private2, 0x2}}}, 0x108) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f0000000080)=ANY=[], 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) bpf$PROG_LOAD(0x5, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000080)=[{0x60, 0x0, 0x0, 0x80000001}]}) syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000001c0)={'bridge0\x00', 0x0}) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(r4, &(0x7f00000000c0)="3f030e000300120006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) 673.160204ms ago: executing program 2 (id=3866): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000280)='netlink_extack\x00', r0}, 0x10) ioctl$BTRFS_IOC_DEFRAG_RANGE(0xffffffffffffffff, 0x40309410, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, [0xc]}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0xb00, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2400000019000109000000000000000002180000ff0000000000000008000100ac1414"], 0x24}}, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x1000, 0x0, 0x1}, 0x48) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3002, 0x2000006, 0x28011, r5, 0x0) set_mempolicy_home_node(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0xa0}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x38}], {0x95, 0x0, 0x9}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x85}, 0x52) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2400000070000100000000000000000007000000", @ANYRES32=r4, @ANYBLOB="0c000280060001"], 0x24}}, 0x0) 658.464065ms ago: executing program 2 (id=3867): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x66, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000003000)=@file={0x1}, 0x6e) listen(r2, 0x0) connect$unix(r1, &(0x7f0000000640)=@file={0x1}, 0x6e) connect$unix(r1, &(0x7f0000000280)=@file={0x1}, 0x6e) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000080)={0x0, 0x32, "7fbbaa2ddabb2caa0c402f1ee83c7b5bf0e4e88b6896e065b084b1a3e4a719e4f6bbc43352d1b7ce52eb7e0213618acb6484"}, &(0x7f0000000140)=0x3a) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000180)={r3, 0x1, 0xae9, 0x14976436, 0xe551, 0x6}, &(0x7f00000001c0)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_delroute={0x34, 0x19, 0x901, 0x0, 0x0, {0x2, 0x18, 0x0, 0x0, 0x0, 0x0, 0xfd}, [@RTA_DST={0x8, 0x1, @dev}, @RTA_GATEWAY={0x8, 0x5, @private=0xa010102}, @RTA_FLOW={0x8, 0xb, 0x1260}]}, 0x34}}, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) r6 = dup2(r5, r0) mount_setattr(r6, &(0x7f0000000000)='./file0\x00', 0x1000, &(0x7f0000000040)={0x70, 0x70, 0x100000, {r6}}, 0x20) close_range(r6, 0xffffffffffffffff, 0x0) sendmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x0) 609.870899ms ago: executing program 0 (id=3868): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/mdstat\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000000)=[{&(0x7f0000000080)=""/201, 0xc9}], 0x1, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f00000004c0)={[{}]}, 0x1, 0x453, &(0x7f0000001040)="$eJzs3U9sFFUcB/DvbrslAbRg/IP4r4JKEaW2NUESTCTKSS4GE88NLYRYqKE1EUKMJh68eTHx7EG5eeTgyXjAoyZ48aaejJEYIvGk1sx2ly5lt3RD26nu55PM7pud132/mdffzO7ryzRAzxoqHirJ1iTfJxlcWL25wtDC0/VrF47/ee3C8Urm54/9XqnX++PahePNqs2f21I8VJPhalL9oJKH2rQ7e+78mxPT01NnG+sjc6ffGpk9d/7ZU6cnTk6dnDozeuDgC+OjB8bGx1dtX1+9+O6xLa+9dOSjySu/zVz86csi3q2Nba37sVqGMnTzsWzx1Go3VrL7WsqV/hIDoSt9SYruqtXzfzB9Wey8wXzzY6nBAWtqvrCp4+b35oH/sUrKjgAoR/NCX3z/bS7r9dmD8l09vPAFsOj3641lYUt/qo06tSXf71fTUJJDl458USxZo3EYAAAAgF721eEkz7Qb/6vm/pZ6RfmBJDuSPJhkZ1Kf1/NwkkeSPJrkseZ8oi4srb90/KfSaQINq+Lq4eRQY27XzeN/zdG/bOtrrN1VrKRWOXFqeuq5JHcnGU5tU7E+ukwbl7/957tO21rH/4qlaL85FtiI49f+JX+fnpyYm7iTfWbR1feTnf3t+r9yYyZQkYKPJ9nVzRvXFos/79p7slO12/c/a2n+02RP2/xvnHivHKw/LTM/c6R+PhhpnhVu9eHo2Cud2tf/5Sryf/Ny/Z9sq7TO153tvo3LOy692Glb9+f/Hz4rzv8DldfrAQ40Xn1nYm7u7GgyUDl66+tj3cf839b5Q1PzeDSPV9H/w7vbX//vaXm33UmeSPJkY+7ynvq1P9mb5Okk+5aJ5u+XD7zRaZv8L1fR/5Nt8//G1IAl+d994dD2T452an9l+f98/Rd6uPGKz3+3t9IOKjtOAAAAAAAAAFZHtX4PvEp1/41ytbp//8I9/O7N5ur0zOzcvhMzb5+ZXLhX3rbUqs2ZXoMt80FH6+XF9bEl6+NJtif5uO+vxp0HZqYny9556HFbOuR/4Ze+sqMD1pz7tULvWkH+19YjDmD9uf5D75L/0LvkP/Qu+Q+9S/5D75L/0LtWnv8DaxoHsP5c/6En3cl9/TZaoT8bIoy2heb8qZLCaP5L/g1yNDZm4fOvk3Voqy/JRtnlZQplnpUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANo5/AwAA//9EA9s8") r1 = open(&(0x7f0000000000)='./file0/file0\x00', 0x14507e, 0x0) sendfile(r1, r1, 0x0, 0x100000000) lseek(r0, 0xd, 0x0) stat(&(0x7f0000001980)='./file0/file0\x00', &(0x7f00000019c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2000000, &(0x7f0000001b80)={[{@user_xattr}, {@auto_da_alloc}, {@resgid={'resgid', 0x3d, r2}}, {@nogrpid}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@stripe={'stripe', 0x3d, 0x7d9}}, {@quota}, {@journal_dev={'journal_dev', 0x3d, 0x4}}]}, 0x21, 0x4a6, &(0x7f00000014c0)="$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") r3 = creat(&(0x7f0000000040)='./file0/file1\x00', 0x0) unlink(&(0x7f0000000100)='./file0/file1\x00') r4 = socket(0x1, 0x802, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000002c0)={'ip6_vti0\x00', &(0x7f0000000000)=@ethtool_per_queue_op={0x4b, 0x29}}) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x2, 0x8, &(0x7f0000000580)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd70a5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c707647fa8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f9429ef295ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa60e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e0300d37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe0245330e88c0c41dfee5fc9400784fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f95007000000000000be290159f6bcd75f0dda9de5532e71ae9e1f00000054a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468bb928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88c3c44b3b7486f979e8a3174b531f573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x8000}, 0x5, 0x10, &(0x7f0000000000), 0x10, 0x0, r0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000540)='unmap\x00', r4}, 0x10) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) r5 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) r6 = openat$cgroup_procs(r5, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) r7 = epoll_create1(0x0) epoll_pwait(r7, &(0x7f0000000140)=[{}], 0x1, 0xfffffff8, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000000300)) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_RESET_STATS(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f0000001140)=ANY=[], 0xf4}, 0x1, 0x0, 0x0, 0x20004854}, 0x20000080) perf_event_open(&(0x7f0000000a00)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x3000000000000000, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, r3, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) socket$inet(0x2, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6}]}) syz_open_procfs(0x0, &(0x7f0000002180)='net/mcfilter\x00') 557.577034ms ago: executing program 2 (id=3872): getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x20, 0x1, 0x1, 0x201, 0x0, 0x1a000000, {}, [@CTA_STATUS_MASK={0x8}, @CTA_FILTER={0x4}]}, 0x20}}, 0x0) 556.961834ms ago: executing program 2 (id=3873): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000c0785000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) epoll_create1(0x0) epoll_create1(0x0) open(&(0x7f0000000100)='./bus\x00', 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x12, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(0x0, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000600)={'#! ', '', [{0x20, ':{'}, {0x20, 'ext4\x00'}, {0x20, 'nodelalloc'}, {0x20, '{P[('}, {0x20, '7'}, {}, {}], 0xa, "aa6a2d0a61c1ae2925d50623e042f827af5f142061850f77dbf7859bf5dac9"}, 0x40) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000005, 0x12, r2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$netlink(r3, 0x10e, 0x8, 0x0, &(0x7f0000000040)) ioctl$SG_IO(r1, 0x2285, &(0x7f00000003c0)={0x53, 0x0, 0x0, 0x1f, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000340), &(0x7f0000001c80)=""/4096, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8002, &(0x7f00000000c0), 0x1, 0x4b4, &(0x7f0000000c80)="$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") io_setup(0x3, 0x0) clock_gettime(0x0, &(0x7f00000000c0)) ftruncate(0xffffffffffffffff, 0x7fff) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="6579a7c23bec481f3439424f117c18f407878b4e57b3ec9cdc9f68f950d9d1242045b41437eaee34d7fcc8270766987b15d440dcb5e5cebfc77814a5488372f98d2fa45313bb45c6d0dbd541863943a0e4f45de35fd2103268bd1384f97d04414a8f751dc360cabab764b2c9fccc5549255629d2b06f64682de4a517cd48390c4457c8457cc90787db8f5a863ba196d84b69e3b27b64337048b0661d85d02dbbc17398485e812bdd1cd9015c0415", @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000001140)='ext4_allocate_inode\x00', r0}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000000)='ext4_allocate_inode\x00', r4}, 0x10) r5 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r6 = add_key$fscrypt_v1(&(0x7f00000009c0), &(0x7f0000000a00)={'fscrypt:', @desc4}, &(0x7f0000000a40)={0x0, "e76324317b35aa52f0a285156814e6ea678d91b20622e69b0567c608f3ec2bb04f26e20b06ef0448d383e1ea50df969065826e2290f5411d2250b0d085bc2fb4"}, 0x48, r5) keyctl$search(0xa, r5, &(0x7f0000000ac0)='keyring\x00', &(0x7f0000000b00)={'syz', 0x3}, r6) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000400)='ext4_allocate_inode\x00', r7}, 0x10) 556.675883ms ago: executing program 2 (id=3874): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0xfe, 0x0, &(0x7f0000000000)) mount$tmpfs(0x600, &(0x7f0000000080)='./file0\x00', &(0x7f0000000340), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='mpol=prefer=static:0']) 499.856888ms ago: executing program 2 (id=3875): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@ipv4_newroute={0x30, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x2}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @LWTUNNEL_IP6_FLAGS={0x6}}]}, 0x30}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@ipv4_newroute={0x38, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x4}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, @LWTUNNEL_IP_OPT_VXLAN_GBP={0x8}}}}]}, 0x38}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000016c0)={0x3, &(0x7f0000001680)=[{}, {0x87}, {0x6}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mkdir(&(0x7f0000000580)='./file0\x00', 0x4a) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r3 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r4, &(0x7f0000000a00)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x8b}, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_buf(r5, 0x6, 0xd, &(0x7f00000001c0), 0x0) getsockopt$inet6_tcp_buf(r5, 0x6, 0x1f, 0x0, &(0x7f00000003c0)) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(0xffffffffffffffff, &(0x7f00000005c0)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f0000000300), 0x0}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000000200)=ANY=[@ANYBLOB="85000000a800000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13}, 0x90) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'nicvf0\x00', 0x2}) ioctl$TUNSETTXFILTER(r8, 0x400454d1, &(0x7f0000000180)=ANY=[@ANYBLOB="006a06"]) 499.130739ms ago: executing program 3 (id=3876): r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x12) ptrace$peeksig(0x4209, r1, &(0x7f0000000480)={0xfffffffffffffffc, 0xa000000, 0x1}, &(0x7f00000004c0)=[{}]) 498.909748ms ago: executing program 3 (id=3877): bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @random="50a245d5cde0", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x32, 0x0, @empty=0x1400, @broadcast}, @timestamp_reply={0x11}}}}}, 0x0) 493.685419ms ago: executing program 3 (id=3878): socket$inet_smc(0x2b, 0x1, 0x0) (async) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000300)={&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000580)=""/250, 0xfa, 0x0, &(0x7f0000000480)=""/225, 0xe1}, &(0x7f0000000340)=0x40) (async) socket(0x10, 0x3, 0x6) (async) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040), 0x500083, 0x0) write$vga_arbiter(r0, &(0x7f0000001300)=ANY=[@ANYBLOB="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"/277], 0x16) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='kfree\x00', r1}, 0x10) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x0, 0x0) (async, rerun: 64) chdir(&(0x7f0000000140)='./file0\x00') (async, rerun: 64) r2 = open(&(0x7f0000002000)='./bus\x00', 0x103042, 0x0) (async) r3 = socket$netlink(0x10, 0x3, 0x15) (async) r4 = socket(0x10, 0x0, 0x0) sendmsg$nl_route_sched(r4, 0x0, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) (async, rerun: 64) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) (rerun: 64) r5 = socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) (async) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0xffffffffffffffcb, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x4800}, 0xd0) (async) getsockname$packet(r7, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) (async) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@gettfilter={0x24, 0x25, 0x6ce324a938346939, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0x0, 0xffff}}}, 0x24}}, 0x0) move_pages(0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x6) (async, rerun: 64) openat$cgroup_ro(r2, &(0x7f00000000c0)='blkio.bfq.io_service_time\x00', 0x7a05, 0x1700) (rerun: 64) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) (async, rerun: 64) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) (async, rerun: 64) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 465.282061ms ago: executing program 3 (id=3879): r0 = io_uring_setup(0x4f08, &(0x7f00000002c0)) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c) setsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000180)={0x0, 0x9}, 0x10) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x0, 0x0, @dev, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x54}, 0x9c) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x18, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR={0xa, 0x4, @remote}]}}}]}, 0x48}}, 0x0) accept$inet6(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000002080)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2000002, &(0x7f00000020c0)={[{@lazytime}, {@noinit_itable}, {@debug}]}, 0x1, 0x544, &(0x7f0000000740)="$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") openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x201, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x14, r4, 0x701, 0x0, 0x0, {0x9}}, 0x14}}, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x10, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_AUXV(0x23, 0xc, &(0x7f0000000000)="6cb8295c880224b37531583bb715ffd3fac03fa4163b8b75c3811e14f78c665b5b73232722bf4d8a3419e7b01cff5e4ab761ff7ee8fc21a5b7e72b4dac528e176d8e5e23617deeddbc44c0cd42504cd4ed7993031d65a5", 0x57) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mlock2(&(0x7f0000d24000/0x2000)=nil, 0x2000, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x799, 0x0, 0x1, 0x9, 0x0, 0x800}, 0x20) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x2810000, &(0x7f0000000340), 0x1, 0x54f, &(0x7f0000000b00)="$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") r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40241, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) 464.760322ms ago: executing program 4 (id=3880): socket$inet6(0xa, 0x2, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000000)={'ip6gre0\x00', &(0x7f00000005c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}, @loopback}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000000c0)={'syztnl1\x00', &(0x7f0000000040)={'syztnl0\x00', 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_open_dev$usbfs(0x0, 0x800000001ff, 0x2) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000840), r2) sendmsg$NLBL_UNLABEL_C_ACCEPT(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="01000000000000000000010000000500010002000000"], 0x1c}}, 0x0) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, &(0x7f0000000040)={0x23, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0}) syz_genetlink_get_family_id$devlink(&(0x7f0000000240), 0xffffffffffffffff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7ffffff7}]}) tgkill(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) getsockname$packet(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000b40)=ANY=[@ANYBLOB="4000000010003904000000000000", @ANYRES32=r4, @ANYBLOB="810800000000000020001280080001006774700014000280080001"], 0x40}}, 0x0) r5 = open(&(0x7f00000001c0)='./file0\x00', 0x2, 0x2) sendmsg$netlink(r5, &(0x7f0000000400)={&(0x7f0000000300)=@kern={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000003c0)=[{&(0x7f0000000640)=ANY=[@ANYBLOB="1c0000001700040025bd7000ffdbdf250c00", @ANYRES32=0x0, @ANYBLOB="6cf9531987ece205f29c35d03aec3bff7d8336a7a1f6039f9fc9b131cded90638a5919fe1515565739b42c137cdb88c233aef5b150e28471d541bb7e17f42540b41df88b361001608d717b42e4f0ff207cb07864578d6984608dd5a3295284c6527202082be0242ec9363c164ea6dd6ab9a3c2fdd253692b01e0252f20947679bffcd1c1192993de9cff216446b235034c6d224aa8aa25a7a3ee85644051a13ceecffe2b4e5522536c68bcb3577299f352ea2c15b7fc095f6a1cb49a577ed288e52807dec90e6bd41be48e0e7bd3bc2177ee30bf48306c93933f6306adb35fc77e96c218d22d6dbcdb6f03178bf98d98b00c7b"], 0x1c}], 0x1, 0x0, 0x0, 0x4}, 0x4000021) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c25000010001ffe00989837a182138b00268f1c", @ANYRES32=0x0, @ANYBLOB="ff7f000000000000140012800a00010076786c616e0000000400028008000a00", @ANYRES32], 0x3c}, 0x1, 0x8000a0ffffffff}, 0x0) 401.083177ms ago: executing program 