last executing test programs: 10.133179815s ago: executing program 3 (id=2095): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000040)={0x1}, 0x8) setsockopt$sock_int(r0, 0x1, 0x22, &(0x7f0000000080)=0x7, 0x4) ioctl$BTRFS_IOC_WAIT_SYNC(r0, 0x40089416, &(0x7f00000000c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=@ipv6_newrule={0x30, 0x20, 0x100, 0x70bd2a, 0x25dfdbfd, {0xa, 0x80, 0x20, 0x3, 0x2, 0x0, 0x0, 0x0, 0xc}, [@FRA_SRC={0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x4010) r2 = syz_open_dev$loop(&(0x7f0000000200), 0xd, 0x200d80) ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x9, 0x401, 0x0, 0x9, 0x7, 0x0, "b7a0667fb811fa98c02cf4334577400e780b7ea3c16eb9eb2e9e6b3a48ac56c7ccc042ae8caf1b79f091df80211083bd65cdc2a12101dbf4badca176690bbfc1", "98c0c8deaabd9a42e34857287c8ee2e63e56cf5c32c9907ff41a74d629eed3457935f3edb0156ce75cb4732b5445830598763ed1bd3bbf7011eba16aaac4ebd8", "856f10f883816f83837933dbe6a43a5ed2b7558ef4ce54aac66b4ae72eeb3f23", [0x79, 0x7]}) ioctl$BLKPG(r2, 0x1269, &(0x7f0000000400)={0x3, 0x0, 0x98, &(0x7f0000000340)={0x8, 0xd, 0x7}}) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000480), r0) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x4c, r3, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xdc}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x5}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x9d0}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x4ebc8537}]}, 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000600), r0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000006c0)={'gre0\x00', &(0x7f0000000640)={'syztnl0\x00', 0x0, 0x80, 0x40, 0x6, 0x0, {{0x18, 0x4, 0x3, 0x4, 0x60, 0x68, 0x0, 0xfc, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x38}, @local, {[@ra={0x94, 0x4}, @ssrr={0x89, 0x13, 0x23, [@local, @local, @empty, @empty]}, @ssrr={0x89, 0x1b, 0x11, [@rand_addr=0x64010101, @rand_addr=0x64010100, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0x10}, @private=0xa010100, @broadcast]}, @ssrr={0x89, 0xf, 0xd3, [@local, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x3b}]}, @ra={0x94, 0x4}, @ssrr={0x89, 0x7, 0x2d, [@multicast2]}]}}}}}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000700)={@loopback, @local, 0x0}, &(0x7f0000000740)=0xc) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r0, &(0x7f00000008c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000880)={&(0x7f0000000780)={0xd4, r4, 0x200, 0x9, 0x25dfdbfc, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x20008041}, 0x4) ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x2, 0xf562, 0x0, 0x3, 0x18, 0xd, "54b3cc3270b4078e41b54410377c29d1051feaa89883f96dc5914f429ba5d5a75844cb76a94c9d5275246eee459ce08d92277d4736453e8f2a4bff6ebc659350", "1ba3d01c0cb3bea37c5a26d169c81fc87924830f80f4b208080a887e8b1396d0d24ed8a687a9559dd351c2a5fd1b740bef1869239eb3b25ad6c9dbad20a2d854", "a84c908c95470e3aab2c47f4f8bd3514a87eb17f2afd23858949fccd2d100996", [0x401, 0x100000000]}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000a00), 0x2000, 0x0) ioctl$TUNSETVNETHDRSZ(r7, 0x400454d8, &(0x7f0000000a40)=0x5) ioctl$BTRFS_IOC_QUOTA_CTL(r2, 0xc0109428, &(0x7f0000000a80)={0x2}) timerfd_create(0x8, 0x800) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000ac0)={{0x1, 0x1, 0x18, r2, {r7}}, './file0\x00'}) finit_module(r8, &(0x7f0000000b00)='!{\x00', 0x0) accept4$packet(r9, &(0x7f0000000b40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000b80)=0x14, 0x80000) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000c00), r0) sendmsg$MPTCP_PM_CMD_GET_ADDR(r8, &(0x7f0000000cc0)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x2c, r10, 0x10, 0x70bd2c, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x566}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40080}, 0x8054) getsockopt$inet6_mreq(r8, 0x29, 0x1c, &(0x7f0000000d00)={@dev}, &(0x7f0000000d40)=0x14) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000e40)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x28, r1, 0x300, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x64}, @void, @val={0xc, 0x99, {0x400, 0x2e}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x68084) quotactl_fd$Q_SYNC(r9, 0xffffffff80000102, 0x0, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000f40)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000f00)={&(0x7f0000000ec0)=@gettfilter={0x34, 0x2e, 0x8, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0xa, 0xe}, {0x0, 0xe}, {0xa, 0x5}}, [{0x8, 0xb, 0x3}, {0x8, 0xb, 0xa}]}, 0x34}, 0x1, 0x0, 0x0, 0x4c000}, 0x11) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000001080)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001040)={&(0x7f0000001000)={0x30, 0x0, 0x10, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xfffffffffffffff7}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x30}, 0x1, 0x0, 0x0, 0x44080}, 0x800) 9.984569897s ago: executing program 3 (id=2096): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) fsetxattr$trusted_overlay_origin(r0, &(0x7f0000000000), &(0x7f0000000040), 0x2, 0x1) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x40, 0x2, 0x6, 0x1, 0x6000000, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x40}}, 0x0) r1 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x4, 0xa8000) ioctl$USBDEVFS_DROP_PRIVILEGES(r1, 0x4004551e, &(0x7f0000000100)=0xda14) 9.935202181s ago: executing program 3 (id=2097): gettid() r0 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, r1}, 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x6, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000018200000", @ANYRES32=r2, @ANYBLOB="0000000000000000c3000c000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x5, 0xd2, &(0x7f00000002c0)=""/210}, 0x90) read(r0, &(0x7f0000000440)=""/247, 0x26) prlimit64(0x0, 0x0, 0x0, 0x0) r3 = socket$caif_stream(0x25, 0x1, 0x0) sendmmsg$sock(r3, &(0x7f0000003140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4040101) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_REMOVE(r4, &(0x7f0000002e80)={0x0, 0x0, &(0x7f0000002e40)={&(0x7f0000002e00)={0x14, r5, 0x1}, 0x14}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x0, 0x1, 0x3}, 0x14}}, 0x0) r7 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x400800, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r7, 0xc0bc5310, &(0x7f0000000040)) 9.895401604s ago: executing program 3 (id=2098): ioperm(0x0, 0x101, 0x8) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) bpf$BPF_PROG_TEST_RUN(0x10, &(0x7f0000000000)={0xffffffffffffffff, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 9.798317152s ago: executing program 3 (id=2099): syz_emit_ethernet(0x3b6, &(0x7f00000003c0)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x380, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af0302"}, {0x0, 0x1, "00001c050000000026000400"}, {0x3, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8675b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x0, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x2, 0x7, "b8a3e100908f61640000000200fff500000000000000000000008879e66485201a0015ca83747357a02745000400"/55}, {0x0, 0x14, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c"}, {0x0, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') syz_io_uring_setup(0x4172, &(0x7f0000000ac0)={0x0, 0x0, 0x10100, 0xfffffffe, 0x0, 0x0, r0}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)={0x14, r4, 0x1, 0x0, 0x0, {0x7}}, 0x14}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x55, 0x2004, @fd=r3, 0x8, 0x0, 0x0, 0x2}) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x400000}}, {@minixdf}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") creat(&(0x7f0000000040)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r5 = open(&(0x7f00000005c0)='./bus\x00', 0x40000, 0x0) preadv2(r5, &(0x7f0000000400)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'gre0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="280000001c000100000000000000000007000000", @ANYRES32=r8, @ANYBLOB="480000000a000200aaaaaaaaaa0c"], 0x28}}, 0x0) socket$kcm(0x10, 0x2, 0x4) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000080)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c00000011000100000000000000000007000000", @ANYRES32=r11, @ANYBLOB="00000002090000004f001a800800973f3d88434a"], 0x2c}}, 0x0) socket$packet(0x11, 0x3, 0x300) r12 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r12, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="39000000140081ae10003c000500018311001f9f660fcf066505acb612f691f3bd3508abca1be6eeb89c44ebb37358582bdbb7d553b4e92155", 0x39}], 0x1}, 0x0) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000880)=ANY=[@ANYRES16], &(0x7f0000000240)='syzkaller\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x31}, 0x90) r14 = socket$kcm(0x11, 0x2, 0x300) setsockopt$sock_attach_bpf(r14, 0x1, 0x32, &(0x7f00000000c0)=r13, 0x4) 9.604120128s ago: executing program 3 (id=2103): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002600)={0x11, 0x5, &(0x7f00000026c0)=ANY=[@ANYBLOB="180000000000000000000000000000001600000000000000670000000000000095"], &(0x7f0000002700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x55}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000280)='netlink_extack\x00', r0}, 0x10) socket$nl_route(0x10, 0x3, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000000)='./file0\x00', 0x101c088, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x6, 0x2c3, &(0x7f0000000900)="$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") syz_emit_ethernet(0x4e, &(0x7f00000003c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd600a843500180600fe800048082ac3f644346a00000000bb", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='`\x00\x00\x00'], 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000020600000000000000000000000600000500"], 0x3c}}, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x2a00200, &(0x7f0000000140), 0x84, 0x479, &(0x7f0000000500)="$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") setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000680)=@raw={'raw\x00', 0x4001, 0x3, 0x238, 0x0, 0x0, 0x148, 0x0, 0x148, 0x220, 0x240, 0x240, 0x220, 0x240, 0x7fffffe, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'ip6gretap0\x00', 'netdevsim0\x00'}, 0x0, 0xc8, 0x110, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'lo\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast1, 'vxcan1\x00'}}}, {{@ip={@local, @loopback, 0x0, 0x0, 'veth0_vlan\x00', 'macvtap0\x00'}, 0x0, 0x70, 0x90}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x298) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x66, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4}, 0x0, 0x1, 0xffffffffffffffff, 0x0) futex(&(0x7f000000cffc), 0xb, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000000)={0x0, 0x989680}, &(0x7f0000048000), 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) 4.116187804s ago: executing program 0 (id=2154): io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/33, 0x21}, {&(0x7f00000002c0)=""/188, 0xbc}, {&(0x7f0000000140)=""/19, 0x13}], 0x3) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7f}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(0xffffffffffffffff, 0x84, 0x81, &(0x7f0000000000)='\x00\x00', 0x2) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) setrlimit(0x40000000000008, &(0x7f0000000000)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000003480)={&(0x7f00000032c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x6, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x0, [{0x3}]}]}, {0x0, [0x0, 0x0, 0x2e, 0xbe]}}, 0x0, 0x36}, 0x20) socket$inet_udplite(0x2, 0x2, 0x88) symlink(&(0x7f0000001000)='./file0\x00', 0x0) umount2(&(0x7f0000000200)='./file0\x00', 0x8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0x5) setuid(0x0) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendto$inet6(r1, 0x0, 0x0, 0x18841, &(0x7f00000000c0)={0xa, 0x4e24, 0x0, @mcast1}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000380)="e9", 0x1}], 0x1}}], 0x1, 0x404c484) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000280)=0x8) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000200)=@assoc_value={0x0}, &(0x7f0000000240)=0x8) r6 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f0000000080)={r5}, 0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000100)={r5, 0xffff}, 0x8) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000000)={r3, @in={{0x2, 0x4e22, @multicast1}}}, 0x84) 4.059117849s ago: executing program 0 (id=2156): r0 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00'}) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000000)=0x3, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x8000) r1 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000002700)=@raw={'raw\x00', 0x8, 0x3, 0x218, 0x0, 0x8, 0xfa04, 0x0, 0x6c02, 0x180, 0x194, 0x194, 0x180, 0x194, 0x3, 0x0, {[{{@ip={@empty=0x1e00, @broadcast, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0xa0, 0xc8, 0x0, {0x0, 0x74020000}, [@common=@inet=@tcp={{0x30}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@ip={@multicast2, @dev, 0x0, 0x0, '\x00', 'tunl0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x278) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@newlink={0x4c, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}, @IFLA_IPTUN_LINK={0x8, 0x1, r5}]}}}, @IFLA_MTU={0x8, 0x4, 0xff7f}]}, 0x4c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f0000000040)=@deltclass={0x48, 0x29, 0x700, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xc, 0x1}, {0x4, 0x9}, {0xf, 0x5}}, [@tclass_kind_options=@c_htb={{0x8}, {0x14, 0x2, [@TCA_HTB_RATE64={0xc, 0x6, 0xdb3b}, @TCA_HTB_OFFLOAD={0x4}]}}, @TCA_RATE={0x6, 0x5, {0x2, 0x5}}]}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x851) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000100)) socket(0x2c, 0x800, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) socket$nl_route(0x10, 0x3, 0x0) r7 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000000)) pwritev(r7, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, 0x0, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) 3.692038399s ago: executing program 0 (id=2158): ioprio_set$uid(0x3, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200010, &(0x7f0000000300)={[{@user_xattr}, {@nombcache}, {@dioread_lock}, {@norecovery}, {@barrier_val={'barrier', 0x3d, 0x4c}}, {@lazytime}, {@init_itable_val={'init_itable', 0x3d, 0x5}}, {@usrquota}, {@errors_continue}]}, 0xfe, 0x55d, &(0x7f0000000980)="$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") r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000006ac0)='cpuacct.stat\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040), 0x10f) preadv2(r2, &(0x7f0000000000)=[{&(0x7f00000003c0)=""/4096, 0xc00}], 0x1, 0x0, 0x0, 0x0) r3 = memfd_create(&(0x7f0000000300)='\x00\xc76\xbe\x91\x8d\x182)!\x9a%\xa2\xd28\xd6\x06\a\x0e\xfc\xfe\x12\x8f&\x13\xae%@T\xa3\xb0>\\\xec\xa9\xf9Q@6A\x10\x8cn|\x00\x00\x00\x00\x00\x00\x00\x00\xeb0\xdd\xe8\x87\x05=\xfb\x8b}\xfc\x1d\x03\xe1\xfcm\x9b\xf7fo\"i\xa1hk\x1f\xf5z\xc1\x7f\xa4\\]\xc4\xbe3\xf9\xa8\t?:\xd8\xda\x84\xeepI[\x1c\x00\x00\x00\x00\xf9v\x00\x00\x00\x00\x00T\xb6\xbe\x0f~\xc0\x92\xe9O{\xa8\x81(\x01\x14\xfc\x83\xf9\xfb\x05\x94T\x81@Lq]\xf9\x15zj\x87\xc4\x8e\xe8/\xb9-&R\x8e\xb2\xb3bBx\x1e1\x18\x8f\x19\xf7]#\xed,\xc7\x11\tp\xf4\xa3\xee\x00\x00\x00\x00\'}\x18\xe8O\xa8#K\xb6\xe4U\x92\xd2\x9d\xb8?2kovd\xa4\x1bl+\x14\x17\x14\x17C2! U\x04:\xd93F\xb9\xfc\x1b\xfd}\x05\xf9\x11\xf3)>q\x10\xd3\xf0\xaf>\xf8t(bX\xe3g\x05\xfe\b\xbcy\x95*\xca\a\xaf\xbb\xf9\xc3Y\xa2\x91\x90.\xc8\xbe\xb0\xa6\xbd\xbd\xfd\xfaf*\xb2&\x82\xa0\x17\xe7)\xf5\xa2\xccv\n\x1b\xd4\xf4\x11*\xc9\xc6*\xa4.\x94[$\xb8\xb3Q\xde\xd8A\xa4~c,`\x02\xb8!r\xac\x82\x13\xd0}C7\xfb\xf2\tM\x1e\xe9\xa5\v\xc5\xba(\x89\xb0l\x92H\x1cR\x1f>\xc4ie\xe0B\xf0[\xe2\xe1\x12\x1d\x8fR&\x92I\xf82&\x16<\xf2RR\xc2\x02.Q\xef\x85\xef\xf9\xe5\x00\xe9\xca\xb1\x8c\x11\x11l\x9f\xc8\b\xf7A\xa6\x81\xad\xdc\x95\xc8\xef\x102\xa8\x87\x01\x00\\\xfee \n0F\xbc\x85\xc5C\xd0\x99\xe4\t\xab`\'t\xc2\xe9\x13\xcag\xea\xb3\xb5\x92\x00J\xc6y\x05\xcc\xde\xa0\xf6\xb9 \xe5\xdd\f\x18\xfc\xe0\xc3(\xd8\xeb\x1a6\xe6\xfa\x93\xc07R\x0f-\x9e\xf3\x87O\xd9\xd5o\x1bA\x88L/\xe7>45Q?\be\x7f\xa9\x9a\xcae\xd8Y\xdf]\x1bS\x825\xcb\x00\xa4}\x97\x84T\xad\x9b\x1e!\x8a\xbc\x02+#Q\xa9 \xe9\x05r\xe1\xec\x0f\xa7\xe6Of\x95\x02{y?{\xb3\x1avx0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r7, r8, &(0x7f00000001c0)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index}) r9 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000200)={0x0, 0x4, 0x18}, 0xc) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000240)=0x0, &(0x7f0000000340)=0x4) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r11, &(0x7f0000000140)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3, 0x11, 0xffffffffffffffff, 0xdffff000) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)={0x2, 0x4, 0x8, 0x1, 0x80, r9, 0x5, '\x00', r10, r11, 0x2, 0x1, 0x1}, 0x48) io_uring_enter(r6, 0x54, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x10e, &(0x7f0000000280)={[{@errors_remount}, {@nodelalloc}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x10000}}, {@block_validity}, {@quota}]}, 0x3, 0x452, &(0x7f0000000ec0)="$eJzs28tvG0UYAPBv10lLXySU8ugDCBRExCNp0gI9cAAEEgeQkLiUY0jSqtRtUBMkWlVQECpHVIk74ojEX8AJLgg4IXGFO6pUoV4onIzW3q0ftU2SOlmofz9pm5ndsWc+z449u9MNYGhNZP8kETsj4teIGGtk2wtMNP5cv3Zh/q9rF+aTqNXe/COpl/vz2oX5omjxuh15ZjKNSD9JYn+XepfPnT81V60uns3z0yun351ePnf+6ZOn504snlg8M3v06JHDM889O/vMQOK8K2vrvg+WDux99a3Lr88fu/z2j18nRfwdcQzIRL+Dj9VqA66uXLta0slIiQ1hTSoRkXXXaH38j0Ulmp03Fq98XGrjgA1Vy/U4fLEG3MaSKLsFQDmKH/rs+rfYNm/2Ub6rLzYugLK4r+db48hIpNG4MBrtuL4dpImIOHbx7y+yLTbmPgQAQJtvs/nPU93mf2nc21LuznxtaDxfS9kdEXdHxJ6IuCeiXva+iLh/jfV3LpLcPP9Jr6wrsFXK5n/P52tb7fO/tCgyXslzu+qZ0eT4yeriofwzmYzRrVl+pk8d3738y2e9jrXO/7Itq7+YC+btuDKytf01C3Mrc7cSc6urH0XsG+kWf3JjJSCJiL0RsW+ddZx84qsDvY51xl9L+r3TC+3ZAawz1b6MeLzR/xejI/5C0n99cvqOqC4emi7Oipv99POlN3rV/+/9v7Gy/t/e9fy/Ef940rpeu7z2Oi799mnPa5qpdZ3/zR1b8r/vz62snJ2J2JK81mh06/7Z5muLfFE+i3/yYPfxvzuan8T+iMhO4gci4sGIeCjvu4cj4pGIONgZWNpM/vDSo+/0iv+/0P8LHf0/3l6ko/+biS3Ruad7onLq+2/a37GZXN3335F6ajLfs5rvv9ZWJH0aeEsfHgAAAPxPpBGxM5J06kY6TaemGv+Hf09sT6tLyytPHl9678xC4xmB8RhNiztdjfvBjfuhM/llfZGf7cgfzu8bf17ZVs9PzS9VF8oOHobcjh7jP/N7pezWARvO81owvIx/GF7GPwwv4x+GV5fxv62MdgCbr9vv/4fNZG1sMxsDbKqO8W/ZD4aI638YXsY/DK/W8d/3+XvgdrK8Lfo/vC8h0TURaWm1pwN/52SDR8HO8vtrrYmyv5kAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAG458AAAD//zPc5K4=") 3.528801092s ago: executing program 0 (id=2161): r0 = socket$inet(0x2, 0x3, 0x4) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'team_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001b00)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}}, 0x0) r3 = add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @desc2}, &(0x7f0000000100)={0x0, "a765c9ecccda9c88bf8c4aef29656b2a8497d87cd180e3e3056ecec75f8aa621db8140a990cd2471d97fe4aa32804b38d52f960c517e1d9f337c6f465017b306", 0x21}, 0x48, 0xfffffffffffffffa) syz_mount_image$vfat(&(0x7f0000003880), &(0x7f0000000000)='./file1\x00', 0x4000, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x6, 0x2a6, &(0x7f0000000440)="$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") open(&(0x7f0000000340)='./bus\x00', 0x8e046, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x1718, 0x0, 0x0, 0x400, 0x0, "ef359f413bb93852f7d6d1ce5d29c3ee5e5ca9000f7c41499dc2aac63a4b78c660e677df701908b9aaa3f6a00400", "036c47c6780820d1cbf7896de1fdcf335263bdbcef549ba197fce47ddfdd753abd9501ce721b6ae9b49600002a00", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00"}) sched_setaffinity(0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000080)={[{@journal_ioprio}, {@nombcache}, {@stripe={'stripe', 0x3d, 0x2}}, {@usrquota}]}, 0x1, 0x4fc, &(0x7f0000000b00)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) write$binfmt_script(r4, &(0x7f0000000240), 0xfecc) mount(0x0, &(0x7f0000000340)='./bus\x00', 0x0, 0x1000, 0x0) r6 = open(&(0x7f00000005c0)='./bus\x00', 0x0, 0x0) syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000540)='./file0\x00', 0x204018, &(0x7f0000000140)=ANY=[@ANYBLOB="6f76657272696465726f636b7065726d2c6e6f636f6d70726573732c686964652c73657373696f6e3d3078303030303030303030303030303032312c756e686964652c696f636861727365743d63703433372c6f76657272696465726f636b7065726d2c626c6f636b3d3078303030303030303030303030303430302c005fb50aab29cf1d32d24be5ab2a6506aa524c8f1cd5781842ee1c86bee627767fee958f25bb6db8e631262ed8a59d337d730b6698271aeb8c31c1902a7e236e5dd878e6c1352c0c799d8e80d7346f8d2870acebe617c694bbb925d3ab4fb01784c564c03d88c81d2f84f58e8c6ba18548f09fa6"], 