last executing test programs: 5.294850067s ago: executing program 2 (id=1916): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x4, 0x4, 0xffb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000003740)={&(0x7f0000003580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@fwd={0x4}]}, {0x0, [0x0, 0x30, 0x5f]}}, 0x0, 0x29, 0x0, 0x1, 0xff}, 0x20) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=@gettclass={0x24, 0x2a, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x8}}}, 0x24}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x2, 0x4, 0x0, 0x1, 0xaa}, @exit], &(0x7f00000000c0)='GPL\x00'}, 0x90) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[], 0xa0}}, 0xc004) socket(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x804810, &(0x7f0000005440), 0x26, 0x75c, &(0x7f0000005480)="$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") setxattr$trusted_overlay_upper(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x1015, 0x0) r0 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000080)='ro\x00', 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000440)=@known='trusted.overlay.upper\x00', 0x0, 0x4000) r1 = socket$xdp(0x2c, 0x3, 0x0) sendmmsg(r1, &(0x7f0000000000), 0x0, 0x24008000) 5.142166331s ago: executing program 2 (id=1919): socket$key(0xf, 0x3, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x19, 0x4, 0x8, 0x7fff}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000001040)=ANY=[@ANYBLOB="3801000010003b070000000000000000fc000000000000000000000000000000fe8000000000000000000000000000bb00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000bb0000000032000000ff01000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000200000000000000000048000200656362286369706865725f6e756c6c29"], 0x138}, 0x1, 0xe}, 0x0) (fail_nth: 1) 4.67539141s ago: executing program 2 (id=1924): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000004c0)={r0}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r0, 0xffffffffffffffff}, 0x4) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000400)=ANY=[@ANYBLOB="28010000170000000000000000000000ffffffff0000000000000000000000000000000000000000fe8000000000000000000000000000bb00000000000000000000ffff7f000001ff01000000000000000000000000000100"/98], 0x128}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000780)=[{&(0x7f0000000340)="926c242c391961a74a4626bed1b678801a4f54a272558f396d554863d5a949304f37326d148810e5a7512673db03638176e60294570d475dde", 0x39}], 0x1) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup(r3) r4 = socket$kcm(0x10, 0x2, 0x4) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r6, &(0x7f0000000380)={0xa, 0x14e24}, 0x1c) connect$inet6(r6, &(0x7f00000002c0)={0xa, 0x4e24, 0x2}, 0x1c) sendmmsg$inet6(r6, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000680)="ac9e0e521e42a5de6b4140c422f1a74852a3c7553589bd551423c2eb529fcad406c672ab8a2fc87fe343c66a83e0e2940241caec01c64c8c95e5de6d", 0x3c}, {&(0x7f00000000c0)="9b8b0a3d30e44e25", 0x8}, {&(0x7f00000001c0)='@', 0x1}], 0x3}}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000001280)="14", 0x1}], 0x1, &(0x7f00000016c0)=ANY=[], 0x210}}], 0x2, 0xc8000) mkdir(0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002340)=ANY=[@ANYRES16=0x0, @ANYRES32=r2, @ANYRES64=r1, @ANYRESOCT=r6, @ANYBLOB="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", @ANYRESOCT=r2], 0x38}}, 0x0) io_setup(0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket(0x8000000010, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x0}, 0x90) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r8) sendmsg$NLBL_MGMT_C_ADDDEF(r8, &(0x7f0000000100)={0x0, 0x8, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="58010000", @ANYRES16=r9, @ANYBLOB="0100000000000000000002000000080002000500000008000700e000000208000800ac1434002c010100"], 0x158}}, 0x0) sendmmsg(r6, &(0x7f00000092c0), 0x4ff, 0x0) splice(r6, 0x0, r5, 0x0, 0x45, 0x0) close(r4) sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000080)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514000cc008002c0007ab5d73703a3e00020006000700036cbc24eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509cd", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 3.000121024s ago: executing program 4 (id=1936): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x1}, 0x1c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000000203010400000000ffffffff000000000800010001"], 0x28}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x2, 0x3, 0x201, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2000000003030101"], 0x20}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000011000500000000000000000007000000", @ANYRES32=r4, @ANYBLOB="000000000000000014001a80100004800c000580080001"], 0x34}}, 0x0) 2.950667028s ago: executing program 4 (id=1938): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r2, 0xc0605345, &(0x7f00000000c0)={0x25e8, 0x2, {0xffffffffffffffff, 0x0, 0x1, 0x6}, 0x5}) syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) connect$inet6(r1, &(0x7f00000002c0)={0xa, 0x0, 0x0, @private1}, 0x1c) shutdown(r1, 0x1) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000180)={0x0, @in6={{0xa, 0x0, 0x0, @loopback}}}, &(0x7f0000000000)=0x84) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x8929, &(0x7f0000000ac0)={'erspan0\x00', 0x0}) 2.846018827s ago: executing program 3 (id=1941): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0xfff, 0x7}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000008007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f0000000c00)='net_dev_start_xmit\x00', r3}, 0x10) r4 = socket$packet(0x11, 0x3, 0x300) bpf$MAP_CREATE(0x0, &(0x7f0000000000), 0x48) creat(0x0, 0x0) r5 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x1}, 0x62) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7020000f3ffffb0150000008600000095"], &(0x7f00000009c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r7) fcntl$notify(0xffffffffffffffff, 0x402, 0x14) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r8, 0x8001000000000000, 0x40, &(0x7f0000000900)=@raw={'raw\x00', 0x8, 0x3, 0x2d0, 0x110, 0x18c, 0x148, 0x0, 0x0, 0x238, 0x2a8, 0x2a8, 0x238, 0x2a8, 0x3, 0x0, {[{{@ip={@dev, @remote, 0x0, 0x0, 'gretap0\x00', 'veth0_to_bond\x00'}, 0x0, 0xb0, 0x110, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x6, 0x2, 0x6, 0x7]}, {0xffffffffffffffff}}}}, {{@ip={@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth0_to_bridge\x00', 'geneve1\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@unspec=@rateest={{0x68}, {'rose0\x00', 'geneve1\x00'}}, @common=@inet=@tos={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x330) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000004c0)={'bond0\x00', 0x0}) r11 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_CONGESTION(r11, 0x6, 0xd, &(0x7f00000000c0)='vegas\x00', 0x6) ioperm(0x0, 0x4, 0x8) sendto$packet(r4, &(0x7f0000000180)="0b051000e0ff030006004788aa96a13bb100000000000800400f", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x0, r10}, 0x14) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[@ANYBLOB="487a7f7e45681400008c", @ANYRES16=r1, @ANYBLOB="090300000000000000000d000000"], 0x14}}, 0x0) 2.761175244s ago: executing program 3 (id=1942): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0xf3a, 0x0) tee(r2, r0, 0x8, 0x0) write$binfmt_script(r3, 0x0, 0xfffffe48) 2.10132422s ago: executing program 4 (id=1943): r0 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x1}, 0x62) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_WOL_SET(r2, &(0x7f0000000580)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000540)={&(0x7f0000000940)=ANY=[@ANYBLOB="5196ee804f3ec8ada671d9736a4e2b453b5288e966cd9df44e", @ANYRES16=0x0, @ANYBLOB="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"], 0x2a0}, 0x1, 0x0, 0x0, 0x8001}, 0x20000881) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000f3ffffb0150000008600000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0xfffffffffffffff5, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r3) syz_clone3(&(0x7f0000000340)={0x41800000, 0x0, 0x0, 0x0, {}, &(0x7f0000000600), 0x5b, 0x0, 0x0}, 0xffffffee) bind$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r3, 0x40806685, &(0x7f0000000400)={0x1, 0x0, 0x1000, 0xf5, &(0x7f0000000300)="946d9f45b0e335a8c5e55eed544d8b76c255784e1122c753d8a36df900f2a35daecd0315f6beb5190513dc3b455f6039d9ad724a34961bfed9ce3e86b941dec4d7e0a9785632f5ca15e58fbe75736e2c8acd8a6a3df147ac96742414dcacbf9559edbc02105c43d568883989cbd2c21f31fe9560368052b0e5b5e183a5ed6f86ce6309ce56988f6853f265b3484729282e65095db727780d08c28d62b1fd00dfbb63191b63a59d7e2700b2ff36ccc9d3769ebdc35580012935032e84f5454bbd2f21d1d352720800808d83bc0a75ef8dc59bb4ad0f34a94fb37597b38eabbcbdc90eef4d02917f75824b9b0a8431d69047dd0b67a5", 0x4b, 0x0, &(0x7f0000000180)="a450330a0af015e66119eb2f764e49e25bec526bd4aae57e953e663b9517547079da5d542f4b49aad5f1e6804013cd5e9b34c690bcfff08c6b83549670527717b8e9681a79d0193c45d39f"}) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x10, &(0x7f00000002c0)={[{@grpid}, {@nouid32}]}, 0x4, 0x50d, &(0x7f0000002340)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) chroot(&(0x7f00000005c0)='./bus\x00') 2.034436126s ago: executing program 1 (id=1945): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)="d80000001a0081044e81f782db4cb904021d0800ff007c05e8fe55a115000200fe80000000000000080005007a0104dea700160020000100e0000000035c0461c9ed7f6f940071342e875fab7cb6cedccf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c27c768252ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653de8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350db798262f3d40fad95667e006dcdf6341b3413394e690b5692304343e44e5951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee", 0xd8}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001812", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000002c0)='mm_page_alloc\x00', r2}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x0) 2.034013106s ago: executing program 4 (id=1946): r0 = socket$inet6(0xa, 0x1, 0x8010800000000084) sendmmsg$inet6(r0, &(0x7f0000000040)=[{{&(0x7f0000000000)={0xa, 0x102, 0x0, @private0}, 0x1c, &(0x7f0000000600)=[{&(0x7f00000000c0)='/', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000d00)='[', 0x1}], 0x1}}], 0x2, 0x4008040) (fail_nth: 21) 1.966086672s ago: executing program 0 (id=1947): r0 = syz_mount_image$ext4(&(0x7f0000000780)='ext2\x00', &(0x7f00000007c0)='./file0\x00', 0x10, &(0x7f0000000d00)={[{@journal_async_commit}, {@orlov}, {@nobh}, {@nodiscard}, {@max_batch_time={'max_batch_time', 0x3d, 0x2}}, {@lazytime}], [{@permit_directio}, {@fowner_eq}, {@seclabel}, {@flag='posixacl'}, {@subj_role={'subj_role', 0x3d, '&#-}'}}, {@fowner_gt}, {@audit}, {@pcr={'pcr', 0x3d, 0x3d}}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}, {@smackfsfloor={'smackfsfloor', 0x3d, '/dev/full\x00'}}, {@subj_user={'subj_user', 0x3d, '('}}, {@mask={'mask', 0x3d, 'MAY_EXEC'}}, {@smackfsfloor={'smackfsfloor', 0x3d, '{[@\'{/:.:,!