4 (id=3881): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d00000007"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IMADDTIMER(r1, 0x80044940, &(0x7f0000000080)=0x14) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) dup3(r2, r1, 0x0) 400.536997ms ago: executing program 4 (id=3882): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x11, 0x80a, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) io_uring_setup(0x30cf, &(0x7f0000000740)) r0 = syz_io_uring_setup(0x2293, &(0x7f0000000400)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x1}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000001c0)) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x500) 400.214897ms ago: executing program 4 (id=3883): sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000180)={{{@in=@multicast1, @in=@remote, 0x0, 0x0, 0x12}, {0x0, 0x0, 0x0, 0x3}}, {{@in=@dev}, 0x0, @in6=@remote}}, 0xe8) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000001500)=ANY=[], 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10) write(r0, &(0x7f00000000c0)="8f2a0a65bd8c022b0304000e0580a7b6073063e286a5cefe", 0xfff7) 343.255692ms ago: executing program 4 (id=3884): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000140)={'lo\x00', &(0x7f0000000040)=@ethtool_drvinfo={0x3, "599db6978285b561cee1c085e11246b5d85e255df20d388f06a68cba80097818", "9f45ac11f7a62710d0bc6403a41765fded8e390fd6c30c185e04a131554b97a1", "87c5061d1fa5fdf4cf8f21f34184f9101a710c1206b0739163c63b21dced2ad9", "6ca76acfa37bd486091555378c89abbcf30fb73b92061339b9708fb935a7b8f4", "0b6737a64f94ecde773bc282f40cd3ab8030cc8899a673ec55b23a5260ab9f7f", "0000000200"}}) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100000000000000000000fc000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001c08000640ffffff000800034000000028580000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000002c0003802800008008000340000000021c00028018000280080001"], 0xec}}, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000240), 0xffffffffffffffff) (async) pipe(&(0x7f0000000f00)={0xffffffffffffffff}) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x4c, r3, 0x2a0531ece42be04b, 0x0, 0x0, {}, [@GTPA_I_TEI={0x8}, @GTPA_O_TEI={0x8}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @loopback}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_MS_ADDRESS={0x8, 0x5, @dev}]}, 0x4c}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x19}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r5, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 342.718282ms ago: executing program 4 (id=3885): ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000340)=0x0) r1 = syz_open_procfs(r0, &(0x7f0000000300)='net/rt6_stats\x00') bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800"/15, @ANYRES32, @ANYBLOB="0000000000000000b708000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001000000000000000000000000000000000000000000000000860090780000000000000000000000000000ee3f000000002b036f8c006e75021d683910c3090b3188a7c747eb2278a273c1b80029442911892704"], 0xfdef) fchdir(r1) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r4 = inotify_init1(0x0) fcntl$setown(r4, 0x8, 0xffffffffffffffff) fcntl$getownex(r4, 0x10, &(0x7f0000000140)={0x0, 0x0}) r6 = syz_open_procfs(r5, &(0x7f0000000040)='fd/4\x00') ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r6, 0x40286608, &(0x7f0000000180)={@id={0x40000, 0x0, @b}}) 204.370773ms ago: executing program 3 (id=3886): openat$selinux_attr(0xffffffffffffff9c, 0x0, 0x2, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003580)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) write$P9_RSETATTR(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000005c0)=ANY=[@ANYBLOB='X\x00t\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000100"], 0x58}}, 0x0) 190.659794ms ago: executing program 3 (id=3887): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1d, 0x2, 0x6) bind$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000040)={0x1d, r2, 0x8000000000000003}, 0x18) close(r1) r3 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) bind$packet(r3, &(0x7f0000000180)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) socket$nl_audit(0x10, 0x3, 0x9) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(0xffffffffffffffff, 0x5201) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) getpgrp(0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3800090054000147880000000000000007008209", @ANYRES32=r5, @ANYBLOB="20000100", @ANYRES32, @ANYBLOB="00001000e000030000010001000000000000000008"], 0x38}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$inet_smc(0x2b, 0x1, 0x0) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmmsg$inet(r6, &(0x7f0000000400)=[{{&(0x7f0000000840)={0x2, 0x0, @dev}, 0x10, 0x0}}], 0x1, 0x20040006) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = dup(r7) write$UHID_INPUT(r8, &(0x7f00000029c0)={0xc, {"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", 0x1000}}, 0x1006) 66.092224ms ago: executing program 1 (id=3888): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x5, &(0x7f0000000300)=ANY=[@ANYRES8=0x0], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x37, '\x00', 0x0, 0x2}, 0x90) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) fchdir(r1) linkat(0xffffffffffffffff, &(0x7f0000000000)='./file2\x00', 0xffffffffffffffff, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@volatile={0x0, 0x0, 0x0, 0x9, 0x1}]}}, &(0x7f00000000c0)=""/3, 0x26, 0x3, 0x1}, 0x20) openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0x3, &(0x7f00000000c0)=@framed, &(0x7f00000001c0)='GPL\x00'}, 0x90) r3 = syz_open_pts(r2, 0x0) r4 = dup3(r3, r2, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0xe) mount(&(0x7f0000000000), &(0x7f0000000040)='./cgroup\x00', 0x0, 0x1001, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="400000001000"/20, @ANYRES32=0x0, @ANYBLOB, @ANYRES32, @ANYBLOB="08000200", @ANYRES32, @ANYBLOB="bca58a21"], 0x40}}, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r6 = socket$can_bcm(0x1d, 0x2, 0x2) unshare(0xc040400) syz_clone(0x209e8440, 0x0, 0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000780)=ANY=[@ANYBLOB="aaaaaaaaaaaa7f0a08024011810039000800470000380000000000019078ac1e0001ac1414aa86080000000301020300907812000228250000000000000000000000e000000100000000a08b490c47e7a1c8ca7764adc749cf1b2ef723f1beafc03681d3326c225b065a31bad305a29762db2988a3247da2bafdc2e14e11bf6e43de389150a44530b6ce73369341aab8c69cf09720e72dad14e20438cb012942b481383eb06890fab40acfee58d40a0c3e"], 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000100)={'vxcan0\x00'}) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000f7850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r7}, 0x10) syz_emit_ethernet(0x17, &(0x7f0000000000)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x67, 0x0, @rand_addr=0x64010100, @remote}, @timestamp}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002004d06693142b364140cf44d"], 0x0, 0x6, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, 0x25, r4, 0x8, 0x0, 0xffffffffffffff1e, 0x10, 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8001}, 0x90) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x4, &(0x7f0000000400)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) 0s ago: executing program 1 (id=3889): socket$kcm(0x2, 0x3, 0x84) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f0000002e40)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000040)="91", 0x1}], 0x82, &(0x7f0000000000)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0xc}}], 0x30}], 0x1, 0x0) kernel console output (not intermixed with test programs): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.747695][T12461] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 203.756623][T12588] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 203.758069][T12461] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 203.777291][T12588] ext4 filesystem being mounted at /149/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 203.790491][T12461] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 203.798770][T12588] EXT4-fs error (device loop4): ext4_do_update_inode:5075: inode #2: comm syz.4.3030: corrupted inode contents [ 203.810676][T12588] EXT4-fs error (device loop4): ext4_dirty_inode:5935: inode #2: comm syz.4.3030: mark_inode_dirty error [ 203.822300][T12588] EXT4-fs error (device loop4): ext4_do_update_inode:5075: inode #2: comm syz.4.3030: corrupted inode contents [ 203.835370][ T3180] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.835505][T12588] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #2: comm syz.4.3030: mark_inode_dirty error [ 203.862641][T12461] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 203.909672][T12461] 8021q: adding VLAN 0 to HW filter on device bond0 [ 203.926457][T10638] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.939502][T12602] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3034'. [ 203.971054][T12461] 8021q: adding VLAN 0 to HW filter on device team0 [ 203.998650][ T3165] bridge0: port 1(bridge_slave_0) entered blocking state [ 204.005795][ T3165] bridge0: port 1(bridge_slave_0) entered forwarding state [ 204.020748][ T3165] bridge0: port 2(bridge_slave_1) entered blocking state [ 204.027907][ T3165] bridge0: port 2(bridge_slave_1) entered forwarding state [ 204.049524][T12461] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 204.166567][ T3180] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 204.176871][ T3180] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 204.187022][ T3180] bond0 (unregistering): Released all slaves [ 204.243135][T12461] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 204.255481][ T3180] tipc: Disabling bearer [ 204.260751][ T3180] tipc: Left network mode [ 204.334349][T12461] veth0_vlan: entered promiscuous mode [ 204.343059][T12461] veth1_vlan: entered promiscuous mode [ 204.353887][ T3180] hsr_slave_0: left promiscuous mode [ 204.360999][ T3180] hsr_slave_1: left promiscuous mode [ 204.367290][ T3180] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 204.374785][ T3180] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 204.382428][ T3180] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 204.389878][ T3180] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 204.399806][ T3180] veth1_macvtap: left promiscuous mode [ 204.405323][ T3180] veth0_macvtap: left promiscuous mode [ 204.410940][ T3180] veth1_vlan: left promiscuous mode [ 204.416247][ T3180] veth0_vlan: left promiscuous mode [ 204.434617][T12654] loop3: detected capacity change from 0 to 512 [ 204.502798][ T3180] team0 (unregistering): Port device team_slave_1 removed [ 204.513219][ T3180] team0 (unregistering): Port device team_slave_0 removed [ 204.555026][T12656] netlink: 164 bytes leftover after parsing attributes in process `syz.3.3049'. [ 204.588749][T12461] veth0_macvtap: entered promiscuous mode [ 204.598334][T12461] veth1_macvtap: entered promiscuous mode [ 204.608916][T12461] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 204.619475][T12461] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.629300][T12461] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 204.639749][T12461] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.649685][T12461] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 204.660147][T12461] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.669968][T12461] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 204.680394][T12461] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.690202][T12461] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 204.700622][T12461] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.710438][T12461] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 204.720880][T12461] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.730758][T12461] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 204.741179][T12461] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.751832][T12461] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 204.762071][T12461] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 204.772579][T12461] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.782595][T12461] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 204.793144][T12461] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.803107][T12461] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 204.813544][T12461] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.823334][T12461] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 204.833758][T12461] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.843620][T12461] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 204.854137][T12461] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.863996][T12461] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 204.874442][T12461] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.884295][T12461] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 204.894717][T12461] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.905483][T12461] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 204.917752][T12461] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.926498][T12461] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.935273][T12461] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.944047][T12461] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.971524][T12661] loop4: detected capacity change from 0 to 512 [ 204.978515][T12661] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 204.991462][T12661] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 205.007995][T12520] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 205.017127][T12520] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 205.030410][T12520] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 205.040887][T12661] EXT4-fs (loop4): 1 truncate cleaned up [ 205.049377][T12661] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 205.070784][T12520] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 205.079352][T10638] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.113837][T12677] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3056'. [ 205.126697][T12677] bond_slave_0: entered promiscuous mode [ 205.132350][T12677] bond_slave_1: entered promiscuous mode [ 205.138085][T12677] team_slave_0: entered promiscuous mode [ 205.143737][T12677] team_slave_1: entered promiscuous mode [ 205.150977][T12677] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 205.165808][T12677] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3056'. [ 205.175534][T12677] bond_slave_0: left promiscuous mode [ 205.180952][T12677] bond_slave_1: left promiscuous mode [ 205.186374][T12677] team_slave_0: left promiscuous mode [ 205.191758][T12677] team_slave_1: left promiscuous mode [ 205.278708][T12520] 8021q: adding VLAN 0 to HW filter on device bond0 [ 205.299479][T12520] 8021q: adding VLAN 0 to HW filter on device team0 [ 205.311848][ T904] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.318942][ T904] bridge0: port 1(bridge_slave_0) entered forwarding state [ 205.343423][ T5817] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.350615][ T5817] bridge0: port 2(bridge_slave_1) entered forwarding state [ 205.413274][T12709] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 205.420525][T12709] IPv6: NLM_F_CREATE should be set when creating new route [ 205.484048][T12520] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 205.527844][T12739] netlink: 80 bytes leftover after parsing attributes in process `syz.3.3074'. [ 205.550850][T12740] netlink: 80 bytes leftover after parsing attributes in process `syz.3.3074'. [ 205.561608][T12738] xt_l2tp: unknown flags: 3b [ 205.566004][T12739] xt_l2tp: unknown flags: 3b [ 205.632854][T12520] veth0_vlan: entered promiscuous mode [ 205.644250][T12520] veth1_vlan: entered promiscuous mode [ 205.660372][T12520] veth0_macvtap: entered promiscuous mode [ 205.679040][T12520] veth1_macvtap: entered promiscuous mode [ 205.695812][T12520] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 205.706444][T12520] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.716426][T12520] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 205.726955][T12520] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.727657][T12765] devtmpfs: Unknown parameter 'posixacl' [ 205.737180][T12520] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 205.753305][T12520] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.763149][T12520] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 205.773591][T12520] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.775931][T12769] loop3: detected capacity change from 0 to 256 [ 205.783485][T12520] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 205.783505][T12520] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.783513][T12520] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 205.783525][T12520] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.783547][T12520] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 205.783559][T12520] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.783577][T12520] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 205.783695][T12520] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.785802][T12520] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 205.823881][T12769] vfat: Unknown parameter '1844674407370955161518446744073709551615' [ 205.832495][T12520] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 