0x1, 0x544, &(0x7f0000000580)="$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") ioctl$FS_IOC_SETFLAGS(r6, 0x4c02, &(0x7f0000000140)) write$cgroup_int(r5, &(0x7f0000000200), 0x42400) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000940)={'#! ', './file0'}, 0xfdef) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = add_key$fscrypt_v1(&(0x7f0000000180), &(0x7f0000000000)={'fscrypt:', @desc2}, &(0x7f00000004c0)={0x0, "cd7c05de8fdfba0ab051d8dc96a09d99b417457af3f3b1396565c283bc8136aa810e59f5403838000000000000000200", 0xd}, 0x48, r3) keyctl$update(0x2, r7, &(0x7f0000000740)='\x00', 0x1) 2.475914218s ago: executing program 0 (id=2172): r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x0) r1 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x200000, &(0x7f00000002c0), 0xfc, 0x57c, &(0x7f0000000ac0)="$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") openat(r1, 0x0, 0x440040, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) pwritev2(r2, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0x7500}], 0x1, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) close_range(r0, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r3 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r3, 0x402, 0x2) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f00000001c0)=ANY=[], 0x118) fcntl$notify(r3, 0x402, 0x0) iopl(0x0) mount$bind(0x0, 0x0, 0x0, 0x0, 0x7ffffffff000) 2.180272192s ago: executing program 2 (id=2177): socket$inet6(0xa, 0x800000000000002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x3}, 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x4000}, 0x48) socket$inet6(0xa, 0x3, 0xe2) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000002880)={[{@user_xattr}, {@nombcache}, {@journal_dev={'journal_dev', 0x3d, 0x1}}, {@usrjquota}, {@orlov}, {@lazytime}, {@init_itable_val={'init_itable', 0x3d, 0x45}}, {@jqfmt_vfsold}, {@grpjquota}]}, 0xfe, 0x56f, &(0x7f00000008c0)="$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") fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r3, 0x0) 2.054078452s ago: executing program 0 (id=2178): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r0}, 0x10) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000680)={{{@in=@local, @in6=@mcast1, 0x4e24, 0x0, 0x4e20, 0xfff, 0xa, 0x80, 0x20, 0x67, 0x0, 0xee01}, {0x0, 0x1, 0x9, 0x0, 0x0, 0x8, 0x2a0d, 0x100000000}, {0x0, 0x0, 0x2, 0x31b}, 0x1, 0x6e6bbc, 0x2, 0x1, 0x3, 0x1}, {{@in6=@ipv4={'\x00', '\xff\xff', @broadcast}, 0x4d5, 0x2b}, 0x2, @in6=@remote, 0x3500, 0x2, 0x0, 0x3, 0x2, 0x800, 0xfffffff8}}, 0xe8) 1.798742073s ago: executing program 2 (id=2183): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000040), 0xffffff94) (async, rerun: 64) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async, rerun: 64) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x0, 0x0, 0x9, 0x0, 0x62}, 0x9c) (async, rerun: 32) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='ns\x00') (async, rerun: 32) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) (async, rerun: 64) r1 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) (rerun: 64) epoll_create1(0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x127) (async, rerun: 32) syncfs(0xffffffffffffffff) (async) perf_event_open(&(0x7f00000000c0)={0x3, 0x80, 0x66, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x4, 0x3}, 0x1000, 0x40000, 0x8, 0x0, 0x4, 0x7fff, 0x0, 0x0, 0x200, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0xb) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001300)=ANY=[@ANYRES16=r1], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYBLOB="c25eb8b42ba046c11c067eb94596f2bc4ed25b440eb7e7bc58f5736c20f32edaa2f7ec7302f03889080c34025ddb2c0e7038db34c201b7de0e84c3147666be3c702ca5ae8ed87682e83be5c726380daf72601408601217c02cc0d3fa6ac00b665ad659269dc183ca8abf55f254b79a6b0d88d9ba4932db0455b3006671d4cba0dfe19b87d51bc59e25e3de7b12c011c6f53bed5f23b2ad11b92214db146b688c0dc71c4885431489f180869976b1012da9d978517ca031264ff88433af5e74badc2f79cdc420a5ba992e350e3d1a4c08a59cd07e69782d1875fc9574f31293b59807c5", @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x54}, 0x1, 0x0, 0x0, 0x4000}, 0x24000850) (async, rerun: 32) perf_event_open(&(0x7f0000000200)={0x4, 0x80, 0x99, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8001, 0xfffffffffffffffa}, 0x510, 0x0, 0x0, 0x0, 0x4, 0xffffffff, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async, rerun: 32) bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)=@generic={&(0x7f0000000140)='./file0\x00', 0x0, 0x10}, 0x18) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="74000000000201040000000000000000020000002400028014000180080001000000000008000200ac1414bb0c00028004000100000000002400038014000180403ae1a30000000008000200000000000c0002800500010000000000180001801400018008000100ac1414bb08000200ac141400"], 0x74}}, 0x0) (async) r6 = socket(0x15, 0x5, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='blkio.bfq.time\x00', 0x275a, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x42c20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8740, 0xffffffffffffffe4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) write$binfmt_script(r8, &(0x7f0000000200), 0x4) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0) (async) getsockopt$inet6_int(r6, 0x29, 0x4, &(0x7f0000000100), &(0x7f0000000180)=0x4) getsockopt(r6, 0x200000000114, 0x271e, 0x0, &(0x7f0000000000)) 1.614758358s ago: executing program 2 (id=2184): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000080000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r1 = perf_event_open(&(0x7f0000000340)={0x3, 0x80, 0x81, 0xb4, 0x4, 0x80, 0x0, 0x2, 0x10080, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x6, 0x1, @perf_config_ext={0x50, 0xffffffffffffffff}, 0x40, 0x1ff, 0x2, 0x1, 0x400, 0x5, 0x5, 0x0, 0x4, 0x0, 0x6f}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000040)='/\x00') bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="77be4fb79f6162f371383f5fe13a0abcf93b0f5d27527986c039d899878df32b1edb7b04bd80b255a4fdafa4949e7090d240542e1eff23e13a3d4cd8abf29f27227d6576cc3f9e74bf448f54e5a1dcc15c05bfabda07a68515fb8d5f1795475637106eaee38a736d587504979ad078ad897699962310e8a80768a5a1df6a4a267a5eb115f5284964ef86990388167ebc7433330e387c30b11ae86257faa125802bdee5", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200ffb703000008000000b704000000000000850000008600"/61], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair(0x1d, 0x2, 0x2, &(0x7f0000000000)={0x0, 0x0}) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES8], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000000c0), 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000a00)={0x2a0c2}, 0x18) r4 = dup(r3) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff}, 0x0) syz_emit_ethernet(0x176, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaa48847000000000000000000000000603f599001340600fe8000000000000000000000000000aafe8000000000000000000000000000000000000000000000c204000000000000000c000000000000fc02000000000000000000000000000000000000000000000000ffff00000000fe800000000000000000000000000000fe80000000000000000000000000000000000000000000000000000000000000fc00"/190, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="50000000907800006c3e4af6e95497a4e1f23137ae5d9ab0d6a6a3ff1ff52b15b109af0f93abe7bddfe72723968479f91c26bda6d7d589fb8cb68c4f8760051117d27ab8434eb2818254ab55825a80ba277e953c42c3e3a34d6f1998abd85935442e96e25dc77ffb0469578ffae16aa69caf18e96b08085370c0c242147969cf393604407755c55c4b539a2e36241dc73a3d65b8b2585660c1365e7ec6c7a536a08d21e53aa4e60cad0bd8eb60a00943"], 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r3}}) write$P9_RLERRORu(r4, &(0x7f0000000380)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f00000008c0)={0xe, 0x18, 0xfa00, @ib_path={0x0}}, 0x20) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x2c, 0x16, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x0, 0xb00, 0x0, {}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc}]}], {0x14, 0x10}}, 0xa0}}, 0x0) write$binfmt_elf64(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000800000003003c02ffffffef3501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000680)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@access_uid}], [], 0x6b}}) bpf$PROG_LOAD(0x5, 0x0, 0x0) llistxattr(&(0x7f0000000180)='./file0/../file0\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='blkio.bfq.dequeue\x00', 0x0, 0x0) 1.241083429s ago: executing program 1 (id=2187): syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001980)={0xc, {"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", 0x1000}}, 0x1006) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socket$inet_sctp(0x2, 0x0, 0x84) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0x40305839, &(0x7f0000000000)=ANY=[@ANYBLOB]) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0xe4}, 0x10) r1 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r1, 0x0, 0x0, 0x24000890, &(0x7f0000000440)={0xa, 0x0, 0x0, @remote}, 0x20) 1.148903806s ago: executing program 1 (id=2190): r0 = getpid() process_vm_readv(r0, 0x0, 0x0, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x5f}], 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000acee4b186ab4c00000000000095000400"/48], &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='rss_stat\x00', r1}, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), 0xffffffffffffffff) r2 = add_key$user(&(0x7f0000000000), 0x0, &(0x7f00000000c0)="ff", 0x1, 0xffffffffffffffff) r3 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1d, r2, 0xffffffffffffffff, r3, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) ioperm(0x8, 0x101, 0x8) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r5, &(0x7f0000000200), 0xf000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0x0) bpf$BPF_PROG_TEST_RUN(0x10, &(0x7f0000000000)={0xffffffffffffffff, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.107953579s ago: executing program 4 (id=2191): ioctl$BTRFS_IOC_ADD_DEV(0xffffffffffffffff, 0x5000940a, &(0x7f0000000340)={{}, "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"}) socketpair$unix(0x1, 0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140), 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = socket(0x200000100000011, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random="4e84e5679f60"}, 0x14) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x53) write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, &(0x7f00000002c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x30) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='t', @ANYRESHEX, @ANYRESHEX]) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x1b1100, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/consoles\x00', 0x0, 0x0) lseek(r1, 0x2a, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r2) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0xb) 1.10747671s ago: executing program 1 (id=2192): ioctl$BTRFS_IOC_ADD_DEV(0xffffffffffffffff, 0x5000940a, &(0x7f0000000340)={{}, "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"}) socketpair$unix(0x1, 0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140), 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = socket(0x200000100000011, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random="4e84e5679f60"}, 0x14) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x53) write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, &(0x7f00000002c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x30) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='t', @ANYRESHEX, @ANYRESHEX]) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x1b1100, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/consoles\x00', 0x0, 0x0) lseek(r1, 0x2a, 0x0) (fail_nth: 1) r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r2) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0xb) 932.377154ms ago: executing program 4 (id=2193): socket$inet6(0xa, 0x800000000000002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x3}, 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x4000}, 0x48) socket$inet6(0xa, 0x3, 0xe2) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000002880)={[{@user_xattr}, {@nombcache}, {@journal_dev={'journal_dev', 0x3d, 0x1}}, {@usrjquota}, {@orlov}, {@lazytime}, {@init_itable_val={'init_itable', 0x3d, 0x45}}, {@jqfmt_vfsold}, {@grpjquota}]}, 0xfe, 0x56f, &(0x7f00000008c0)="$eJzs3U1rVFcfAPD/nbz4+jxGsNJ2UQIuarFOTNIXC13YZWmlQru3Q3INkokjmYmYVKgu6sZNkUIpFUo/QPddSr9AP4XQClIktItuUu7kThydmUwyjiY6vx9cPee+5Nwz554z/ztnhhvAwBrP/ilEvBYR3yYRh5q2DUe+cXx9v9WH12ayJYm1tc//SiLJ1zX2T/L/D+SZVyPit28iThRay60ur8yXyuV0Mc9P1BYuT1SXV05eXCjNpXPppanp6dPvTk998P57favrW+f++eGzux+fvnVs9ftf7h++ncSZOJhva67HU7jenBmP8fw1GYkzT+w42YfCdpNkp0+Angzl/XwksjHgUAzlvR54+X0dEWvAgEr0fxhQjTigcW/fp/vgF8aDj9ZvgFrrP7z+2Ujsrd8b7V9NHrszyu53x/pQflbGr3/euZ0t0b/PIQC6un4jIk4ND7eOf0k+/vXu1Bb2ebIM4x88P3ez+OftdvFPYSP+iTbxz4E2fbcX3ft/4X6bw5J+fUqdxX8fto1/NyatxoYi4pWI+F895htJLlwsp9nY9v+IOB4je7L8ZvM5p1fvrXXa1hz/ZUtWfiMWzM/j/vCex4+ZLdVKT1PnZg9uRLzeNv5NNto/adP+2atzbotlHE3vvNFpW/f6P1trP0e82bb9H81oJZvPT07Ur4eJxlXR6u+bR3/vVP5O1z9r//2b138saZ6vrW6/jJ/2/pt22tbr9T+afFFPj+brrpZqtcXJiNHk09b1U4+ObeQb+2f1P35s8/Gv3fW/LyK+3GL9bx652XHX3tt/ZIulby6r/+y22n/7iXuffPVj7/XP2v+deup4vqbL+Fefat/qCT7t6wcAAAAAAAC7SSEiDkZSKG6kC4Vicf37HUdif6FcqdZOXKgsXZqN+m9lx2Kk0JjpPtT0fYjJ/PuwjfzUE/npiDgcEd8N7avnizOV8uxOVx4AAAAAAAAAAAAAAAAAAAB2iQMdfv+f+WOo7SGjz/cMgWfKI79hcHXt//140hOwK23//V/EAC+Lnnrzvv6fB/D8eTeHAdWf54gCLyjv/zC49H8YXPo/DC79HwAAAAAAAAAAAAAAAAAAAAAAAAAAAPrq3Nmz2bK2+vDaTJafvbK8NF+5cnI2rc4XF5ZmijOVxcvFuUplrpwWZyoL3f5euVK5PDkVS1cnamm1NlFdXjm/UFm6VDt/caE0l55PPW0IAAAAAAAAAAAAAAAAAAAAWlWXV+ZL5XK6KCHRU2J4d5yGRFPiVh969w4PTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQ5L8AAAD//w2/NkU=") fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r3, 0x0) 581.380282ms ago: executing program 1 (id=2194): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) connect$nfc_raw(r0, &(0x7f0000000000)={0x27, 0x0, 0x1, 0x7}, 0xfffffd30) 580.632952ms ago: executing program 2 (id=2195): r0 = socket(0x10, 0x803, 0x0) write(r0, &(0x7f0000001200)="2600000022004701050007008980e8ff02006d20002b1f00c0e9f7094a51f10101033500b088", 0x26) recvfrom$inet6(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x2000000, @remote}, 0x20000002) 520.081757ms ago: executing program 4 (id=2196): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0xb, &(0x7f0000000180)=[{&(0x7f00000001c0)="d8000000190081054e81f782060000000000000006007c095dd2466518000e800a00142603600e1208000f0000000406a80016c00800094014000000035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791433a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad909d5e1cace81ed0bffece0b42a9eca0200e6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x0) 517.415357ms ago: executing program 2 (id=2197): io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/33, 0x21}, {&(0x7f00000002c0)=""/188, 0xbc}, {&(0x7f0000000140)=""/19, 0x13}], 0x3) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7f}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(0xffffffffffffffff, 0x84, 0x81, &(0x7f0000000000)='\x00\x00', 0x2) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) setrlimit(0x40000000000008, &(0x7f0000000000)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000003480)={&(0x7f00000032c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x6, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x0, [{0x3}]}]}, {0x0, [0x0, 0x0, 0x2e, 0xbe]}}, 0x0, 0x36}, 0x20) socket$inet_udplite(0x2, 0x2, 0x88) symlink(&(0x7f0000001000)='./file0\x00', 0x0) umount2(&(0x7f0000000200)='./file0\x00', 0x8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r2) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendto$inet6(r1, 0x0, 0x0, 0x18841, &(0x7f00000000c0)={0xa, 0x4e24, 0x0, @mcast1}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000380)="e9", 0x1}], 0x1}}], 0x1, 0x404c484) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000280)=0x8) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000200)=@assoc_value={0x0}, &(0x7f0000000240)=0x8) r7 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r7, 0x84, 0x7b, &(0x7f0000000080)={r6}, 0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000100)={r6, 0xffff}, 0x8) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000000)={r4, @in={{0x2, 0x4e22, @multicast1}}}, 0x84) 450.336163ms ago: executing program 2 (id=2198): r0 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) r4 = socket$pptp(0x18, 0x1, 0x2) ioctl$PPPIOCGMRU(r4, 0x80047453, &(0x7f00000002c0)) ioctl$EVIOCSABS20(0xffffffffffffffff, 0x401845e0, &(0x7f0000000340)={0x8, 0x81, 0x0, 0x5}) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYRESHEX=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) writev(0xffffffffffffffff, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 380.549369ms ago: executing program 4 (id=2199): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000080)={{{@in=@dev, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@private2}}, &(0x7f0000000180)=0xe8) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0, {0x6}}, './file0\x00'}) r3 = socket$tipc(0x1e, 0x2, 0x0) statx(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x100, 0x80, &(0x7f0000001480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) statx(0xffffffffffffff9c, &(0x7f0000000680)='./file0\x00', 0x0, 0x2, &(0x7f0000001580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresgid(0x0, r5, r7) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000000500)={{0x1, 0x1, 0x18, r3, {0x0, 0x0}}, './file0\x00'}) r9 = socket(0x10, 0x3, 0x0) sendmsg$GTP_CMD_DELPDP(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14}, 0x14}}, 0x0) getsockname$packet(r9, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) getsockopt$inet_IP_IPSEC_POLICY(r9, 0x0, 0x10, &(0x7f00000003c0)={{{@in=@loopback, @in6=@private1}}, {{@in=@multicast2}, 0x0, @in=@initdev}}, &(0x7f00000002c0)=0x34) getgroups(0x3, &(0x7f0000000300)=[0xee01, 0xee00, 0xee01]) fsetxattr$system_posix_acl(r3, &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f0000000540)=ANY=[@ANYRESHEX=r4, @ANYRESDEC, @ANYRESHEX=r4, @ANYBLOB="486453875b79ca371189b095c70f01f5ccd27c3d776baa7e43fb3b329904b1c265e72832925f208dd47d4939dfd47d442b5f621e65379d2e6f3c41ee2fbec88f673c56e15b0b40278d0748283be0641339f80001288e22a92dc10ba75ab490721a15071f9bfe76a56edaa4b6bfda7cb5ea030ebe079d958fcede532693f8a712ebcefa775da8318b5acba2ac5fb25ae8879ad250828b1069ec0f6aacc3d005ff87d83d3f9f960cd474212a00ed082e6d2c5abb9d230911faaa420315ae7d0f8812771c31971c293839a8b532", @ANYRES32=r7, @ANYRESOCT=r1, @ANYRESOCT=r6, @ANYRES32=r8], 0x3c, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000700)={0x2, 0x80, 0x3, 0x7, 0xc0, 0xd7, 0x0, 0x200, 0x4000, 0x4, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_bp={&(0x7f00000006c0), 0xc}, 0x1004, 0x400, 0x2, 0x2, 0x7, 0x7, 0x4, 0x0, 0x341e}, 0x0, 0xc, 0xffffffffffffffff, 0x1) r10 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r11 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x0) r12 = dup3(r10, r11, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) r14 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r13, &(0x7f0000000080), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3, 0x12, r14, 0x0) ioctl$MON_IOCG_STATS(r12, 0xc0109207, &(0x7f00000001c0)) write$UHID_INPUT(r0, 0x0, 0x0) 327.543913ms ago: executing program 4 (id=2200): syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001980)={0xc, {"a2e3ad2109c752f91b5a470987f70e06d038e7ff7fc6e5539b3245078b089b3308376d060890e0878f0e1ac6e70a9b3368959b6c9a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b38070d095d0936cd3b78130daa61f8e809ea882f5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4040d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a4d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6cb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5136651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600", 0x1000}}, 0x1006) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socket$inet_sctp(0x2, 0x0, 