{!'}}]}, 0xfe, 0x793, &(0x7f0000001ec0)="$eJzs3c1rXFUbAPDnTpKmb9r3TV4QbF0FBA2UTkyNrYKLigsRLBR0bTtMpqFmkimZSWlCoBYR3AhaXAi66dqPunPrx1b/Bd2ISEvVtFhxISN3PjqTZiadtvloze8Htz3n3jM595l77zln5h7mBrBjjab/ZCL2R8R7ScRwY30SEQO1VH/E0Xq5myvL+XRJolp99bekVubGynI+2l6T2tPI7IuIb96OOJBZW295cWkmVywW5hv58crsmfHy4tLB07O56cJ0Ye7wxOTkoSPPHBncuFj/+H5p79X3X3ry86N/vfXo5Xe/TeJo7G1sa49jo4zGaOM9GUjfwlVe3OjKtlmy3TvAPUkvzb76VR77Yzj6aqne9F4SAHiQnI+IKgCwwyT6fwDYYZrfA9xYWc6nS/X89n4fsdWuvRARu+vxN+9v1rf0N+7Z7a7dBx26kay635FExMgG1D8aER9/+fqn6RKbdB8SoJM3L0TEyZHRZvvfan+SNXMW6nqfkPFUD2VGb8tr/2DrfJWOf55tjf9a11/m1vgnOox/Bjtcu/diNGJXe37t9Z+5sgHVdJWO/54faM1tu9kWf8NIXyP339qYbyA5dbpYSNu2/0XEWAwMpvmJdeoYu/739VUr+lrJ9vHf7xff+CStP/2/VSJzpf+2JncqV8ndb9xN1y5EPNbfKf7k1vFPuox/j/dYx8vPvfNRt21p/Gm8zWV1/Js/q6x6KeKJ6Bx/U7Le/MTD47XTYbx5UnTwxU8fDnWrv/34p0taf/OzwFZIj//Q+vGPJO3zNct3X8d3l4a/7rbtzvF3Pv93Ja/V0s3G41yuUpmfiNiVvLJ2/aHWa5v5Zvk0/rHHO1//653/6WfCkz3G33/118/uPf7NlcY/dVfH/+4Tl2/O9HWrv7fjP1lLjTXW9NL+9bqD9/PeAQAAAAAAAAAAAAAAAAAAAAAAAECvMhGxN5JM9lY6k8lm68/wfiSGMsVSuXLgVGlhbipqz8oeiYFM86cuh9t+D3Wi8Xv4zfyh2/JPR8T/I+KDwf/U8tl8qTi13cEDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQMOeLs//T/0yuN17BwBsmt13LHG9sCU7AgBsmTv3/wDAv43+HwB2Hv0/AOw8+n8A2Hn0/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGyy48eOpUv1z5XlfJqfOru4MFM6e3CqUJ7Jzi7ks/nS/JnsdKk0XSxk86XZtpf+0OnvFUulM5Mxt3BuvFIoV8bLi0snZksLc5UTp2dz04UThYEtiwwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeldeXJrJFYuFeYmHJVEdrh+6B2V/Nj/x88Ef961X5qLTeOMT290yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwc/gkAAP//skMoxA==") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = open(&(0x7f0000007fc0)='./bus\x00', 0x60142, 0x0) r5 = open(&(0x7f0000000380)='./file1\x00', 0x42042, 0x0) mq_notify(r4, &(0x7f0000000000)={0x0, 0xd, 0x2, @tid=r1}) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000001740)={0x9c02, 0x0}, 0x8) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000004000000000000000000850000002300000095"], &(0x7f0000000180)='GPL\x00', 0x4, 0x8f, &(0x7f00000002c0)=""/143}, 0x80) r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000580)='afs_protocol_error\x00', r7}, 0x10) openat$full(0xffffffffffffff9c, &(0x7f0000001780), 0xa01c2, 0x0) r9 = socket(0x10, 0x80002, 0x4) sendmsg$nl_route_sched(r9, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000880)=@newtaction={0x18, 0x13, 0x53b, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) r10 = socket(0x10, 0x80002, 0x4) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000200)=@gcm_128={{0x304}, "24339ef42ec80ebb", "c0000000000000000000e5ffffff00", "23ae7565", "bb4a7cc72aa447e3"}, 0x28) sendmsg$nl_route_sched(r10, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x5}, {}, {0x0, 0xf}}}, 0x24}}, 0x0) sendmmsg$unix(r3, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000000c80)=[{0x0}, {&(0x7f0000000a40)}, {0x0}, {&(0x7f0000000b00)="6455089ab9075e64c4bedb2b941533bc71ec4be38eeb5e2e6c9ecdda0c6ed7bd4706c3fb85575d0034077bb770e214219d50542e7e671050c17a8022b175ce074558fe4e94f15f588cb4a56928bae16bd7f992b843c5011456ed86b60133edc2903c9f6bdf9a3620f7577841abe2e06fef85eb3ee0091a527f0977e3ba534f7fa31caf7465d30df85587b36f219c23d089bbff7e259bffa1157b2393f0a3", 0x9e}, {&(0x7f0000000400)="148187735e85181ef5b798e0e0df3f67ae40874566271a94a4c5672cb6b12c53f6d38fb1e5b243e0fa875e9e3d66ab33a3f9738fb48c072d1f50e59e4dbc9e920775d2900835f91f3629cd853370b1f5ac1978d3d610b0a8132a25389254c9c5165173bf18e89b7e8be9507774d8824a1a61b29a1b8081c0ea1dd6a0d3d4e8e8a11debfa97f12b69736819fffc7f3b8d8cd351d7f78cd996da88bd729ef2a869e81192f4ddaeaf7298378d3164dbf7d30903d05f34f39ff252900e1cf347f18abe26de3288ebcada2bb15c7ff5ce0c5c44675a76fab94fa66e675e", 0xdb}], 0x5, &(0x7f00000009c0)=ANY=[@ANYRES16=r8, @ANYRES8=r7, @ANYRES32=r0, @ANYRES32, @ANYRES64, @ANYRES32, @ANYRESOCT=r2, @ANYRESOCT=r6, @ANYRESDEC=r9, @ANYRESOCT=r0, @ANYRESDEC=r8, @ANYRESDEC=r7, @ANYBLOB="00fa000000", @ANYRESHEX, @ANYBLOB="00000000280000000100cc8d26e9ce24e5c36be347000001000000", @ANYRESOCT=r1, @ANYRES32=r9, @ANYRES32, @ANYRESDEC=r3, @ANYRESDEC=r1, @ANYRES32=r8], 0xa8, 0x40040}}], 0x1, 0x4000) openat$sysfs(0xffffffffffffff9c, &(0x7f00000005c0)='/sys/kernel/fscaps', 0x200, 0x54) r11 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=ANY=[@ANYBLOB="4c00000012000100004000000000000081a2000000000000000000000000000100000000000080000000f991834b12bf4fd2ac42b3205aafa6f3dc18e50f665c09ea6e7accd0c94f7c5e4cd5d03a894ce3ff2435b5b71e", @ANYRES32=0x0, @ANYBLOB="01000000fcffffff0000000000000000"], 0x4c}}, 0x0) ioctl$sock_SIOCSIFBR(r9, 0x8941, &(0x7f0000000680)=@add_del={0x2, &(0x7f00000001c0)='syzkaller1\x00'}) ftruncate(r5, 0x2007ffb) sendfile(r4, r5, 0x0, 0x1000000211005) 1.926240115s ago: executing program 1 (id=1948): socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000040)={0x0, 0x3}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f00000000c0)={r3, @in={{0x2, 0x4e24, @broadcast}}, 0x8, 0x7f}, 0x90) getsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000180)={r3, 0x0, 0xf, 0xa82}, &(0x7f00000001c0)=0x10) sendfile(r0, r2, &(0x7f0000000200)=0x40, 0x9) fchdir(r1) r4 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000280)={'filter\x00', 0x7, 0x4, 0x410, 0x108, 0x108, 0x0, 0x328, 0x328, 0x328, 0x4, &(0x7f0000000240), {[{{@arp={@broadcast, @broadcast, 0xffffffff, 0xff, 0xf, 0x2, {@empty, {[0x0, 0xff, 0x0, 0x0, 0xff, 0xff]}}, {@mac=@random="5c6a481f60cc", {[0x0, 0xff, 0x0, 0xff]}}, 0x1ff, 0xe, 0xea, 0xfff, 0x101, 0x7, 'batadv_slave_0\x00', '\x00', {0xff}, {0xff}, 0x0, 0x110}, 0xc0, 0x108}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00', 0x0, 0xfc, {0x5}}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @dev={0xac, 0x14, 0x14, 0x29}, @broadcast, 0x8, 0x1}}}, {{@arp={@remote, @dev={0xac, 0x14, 0x14, 0x2a}, 0xffffffff, 0xffffffff, 0xd, 0x4, {@empty, {[0xff]}}, {@empty, {[0xff, 0xff, 0x0, 0x0, 0xff, 0xff]}}, 0x5e7e, 0x6c2, 0x9, 0xc, 0x10, 0x0, 'veth0_to_batadv\x00', 'veth1\x00', {0x7f}}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@local, @rand_addr=0x64010101, @local, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x460) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000700)={{0x1, 0x1, 0x18, r1, {0x1}}, './file0\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000740)={'batadv_slave_1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f0000000800)={'ip6tnl0\x00', &(0x7f0000000780)={'syztnl1\x00', r6, 0x4, 0x8, 0x96, 0x750e3509, 0x16, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @rand_addr=' \x01\x00', 0x700, 0x700, 0x7, 0x40}}) r8 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r5, 0xc0189375, &(0x7f0000000840)={{0x1, 0x1, 0x18, r8}, './file0\x00'}) splice(r5, &(0x7f0000000880)=0xb4f3, r9, &(0x7f00000008c0)=0x60, 0x3, 0x9) fcntl$getownex(r5, 0x10, &(0x7f0000000900)={0x0, 0x0}) fcntl$setown(r0, 0x8, r10) sched_setscheduler(r10, 0x6, &(0x7f0000000940)) bpf$OBJ_GET_PROG(0x7, &(0x7f00000009c0)=@generic={&(0x7f0000000980)='./file0\x00', 0x0, 0x8}, 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000a00)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000cc0)={0x6, 0x13, &(0x7f0000000a40)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x101}, {}, {}, [@map_idx_val={0x18, 0x2, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x1000}, @jmp={0x5, 0x0, 0x5, 0x2, 0x6, 0x1, 0xffffffffffffffff}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000b00)='GPL\x00', 0x583e, 0xd8, &(0x7f0000000b40)=""/216, 0x41100, 0x3, '\x00', r7, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000c40)={0x1, 0xd, 0xcd7a, 0x2}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000c80)=[{0x3, 0x3, 0x5, 0x8}], 0x10, 0x4}, 0x90) mkdirat(0xffffffffffffffff, &(0x7f0000000d80)='./file0\x00', 0x41) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r11, 0x8933, &(0x7f0000000dc0)) sendmsg$nl_route(r5, &(0x7f0000000ec0)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)=@mpls_delroute={0x3c, 0x19, 0x400, 0x70bd2c, 0x25dfdbff, {0x1c, 0x14, 0x14, 0x1, 0xfe, 0x2, 0xc8, 0x4, 0x3800}, [@RTA_MULTIPATH={0xc, 0x9, {0x2, 0x0, 0x6}}, @RTA_MULTIPATH={0xc, 0x9, {0x5, 0x2, 0x8}}, @RTA_DST={0x8, 0x1, {0x6, 0x0, 0x1}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24080845}, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r9, 0xc018937a, &(0x7f0000000f00)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) getsockopt$inet6_mreq(r12, 0x29, 0x14, &(0x7f0000000f40)={@empty}, &(0x7f0000000f80)=0x14) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r12, 0x84, 0x21, &(0x7f0000000fc0)=0x1ff, 0x4) ioctl$BTRFS_IOC_QUOTA_CTL(r9, 0xc0109428, &(0x7f0000001000)={0x2}) 1.913934626s ago: executing program 3 (id=1949): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000008c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000d80)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r0, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000e80)={&(0x7f0000000400)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001500000020002b80050002000000000009000100000000000c000500000000000000000008000300", @ANYRES32=r2], 0x3c}}, 0x0) (fail_nth: 5) 1.424076328s ago: executing program 2 (id=1950): r0 = socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) ioctl$SIOCPNDELRESOURCE(r1, 0x89ef, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'team_slave_1\x00'}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'geneve0\x00'}) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) r2 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x20) connect$l2tp6(r2, &(0x7f0000000200)={0xa, 0x0, 0xffb, @remote, 0xa, 0x1}, 0x20) getsockopt$sock_buf(r2, 0x1, 0x1c, 0x0, &(0x7f0000000140)=0xfc) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x11, 0x800000003, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f00000007c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x30, 0x0, 0x400, 0x70bd25, 0x25dfdbfe, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x3, 0x47}}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x42}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x804) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000c40)=ANY=[@ANYBLOB="200000001100210400"/20, @ANYRES32=r5], 0x20}}, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r6, 0x0, 0x0) r7 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r7, &(0x7f0000000280)={0x28, 0x0, 0x0, @local}, 0x10) listen(r7, 