205.898422][T12520] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.908257][T12520] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 205.918690][T12520] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.928530][T12520] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 205.938963][T12520] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.948896][T12520] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 205.959467][T12520] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.969306][T12520] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 205.979810][T12520] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.989636][T12520] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 206.000082][T12520] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.001615][T12769] loop3: detected capacity change from 0 to 512 [ 206.009956][T12520] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 206.010036][T12520] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.010051][T12520] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 206.010065][T12520] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.013092][T12520] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 206.082264][T12520] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.091154][T12520] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.099931][T12520] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.108646][T12520] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.146561][ T29] kauditd_printk_skb: 47 callbacks suppressed [ 206.146576][ T29] audit: type=1400 audit(1723437917.070:1610): avc: denied { create } for pid=12780 comm="syz.0.3088" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 206.191457][ T29] audit: type=1400 audit(1723437917.100:1611): avc: denied { create } for pid=12780 comm="syz.0.3088" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 206.212134][ T29] audit: type=1400 audit(1723437917.100:1612): avc: denied { getopt } for pid=12780 comm="syz.0.3088" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 206.232705][ T29] audit: type=1400 audit(1723437917.110:1613): avc: denied { write } for pid=12780 comm="syz.0.3088" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 206.254861][ T29] audit: type=1326 audit(1723437917.160:1614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12782 comm="syz.0.3089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7ffbf5b59 code=0x7ffc0000 [ 206.278500][ T29] audit: type=1326 audit(1723437917.160:1615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12782 comm="syz.0.3089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7ffbf5b59 code=0x7ffc0000 [ 206.302158][ T29] audit: type=1326 audit(1723437917.160:1616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12782 comm="syz.0.3089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7fb7ffbf5b59 code=0x7ffc0000 [ 206.325615][ T29] audit: type=1326 audit(1723437917.160:1617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12782 comm="syz.0.3089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7ffbf5b59 code=0x7ffc0000 [ 206.351092][ T29] audit: type=1400 audit(1723437917.190:1618): avc: denied { create } for pid=12784 comm="syz.0.3090" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 206.370865][ T29] audit: type=1400 audit(1723437917.190:1619): avc: denied { setopt } for pid=12784 comm="syz.0.3090" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 206.457792][T12805] Cannot find set identified by id 0 to match [ 206.486635][T12811] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3099'. [ 206.523605][T12819] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=123 sclass=netlink_route_socket pid=12819 comm=syz.3.3103 [ 206.563374][T12821] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 206.570061][T12821] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 206.577830][T12821] vhci_hcd vhci_hcd.0: Device attached [ 206.593483][T12826] usbip_core: unknown command [ 206.598228][T12826] vhci_hcd: unknown pdu 3281309441 [ 206.603541][T12826] usbip_core: unknown command [ 206.621966][ T3180] vhci_hcd: stop threads [ 206.626366][ T3180] vhci_hcd: release socket [ 206.630826][ T3180] vhci_hcd: disconnect device [ 206.939657][ C0] vcan0: j1939_tp_rxtimer: 0xffff88810f54d200: rx timeout, send abort [ 206.947966][ C0] vcan0: j1939_tp_rxtimer: 0xffff88810f54cc00: rx timeout, send abort [ 206.956295][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88810f54d200: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 206.970659][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88810f54cc00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 206.985581][T12872] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3122'. [ 206.985876][T12871] loop4: detected capacity change from 0 to 512 [ 207.000801][T12872] IPv6: addrconf: prefix option has invalid lifetime [ 207.003856][T12871] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.3123: bg 0: block 393: padding at end of block bitmap is not set [ 207.023316][T12871] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 207.033014][T12871] EXT4-fs (loop4): 2 truncates cleaned up [ 207.039171][T12871] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 207.060565][T10638] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 207.077214][T12875] loop4: detected capacity change from 0 to 512 [ 207.098699][T12875] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 207.106855][T12875] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 207.115108][T12875] System zones: 0-1, 15-15, 18-18, 34-34 [ 207.120950][T12875] EXT4-fs (loop4): orphan cleanup on readonly fs [ 207.127564][T12875] EXT4-fs warning (device loop4): ext4_enable_quotas:7062: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 207.142218][T12875] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 207.149648][T12875] EXT4-fs error (device loop4): ext4_orphan_get:1420: comm syz.4.3124: bad orphan inode 16 [ 207.161737][T12875] ext4_test_bit(bit=15, block=18) = 1 [ 207.167193][T12875] is_bad_inode(inode)=0 [ 207.171363][T12875] NEXT_ORPHAN(inode)=0 [ 207.175551][T12875] max_ino=32 [ 207.178747][T12875] i_nlink=2 [ 207.182269][T12875] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 207.197861][T12875] devpts: called with bogus options [ 207.209110][T10638] EXT4-fs error (device loop4): ext4_ext_check_inode:520: inode #13: comm syz-executor: pblk 0 bad header/extent: invalid magic - magic f300, entries 1, max 4(0), depth 0(0) [ 207.226876][T10638] EXT4-fs error (device loop4): ext4_ext_check_inode:520: inode #13: comm syz-executor: pblk 0 bad header/extent: invalid magic - magic f300, entries 1, max 4(0), depth 0(0) [ 207.252980][T12885] pim6reg1: entered promiscuous mode [ 207.253071][T12691] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 207.258352][T12885] pim6reg1: entered allmulticast mode [ 207.403056][T12901] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3135'. [ 207.423694][T12901] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3135'. [ 207.483322][ T40] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.499742][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 207.518525][T12885] netlink: 'syz.3.3129': attribute type 32 has an invalid length. [ 207.526421][T12885] netlink: 664 bytes leftover after parsing attributes in process `syz.3.3129'. [ 207.554217][ T40] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.567806][T12918] tap0: tun_chr_ioctl cmd 1074025677 [ 207.573533][T12918] tap0: linktype set to 825 [ 207.614076][ T40] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.679096][ T40] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.733475][T12919] chnl_net:caif_netlink_parms(): no params data found [ 207.807052][T12919] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.814377][T12919] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.822129][T12919] bridge_slave_0: entered allmulticast mode [ 207.830676][T12919] bridge_slave_0: entered promiscuous mode [ 207.841078][T12919] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.848319][T12919] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.856149][T12919] bridge_slave_1: entered allmulticast mode [ 207.862920][T12919] bridge_slave_1: entered promiscuous mode [ 207.945838][T12961] loop3: detected capacity change from 0 to 128 [ 207.952398][T12961] vfat: Unknown parameter '00000000000000000000373' [ 207.998620][T12965] tmpfs: Bad value for 'mpol' [ 208.011915][T12919] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 208.034848][ T40] bridge_slave_1: left allmulticast mode [ 208.040811][ T40] bridge_slave_1: left promiscuous mode [ 208.046789][ T40] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.085254][ T40] bridge_slave_0: left allmulticast mode [ 208.090962][ T40] bridge_slave_0: left promiscuous mode [ 208.096604][ T40] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.173659][T12969] FAULT_INJECTION: forcing a failure. [ 208.173659][T12969] name failslab, interval 1, probability 0, space 0, times 0 [ 208.186496][T12969] CPU: 0 PID: 12969 Comm: syz.2.3157 Not tainted 6.10.0-syzkaller-05505-gb1bc554e009e #0 [ 208.196300][T12969] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 208.206438][T12969] Call Trace: [ 208.209698][T12969] [ 208.212632][T12969] dump_stack_lvl+0xf2/0x150 [ 208.217270][T12969] dump_stack+0x15/0x20 [ 208.221404][T12969] should_fail_ex+0x229/0x230 [ 208.226129][T12969] ? process_preds+0x342/0x2a60 [ 208.231016][T12969] __should_failslab+0x92/0xa0 [ 208.235842][T12969] should_failslab+0x9/0x20 [ 208.240368][T12969] __kmalloc_noprof+0xa5/0x370 [ 208.245125][T12969] process_preds+0x342/0x2a60 [ 208.249796][T12969] ? mntput+0x49/0x70 [ 208.253838][T12969] ? path_openat+0x19bc/0x1f10 [ 208.258582][T12969] ? _parse_integer_limit+0x167/0x180 [ 208.263942][T12969] ? avc_has_perm_noaudit+0x1cc/0x210 [ 208.269326][T12969] ? ftrace_profile_set_filter+0xbb/0x180 [ 208.275032][T12969] ? __should_failslab+0x92/0xa0 [ 208.279979][T12969] ? should_failslab+0x9/0x20 [ 208.284682][T12969] ftrace_profile_set_filter+0xd9/0x180 [ 208.290293][T12969] perf_ioctl+0xe75/0x15b0 [ 208.294730][T12969] ? ioctl_has_perm+0x2bd/0x2e0 [ 208.299589][T12969] ? do_vfs_ioctl+0x99e/0x1560 [ 208.304351][T12969] ? selinux_file_ioctl+0x2f7/0x380 [ 208.309562][T12969] ? __fget_files+0x1da/0x210 [ 208.314221][T12969] ? __pfx_perf_ioctl+0x10/0x10 [ 208.319060][T12969] __se_sys_ioctl+0xd3/0x150 [ 208.323661][T12969] __x64_sys_ioctl+0x43/0x50 [ 208.328321][T12969] x64_sys_call+0x15cc/0x2d60 [ 208.333093][T12969] do_syscall_64+0xc9/0x1c0 [ 208.337582][T12969] ? clear_bhb_loop+0x55/0xb0 [ 208.342324][T12969] ? clear_bhb_loop+0x55/0xb0 [ 208.346985][T12969] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.352959][T12969] RIP: 0033:0x7f2134f25b59 [ 208.357351][T12969] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 208.376976][T12969] RSP: 002b:00007f21341a7048 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 208.385376][T12969] RAX: ffffffffffffffda RBX: 00007f21350b3f60 RCX: 00007f2134f25b59 [ 208.393436][T12969] RDX: 0000000020000000 RSI: 0000000040082406 RDI: 0000000000000005 [ 208.401397][T12969] RBP: 00007f21341a70a0 R08: 0000000000000000 R09: 0000000000000000 [ 208.409368][T12969] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 208.417328][T12969] R13: 000000000000000b R14: 00007f21350b3f60 R15: 00007fffa743c408 [ 208.425293][T12969] [ 208.428539][ T40] bond0 (unregistering): (slave geneve1): Releasing backup interface [ 208.491507][ T40] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 208.509939][ T40] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 208.520781][ T40] bond0 (unregistering): Released all slaves [ 208.532282][T12965] netlink: 'syz.1.3156': attribute type 10 has an invalid length. [ 208.541121][T12965] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.548412][T12965] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.570583][T12965] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.577755][T12965] bridge0: port 2(bridge_slave_1) entered forwarding state [ 208.585031][T12965] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.592144][T12965] bridge0: port 1(bridge_slave_0) entered forwarding state [ 208.601570][T12965] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 208.616826][T12919] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 208.639688][ T40] tipc: Disabling bearer [ 208.647125][ T40] tipc: Left network mode [ 208.662575][T12919] team0: Port device team_slave_0 added [ 208.669267][T12919] team0: Port device team_slave_1 added [ 208.687448][ T40] hsr_slave_0: left promiscuous mode [ 208.693230][ T40] hsr_slave_1: left promiscuous mode [ 208.699359][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 208.706866][ T40] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 208.716350][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 208.723996][ T40] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 208.737770][ T40] veth1_macvtap: left promiscuous mode [ 208.743379][ T40] veth0_macvtap: left promiscuous mode [ 208.749097][ T40] veth1_vlan: left promiscuous mode [ 208.754399][ T40] veth0_vlan: left promiscuous mode [ 208.755522][T13000] program syz.3.3169 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 208.790228][T13005] loop3: detected capacity change from 0 to 512 [ 208.868529][ T40] team0 (unregistering): Port device team_slave_1 removed [ 208.880456][ T40] team0 (unregistering): Port device team_slave_0 removed [ 208.924658][T12995] vlan2: entered promiscuous mode [ 208.929707][T12995] batadv0: entered promiscuous mode [ 208.935136][T12995] vlan2: entered allmulticast mode [ 208.940265][T12995] batadv0: entered allmulticast mode [ 208.949574][T12995] batadv0: left allmulticast mode [ 208.954685][T12995] batadv0: left promiscuous mode [ 208.969789][T12919] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 208.973346][T13009] loop3: detected capacity change from 0 to 512 [ 208.976900][T12919] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 209.008980][T12919] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 209.021003][T12919] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 209.027979][T12919] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 209.053970][T12919] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 209.058291][T13009] loop3: detected capacity change from 0 to 8192 [ 209.095769][T12919] hsr_slave_0: entered promiscuous mode [ 209.103615][T12919] hsr_slave_1: entered promiscuous mode [ 209.119566][T13014] netlink: 'syz.1.3173': attribute type 4 has an invalid length. [ 209.268332][T13042] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3184'. [ 209.289145][T13046] netlink: 'syz.1.3185': attribute type 33 has an invalid length. [ 209.342262][T13055] loop3: detected capacity change from 0 to 512 [ 209.380765][T13058] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.388005][T13058] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.426666][T12919] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 209.445648][T12919] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 209.463265][T12919] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 209.472319][T12919] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 209.540938][T12919] 8021q: adding VLAN 0 to HW filter on device bond0 [ 209.564655][T12919] 8021q: adding VLAN 0 to HW filter on device team0 [ 209.575102][ T5828] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.582336][ T5828] bridge0: port 1(bridge_slave_0) entered forwarding state [ 209.596246][T13078] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 209.610521][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.617660][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 209.656110][T13083] program syz.3.3195 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 209.705790][T12919] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 209.718370][T13092] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3196'. [ 209.842466][T12919] veth0_vlan: entered promiscuous mode [ 209.852847][T12919] veth1_vlan: entered promiscuous mode [ 209.877539][T12919] veth0_macvtap: entered promiscuous mode [ 209.886590][T12919] veth1_macvtap: entered promiscuous mode [ 209.901788][T12919] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 209.912397][T12919] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.922333][T12919] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 209.932886][T12919] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.942838][T12919] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 209.953427][T12919] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.963279][T12919] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 209.973838][T12919] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.984272][T12919] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 209.994772][T12919] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.004671][T12919] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 210.015095][T12919] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.024977][T12919] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 210.035456][T12919] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.045257][T12919] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 210.055775][T12919] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.069220][T12919] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 210.077776][T12919] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 