0x84) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0x40305839, &(0x7f0000000000)=ANY=[@ANYBLOB]) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0xe4}, 0x10) r1 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r1, 0x0, 0x0, 0x24000890, &(0x7f0000000440)={0xa, 0x0, 0x0, @remote}, 0x20) 233.834761ms ago: executing program 1 (id=2201): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r0}, 0x10) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000680)={{{@in=@local, @in6=@mcast1, 0x4e24, 0x0, 0x4e20, 0xfff, 0xa, 0x80, 0x20, 0x67, 0x0, 0xee01}, {0x80, 0x0, 0x9, 0x0, 0x0, 0x8, 0x2a0d, 0x100000000}, {0x0, 0x0, 0x2, 0x31b}, 0x1, 0x6e6bbc, 0x2, 0x1, 0x3, 0x1}, {{@in6=@ipv4={'\x00', '\xff\xff', @broadcast}, 0x4d5, 0x2b}, 0x2, @in6=@remote, 0x3500, 0x2, 0x0, 0x3, 0x2, 0x800, 0xfffffff8}}, 0xe8) 12.301449ms ago: executing program 1 (id=2202): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x8, 0x2, 0x2}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000b80)={{r0, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000b40)='%pI4 \x00'}, 0x20) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000140), 0x10) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000540)=0x410, 0x4) bpf$MAP_LOOKUP_ELEM(0x15, &(0x7f00000000c0)={r0, &(0x7f0000000040), &(0x7f0000000480)=""/146}, 0x1d) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000440)='ext4_mballoc_prealloc\x00'}, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180100000100a7d90000000000000000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) set_mempolicy(0x2002, &(0x7f0000000000)=0x9, 0x9) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x8031, 0xffffffffffffffff, 0x0) process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000008640)=[{0x0}], 0x1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mbind(&(0x7f00004f8000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x7, 0x3) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x3) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa1008eaca66589350a5200f8ffffffb7020000fbe34c66938edb3408000000b70300"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000240)={'dummy0\x00', 0x0}) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x9, 0xff, 0xa, 0x800, r1, 0x5, '\x00', r6, 0xffffffffffffffff, 0x5, 0x5, 0x2, 0xd}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000018110000", @ANYRES32=r7, @ANYBLOB="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"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x5e6, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x3}, 0x18804, 0x33e, 0x66, 0x2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x762}, 0x0, 0xfffffffffffffffc, r4, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000300), 0xffffffffffffffff) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r8, &(0x7f00000000c0), 0xfffffff4) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040), 0x2, 0x2}}, 0x20) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6}]}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 0s ago: executing program 4 (id=2203): mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) close(0xffffffffffffffff) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x27ffffe) socket(0x10, 0x3, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x400e, &(0x7f00000001c0)={[{@i_version}, {@nobh}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@block_validity}, {@quota}]}, 0x1, 0x42f, &(0x7f0000000940)="$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") r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000008c0)={'#! ', './file0'}, 0xb) write$binfmt_script(r3, &(0x7f0000000100), 0x4) ioctl$EXT4_IOC_MOVE_EXT(r2, 0x40305829, &(0x7f00000000c0)={0x17c04, 0xffffffffffffffff, 0x0, 0x100000001}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, 0xffffffffffffffff, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r4, 0x29, 0x1, &(0x7f0000000040), 0x4) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@ipv6_newaddrlabel={0x84, 0x48, 0x4, 0x70bd2c, 0x25dfdbff, {0xa, 0x0, 0x78, 0x0, 0x0, 0x713d}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}, @IFAL_LABEL={0x8, 0x2, 0x5}, @IFAL_LABEL={0x8, 0x2, 0x6}, @IFAL_ADDRESS={0x14, 0x1, @remote}, @IFAL_ADDRESS={0x14, 0x1, @local}, @IFAL_ADDRESS={0x14, 0x1, @local}, @IFAL_LABEL={0x8, 0x2, 0x5}]}, 0x84}}, 0x0) write$binfmt_misc(r4, &(0x7f0000000100)=ANY=[], 0xfdef) lseek(r0, 0x101, 0x0) getdents(r0, &(0x7f0000002380)=""/102, 0x66) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r6, 0x107, 0x16, &(0x7f0000000000)={0x3, &(0x7f0000000240)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x5c}, {0x6}]}, 0x10) syz_emit_ethernet(0x26, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x89, 0x0, @empty, @rand_addr=0x64010100}, "90e2a72a"}}}}, 0x0) kernel console output (not intermixed with test programs): v_slave_0 [ 161.527498][ T9420] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.537344][ T9420] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 161.547793][ T9420] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.558826][ T9420] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 161.571639][ T9420] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 161.582172][ T9420] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.592106][ T9420] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 161.602559][ T9420] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.612409][ T9420] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 161.622873][ T9420] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.632730][ T9420] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 161.643176][ T9420] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.656058][ T9420] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 161.667661][ T9420] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.676529][ T9420] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.685269][ T9420] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.694028][ T9420] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.721569][ T6895] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.734283][ T29] audit: type=1326 audit(1722375345.921:693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9606 comm="syz.3.1631" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa418ee73b9 code=0x0 [ 161.773788][ T9612] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9612 comm=syz.0.1632 [ 161.789308][ T9612] loop0: detected capacity change from 0 to 512 [ 161.805126][ T9612] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters [ 161.820190][ T9612] EXT4-fs (loop0): Remounting filesystem read-only [ 161.820277][ T9612] EXT4-fs (loop0): 1 truncate cleaned up [ 161.820565][ T9612] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 161.820672][ T9612] SELinux: (dev loop0, type ext4) getxattr errno 5 [ 161.821547][ T9612] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.873483][ T9612] netlink: 'syz.0.1632': attribute type 1 has an invalid length. [ 161.889236][ T9612] 8021q: adding VLAN 0 to HW filter on device bond4 [ 161.950618][ T9623] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9623 comm=syz.2.1634 [ 161.986246][ T9625] loop0: detected capacity change from 0 to 512 [ 162.007650][ T9625] EXT4-fs error (device loop0): ext4_orphan_get:1417: comm syz.0.1636: bad orphan inode 4 [ 162.044015][ T9625] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 162.207934][ T9652] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9652 comm=syz.4.1645 [ 162.301876][ T9662] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1650'. [ 162.338514][ T9663] loop2: detected capacity change from 0 to 1024 [ 162.349936][ T9663] EXT4-fs: Ignoring removed orlov option [ 162.372182][ T9663] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 162.743990][ T9679] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9679 comm=syz.3.1656 [ 162.828337][ T6895] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.866925][ T29] audit: type=1326 audit(1722375347.051:694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9688 comm="syz.3.1662" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa418ee73b9 code=0x0 [ 162.972095][ T9703] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9703 comm=syz.1.1667 [ 162.993525][ T9420] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.057733][ T9713] loop1: detected capacity change from 0 to 512 [ 163.071256][ T9713] EXT4-fs error (device loop1): ext4_orphan_get:1417: comm syz.1.1671: bad orphan inode 4 [ 163.086227][ T9713] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 163.103722][ T9716] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1673'. [ 163.334645][ T9732] loop2: detected capacity change from 0 to 1024 [ 163.341593][ T9732] EXT4-fs: Ignoring removed orlov option [ 163.452877][ T9732] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 163.714711][ T9742] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9742 comm=syz.3.1681 [ 163.760124][ T9615] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm ext4lazyinit: bg 0: block 3: invalid block bitmap [ 163.901715][ T7052] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.995536][ T9762] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9762 comm=syz.1.1688 [ 164.012179][ T9762] loop1: detected capacity change from 0 to 512 [ 164.087305][ T9765] loop3: detected capacity change from 0 to 1024 [ 164.094127][ T9765] EXT4-fs: Ignoring removed orlov option [ 164.166900][ T9420] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.208188][ T9762] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters [ 164.232515][ T29] audit: type=1326 audit(1722375348.381:695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9766 comm="syz.4.1690" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7faa4d0e73b9 code=0x0 [ 164.265563][ T9765] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 164.355954][ T9774] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9774 comm=syz.0.1692 [ 164.402945][ T9762] EXT4-fs (loop1): Remounting filesystem read-only [ 164.411942][ T9762] EXT4-fs (loop1): 1 truncate cleaned up [ 164.415630][ T9776] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1689'. [ 164.418096][ T9762] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 164.439136][ T9762] SELinux: (dev loop1, type ext4) getxattr errno 5 [ 164.447663][ T9762] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.482947][ T9762] netlink: 'syz.1.1688': attribute type 1 has an invalid length. [ 164.499994][ T9762] 8021q: adding VLAN 0 to HW filter on device bond3 [ 164.576010][ T9791] loop1: detected capacity change from 0 to 512 [ 164.587033][ T9791] EXT4-fs error (device loop1): ext4_orphan_get:1417: comm syz.1.1698: bad orphan inode 4 [ 164.603960][ T9791] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 164.706881][ T9798] loop0: detected capacity change from 0 to 512 [ 164.723860][ T9798] EXT4-fs error (device loop0): ext4_orphan_get:1417: comm syz.0.1700: bad orphan inode 4 [ 164.734656][ T9798] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 164.787471][ T8210] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.972818][ T9811] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9811 comm=syz.2.1703 [ 165.044677][ T9821] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9821 comm=syz.2.1708 [ 165.047664][ T9821] loop2: detected capacity change from 0 to 512 [ 165.064643][ T9821] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters [ 165.064877][ T9821] EXT4-fs (loop2): Remounting filesystem read-only [ 165.064960][ T9821] EXT4-fs (loop2): 1 truncate cleaned up [ 165.065489][ T9821] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 165.065553][ T9821] SELinux: (dev loop2, type ext4) getxattr errno 5 [ 165.066345][ T9821] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.072221][ T9821] netlink: 'syz.2.1708': attribute type 1 has an invalid length. [ 165.256976][ T9832] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1712'. [ 165.266176][ T9832] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1712'. [ 165.354177][ T9834] loop3: detected capacity change from 0 to 1024 [ 165.361026][ T9834] EXT4-fs: Ignoring removed orlov option [ 165.439074][ T7052] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.473510][ T9834] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 165.670901][ T6895] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.808789][ T9846] loop4: detected capacity change from 0 to 1024 [ 165.815549][ T9846] EXT4-fs: Ignoring removed orlov option [ 166.321976][ T9851] loop0: detected capacity change from 0 to 1024 [ 166.329159][ T9851] EXT4-fs: Ignoring removed orlov option [ 166.596625][ T9846] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 166.610847][ T9851] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 166.679210][ T8210] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.692487][ T29] audit: type=1326 audit(1722375350.880:696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9858 comm="syz.2.1719" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f68003e73b9 code=0x0 [ 166.775951][ T6895] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.810366][ T9865] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9865 comm=syz.1.1722 [ 166.829376][ T9865] loop1: detected capacity change from 0 to 512 [ 166.852396][ T7431] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.862219][ T9865] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters [ 166.880525][ T9865] EXT4-fs (loop1): Remounting filesystem read-only [ 166.897949][ T9865] EXT4-fs (loop1): 1 truncate cleaned up [ 166.918401][ T9865] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 166.935259][ T9865] SELinux: (dev loop1, type ext4) getxattr errno 5 [ 166.944152][ T9877] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1727'. [ 166.947022][ T9878] loop4: detected capacity change from 0 to 512 [ 166.953176][ T9877] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1727'. [ 166.962014][ T9865] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.982519][ T9878] EXT4-fs error (device loop4): ext4_orphan_get:1417: comm syz.4.1724: bad orphan inode 4 [ 166.995589][ T9878] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 167.009076][ T9865] netlink: 'syz.1.1722': attribute type 1 has an invalid length. [ 167.028780][ T9865] 8021q: adding VLAN 0 to HW filter on device bond4 [ 167.178934][ T9889] loop0: detected capacity change from 0 to 1024 [ 167.185643][ T9889] EXT4-fs: Ignoring removed orlov option [ 167.223488][ T9889] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 167.355787][ T9897] loop1: detected capacity change from 0 to 256 [ 167.554850][ T9904] loop2: detected capacity change from 0 to 1024 [ 167.578634][ T9904] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 167.604769][ T9420] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.673832][ T9912] loop1: detected capacity change from 0 to 1024 [ 167.680876][ T9912] EXT4-fs: Ignoring removed orlov option [ 167.784076][ T9912] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 167.901077][ T9920] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9920 comm=syz.2.1739 [ 167.955079][ T7431] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.970970][ T9923] loop2: detected capacity change from 0 to 512 [ 168.027885][ T9923] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters [ 168.044776][ T6895] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.044859][ T9923] EXT4-fs (loop2): Remounting filesystem read-only [ 168.072964][ T9923] EXT4-fs (loop2): 1 truncate cleaned up [ 168.073061][ T9930] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1743'. [ 168.084123][ T9923] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 168.087650][ T9930] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1743'. [ 168.100391][ T9923] SELinux: (dev loop2, type ext4) getxattr errno 5 [ 168.120375][ T9923] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.143906][ T9920] netlink: 'syz.2.1739': attribute type 1 has an invalid length. [ 168.168382][ T29] audit: type=1326 audit(1722375352.350:697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9935 comm="syz.0.1744" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f61ae7e73b9 code=0x0 [ 168.211487][ T9939] loop2: detected capacity change from 0 to 512 [ 168.219406][ T9939] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.1746: bad orphan inode 4 [ 168.233454][ T9939] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 168.329264][ T7052] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.354823][ T9953] loop1: detected capacity change from 0 to 512 [ 168.364056][ T9953] EXT4-fs error (device loop1): ext4_orphan_get:1417: comm syz.1.1751: bad orphan inode 4 [ 168.375162][ T9953] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 168.557732][ T9959] loop3: detected capacity change from 0 to 1024 [ 168.565688][ T9959] EXT4-fs: Ignoring removed orlov option [ 168.582451][ T9959] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 168.641246][ T9771] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm ext4lazyinit: bg 0: block 3: invalid block bitmap [ 168.906693][ T9965] loop4: detected capacity change from 0 to 1024 [ 168.913312][ T9965] EXT4-fs: Ignoring removed orlov option [ 168.994401][ T9965] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 169.107858][ T9420] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.207570][ T7052] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.262258][ T9979] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9979 comm=syz.1.1757 [ 169.281913][ T8210] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.285721][ T9979] loop1: detected capacity change from 0 to 512 [ 169.303291][ T9979] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters [ 169.350292][ T9979] EXT4-fs (loop1): Remounting filesystem read-only [ 169.357723][ T9979] EXT4-fs (loop1): 1 truncate cleaned up [ 169.364421][ T9979] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 169.377128][ T9979] SELinux: (dev loop1, type ext4) getxattr errno 5 [ 169.428470][ T9979] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.457594][ T29] audit: type=1326 audit(1722375353.639:698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9993 comm="syz.0.1763" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f61ae7e73b9 code=0x0 [ 169.543368][ T9995] loop2: detected capacity change from 0 to 1024 [ 169.550594][ T9995] EXT4-fs: Ignoring removed orlov option [ 169.599751][ T9995] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 169.686076][ T9979] netlink: 'syz.1.1757': attribute type 1 has an invalid length. [ 169.727219][ T9999] loop3: detected capacity change from 0 to 1024 [ 169.735307][ T7431] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.780323][ T9979] 8021q: adding VLAN 0 to HW filter on device bond5 [ 169.793463][ T9999] EXT4-fs: Ignoring removed orlov option [ 169.836831][T10003] loop4: detected capacity change from 0 to 256 [ 169.887585][ T9999] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 170.061716][T10013] loop4: detected capacity change from 0 to 512 [ 170.078993][T10013] EXT4-fs error (device loop4): ext4_orphan_get:1417: comm syz.4.1767: bad orphan inode 4 [ 170.098541][T10013] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 170.134227][T10015] loop1: detected capacity change from 0 to 1024 [ 170.141062][T10015] EXT4-fs: Ignoring removed orlov option [ 170.783931][T10039] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10039 comm=syz.2.1775 [ 170.800435][T10039] loop2: detected capacity change from 0 to 512 [ 170.823953][T10039] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters [ 170.852491][T10039] EXT4-fs (loop2): Remounting filesystem read-only [ 170.866550][T10039] EXT4-fs (loop2): 1 truncate cleaned up [ 170.873179][T10042] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10042 comm=syz.1.1776 [ 170.876809][T10039] SELinux: (dev loop2, type ext4) getxattr errno 5 [ 170.889338][T10042] loop1: detected capacity change from 0 to 512 [ 170.909267][T10042] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters [ 170.926569][T10042] EXT4-fs (loop1): Remounting filesystem read-only [ 170.933300][T10042] EXT4-fs (loop1): 1 truncate cleaned up [ 170.939487][T10042] SELinux: (dev loop1, type ext4) getxattr errno 5 [ 170.958277][T10039] netlink: 