0x0) accept4$unix(r7, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="38000000180009030000000000000000", @ANYRES32, @ANYBLOB="060015000a0000000c0016800800"], 0x38}}, 0x0) 1.423841968s ago: executing program 4 (id=1951): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000004c0)={r0}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r0}, 0x4) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup(r1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000380)={0xa, 0x14e24}, 0x1c) connect$inet6(r3, &(0x7f00000002c0)={0xa, 0x4e24, 0x2}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000680)="ac9e0e521e42a5de6b4140c422f1a74852a3c7553589bd551423c2eb529fcad406c672ab8a2fc87fe343c66a83e0e2940241caec01c64c8c95e5de6d", 0x3c}, {&(0x7f00000000c0)="9b8b0a3d30e44e25", 0x8}, {&(0x7f00000001c0)='@', 0x1}], 0x3}}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000001280)="14", 0x1}], 0x1, &(0x7f00000016c0)=ANY=[], 0x210}}], 0x2, 0xc8000) socket$nl_netfilter(0x10, 0x3, 0xc) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) splice(r3, 0x0, r2, 0x0, 0x45, 0x0) 1.412643249s ago: executing program 1 (id=1952): socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000180)=@base={0x12, 0x12, 0x8, 0x2}, 0x48) socket$inet6_udp(0xa, 0x2, 0x0) pipe(&(0x7f0000000040)) socket$nl_route(0x10, 0x3, 0x0) unshare(0x22020400) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x8000}, 0x48) pselect6(0x40, &(0x7f00000001c0)={0x900000000000000}, 0x0, &(0x7f00000002c0)={0x3ff}, &(0x7f0000000300)={0x0, 0x3938700}, 0x0) 1.258651942s ago: executing program 3 (id=1953): epoll_create(0xc61) socket$inet6_sctp(0xa, 0x5, 0x84) open(&(0x7f00009e1000)='./file0\x00', 0x60a40, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$inet_udplite(0x2, 0x2, 0x88) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000c00)={0x28, 0x35, 0x9, 0x0, 0x0, {0x3}, [@typed={0x4}, @nested={0xd, 0x1, 0x0, 0x1, [@typed={0x8, 0x18, 0x0, 0x0, @uid=0xee00}, @generic='G']}]}, 0x28}}, 0x0) socket(0x10, 0x80002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='mm_page_free\x00', r1}, 0x10) pipe(&(0x7f0000000100)) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}}, 0x0) 1.258264402s ago: executing program 4 (id=1954): r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0x3) ioctl$TCFLSH(r3, 0x4b45, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000680)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000100)) ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f0000000200)={r4, 0xe59}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000002c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000240)={r5, 0x1, 0xffffffffffffffff, 0x6}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f0000000280)={r5}) read(r1, &(0x7f0000000200)=""/209, 0xd1) tkill(r0, 0x7) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1b, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6}]}) 924.188172ms ago: executing program 1 (id=1955): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r2, 0xc0605345, &(0x7f00000000c0)={0x25e8, 0x2, {0xffffffffffffffff, 0x0, 0x1, 0x6}, 0x5}) syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) connect$inet6(r1, &(0x7f00000002c0)={0xa, 0x0, 0x0, @private1}, 0x1c) shutdown(r1, 0x1) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000180)={0x0, @in6={{0xa, 0x0, 0x0, @loopback}}}, &(0x7f0000000000)=0x84) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x8929, &(0x7f0000000ac0)={'erspan0\x00', 0x0}) 868.504276ms ago: executing program 2 (id=1956): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2ed0300000000000000af99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14008c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000006da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3ab60fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d6b7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd45e2f7ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4978ea8e4aa37014191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e8ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88cf573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867857ed13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d9a0e06da200481cde8bf475bc3e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a000000000000000000000000000000000000000000000000000048e43dc605510a771eb74ea75e6051ecab9576c97eab243f9c2695c39c8cc4be294f97"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) lseek(r1, 0xfffffffffffffffc, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r6, 0x0, 0xf3a, 0x0) tee(r5, r3, 0x8, 0x0) 827.906239ms ago: executing program 0 (id=1957): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x6, 0x4, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x52) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r1}, 0x10) r2 = gettid() tkill(r2, 0x7) 792.445912ms ago: executing program 3 (id=1958): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)="d80000001a0081044e81f782db4cb904021d0800ff007c05e8fe55a115000200fe80000000000000080005007a0104dea700160020000100e0000000035c0461c9ed7f6f940071342e875fab7cb6cedccf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c27c768252ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653de8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350db798262f3d40fad95667e006dcdf6341b3413394e690b5692304343e44e5951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee", 0xd8}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001812", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000002c0)='mm_page_alloc\x00', r2}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x0) 750.962566ms ago: executing program 3 (id=1959): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0xf3a, 0x0) tee(r2, r0, 0x8, 0x0) write$binfmt_script(r3, 0x0, 0xfffffe48) 746.946356ms ago: executing program 0 (id=1960): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000004c0)={r0}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r0, 0xffffffffffffffff}, 0x4) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000400)=ANY=[@ANYBLOB="28010000170000000000000000000000ffffffff0000000000000000000000000000000000000000fe8000000000000000000000000000bb00000000000000000000ffff7f000001ff01000000000000000000000000000100"/98], 0x128}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000780)=[{&(0x7f0000000340)="926c242c391961a74a4626bed1b678801a4f54a272558f396d554863d5a949304f37326d148810e5a7512673db03638176e60294570d475dde", 0x39}], 0x1) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup(r3) r4 = socket$kcm(0x10, 0x2, 0x4) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r6, &(0x7f0000000380)={0xa, 0x14e24}, 0x1c) connect$inet6(r6, &(0x7f00000002c0)={0xa, 0x4e24, 0x2}, 0x1c) sendmmsg$inet6(r6, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000680)="ac9e0e521e42a5de6b4140c422f1a74852a3c7553589bd551423c2eb529fcad406c672ab8a2fc87fe343c66a83e0e2940241caec01c64c8c95e5de6d", 0x3c}, {&(0x7f00000000c0)="9b8b0a3d30e44e25", 0x8}, {&(0x7f00000001c0)='@', 0x1}], 0x3}}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000001280)="14", 0x1}], 0x1, &(0x7f00000016c0)=ANY=[], 0x210}}], 0x2, 0xc8000) mkdir(0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002340)=ANY=[@ANYRES16=0x0, @ANYRES32=r2, @ANYRES64=r1, @ANYRESOCT=r6, @ANYBLOB="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", @ANYRESOCT=r2], 0x38}}, 0x0) io_setup(0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket(0x8000000010, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x0}, 0x90) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r8) sendmsg$NLBL_MGMT_C_ADDDEF(r8, &(0x7f0000000100)={0x0, 0x8, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="58010000", @ANYRES16=r9, @ANYBLOB="0100000000000000000002000000080002000500000008000700e000000208000800ac1434002c010100"], 0x158}}, 0x0) sendmmsg(r6, &(0x7f00000092c0), 0x4ff, 0x0) splice(r6, 0x0, r5, 0x0, 0x45, 0x0) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000080)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514000cc008002c0007ab5d73703a3e00020006000700036cbc24eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509cd", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 652.414985ms ago: executing program 0 (id=1961): open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) chroot(&(0x7f00000005c0)='./bus\x00') 596.102009ms ago: executing program 0 (id=1962): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x26, 0x86dd, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) 595.814459ms ago: executing program 0 (id=1963): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000740)={{r0}, &(0x7f0000000400), &(0x7f0000000440)='%pK \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x10, &(0x7f0000000580)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r1, 0x2f08, 0x10, 0x10, &(0x7f00000006c0)="0000000000000005", &(0x7f0000000700)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f00000003c0)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000780), r3, 0x0, 0x0, 0x1}}, 0xffffffe9) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r4, 0x6, 0x36, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0x7) r5 = inotify_init1(0x0) ptrace(0x10, 0x1) fcntl$setown(r5, 0x8, 0xffffffffffffffff) ptrace$getregs(0xe, 0x0, 0x0, &(0x7f0000000a00)=""/123) 121.98513ms ago: executing program 1 (id=1964): io_uring_setup(0x79af, &(0x7f00000002c0)={0x0, 0x3f16, 0x0, 0x0, 0x358}) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x21085e, &(0x7f00000001c0)={[{@data_err_ignore}, {@nouid32}, {@minixdf}]}, 0x1, 0x51c, &(0x7f0000000780)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffdd}, 0x90) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) r3 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r3, 0x0, &(0x7f0000000040)='ro\x00', 0x0, 0x0) acct(&(0x7f0000000200)='./file1\x00') fsconfig$FSCONFIG_CMD_RECONFIGURE(r3, 0x7, 0x0, 0x0, 0x0) 13.201619ms ago: executing program 2 (id=1965): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}, @NFT_MSG_DELFLOWTABLE={0x9c, 0x16, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x70, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x4}, @NFTA_FLOWTABLE_HOOK_DEVS={0x68, 0x3, 0x0, 0x1, [{0x14, 0x1, 'macsec0\x00'}, {0x14, 0x1, 'bond_slave_1\x00'}, {0x50, 0x1, 'macsec0\x00'}, {0x14, 0x1, 'ip6tnl0\x00'}, {0x14, 0x1, 'veth1_macvtap\x00'}]}]}]}], {0x14, 0x10}}, 0x124}}, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") setxattr$trusted_overlay_upper(0x0, 0x0, 0x0, 0x835, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='io.stat\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f00000001c0), 0x4) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0x0) r5 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_ENCAP(r5, 0x113, 0x1, 