210.088505][T12919] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.098350][T12919] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 210.108873][T12919] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.118800][T12919] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 210.129319][T12919] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.139223][T12919] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 210.149672][T12919] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.159549][T12919] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 210.169974][T12919] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.179828][T12919] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 210.190357][T12919] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.200169][T12919] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 210.210586][T12919] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.220615][T12919] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 210.231130][T12919] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.252007][T12919] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 210.259582][T13136] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3210'. [ 210.279188][T12919] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.288024][T12919] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.297153][T12919] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.305998][T12919] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.364363][T13157] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3142'. [ 210.418364][T13161] netlink: 'syz.1.3218': attribute type 10 has an invalid length. [ 210.451439][T13161] team0: Failed to send options change via netlink (err -105) [ 210.459786][T13161] team0: Port device netdevsim1 added [ 210.472789][T13171] netlink: 'syz.1.3218': attribute type 10 has an invalid length. [ 210.477644][T13170] loop4: detected capacity change from 0 to 2048 [ 210.489170][T13171] team0: Failed to send options change via netlink (err -105) [ 210.501426][T13171] team0: Failed to send port change of device netdevsim1 via netlink (err -105) [ 210.510966][T13171] team0: Port device netdevsim1 removed [ 210.518898][T13171] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 210.528253][T13170] loop4: p1 < > p3 [ 210.532922][T13170] loop4: p3 size 134217728 extends beyond EOD, truncated [ 210.539041][T13159] bond1: entered promiscuous mode [ 210.545136][T13159] bond1: entered allmulticast mode [ 210.563160][T13159] 8021q: adding VLAN 0 to HW filter on device bond1 [ 210.619570][T13181] loop4: detected capacity change from 0 to 2048 [ 210.626820][T13181] EXT4-fs: Mount option(s) incompatible with ext2 [ 210.710031][T13191] loop4: detected capacity change from 0 to 512 [ 210.747207][T13191] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 210.780790][T13191] ext4 filesystem being mounted at /3/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 210.810046][T13212] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3233'. [ 210.819903][T13181] EXT4-fs (loop4): shut down requested (0) [ 210.832173][T13208] netlink: 'syz.0.3231': attribute type 10 has an invalid length. [ 210.832440][T13181] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=16 [ 210.849057][T13181] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=16 [ 210.858627][T13181] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=16 [ 210.862396][T13208] team0: Failed to send options change via netlink (err -105) [ 210.874968][T13208] team0: Port device netdevsim1 added [ 210.894838][T13208] netlink: 'syz.0.3231': attribute type 10 has an invalid length. [ 210.904936][T13214] vhci_hcd: invalid port number 0 [ 210.912666][T13208] team0: Failed to send options change via netlink (err -105) [ 210.923635][T13208] team0: Failed to send port change of device netdevsim1 via netlink (err -105) [ 210.933623][T13208] team0: Port device netdevsim1 removed [ 210.933815][T12919] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 210.943235][T13208] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 210.984918][T13224] netlink: 'syz.0.3237': attribute type 4 has an invalid length. [ 211.073328][T13228] netlink: 'syz.0.3239': attribute type 10 has an invalid length. [ 211.081321][T13228] team0: entered promiscuous mode [ 211.086435][T13228] team_slave_0: entered promiscuous mode [ 211.092198][T13228] team_slave_1: entered promiscuous mode [ 211.098789][T13228] bridge0: port 3(team0) entered blocking state [ 211.105290][T13228] bridge0: port 3(team0) entered disabled state [ 211.111869][T13228] team0: entered allmulticast mode [ 211.117062][T13228] team_slave_0: entered allmulticast mode [ 211.122952][T13228] team_slave_1: entered allmulticast mode [ 211.130036][T13228] bridge0: port 3(team0) entered blocking state [ 211.136342][T13228] bridge0: port 3(team0) entered forwarding state [ 211.170439][ T29] kauditd_printk_skb: 214 callbacks suppressed [ 211.170474][ T29] audit: type=1400 audit(1723437922.090:1833): avc: denied { unmount } for pid=12461 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 211.204318][T13248] vhci_hcd: invalid port number 0 [ 211.225527][ T29] audit: type=1400 audit(1723437922.140:1834): avc: denied { getopt } for pid=13253 comm="syz.3.3250" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 211.263173][T13260] loop3: detected capacity change from 0 to 512 [ 211.268378][T13264] FAULT_INJECTION: forcing a failure. [ 211.268378][T13264] name failslab, interval 1, probability 0, space 0, times 0 [ 211.282116][T13264] CPU: 1 PID: 13264 Comm: syz.0.3255 Not tainted 6.10.0-syzkaller-05505-gb1bc554e009e #0 [ 211.291945][T13264] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 211.302058][T13264] Call Trace: [ 211.305332][T13264] [ 211.308255][T13264] dump_stack_lvl+0xf2/0x150 [ 211.312837][T13264] dump_stack+0x15/0x20 [ 211.316981][T13264] should_fail_ex+0x229/0x230 [ 211.321713][T13264] ? __alloc_skb+0x10b/0x310 [ 211.326292][T13264] __should_failslab+0x92/0xa0 [ 211.331053][T13264] should_failslab+0x9/0x20 [ 211.335585][T13264] kmem_cache_alloc_node_noprof+0x51/0x2b0 [ 211.341386][T13264] __alloc_skb+0x10b/0x310 [ 211.345839][T13264] netlink_alloc_large_skb+0xad/0xe0 [ 211.351157][T13264] netlink_sendmsg+0x3b4/0x6e0 [ 211.355939][T13264] ? __pfx_netlink_sendmsg+0x10/0x10 [ 211.361234][T13264] __sock_sendmsg+0x140/0x180 [ 211.365911][T13264] ____sys_sendmsg+0x312/0x410 [ 211.370758][T13264] __sys_sendmsg+0x1e9/0x280 [ 211.375357][T13264] __x64_sys_sendmsg+0x46/0x50 [ 211.380188][T13264] x64_sys_call+0x2689/0x2d60 [ 211.384936][T13264] do_syscall_64+0xc9/0x1c0 [ 211.389448][T13264] ? clear_bhb_loop+0x55/0xb0 [ 211.394218][T13264] ? clear_bhb_loop+0x55/0xb0 [ 211.398900][T13264] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.404812][T13264] RIP: 0033:0x7fb7ffbf5b59 [ 211.409232][T13264] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 211.428910][T13264] RSP: 002b:00007fb7fee77048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 211.437338][T13264] RAX: ffffffffffffffda RBX: 00007fb7ffd83f60 RCX: 00007fb7ffbf5b59 [ 211.445355][T13264] RDX: 0000000000000000 RSI: 0000000020000180 RDI: 0000000000000003 [ 211.453332][T13264] RBP: 00007fb7fee770a0 R08: 0000000000000000 R09: 0000000000000000 [ 211.461368][T13264] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 211.469325][T13264] R13: 000000000000000b R14: 00007fb7ffd83f60 R15: 00007ffe74e80068 [ 211.477309][T13264] [ 211.487881][ T29] audit: type=1400 audit(1723437922.410:1835): avc: denied { mounton } for pid=13259 comm="syz.3.3253" path="/129/bus" dev="tmpfs" ino=726 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 211.518781][ T29] audit: type=1400 audit(1723437922.440:1836): avc: denied { unmount } for pid=11282 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 211.580672][T13279] FAULT_INJECTION: forcing a failure. [ 211.580672][T13279] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 211.593793][T13279] CPU: 1 PID: 13279 Comm: syz.4.3260 Not tainted 6.10.0-syzkaller-05505-gb1bc554e009e #0 [ 211.603670][T13279] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 211.613755][T13279] Call Trace: [ 211.615712][ T29] audit: type=1400 audit(1723437922.520:1837): avc: denied { ioctl } for pid=13282 comm="syz.0.3262" path="socket:[46500]" dev="sockfs" ino=46500 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 211.617023][T13279] [ 211.617031][T13279] dump_stack_lvl+0xf2/0x150 [ 211.649336][T13279] dump_stack+0x15/0x20 [ 211.653516][T13279] should_fail_ex+0x229/0x230 [ 211.658353][T13279] should_fail+0xb/0x10 [ 211.662541][T13279] should_fail_usercopy+0x1a/0x20 [ 211.667558][T13279] _copy_to_user+0x1e/0xa0 [ 211.672003][T13279] simple_read_from_buffer+0xa0/0x110 [ 211.677523][T13279] proc_fail_nth_read+0xfc/0x140 [ 211.682471][T13279] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 211.688050][T13279] vfs_read+0x1a2/0x6e0 [ 211.692224][T13279] ? __rcu_read_unlock+0x4e/0x70 [ 211.697155][T13279] ? __fget_files+0x1da/0x210 [ 211.701824][T13279] ksys_read+0xeb/0x1b0 [ 211.706067][T13279] __x64_sys_read+0x42/0x50 [ 211.710559][T13279] x64_sys_call+0x27d3/0x2d60 [ 211.715300][T13279] do_syscall_64+0xc9/0x1c0 [ 211.719856][T13279] ? clear_bhb_loop+0x55/0xb0 [ 211.724556][T13279] ? clear_bhb_loop+0x55/0xb0 [ 211.729220][T13279] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.735112][T13279] RIP: 0033:0x7f1fb872463c [ 211.739539][T13279] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8c 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 1f 8d 02 00 48 [ 211.759140][T13279] RSP: 002b:00007f1fb79a7040 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 211.767542][T13279] RAX: ffffffffffffffda RBX: 00007f1fb88b3f60 RCX: 00007f1fb872463c [ 211.775515][T13279] RDX: 000000000000000f RSI: 00007f1fb79a70b0 RDI: 0000000000000005 [ 211.783499][T13279] RBP: 00007f1fb79a70a0 R08: 0000000000000000 R09: 0000000000000000 [ 211.791462][T13279] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000001 [ 211.799423][T13279] R13: 000000000000000b R14: 00007f1fb88b3f60 R15: 00007fff7e0eb678 [ 211.807419][T13279] [ 211.811357][T13289] __nla_validate_parse: 2 callbacks suppressed [ 211.811368][T13289] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3263'. [ 211.918683][ T29] audit: type=1400 audit(1723437922.840:1838): avc: denied { write } for pid=13294 comm="syz.4.3266" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 211.938160][ T29] audit: type=1400 audit(1723437922.840:1839): avc: denied { setopt } for pid=13294 comm="syz.4.3266" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 211.961971][ T29] audit: type=1400 audit(1723437922.870:1840): avc: denied { bind } for pid=13317 comm="syz.3.3273" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 212.013735][ T29] audit: type=1400 audit(1723437922.930:1841): avc: denied { execute } for pid=13331 comm="syz.2.3278" path="/dev/snd/timer" dev="devtmpfs" ino=229 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 212.083174][ T29] audit: type=1400 audit(1723437923.000:1842): avc: denied { connect } for pid=13343 comm="syz.2.3284" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 212.120587][T13347] loop3: detected capacity change from 0 to 1024 [ 212.346483][T13365] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3292'. [ 212.483081][T13371] loop3: detected capacity change from 0 to 128 [ 212.489787][T13371] vfat: Unknown parameter '/dev/loop#' [ 212.546021][T13381] FAULT_INJECTION: forcing a failure. [ 212.546021][T13381] name failslab, interval 1, probability 0, space 0, times 0 [ 212.558714][T13381] CPU: 1 PID: 13381 Comm: syz.0.3299 Not tainted 6.10.0-syzkaller-05505-gb1bc554e009e #0 [ 212.568702][T13381] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 212.578748][T13381] Call Trace: [ 212.582068][T13381] [ 212.585033][T13381] dump_stack_lvl+0xf2/0x150 [ 212.589610][T13381] dump_stack+0x15/0x20 [ 212.593766][T13381] should_fail_ex+0x229/0x230 [ 212.598513][T13381] ? copy_splice_read+0xc7/0x5d0 [ 212.603442][T13381] __should_failslab+0x92/0xa0 [ 212.608322][T13381] should_failslab+0x9/0x20 [ 212.612839][T13381] __kmalloc_noprof+0xa5/0x370 [ 212.617608][T13381] copy_splice_read+0xc7/0x5d0 [ 212.622367][T13381] ? __pfx_copy_splice_read+0x10/0x10 [ 212.627728][T13381] splice_direct_to_actor+0x26c/0x670 [ 212.633213][T13381] ? __pfx_direct_splice_actor+0x10/0x10 [ 212.638834][T13381] do_splice_direct+0xd7/0x150 [ 212.643596][T13381] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 212.649622][T13381] do_sendfile+0x3ab/0x950 [ 212.654036][T13381] __x64_sys_sendfile64+0x110/0x150 [ 212.659354][T13381] x64_sys_call+0xed5/0x2d60 [ 212.663933][T13381] do_syscall_64+0xc9/0x1c0 [ 212.668541][T13381] ? clear_bhb_loop+0x55/0xb0 [ 212.673242][T13381] ? clear_bhb_loop+0x55/0xb0 [ 212.677935][T13381] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.683845][T13381] RIP: 0033:0x7fb7ffbf5b59 [ 212.688247][T13381] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 212.707889][T13381] RSP: 002b:00007fb7fee77048 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 212.716289][T13381] RAX: ffffffffffffffda RBX: 00007fb7ffd83f60 RCX: 00007fb7ffbf5b59 [ 212.724310][T13381] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000005 [ 212.732336][T13381] RBP: 00007fb7fee770a0 R08: 0000000000000000 R09: 0000000000000000 [ 212.740357][T13381] R10: 0000000080000000 R11: 0000000000000246 R12: 0000000000000002 [ 212.748322][T13381] R13: 000000000000000b R14: 00007fb7ffd83f60 R15: 00007ffe74e80068 [ 212.756296][T13381] [ 212.828637][T13402] loop3: detected capacity change from 0 to 2048 [ 212.856165][T13407] loop4: detected capacity change from 0 to 512 [ 212.867911][T13407] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 212.885565][T13407] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.3307: bg 0: block 64: padding at end of block bitmap is not set [ 212.900384][T13407] EXT4-fs error (device loop4): ext4_acquire_dquot:6844: comm syz.4.3307: Failed to acquire dquot type 0 [ 212.912008][T13407] EXT4-fs (loop4): 1 truncate cleaned up [ 212.921653][T13407] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 212.946833][T12919] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 212.988879][T13426] loop4: detected capacity change from 0 to 512 [ 213.000734][T13426] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 213.017203][T13426] EXT4-fs error (device loop4): ext4_ext_check_inode:520: inode #2: comm syz.4.3314: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 213.037078][T13435] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3317'. [ 213.073443][T13426] EXT4-fs (loop4): get root inode failed [ 213.079198][T13426] EXT4-fs (loop4): mount failed [ 213.112739][T13426] loop4: detected capacity change from 0 to 128 [ 213.112933][T13451] sctp: [Deprecated]: syz.2.3320 (pid 13451) Use of int in maxseg socket option. [ 213.112933][T13451] Use struct sctp_assoc_value instead [ 213.121568][T13426] vfat: Unknown parameter '18446744073709551615' [ 213.188410][T13464] siw: device registration error -23 [ 213.258197][T13472] validate_nla: 2 callbacks suppressed [ 213.258209][T13472] netlink: 'syz.4.3328': attribute type 4 has an invalid length. [ 213.324470][T13476] netlink: 'syz.4.3329': attribute type 10 has an invalid length. [ 213.351709][T13476] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 213.374302][T13476] FAULT_INJECTION: forcing a failure. [ 213.374302][T13476] name failslab, interval 1, probability 0, space 0, times 0 [ 213.386953][T13476] CPU: 0 PID: 13476 Comm: syz.4.3329 Not tainted 6.10.0-syzkaller-05505-gb1bc554e009e #0 [ 213.396818][T13476] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 213.406865][T13476] Call Trace: [ 213.410131][T13476] [ 213.413060][T13476] dump_stack_lvl+0xf2/0x150 [ 213.417708][T13476] dump_stack+0x15/0x20 [ 213.421943][T13476] should_fail_ex+0x229/0x230 [ 213.426644][T13476] ? __alloc_skb+0x10b/0x310 [ 213.431233][T13476] __should_failslab+0x92/0xa0 [ 213.435993][T13476] should_failslab+0x9/0x20 [ 213.440494][T13476] kmem_cache_alloc_node_noprof+0x51/0x2b0 [ 213.446375][T13476] __alloc_skb+0x10b/0x310 [ 213.450797][T13476] inet6_rt_notify+0xa5/0x1c0 [ 213.455478][T13476] fib6_del+0x75e/0x880 [ 213.459714][T13476] ? fib6_ifdown+0x206/0x330 [ 213.464308][T13476] fib6_clean_node+0x14c/0x250 [ 213.469068][T13476] fib6_walk_continue+0x39e/0x440 [ 213.474120][T13476] fib6_walk+0xc2/0x180 [ 213.478279][T13476] ? __pfx_fib6_ifdown+0x10/0x10 [ 213.483296][T13476] fib6_clean_all+0xbf/0x140 [ 213.487889][T13476] ? __pfx_fib6_clean_node+0x10/0x10 [ 213.493181][T13476] ? __pfx_fib6_ifdown+0x10/0x10 [ 213.498205][T13476] rt6_disable_ip+0xab/0x5b0 [ 213.502856][T13476] ? save_fpregs_to_fpstate+0x102/0x160 [ 213.508432][T13476] addrconf_ifdown+0xa2/0xf20 [ 213.513120][T13476] ? __schedule+0x5fa/0x950 [ 213.517651][T13476] addrconf_notify+0x2ff/0x950 [ 213.522452][T13476] ? ip6mr_device_event+0x128/0x150 [ 213.527773][T13476] ? __pfx_addrconf_notify+0x10/0x10 [ 213.533061][T13476] raw_notifier_call_chain+0x6f/0x1d0 [ 213.538481][T13476] call_netdevice_notifiers_info+0xae/0x100 [ 213.544491][T13476] __dev_notify_flags+0xff/0x1a0 [ 213.549429][T13476] dev_change_flags+0xab/0xd0 [ 213.554156][T13476] do_setlink+0x841/0x2490 [ 213.558572][T13476] ? __nla_validate_parse+0x365/0x1e30 [ 213.564044][T13476] ? __nla_validate_parse+0x1796/0x1e30 [ 213.569672][T13476] ? should_fail_ex+0xd7/0x230 [ 213.574478][T13476] ? __nla_parse+0x40/0x60 [ 213.578913][T13476] ? validate_linkmsg+0x526/0x5a0 [ 213.583935][T13476] rtnl_newlink+0x11a3/0x1690 [ 