'syz.2.1775': attribute type 1 has an invalid length. [ 171.083337][T10049] loop3: detected capacity change from 0 to 1024 [ 171.090144][T10049] EXT4-fs: Ignoring removed orlov option [ 171.107472][T10042] netlink: 'syz.1.1776': attribute type 1 has an invalid length. [ 171.234687][T10052] loop2: detected capacity change from 0 to 1024 [ 171.241630][T10052] EXT4-fs: Ignoring removed orlov option [ 171.379910][T10042] 8021q: adding VLAN 0 to HW filter on device bond6 [ 171.638859][T10065] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10065 comm=syz.0.1781 [ 171.665128][T10065] loop0: detected capacity change from 0 to 512 [ 171.687865][T10065] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters [ 171.751732][T10065] EXT4-fs (loop0): Remounting filesystem read-only [ 171.758563][T10065] EXT4-fs (loop0): 1 truncate cleaned up [ 171.765125][T10065] SELinux: (dev loop0, type ext4) getxattr errno 5 [ 171.807337][T10065] netlink: 'syz.0.1781': attribute type 1 has an invalid length. [ 171.858237][T10073] loop4: detected capacity change from 0 to 1024 [ 171.864960][T10073] EXT4-fs: Ignoring removed orlov option [ 171.905198][ T29] audit: type=1400 audit(1722375356.089:699): avc: denied { connect } for pid=10078 comm="syz.2.1786" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 171.920264][T10065] 8021q: adding VLAN 0 to HW filter on device bond5 [ 171.957916][T10082] loop1: detected capacity change from 0 to 1024 [ 172.023237][T10082] EXT4-fs: Ignoring removed orlov option [ 172.151511][T10098] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10098 comm=syz.3.1791 [ 172.240634][T10104] loop3: detected capacity change from 0 to 512 [ 172.308582][T10104] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters [ 172.354520][T10104] EXT4-fs (loop3): Remounting filesystem read-only [ 172.378990][T10104] EXT4-fs (loop3): 1 truncate cleaned up [ 172.405917][T10104] SELinux: (dev loop3, type ext4) getxattr errno 5 [ 172.448169][T10098] netlink: 'syz.3.1791': attribute type 1 has an invalid length. [ 172.529586][T10098] 8021q: adding VLAN 0 to HW filter on device bond1 [ 172.632679][T10110] loop2: detected capacity change from 0 to 1024 [ 172.639484][T10110] EXT4-fs: Ignoring removed orlov option [ 172.786116][T10117] loop4: detected capacity change from 0 to 256 [ 172.871147][T10118] loop0: detected capacity change from 0 to 1024 [ 172.906087][T10118] EXT4-fs: Ignoring removed orlov option [ 173.150549][T10127] loop3: detected capacity change from 0 to 1024 [ 173.157556][T10127] EXT4-fs: Ignoring removed orlov option [ 173.518163][ T28] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.598015][ T28] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.679149][ T28] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.754365][ T28] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.802816][T10126] chnl_net:caif_netlink_parms(): no params data found [ 173.921251][T10126] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.929710][T10126] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.952427][T10126] bridge_slave_0: entered allmulticast mode [ 173.959104][T10126] bridge_slave_0: entered promiscuous mode [ 173.973195][T10126] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.980440][T10126] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.052659][T10174] loop2: detected capacity change from 0 to 1024 [ 174.059313][T10174] EXT4-fs: Ignoring removed orlov option [ 174.066350][T10126] bridge_slave_1: entered allmulticast mode [ 174.073078][T10126] bridge_slave_1: entered promiscuous mode [ 174.231630][ T28] bridge_slave_1: left allmulticast mode [ 174.237371][ T28] bridge_slave_1: left promiscuous mode [ 174.243189][ T28] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.279426][T10184] loop0: detected capacity change from 0 to 1024 [ 174.286352][ T28] bridge_slave_0: left allmulticast mode [ 174.292082][ T28] bridge_slave_0: left promiscuous mode [ 174.298063][ T28] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.303175][T10184] EXT4-fs: Ignoring removed orlov option [ 174.426243][ T28] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 174.437376][ T28] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 174.448382][ T28] bond0 (unregistering): Released all slaves [ 174.458690][ T28] bond1 (unregistering): Released all slaves [ 174.469290][ T28] bond2 (unregistering): Released all slaves [ 174.485804][ T28] bond3 (unregistering): Released all slaves [ 174.499638][ T28] bond4 (unregistering): Released all slaves [ 174.510514][T10126] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 174.548498][T10126] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 174.605609][ T28] hsr_slave_0: left promiscuous mode [ 174.624406][ T28] hsr_slave_1: left promiscuous mode [ 174.646277][ T28] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 174.654288][ T28] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 174.685282][ T28] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 174.692922][ T28] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 174.737495][ T28] veth1_macvtap: left promiscuous mode [ 174.743185][ T28] veth0_macvtap: left promiscuous mode [ 174.748715][ T28] veth1_vlan: left promiscuous mode [ 174.754160][ T28] veth0_vlan: left promiscuous mode [ 174.870115][T10211] loop1: detected capacity change from 0 to 1024 [ 174.876813][T10211] EXT4-fs: Ignoring removed orlov option [ 175.050490][ T28] team0 (unregistering): Port device team_slave_1 removed [ 175.072076][T10221] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10221 comm=syz.2.1810 [ 175.109880][ T28] team0 (unregistering): Port device team_slave_0 removed [ 175.196644][T10126] team0: Port device team_slave_0 added [ 175.196836][T10215] tipc: Failed to obtain node identity [ 175.196845][T10215] tipc: Enabling of bearer rejected, failed to enable media [ 175.213398][T10126] team0: Port device team_slave_1 added [ 175.241414][T10227] FAULT_INJECTION: forcing a failure. [ 175.241414][T10227] name failslab, interval 1, probability 0, space 0, times 0 [ 175.241442][T10227] CPU: 0 UID: 0 PID: 10227 Comm: syz.3.1814 Not tainted 6.11.0-rc1-syzkaller-00044-g22f546873149 #0 [ 175.241473][T10227] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 175.241543][T10227] Call Trace: [ 175.241550][T10227] [ 175.241557][T10227] dump_stack_lvl+0xf2/0x150 [ 175.241619][T10227] dump_stack+0x15/0x20 [ 175.241652][T10227] should_fail_ex+0x229/0x230 [ 175.241687][T10227] ? ip6_setup_cork+0x3ba/0x770 [ 175.241718][T10227] should_failslab+0x8f/0xb0 [ 175.241756][T10227] __kmalloc_node_track_caller_noprof+0xa6/0x380 [ 175.241846][T10227] ? should_failslab+0x8f/0xb0 [ 175.241892][T10227] kmemdup_noprof+0x2a/0x60 [ 175.241946][T10227] ip6_setup_cork+0x3ba/0x770 [ 175.241974][T10227] ip6_append_data+0x173/0x260 [ 175.242002][T10227] ? __pfx_raw6_getfrag+0x10/0x10 [ 175.242030][T10227] rawv6_sendmsg+0xd87/0xf40 [ 175.242090][T10227] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 175.242122][T10227] inet_sendmsg+0xc5/0xd0 [ 175.242154][T10227] __sock_sendmsg+0x102/0x180 [ 175.242195][T10227] __sys_sendto+0x1e5/0x260 [ 175.242230][T10227] __x64_sys_sendto+0x78/0x90 [ 175.242348][T10227] x64_sys_call+0x2bc6/0x2e00 [ 175.242378][T10227] do_syscall_64+0xc9/0x1c0 [ 175.242407][T10227] ? clear_bhb_loop+0x55/0xb0 [ 175.242434][T10227] ? clear_bhb_loop+0x55/0xb0 [ 175.242465][T10227] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.242528][T10227] RIP: 0033:0x7fa418ee73b9 [ 175.242547][T10227] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 175.242567][T10227] RSP: 002b:00007fa417b67048 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 175.242590][T10227] RAX: ffffffffffffffda RBX: 00007fa419075f80 RCX: 00007fa418ee73b9 [ 175.242634][T10227] RDX: 00000000000005dc RSI: 0000000020000180 RDI: 0000000000000003 [ 175.242647][T10227] RBP: 00007fa417b670a0 R08: 0000000000000000 R09: 0000000000000000 [ 175.242659][T10227] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 175.242675][T10227] R13: 000000000000000b R14: 00007fa419075f80 R15: 00007ffd9a48fca8 [ 175.242753][T10227] [ 175.253983][T10126] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 175.254009][T10126] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 175.254046][T10126] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 175.254825][T10126] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 175.254837][T10126] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 175.254867][T10126] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 175.497415][T10235] loop3: detected capacity change from 0 to 1024 [ 175.497827][T10235] EXT4-fs: Ignoring removed orlov option [ 175.599204][T10126] hsr_slave_0: entered promiscuous mode [ 175.608071][T10126] hsr_slave_1: entered promiscuous mode [ 175.608534][T10126] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 175.608547][T10126] Cannot create hsr debugfs directory [ 176.199232][T10285] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10285 comm=syz.3.1821 [ 176.255090][ C0] eth0: bad gso: type: 1, size: 1408 [ 176.262277][ C0] eth0: bad gso: type: 1, size: 1408 [ 176.272117][T10288] loop1: detected capacity change from 0 to 1024 [ 176.278813][T10288] EXT4-fs: Ignoring removed orlov option [ 176.489716][T10126] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 176.510500][T10302] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1825'. [ 176.536182][T10126] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 176.552212][ T29] audit: type=1400 audit(1722375360.728:700): avc: denied { map } for pid=10299 comm="syz.0.1825" path="socket:[27909]" dev="sockfs" ino=27909 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 176.575497][ T29] audit: type=1400 audit(1722375360.728:701): avc: denied { read } for pid=10299 comm="syz.0.1825" path="socket:[27909]" dev="sockfs" ino=27909 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 176.603972][T10126] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 176.634647][T10126] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 176.703226][T10126] 8021q: adding VLAN 0 to HW filter on device bond0 [ 176.719743][T10126] 8021q: adding VLAN 0 to HW filter on device team0 [ 176.732036][ T982] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.739364][ T982] bridge0: port 1(bridge_slave_0) entered forwarding state [ 176.751445][T10320] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1828'. [ 176.794757][ T2924] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.801950][ T2924] bridge0: port 2(bridge_slave_1) entered forwarding state [ 176.824425][T10323] loop2: detected capacity change from 0 to 1024 [ 176.831141][T10323] EXT4-fs: Ignoring removed orlov option [ 176.938659][T10126] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 177.202111][T10126] veth0_vlan: entered promiscuous mode [ 177.215527][T10126] veth1_vlan: entered promiscuous mode [ 177.234991][T10126] veth0_macvtap: entered promiscuous mode [ 177.242854][T10126] veth1_macvtap: entered promiscuous mode [ 177.254631][T10126] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 177.265158][T10126] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.275182][T10126] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 177.285681][T10126] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.295639][T10126] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 177.306493][T10126] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.316359][T10126] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 177.327001][T10126] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.388026][T10126] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 177.407335][T10126] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 177.417964][T10126] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.427859][T10126] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 177.438322][T10126] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.448296][T10126] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 177.458831][T10126] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.468773][T10126] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 177.479276][T10126] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.620218][T10388] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10388 comm=syz.0.1832 [ 177.720554][T10391] loop0: detected capacity change from 0 to 512 [ 177.758724][T10391] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters [ 177.774907][T10391] EXT4-fs (loop0): Remounting filesystem read-only [ 177.790430][T10126] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 177.803069][T10126] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.811882][T10126] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.820832][T10126] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.829688][T10126] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.841803][T10391] EXT4-fs (loop0): 1 truncate cleaned up [ 177.847918][T10391] SELinux: (dev loop0, type ext4) getxattr errno 5 [ 177.890693][T10388] netlink: 'syz.0.1832': attribute type 1 has an invalid length. [ 177.924612][T10388] 8021q: adding VLAN 0 to HW filter on device bond6 [ 177.929698][T10400] loop2: detected capacity change from 0 to 2048 [ 178.067204][T10403] loop3: detected capacity change from 0 to 1024 [ 178.088641][T10403] EXT4-fs: Ignoring removed orlov option [ 178.278458][T10424] loop4: detected capacity change from 0 to 1024 [ 178.324112][T10424] EXT4-fs: Ignoring removed orlov option [ 178.396736][T10432] loop1: detected capacity change from 0 to 1024 [ 178.403935][T10432] EXT4-fs: Ignoring removed orlov option [ 178.721244][ T29] audit: type=1400 audit(1722375362.897:702): avc: denied { bind } for pid=10439 comm="syz.2.1841" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 178.793428][ T29] audit: type=1400 audit(1722375362.967:703): avc: denied { execute_no_trans } for pid=10441 comm="syz.2.1842" path=2F6D656D66643A202864656C6574656429 dev="tmpfs" ino=1471 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 178.957560][T10447] loop2: detected capacity change from 0 to 512 [ 178.998733][T10447] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.1843: bad orphan inode 4 [ 179.042053][T10456] loop0: detected capacity change from 0 to 256 [ 179.070286][T10456] FAT-fs (loop0): IO charset macgaelic not found [ 179.092247][ T29] audit: type=1400 audit(1722375363.267:704): avc: denied { map } for pid=10459 comm="syz.1.1847" path="socket:[28045]" dev="sockfs" ino=28045 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 179.320923][T10469] loop0: detected capacity change from 0 to 128 [ 179.492014][ T29] audit: type=1400 audit(1722375363.647:705): avc: denied { write } for pid=10455 comm="syz.0.1846" name="ppp" dev="devtmpfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 179.950973][T10480] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 180.341359][T10501] netlink: 'syz.3.1859': attribute type 3 has an invalid length. [ 180.385842][T10507] loop1: detected capacity change from 0 to 512 [ 180.411348][T10507] EXT4-fs error (device loop1): ext4_orphan_get:1417: comm syz.1.1862: bad orphan inode 4 [ 180.451372][T10511] loop4: detected capacity change from 0 to 1024 [ 180.477682][T10511] EXT4-fs: Ignoring removed orlov option [ 181.089125][ C1] vcan0: j1939_tp_rxtimer: 0xffff888114f87800: rx timeout, send abort [ 181.097402][ C1] vcan0: j1939_tp_rxtimer: 0xffff888114f87a00: rx timeout, send abort [ 181.105850][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888114f87800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 181.120178][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888114f87a00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 181.611311][T10542] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10542 comm=syz.4.1873 [ 181.627313][T10542] loop4: detected capacity change from 0 to 512 [ 181.649801][T10542] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters [ 181.670960][T10551] loop1: detected capacity change from 0 to 256 [ 181.675339][T10552] loop2: detected capacity change from 0 to 512 [ 181.686899][T10542] EXT4-fs (loop4): Remounting filesystem read-only [ 181.695656][T10552] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.1876: bad orphan inode 4 [ 181.697446][T10542] EXT4-fs (loop4): 1 truncate cleaned up [ 181.711719][T10542] SELinux: (dev loop4, type ext4) getxattr errno 5 [ 181.723939][T10542] netlink: 'syz.4.1873': attribute type 1 has an invalid length. [ 181.787966][ T29] audit: type=1400 audit(1722375365.966:706): avc: denied { ioctl } for pid=10555 comm="syz.4.1877" path="socket:[28726]" dev="sockfs" ino=28726 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 181.843748][T10558] vxcan1: tx address claim with dest, not broadcast [ 181.977153][T10573] ªªªªª»: renamed from lo (while UP) [ 182.491841][T10593] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10593 comm=syz.4.1887 [ 182.531124][T10593] loop4: detected capacity change from 0 to 512 [ 182.557661][T10593] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters [ 182.603004][T10593] EXT4-fs (loop4): Remounting filesystem read-only [ 182.614354][T10593] EXT4-fs (loop4): 1 truncate cleaned up [ 182.624325][T10593] SELinux: (dev loop4, type ext4) getxattr errno 5 [ 182.645806][T10593] netlink: 'syz.4.1887': attribute type 1 has an invalid length. [ 182.689895][T10599] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10599 comm=syz.0.1889 [ 182.831128][T10607] loop0: detected capacity change from 0 to 4096 [ 182.866566][T10607] ext4: Unknown parameter 'dont_appraise' [ 183.234637][T10627] loop1: detected capacity change from 0 to 512 [ 183.249098][T10627] EXT4-fs error (device loop1): ext4_orphan_get:1417: comm syz.1.1898: bad orphan inode 4 [ 183.284736][ T29] audit: type=1400 audit(1722375367.466:707): avc: denied { name_bind } for pid=10629 comm="syz.3.1899" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 183.317234][T10632] loop0: detected capacity change from 0 to 256 [ 183.362409][T10635] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10635 comm=syz.3.1901 [ 183.403319][T10635] loop3: detected capacity change from 0 to 512 [ 183.433460][T10635] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters [ 183.495620][T10635] EXT4-fs (loop3): Remounting filesystem read-only [ 183.512566][T10635] EXT4-fs (loop3): 1 truncate cleaned up [ 183.530404][T10635] SELinux: (dev loop3, type ext4) getxattr errno 5 [ 183.593695][T10635] netlink: 'syz.3.1901': attribute type 1 has an invalid length. [ 183.642946][T10643] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10643 comm=syz.4.1903 [ 183.670733][T10635] 8021q: adding VLAN 0 to HW filter on device bond2 [ 183.959718][T10650] usb usb9: usbfs: process 10650 (syz.4.1904) did not claim interface 0 before use [ 184.045596][T10654] loop4: detected capacity change from 0 to 164 [ 184.089379][T10654] ISOFS: primary root directory is empty. Disabling Rock Ridge and switching to Joliet. [ 184.225205][ T29] audit: type=1400 audit(1722375368.406:708): avc: denied { append } for pid=10664 comm="syz.0.1912" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 184.275089][ T29] audit: type=1400 audit(1722375368.436:709): avc: denied { listen } for pid=10664 comm="syz.0.1912" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 184.303949][T10680] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10680 comm=syz.0.1914 [ 184.489257][T10682] usb usb9: usbfs: process 10682 (syz.1.1916) did not claim interface 0 before use [ 184.743095][T10698] loop4: detected capacity change from 0 to 512 [ 184.777493][T10698] EXT4-fs error (device loop4): ext4_orphan_get:1417: comm syz.4.1920: bad orphan inode 4 [ 185.289193][T10719] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10719 comm=syz.0.1927 [ 185.439070][T10726] loop2: detected capacity change from 0 to 512 [ 185.462235][T10725] usb usb9: usbfs: process 10725 (syz.0.1930) did not claim interface 0 before use [ 185.463118][T10726] EXT4-fs: Ignoring removed i_version option [ 185.477700][T10726] EXT4-fs: Ignoring removed nobh option [ 185.495885][T10726] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 185.536812][T10726] EXT4-fs (loop2): 1 truncate cleaned up [ 186.124458][T10754] loop2: detected