0x0, &(0x7f0000000040)) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r2], 0x20}}, 0x0) listen(r1, 0x10) 0s ago: executing program 1 (id=1966): write$UHID_CREATE2(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a00000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100"/229, @ANYRESOCT, @ANYRES64, @ANYRES8], 0x119) writev(0xffffffffffffffff, &(0x7f0000000780)=[{&(0x7f00000003c0)="0e000000", 0x4}, {0x0}], 0x2) (async) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f0000000c00), 0x1, 0xb80, &(0x7f0000000c40)="$eJzs3MtrXFUYAPDv3jyaNrGTiqgtggGpFcVp2hSFrlrXooIuuuyYTErI9GEmggldpHWvLkRcFKR/guDeunAluKgLrX9BEYsU3bQuInce6dBkktjO9PTx+8GZe86c6XzfN5fOPQfmJoAn1kTxkEfsjYiTWUSp9XweEcON3kjESvN1t2+eny5aFqur7/+VRRYRt26en26/V9Y6jrYGIxFx9a0snv50fdz60vJ8pVarLrTGBxdPnztYX1p+fe505VT1VPXMkak3j0y9MTXVw1qvn/vw6xd+eefli5c/m3z3q90/ZXEsxlpznXX0ykRMrH0mnQYjotLrYIkMtOrprDMbTJgQAACbyjvWcM9GKQbizuKtFD/+mjQ5AAAAoCdWByJWAQAAgMdcZv8PAAAAj7n27wBu3Tw/3W5pf5HwYN04HhHjzfrb9zc3ZwZjpXEciaGI2PV3Fp23tWbNf3bfJopI3/1cLVr06T7kzaxciIjnNzr/WaP+8cZd3OvrzyNisgfxJ+4aP0r1H+tB/NT1A/BkunK8eSFbf/3L19Y/scH1b3CDa9e9SH39a6//bq9b/92pf6DL+u+9bcbY9++rV7vNda7/Tnz++0wRvzjeV1H/w40LEfsGN6o/W6s/61L/yW3GGJ2+fqnbXFF/UW+7Pej6Vy9H7I+N62/LNvv7RAdn52rVyeZjlxj7fzhxoFv8zvNftCJ+ey/wIBTnf1eX+rc6/+e2GWP8uT/3dpvbuv78j+Hsg0ZvuPXMJ5XFxYVDEcPZ2+ufP7x5Lu3XtN+jqP+Vlzb//79R/cV3wkrrcyj2Ahdax2J88a6Yo/sPf3vv9fdXUf/MPZ7/L7YZ45vvL33UbS51/QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8GvKIGIssL6/187xcjhiNiGdiV147W198bfbsx2dmirmI8RjKZ+dq1cmIKDXHWTE+1OjfGR++azwVEXsi4svSzsa4PH22NpO6eAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANaMRsRYZHk5IvKI+KeU5+Vy6qwAAACAnhtPnQAAAADQd/b/AAAA8Piz/wcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKDP9rx45VoWEStHdzZaYbg1N5Q0M6Df8tQJAMkMpE4ASGYwdQJAMvb4QLbF/EjXmR09zwUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAh9eBvVeuZRGxcnRnoxWGW3NDSTMD+i1PnQCQzEDqBIBkBlMnACRjjw9kW8yPdJ3Z0fNcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHh4jTValpcjIm/087xcjngqIsZjKJudq1UnI2J3RPxWGtpRjA+lThoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICeqy8tz1dqteqCjo6Ozlon9TcTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAp1JeW5yu1WnWhnjoTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAILX60vJ8pVarLvSxk7pGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADS+S8AAP//szUGGQ==") (async) prlimit64(0x0, 0xb, &(0x7f0000000040)={0x80}, &(0x7f00000000c0)) (async) mmap(&(0x7f000000c000/0x4000)=nil, 0x4000, 0xa, 0x31, 0xffffffffffffffff, 0x0) (async) r0 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x4, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="85000000080000006a009d00000000002e00000000000000950000000000000018100000", @ANYRES32, @ANYBLOB="100000000000002505000000000000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x2, 0x161, &(0x7f0000000180)=""/149, 0x0, 0x284, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffd84, 0x10, 0x0, 0x1e}, 0x2d) (async) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x1200, 0x0, 0x3) kernel console output (not intermixed with test programs): 7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 536.655151][ T9613] RSP: 002b:00007f79f3ad7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 536.663674][ T9613] RAX: ffffffffffffffda RBX: 00007f79f4ff5f80 RCX: 00007f79f4e59e79 [ 536.671981][ T9613] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 536.680100][ T9613] RBP: 00007f79f3ad7090 R08: 0000000000000000 R09: 0000000000000000 [ 536.688292][ T9613] R10: 0000000000011f06 R11: 0000000000000246 R12: 0000000000000002 [ 536.696270][ T9613] R13: 0000000000000000 R14: 00007f79f4ff5f80 R15: 00007ffd3da04ab8 [ 536.704442][ T9613] [ 536.772042][ T29] audit: type=1326 audit(1858644881.056:1162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9629 comm="syz.4.1508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8894fe9e79 code=0x7ffc0000 [ 536.797612][ T29] audit: type=1326 audit(1858644881.056:1163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9629 comm="syz.4.1508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8894fe9e79 code=0x7ffc0000 [ 536.821309][ T29] audit: type=1326 audit(1858644881.056:1164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9629 comm="syz.4.1508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8894fe9e79 code=0x7ffc0000 [ 536.845172][ T29] audit: type=1326 audit(1858644881.056:1165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9629 comm="syz.4.1508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8894fe9e79 code=0x7ffc0000 [ 536.868802][ T29] audit: type=1326 audit(1858644881.056:1166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9629 comm="syz.4.1508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f8894fe9e79 code=0x7ffc0000 [ 536.892124][ T29] audit: type=1326 audit(1858644881.056:1167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9629 comm="syz.4.1508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8894fe9e79 code=0x7ffc0000 [ 536.916636][ T29] audit: type=1326 audit(1858644881.056:1168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9629 comm="syz.4.1508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f8894fe9e79 code=0x7ffc0000 [ 536.940579][ T29] audit: type=1326 audit(1858644881.056:1169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9629 comm="syz.4.1508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8894fe9e79 code=0x7ffc0000 [ 536.964038][ T29] audit: type=1326 audit(1858644881.056:1170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9629 comm="syz.4.1508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8894fe9e79 code=0x7ffc0000 [ 537.254192][ T9635] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1507'. [ 537.344549][ T9635] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 537.353297][ T9635] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 537.362110][ T9635] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 537.370931][ T9635] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 537.574215][ T9635] vxlan0: entered promiscuous mode [ 545.905054][ T29] kauditd_printk_skb: 13 callbacks suppressed [ 545.905108][ T29] audit: type=1400 audit(1858644890.196:1184): avc: denied { unmount } for pid=9422 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 545.975355][ T9654] validate_nla: 5 callbacks suppressed [ 545.975376][ T9654] netlink: 'syz.0.1513': attribute type 2 has an invalid length. [ 545.988735][ T9654] netlink: 'syz.0.1513': attribute type 1 has an invalid length. [ 545.996510][ T9654] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1513'. [ 546.024294][ T9660] FAULT_INJECTION: forcing a failure. [ 546.024294][ T9660] name failslab, interval 1, probability 0, space 0, times 0 [ 546.037338][ T9660] CPU: 0 UID: 0 PID: 9660 Comm: syz.3.1517 Not tainted 6.11.0-rc4-syzkaller-00143-g3d5f968a177d #0 [ 546.048151][ T9660] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 546.058296][ T9660] Call Trace: [ 546.061677][ T9660] [ 546.064621][ T9660] dump_stack_lvl+0xf2/0x150 [ 546.069334][ T9660] dump_stack+0x15/0x20 [ 546.073547][ T9660] should_fail_ex+0x229/0x230 [ 546.078384][ T9660] ? __alloc_skb+0x10b/0x310 [ 546.083008][ T9660] should_failslab+0x8f/0xb0 [ 546.087776][ T9660] kmem_cache_alloc_node_noprof+0x51/0x2b0 [ 546.093813][ T9660] ? __virt_addr_valid+0x1ed/0x250 [ 546.098990][ T9660] __alloc_skb+0x10b/0x310 [ 546.103531][ T9660] sock_omalloc+0x7e/0xe0 [ 546.108074][ T9660] msg_zerocopy_realloc+0x83/0x3c0 [ 546.113231][ T9660] ? __pfx_tcp_sendmsg+0x10/0x10 [ 546.118355][ T9660] tcp_sendmsg_locked+0x2254/0x2640 [ 546.123602][ T9660] ? mod_objcg_state+0x2ea/0x4f0 [ 546.128644][ T9660] ? tcp_sendmsg_locked+0x2361/0x2640 [ 546.134077][ T9660] ? __rcu_read_unlock+0x4e/0x70 [ 546.139022][ T9660] ? avc_has_perm_noaudit+0x1cc/0x210 [ 546.144424][ T9660] ? avc_has_perm+0xd4/0x160 [ 546.149080][ T9660] ? _raw_spin_unlock_bh+0x36/0x40 [ 546.154400][ T9660] ? __pfx_tcp_sendmsg+0x10/0x10 [ 546.159425][ T9660] tcp_sendmsg+0x30/0x50 [ 546.163698][ T9660] inet_sendmsg+0x77/0xd0 [ 546.168110][ T9660] __sock_sendmsg+0x102/0x180 [ 546.170355][ T9670] loop4: detected capacity change from 0 to 2048 [ 546.172885][ T9660] ____sys_sendmsg+0x312/0x410 [ 546.184010][ T9660] __sys_sendmmsg+0x269/0x500 [ 546.188757][ T9660] __x64_sys_sendmmsg+0x57/0x70 [ 546.193637][ T9660] x64_sys_call+0xa49/0x2d60 [ 546.198472][ T9660] do_syscall_64+0xc9/0x1c0 [ 546.202987][ T9660] ? clear_bhb_loop+0x55/0xb0 [ 546.207702][ T9660] ? clear_bhb_loop+0x55/0xb0 [ 546.212519][ T9660] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 546.218453][ T9660] RIP: 0033:0x7f79f19c9e79 [ 546.222919][ T9660] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 546.242642][ T9660] RSP: 002b:00007f79f0641038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 546.251122][ T9660] RAX: ffffffffffffffda RBX: 00007f79f1b65f80 RCX: 00007f79f19c9e79 [ 546.259211][ T9660] RDX: 0000000000000002 RSI: 0000000020000500 RDI: 0000000000000005 [ 546.267185][ T9660] RBP: 00007f79f0641090 R08: 0000000000000000 R09: 0000000000000000 [ 546.275185][ T9660] R10: 0000000004004441 R11: 0000000000000246 R12: 0000000000000001 [ 546.283183][ T9660] R13: 0000000000000000 R14: 00007f79f1b65f80 R15: 00007fff6b4d6bf8 [ 546.291185][ T9660] [ 546.306221][ T9654] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 54250 - 0 [ 546.315414][ T9654] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 54250 - 0 [ 546.324286][ T9654] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 54250 - 0 [ 546.333150][ T9654] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 54250 - 0 [ 546.343274][ T9654] netdevsim netdevsim0 netdevsim0: set [1, 2] type 2 family 0 port 45949 - 0 [ 546.352150][ T9654] netdevsim netdevsim0 netdevsim1: set [1, 2] type 2 family 0 port 45949 - 0 [ 546.361066][ T9654] netdevsim netdevsim0 netdevsim2: set [1, 2] type 2 family 0 port 45949 - 0 [ 546.369909][ T9654] netdevsim netdevsim0 netdevsim3: set [1, 2] type 2 family 0 port 45949 - 0 [ 546.378777][ T9654] geneve2: entered promiscuous mode [ 546.384037][ T9654] geneve2: entered allmulticast mode [ 546.392586][ T9675] loop3: detected capacity change from 0 to 2048 [ 546.415186][ T50] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 546.426242][ T9675] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 546.446064][ T9675] ext4 filesystem being mounted at /129/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 546.449822][ T9682] random: crng reseeded on system resumption [ 546.467235][ T29] audit: type=1326 audit(1858644890.756:1185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9673 comm="syz.4.1522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8894fe9e79 code=0x7fc00000 [ 