213.588660][T13476] ? security_capable+0x64/0x80 [ 213.593505][T13476] ? ns_capable+0x7d/0xb0 [ 213.597891][T13476] ? __pfx_rtnl_newlink+0x10/0x10 [ 213.602982][T13476] rtnetlink_rcv_msg+0x6aa/0x710 [ 213.608024][T13476] ? ref_tracker_free+0x3a5/0x410 [ 213.613050][T13476] ? __dev_queue_xmit+0x161/0x1fe0 [ 213.618212][T13476] netlink_rcv_skb+0x12c/0x230 [ 213.623096][T13476] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 213.628622][T13476] rtnetlink_rcv+0x1c/0x30 [ 213.633042][T13476] netlink_unicast+0x593/0x670 [ 213.637811][T13476] netlink_sendmsg+0x5cc/0x6e0 [ 213.642644][T13476] ? __pfx_netlink_sendmsg+0x10/0x10 [ 213.648050][T13476] __sock_sendmsg+0x140/0x180 [ 213.652733][T13476] ____sys_sendmsg+0x312/0x410 [ 213.657580][T13476] __sys_sendmsg+0x1e9/0x280 [ 213.662328][T13476] __x64_sys_sendmsg+0x46/0x50 [ 213.667093][T13476] x64_sys_call+0x2689/0x2d60 [ 213.671809][T13476] do_syscall_64+0xc9/0x1c0 [ 213.676375][T13476] ? clear_bhb_loop+0x55/0xb0 [ 213.681045][T13476] ? clear_bhb_loop+0x55/0xb0 [ 213.685713][T13476] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.691616][T13476] RIP: 0033:0x7f1fb8725b59 [ 213.696031][T13476] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 213.715664][T13476] RSP: 002b:00007f1fb79a7048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 213.724108][T13476] RAX: ffffffffffffffda RBX: 00007f1fb88b3f60 RCX: 00007f1fb8725b59 [ 213.732071][T13476] RDX: 0000000000000000 RSI: 0000000020000600 RDI: 0000000000000006 [ 213.740105][T13476] RBP: 00007f1fb79a70a0 R08: 0000000000000000 R09: 0000000000000000 [ 213.748120][T13476] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 213.756125][T13476] R13: 000000000000000b R14: 00007f1fb88b3f60 R15: 00007fff7e0eb678 [ 213.764108][T13476] [ 213.828343][T13476] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 213.838365][T13489] loop3: detected capacity change from 0 to 256 [ 213.847405][T13476] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 213.882745][T13489] netlink: 'syz.3.3334': attribute type 4 has an invalid length. [ 213.891306][T13489] A link change request failed with some changes committed already. Interface batadv_slave_1 may have been left with an inconsistent configuration, please check. [ 214.075642][T13513] FAULT_INJECTION: forcing a failure. [ 214.075642][T13513] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 214.088762][T13513] CPU: 0 PID: 13513 Comm: syz.4.3342 Not tainted 6.10.0-syzkaller-05505-gb1bc554e009e #0 [ 214.098573][T13513] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 214.108621][T13513] Call Trace: [ 214.111894][T13513] [ 214.114909][T13513] dump_stack_lvl+0xf2/0x150 [ 214.119531][T13513] dump_stack+0x15/0x20 [ 214.123737][T13513] should_fail_ex+0x229/0x230 [ 214.128417][T13513] should_fail+0xb/0x10 [ 214.132572][T13513] should_fail_usercopy+0x1a/0x20 [ 214.137594][T13513] _copy_to_user+0x1e/0xa0 [ 214.142016][T13513] simple_read_from_buffer+0xa0/0x110 [ 214.147459][T13513] proc_fail_nth_read+0xfc/0x140 [ 214.152402][T13513] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 214.157958][T13513] vfs_read+0x1a2/0x6e0 [ 214.160413][T13518] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3344'. [ 214.162104][T13513] ? sock_common_getsockopt+0x5b/0x70 [ 214.174572][T13515] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3343'. [ 214.176356][T13513] ? do_sock_getsockopt+0x121/0x1a0 [ 214.188308][T13515] xt_hashlimit: max too large, truncated to 1048576 [ 214.190461][T13513] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 214.197821][T13518] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 214.202891][T13513] ksys_read+0xeb/0x1b0 [ 214.202915][T13513] __x64_sys_read+0x42/0x50 [ 214.202932][T13513] x64_sys_call+0x27d3/0x2d60 [ 214.223597][T13513] do_syscall_64+0xc9/0x1c0 [ 214.228096][T13513] ? clear_bhb_loop+0x55/0xb0 [ 214.232841][T13513] ? clear_bhb_loop+0x55/0xb0 [ 214.237550][T13513] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.243524][T13513] RIP: 0033:0x7f1fb872463c [ 214.248090][T13513] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8c 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 1f 8d 02 00 48 [ 214.267711][T13513] RSP: 002b:00007f1fb79a7040 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 214.276183][T13513] RAX: ffffffffffffffda RBX: 00007f1fb88b3f60 RCX: 00007f1fb872463c [ 214.284146][T13513] RDX: 000000000000000f RSI: 00007f1fb79a70b0 RDI: 0000000000000005 [ 214.292109][T13513] RBP: 00007f1fb79a70a0 R08: 0000000000000000 R09: 0000000000000000 [ 214.300074][T13513] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 214.308076][T13513] R13: 000000000000000b R14: 00007f1fb88b3f60 R15: 00007fff7e0eb678 [ 214.316088][T13513] [ 214.355474][T13517] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 214.372947][T13528] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3348'. [ 214.386590][T13528] futex_wake_op: syz.0.3348 tries to shift op by 32; fix this program [ 214.430013][T13537] FAULT_INJECTION: forcing a failure. [ 214.430013][T13537] name failslab, interval 1, probability 0, space 0, times 0 [ 214.442708][T13537] CPU: 1 PID: 13537 Comm: syz.0.3351 Not tainted 6.10.0-syzkaller-05505-gb1bc554e009e #0 [ 214.452521][T13537] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 214.462633][T13537] Call Trace: [ 214.465948][T13537] [ 214.468865][T13537] dump_stack_lvl+0xf2/0x150 [ 214.473481][T13537] dump_stack+0x15/0x20 [ 214.477689][T13537] should_fail_ex+0x229/0x230 [ 214.482350][T13537] ? kstrdup_const+0x3e/0x50 [ 214.486922][T13537] __should_failslab+0x92/0xa0 [ 214.491684][T13537] should_failslab+0x9/0x20 [ 214.496209][T13537] kmalloc_node_track_caller_noprof+0xa6/0x380 [ 214.502425][T13537] kstrdup+0x3a/0x80 [ 214.506303][T13537] kstrdup_const+0x3e/0x50 [ 214.510722][T13537] __kernfs_new_node+0x41/0x380 [ 214.515558][T13537] ? rb_insert_color+0x6a/0x290 [ 214.520427][T13537] ? up_write+0x30/0xf0 [ 214.524656][T13537] ? kernfs_activate+0x256/0x270 [ 214.529655][T13537] kernfs_new_node+0xc8/0x140 [ 214.534331][T13537] kernfs_create_link+0x6c/0x120 [ 214.539258][T13537] sysfs_do_create_link_sd+0x6b/0xf0 [ 214.544592][T13537] sysfs_create_link+0x51/0x70 [ 214.549357][T13537] device_add_class_symlinks+0x159/0x1e0 [ 214.555042][T13537] device_add+0x36c/0x790 [ 214.559437][T13537] netdev_register_kobject+0x100/0x230 [ 214.564951][T13537] register_netdevice+0x910/0xe30 [ 214.569973][T13537] br_dev_newlink+0x25/0xe0 [ 214.574499][T13537] ? __pfx_br_dev_newlink+0x10/0x10 [ 214.579688][T13537] rtnl_newlink+0xeff/0x1690 [ 214.584363][T13537] ? security_capable+0x64/0x80 [ 214.589208][T13537] ? ns_capable+0x7d/0xb0 [ 214.593677][T13537] ? __pfx_rtnl_newlink+0x10/0x10 [ 214.598710][T13537] rtnetlink_rcv_msg+0x6aa/0x710 [ 214.603707][T13537] ? ref_tracker_free+0x3a5/0x410 [ 214.608864][T13537] ? __dev_queue_xmit+0x161/0x1fe0 [ 214.613980][T13537] netlink_rcv_skb+0x12c/0x230 [ 214.618813][T13537] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 214.624333][T13537] rtnetlink_rcv+0x1c/0x30 [ 214.628746][T13537] netlink_unicast+0x593/0x670 [ 214.633513][T13537] netlink_sendmsg+0x5cc/0x6e0 [ 214.638273][T13537] ? __pfx_netlink_sendmsg+0x10/0x10 [ 214.643551][T13537] __sock_sendmsg+0x140/0x180 [ 214.648357][T13537] ____sys_sendmsg+0x312/0x410 [ 214.653307][T13537] __sys_sendmsg+0x1e9/0x280 [ 214.657924][T13537] __x64_sys_sendmsg+0x46/0x50 [ 214.662715][T13537] x64_sys_call+0x2689/0x2d60 [ 214.667420][T13537] do_syscall_64+0xc9/0x1c0 [ 214.671951][T13537] ? clear_bhb_loop+0x55/0xb0 [ 214.676610][T13537] ? clear_bhb_loop+0x55/0xb0 [ 214.681351][T13537] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.687241][T13537] RIP: 0033:0x7fb7ffbf5b59 [ 214.691641][T13537] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 214.711252][T13537] RSP: 002b:00007fb7fee77048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 214.719667][T13537] RAX: ffffffffffffffda RBX: 00007fb7ffd83f60 RCX: 00007fb7ffbf5b59 [ 214.727623][T13537] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000003 [ 214.735575][T13537] RBP: 00007fb7fee770a0 R08: 0000000000000000 R09: 0000000000000000 [ 214.743567][T13537] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 214.751522][T13537] R13: 000000000000000b R14: 00007fb7ffd83f60 R15: 00007ffe74e80068 [ 214.759481][T13537] [ 215.238720][T13577] FAULT_INJECTION: forcing a failure. [ 215.238720][T13577] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 215.240454][T13575] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3361'. [ 215.251800][T13577] CPU: 1 PID: 13577 Comm: syz.4.3362 Not tainted 6.10.0-syzkaller-05505-gb1bc554e009e #0 [ 215.270531][T13577] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 215.280593][T13577] Call Trace: [ 215.283870][T13577] [ 215.286796][T13577] dump_stack_lvl+0xf2/0x150 [ 215.291381][T13577] dump_stack+0x15/0x20 [ 215.295539][T13577] should_fail_ex+0x229/0x230 [ 215.300213][T13577] should_fail+0xb/0x10 [ 215.304364][T13577] should_fail_usercopy+0x1a/0x20 [ 215.309374][T13577] _copy_to_user+0x1e/0xa0 [ 215.313790][T13577] simple_read_from_buffer+0xa0/0x110 [ 215.319157][T13577] proc_fail_nth_read+0xfc/0x140 [ 215.324135][T13577] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 215.329755][T13577] vfs_read+0x1a2/0x6e0 [ 215.333896][T13577] ? __rcu_read_unlock+0x4e/0x70 [ 215.338825][T13577] ? __fget_files+0x1da/0x210 [ 215.343495][T13577] ksys_read+0xeb/0x1b0 [ 215.347720][T13577] __x64_sys_read+0x42/0x50 [ 215.352359][T13577] x64_sys_call+0x27d3/0x2d60 [ 215.357035][T13577] do_syscall_64+0xc9/0x1c0 [ 215.361535][T13577] ? clear_bhb_loop+0x55/0xb0 [ 215.366204][T13577] ? clear_bhb_loop+0x55/0xb0 [ 215.370934][T13577] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.376832][T13577] RIP: 0033:0x7f1fb872463c [ 215.381239][T13577] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8c 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 1f 8d 02 00 48 [ 215.400906][T13577] RSP: 002b:00007f1fb79a7040 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 215.409361][T13577] RAX: ffffffffffffffda RBX: 00007f1fb88b3f60 RCX: 00007f1fb872463c [ 215.417318][T13577] RDX: 000000000000000f RSI: 00007f1fb79a70b0 RDI: 0000000000000005 [ 215.425275][T13577] RBP: 00007f1fb79a70a0 R08: 0000000000000000 R09: 0000000000000000 [ 215.433232][T13577] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 215.441204][T13577] R13: 000000000000000b R14: 00007f1fb88b3f60 R15: 00007fff7e0eb678 [ 215.449175][T13577] [ 215.553700][T13598] loop3: detected capacity change from 0 to 512 [ 215.562436][T13598] EXT4-fs: Ignoring removed i_version option [ 215.568652][T13598] ext4: Unknown parameter 'mask' [ 215.576501][T13596] loop4: detected capacity change from 0 to 128 [ 215.583235][T13596] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 215.630002][T13607] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 215.635968][T13606] loop3: detected capacity change from 0 to 512 [ 215.654549][T13606] EXT4-fs: test_dummy_encryption option not supported [ 215.679452][T13595] SELinux: truncated policydb string identifier [ 215.687992][T13595] SELinux: failed to load policy [ 215.759668][T12919] FAT-fs (loop4): error, fat_free_clusters: deleting FAT entry beyond EOF [ 215.768313][T12919] FAT-fs (loop4): Filesystem has been set read-only [ 215.777662][T12919] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 216.254513][T13688] loop3: detected capacity change from 0 to 128 [ 216.343313][T13703] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3408'. [ 216.424130][ T29] kauditd_printk_skb: 144 callbacks suppressed [ 216.424145][ T29] audit: type=1326 audit(1723437927.310:1985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13687 comm="syz.3.3402" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa67b0f5b59 code=0x0 [ 216.463801][ T29] audit: type=1400 audit(1723437927.380:1986): avc: denied { write } for pid=13705 comm="syz.2.3409" name="usbmon0" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 216.477267][T13706] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3409'. [ 216.531460][ T29] audit: type=1400 audit(1723437927.450:1987): avc: denied { connect } for pid=13710 comm="syz.2.3411" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 216.670059][T13727] netlink: 'syz.2.3418': attribute type 4 has an invalid length. [ 216.803211][T13740] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 216.820564][T13747] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3425'. [ 216.884481][T13759] FAULT_INJECTION: forcing a failure. [ 216.884481][T13759] name failslab, interval 1, probability 0, space 0, times 0 [ 216.897271][T13759] CPU: 0 PID: 13759 Comm: syz.4.3428 Not tainted 6.10.0-syzkaller-05505-gb1bc554e009e #0 [ 216.907093][T13759] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 216.917150][T13759] Call Trace: [ 216.920450][T13759] [ 216.923372][T13759] dump_stack_lvl+0xf2/0x150 [ 216.928025][T13759] dump_stack+0x15/0x20 [ 216.932166][T13759] should_fail_ex+0x229/0x230 [ 216.936907][T13759] ? __alloc_skb+0x10b/0x310 [ 216.941499][T13759] __should_failslab+0x92/0xa0 [ 216.946271][T13759] should_failslab+0x9/0x20 [ 216.950862][T13759] kmem_cache_alloc_node_noprof+0x51/0x2b0 [ 216.956676][T13759] __alloc_skb+0x10b/0x310 [ 216.961120][T13759] ? tcp_chrono_start+0xb5/0x100 [ 216.966160][T13759] tcp_stream_alloc_skb+0x2f/0x1e0 [ 216.971292][T13759] tcp_sendmsg_locked+0x977/0x2640 [ 216.976480][T13759] ? __pfx_tcp_sendmsg+0x10/0x10 [ 216.981410][T13759] tcp_sendmsg+0x30/0x50 [ 216.985761][T13759] inet_sendmsg+0x77/0xd0 [ 216.990208][T13759] __sock_sendmsg+0x102/0x180 [ 216.994872][T13759] ____sys_sendmsg+0x312/0x410 [ 216.999631][T13759] __sys_sendmmsg+0x269/0x500 [ 217.004380][T13759] __x64_sys_sendmmsg+0x57/0x70 [ 217.009224][T13759] x64_sys_call+0xa49/0x2d60 [ 217.013849][T13759] do_syscall_64+0xc9/0x1c0 [ 217.018344][T13759] ? clear_bhb_loop+0x55/0xb0 [ 217.023027][T13759] ? clear_bhb_loop+0x55/0xb0 [ 217.027779][T13759] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.033725][T13759] RIP: 0033:0x7f1fb8725b59 [ 217.038130][T13759] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 217.057771][T13759] RSP: 002b:00007f1fb79a7048 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 217.066225][T13759] RAX: ffffffffffffffda RBX: 00007f1fb88b3f60 RCX: 00007f1fb8725b59 [ 217.074186][T13759] RDX: 0000000000000003 RSI: 00000000200029c0 RDI: 0000000000000003 [ 217.082181][T13759] RBP: 00007f1fb79a70a0 R08: 0000000000000000 R09: 0000000000000000 [ 217.090216][T13759] R10: 0000000004008095 R11: 0000000000000246 R12: 0000000000000001 [ 217.098263][T13759] R13: 000000000000000b R14: 00007f1fb88b3f60 R15: 00007fff7e0eb678 [ 217.106232][T13759] [ 217.307897][T13779] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 217.592278][T13787] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 217.656114][ T29] audit: type=1400 audit(1723437928.580:1988): avc: denied { create } for pid=13793 comm="syz.0.3439" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 217.677432][ T29] audit: type=1400 audit(1723437928.600:1989): avc: denied { setopt } for pid=13793 comm="syz.0.3439" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 218.007845][T13806] bond0: entered promiscuous mode [ 218.012959][T13806] bond_slave_0: entered promiscuous mode [ 218.018834][T13806] bond_slave_1: entered promiscuous mode [ 218.024673][T13806] netdevsim netdevsim0 netdevsim1: entered promiscuous mode [ 218.038409][T13806] bond0: left promiscuous mode [ 218.043261][T13806] bond_slave_0: left promiscuous mode [ 218.048823][T13806] bond_slave_1: left promiscuous mode [ 218.054562][T13806] netdevsim netdevsim0 netdevsim1: left promiscuous mode [ 218.072369][ T29] audit: type=1400 audit(1723437928.990:1990): avc: denied { connect } for pid=13807 comm="syz.4.3444" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 218.072398][T13808] loop4: detected capacity change from 0 to 512 [ 218.073782][T13808] EXT4-fs (loop4): 1 truncate cleaned up [ 218.092977][ T29] audit: type=1400 audit(1723437929.020:1991): avc: denied { write } for pid=13807 comm="syz.4.3444" path="socket:[48523]" dev="sockfs" ino=48523 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 218.101145][T13808] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 218.177295][ T29] audit: type=1400 audit(1723437929.090:1992): avc: denied { bind } for pid=13816 comm="syz.1.3447" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 218.214092][T13823] loop3: detected capacity change from 0 to 1024 [ 218.220838][ T29] audit: type=1400 audit(1723437929.130:1993): avc: denied { read } for pid=13821 comm="syz.3.3448" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 218.245119][ T29] audit: type=1400 audit(1723437929.130:1994): avc: denied { open } for pid=13821 comm="syz.3.3448" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 218.271488][T13823] EXT4-fs (loop3): blocks per group (131072) and clusters per group (8192) inconsistent [ 218.286384][T13829] xt_CT: You must specify a L4 protocol and not use inversions on it [ 218.291499][T12919] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 218.330365][T13823] loop3: detected capacity change from 0 to 512 [ 218.345713][T13839] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3451'. [ 218.585552][T13869] loop3: detected capacity change from 0 to 8192 [ 218.705325][T13884] netlink: 'syz.1.3469': attribute type 29 has an invalid length. [ 218.713731][T13884] netlink: 'syz.1.3469': attribute type 29 has an invalid length. [ 218.719167][T13888] loop3: detected capacity change from 0 to 256 [ 