capacity change from 0 to 256 [ 186.160826][T10733] chnl_net:caif_netlink_parms(): no params data found [ 186.198221][T10733] bridge0: port 1(bridge_slave_0) entered blocking state [ 186.205362][T10733] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.212640][T10733] bridge_slave_0: entered allmulticast mode [ 186.219310][T10733] bridge_slave_0: entered promiscuous mode [ 186.226422][T10733] bridge0: port 2(bridge_slave_1) entered blocking state [ 186.233543][T10733] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.241055][T10733] bridge_slave_1: entered allmulticast mode [ 186.247695][T10733] bridge_slave_1: entered promiscuous mode [ 186.264711][T10764] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10764 comm=syz.2.1939 [ 186.280598][T10766] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10766 comm=syz.3.1940 [ 186.297975][T10766] loop3: detected capacity change from 0 to 512 [ 186.310769][T10733] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 186.325483][T10766] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters [ 186.329834][T10733] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 186.340903][T10766] EXT4-fs (loop3): Remounting filesystem read-only [ 186.356478][T10766] EXT4-fs (loop3): 1 truncate cleaned up [ 186.362582][T10766] SELinux: (dev loop3, type ext4) getxattr errno 5 [ 186.383464][T10766] netlink: 'syz.3.1940': attribute type 1 has an invalid length. [ 186.391490][T10768] usb usb9: usbfs: process 10768 (syz.2.1941) did not claim interface 0 before use [ 186.399535][T10766] 8021q: adding VLAN 0 to HW filter on device bond3 [ 186.410723][T10733] team0: Port device team_slave_0 added [ 186.417696][T10733] team0: Port device team_slave_1 added [ 186.447333][T10733] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 186.454417][T10733] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 186.471982][T10776] loop2: detected capacity change from 0 to 512 [ 186.480503][T10733] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 186.528453][T10733] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 186.535447][T10733] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 186.561647][T10733] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 186.584693][T10783] loop3: detected capacity change from 0 to 1024 [ 186.591593][T10783] EXT4-fs: Ignoring removed orlov option [ 186.664334][T10733] hsr_slave_0: entered promiscuous mode [ 186.673048][T10733] hsr_slave_1: entered promiscuous mode [ 186.682783][T10776] ext4 filesystem being mounted at /71/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 186.701540][T10733] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 186.739663][T10733] Cannot create hsr debugfs directory [ 186.766128][ T29] audit: type=1400 audit(1722375370.915:710): avc: denied { setattr } for pid=10775 comm="syz.2.1944" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 186.901680][T10800] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10800 comm=syz.1.1950 [ 186.919551][T10776] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1944'. [ 186.933472][T10733] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.963796][T10805] usb usb9: usbfs: process 10805 (syz.1.1952) did not claim interface 0 before use [ 187.026650][T10733] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.053182][T10814] loop4: detected capacity change from 0 to 512 [ 187.062964][T10814] EXT4-fs (loop4): unsupported inode size: 264 [ 187.069247][T10814] EXT4-fs (loop4): blocksize: 1024 [ 187.163195][T10733] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.249393][T10733] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.401348][T10733] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 187.417846][T10733] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 187.433020][T10733] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 187.443923][T10733] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 187.468964][ T29] audit: type=1326 audit(1722375371.655:711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10813 comm="syz.4.1956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7041573b9 code=0x7ffc0000 [ 187.513219][ T29] audit: type=1326 audit(1722375371.675:712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10813 comm="syz.4.1956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7041573b9 code=0x7ffc0000 [ 187.536817][ T29] audit: type=1326 audit(1722375371.675:713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10813 comm="syz.4.1956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=119 compat=0 ip=0x7fc7041573b9 code=0x7ffc0000 [ 187.560384][ T29] audit: type=1326 audit(1722375371.675:714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10813 comm="syz.4.1956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7041573b9 code=0x7ffc0000 [ 187.583860][ T29] audit: type=1326 audit(1722375371.675:715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10813 comm="syz.4.1956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7041573b9 code=0x7ffc0000 [ 187.607302][ T29] audit: type=1326 audit(1722375371.675:716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10813 comm="syz.4.1956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc704155d50 code=0x7ffc0000 [ 187.613968][T10733] 8021q: adding VLAN 0 to HW filter on device bond0 [ 187.630757][ T29] audit: type=1326 audit(1722375371.675:717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10813 comm="syz.4.1956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7041573b9 code=0x7ffc0000 [ 187.630806][ T29] audit: type=1326 audit(1722375371.675:718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10813 comm="syz.4.1956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7041573b9 code=0x7ffc0000 [ 187.630850][ T29] audit: type=1326 audit(1722375371.675:719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10813 comm="syz.4.1956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc7041573b9 code=0x7ffc0000 [ 187.707924][ T29] audit: type=1326 audit(1722375371.675:720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10813 comm="syz.4.1956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7041573b9 code=0x7ffc0000 [ 187.760475][T10835] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10835 comm=syz.4.1961 [ 187.782645][T10733] 8021q: adding VLAN 0 to HW filter on device team0 [ 187.811813][ T982] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.813103][T10837] loop4: detected capacity change from 0 to 512 [ 187.818968][ T982] bridge0: port 1(bridge_slave_0) entered forwarding state [ 187.823804][ T982] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.839714][ T982] bridge0: port 2(bridge_slave_1) entered forwarding state [ 187.868709][T10733] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 187.879135][T10733] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 187.893112][T10837] loop4: detected capacity change from 0 to 2048 [ 187.896893][T10841] FAULT_INJECTION: forcing a failure. [ 187.896893][T10841] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 187.912665][T10841] CPU: 1 UID: 0 PID: 10841 Comm: syz.2.1964 Not tainted 6.11.0-rc1-syzkaller-00044-g22f546873149 #0 [ 187.923460][T10841] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 187.933547][T10841] Call Trace: [ 187.936841][T10841] [ 187.939827][T10841] dump_stack_lvl+0xf2/0x150 [ 187.944514][T10841] dump_stack+0x15/0x20 [ 187.948719][T10841] should_fail_ex+0x229/0x230 [ 187.953459][T10841] should_fail+0xb/0x10 [ 187.957783][T10841] should_fail_usercopy+0x1a/0x20 [ 187.962832][T10841] strncpy_from_user+0x25/0x270 [ 187.967721][T10841] ? kmem_cache_alloc_noprof+0x10c/0x290 [ 187.973387][T10841] getname_flags+0xb0/0x3b0 [ 187.978089][T10841] getname+0x17/0x20 [ 187.982025][T10841] do_sys_openat2+0x67/0x120 [ 187.986727][T10841] __se_sys_openat2+0x17e/0x1d0 [ 187.991596][T10841] __x64_sys_openat2+0x55/0x70 [ 187.996499][T10841] x64_sys_call+0x2437/0x2e00 [ 188.001273][T10841] do_syscall_64+0xc9/0x1c0 [ 188.005803][T10841] ? clear_bhb_loop+0x55/0xb0 [ 188.010533][T10841] ? clear_bhb_loop+0x55/0xb0 [ 188.015249][T10841] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.021160][T10841] RIP: 0033:0x7f68003e73b9 [ 188.025622][T10841] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 188.045245][T10841] RSP: 002b:00007f67ff067048 EFLAGS: 00000246 ORIG_RAX: 00000000000001b5 [ 188.053754][T10841] RAX: ffffffffffffffda RBX: 00007f6800575f80 RCX: 00007f68003e73b9 [ 188.061789][T10841] RDX: 0000000020000380 RSI: 0000000020000300 RDI: ffffffffffffff9c [ 188.069770][T10841] RBP: 00007f67ff0670a0 R08: 0000000000000000 R09: 0000000000000000 [ 188.077908][T10841] R10: 0000000000000018 R11: 0000000000000246 R12: 0000000000000001 [ 188.085924][T10841] R13: 000000000000000b R14: 00007f6800575f80 R15: 00007fff00c02a48 [ 188.094119][T10841] [ 188.104781][T10840] usb usb9: usbfs: process 10840 (syz.1.1963) did not claim interface 0 before use [ 188.197696][T10837] loop4: detected capacity change from 2048 to 4 [ 188.205992][T10837] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5810: Out of memory [ 188.235495][T10837] EXT4-fs error (device loop4): ext4_dirty_inode:6014: inode #18: comm syz.4.1962: mark_inode_dirty error [ 188.255619][T10837] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5810: Out of memory [ 188.275498][T10837] EXT4-fs error (device loop4): ext4_dirty_inode:6014: inode #18: comm syz.4.1962: mark_inode_dirty error [ 188.295799][T10733] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 188.314998][T10837] EXT4-fs warning (device loop4): ext4_read_block_bitmap_nowait:492: Cannot get buffer for block bitmap - block_group = 0, block_bitmap = 2 [ 188.331477][T10837] EXT4-fs warning (device loop4): ext4_read_block_bitmap_nowait:492: Cannot get buffer for block bitmap - block_group = 0, block_bitmap = 2 [ 188.348700][T10837] EXT4-fs warning (device loop4): ext4_read_block_bitmap_nowait:492: Cannot get buffer for block bitmap - block_group = 0, block_bitmap = 2 [ 188.421552][T10867] loop1: detected capacity change from 0 to 512 [ 188.431411][T10837] EXT4-fs warning (device loop4): ext4_read_block_bitmap_nowait:492: Cannot get buffer for block bitmap - block_group = 0, block_bitmap = 2 [ 188.446166][T10733] veth0_vlan: entered promiscuous mode [ 188.454827][T10867] EXT4-fs (loop1): unsupported inode size: 264 [ 188.461095][T10867] EXT4-fs (loop1): blocksize: 1024 [ 188.463832][T10837] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5810: Out of memory [ 188.478428][T10733] veth1_vlan: entered promiscuous mode [ 188.494227][T10837] EXT4-fs error (device loop4): ext4_dirty_inode:6014: inode #18: comm syz.4.1962: mark_inode_dirty error [ 188.517952][T10733] veth0_macvtap: entered promiscuous mode [ 188.523908][T10837] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5810: Out of memory [ 188.537967][T10837] EXT4-fs error (device loop4): ext4_ext_truncate:4432: inode #18: comm syz.4.1962: mark_inode_dirty error [ 188.548222][T10733] veth1_macvtap: entered promiscuous mode [ 188.557658][T10837] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5810: Out of memory [ 188.569528][T10837] EXT4-fs error (device loop4): ext4_truncate:4241: inode #18: comm syz.4.1962: mark_inode_dirty error [ 188.584132][T10733] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 188.594650][T10733] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.604559][T10733] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 188.615096][T10733] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.625017][T10733] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 188.635528][T10733] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.645392][T10733] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 188.655979][T10733] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.666079][T10733] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 188.676655][T10733] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.691156][T10733] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 188.704464][T10874] loop3: detected capacity change from 0 to 1024 [ 188.711528][T10874] EXT4-fs: Ignoring removed orlov option [ 188.718936][T10846] kmmpd-loop4: attempt to access beyond end of device [ 188.718936][T10846] loop4: rw=14337, sector=256, nr_sectors = 4 limit=4 [ 188.726706][T10733] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 188.732469][T10846] Buffer I/O error on dev loop4, logical block 64, lost sync page write [ 188.742853][T10733] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.742868][T10733] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 188.771801][T10733] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.781673][T10733] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 188.792117][T10733] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.802040][T10733] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 188.812512][T10733] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.822347][T10733] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 188.832785][T10733] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.843813][T10733] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 188.844798][T10874] EXT4-fs mount: 77 callbacks suppressed [ 188.844815][T10874] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 188.881405][T10733] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.890227][T10733] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.898988][T10733] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.907869][T10733] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.927156][ T8210] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.405789][T10891] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1975'. [ 189.541843][ T50] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.615336][T10897] loop1: detected capacity change from 0 to 1024 [ 189.622152][T10897] EXT4-fs: Ignoring removed orlov option [ 189.644740][ T50] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.686887][T10897] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 189.721501][ T50] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.820860][ T50] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.860549][T10910] loop3: detected capacity change from 0 to 256 [ 189.953457][ T50] bridge_slave_1: left allmulticast mode [ 189.959249][ T50] bridge_slave_1: left promiscuous mode [ 189.964980][ T50] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.974333][ T50] bridge_slave_0: left allmulticast mode [ 189.980087][ T50] bridge_slave_0: left promiscuous mode [ 189.985901][ T50] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.092857][T10917] loop3: detected capacity change from 0 to 1024 [ 190.100023][T10917] EXT4-fs: Ignoring removed orlov option [ 190.111934][T10917] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 190.118289][T10922] loop0: detected capacity change from 0 to 1024 [ 190.133641][T10922] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 190.142577][T10922] FAULT_INJECTION: forcing a failure. [ 190.142577][T10922] name failslab, interval 1, probability 0, space 0, times 0 [ 190.155303][T10922] CPU: 0 UID: 0 PID: 10922 Comm: syz.0.1985 Not tainted 6.11.0-rc1-syzkaller-00044-g22f546873149 #0 [ 190.166227][T10922] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 190.176318][T10922] Call Trace: [ 190.179621][T10922] [ 190.182571][T10922] dump_stack_lvl+0xf2/0x150 [ 190.187321][T10922] dump_stack+0x15/0x20 [ 190.191529][T10922] should_fail_ex+0x229/0x230 [ 190.196254][T10922] ? iovec_from_user+0x84/0x210 [ 190.201142][T10922] should_failslab+0x8f/0xb0 [ 190.205934][T10922] __kmalloc_noprof+0xa5/0x370 [ 190.210785][T10922] iovec_from_user+0x84/0x210 [ 190.215511][T10922] __import_iovec+0xd8/0x520 [ 190.220211][T10922] import_iovec+0xbc/0xd0 [ 190.224664][T10922] vfs_readv+0xec/0x660 [ 190.229093][T10922] __se_sys_preadv2+0x10c/0x1d0 [ 190.233985][T10922] __x64_sys_preadv2+0x78/0x90 [ 190.238774][T10922] x64_sys_call+0x27fc/0x2e00 [ 190.243472][T10922] do_syscall_64+0xc9/0x1c0 [ 190.248011][T10922] ? clear_bhb_loop+0x55/0xb0 [ 190.252760][T10922] ? clear_bhb_loop+0x55/0xb0 [ 190.257464][T10922] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.263389][T10922] RIP: 0033:0x7f7e668173b9 [ 190.267836][T10922] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 190.287616][T10922] RSP: 002b:00007f7e65497048 EFLAGS: 00000246 ORIG_RAX: 0000000000000147 [ 190.296041][T10922] RAX: ffffffffffffffda RBX: 00007f7e669a5f80 RCX: 00007f7e668173b9 [ 190.304170][T10922] RDX: 1000000000000146 RSI: 0000000020000000 RDI: 0000000000000004 [ 190.312154][T10922] RBP: 00007f7e654970a0 R08: 0000000000000000 R09: 0000000000000000 [ 190.320199][T10922] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 190.328210][T10922] R13: 000000000000000b R14: 00007f7e669a5f80 R15: 00007ffecad61a58 [ 190.336196][T10922] [ 190.344675][ T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 190.397251][ T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 190.397964][ T8210] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.440936][ T50] bond0 (unregistering): Released all slaves [ 190.546561][T10894] chnl_net:caif_netlink_parms(): no params data found [ 190.619157][T10894] bridge0: port 1(bridge_slave_0) entered blocking state [ 190.626331][T10894] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.635693][T10894] bridge_slave_0: entered allmulticast mode [ 190.643139][T10894] bridge_slave_0: entered promiscuous mode [ 190.652948][T10894] bridge0: port 2(bridge_slave_1) entered blocking state [ 190.660165][T10894] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.671860][T10894] bridge_slave_1: entered allmulticast mode [ 190.678835][T10894] bridge_slave_1: entered promiscuous mode [ 190.710036][T10894] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 190.721903][T10894] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 190.755631][T10894] team0: Port device team_slave_0 added [ 190.763200][T10894] team0: Port device team_slave_1 added [ 190.825424][ T50] hsr_slave_0: left promiscuous mode [ 190.833906][ T50] hsr_slave_1: left promiscuous mode [ 190.834788][ T7052] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.849429][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 190.856880][ T50] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 190.864985][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 190.872479][ T50] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 190.897180][ T50] veth1_macvtap: left promiscuous mode [ 190.902724][ T50] veth0_macvtap: left promiscuous mode [ 190.908429][ T50] veth1_vlan: left promiscuous mode [ 190.913805][ T50] veth0_vlan: left promiscuous mode [ 190.951721][T10957] loop3: detected capacity change from 0 to 512 [ 190.965865][T10959] FAULT_INJECTION: forcing a failure. [ 190.965865][T10959] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 190.979045][T10959] CPU: 0 UID: 0 PID: 10959 Comm: syz.1.1997 Not tainted 6.11.0-rc1-syzkaller-00044-g22f546873149 #0 [ 190.989932][T10959] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 191.000028][T10959] Call Trace: [ 191.002276][T10957] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 191.003313][T10959] [ 191.014453][T10959] dump_stack_lvl+0xf2/0x150 [ 191.014949][T10957] EXT4-fs (loop3): invalid journal inode [ 191.019100][T10959] dump_stack+0x15/0x20 [ 191.025394][T10957] EXT4-fs (loop3): can't get journal size [ 191.028882][T10959] should_fail_ex+0x229/0x230 [ 191.036523][T10957] EXT4-fs (loop3): 1 truncate cleaned up [ 191.039283][T10959] should_fail+0xb/0x10 [ 191.039324][T10959] should_fail_usercopy+0x1a/0x20 [ 191.048412][T10957] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 191.049412][T10959] _copy_to_user+0x1e/0xa0 [ 191.071053][T10959] simple_read_from_buffer+0xa0/0x110 [ 191.076441][T10959] proc_fail_nth_read+0xfc/0x140 [ 191.081436][T10959] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 191.086993][T10959] vfs_read+0x1a2/0x6e0 [ 191.091170][T10959] ? __rcu_read_unlock+0x4e/0x70 [ 191.096108][T10959] ? __fget_files+0x1da/0x210 [ 191.100864][T10959] ksys_read+0xeb/0x1b0 [ 191.105101][T10959] __x64_sys_read+0x42/0x50 [ 191.109829][T10959] x64_sys_call+0x2a36/0x2e00 [ 191.114530][T10959] do_syscall_64+0xc9/0x1c0 [ 191.119045][T10959] ? clear_bhb_loop+0x55/0xb0 [ 191.123735][T10959] ? clear_bhb_loop+0x55/0xb0 [ 191.128481][T10959] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.134410][T10959] RIP: 0033:0x7f8cc50c5dfc [ 191.138867][T10959] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8d 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8d 02 00 48 [ 191.158524][T10959] RSP: 002b:00007f8cc3d47040 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 191.166959][T10959] RAX: ffffffffffffffda RBX: 00007f8cc5255f80 RCX: 00007f8cc50c5dfc [ 191.174942][T10959] RDX: 000000000000000f RSI: 00007f8cc3d470b0 RDI: 0000000000000004 [ 191.182913][T10959] RBP: 00007f8cc3d470a0 R08: 0000000000000000 R09: 0000000000000000 [ 191.190888][T10959] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 191.198902][T10959] R13: 000000000000000b R14: 00007f8cc5255f80 R15: 00007ffd7094c248 [ 191.206873][T10959] [ 191.284228][T10970] usb usb9: usbfs: process 10970 (syz.1.2000) did not claim interface 0 before use [ 191.294079][ T50] team0 (unregistering): Port device team_slave_1 removed [ 191.305377][ T50] team0 (unregistering): Port device team_slave_0 removed [ 191.357375][T10894] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 191.364368][T10894] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 191.390540][T10894] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 191.403827][T10954] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1995'. [ 191.414807][T10955] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1995'. [ 191.434334][T10894] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 191.441513][T10894] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 191.467515][T10894] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 191.489415][ T8210] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.532230][T10980] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10980 comm=syz.2.2003 [ 191.571417][T10980] loop2: detected capacity change from 0 to 512 [ 191.599217][T10980] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters [ 191.633847][T10894] hsr_slave_0: entered promiscuous mode [ 191.659368][T10894] hsr_slave_1: entered promiscuous mode [ 191.666410][T10980] EXT4-fs (loop2): Remounting filesystem read-only [ 191.683691][T10894] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 191.695496][T10980] EXT4-fs (loop2): 1 truncate cleaned up [ 191.699512][T10894] Cannot create hsr debugfs directory [ 191.709606][T10980] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 191.733179][T10980] SELinux: (dev loop2, type ext4) getxattr errno 5 [ 191.823793][T10980] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.161884][T11030] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11030 comm=syz.0.2010 [ 192.210075][T10980] netlink: 'syz.2.2003': attribute type 1 has an invalid length. [ 192.235731][T10980] 8021q: adding VLAN 0 to HW filter on device bond1 [ 192.285223][T11039] usb usb9: usbfs: process 11039 (syz.2.2011) did not claim interface 0 before use [ 192.325926][T11040] loop1: detected capacity change from 0 to 1024 [ 192.381605][T11040] EXT4-fs: Ignoring removed orlov option [ 192.404181][T11040] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 192.412926][T10894] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 192.438373][T10894] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 192.451766][T10894] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 192.472441][T10894] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 192.583630][T10894] 8021q: adding VLAN 0 to HW filter on device bond0 [ 192.594915][T11065] FAULT_INJECTION: forcing a failure. [ 192.594915][T11065] name failslab, interval 1, probability 0, space 0, times 0 [ 192.607663][T11065] CPU: 0 UID: 0 PID: 11065 Comm: syz.3.2015 Not tainted 6.11.0-rc1-syzkaller-00044-g22f546873149 #0 [ 192.618499][T11065] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 192.628583][T11065] Call Trace: [ 192.631872][T11065] [ 192.634811][T11065] dump_stack_lvl+0xf2/0x150 [ 192.639469][T11065] dump_stack+0x15/0x20 [ 192.643711][T11065] should_fail_ex+0x229/0x230 [ 192.648451][T11065] ? iovec_from_user+0x84/0x210 [ 192.653405][T11065] should_failslab+0x8f/0xb0 [ 192.658116][T11065] __kmalloc_noprof+0xa5/0x370 [ 192.662901][T11065] iovec_from_user+0x84/0x210 [ 192.667609][T11065] __import_iovec+0xd8/0x520 [ 192.672235][T11065] import_iovec+0xbc/0xd0 [ 192.674014][T10894] 8021q: adding VLAN 0 to HW filter on device team0 [ 192.676588][T11065] vfs_readv+0xec/0x660 [ 192.676627][T11065] __se_sys_preadv2+0x10c/0x1d0 [ 192.692474][T11065] __x64_sys_preadv2+0x78/0x90 [ 192.697277][T11065] x64_sys_call+0x27fc/0x2e00 [ 192.701989][T11065] do_syscall_64+0xc9/0x1c0 [ 192.706527][T11065] ? clear_bhb_loop+0x55/0xb0 [ 192.711265][T11065] ? clear_bhb_loop+0x55/0xb0 [ 192.714713][T10894] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 192.715952][T11065] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.726341][T10894] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 192.732146][T11065] RIP: 0033:0x7fa418ee73b9 [ 192.732168][T11065] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 192.766538][T11065] RSP: 002b:00007fa417b67048 EFLAGS: 00000246 ORIG_RAX: 0000000000000147 [ 192.775084][T11065] RAX: ffffffffffffffda RBX: 00007fa419075f80 RCX: 00007fa418ee73b9 [ 192.783081][T11065] RDX: 1000000000000146 RSI: 0000000020000000 RDI: 0000000000000004 [ 192.791072][T11065] RBP: 00007fa417b670a0 R08: 0000000000000000 R09: 0000000000000000 [ 192.799063][T11065] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 192.807070][T11065] R13: 000000000000000b R14: 00007fa419075f80 R15: 00007ffd9a48fca8 [ 192.815056][T11065] [ 192.830323][ T3336] bridge0: port 1(bridge_slave_0) entered blocking state [ 192.837470][ T3336] bridge0: port 1(bridge_slave_0) entered forwarding state [ 192.868866][ T3336] bridge0: port 2(bridge_slave_1) entered blocking state [ 192.875988][ T3336] bridge0: port 2(bridge_slave_1) entered forwarding state [ 192.962645][T10894] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 193.066770][T11098] loop0: detected capacity change from 0 to 512 [ 193.090863][T11098] EXT4-fs: Ignoring removed mblk_io_submit option [ 193.097456][T11098] EXT4-fs: Ignoring removed nobh option [ 193.103085][T11098] ext2: Unknown parameter 'dioread_nolock..' [ 193.190649][T11098] loop0: detected capacity change from 0 to 128 [ 193.328618][ T7052] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.332362][T10894] veth0_vlan: entered promiscuous mode [ 193.344105][T11131] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2024'. [ 193.392093][T11131] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2024'. [ 193.413087][T10894] veth1_vlan: entered promiscuous mode [ 193.465480][T10894] veth0_macvtap: entered promiscuous mode [ 193.551955][T10894] veth1_macvtap: entered promiscuous mode [ 193.651174][T10894] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 193.661835][T10894] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.671748][T10894] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 193.682230][T10894] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.692217][T10894] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 193.702727][T10894] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.712750][T10894] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 193.723271][T10894] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.733239][T10894] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 193.743744][T10894] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.772487][T11139] usb usb9: usbfs: process 11139 (syz.0.2028) did not claim interface 0 before use [ 193.773573][T10894] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 193.793719][T10894] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 193.804270][T10894] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.814276][T10894] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 193.824783][T10894] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.834752][T10894] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 193.845239][T10894] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.855121][T10894] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 193.865694][T10894] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.875576][T10894] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 193.886065][T10894] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.898055][T10894] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 193.907416][T10894] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.916200][T10894] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.925011][T10894] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.933984][T10894] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.949796][T11148] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2026'. [ 194.001803][T11155] loop1: detected capacity change from 0 to 256 [ 194.029128][T11157] loop0: detected capacity change from 0 to 2048 [ 194.069276][T11157] Alternate GPT is invalid, using primary GPT. [ 194.075753][T11157] loop0: p1 p2 p3 [ 194.200996][ T29] kauditd_printk_skb: 85 callbacks suppressed [ 194.201011][ T29] audit: type=1400 audit(1722375378.373:806): avc: denied { connect } for pid=11166 comm="syz.1.2034" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 194.221419][T11177] loop7: detected capacity change from 0 to 16384 [ 194.226974][ T29] audit: type=1400 audit(1722375378.373:807): avc: denied { ioctl } for pid=11166 comm="syz.1.2034" path="socket:[31366]" dev="sockfs" ino=31366 ioctlcmd=0x4b46 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 194.260706][T11179] loop2: detected capacity change from 0 to 512 [ 194.308969][ T4209] udevd[4209]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 194.309360][T11179] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 194.337029][ T5930] udevd[5930]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 194.352576][ T3251] udevd[3251]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 194.377871][T11179] ext4 filesystem being mounted at /90/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 194.390612][T11188] loop4: detected capacity change from 0 to 1024 [ 194.398071][T11188] EXT4-fs: Ignoring removed orlov option [ 194.425126][T11188] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 194.449124][T11187] usb usb9: usbfs: process 11187 (syz.1.2040) did not claim interface 0 before use [ 194.485948][T11179] 9pnet_fd: Insufficient options for proto=fd [ 194.488748][ T29] audit: type=1400 audit(1722375378.663:808): avc: denied { mounton } for pid=11178 comm="syz.2.2038" path="/90/file0/file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 194.540520][ T29] audit: type=1400 audit(1722375378.673:809): avc: denied { execute } for pid=11178 comm="syz.2.2038" path="/90/file0/cgroup.stat" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 194.600682][ T29] audit: type=1400 audit(1722375378.743:810): avc: denied { create } for pid=11178 comm="syz.2.2038" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 194.621531][ T29] audit: type=1400 audit(1722375378.743:811): avc: denied { bind } for pid=11178 comm="syz.2.2038" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 194.656802][ T9420] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 194.705622][T11203] loop3: detected capacity change from 0 to 2048 [ 194.855872][T11203] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 194.895290][T11208] loop1: detected capacity change from 0 to 8192 [ 194.958783][T11212] loop2: detected capacity change from 0 to 1024 [ 194.965569][T11212] EXT4-fs: Ignoring removed orlov option [ 195.071862][T11212] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 195.085510][ T8210] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.647057][ T9420] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.737639][T11231] loop2: detected capacity change from 0 to 1024 [ 195.745057][T11231] EXT4-fs (loop2): VFS: Can't find ext4 filesystem [ 195.752947][T10894] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.773590][T11233] usb usb9: usbfs: process 11233 (syz.3.2051) did not claim interface 0 before use [ 195.797519][T11237] FAULT_INJECTION: forcing a failure. [ 195.797519][T11237] name failslab, interval 1, probability 0, space 0, times 0 [ 195.810289][T11237] CPU: 0 UID: 0 PID: 11237 Comm: syz.4.2052 Not tainted 6.11.0-rc1-syzkaller-00044-g22f546873149 #0 [ 195.821152][T11237] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 195.825686][T11231] loop2: detected capacity change from 0 to 512 [ 195.831221][T11237] Call Trace: [ 195.831232][T11237] [ 195.831241][T11237] dump_stack_lvl+0xf2/0x150 [ 195.848423][T11237] dump_stack+0x15/0x20 [ 195.852647][T11237] should_fail_ex+0x229/0x230 [ 195.857435][T11237] ? skb_clone+0x154/0x1f0 [ 195.861919][T11237] should_failslab+0x8f/0xb0 [ 195.866618][T11237] kmem_cache_alloc_noprof+0x4c/0x290 [ 195.872007][T11237] skb_clone+0x154/0x1f0 [ 195.876272][T11237] __netlink_deliver_tap+0x2bd/0x4c0 [ 195.881591][T11237] netlink_sendskb+0x123/0x140 [ 195.886375][T11237] netlink_unicast+0x291/0x670 [ 195.891170][T11237] netlink_ack+0x4c4/0x4f0 [ 195.895596][T11237] netlink_rcv_skb+0x19c/0x230 [ 195.900367][T11237] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 195.905967][T11237] rtnetlink_rcv+0x1c/0x30 [ 195.910422][T11237] netlink_unicast+0x593/0x670 [ 195.915210][T11237] netlink_sendmsg+0x5cc/0x6e0 [ 195.920086][T11237] ? __pfx_netlink_sendmsg+0x10/0x10 [ 195.925439][T11237] __sock_sendmsg+0x140/0x180 [ 195.930182][T11237] sock_write_iter+0x164/0x1b0 [ 195.935107][T11237] vfs_write+0x78f/0x900 [ 195.939478][T11237] ? __pfx_sock_write_iter+0x10/0x10 [ 195.944783][T11237] ksys_write+0xeb/0x1b0 [ 195.949113][T11237] __x64_sys_write+0x42/0x50 [ 195.953776][T11237] x64_sys_call+0x2a40/0x2e00 [ 195.958470][T11237] do_syscall_64+0xc9/0x1c0 [ 195.962991][T11237] ? clear_bhb_loop+0x55/0xb0 [ 195.967816][T11237] ? clear_bhb_loop+0x55/0xb0 [ 195.972534][T11237] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.978497][T11237] RIP: 0033:0x7fac369f73b9 [ 195.982917][T11237] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 196.002577][T11237] RSP: 002b:00007fac35677048 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 196.010998][T11237] RAX: ffffffffffffffda RBX: 00007fac36b85f80 RCX: 00007fac369f73b9 [ 196.019009][T11237] RDX: 0000000000000024 RSI: 00000000200000c0 RDI: 0000000000000003 [ 196.027003][T11237] RBP: 00007fac356770a0 R08: 0000000000000000 R09: 0000000000000000 [ 196.035052][T11237] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 196.043033][T11237] R13: 000000000000000b R14: 00007fac36b85f80 R15: 00007ffd4999ad58 [ 196.051072][T11237] [ 196.106267][T11231] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 196.129427][T11231] ext4 filesystem being mounted at /93/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 196.176761][T11252] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2056'. [ 196.247258][T11252] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2056'. [ 196.262454][ T9420] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.342791][T11263] dummy0: entered promiscuous mode [ 196.359327][T11267] smc: net device lo applied user defined pnetid SYZ2 [ 196.380895][T11267] smc: net device lo erased user defined pnetid SYZ2 [ 196.447379][T11263] loop2: detected capacity change from 0 to 8192 [ 196.467543][T11275] loop3: detected capacity change from 0 to 256 [ 196.485652][T11263] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 196.626519][T11263] FAT-fs (loop2): error, clusters badly computed (1 != 30720) [ 196.634159][T11263] FAT-fs (loop2): Filesystem has been set read-only [ 196.717920][T11281] loop4: detected capacity change from 0 to 1024 [ 196.750162][T11285] Cannot find set identified by id 0 to match [ 196.880622][T11263] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 1042) [ 196.886482][T11281] EXT4-fs: Ignoring removed orlov option [ 196.932786][T11281] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 196.944478][T11291] loop3: detected capacity change from 0 to 512 [ 196.962582][T11291] EXT4-fs error (device loop3): ext4_orphan_get:1417: comm syz.3.2069: bad orphan inode 4 [ 196.976422][T11291] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 197.025960][T11294] loop2: detected capacity change from 0 to 512 [ 197.037460][T11294] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.2070: bad orphan inode 4 [ 197.056701][T11294] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 197.071539][T11294] FAULT_INJECTION: forcing a failure. [ 197.071539][T11294] name fail_futex, interval 1, probability 0, space 0, times 1 [ 197.084493][T11294] CPU: 1 UID: 0 PID: 11294 Comm: syz.2.2070 Not tainted 6.11.0-rc1-syzkaller-00044-g22f546873149 #0 [ 197.095353][T11294] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 197.105589][T11294] Call Trace: [ 197.108886][T11294] [ 197.112023][T11294] dump_stack_lvl+0xf2/0x150 [ 197.116724][T11294] dump_stack+0x15/0x20 [ 197.120978][T11294] should_fail_ex+0x229/0x230 [ 197.125770][T11294] should_fail+0xb/0x10 [ 197.130020][T11294] get_futex_key+0xf4/0x710 [ 197.134576][T11294] futex_wait_requeue_pi+0x16d/0x6d0 [ 197.139918][T11294] ? __pfx_futex_wake_mark+0x10/0x10 [ 197.145226][T11294] do_futex+0x146/0x370 [ 197.149517][T11294] __se_sys_futex+0x25d/0x3a0 [ 197.154228][T11294] ? fput+0x13b/0x180 [ 197.158348][T11294] __x64_sys_futex+0x78/0x90 [ 197.162962][T11294] x64_sys_call+0x126a/0x2e00 [ 197.167667][T11294] do_syscall_64+0xc9/0x1c0 [ 197.172204][T11294] ? clear_bhb_loop+0x55/0xb0 [ 197.176912][T11294] ? clear_bhb_loop+0x55/0xb0 [ 197.181749][T11294] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.187675][T11294] RIP: 0033:0x7f68003e73b9 [ 197.192100][T11294] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 197.211809][T11294] RSP: 002b:00007f67ff067048 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 197.220289][T11294] RAX: ffffffffffffffda RBX: 00007f6800575f80 RCX: 00007f68003e73b9 [ 197.228277][T11294] RDX: 0000000000000000 RSI: 000000000000000b RDI: 000000002000cffc [ 197.236348][T11294] RBP: 00007f67ff0670a0 R08: 0000000020048000 R09: 0000000000000000 [ 197.238289][T10992] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm ext4lazyinit: bg 0: block 3: invalid block bitmap [ 197.244387][T11294] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 197.244405][T11294] R13: 000000000000000b R14: 00007f6800575f80 R15: 00007fff00c02a48 [ 197.272854][T11294] [ 197.351949][T11306] netlink: 'syz.1.2073': attribute type 4 has an invalid length. [ 197.359817][T11306] netlink: 17 bytes leftover after parsing attributes in process `syz.1.2073'. [ 197.372477][ T8210] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.378601][T11306] loop1: detected capacity change from 0 to 512 [ 197.382002][ T9420] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.420308][T11306] EXT4-fs error (device loop1): ext4_orphan_get:1417: comm syz.1.2073: bad orphan inode 4 [ 197.439703][T11306] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 197.577995][ T29] audit: type=1400 audit(1722375381.752:812): avc: denied { mount } for pid=11318 comm="syz.2.2077" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 197.619227][ T7052] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.621372][ T29] audit: type=1400 audit(1722375381.752:813): avc: denied { remount } for pid=11318 comm="syz.2.2077" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 197.666223][T11322] loop1: detected capacity change from 0 to 256 [ 197.810304][T11329] loop1: detected capacity change from 0 to 256 [ 197.836646][T10894] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.001743][T11349] geneve1: entered promiscuous mode [ 198.007476][T11349] geneve1: left promiscuous mode [ 198.371504][T11358] loop4: detected capacity change from 0 to 256 [ 198.451089][T11360] loop1: detected capacity change from 0 to 1024 [ 198.533674][ T29] audit: type=1400 audit(1722375382.692:814): avc: denied { unmount } for pid=9420 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 198.560349][T11360] EXT4-fs: Ignoring removed orlov option [ 198.752813][T11360] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 198.912842][T11376] loop0: detected