546.467275][ T29] audit: type=1326 audit(1858644890.756:1186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9673 comm="syz.4.1522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8894fe9e79 code=0x7fc00000 [ 546.467378][ T50] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 546.534191][ T9672] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: none. [ 546.545709][ T50] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 546.554319][ T7584] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 546.609504][ T50] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 546.631475][ T9690] netlink: 'syz.3.1524': attribute type 4 has an invalid length. [ 546.681638][ T29] audit: type=1326 audit(1858644890.966:1187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9673 comm="syz.4.1522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8894fe9e79 code=0x7fc00000 [ 546.750949][ T9697] netlink: 'syz.3.1525': attribute type 9 has an invalid length. [ 546.758891][ T29] audit: type=1400 audit(1858644890.996:1188): avc: denied { ioctl } for pid=9695 comm="syz.0.1527" path="socket:[42086]" dev="sockfs" ino=42086 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 546.823765][ T29] audit: type=1400 audit(1858644891.116:1189): avc: denied { audit_write } for pid=9695 comm="syz.0.1527" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 546.841463][ T9708] loop4: detected capacity change from 0 to 2048 [ 546.879938][ T50] bridge_slave_1: left allmulticast mode [ 546.885946][ T50] bridge_slave_1: left promiscuous mode [ 546.886963][ T9710] FAULT_INJECTION: forcing a failure. [ 546.886963][ T9710] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 546.891721][ T50] bridge0: port 2(bridge_slave_1) entered disabled state [ 546.904599][ T9710] CPU: 0 UID: 0 PID: 9710 Comm: syz.1.1532 Not tainted 6.11.0-rc4-syzkaller-00143-g3d5f968a177d #0 [ 546.922299][ T9710] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 546.926722][ T9712] netlink: 'syz.0.1533': attribute type 2 has an invalid length. [ 546.932373][ T9710] Call Trace: [ 546.940166][ T9712] netlink: 'syz.0.1533': attribute type 1 has an invalid length. [ 546.943379][ T9710] [ 546.951221][ T9712] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1533'. [ 546.954061][ T9710] dump_stack_lvl+0xf2/0x150 [ 546.967769][ T9710] dump_stack+0x15/0x20 [ 546.971958][ T9710] should_fail_ex+0x229/0x230 [ 546.976788][ T9710] should_fail+0xb/0x10 [ 546.980965][ T9710] should_fail_usercopy+0x1a/0x20 [ 546.986039][ T9710] _copy_from_user+0x1e/0xd0 [ 546.990698][ T9710] __sys_bpf+0x14e/0x7a0 [ 546.995032][ T9710] __x64_sys_bpf+0x43/0x50 [ 546.999499][ T9710] x64_sys_call+0x2625/0x2d60 [ 547.004226][ T9710] do_syscall_64+0xc9/0x1c0 [ 547.008796][ T9710] ? clear_bhb_loop+0x55/0xb0 [ 547.013490][ T9710] ? clear_bhb_loop+0x55/0xb0 [ 547.018187][ T9710] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 547.024098][ T9710] RIP: 0033:0x7fab9c009e79 [ 547.028588][ T9710] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 547.048301][ T9710] RSP: 002b:00007fab9ac81038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 547.056732][ T9710] RAX: ffffffffffffffda RBX: 00007fab9c1a5f80 RCX: 00007fab9c009e79 [ 547.064754][ T9710] RDX: 0000000000000020 RSI: 00000000200002c0 RDI: 0000000000000004 [ 547.072734][ T9710] RBP: 00007fab9ac81090 R08: 0000000000000000 R09: 0000000000000000 [ 547.080858][ T9710] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 547.088835][ T9710] R13: 0000000000000000 R14: 00007fab9c1a5f80 R15: 00007ffe85b1bd48 [ 547.096852][ T9710] [ 547.102644][ T29] audit: type=1326 audit(1858644891.386:1190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9714 comm="syz.4.1534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8894fe9e79 code=0x7ffc0000 [ 547.126115][ T29] audit: type=1326 audit(1858644891.386:1191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9714 comm="syz.4.1534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8894fe9e79 code=0x7ffc0000 [ 547.128257][ T9715] loop4: detected capacity change from 0 to 1024 [ 547.156866][ T29] audit: type=1326 audit(1858644891.396:1192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9714 comm="syz.4.1534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f8894fe9e79 code=0x7ffc0000 [ 547.180784][ T29] audit: type=1326 audit(1858644891.396:1193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9714 comm="syz.4.1534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f8894fe9eb3 code=0x7ffc0000 [ 547.190502][ T50] bridge_slave_0: left allmulticast mode [ 547.209802][ T50] bridge_slave_0: left promiscuous mode [ 547.215624][ T50] bridge0: port 1(bridge_slave_0) entered disabled state [ 547.253240][ T9721] loop1: detected capacity change from 0 to 512 [ 547.280944][ T9721] EXT4-fs error (device loop1): ext4_orphan_get:1417: comm syz.1.1537: bad orphan inode 5 [ 547.299076][ T9721] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 547.313063][ T9721] ext4 filesystem being mounted at /176/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 547.467377][ T7537] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 547.493763][ T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 547.508457][ T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 547.525775][ T50] bond0 (unregistering): Released all slaves [ 547.541221][ T9661] chnl_net:caif_netlink_parms(): no params data found [ 547.621707][ T9661] bridge0: port 1(bridge_slave_0) entered blocking state [ 547.628884][ T9661] bridge0: port 1(bridge_slave_0) entered disabled state [ 547.638825][ T9661] bridge_slave_0: entered allmulticast mode [ 547.645573][ T9661] bridge_slave_0: entered promiscuous mode [ 547.653070][ T9661] bridge0: port 2(bridge_slave_1) entered blocking state [ 547.655953][ T9755] FAULT_INJECTION: forcing a failure. [ 547.655953][ T9755] name failslab, interval 1, probability 0, space 0, times 0 [ 547.660331][ T9661] bridge0: port 2(bridge_slave_1) entered disabled state [ 547.672736][ T9755] CPU: 0 UID: 0 PID: 9755 Comm: syz.0.1549 Not tainted 6.11.0-rc4-syzkaller-00143-g3d5f968a177d #0 [ 547.672770][ T9755] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 547.700778][ T9755] Call Trace: [ 547.704083][ T9755] [ 547.707030][ T9755] dump_stack_lvl+0xf2/0x150 [ 547.711661][ T9755] dump_stack+0x15/0x20 [ 547.713153][ T9661] bridge_slave_1: entered allmulticast mode [ 547.715840][ T9755] should_fail_ex+0x229/0x230 [ 547.715883][ T9755] ? getname_flags+0x81/0x3b0 [ 547.715912][ T9755] should_failslab+0x8f/0xb0 [ 547.735841][ T9755] kmem_cache_alloc_noprof+0x4c/0x290 [ 547.739633][ T9661] bridge_slave_1: entered promiscuous mode [ 547.741294][ T9755] getname_flags+0x81/0x3b0 [ 547.741326][ T9755] user_path_at+0x26/0x110 [ 547.741355][ T9755] path_getxattr+0x5d/0x230 [ 547.741385][ T9755] ? __rcu_read_unlock+0x4e/0x70 [ 547.765702][ T9755] ? proc_fail_nth_write+0x130/0x160 [ 547.771030][ T9755] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 547.776818][ T9755] ? vfs_write+0x5a5/0x900 [ 547.781289][ T9755] ? __fget_files+0x1da/0x210 [ 547.785983][ T9755] ? fput+0x13b/0x180 [ 547.790021][ T9755] ? ksys_write+0x178/0x1b0 [ 547.794684][ T9755] __x64_sys_lgetxattr+0x58/0x70 [ 547.799928][ T9755] x64_sys_call+0xae7/0x2d60 [ 547.804556][ T9755] do_syscall_64+0xc9/0x1c0 [ 547.809171][ T9755] ? clear_bhb_loop+0x55/0xb0 [ 547.813970][ T9755] ? clear_bhb_loop+0x55/0xb0 [ 547.818694][ T9755] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 547.824671][ T9755] RIP: 0033:0x7f79f4e59e79 [ 547.829100][ T9755] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 547.848731][ T9755] RSP: 002b:00007f79f3ad7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000c0 [ 547.857169][ T9755] RAX: ffffffffffffffda RBX: 00007f79f4ff5f80 RCX: 00007f79f4e59e79 [ 547.865226][ T9755] RDX: 0000000000000000 RSI: 0000000020000440 RDI: 0000000020000000 [ 547.873226][ T9755] RBP: 00007f79f3ad7090 R08: 0000000000000000 R09: 0000000000000000 [ 547.881268][ T9755] R10: 0000000000004000 R11: 0000000000000246 R12: 0000000000000001 [ 547.889350][ T9755] R13: 0000000000000000 R14: 00007f79f4ff5f80 R15: 00007ffd3da04ab8 [ 547.897441][ T9755] [ 547.907680][ T50] hsr_slave_0: left promiscuous mode [ 547.921972][ T50] hsr_slave_1: left promiscuous mode [ 547.932009][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 547.939781][ T50] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 547.959567][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 547.967217][ T50] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 547.989946][ T50] team0: left promiscuous mode [ 547.994938][ T50] team_slave_0: left promiscuous mode [ 548.000517][ T50] team_slave_1: left promiscuous mode [ 548.006076][ T50] veth1_macvtap: left promiscuous mode [ 548.011609][ T50] veth0_macvtap: left promiscuous mode [ 548.017168][ T50] veth1_vlan: left promiscuous mode [ 548.022582][ T50] veth0_vlan: left promiscuous mode [ 548.207738][ T50] team0 (unregistering): Port device team_slave_1 removed [ 548.220430][ T50] team0 (unregistering): Port device team_slave_0 removed [ 548.284090][ T9765] netlink: 'syz.0.1551': attribute type 9 has an invalid length. [ 548.360022][ T9661] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 548.373922][ T9661] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 548.403682][ T9661] team0: Port device team_slave_0 added [ 548.417190][ T9661] team0: Port device team_slave_1 added [ 548.471203][ T9661] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 548.478488][ T9661] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 548.481603][ T9772] netlink: 'syz.4.1555': attribute type 2 has an invalid length. [ 548.504671][ T9661] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 548.512494][ T9772] netlink: 'syz.4.1555': attribute type 1 has an invalid length. [ 548.531189][ T9772] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1555'. [ 548.532590][ T9661] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 548.547479][ T9661] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 548.573717][ T9661] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 548.623165][ T9786] FAULT_INJECTION: forcing a failure. [ 548.623165][ T9786] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 548.636328][ T9786] CPU: 1 UID: 0 PID: 9786 Comm: syz.1.1558 Not tainted 6.11.0-rc4-syzkaller-00143-g3d5f968a177d #0 [ 548.647096][ T9786] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 548.657177][ T9786] Call Trace: [ 548.660478][ T9786] [ 548.663435][ T9786] dump_stack_lvl+0xf2/0x150 [ 548.668089][ T9786] dump_stack+0x15/0x20 [ 548.672305][ T9786] should_fail_ex+0x229/0x230 [ 548.677156][ T9786] should_fail+0xb/0x10 [ 548.681351][ T9786] should_fail_usercopy+0x1a/0x20 [ 548.686480][ T9786] _copy_from_user+0x1e/0xd0 [ 548.691134][ T9786] snd_seq_ioctl+0x121/0x2a0 [ 548.695776][ T9786] ? __pfx_snd_seq_ioctl+0x10/0x10 [ 548.700923][ T9786] __se_sys_ioctl+0xd3/0x150 [ 548.705529][ T9786] __x64_sys_ioctl+0x43/0x50 [ 548.710197][ T9786] x64_sys_call+0x15cc/0x2d60 [ 548.714964][ T9786] do_syscall_64+0xc9/0x1c0 [ 548.719691][ T9786] ? clear_bhb_loop+0x55/0xb0 [ 548.724501][ T9786] ? clear_bhb_loop+0x55/0xb0 [ 548.729293][ T9786] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 548.735217][ T9786] RIP: 0033:0x7fab9c009e79 [ 548.739705][ T9786] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 548.759337][ T9786] RSP: 002b:00007fab9ac81038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 548.767846][ T9786] RAX: ffffffffffffffda RBX: 00007fab9c1a5f80 RCX: 00007fab9c009e79 [ 548.775818][ T9786] RDX: 00000000200000c0 RSI: 00000000c0605345 RDI: 0000000000000003 [ 548.783788][ T9786] RBP: 00007fab9ac81090 R08: 0000000000000000 R09: 0000000000000000 [ 548.791832][ T9786] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 548.799837][ T9786] R13: 0000000000000000 R14: 00007fab9c1a5f80 R15: 00007ffe85b1bd48 [ 548.807924][ T9786] [ 548.843635][ T9661] hsr_slave_0: entered promiscuous mode [ 548.853438][ T9661] hsr_slave_1: entered promiscuous mode [ 548.862924][ T9661] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 548.871023][ T9783] Cannot find set identified by id 0 to match [ 548.879255][ T9661] Cannot create hsr debugfs directory [ 548.884953][ T9793] netlink: 'syz.0.1562': attribute type 9 has an invalid length. [ 548.907329][ T9798] loop4: detected capacity change from 0 to 128 [ 548.909317][ T9802] loop3: detected capacity change from 0 to 512 [ 548.957619][ T9809] loop3: detected capacity change from 0 to 128 [ 548.966759][ T9809] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 548.987503][ T9809] ext4 filesystem being mounted at /140/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 549.058748][ T7584] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 549.071872][ T9822] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1573'. [ 549.076300][ T9824] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1572'. [ 549.171690][ T9831] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1571'. [ 549.290305][ T9661] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 549.299234][ T9661] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 549.307991][ T9661] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 549.318180][ T9661] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 549.357004][ T9661] 8021q: adding VLAN 0 to HW filter on device bond0 [ 549.372059][ T9661] 8021q: adding VLAN 0 to HW filter on device team0 [ 549.381953][ T3355] bridge0: port 1(bridge_slave_0) entered blocking state [ 549.389078][ T3355] bridge0: port 1(bridge_slave_0) entered forwarding state [ 549.400886][ T2058] bridge0: port 2(bridge_slave_1) entered blocking state [ 549.408045][ T2058] bridge0: port 2(bridge_slave_1) entered forwarding state [ 549.435183][ T9661] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 549.490493][ T9661] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 549.566048][ T9661] veth0_vlan: entered promiscuous mode [ 549.575043][ T9661] veth1_vlan: entered promiscuous mode [ 549.592787][ T9661] veth0_macvtap: entered promiscuous mode [ 549.600823][ T9661] veth1_macvtap: entered promiscuous mode [ 549.613095][ T9661] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 549.623740][ T9661] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 549.633693][ T9661] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 549.644162][ T9661] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 549.654060][ T9661] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 549.664586][ T9661] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 549.674460][ T9661] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 549.684896][ T9661] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 549.694765][ T9661] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 549.705265][ T9661] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 549.717310][ T9661] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 549.726838][ T9853] loop1: detected capacity change from 0 to 128 [ 549.727769][ T9661] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 549.743997][ T9661] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 549.754460][ T9661] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 549.768528][ T9661] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 549.781539][ T9661] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 549.788509][ T9855] loop1: detected capacity change from 0 to 2048 [ 549.792021][ T9661] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 549.808434][ T9661] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 549.818989][ T9661] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 549.828819][ T9661] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 549.839241][ T9661] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 549.849058][ T9661] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 549.859708][ T9661] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 549.869529][ T9661] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 549.880127][ T9661] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 549.889986][ T9661] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 549.900521][ T9661] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 549.910376][ T9661] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 549.920818][ T9661] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 549.932104][ T9661] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 549.947378][ T9661] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 549.956332][ T9661] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 549.965134][ T9661] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 549.973979][ T9661] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 550.096619][ T9879] loop1: detected capacity change from 0 to 128 [ 550.116951][ T9875] loop2: detected capacity change from 0 to 512 [ 550.159110][ T9884] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1590'. [ 550.176142][ T9886] loop2: detected capacity change from 0 to 128 [ 550.197149][ T9886] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 550.210299][ T9891] FAULT_INJECTION: forcing a failure. [ 550.210299][ T9891] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 550.220066][ T9886] ext4 filesystem being mounted at /1/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 550.223490][ T9891] CPU: 1 UID: 0 PID: 9891 Comm: syz.1.1592 Not tainted 6.11.0-rc4-syzkaller-00143-g3d5f968a177d #0 [ 550.265895][ T9891] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 550.276316][ T9891] Call Trace: [ 550.279611][ T9891] [ 550.282564][ T9891] dump_stack_lvl+0xf2/0x150 [ 550.287382][ T9891] dump_stack+0x15/0x20 [ 550.291557][ T9891] should_fail_ex+0x229/0x230 [ 550.296261][ T9891] should_fail+0xb/0x10 [ 550.300463][ T9891] should_fail_usercopy+0x1a/0x20 [ 550.305511][ T9891] _copy_from_user+0x1e/0xd0 [ 550.310135][ T9891] kstrtouint_from_user+0x76/0xe0 [ 550.315210][ T9891] proc_fail_nth_write+0x4f/0x160 [ 550.320337][ T9891] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 550.326064][ T9891] vfs_write+0x28b/0x900 [ 550.330338][ T9891] ? __fget_files+0x1da/0x210 [ 550.335039][ T9891] ksys_write+0xeb/0x1b0 [ 550.339371][ T9891] __x64_sys_write+0x42/0x50 [ 550.344370][ T9891] x64_sys_call+0x27dd/0x2d60 [ 550.349084][ T9891] do_syscall_64+0xc9/0x1c0 [ 550.353601][ T9891] ? clear_bhb_loop+0x55/0xb0 [ 550.358428][ T9891] ? clear_bhb_loop+0x55/0xb0 [ 550.363285][ T9891] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 550.369425][ T9891] RIP: 0033:0x7fab9c00895f [ 550.373848][ T9891] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8d 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 1c 8e 02 00 48 [ 550.393461][ T9891] RSP: 002b:00007fab9ac81030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 550.401888][ T9891] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fab9c00895f [ 550.409897][ T9891] RDX: 0000000000000001 RSI: 00007fab9ac810a0 RDI: 0000000000000005 [ 550.417894][ T9891] RBP: 00007fab9ac81090 R08: 0000000000000000 R09: 000000000000001c [ 550.425937][ T9891] R10: 000000002200c851 R11: 0000000000000293 R12: 0000000000000002 [ 550.433920][ T9891] R13: 0000000000000000 R14: 00007fab9c1a5f80 R15: 00007ffe85b1bd48 [ 550.441932][ T9891] [ 550.447335][ T9661] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 550.888794][ T9900] loop4: detected capacity change from 0 to 512 [ 550.903741][ T9900] pim6reg1: entered promiscuous mode [ 550.909146][ T9900] pim6reg1: entered allmulticast mode [ 550.920155][ T9900] syzkaller0: entered allmulticast mode [ 550.952805][ T9903] loop3: detected capacity change from 0 to 128 [ 551.103521][ T9910] syzkaller0: entered promiscuous mode [ 551.109253][ T9910] syzkaller0: entered allmulticast mode [ 551.138476][ T9918] loop3: detected capacity change from 0 to 512 [ 551.290984][ T9926] loop4: detected capacity change from 0 to 164 [ 551.307029][ T9926] iso9660: Unknown parameter 'W‘[XÆ#µQô>ÉUÐÛï‘9õì—înöœ$±é2º*zƒ12““(¶ÀAQ¾7Ô)' [ 551.360731][ T9933] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1609'. [ 551.455054][ T9952] loop3: detected capacity change from 0 to 2048 [ 551.467680][ T9952] EXT4-fs: Ignoring removed orlov option [ 551.473500][ T9952] EXT4-fs: Ignoring removed nobh option [ 551.480663][ T9952] ext2: Unknown parameter 'permit_directio' [ 551.591220][ T9954] loop1: detected capacity change from 0 to 512 [ 551.629261][ T9958] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 551.665748][ T9958] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 551.699533][ T9959] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=36 sclass=netlink_tcpdiag_socket pid=9959 comm=syz.3.1613 [ 552.072816][ T9958] loop1: detected capacity change from 0 to 8192 [ 552.446694][ T29] kauditd_printk_skb: 56 callbacks suppressed [ 552.446740][ T29] audit: type=1400 audit(1858644896.746:1250): avc: denied { checkpoint_restore } for pid=9971 comm="syz.3.1618" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 552.789471][ T9981] FAULT_INJECTION: forcing a failure. [ 552.789471][ T9981] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 552.803000][ T9981] CPU: 1 UID: 0 PID: 9981 Comm: syz.2.1621 Not tainted 6.11.0-rc4-syzkaller-00143-g3d5f968a177d #0 [ 552.813754][ T9981] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 552.823816][ T9981] Call Trace: [ 552.827100][ T9981] [ 552.830025][ T9981] dump_stack_lvl+0xf2/0x150 [ 552.834703][ T9981] dump_stack+0x15/0x20 [ 552.838920][ T9981] should_fail_ex+0x229/0x230 [ 552.843628][ T9981] should_fail+0xb/0x10 [ 552.847813][ T9981] should_fail_usercopy+0x1a/0x20 [ 552.852872][ T9981] _copy_from_user+0x1e/0xd0 [ 552.857486][ T9981] do_ipt_set_ctl+0x423/0x8b0 [ 552.862184][ T9981] ? tcp_release_cb+0xfe/0x380 [ 552.866984][ T9981] nf_setsockopt+0x195/0x1b0 [ 552.871660][ T9981] ip_setsockopt+0xea/0x100 [ 552.876240][ T9981] udp_setsockopt+0x95/0xb0 [ 552.880764][ T9981] ipv6_setsockopt+0x104/0x140 [ 552.885622][ T9981] tcp_setsockopt+0x93/0xb0 [ 552.890187][ T9981] sock_common_setsockopt+0x64/0x80 [ 552.895409][ T9981] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 552.901369][ T9981] __sys_setsockopt+0x1d8/0x250 [ 552.906240][ T9981] __x64_sys_setsockopt+0x66/0x80 [ 552.911304][ T9981] x64_sys_call+0x278d/0x2d60 [ 552.916015][ T9981] do_syscall_64+0xc9/0x1c0 [ 552.920540][ T9981] ? clear_bhb_loop+0x55/0xb0 [ 552.925317][ T9981] ? clear_bhb_loop+0x55/0xb0 [ 552.930031][ T9981] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 552.936018][ T9981] RIP: 0033:0x7f7c93469e79 [ 552.940439][ T9981] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 552.960130][ T9981] RSP: 002b:00007f7c920e7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 552.968638][ T9981] RAX: ffffffffffffffda RBX: 00007f7c93605f80 RCX: 00007f7c93469e79 [ 552.976616][ T9981] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000004 [ 552.984637][ T9981] RBP: 00007f7c920e7090 R08: 0000000000000268 R09: 0000000000000000 [ 552.992621][ T9981] R10: 00000000200002c0 R11: 0000000000000246 R12: 0000000000000001 [ 553.000598][ T9981] R13: 0000000000000000 R14: 00007f7c93605f80 R15: 00007ffdfdfc19c8 [ 553.008611][ T9981] [ 553.150656][ T9985] loop2: detected capacity change from 0 to 512 [ 553.215876][ T9997] loop2: detected capacity change from 0 to 2048 [ 553.231570][ T9997] EXT4-fs: Ignoring removed orlov option [ 553.237396][ T9997] EXT4-fs: Ignoring removed nobh option [ 553.243934][ T9997] ext2: Unknown parameter 'permit_directio' [ 553.397677][T10008] syzkaller0: entered promiscuous mode [ 553.467463][T10015] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=36 sclass=netlink_tcpdiag_socket pid=10015 comm=syz.2.1628 [ 553.719648][ T29] audit: type=1326 audit(1858644898.006:1251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10007 comm="syz.1.1632" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fab9c009e79 code=0x0 [ 553.749649][T10016] FAULT_INJECTION: forcing a failure. [ 553.749649][T10016] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 553.763009][T10016] CPU: 0 UID: 0 PID: 10016 Comm: syz.3.1633 Not tainted 6.11.0-rc4-syzkaller-00143-g3d5f968a177d #0 [ 553.773890][T10016] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 553.783995][T10016] Call Trace: [ 553.787292][T10016] [ 553.790228][T10016] dump_stack_lvl+0xf2/0x150 [ 553.794871][T10016] dump_stack+0x15/0x20 [ 553.799165][T10016] should_fail_ex+0x229/0x230 [ 553.803896][T10016] should_fail_alloc_page+0xfd/0x110 [ 553.809313][T10016] __alloc_pages_noprof+0x109/0x360 [ 553.814610][T10016] alloc_pages_mpol_noprof+0xb1/0x1e0 [ 553.820015][T10016] alloc_migration_target_by_mpol+0x118/0x220 [ 553.826212][T10016] migrate_pages_batch+0x382/0x1ac0 [ 553.831490][T10016] ? __pfx_alloc_migration_target_by_mpol+0x10/0x10 [ 553.836704][T10017] loop4: detected capacity change from 0 to 164 [ 553.838155][T10016] ? __pfx_remove_migration_pte+0x10/0x10 [ 553.850193][T10016] migrate_pages+0xed6/0x1810 [ 553.854707][T10017] iso9660: Unknown parameter 'W‘[XÆ#µQô>ÉUÐÛï‘9õì—înöœ$±é2º*zƒ12““(¶ÀAQ¾7Ô)' [ 553.854983][T10016] ? __pfx_alloc_migration_target_by_mpol+0x10/0x10 [ 553.871013][T10016] ? mbind_range+0x174/0x460 [ 553.875641][T10016] __se_sys_mbind+0xf76/0x1160 [ 553.880554][T10016] __x64_sys_mbind+0x78/0x90 [ 553.885227][T10016] x64_sys_call+0x2b4d/0x2d60 [ 553.890034][T10016] do_syscall_64+0xc9/0x1c0 [ 553.894600][T10016] ? clear_bhb_loop+0x55/0xb0 [ 553.899350][T10016] ? clear_bhb_loop+0x55/0xb0 [ 553.904040][T10016] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 553.910056][T10016] RIP: 0033:0x7f79f19c9e79 [ 553.914530][T10016] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 553.934155][T10016] RSP: 002b:00007f79f0620038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed [ 553.942613][T10016] RAX: ffffffffffffffda RBX: 00007f79f1b66058 RCX: 00007f79f19c9e79 [ 553.950619][T10016] RDX: 0000000000000000 RSI: 0000000000c00000 RDI: 0000000020000000 [ 553.958598][T10016] RBP: 00007f79f0620090 R08: 0000000000000000 R09: 0000000000000002 [ 553.966763][T10016] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 553.974740][T10016] R13: 0000000000000001 R14: 00007f79f1b66058 R15: 00007fff6b4d6bf8 [ 553.982732][T10016] [ 554.103863][T10036] loop3: detected capacity change from 0 to 512 [ 554.125461][ T29] audit: type=1326 audit(1858644898.406:1252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10034 comm="syz.0.1637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79f4e59e79 code=0x7ffc0000 [ 554.149182][ T29] audit: type=1326 audit(1858644898.416:1253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10034 comm="syz.0.1637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=161 compat=0 ip=0x7f79f4e59e79 code=0x7ffc0000 [ 554.172852][ T29] audit: type=1326 audit(1858644898.416:1254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10034 comm="syz.0.1637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79f4e59e79 code=0x7ffc0000 [ 554.196627][ T29] audit: type=1326 audit(1858644898.416:1255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10034 comm="syz.0.1637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79f4e59e79 code=0x7ffc0000 [ 554.232622][T10044] loop2: detected capacity change from 0 to 512 [ 554.239617][T10036] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 554.269844][T10036] ext4 filesystem being mounted at /161/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 554.319153][ T7584] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 554.362246][T10054] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=123 sclass=netlink_route_socket pid=10054 comm=syz.2.1643 [ 554.398374][T10062] loop3: detected capacity change from 0 to 512 [ 554.428537][T10062] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 554.449357][T10062] ext4 filesystem being mounted at /162/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 554.473641][T10080] FAULT_INJECTION: forcing a failure. [ 554.473641][T10080] name failslab, interval 1, probability 0, space 0, times 0 [ 554.486402][T10080] CPU: 0 UID: 0 PID: 10080 Comm: syz.2.1648 Not tainted 6.11.0-rc4-syzkaller-00143-g3d5f968a177d #0 [ 554.497273][T10080] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 554.507358][T10080] Call Trace: [ 554.510652][T10080] [ 554.513598][T10080] dump_stack_lvl+0xf2/0x150 [ 554.518241][T10080] dump_stack+0x15/0x20 [ 554.522435][T10080] should_fail_ex+0x229/0x230 [ 554.527278][T10080] ? sock_kmalloc+0x83/0xc0 [ 554.531979][T10080] should_failslab+0x8f/0xb0 [ 554.536731][T10080] __kmalloc_noprof+0xa5/0x370 [ 554.541622][T10080] sock_kmalloc+0x83/0xc0 [ 554.545983][T10080] ____sys_sendmsg+0x127/0x410 [ 554.550784][T10080] __sys_sendmsg+0x1e9/0x280 [ 554.555496][T10080] __x64_sys_sendmsg+0x46/0x50 [ 554.560335][T10080] x64_sys_call+0x2689/0x2d60 [ 554.565036][T10080] do_syscall_64+0xc9/0x1c0 [ 554.569579][T10080] ? clear_bhb_loop+0x55/0xb0 [ 554.574287][T10080] ? clear_bhb_loop+0x55/0xb0 [ 554.579074][T10080] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 554.585057][T10080] RIP: 0033:0x7f7c93469e79 [ 554.589501][T10080] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 554.609140][T10080] RSP: 002b:00007f7c920e7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 554.617577][T10080] RAX: ffffffffffffffda RBX: 00007f7c93605f80 RCX: 00007f7c93469e79 [ 554.625586][T10080] RDX: 0000000004040000 RSI: 0000000020000940 RDI: 0000000000000003 [ 554.633688][T10080] RBP: 00007f7c920e7090 R08: 0000000000000000 R09: 0000000000000000 [ 554.641799][T10080] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 554.649781][T10080] R13: 0000000000000000 R14: 00007f7c93605f80 R15: 00007ffdfdfc19c8 [ 554.657802][T10080] [ 554.703424][T10099] loop2: detected capacity change from 0 to 2048 [ 554.713367][ T7584] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 554.752818][T10099] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 554.767356][T10099] ext4 filesystem being mounted at /12/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 554.786967][T10099] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: none. [ 554.804709][T10105] loop3: detected capacity change from 0 to 1024 [ 554.811633][T10105] EXT4-fs: Ignoring removed mblk_io_submit option [ 554.811834][ T9661] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 554.818688][T10105] EXT4-fs: Mount option(s) incompatible with ext3 [ 554.895025][T10106] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=36 sclass=netlink_tcpdiag_socket pid=10106 comm=syz.0.1649 [ 555.159356][T10109] loop2: detected capacity change from 0 to 512 [ 555.169358][T10109] EXT4-fs: Ignoring removed nomblk_io_submit option [ 555.187810][T10109] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 555.195946][T10109] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=1842c01c, mo2=0002] [ 555.239080][T10109] EXT4-fs (loop2): couldn't mount RDWR because of unsupported optional features (80) [ 555.248741][T10109] EXT4-fs (loop2): Skipping orphan cleanup due to unknown ROCOMPAT features [ 555.263863][T10109] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 555.318195][T10109] EXT4-fs warning (device loop2): dx_probe:893: inode #2: comm syz.2.1652: dx entry: limit 65535 != root limit 120 [ 555.330474][T10109] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.1652: Corrupt directory, running e2fsck is recommended [ 555.339742][T10114] loop1: detected capacity change from 0 to 512 [ 555.414291][ T9661] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 555.442065][T10117] netlink: 216 bytes leftover after parsing attributes in process `syz.0.1655'. [ 555.453138][T10117] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1655'. [ 555.524740][T10121] xt_TPROXY: Can be used only with -p tcp or -p udp [ 555.564632][T10123] dvmrp1: tun_chr_ioctl cmd 1074025677 [ 555.570753][T10123] dvmrp1: linktype set to 768 [ 555.597492][T10128] FAULT_INJECTION: forcing a failure. [ 555.597492][T10128] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 