218.728359][T13888] vfat: Bad value for 'dmask' [ 218.907056][T13894] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13894 comm=syz.1.3472 [ 219.400860][T13932] netlink: 108 bytes leftover after parsing attributes in process `syz.3.3484'. [ 219.466517][T13935] loop3: detected capacity change from 0 to 512 [ 219.473948][T13935] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a806c018, mo2=0103] [ 219.481943][T13935] System zones: 1-12 [ 219.486197][T13935] EXT4-fs error (device loop3): ext4_init_orphan_info:586: comm syz.3.3484: inode #0: comm syz.3.3484: iget: illegal inode # [ 219.499250][T13935] EXT4-fs (loop3): get orphan inode failed [ 219.505383][T13935] EXT4-fs (loop3): mount failed [ 219.532259][T13938] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3485'. [ 219.601279][T13942] FAULT_INJECTION: forcing a failure. [ 219.601279][T13942] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 219.614441][T13942] CPU: 1 PID: 13942 Comm: syz.1.3486 Not tainted 6.10.0-syzkaller-05505-gb1bc554e009e #0 [ 219.624378][T13942] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 219.634455][T13942] Call Trace: [ 219.637729][T13942] [ 219.640648][T13942] dump_stack_lvl+0xf2/0x150 [ 219.645235][T13942] dump_stack+0x15/0x20 [ 219.649417][T13942] should_fail_ex+0x229/0x230 [ 219.654091][T13942] should_fail+0xb/0x10 [ 219.658250][T13942] should_fail_usercopy+0x1a/0x20 [ 219.663302][T13942] _copy_to_user+0x1e/0xa0 [ 219.667725][T13942] simple_read_from_buffer+0xa0/0x110 [ 219.673101][T13942] proc_fail_nth_read+0xfc/0x140 [ 219.678048][T13942] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 219.683618][T13942] vfs_read+0x1a2/0x6e0 [ 219.687793][T13942] ? __rcu_read_unlock+0x4e/0x70 [ 219.692725][T13942] ? __fget_files+0x1da/0x210 [ 219.697393][T13942] ksys_read+0xeb/0x1b0 [ 219.701609][T13942] __x64_sys_read+0x42/0x50 [ 219.706150][T13942] x64_sys_call+0x27d3/0x2d60 [ 219.710843][T13942] do_syscall_64+0xc9/0x1c0 [ 219.715354][T13942] ? clear_bhb_loop+0x55/0xb0 [ 219.720038][T13942] ? clear_bhb_loop+0x55/0xb0 [ 219.724713][T13942] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.730678][T13942] RIP: 0033:0x7f2c99fa463c [ 219.735119][T13942] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8c 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 1f 8d 02 00 48 [ 219.754719][T13942] RSP: 002b:00007f2c99227040 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 219.763225][T13942] RAX: ffffffffffffffda RBX: 00007f2c9a133f60 RCX: 00007f2c99fa463c [ 219.771249][T13942] RDX: 000000000000000f RSI: 00007f2c992270b0 RDI: 0000000000000003 [ 219.779223][T13942] RBP: 00007f2c992270a0 R08: 0000000000000000 R09: 0000000000000000 [ 219.787191][T13942] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 219.795165][T13942] R13: 000000000000000b R14: 00007f2c9a133f60 R15: 00007ffcae6c3a68 [ 219.803143][T13942] [ 219.822108][T13944] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3487'. [ 219.832878][T13944] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3487'. [ 219.851356][T13946] loop3: detected capacity change from 0 to 1024 [ 220.002421][T13973] FAULT_INJECTION: forcing a failure. [ 220.002421][T13973] name failslab, interval 1, probability 0, space 0, times 0 [ 220.015188][T13973] CPU: 0 PID: 13973 Comm: syz.1.3496 Not tainted 6.10.0-syzkaller-05505-gb1bc554e009e #0 [ 220.016379][T13966] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 220.024984][T13973] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 220.024999][T13973] Call Trace: [ 220.025005][T13973] [ 220.025012][T13973] dump_stack_lvl+0xf2/0x150 [ 220.025042][T13973] dump_stack+0x15/0x20 [ 220.057310][T13973] should_fail_ex+0x229/0x230 [ 220.062053][T13973] ? skb_clone+0x154/0x1f0 [ 220.066460][T13973] __should_failslab+0x92/0xa0 [ 220.071212][T13973] should_failslab+0x9/0x20 [ 220.075734][T13973] kmem_cache_alloc_noprof+0x4c/0x290 [ 220.081133][T13973] skb_clone+0x154/0x1f0 [ 220.085370][T13973] __netlink_deliver_tap+0x2bd/0x4c0 [ 220.090732][T13973] netlink_dump+0x723/0x760 [ 220.095248][T13973] __netlink_dump_start+0x430/0x510 [ 220.100592][T13973] genl_rcv_msg+0x4e5/0x6c0 [ 220.105259][T13973] ? __pfx_ethnl_default_start+0x10/0x10 [ 220.110875][T13973] ? __pfx_ethnl_default_dumpit+0x10/0x10 [ 220.116621][T13973] ? __pfx_ethnl_default_done+0x10/0x10 [ 220.122166][T13973] ? __pfx_genl_start+0x10/0x10 [ 220.126994][T13973] ? __pfx_genl_dumpit+0x10/0x10 [ 220.131913][T13973] ? __pfx_genl_done+0x10/0x10 [ 220.136744][T13973] netlink_rcv_skb+0x12c/0x230 [ 220.141515][T13973] ? __pfx_genl_rcv_msg+0x10/0x10 [ 220.146604][T13973] genl_rcv+0x28/0x40 [ 220.150595][T13973] netlink_unicast+0x593/0x670 [ 220.155363][T13973] netlink_sendmsg+0x5cc/0x6e0 [ 220.160186][T13973] ? __pfx_netlink_sendmsg+0x10/0x10 [ 220.165524][T13973] __sock_sendmsg+0x140/0x180 [ 220.170257][T13973] ____sys_sendmsg+0x312/0x410 [ 220.175027][T13973] __sys_sendmsg+0x1e9/0x280 [ 220.179731][T13973] __x64_sys_sendmsg+0x46/0x50 [ 220.184493][T13973] x64_sys_call+0x2689/0x2d60 [ 220.189207][T13973] do_syscall_64+0xc9/0x1c0 [ 220.193777][T13973] ? clear_bhb_loop+0x55/0xb0 [ 220.198445][T13973] ? clear_bhb_loop+0x55/0xb0 [ 220.203161][T13973] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 220.209080][T13973] RIP: 0033:0x7f2c99fa5b59 [ 220.213500][T13973] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 220.233135][T13973] RSP: 002b:00007f2c99227048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 220.241582][T13973] RAX: ffffffffffffffda RBX: 00007f2c9a133f60 RCX: 00007f2c99fa5b59 [ 220.249546][T13973] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000005 [ 220.257513][T13973] RBP: 00007f2c992270a0 R08: 0000000000000000 R09: 0000000000000000 [ 220.265561][T13973] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 220.273601][T13973] R13: 000000000000000b R14: 00007f2c9a133f60 R15: 00007ffcae6c3a68 [ 220.281638][T13973] [ 220.336950][T13984] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3501'. [ 220.352980][T13988] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 220.383324][T13988] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3503'. [ 220.391560][T13999] FAULT_INJECTION: forcing a failure. [ 220.391560][T13999] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 220.405374][T13999] CPU: 0 PID: 13999 Comm: syz.1.3507 Not tainted 6.10.0-syzkaller-05505-gb1bc554e009e #0 [ 220.415213][T13999] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 220.425272][T13999] Call Trace: [ 220.428535][T13999] [ 220.431489][T13999] dump_stack_lvl+0xf2/0x150 [ 220.436090][T13999] dump_stack+0x15/0x20 [ 220.440239][T13999] should_fail_ex+0x229/0x230 [ 220.444940][T13999] should_fail+0xb/0x10 [ 220.449095][T13999] should_fail_usercopy+0x1a/0x20 [ 220.454188][T13999] _copy_from_user+0x1e/0xd0 [ 220.458788][T13999] copy_msghdr_from_user+0x54/0x2a0 [ 220.464067][T13999] __sys_sendmsg+0x17d/0x280 [ 220.468701][T13999] __x64_sys_sendmsg+0x46/0x50 [ 220.473479][T13999] x64_sys_call+0x2689/0x2d60 [ 220.478222][T13999] do_syscall_64+0xc9/0x1c0 [ 220.482789][T13999] ? clear_bhb_loop+0x55/0xb0 [ 220.487452][T13999] ? clear_bhb_loop+0x55/0xb0 [ 220.492122][T13999] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 220.498024][T13999] RIP: 0033:0x7f2c99fa5b59 [ 220.502430][T13999] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 220.522028][T13999] RSP: 002b:00007f2c99227048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 220.530428][T13999] RAX: ffffffffffffffda RBX: 00007f2c9a133f60 RCX: 00007f2c99fa5b59 [ 220.538395][T13999] RDX: 0000000000000000 RSI: 00000000200005c0 RDI: 0000000000000003 [ 220.546362][T13999] RBP: 00007f2c992270a0 R08: 0000000000000000 R09: 0000000000000000 [ 220.554349][T13999] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 220.562312][T13999] R13: 000000000000000b R14: 00007f2c9a133f60 R15: 00007ffcae6c3a68 [ 220.570331][T13999] [ 220.581689][T14000] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 220.610214][T14003] loop4: detected capacity change from 0 to 128 [ 220.616907][T14003] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 220.631154][T14004] FAULT_INJECTION: forcing a failure. [ 220.631154][T14004] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 220.644245][T14004] CPU: 1 PID: 14004 Comm: syz.1.3509 Not tainted 6.10.0-syzkaller-05505-gb1bc554e009e #0 [ 220.654111][T14004] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 220.654887][T14003] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 220.664152][T14004] Call Trace: [ 220.664161][T14004] [ 220.664168][T14004] dump_stack_lvl+0xf2/0x150 [ 220.684061][T14004] dump_stack+0x15/0x20 [ 220.688232][T14004] should_fail_ex+0x229/0x230 [ 220.693039][T14004] should_fail+0xb/0x10 [ 220.697249][T14004] should_fail_usercopy+0x1a/0x20 [ 220.702290][T14004] _copy_from_iter+0xd3/0xb00 [ 220.707047][T14004] ? kmalloc_reserve+0x16e/0x190 [ 220.712069][T14004] ? __build_skb_around+0x196/0x1f0 [ 220.717283][T14004] ? __alloc_skb+0x21f/0x310 [ 220.721890][T14004] ? __virt_addr_valid+0x1ed/0x250 [ 220.727129][T14004] ? __check_object_size+0x35b/0x510 [ 220.732441][T14004] netlink_sendmsg+0x460/0x6e0 [ 220.737319][T14004] ? __pfx_netlink_sendmsg+0x10/0x10 [ 220.742600][T14004] __sock_sendmsg+0x140/0x180 [ 220.747269][T14004] ____sys_sendmsg+0x312/0x410 [ 220.752135][T14004] __sys_sendmsg+0x1e9/0x280 [ 220.756724][T14004] __x64_sys_sendmsg+0x46/0x50 [ 220.761482][T14004] x64_sys_call+0x2689/0x2d60 [ 220.766154][T14004] do_syscall_64+0xc9/0x1c0 [ 220.770645][T14004] ? clear_bhb_loop+0x55/0xb0 [ 220.775329][T14004] ? clear_bhb_loop+0x55/0xb0 [ 220.780157][T14004] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 220.786051][T14004] RIP: 0033:0x7f2c99fa5b59 [ 220.790464][T14004] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 220.810080][T14004] RSP: 002b:00007f2c99227048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 220.818544][T14004] RAX: ffffffffffffffda RBX: 00007f2c9a133f60 RCX: 00007f2c99fa5b59 [ 220.826507][T14004] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000005 [ 220.834508][T14004] RBP: 00007f2c992270a0 R08: 0000000000000000 R09: 0000000000000000 [ 220.842496][T14004] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 220.850470][T14004] R13: 000000000000000b R14: 00007f2c9a133f60 R15: 00007ffcae6c3a68 [ 220.858434][T14004] [ 220.897387][ T28] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 220.901548][T14013] FAULT_INJECTION: forcing a failure. [ 220.901548][T14013] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 220.919757][T14013] CPU: 0 PID: 14013 Comm: syz.0.3512 Not tainted 6.10.0-syzkaller-05505-gb1bc554e009e #0 [ 220.929565][T14013] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 220.939671][T14013] Call Trace: [ 220.942948][T14013] [ 220.945874][T14013] dump_stack_lvl+0xf2/0x150 [ 220.950533][T14013] dump_stack+0x15/0x20 [ 220.954742][T14013] should_fail_ex+0x229/0x230 [ 220.959490][T14013] __should_fail_alloc_page+0xfd/0x110 [ 220.964964][T14013] __alloc_pages_noprof+0x109/0x360 [ 220.970170][T14013] alloc_pages_mpol_noprof+0xb1/0x1e0 [ 220.975542][T14013] shmem_get_folio_gfp+0x3e4/0xb70 [ 220.980721][T14013] shmem_write_begin+0xa0/0x1c0 [ 220.985703][T14013] generic_perform_write+0x1d5/0x410 [ 220.991053][T14013] ? __pfx_shmem_write_end+0x10/0x10 [ 220.996349][T14013] shmem_file_write_iter+0xc8/0xf0 [ 221.001602][T14013] vfs_write+0x78f/0x900 [ 221.005834][T14013] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 221.011638][T14013] ksys_write+0xeb/0x1b0 [ 221.015870][T14013] __x64_sys_write+0x42/0x50 [ 221.020472][T14013] x64_sys_call+0x27dd/0x2d60 [ 221.025154][T14013] do_syscall_64+0xc9/0x1c0 [ 221.029643][T14013] ? clear_bhb_loop+0x55/0xb0 [ 221.034309][T14013] ? clear_bhb_loop+0x55/0xb0 [ 221.039034][T14013] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.044951][T14013] RIP: 0033:0x7fb7ffbf46df [ 221.049373][T14013] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 29 8c 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 7c 8c 02 00 48 [ 221.068982][T14013] RSP: 002b:00007fb7fee76e00 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 221.077425][T14013] RAX: ffffffffffffffda RBX: 0000000000040000 RCX: 00007fb7ffbf46df [ 221.085445][T14013] RDX: 0000000000040000 RSI: 00007fb7f6a57000 RDI: 0000000000000004 [ 221.093427][T14013] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000053b [ 221.101403][T14013] R10: 0000000020001f82 R11: 0000000000000293 R12: 0000000000000004 [ 221.109388][T14013] R13: 00007fb7fee76f00 R14: 00007fb7fee76ec0 R15: 00007fb7f6a57000 [ 221.117404][T14013] [ 221.286116][T14033] tipc: Started in network mode [ 221.291016][T14033] tipc: Node identity fe8000000000000000000000000000aa, cluster identity 4711 [ 221.342502][T14033] tipc: Enabled bearer , priority 10 [ 221.407087][T14024] IPv6: sit1: Disabled Multicast RS [ 221.515513][ T29] kauditd_printk_skb: 55 callbacks suppressed [ 221.515527][ T29] audit: type=1326 audit(1723437932.440:2050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14050 comm="syz.4.3524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fb8725b59 code=0x7ffc0000 [ 221.549383][ T29] audit: type=1326 audit(1723437932.440:2051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14050 comm="syz.4.3524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f1fb8725b59 code=0x7ffc0000 [ 221.573016][ T29] audit: type=1326 audit(1723437932.440:2052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14050 comm="syz.4.3524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fb8725b59 code=0x7ffc0000 [ 221.596764][ T29] audit: type=1326 audit(1723437932.440:2053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14050 comm="syz.4.3524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f1fb8725b59 code=0x7ffc0000 [ 221.620193][ T29] audit: type=1326 audit(1723437932.440:2054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14050 comm="syz.4.3524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fb8725b59 code=0x7ffc0000 [ 221.643779][ T29] audit: type=1326 audit(1723437932.440:2055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14050 comm="syz.4.3524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fb8725b59 code=0x7ffc0000 [ 221.667382][ T29] audit: type=1326 audit(1723437932.440:2056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14050 comm="syz.4.3524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7f1fb8725b59 code=0x7ffc0000 [ 221.690883][ T29] audit: type=1326 audit(1723437932.440:2057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14050 comm="syz.4.3524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fb8725b59 code=0x7ffc0000 [ 221.714704][ T29] audit: type=1326 audit(1723437932.440:2058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14050 comm="syz.4.3524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1fb8725b59 code=0x7ffc0000 [ 221.738995][ T29] audit: type=1326 audit(1723437932.440:2059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14050 comm="syz.4.3524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fb8725b59 code=0x7ffc0000 [ 221.766752][T14053] loop4: detected capacity change from 0 to 512 [ 221.776067][T14053] EXT4-fs error (device loop4): ext4_orphan_get:1394: inode #15: comm syz.4.3525: casefold flag without casefold feature [ 221.788945][T14053] EXT4-fs error (device loop4): ext4_orphan_get:1399: comm syz.4.3525: couldn't read orphan inode 15 (err -117) [ 221.801446][T14053] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 221.825201][T12919] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 221.875670][T14062] loop4: detected capacity change from 0 to 128 [ 221.883754][T14062] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 221.892789][T14062] vhci_hcd: default hub control req: 0020 v0000 i0000 l124 [ 222.223699][T14110] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3551'. [ 222.261015][T14115] 9pnet_fd: Insufficient options for proto=fd [ 222.277490][T14121] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3555'. [ 222.334040][ T8] tipc: Node number set to 4269801642 [ 222.410040][T14153] FAULT_INJECTION: forcing a failure. [ 222.410040][T14153] name failslab, interval 1, probability 0, space 0, times 0 [ 222.420616][T14156] loop4: detected capacity change from 0 to 512 [ 222.422677][T14153] CPU: 0 PID: 14153 Comm: syz.0.3569 Not tainted 6.10.0-syzkaller-05505-gb1bc554e009e #0 [ 222.438656][T14153] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 222.448759][T14153] Call Trace: [ 222.452162][T14153] [ 222.455082][T14153] dump_stack_lvl+0xf2/0x150 [ 222.459679][T14153] dump_stack+0x15/0x20 [ 222.463824][T14153] should_fail_ex+0x229/0x230 [ 222.468503][T14153] ? __alloc_skb+0x10b/0x310 [ 222.473166][T14153] __should_failslab+0x92/0xa0 [ 222.477935][T14153] should_failslab+0x9/0x20 [ 222.482430][T14153] kmem_cache_alloc_node_noprof+0x51/0x2b0 [ 222.488262][T14153] __alloc_skb+0x10b/0x310 [ 222.492815][T14153] pfkey_sendmsg+0x10d/0x970 [ 222.497409][T14153] ? avc_has_perm+0xd4/0x160 [ 222.502065][T14153] ? selinux_socket_sendmsg+0x182/0x1b0 [ 222.507660][T14153] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 222.512787][T14153] __sock_sendmsg+0x140/0x180 [ 222.517479][T14153] ____sys_sendmsg+0x312/0x410 [ 222.522237][T14153] __sys_sendmsg+0x1e9/0x280 [ 222.526844][T14153] __x64_sys_sendmsg+0x46/0x50 [ 222.531641][T14153] x64_sys_call+0x2689/0x2d60 [ 222.536533][T14153] do_syscall_64+0xc9/0x1c0 [ 222.541027][T14153] ? clear_bhb_loop+0x55/0xb0 [ 222.545694][T14153] ? clear_bhb_loop+0x55/0xb0 [ 222.550359][T14153] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.556253][T14153] RIP: 