capacity change from 0 to 1024 [ 198.936192][T11380] loop2: detected capacity change from 0 to 1024 [ 198.944570][T11376] EXT4-fs: Ignoring removed orlov option [ 198.970470][T11376] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 199.000240][T11380] EXT4-fs: Ignoring removed orlov option [ 199.099107][T11380] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 199.255735][ T29] audit: type=1400 audit(1722375383.432:815): avc: denied { write } for pid=11392 comm="syz.3.2097" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 199.385667][T11397] loop3: detected capacity change from 0 to 512 [ 199.440237][T11397] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 199.474655][T11397] ext4 filesystem being mounted at /174/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 199.533353][ T8210] EXT4-fs error (device loop3): ext4_readdir:260: inode #12: block 32: comm syz-executor: path /174/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 199.541027][T11405] smc: net device lo applied user defined pnetid SYZ2 [ 199.617840][T11405] smc: net device lo erased user defined pnetid SYZ2 [ 199.640521][T11405] FAULT_INJECTION: forcing a failure. [ 199.640521][T11405] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 199.653641][T11405] CPU: 0 UID: 0 PID: 11405 Comm: syz.4.2102 Not tainted 6.11.0-rc1-syzkaller-00044-g22f546873149 #0 [ 199.664649][T11405] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 199.674735][T11405] Call Trace: [ 199.678106][T11405] [ 199.681111][T11405] dump_stack_lvl+0xf2/0x150 [ 199.685793][T11405] dump_stack+0x15/0x20 [ 199.689985][T11405] should_fail_ex+0x229/0x230 [ 199.694688][T11405] should_fail+0xb/0x10 [ 199.698922][T11405] should_fail_usercopy+0x1a/0x20 [ 199.703976][T11405] _copy_to_user+0x1e/0xa0 [ 199.708418][T11405] simple_read_from_buffer+0xa0/0x110 [ 199.713838][T11405] proc_fail_nth_read+0xfc/0x140 [ 199.718810][T11405] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 199.724481][T11405] vfs_read+0x1a2/0x6e0 [ 199.728673][T11405] ? __rcu_read_unlock+0x4e/0x70 [ 199.733650][T11405] ? __fget_files+0x1da/0x210 [ 199.738361][T11405] ksys_read+0xeb/0x1b0 [ 199.742554][T11405] __x64_sys_read+0x42/0x50 [ 199.747142][T11405] x64_sys_call+0x2a36/0x2e00 [ 199.751847][T11405] do_syscall_64+0xc9/0x1c0 [ 199.756379][T11405] ? clear_bhb_loop+0x55/0xb0 [ 199.761134][T11405] ? clear_bhb_loop+0x55/0xb0 [ 199.765855][T11405] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.771795][T11405] RIP: 0033:0x7fac369f5dfc [ 199.776287][T11405] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8d 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8d 02 00 48 [ 199.795933][T11405] RSP: 002b:00007fac35677040 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 199.804529][T11405] RAX: ffffffffffffffda RBX: 00007fac36b85f80 RCX: 00007fac369f5dfc [ 199.812513][T11405] RDX: 000000000000000f RSI: 00007fac356770b0 RDI: 0000000000000005 [ 199.820563][T11405] RBP: 00007fac356770a0 R08: 0000000000000000 R09: 0000000000000000 [ 199.828542][T11405] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 199.836633][T11405] R13: 000000000000000b R14: 00007fac36b85f80 R15: 00007ffd4999ad58 [ 199.844701][T11405] [ 199.910723][ T7052] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.983083][ T9420] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.588828][T10733] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.959602][T11443] loop0: detected capacity change from 0 to 1024 [ 200.966179][T11443] EXT4-fs: Ignoring removed orlov option [ 201.018389][T11449] loop4: detected capacity change from 0 to 1024 [ 201.096576][T11443] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 201.122152][T11449] EXT4-fs: Ignoring removed orlov option [ 201.144526][T11449] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 201.330080][ T29] audit: type=1326 audit(1722375385.502:816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11466 comm="syz.1.2121" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8cc50c73b9 code=0x0 [ 201.365626][T10733] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.475382][ T29] audit: type=1326 audit(1722375385.651:817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11468 comm="syz.0.2122" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7e668173b9 code=0x0 [ 201.600520][ T29] audit: type=1400 audit(1722375385.781:818): avc: denied { getopt } for pid=11470 comm="syz.2.2123" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 201.654442][ T29] audit: type=1400 audit(1722375385.781:819): avc: denied { accept } for pid=11470 comm="syz.2.2123" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 201.920767][T11476] loop2: detected capacity change from 0 to 1024 [ 201.982302][T11476] EXT4-fs: Ignoring removed orlov option [ 202.019333][T10894] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.053767][T11476] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 202.077171][T11481] FAULT_INJECTION: forcing a failure. [ 202.077171][T11481] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 202.090737][T11481] CPU: 0 UID: 0 PID: 11481 Comm: syz.0.2122 Not tainted 6.11.0-rc1-syzkaller-00044-g22f546873149 #0 [ 202.101530][T11481] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 202.111610][T11481] Call Trace: [ 202.115003][T11481] [ 202.117942][T11481] dump_stack_lvl+0xf2/0x150 [ 202.122612][T11481] dump_stack+0x15/0x20 [ 202.126951][T11481] should_fail_ex+0x229/0x230 [ 202.131689][T11481] should_fail+0xb/0x10 [ 202.135951][T11481] should_fail_usercopy+0x1a/0x20 [ 202.141082][T11481] _copy_to_user+0x1e/0xa0 [ 202.145536][T11481] semctl_info+0x19d/0x200 [ 202.149976][T11481] __se_sys_semctl+0x200/0x2b0 [ 202.154767][T11481] __x64_sys_semctl+0x55/0x70 [ 202.159475][T11481] x64_sys_call+0x2bf8/0x2e00 [ 202.164186][T11481] do_syscall_64+0xc9/0x1c0 [ 202.168760][T11481] ? clear_bhb_loop+0x55/0xb0 [ 202.173556][T11481] ? clear_bhb_loop+0x55/0xb0 [ 202.178370][T11481] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.184293][T11481] RIP: 0033:0x7f7e668173b9 [ 202.188726][T11481] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 202.208425][T11481] RSP: 002b:00007f7e65476048 EFLAGS: 00000246 ORIG_RAX: 0000000000000042 [ 202.216912][T11481] RAX: ffffffffffffffda RBX: 00007f7e669a6058 RCX: 00007f7e668173b9 [ 202.224906][T11481] RDX: 0000000000000013 RSI: 0000000000000000 RDI: 0000000000000000 [ 202.232893][T11481] RBP: 00007f7e654760a0 R08: 0000000000000000 R09: 0000000000000000 [ 202.240933][T11481] R10: 00000000200002c0 R11: 0000000000000246 R12: 0000000000000001 [ 202.248912][T11481] R13: 000000000000006e R14: 00007f7e669a6058 R15: 00007ffecad61a58 [ 202.256940][T11481] [ 202.357161][T11490] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2128'. [ 202.442403][T11483] loop1: detected capacity change from 0 to 128 [ 202.593092][T11483] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 202.670656][T11483] ext4 filesystem being mounted at /214/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 202.711740][T11483] EXT4-fs warning (device loop1): ext4_dirblock_csum_verify:406: inode #2: comm syz.1.2126: No space for directory leaf checksum. Please run e2fsck -D. [ 202.727281][T11483] EXT4-fs error (device loop1): __ext4_find_entry:1652: inode #2: comm syz.1.2126: checksumming directory block 0 [ 202.861952][T11483] EXT4-fs warning (device loop1): ext4_dirblock_csum_verify:406: inode #2: comm syz.1.2126: No space for directory leaf checksum. Please run e2fsck -D. [ 202.877332][T11483] EXT4-fs error (device loop1): __ext4_find_entry:1652: inode #2: comm syz.1.2126: checksumming directory block 0 [ 202.920028][T11483] EXT4-fs warning (device loop1): ext4_dirblock_csum_verify:406: inode #2: comm syz.1.2126: No space for directory leaf checksum. Please run e2fsck -D. [ 202.935501][T11483] EXT4-fs error (device loop1): __ext4_find_entry:1652: inode #2: comm syz.1.2126: checksumming directory block 0 [ 202.981683][T11492] EXT4-fs warning (device loop1): ext4_dirblock_csum_verify:406: inode #2: comm syz.1.2126: No space for directory leaf checksum. Please run e2fsck -D. [ 202.997175][T11492] EXT4-fs error (device loop1): __ext4_find_entry:1652: inode #2: comm syz.1.2126: checksumming directory block 0 [ 203.048478][T11483] EXT4-fs warning (device loop1): ext4_dirblock_csum_verify:406: inode #2: comm syz.1.2126: No space for directory leaf checksum. Please run e2fsck -D. [ 203.063873][T11483] EXT4-fs error (device loop1): __ext4_find_entry:1652: inode #2: comm syz.1.2126: checksumming directory block 0 [ 203.089744][T11503] Falling back ldisc for pts0. [ 203.121708][T11492] EXT4-fs warning (device loop1): ext4_dirblock_csum_verify:406: inode #2: comm syz.1.2126: No space for directory leaf checksum. Please run e2fsck -D. [ 203.137249][T11492] EXT4-fs error (device loop1): __ext4_find_entry:1652: inode #2: comm syz.1.2126: checksumming directory block 0 [ 203.171382][T11483] EXT4-fs warning (device loop1): ext4_dirblock_csum_verify:406: inode #2: comm syz.1.2126: No space for directory leaf checksum. Please run e2fsck -D. [ 203.186858][T11483] EXT4-fs error (device loop1): __ext4_find_entry:1652: inode #2: comm syz.1.2126: checksumming directory block 0 [ 203.218723][T11508] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11508 comm=syz.0.2133 [ 203.283285][T11511] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=11511 comm=syz.4.2134 [ 203.283753][T11510] loop0: detected capacity change from 0 to 512 [ 203.329805][T11492] EXT4-fs warning (device loop1): ext4_dirblock_csum_verify:406: inode #2: comm syz.1.2126: No space for directory leaf checksum. Please run e2fsck -D. [ 203.345333][T11492] EXT4-fs error (device loop1): __ext4_find_entry:1652: inode #2: comm syz.1.2126: checksumming directory block 0 [ 203.369120][T11510] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters [ 203.412749][ T9420] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.441471][T11515] FAULT_INJECTION: forcing a failure. [ 203.441471][T11515] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 203.454625][T11515] CPU: 0 UID: 0 PID: 11515 Comm: syz.4.2135 Not tainted 6.11.0-rc1-syzkaller-00044-g22f546873149 #0 [ 203.465537][T11515] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 203.475639][T11515] Call Trace: [ 203.478985][T11515] [ 203.481980][T11515] dump_stack_lvl+0xf2/0x150 [ 203.486625][T11515] dump_stack+0x15/0x20 [ 203.490861][T11515] should_fail_ex+0x229/0x230 [ 203.495578][T11515] should_fail+0xb/0x10 [ 203.499869][T11515] should_fail_usercopy+0x1a/0x20 [ 203.504976][T11515] _copy_from_user+0x1e/0xd0 [ 203.509626][T11515] __sys_bpf+0x14e/0x7a0 [ 203.513904][T11515] __x64_sys_bpf+0x43/0x50 [ 203.518426][T11515] x64_sys_call+0x23d5/0x2e00 [ 203.523135][T11515] do_syscall_64+0xc9/0x1c0 [ 203.527715][T11515] ? clear_bhb_loop+0x55/0xb0 [ 203.532437][T11515] ? clear_bhb_loop+0x55/0xb0 [ 203.537228][T11515] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.539981][T11483] EXT4-fs warning (device loop1): ext4_dirblock_csum_verify:406: inode #2: comm syz.1.2126: No space for directory leaf checksum. Please run e2fsck -D. [ 203.543131][T11515] RIP: 0033:0x7fac369f73b9 [ 203.543154][T11515] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 203.558512][T11483] EXT4-fs error (device loop1): __ext4_find_entry:1652: inode #2: comm syz.1.2126: checksumming directory block 0 [ 203.562886][T11515] RSP: 002b:00007fac35677048 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 203.562912][T11515] RAX: ffffffffffffffda RBX: 00007fac36b85f80 RCX: 00007fac369f73b9 [ 203.562928][T11515] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000010 [ 203.562944][T11515] RBP: 00007fac356770a0 R08: 0000000000000000 R09: 0000000000000000 [ 203.624559][T11510] EXT4-fs (loop0): Remounting filesystem read-only [ 203.627073][T11515] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 203.641613][T11515] R13: 000000000000000b R14: 00007fac36b85f80 R15: 00007ffd4999ad58 [ 203.649597][T11515] [ 203.652760][T11510] EXT4-fs (loop0): 1 truncate cleaned up [ 203.658813][T11510] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 203.662041][T11492] EXT4-fs warning (device loop1): ext4_dirblock_csum_verify:406: inode #2: comm syz.1.2126: No space for directory leaf checksum. Please run e2fsck -D. [ 203.671817][T11510] SELinux: (dev loop0, type ext4) getxattr errno 5 [ 203.686596][T11492] EXT4-fs error (device loop1): __ext4_find_entry:1652: inode #2: comm syz.1.2126: checksumming directory block 0 [ 203.695145][T11510] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.719343][T11508] netlink: 'syz.0.2133': attribute type 1 has an invalid length. [ 203.798911][T11508] 8021q: adding VLAN 0 to HW filter on device bond1 [ 203.872759][T11525] netlink: 'syz.4.2138': attribute type 11 has an invalid length. [ 203.886596][ C0] eth0: bad gso: type: 1, size: 1408 [ 204.009506][ T7052] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 204.037858][ T29] audit: type=1400 audit(1722375388.201:820): avc: denied { create } for pid=11537 comm="syz.0.2144" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 204.071434][T11544] delete_channel: no stack [ 204.085974][T11545] loop0: detected capacity change from 0 to 512 [ 204.107391][ T29] audit: type=1400 audit(1722375388.281:821): avc: denied { bind } for pid=11541 comm="syz.4.2145" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 204.196378][ T29] audit: type=1400 audit(1722375388.281:822): avc: denied { listen } for pid=11541 comm="syz.4.2145" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 204.216290][ T29] audit: type=1400 audit(1722375388.281:823): avc: denied { connect } for pid=11541 comm="syz.4.2145" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 204.236091][ T29] audit: type=1400 audit(1722375388.281:824): avc: denied { read } for pid=11541 comm="syz.4.2145" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 204.359952][T11545] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 204.412223][T11554] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2145'. [ 204.426609][T11545] ext4 filesystem being mounted at /31/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 204.523189][ T29] audit: type=1400 audit(1722375388.551:825): avc: denied { write } for pid=11543 comm="syz.1.2142" path="socket:[32977]" dev="sockfs" ino=32977 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 204.546590][ T29] audit: type=1400 audit(1722375388.581:826): avc: denied { shutdown } for pid=11541 comm="syz.4.2145" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 204.847576][T11562] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=14385 sclass=netlink_route_socket pid=11562 comm=syz.4.2148 [ 204.891835][T11564] netlink: 'syz.2.2149': attribute type 2 has an invalid length. [ 204.905534][T10733] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.971120][T11567] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11567 comm=syz.2.2151 [ 205.022935][T11567] loop2: detected capacity change from 0 to 512 [ 205.052807][T11567] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters [ 205.095024][T11567] EXT4-fs (loop2): Remounting filesystem read-only [ 205.123398][T11580] netlink: 'syz.4.2155': attribute type 3 has an invalid length. [ 205.135050][T11579] xt_TCPMSS: Only works on TCP SYN packets [ 205.142201][T11567] EXT4-fs (loop2): 1 truncate cleaned up [ 205.148348][T11567] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 205.151960][T11581] FAULT_INJECTION: forcing a failure. [ 205.151960][T11581] name failslab, interval 1, probability 0, space 0, times 0 [ 205.160865][T11567] SELinux: (dev loop2, type ext4) getxattr errno 5 [ 205.173509][T11581] CPU: 1 UID: 0 PID: 11581 Comm: syz.1.2153 Not tainted 6.11.0-rc1-syzkaller-00044-g22f546873149 #0 [ 205.190786][T11581] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 205.200856][T11581] Call Trace: [ 205.204146][T11581] [ 205.207091][T11581] dump_stack_lvl+0xf2/0x150 [ 205.211727][T11581] dump_stack+0x15/0x20 [ 205.215976][T11581] should_fail_ex+0x229/0x230 [ 205.220682][T11581] ? __kvmalloc_node_noprof+0x72/0x170 [ 205.226162][T11581] should_failslab+0x8f/0xb0 [ 205.230802][T11581] __kmalloc_node_noprof+0xa8/0x380 [ 205.236030][T11581] __kvmalloc_node_noprof+0x72/0x170 [ 205.241438][T11581] alloc_netdev_mqs+0x9d/0x8d0 [ 205.246295][T11581] ? __pfx_sl_setup+0x10/0x10 [ 205.251022][T11581] slip_open+0x2cf/0x920 [ 205.255387][T11581] ? vfree+0x31b/0x390 [ 205.259474][T11581] ? up_write+0x30/0xf0 [ 205.263649][T11581] ? up_write+0x30/0xf0 [ 205.267930][T11581] tty_ldisc_open+0x65/0xb0 [ 205.272531][T11581] tty_set_ldisc+0x205/0x3b0 [ 205.277161][T11581] tiocsetd+0x52/0x60 [ 205.281203][T11581] tty_ioctl+0xaa0/0xbe0 [ 205.285474][T11581] ? __pfx_tty_ioctl+0x10/0x10 [ 205.290270][T11581] __se_sys_ioctl+0xd3/0x150 [ 205.294949][T11581] __x64_sys_ioctl+0x43/0x50 [ 205.299655][T11581] x64_sys_call+0x1688/0x2e00 [ 205.304436][T11581] do_syscall_64+0xc9/0x1c0 [ 205.309025][T11581] ? clear_bhb_loop+0x55/0xb0 [ 205.313725][T11581] ? clear_bhb_loop+0x55/0xb0 [ 205.318540][T11581] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 205.324551][T11581] RIP: 0033:0x7f8cc50c73b9 [ 205.329092][T11581] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 205.348897][T11581] RSP: 002b:00007f8cc3d47048 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 205.357388][T11581] RAX: ffffffffffffffda RBX: 00007f8cc5255f80 RCX: 00007f8cc50c73b9 [ 205.365409][T11581] RDX: 00000000200000c0 RSI: 0000000000005423 RDI: 0000000000000003 [ 205.372600][T11567] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.373376][T11581] RBP: 00007f8cc3d470a0 R08: 0000000000000000 R09: 0000000000000000 [ 205.373395][T11581] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 205.398345][T11581] R13: 000000000000000b R14: 00007f8cc5255f80 R15: 00007ffd7094c248 [ 205.406326][T11581] [ 205.460221][T11567] netlink: 'syz.2.2151': attribute type 1 has an invalid length. [ 205.471642][T11588] loop0: detected capacity change from 0 to 1024 [ 205.478922][T11582] netlink: 'syz.4.2155': attribute type 3 has an invalid length. [ 205.493246][ T29] audit: type=1400 audit(1722375389.670:827): avc: denied { ioctl } for pid=11575 comm="syz.4.2155" path="socket:[32016]" dev="sockfs" ino=32016 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 205.526869][T11588] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 205.534004][T11567] 8021q: adding VLAN 0 to HW filter on device bond2 [ 205.556612][T11588] Invalid ELF header magic: != ELF [ 205.563972][ T29] audit: type=1400 audit(1722375389.730:828): avc: denied { module_load } for pid=11587 comm="syz.0.2158" path=2F6D656D66643A202864656C6574656429 dev="tmpfs" ino=1533 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=system permissive=1 [ 205.620384][T10733] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.665458][T11603] loop0: detected capacity change from 0 to 256 [ 205.706600][ T29] audit: type=1400 audit(1722375389.880:829): avc: denied { mounton } for pid=11601 comm="syz.0.2161" path="/36/file1/bus" dev="loop0" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=file permissive=1 [ 205.714724][T11606] delete_channel: no stack [ 205.876243][ T29] audit: type=1400 audit(1722375390.040:830): avc: denied { mounton } for pid=11601 comm="syz.0.2161" path="/36/file1/bus" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 205.947065][T11612] loop4: detected capacity change from 0 to 764 [ 206.010102][T11612] iso9660: Unknown parameter ' [ 206.010102][T11612] ' [ 206.180532][T11603] loop0: detected capacity change from 256 to 0 [ 206.485988][T11631] FAULT_INJECTION: forcing a failure. [ 206.485988][T11631] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 206.499147][T11631] CPU: 1 UID: 0 PID: 11631 Comm: syz.4.2170 Not tainted 6.11.0-rc1-syzkaller-00044-g22f546873149 #0 [ 206.509950][T11631] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 206.520170][T11631] Call Trace: [ 206.523461][T11631] [ 206.526449][T11631] dump_stack_lvl+0xf2/0x150 [ 206.531117][T11631] dump_stack+0x15/0x20 [ 206.535338][T11631] should_fail_ex+0x229/0x230 [ 206.540058][T11631] should_fail+0xb/0x10 [ 206.544248][T11631] should_fail_usercopy+0x1a/0x20 [ 206.549312][T11631] _copy_to_user+0x1e/0xa0 [ 206.553773][T11631] simple_read_from_buffer+0xa0/0x110 [ 206.559206][T11631] proc_fail_nth_read+0xfc/0x140 [ 206.564243][T11631] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 206.569838][T11631] vfs_read+0x1a2/0x6e0 [ 206.574076][T11631] ? __rcu_read_unlock+0x4e/0x70 [ 206.579106][T11631] ? __fget_files+0x1da/0x210 [ 206.583816][T11631] ksys_read+0xeb/0x1b0 [ 206.588049][T11631] __x64_sys_read+0x42/0x50 [ 206.592689][T11631] x64_sys_call+0x2a36/0x2e00 [ 206.597409][T11631] do_syscall_64+0xc9/0x1c0 [ 206.602000][T11631] ? clear_bhb_loop+0x55/0xb0 [ 206.606764][T11631] ? clear_bhb_loop+0x55/0xb0 [ 206.606818][T11631] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.606924][T11631] RIP: 0033:0x7fac369f5dfc [ 206.606942][T11631] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8d 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8d 02 00 48 [ 206.606966][T11631] RSP: 002b:00007fac35677040 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 206.606991][T11631] RAX: ffffffffffffffda RBX: 00007fac36b85f80 RCX: 00007fac369f5dfc [ 206.607009][T11631] RDX: 000000000000000f RSI: 00007fac356770b0 RDI: 0000000000000004 [ 206.607103][T11631] RBP: 00007fac356770a0 R08: 0000000000000000 R09: 11937e9837ce7fe1 [ 206.607119][T11631] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 206.607132][T11631] R13: 000000000000000b R14: 00007fac36b85f80 R15: 00007ffd4999ad58 [ 206.607149][T11631] [ 206.643833][T10733] syz-executor: attempt to access beyond end of device [ 206.643833][T10733] loop0: rw=0, sector=12, nr_sectors = 4 limit=0 [ 206.660354][T11633] loop1: detected capacity change from 0 to 512 [ 206.670339][T10733] FAT-fs (loop0): Directory bread(block 3) failed [ 206.715529][T11633] journal_path: Lookup failure for './file1' [ 206.735939][T11633] EXT4-fs: error: could not find journal device path [ 206.744386][T10733] syz-executor: attempt to access beyond end of device [ 206.744386][T10733] loop0: rw=0, sector=0, nr_sectors = 4 limit=0 [ 206.757532][T10733] FAT-fs (loop0): unable to read boot sector to mark fs as dirty [ 206.795241][T11635] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11635 comm=syz.4.2173 [ 206.811997][T11635] loop4: detected capacity change from 0 to 512 [ 206.833737][T11633] usb usb2: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 206.843274][T11633] vhci_hcd: invalid port number 16 [ 206.855167][T11635] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters [ 206.871102][T11635] EXT4-fs (loop4): Remounting filesystem read-only [ 206.877785][T11635] EXT4-fs (loop4): 1 truncate cleaned up [ 206.884104][T11635] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 206.896897][T11635] SELinux: (dev loop4, type ext4) getxattr errno 5 [ 206.905357][T11635] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 206.906212][T11642] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11642 comm=syz.1.2175 [ 206.941425][T11635] netlink: 'syz.4.2173': attribute type 1 has an invalid length. [ 207.028116][T11635] 8021q: adding VLAN 0 to HW filter on device bond1 [ 207.055478][T11650] loop2: detected capacity change from 0 to 1024 [ 207.062301][T11650] EXT4-fs: Ignoring removed orlov option [ 207.071264][ T11] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.092703][T11650] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 207.144352][ T11] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.215919][ T11] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.232526][ T29] audit: type=1326 audit(1722375391.380:831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11655 comm="syz.1.2179" exe="/root/syz-executor" sig=31 arch=c000003e syscall=317 compat=0 ip=0x7f8cc50c73b9 code=0x0 [ 207.328903][ T29] audit: type=1400 audit(1722375391.440:832): avc: denied { execmem } for pid=11651 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 207.338668][T11663] loop4: detected capacity change from 0 to 512 [ 207.371194][ T9420] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 207.380215][T11664] loop1: detected capacity change from 0 to 512 [ 207.402751][ T11] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.423626][T11664] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 207.484098][T11664] ext4 filesystem being mounted at /223/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 207.486632][T11663] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 207.511537][T11663] ext4 filesystem being mounted at /46/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 207.552270][T11664] Quota error (device loop1): do_check_range: Getting block 1282 out of range 1-5 [ 207.561642][T11664] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 207.571161][T11664] EXT4-fs error (device loop1): ext4_acquire_dquot:6848: comm syz.1.2182: Failed to acquire dquot type 1 [ 207.584579][ T11] bridge_slave_1: left allmulticast mode [ 207.590310][ T11] bridge_slave_1: left promiscuous mode [ 207.596172][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.622446][ T11] bridge_slave_0: left allmulticast mode [ 207.628148][ T11] bridge_slave_0: left promiscuous mode [ 207.633932][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.642982][ T7052] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 207.651091][T11663] FAULT_INJECTION: forcing a failure. [ 207.651091][T11663] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 207.665163][T11663] CPU: 1 UID: 0 PID: 11663 Comm: syz.4.2181 Not tainted 6.11.0-rc1-syzkaller-00044-g22f546873149 #0 [ 207.675945][T11663] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 207.686050][T11663] Call Trace: [ 207.689390][T11663] [ 207.692324][T11663] dump_stack_lvl+0xf2/0x150 [ 207.696966][T11663] dump_stack+0x15/0x20 [ 207.701211][T11663] should_fail_ex+0x229/0x230 [ 207.705909][T11663] should_fail+0xb/0x10 [ 207.710082][T11663] should_fail_usercopy+0x1a/0x20 [ 207.715126][T11663] _copy_from_user+0x1e/0xd0 [ 207.719740][T11663] move_addr_to_kernel+0x82/0x120 [ 207.724849][T11663] __sys_bind+0xe2/0x1d0 [ 207.729117][T11663] __x64_sys_bind+0x41/0x50 [ 207.733627][T11663] x64_sys_call+0x1e45/0x2e00 [ 207.738385][T11663] do_syscall_64+0xc9/0x1c0 [ 207.742908][T11663] ? clear_bhb_loop+0x55/0xb0 [ 207.747647][T11663] ? clear_bhb_loop+0x55/0xb0 [ 207.752337][T11663] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.758244][T11663] RIP: 0033:0x7fac369f73b9 [ 207.762715][T11663] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 207.782330][T11663] RSP: 002b:00007fac35677048 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 207.790829][T11663] RAX: ffffffffffffffda RBX: 00007fac36b85f80 RCX: 00007fac369f73b9 [ 207.798809][T11663] RDX: 000000000000006e RSI: 00000000200001c0 RDI: 0000000000000004 [ 207.806782][T11663] RBP: 00007fac356770a0 R08: 0000000000000000 R09: 0000000000000000 [ 207.814754][T11663] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 207.822851][T11663] R13: 000000000000000b R14: 00007fac36b85f80 R15: 00007ffd4999ad58 [ 207.830894][T11663] [ 207.890541][T10894] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 207.955282][T11691] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11691 comm=syz.4.2186 [ 207.974097][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 208.001115][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 208.026166][ T11] bond0 (unregistering): Released all slaves [ 208.043678][ T11] bond1 (unregistering): Released all slaves [ 208.070176][T11700] FAULT_INJECTION: forcing a failure. [ 208.070176][T11700] name failslab, interval 1, probability 0, space 0, times 0 [ 208.082991][T11700] CPU: 1 UID: 0 PID: 11700 Comm: syz.1.2192 Not tainted 6.11.0-rc1-syzkaller-00044-g22f546873149 #0 [ 208.093774][T11700] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 208.103844][T11700] Call Trace: [ 208.107130][T11700] [ 208.110103][T11700] dump_stack_lvl+0xf2/0x150 [ 208.114816][T11700] dump_stack+0x15/0x20 [ 208.119007][T11700] should_fail_ex+0x229/0x230 [ 208.123714][T11700] ? __kvmalloc_node_noprof+0x72/0x170 [ 208.129265][T11700] should_failslab+0x8f/0xb0 [ 208.133960][T11700] __kmalloc_node_noprof+0xa8/0x380 [ 208.139216][T11700] __kvmalloc_node_noprof+0x72/0x170 [ 208.144600][T11700] traverse+0x9f/0x3c0 [ 208.148690][T11700] ? __fget_files+0x1da/0x210 [ 208.153495][T11700] ? __rcu_read_unlock+0x4e/0x70 [ 208.158452][T11700] seq_lseek+0xae/0x170 [ 208.162714][T11700] proc_reg_llseek+0x11e/0x1a0 [ 208.167559][T11700] __x64_sys_lseek+0xed/0x150 [ 208.172313][T11700] x64_sys_call+0x2c3e/0x2e00 [ 208.177019][T11700] do_syscall_64+0xc9/0x1c0 [ 208.181552][T11700] ? clear_bhb_loop+0x55/0xb0 [ 208.186300][T11700] ? clear_bhb_loop+0x55/0xb0 [ 208.191042][T11700] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.196971][T11700] RIP: 0033:0x7f8cc50c73b9 [ 208.201404][T11700] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 208.221106][T11700] RSP: 002b:00007f8cc3d47048 EFLAGS: 00000246 ORIG_RAX: 0000000000000008 [ 208.229603][T11700] RAX: ffffffffffffffda RBX: 00007f8cc5255f80 RCX: 00007f8cc50c73b9 [ 208.237605][T11700] RDX: 0000000000000000 RSI: 000000000000002a RDI: 0000000000000008 [ 208.245588][T11700] RBP: 00007f8cc3d470a0 R08: 0000000000000000 R09: 0000000000000000 [ 208.253622][T11700] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 208.261605][T11700] R13: 000000000000000b R14: 00007f8cc5255f80 R15: 00007ffd7094c248 [ 208.269748][T11700] [ 208.344759][T11709] loop4: detected capacity change from 0 to 1024 [ 208.351533][T11709] EXT4-fs: Ignoring removed orlov option [ 208.417063][T11667] chnl_net:caif_netlink_parms(): no params data found [ 208.443340][T11709] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 208.567638][ T11] hsr_slave_0: left promiscuous mode [ 208.573782][ T11] hsr_slave_1: left promiscuous mode [ 208.598361][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 208.606070][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 208.629102][T10894] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 208.682047][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 208.689670][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 208.746561][ T11] veth1_macvtap: left promiscuous mode [ 208.752115][ T11] veth0_macvtap: left promiscuous mode [ 208.757653][ T11] veth1_vlan: left promiscuous mode [ 208.762989][ T11] veth0_vlan: left promiscuous mode [ 208.772558][T11736] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11736 comm=syz.4.2199 [ 209.263641][T11750] loop4: detected capacity change from 0 to 512 [ 209.287883][T11750] EXT4-fs: Ignoring removed i_version option [ 209.294083][T11750] EXT4-fs: Ignoring removed nobh option [ 209.302159][T11750] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 209.325038][ T11] team0 (unregistering): Port device team_slave_1 removed [ 209.343907][T11750] EXT4-fs (loop4): 1 truncate cleaned up [ 209.349935][ T11] team0 (unregistering): Port device team_slave_0 removed [ 209.349968][T11750] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 209.350094][ T11] ================================================================== [ 209.350135][ T11] BUG: KCSAN: data-race in data_push_tail / string [ 209.350185][ T11] [ 209.350193][ T11] write to 0xffffffff88b4dea0 of 1 bytes by task 11750 on cpu 1: [ 209.350213][ T11] string+0x16c/0x210 [ 209.350240][ T11] vsnprintf+0xa09/0xe30 [ 209.350270][ T11] vscnprintf+0x42/0x90 [ 209.350296][ T11] printk_sprint+0x30/0x2d0 [ 209.350323][ T11] vprintk_store+0x570/0x810 [ 209.350350][ T11] vprintk_emit+0x10c/0x5e0 [ 209.350375][ T11] vprintk_default+0x26/0x30 [ 209.350399][ T11] vprintk+0x75/0x80 [ 209.350425][ T11] _printk+0x7a/0xa0 [ 209.350442][ T11] __ext4_msg+0x18e/0x1a0 [ 209.350470][ T11] ext4_fill_super+0x980/0x39e0 [ 209.350500][ T11] get_tree_bdev+0x256/0x2e0 [ 209.350542][ T11] ext4_get_tree+0x1c/0x30 [ 209.350570][ T11] vfs_get_tree+0x56/0x1d0 [ 209.350589][ T11] do_new_mount+0x227/0x690 [ 209.350628][ T11] path_mount+0x49b/0xb30 [ 209.350663][ T11] __se_sys_mount+0x27c/0x2d0 [ 209.350701][ T11] __x64_sys_mount+0x67/0x80 [ 209.350739][ T11] x64_sys_call+0xd11/0x2e00 [ 209.350773][ T11] do_syscall_64+0xc9/0x1c0 [ 209.350803][ T11] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 209.350835][ T11] [ 209.350842][ T11] read to 0xffffffff88b4dea0 of 8 bytes by task 11 on cpu 0: [ 209.350863][ T11] data_push_tail+0x102/0x430 [ 209.350903][ T11] data_alloc+0xbe/0x2c0 [ 209.350938][ T11] prb_reserve+0x85e/0xb60 [ 209.350973][ T11] vprintk_store+0x53f/0x810 [ 209.350993][ T11] vprintk_emit+0x10c/0x5e0 [ 209.351018][ T11] vprintk_default+0x26/0x30 [ 209.351046][ T11] vprintk+0x75/0x80 [ 209.351074][ T11] _printk+0x7a/0xa0 [ 209.351090][ T11] __netdev_printk+0x2d1/0x3e0 [ 209.351118][ T11] netdev_info+0x99/0xc0 [ 209.351152][ T11] team_port_del+0x647/0x6a0 [ 209.351185][ T11] team_device_event+0x174/0x600 [ 209.351224][ T11] raw_notifier_call_chain+0x6f/0x1d0 [ 209.351267][ T11] call_netdevice_notifiers_info+0xae/0x100 [ 209.351307][ T11] unregister_netdevice_many_notify+0x834/0x1110 [ 209.351351][ T11] default_device_exit_batch+0x607/0x660 [ 209.351387][ T11] cleanup_net+0x4cf/0x830 [ 209.351419][ T11] process_scheduled_works+0x483/0x9a0 [ 209.351451][ T11] worker_thread+0x526/0x700 [ 209.351486][ T11] kthread+0x1d1/0x210 [ 209.351525][ T11] ret_from_fork+0x4b/0x60 [ 209.351555][ T11] ret_from_fork_asm+0x1a/0x30 [ 209.351581][ T11] [ 209.351585][ T11] value changed: 0x00000000ffffeeff -> 0x2073662d34545845 [ 209.351600][ T11] [ 209.351605][ T11] Reported by Kernel Concurrency Sanitizer on: [ 209.351616][ T11] CPU: 0 UID: 0 PID: 11 Comm: kworker/u8:0 Not tainted 6.11.0-rc1-syzkaller-00044-g22f546873149 #0 [ 209.351649][ T11] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 209.351667][ T11] Workqueue: netns cleanup_net [ 209.351710][ T11] ================================================================== [ 209.586014][ T29] kauditd_printk_skb: 15 callbacks suppressed [ 209.586039][ T29] audit: type=1326 audit(1722375393.759:848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11747 comm="syz.1.2202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cc50c73b9 code=0x7ffc0000 [ 209.706932][ T29] audit: type=1326 audit(1722375393.779:849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11747 comm="syz.1.2202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cc50c73b9 code=0x7ffc0000 [ 209.730440][ T29] audit: type=1326 audit(1722375393.779:850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11747 comm="syz.1.2202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8cc50c73b9 code=0x7ffc0000 [ 209.753938][ T29] audit: type=1326 audit(1722375393.779:851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11747 comm="syz.1.2202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cc50c73b9 code=0x7ffc0000 [ 209.777477][ T29] audit: type=1326 audit(1722375393.779:852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11747 comm="syz.1.2202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cc50c73b9 code=0x7ffc0000 [ 209.800998][ T29] audit: type=1326 audit(1722375393.779:853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11747 comm="syz.1.2202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8cc50c73b9 code=0x7ffc0000 [ 209.824465][ T29] audit: type=1326 audit(1722375393.779:854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11747 comm="syz.1.2202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cc50c73b9 code=0x7ffc0000 [ 209.847878][ T29] audit: type=1326 audit(1722375393.779:855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11747 comm="syz.1.2202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8cc50c73b9 code=0x7ffc0000 [ 209.871239][ T29] audit: type=1326 audit(1722375393.779:856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11747 comm="syz.1.2202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cc50c73b9 code=0x7ffc0000 [ 209.894760][ T29] audit: type=1326 audit(1722375393.779:857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11747 comm="syz.1.2202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cc50c73b9 code=0x7ffc0000 [ 209.983513][T11667] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.990678][T11667] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.028964][T11667] bridge_slave_0: entered allmulticast mode [ 210.049743][T11667] bridge_slave_0: entered promiscuous mode [ 210.065211][T11667] bridge0: port 2(bridge_slave_1) entered blocking state [ 210.072359][T11667] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.081243][T11667] bridge_slave_1: entered allmulticast mode [ 210.089144][T11667] bridge_slave_1: entered promiscuous mode [ 210.118920][T11667] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 210.137627][T11667] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 210.181861][T11667] team0: Port device team_slave_0 added [ 210.197764][T11667] team0: Port device team_slave_1 added [ 210.242163][T11667] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 210.249195][T11667] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 210.275337][T11667] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 210.332771][T11667] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 210.339807][T11667] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 210.365984][T11667] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 210.398865][T11667] hsr_slave_0: entered promiscuous mode [ 210.405253][T11667] hsr_slave_1: entered promiscuous mode [ 210.411270][T11667] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 210.421232][T11667] Cannot create hsr debugfs directory [ 210.758616][T11667] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 210.769500][T11667] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 210.785901][T11667] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 210.795707][T11667] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 210.880815][T11667] 8021q: adding VLAN 0 to HW filter on device bond0 [ 210.899826][T11667] 8021q: adding VLAN 0 to HW filter on device team0 [ 210.911034][ T2924] bridge0: port 1(bridge_slave_0) entered blocking state [ 210.918142][ T2924] bridge0: port 1(bridge_slave_0) entered forwarding state [ 210.945381][ T2924] bridge0: port 2(bridge_slave_1) entered blocking state [ 210.952501][ T2924] bridge0: port 2(bridge_slave_1) entered forwarding state [ 211.030713][T11667] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 211.141370][T11667] veth0_vlan: entered promiscuous mode [ 211.150423][T11667] veth1_vlan: entered promiscuous mode [ 211.173846][T11667] veth0_macvtap: entered promiscuous mode [ 211.182579][T11667] veth1_macvtap: entered promiscuous mode [ 211.197286][T11667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 211.207976][T11667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.217923][T11667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 211.228407][T11667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.238392][T11667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 211.248922][T11667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.258927][T11667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 211.269493][T11667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.279343][T11667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 211.289886][T11667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.302504][T11667] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 211.314001][T11667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 211.324537][T11667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.334476][T11667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 211.344986][T11667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.354876][T11667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 211.365349][T11667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.375363][T11667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 211.385861][T11667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.395757][T11667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 211.406273][T11667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.420162][T11667] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 211.430799][T11667] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.439674][T11667] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.448435][T11667] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.457188][T11667] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0