0033:0x7fb7ffbf5b59 [ 222.560656][T14153] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 222.580365][T14153] RSP: 002b:00007fb7fee77048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 222.588822][T14153] RAX: ffffffffffffffda RBX: 00007fb7ffd83f60 RCX: 00007fb7ffbf5b59 [ 222.596789][T14153] RDX: 0000000000000000 RSI: 0000000020000180 RDI: 0000000000000003 [ 222.604752][T14153] RBP: 00007fb7fee770a0 R08: 0000000000000000 R09: 0000000000000000 [ 222.612708][T14153] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 222.620704][T14153] R13: 000000000000000b R14: 00007fb7ffd83f60 R15: 00007ffe74e80068 [ 222.628740][T14153] [ 222.645425][T14156] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 222.653425][T14156] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 222.662836][T14156] System zones: 0-1, 15-15, 18-18, 34-34 [ 222.668823][T14156] EXT4-fs (loop4): orphan cleanup on readonly fs [ 222.678200][T14156] EXT4-fs warning (device loop4): ext4_enable_quotas:7062: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 222.692796][T14156] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 222.697656][T14167] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3572'. [ 222.708724][T14171] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3575'. [ 222.717773][T14171] tipc: Invalid UDP bearer configuration [ 222.717783][T14171] tipc: Enabling of bearer rejected, failed to enable media [ 222.717881][T14156] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.3570: bg 0: block 40: padding at end of block bitmap is not set [ 222.745896][T14175] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3576'. [ 222.755171][T14175] tipc: Invalid UDP bearer configuration [ 222.755181][T14175] tipc: Enabling of bearer rejected, failed to enable media [ 222.769582][T14156] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 222.788617][T14177] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3577'. [ 222.798444][T14156] EXT4-fs (loop4): 1 truncate cleaned up [ 222.804708][T14156] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 222.837549][T14156] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3570'. [ 222.848852][T14188] siw: device registration error -23 [ 222.866729][T14183] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 222.990439][T14215] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3590'. [ 223.242896][T14263] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3606'. [ 223.257618][T12919] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 223.280613][T14271] tipc: Enabling of bearer rejected, already enabled [ 223.305907][T14275] loop4: detected capacity change from 0 to 512 [ 223.313043][T14275] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 223.328404][T14275] EXT4-fs (loop4): 1 orphan inode deleted [ 223.334258][T14275] EXT4-fs (loop4): 1 truncate cleaned up [ 223.340603][T14275] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 223.355330][T14269] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 223.356545][T14275] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 223.385128][T14280] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3614'. [ 223.400250][T14275] EXT4-fs (loop4): Remounting filesystem read-only [ 223.417620][T12919] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 223.489155][T14290] loop4: detected capacity change from 0 to 512 [ 223.510723][T14290] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 223.524066][T14290] EXT4-fs (loop4): 1 truncate cleaned up [ 223.530148][T14290] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 223.588254][T14300] netlink: 'syz.3.3622': attribute type 29 has an invalid length. [ 223.603262][T12919] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 223.617909][T14300] netlink: 'syz.3.3622': attribute type 29 has an invalid length. [ 223.626674][T14300] netlink: 'syz.3.3622': attribute type 29 has an invalid length. [ 223.649031][T14300] netlink: 'syz.3.3622': attribute type 29 has an invalid length. [ 223.690679][T14308] tipc: Enabling of bearer rejected, failed to enable media [ 223.731559][T14317] loop3: detected capacity change from 0 to 512 [ 223.859761][T14345] x_tables: ip_tables: osf match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT/FORWARD [ 223.910366][T14351] loop4: detected capacity change from 0 to 512 [ 223.947334][T14351] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 223.961519][T14351] ext4 filesystem being mounted at /78/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 223.998699][T14351] IPv6: addrconf: prefix option has invalid lifetime [ 224.042301][T12919] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 224.082709][T14379] IPVS: set_ctl: invalid protocol: 25 172.20.20.187:20001 [ 224.162122][T14392] team0: Device ipvlan2 failed to register rx_handler [ 224.476801][T14408] loop3: detected capacity change from 0 to 128 [ 224.542764][T14420] loop3: detected capacity change from 0 to 256 [ 224.560836][T14422] loop3: detected capacity change from 0 to 512 [ 224.902548][T14446] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 224.939239][T14459] loop4: detected capacity change from 0 to 512 [ 224.948234][T14459] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 224.958052][T14459] EXT4-fs (loop4): invalid journal inode [ 224.963797][T14459] EXT4-fs (loop4): can't get journal size [ 224.966180][T14453] can: request_module (can-proto-0) failed. [ 224.976975][T14459] EXT4-fs (loop4): 1 truncate cleaned up [ 224.983015][T14459] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 224.997395][T14467] SELinux: Context & O ˼b6mz߲}+d.XKONF~gW*E].s^+![3sA,^8YpOge.U(ɾȽvS is not valid (left unmapped). [ 225.024821][T14467] SELinux: Context gS is not valid (left unmapped). [ 225.032100][T14467] SELinux: Context f hDfutqKLw~DŐ is not valid (left unmapped). [ 225.308464][T12919] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 225.480707][T14488] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 225.514975][T14494] netlink: 'syz.4.3693': attribute type 1 has an invalid length. [ 225.611681][T14515] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14515 comm=syz.2.3701 [ 225.787409][T14520] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 225.912073][T14545] loop4: detected capacity change from 0 to 512 [ 225.926918][T14545] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 225.955495][T14545] ext4 filesystem being mounted at /95/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 225.999049][T12919] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 226.019931][T14559] loop4: detected capacity change from 0 to 128 [ 226.038465][T14555] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 226.054057][T14559] loop4: detected capacity change from 128 to 0 [ 226.061041][T14559] syz.4.3716: attempt to access beyond end of device [ 226.061041][T14559] loop4: rw=0, sector=33, nr_sectors = 1 limit=0 [ 226.075012][T14559] FAT-fs (loop4): unable to read inode block for updating (i_pos 531) [ 226.083297][T14559] syz.4.3716: attempt to access beyond end of device [ 226.083297][T14559] loop4: rw=2049, sector=97, nr_sectors = 1 limit=0 [ 226.096490][T14559] buffer_io_error: 8 callbacks suppressed [ 226.096501][T14559] Buffer I/O error on dev loop4, logical block 97, lost async page write [ 226.114934][T14559] syz.4.3716: attempt to access beyond end of device [ 226.114934][T14559] loop4: rw=2049, sector=98, nr_sectors = 1 limit=0 [ 226.128166][T14559] Buffer I/O error on dev loop4, logical block 98, lost async page write [ 226.138110][T14559] syz.4.3716: attempt to access beyond end of device [ 226.138110][T14559] loop4: rw=2049, sector=99, nr_sectors = 1 limit=0 [ 226.151293][T14559] Buffer I/O error on dev loop4, logical block 99, lost async page write [ 226.160034][T14559] syz.4.3716: attempt to access beyond end of device [ 226.160034][T14559] loop4: rw=2049, sector=100, nr_sectors = 1 limit=0 [ 226.173326][T14559] Buffer I/O error on dev loop4, logical block 100, lost async page write [ 226.182026][T14559] syz.4.3716: attempt to access beyond end of device [ 226.182026][T14559] loop4: rw=2049, sector=101, nr_sectors = 1 limit=0 [ 226.195436][T14559] Buffer I/O error on dev loop4, logical block 101, lost async page write [ 226.205932][T14559] syz.4.3716: attempt to access beyond end of device [ 226.205932][T14559] loop4: rw=2049, sector=102, nr_sectors = 1 limit=0 [ 226.219468][T14559] Buffer I/O error on dev loop4, logical block 102, lost async page write [ 226.252144][T14559] syz.4.3716: attempt to access beyond end of device [ 226.252144][T14559] loop4: rw=2049, sector=103, nr_sectors = 1 limit=0 [ 226.265440][T14559] Buffer I/O error on dev loop4, logical block 103, lost async page write [ 226.292101][T12919] syz-executor: attempt to access beyond end of device [ 226.292101][T12919] loop4: rw=524288, sector=33, nr_sectors = 1 limit=0 [ 226.306152][T12919] syz-executor: attempt to access beyond end of device [ 226.306152][T12919] loop4: rw=524288, sector=34, nr_sectors = 1 limit=0 [ 226.320678][T12919] FAT-fs (loop4): Directory bread(block 33) failed [ 226.327298][T12919] FAT-fs (loop4): Directory bread(block 34) failed [ 226.334100][T12919] FAT-fs (loop4): Directory bread(block 35) failed [ 226.340667][T12919] FAT-fs (loop4): Directory bread(block 36) failed [ 226.347344][T12919] FAT-fs (loop4): Directory bread(block 37) failed [ 226.358486][T12919] FAT-fs (loop4): Directory bread(block 38) failed [ 226.365136][T12919] FAT-fs (loop4): Directory bread(block 39) failed [ 226.371817][T12919] FAT-fs (loop4): Directory bread(block 40) failed [ 226.384818][ T40] FAT-fs (loop4): bread failed in fat_clusters_flush [ 226.391812][ T40] Buffer I/O error on dev loop4, logical block 97, lost async page write [ 226.400906][ T40] Buffer I/O error on dev loop4, logical block 98, lost async page write [ 226.409472][ T40] Buffer I/O error on dev loop4, logical block 99, lost async page write [ 226.418281][ T40] FAT-fs (loop4): unable to read inode block for updating (i_pos 531) [ 226.427177][T12919] FAT-fs (loop4): unable to read boot sector to mark fs as dirty [ 226.437614][T14606] FAULT_INJECTION: forcing a failure. [ 226.437614][T14606] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 226.450742][T14606] CPU: 1 PID: 14606 Comm: syz.1.3734 Not tainted 6.10.0-syzkaller-05505-gb1bc554e009e #0 [ 226.460553][T14606] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 226.470603][T14606] Call Trace: [ 226.473886][T14606] [ 226.476798][T14606] dump_stack_lvl+0xf2/0x150 [ 226.481438][T14606] dump_stack+0x15/0x20 [ 226.485617][T14606] should_fail_ex+0x229/0x230 [ 226.490356][T14606] should_fail+0xb/0x10 [ 226.494572][T14606] should_fail_usercopy+0x1a/0x20 [ 226.499643][T14606] strncpy_from_user+0x25/0x270 [ 226.504492][T14606] ? should_failslab+0x9/0x20 [ 226.509172][T14606] ? kmem_cache_alloc_noprof+0x10c/0x290 [ 226.514898][T14606] getname_flags+0xb0/0x3b0 [ 226.519465][T14606] user_path_at+0x26/0x110 [ 226.523867][T14606] __se_sys_mount+0x248/0x2d0 [ 226.528563][T14606] ? fput+0x13b/0x180 [ 226.532530][T14606] __x64_sys_mount+0x67/0x80 [ 226.537127][T14606] x64_sys_call+0x203e/0x2d60 [ 226.541797][T14606] do_syscall_64+0xc9/0x1c0 [ 226.546335][T14606] ? clear_bhb_loop+0x55/0xb0 [ 226.551013][T14606] ? clear_bhb_loop+0x55/0xb0 [ 226.555716][T14606] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.561652][T14606] RIP: 0033:0x7f2c99fa5b59 [ 226.566051][T14606] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 226.579556][T14608] netlink: 'syz.0.3735': attribute type 3 has an invalid length. [ 226.585640][T14606] RSP: 002b:00007f2c99227048 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 226.585664][T14606] RAX: ffffffffffffffda RBX: 00007f2c9a133f60 RCX: 00007f2c99fa5b59 [ 226.585675][T14606] RDX: 0000000020000040 RSI: 00000000200000c0 RDI: 0000000000000000 [ 226.585686][T14606] RBP: 00007f2c992270a0 R08: 0000000000000000 R09: 0000000000000000 [ 226.625660][T14606] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 226.633610][T14606] R13: 000000000000000b R14: 00007f2c9a133f60 R15: 00007ffcae6c3a68 [ 226.641583][T14606] [ 226.649303][ T29] kauditd_printk_skb: 64 callbacks suppressed [ 226.649325][ T29] audit: type=1400 audit(1723437937.570:2123): avc: denied { write } for pid=14609 comm="syz.0.3736" name="hwrng" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 226.943987][T14619] chnl_net:caif_netlink_parms(): no params data found [ 226.982797][T14619] bridge0: port 1(bridge_slave_0) entered blocking state [ 226.989992][T14619] bridge0: port 1(bridge_slave_0) entered disabled state [ 226.997234][T14619] bridge_slave_0: entered allmulticast mode [ 227.003897][T14619] bridge_slave_0: entered promiscuous mode [ 227.010998][T14619] bridge0: port 2(bridge_slave_1) entered blocking state [ 227.018127][T14619] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.025493][T14619] bridge_slave_1: entered allmulticast mode [ 227.032285][T14619] bridge_slave_1: entered promiscuous mode [ 227.054854][T14619] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 227.065652][T14619] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 227.089584][T14619] team0: Port device team_slave_0 added [ 227.096612][T14619] team0: Port device team_slave_1 added [ 227.111652][T14619] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 227.118664][T14619] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 227.144733][T14619] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 227.159589][T14619] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 227.166570][T14619] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 227.192565][T14619] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 227.232364][T14619] hsr_slave_0: entered promiscuous mode [ 227.242144][T14619] hsr_slave_1: entered promiscuous mode [ 227.248361][T14619] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 227.256206][T14619] Cannot create hsr debugfs directory [ 227.383417][T14619] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.518310][T14619] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.616817][T14619] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.698045][T14619] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.849687][T14619] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 227.866485][T14619] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 227.876082][T14619] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 227.881646][T14712] FAULT_INJECTION: forcing a failure. [ 227.881646][T14712] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 227.896450][T14712] CPU: 0 PID: 14712 Comm: syz.3.3769 Not tainted 6.10.0-syzkaller-05505-gb1bc554e009e #0 [ 227.906332][T14712] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 227.916405][T14712] Call Trace: [ 227.919690][T14712] [ 227.919698][T14712] dump_stack_lvl+0xf2/0x150 [ 227.919720][T14712] dump_stack+0x15/0x20 [ 227.931424][T14712] should_fail_ex+0x229/0x230 [ 227.931516][T14712] __should_fail_alloc_page+0xfd/0x110 [ 227.931587][T14712] __alloc_pages_noprof+0x109/0x360 [ 227.931627][T14712] alloc_pages_mpol_noprof+0xb1/0x1e0 [ 227.931703][T14712] shmem_get_folio_gfp+0x3e4/0xb70 [ 227.931733][T14712] shmem_write_begin+0xa0/0x1c0 [ 227.931757][T14712] generic_perform_write+0x1d5/0x410 [ 227.931786][T14712] ? __pfx_shmem_write_end+0x10/0x10 [ 227.931891][T14712] shmem_file_write_iter+0xc8/0xf0 [ 227.931919][T14712] vfs_write+0x78f/0x900 [ 227.931940][T14712] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 227.932089][T14712] ksys_write+0xeb/0x1b0 [ 227.932107][T14712] __x64_sys_write+0x42/0x50 [ 227.932125][T14712] x64_sys_call+0x27dd/0x2d60 [ 227.932147][T14712] do_syscall_64+0xc9/0x1c0 [ 227.932164][T14712] ? clear_bhb_loop+0x55/0xb0 [ 227.932180][T14712] ? clear_bhb_loop+0x55/0xb0 [ 227.932271][T14712] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 227.932301][T14712] RIP: 0033:0x7fa67b0f46df [ 227.932317][T14712] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 29 8c 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 7c 8c 02 00 48 [ 227.932341][T14712] RSP: 002b:00007fa67a376d50 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 227.932359][T14712] RAX: ffffffffffffffda RBX: 0000000000100000 RCX: 00007fa67b0f46df [ 227.932373][T14712] RDX: 0000000000100000 RSI: 00007fa671f57000 RDI: 0000000000000004 [ 228.070013][T14712] RBP: 0000000000000000 R08: 0000000000000000 R09: 00000000000005fb [ 228.070029][T14712] R10: 0000000020000242 R11: 0000000000000293 R12: 0000000000000004 [ 228.070042][T14712] R13: 00007fa67a376dfc R14: 00007fa67a376e00 R15: 00007fa671f57000 [ 228.093945][T14712] [ 228.098429][T14619] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 228.162881][T14619] 8021q: adding VLAN 0 to HW filter on device bond0 [ 228.185895][T14619] 8021q: adding VLAN 0 to HW filter on device team0 [ 228.197563][ T904] bridge0: port 1(bridge_slave_0) entered blocking state [ 228.204725][ T904] bridge0: port 1(bridge_slave_0) entered forwarding state [ 228.233619][T14619] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 228.244036][T14619] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 228.311646][T14619] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 228.339251][ T904] bridge0: port 2(bridge_slave_1) entered blocking state [ 228.346402][ T904] bridge0: port 2(bridge_slave_1) entered forwarding state [ 228.401814][ T29] audit: type=1400 audit(1723437939.320:2124): avc: denied { map } for pid=14756 comm="syz.3.3782" path="/dev/null" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:null_device_t tclass=chr_file permissive=1 [ 228.452656][ T29] audit: type=1326 audit(1723437939.350:2125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14756 comm="syz.3.3782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa67b0f5b59 code=0x7ffc0000 [ 228.476492][ T29] audit: type=1326 audit(1723437939.350:2126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14756 comm="syz.3.3782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7fa67b0f5b59 code=0x7ffc0000 [ 228.500100][ T29] audit: type=1326 audit(1723437939.350:2127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14756 comm="syz.3.3782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa67b0f5b59 code=0x7ffc0000 [ 228.510539][T14619] veth0_vlan: entered promiscuous mode [ 228.523572][ T29] audit: type=1326 audit(1723437939.350:2128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14756 comm="syz.3.3782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=86 compat=0 ip=0x7fa67b0f5b59 code=0x7ffc0000 [ 228.534341][T14619] veth1_vlan: entered promiscuous mode [ 228.552434][ T29] audit: type=1326 audit(1723437939.350:2129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14756 comm="syz.3.3782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa67b0f5b59 code=0x7ffc0000 [ 228.581610][ T29] audit: type=1326 audit(1723437939.350:2130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14756 comm="syz.3.3782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fa67b0f5b59 code=0x7ffc0000 [ 228.596661][T14775] ip6_tunnel: non-ECT from 0000:0000:0000:0000:0000:ffff:ac1e:0004 with DS=0xd [ 228.605027][ T29] audit: type=1326 audit(1723437939.350:2131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14756 comm="syz.3.3782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa67b0f5b59 code=0x7ffc0000 [ 228.637430][ T29] audit: type=1326 audit(1723437939.350:2132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14756 comm="syz.3.3782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fa67b0f5b59 code=0x7ffc0000 [ 228.672932][T14619] veth0_macvtap: entered promiscuous mode [ 228.693284][T14619] veth1_macvtap: entered promiscuous mode [ 228.716171][T14771] __nla_validate_parse: 9 callbacks suppressed [ 228.716190][T14771] netlink: 100 bytes leftover after parsing attributes in process `syz.2.3785'. [ 228.725859][T14619] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 228.741905][T14619] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.751733][T14619] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 228.762413][T14619] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.772334][T14619] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 228.772350][T14619] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.772365][T14619] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 228.772379][T14619] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.772395][T14619] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 228.772405][T14619] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.772469][T14619] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 228.772480][T14619] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.772495][T14619] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 228.772506][T14619] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.772520][T14619] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 228.772571][T14619] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.779073][T14790] loop3: detected capacity change from 0 to 512 [ 228.786210][T14619] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 228.912704][T14619] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 228.923192][T14619] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.933083][T14619] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 228.943635][T14619] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.953462][T14619] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 228.963926][T14619] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.973800][T14619] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 228.984255][T14619] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.994084][T14619] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 229.004529][T14619] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.013622][T14796] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 229.014363][T14619] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 229.014379][T14619] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.014434][T14619] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 229.052301][T14619] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.062162][T14619] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 229.072595][T14619] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.086005][T14619] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 229.125030][T14806] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3795'. [ 229.134139][T14806] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3795'. [ 229.145517][T14619] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.154325][T14619] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.163075][T14619] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.171910][T14619] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.183370][T14809] dccp_close: ABORT with 32 bytes unread [ 229.186729][ T3180] team0: left allmulticast mode [ 229.193945][ T3180] team_slave_0: left allmulticast mode [ 229.199595][ T3180] team_slave_1: left allmulticast mode [ 229.205280][ T3180] bridge0: port 3(team0) entered disabled state [ 229.213198][ T3180] bridge_slave_1: left allmulticast mode [ 229.218920][ T3180] bridge_slave_1: left promiscuous mode [ 229.224590][ T3180] bridge0: port 2(bridge_slave_1) entered disabled state [ 229.236344][ T3180] bridge_slave_0: left allmulticast mode [ 229.242028][ T3180] bridge_slave_0: left promiscuous mode [ 229.247830][ T3180] bridge0: port 1(bridge_slave_0) entered disabled state [ 229.278988][T14819] EXT4-fs (sda1): resizing filesystem from 262144 to 2 blocks [ 229.286632][T14819] EXT4-fs warning (device sda1): ext4_resize_fs:2041: can't shrink FS - resize aborted [ 229.354155][T14819] FAULT_INJECTION: forcing a failure. [ 229.354155][T14819] name failslab, interval 1, probability 0, space 0, times 0 [ 229.366993][T14819] CPU: 1 PID: 14819 Comm: syz.0.3800 Not tainted 6.10.0-syzkaller-05505-gb1bc554e009e #0 [ 229.376790][T14819] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 229.386900][T14819] Call Trace: [ 229.390159][T14819] [ 229.393128][T14819] dump_stack_lvl+0xf2/0x150 [ 229.397742][T14819] dump_stack+0x15/0x20 [ 229.401877][T14819] should_fail_ex+0x229/0x230 [ 229.406561][T14819] ? alloc_buffer_head+0x35/0x1f0 [ 229.411710][T14819] __should_failslab+0x92/0xa0 [ 229.416457][T14819] should_failslab+0x9/0x20 [ 229.420949][T14819] kmem_cache_alloc_noprof+0x4c/0x290 [ 229.426382][T14819] alloc_buffer_head+0x35/0x1f0 [ 229.431280][T14819] folio_alloc_buffers+0x168/0x310 [ 229.436425][T14819] bdev_getblk+0x20c/0x3b0 [ 229.440850][T14819] __ext4_sb_bread_gfp+0x46/0x180 [ 229.445862][T14819] ext4_sb_bread+0x5a/0x70 [ 229.450276][T14819] ext4_update_superblocks_fn+0x520/0xc40 [ 229.456080][T14819] ? __pfx_set_overhead+0x10/0x10 [ 229.461116][T14819] ext4_update_overhead+0xdc/0xf0 [ 229.466229][T14819] ext4_resize_end+0x41/0x60 [ 229.470822][T14819] ext4_ioctl+0x1bd6/0x2df0 [ 229.475319][T14819] ? ioctl_has_perm+0x28b/0x2e0 [ 229.480167][T14819] ? do_vfs_ioctl+0x1196/0x1560 [ 229.485000][T14819] ? selinux_file_ioctl+0x2f7/0x380 [ 229.490214][T14819] ? __fget_files+0x1da/0x210 [ 229.494887][T14819] ? __pfx_ext4_ioctl+0x10/0x10 [ 229.499718][T14819] __se_sys_ioctl+0xd3/0x150 [ 229.504296][T14819] __x64_sys_ioctl+0x43/0x50 [ 229.508894][T14819] x64_sys_call+0x15cc/0x2d60 [ 229.513616][T14819] do_syscall_64+0xc9/0x1c0 [ 229.518100][T14819] ? clear_bhb_loop+0x55/0xb0 [ 229.522856][T14819] ? clear_bhb_loop+0x55/0xb0 [ 229.527517][T14819] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 229.533423][T14819] RIP: 0033:0x7fb7ffbf5b59 [ 229.537827][T14819] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 229.557421][T14819] RSP: 002b:00007fb7fee77048 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 229.565872][T14819] RAX: ffffffffffffffda RBX: 00007fb7ffd83f60 RCX: 00007fb7ffbf5b59 [ 229.573844][T14819] RDX: 0000000020000180 RSI: 0000000040086610 RDI: 0000000000000005 [ 229.581807][T14819] RBP: 00007fb7fee770a0 R08: 0000000000000000 R09: 0000000000000000 [ 229.589779][T14819] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 229.597869][T14819] R13: 000000000000000b R14: 00007fb7ffd83f60 R15: 00007ffe74e80068 [ 229.605884][T14819] [ 229.612126][ T3180] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 229.624984][ T3180] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 229.636051][T14822] xt_TCPMSS: Only works on TCP SYN packets [ 229.636957][ T3180] bond0 (unregistering): Released all slaves [ 229.642238][T14822] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3801'. [ 229.710862][ T3180] tipc: Disabling bearer [ 229.720852][ T3180] tipc: Left network mode [ 229.731395][T14836] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3806'. [ 229.755881][T14839] loop4: detected capacity change from 0 to 256 [ 229.767100][T14839] msdos: Unknown parameter '' [ 229.772067][T14828] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 229.783435][ T3180] hsr_slave_0: left promiscuous mode [ 229.791577][T14839] loop4: detected capacity change from 0 to 256 [ 229.798739][ T3180] hsr_slave_1: left promiscuous mode [ 229.804223][T14839] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 229.815257][ T3180] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 229.822710][ T3180] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 229.832813][ T3180] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 229.840380][ T3180] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 229.849808][ T3180] veth1_macvtap: left promiscuous mode [ 229.855420][ T3180] veth0_macvtap: left promiscuous mode [ 229.860962][ T3180] veth1_vlan: left promiscuous mode [ 229.907191][ T3180] pimreg (unregistering): left allmulticast mode [ 229.943207][ T3180] team_slave_1 (unregistering): left promiscuous mode [ 229.951089][ T3180] team0 (unregistering): Port device team_slave_1 removed [ 229.961322][ T3180] team_slave_0 (unregistering): left promiscuous mode [ 229.969146][ T3180] team0 (unregistering): Port device team_slave_0 removed [ 230.003367][T14842] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3807'. [ 230.039999][T14858] loop3: detected capacity change from 0 to 128 [ 230.048311][T14861] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3812'. [ 230.141057][T14914] IPVS: set_ctl: invalid protocol: 108 0.0.0.0:20000 [ 230.153556][T14873] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 230.155984][T14913] loop3: detected capacity change from 0 to 128 [ 230.195930][T14913] loop3: detected capacity change from 0 to 512 [ 230.221584][T14925] vlan2: entered promiscuous mode [ 230.283507][ T3180] bridge_slave_1: left allmulticast mode [ 230.289327][ T3180] bridge_slave_1: left promiscuous mode [ 230.295143][ T3180] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.312101][ T3180] bridge_slave_0: left allmulticast mode [ 230.317826][ T3180] bridge_slave_0: left promiscuous mode [ 230.323863][ T3180] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.363505][T14943] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 230.496844][ T3180] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 230.507382][ T3180] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 230.517318][ T3180] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface [ 230.528217][ T3180] bond0 (unregistering): Released all slaves [ 230.569444][T14981] netlink: 'syz.0.3848': attribute type 1 has an invalid length. [ 230.582648][T14981] bond2: entered promiscuous mode [ 230.595854][ T3180] tipc: Disabling bearer [ 230.601118][ T3180] tipc: Left network mode [ 230.636862][T14994] netlink: 'syz.3.3852': attribute type 29 has an invalid length. [ 230.645479][T14994] netlink: 'syz.3.3852': attribute type 29 has an invalid length. [ 230.702689][T15010] loop3: detected capacity change from 0 to 512 [ 230.710574][ T3180] hsr_slave_0: left promiscuous mode [ 230.720823][ T3180] hsr_slave_1: left promiscuous mode [ 230.727823][ T3180] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 230.735413][ T3180] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 230.747119][ T3180] veth1_macvtap: left promiscuous mode [ 230.752662][ T3180] veth0_macvtap: left promiscuous mode [ 230.758527][ T3180] veth1_vlan: left promiscuous mode [ 230.763871][ T3180] veth0_vlan: left promiscuous mode [ 230.822403][T15021] loop3: detected capacity change from 0 to 512 [ 230.829137][T15021] EXT4-fs: Ignoring removed oldalloc option [ 230.862511][ T3180] team0 (unregistering): Port device team_slave_1 removed [ 230.872997][ T3180] team0 (unregistering): Port device team_slave_0 removed [ 230.993060][T15043] netlink: 'syz.3.3871': attribute type 25 has an invalid length. [ 231.000989][T15043] netlink: 'syz.3.3871': attribute type 7 has an invalid length. [ 231.011922][T15043] loop3: detected capacity change from 0 to 128 [ 231.146834][T15067] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3880'. [ 231.212622][T15078] loop3: detected capacity change from 0 to 512 [ 231.273154][T15078] loop3: detected capacity change from 0 to 1024 [ 231.552171][T12520] ================================================================== [ 231.560298][T12520] BUG: KCSAN: data-race in shmem_add_to_page_cache / shmem_getattr [ 231.568222][T12520] [ 231.570552][T12520] read-write to 0xffff88810d96a240 of 8 bytes by task 15097 on cpu 0: [ 231.578704][T12520] shmem_add_to_page_cache+0x3b9/0x4b0 [ 231.584186][T12520] shmem_get_folio_gfp+0x500/0xb70 [ 231.589325][T12520] shmem_write_begin+0xa0/0x1c0 [ 231.594193][T12520] generic_perform_write+0x1d5/0x410 [ 231.599498][T12520] shmem_file_write_iter+0xc8/0xf0 [ 231.604612][T12520] __kernel_write_iter+0x24f/0x4e0 [ 231.609718][T12520] dump_user_range+0x3a7/0x550 [ 231.614493][T12520] elf_core_dump+0x1aeb/0x1c30 [ 231.619254][T12520] do_coredump+0xff6/0x1860 [ 231.623761][T12520] get_signal+0xdc1/0x1080 [ 231.628175][T12520] arch_do_signal_or_restart+0x95/0x4b0 [ 231.633718][T12520] irqentry_exit_to_user_mode+0x9a/0x130 [ 231.639364][T12520] irqentry_exit+0x12/0x50 [ 231.643795][T12520] asm_exc_page_fault+0x26/0x30 [ 231.648656][T12520] [ 231.650981][T12520] read to 0xffff88810d96a240 of 8 bytes by task 12520 on cpu 1: [ 231.658602][T12520] shmem_getattr+0x69/0x200 [ 231.663124][T12520] vfs_getattr+0x19b/0x1e0 [ 231.667551][T12520] vfs_statx+0x134/0x2f0 [ 231.671803][T12520] vfs_fstatat+0xec/0x110 [ 231.676147][T12520] __se_sys_newfstatat+0x58/0x260 [ 231.681177][T12520] __x64_sys_newfstatat+0x55/0x70 [ 231.686206][T12520] x64_sys_call+0x141f/0x2d60 [ 231.690892][T12520] do_syscall_64+0xc9/0x1c0 [ 231.695406][T12520] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 231.701315][T12520] [ 231.703634][T12520] value changed: 0x0000000000000021 -> 0x0000000000000022 [ 231.710734][T12520] [ 231.713066][T12520] Reported by Kernel Concurrency Sanitizer on: [ 231.719210][T12520] CPU: 1 PID: 12520 Comm: syz-executor Not tainted 6.10.0-syzkaller-05505-gb1bc554e009e #0 [ 231.729205][T12520] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 231.739282][T12520] ================================================================== [ 234.627768][ T29] kauditd_printk_skb: 36 callbacks suppressed [ 234.627786][ T29] audit: type=1400 audit(1723437945.550:2169): avc: denied { unmount } for pid=14619 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 239.025308][ T6332] hsr0: left allmulticast mode [ 239.030179][ T6332] hsr_slave_0: left allmulticast mode [ 239.035568][ T6332] hsr_slave_1: left allmulticast mode [ 239.040947][ T6332] hsr0: left promiscuous mode [ 239.045777][ T6332] bridge0: port 3(hsr0) entered disabled state [ 239.052451][ T6332] bridge_slave_1: left allmulticast mode [ 239.058104][ T6332] bridge_slave_1: left promiscuous mode [ 239.063874][ T6332] bridge0: port 2(bridge_slave_1) entered disabled state [ 239.071594][ T6332] bridge_slave_0: left allmulticast mode [ 239.077271][ T6332] bridge_slave_0: left promiscuous mode [ 239.082900][ T6332] bridge0: port 1(bridge_slave_0) entered disabled state [ 239.216347][ T6332] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 239.226834][ T6332] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 239.236708][ T6332] bond0 (unregistering): Released all slaves [ 239.307746][ T6332] hsr_slave_0: left promiscuous mode [ 239.313386][ T6332] hsr_slave_1: left promiscuous mode [ 239.318991][ T6332] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 239.326531][ T6332] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 239.334088][ T6332] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 239.341602][ T6332] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 239.350778][ T6332] veth1_macvtap: left promiscuous mode [ 239.356400][ T6332] veth0_macvtap: left promiscuous mode [ 239.361881][ T6332] veth1_vlan: left promiscuous mode [ 239.367141][ T6332] veth0_vlan: left promiscuous mode [ 239.444397][ T6332] team0 (unregistering): Port device team_slave_1 removed [ 239.456012][ T6332] team0 (unregistering): Port device team_slave_0 removed