555.610749][T10128] CPU: 1 UID: 0 PID: 10128 Comm: syz.2.1659 Not tainted 6.11.0-rc4-syzkaller-00143-g3d5f968a177d #0 [ 555.621546][T10128] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 555.631623][T10128] Call Trace: [ 555.635110][T10128] [ 555.638140][T10128] dump_stack_lvl+0xf2/0x150 [ 555.642865][T10128] dump_stack+0x15/0x20 [ 555.647060][T10128] should_fail_ex+0x229/0x230 [ 555.651777][T10128] should_fail+0xb/0x10 [ 555.655959][T10128] should_fail_usercopy+0x1a/0x20 [ 555.661021][T10128] _copy_to_user+0x1e/0xa0 [ 555.665562][T10128] simple_read_from_buffer+0xa0/0x110 [ 555.671158][T10128] proc_fail_nth_read+0xff/0x140 [ 555.676143][T10128] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 555.681718][T10128] vfs_read+0x1a2/0x6e0 [ 555.685967][T10128] ? __rcu_read_unlock+0x4e/0x70 [ 555.690927][T10128] ? __fget_files+0x1da/0x210 [ 555.695685][T10128] ksys_read+0xeb/0x1b0 [ 555.699891][T10128] __x64_sys_read+0x42/0x50 [ 555.704432][T10128] x64_sys_call+0x27d3/0x2d60 [ 555.709135][T10128] do_syscall_64+0xc9/0x1c0 [ 555.713667][T10128] ? clear_bhb_loop+0x55/0xb0 [ 555.718451][T10128] ? clear_bhb_loop+0x55/0xb0 [ 555.723282][T10128] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 555.729285][T10128] RIP: 0033:0x7f7c934688bc [ 555.733740][T10128] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 555.753379][T10128] RSP: 002b:00007f7c920e7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 555.761823][T10128] RAX: ffffffffffffffda RBX: 00007f7c93605f80 RCX: 00007f7c934688bc [ 555.769817][T10128] RDX: 000000000000000f RSI: 00007f7c920e70a0 RDI: 0000000000000003 [ 555.777898][T10128] RBP: 00007f7c920e7090 R08: 0000000000000000 R09: 0000000000000000 [ 555.785896][T10128] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 555.793876][T10128] R13: 0000000000000000 R14: 00007f7c93605f80 R15: 00007ffdfdfc19c8 [ 555.801940][T10128] [ 555.815896][T10130] loop4: detected capacity change from 0 to 1024 [ 555.828656][T10130] loop4: detected capacity change from 0 to 128 [ 555.946721][T10132] loop2: detected capacity change from 0 to 2048 [ 555.988522][T10140] loop4: detected capacity change from 0 to 2048 [ 555.995185][T10140] EXT4-fs: Ignoring removed orlov option [ 556.001009][T10140] EXT4-fs: Ignoring removed nobh option [ 556.016869][T10132] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 556.039168][T10140] ext2: Unknown parameter 'permit_directio' [ 556.045555][T10132] ext4 filesystem being mounted at /16/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 556.057783][T10146] loop1: detected capacity change from 0 to 512 [ 556.189638][T10132] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: none. [ 556.266131][ T29] audit: type=1400 audit(1858645412.575:1256): avc: denied { name_bind } for pid=10152 comm="syz.1.1669" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 556.292311][T10156] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=36 sclass=netlink_tcpdiag_socket pid=10156 comm=syz.4.1666 [ 556.617577][ T9661] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 556.687334][T10147] FAULT_INJECTION: forcing a failure. [ 556.687334][T10147] name failslab, interval 1, probability 0, space 0, times 0 [ 556.700264][T10147] CPU: 0 UID: 0 PID: 10147 Comm: syz.3.1654 Not tainted 6.11.0-rc4-syzkaller-00143-g3d5f968a177d #0 [ 556.711132][T10147] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 556.721204][T10147] Call Trace: [ 556.724723][T10147] [ 556.727661][T10147] dump_stack_lvl+0xf2/0x150 [ 556.732342][T10147] dump_stack+0x15/0x20 [ 556.736519][T10147] should_fail_ex+0x229/0x230 [ 556.741217][T10147] ? vm_area_alloc+0x2c/0x130 [ 556.745913][T10147] should_failslab+0x8f/0xb0 [ 556.750567][T10147] kmem_cache_alloc_noprof+0x4c/0x290 [ 556.755984][T10147] vm_area_alloc+0x2c/0x130 [ 556.760562][T10147] mmap_region+0x88b/0x1620 [ 556.765100][T10147] ? security_mmap_addr+0x4c/0x70 [ 556.770146][T10147] ? __get_unmapped_area+0x2d1/0x300 [ 556.775490][T10147] do_mmap+0x72a/0xb70 [ 556.779580][T10147] aio_setup_ring+0x3c2/0x6b0 [ 556.784371][T10147] ioctx_alloc+0x2b2/0x4c0 [ 556.788806][T10147] __se_sys_io_setup+0x6b/0x1b0 [ 556.793684][T10147] __x64_sys_io_setup+0x31/0x40 [ 556.798566][T10147] x64_sys_call+0x2639/0x2d60 [ 556.803308][T10147] do_syscall_64+0xc9/0x1c0 [ 556.807873][T10147] ? clear_bhb_loop+0x55/0xb0 [ 556.812642][T10147] ? clear_bhb_loop+0x55/0xb0 [ 556.817497][T10147] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 556.823499][T10147] RIP: 0033:0x7f79f19c9e79 [ 556.827926][T10147] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 556.847826][T10147] RSP: 002b:00007f79f0620038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 556.856352][T10147] RAX: ffffffffffffffda RBX: 00007f79f1b66058 RCX: 00007f79f19c9e79 [ 556.864355][T10147] RDX: 0000000000000000 RSI: 0000000020001140 RDI: 000000000000001c [ 556.872667][T10147] RBP: 00007f79f0620090 R08: 0000000000000000 R09: 0000000000000000 [ 556.880843][T10147] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 556.888910][T10147] R13: 0000000000000000 R14: 00007f79f1b66058 R15: 00007fff6b4d6bf8 [ 556.897541][T10147] [ 556.902754][T10168] loop2: detected capacity change from 0 to 164 [ 556.927147][T10167] FAULT_INJECTION: forcing a failure. [ 556.927147][T10167] name failslab, interval 1, probability 0, space 0, times 0 [ 556.939905][T10167] CPU: 0 UID: 0 PID: 10167 Comm: syz.1.1674 Not tainted 6.11.0-rc4-syzkaller-00143-g3d5f968a177d #0 [ 556.950870][T10167] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 556.961049][T10167] Call Trace: [ 556.964423][T10167] [ 556.967371][T10167] dump_stack_lvl+0xf2/0x150 [ 556.972056][T10167] dump_stack+0x15/0x20 [ 556.976246][T10167] should_fail_ex+0x229/0x230 [ 556.980970][T10167] ? build_skb+0x33/0x210 [ 556.985311][T10167] should_failslab+0x8f/0xb0 [ 556.989947][T10167] kmem_cache_alloc_noprof+0x4c/0x290 [ 556.995413][T10167] ? alloc_pages_mpol_noprof+0xd5/0x1e0 [ 557.001031][T10167] build_skb+0x33/0x210 [ 557.005206][T10167] __tun_build_skb+0x2b/0x1b0 [ 557.010136][T10167] ? tun_get_user+0x1474/0x24b0 [ 557.014995][T10167] tun_get_user+0x1494/0x24b0 [ 557.019688][T10167] ? kstrtoull+0x110/0x140 [ 557.024142][T10167] ? ref_tracker_alloc+0x1f5/0x2f0 [ 557.032248][T10167] tun_chr_write_iter+0x18e/0x240 [ 557.037345][T10167] vfs_write+0x78f/0x900 [ 557.041622][T10167] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 557.047178][T10167] ksys_write+0xeb/0x1b0 [ 557.051582][T10167] __x64_sys_write+0x42/0x50 [ 557.056194][T10167] x64_sys_call+0x27dd/0x2d60 [ 557.060921][T10167] do_syscall_64+0xc9/0x1c0 [ 557.065511][T10167] ? clear_bhb_loop+0x55/0xb0 [ 557.070219][T10167] ? clear_bhb_loop+0x55/0xb0 [ 557.075002][T10167] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 557.080925][T10167] RIP: 0033:0x7fab9c00895f [ 557.085345][T10167] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8d 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 1c 8e 02 00 48 [ 557.105078][T10167] RSP: 002b:00007fab9ac81000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 557.113509][T10167] RAX: ffffffffffffffda RBX: 00007fab9c1a5f80 RCX: 00007fab9c00895f [ 557.121550][T10167] RDX: 000000000000005a RSI: 00000000200001c0 RDI: 00000000000000c8 [ 557.129624][T10167] RBP: 00007fab9ac81090 R08: 0000000000000000 R09: 0000000000000000 [ 557.137696][T10167] R10: 000000000000005a R11: 0000000000000293 R12: 0000000000000001 [ 557.145757][T10167] R13: 0000000000000000 R14: 00007fab9c1a5f80 R15: 00007ffe85b1bd48 [ 557.153738][T10167] [ 557.173364][T10168] iso9660: Unknown parameter 'W‘[XÆ#µQô>ÉUÐÛï‘9õì—înöœ$±é2º*zƒ12““(¶ÀAQ¾7Ô)' [ 557.273532][T10185] loop4: detected capacity change from 0 to 2048 [ 557.310578][T10194] loop3: detected capacity change from 0 to 512 [ 557.332495][T10190] syzkaller0: entered promiscuous mode [ 557.338044][T10190] syzkaller0: entered allmulticast mode [ 557.515959][ T29] audit: type=1400 audit(1858645413.849:1257): avc: denied { read } for pid=10222 comm="syz.1.1693" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 557.643919][T10229] loop1: detected capacity change from 0 to 2048 [ 557.660260][T10229] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 557.672787][T10229] ext4 filesystem being mounted at /217/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 557.687246][T10229] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: none. [ 557.709566][ T7537] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 557.768142][T10240] loop1: detected capacity change from 0 to 512 [ 557.776487][ T29] audit: type=1326 audit(1858645414.122:1258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10241 comm="syz.0.1699" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f79f4e59e79 code=0x0 [ 557.840793][T10244] loop1: detected capacity change from 0 to 2048 [ 557.863537][T10244] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 557.898798][ T7537] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 558.262593][T10257] loop3: detected capacity change from 0 to 1024 [ 558.265397][ T29] audit: type=1400 audit(1858645414.617:1259): avc: denied { ioctl } for pid=10258 comm="syz.4.1705" path="socket:[44486]" dev="sockfs" ino=44486 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 558.269734][T10257] ext4: Unknown parameter 'pcr' [ 558.314161][T10262] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1705'. [ 558.326899][ T29] audit: type=1400 audit(1858645414.690:1260): avc: denied { module_load } for pid=10258 comm="syz.4.1705" path="/sys/kernel/kexec_loaded" dev="sysfs" ino=180 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=system permissive=1 [ 558.368010][T10264] loop3: detected capacity change from 0 to 2048 [ 558.397131][T10268] loop4: detected capacity change from 0 to 2048 [ 558.405551][T10264] Alternate GPT is invalid, using primary GPT. [ 558.411907][T10264] loop3: p1 p2 p3 [ 558.423103][T10270] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1709'. [ 558.437716][T10271] validate_nla: 6 callbacks suppressed [ 558.437733][T10271] netlink: 'syz.4.1709': attribute type 2 has an invalid length. [ 558.480394][T10273] loop3: detected capacity change from 0 to 512 [ 558.524001][T10275] loop3: detected capacity change from 0 to 512 [ 558.531398][T10275] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities [ 558.717386][T10288] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1717'. [ 558.726412][T10288] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1717'. [ 558.736669][T10290] loop2: detected capacity change from 0 to 1024 [ 558.769053][T10290] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 558.801181][T10290] bridge0: port 3(vlan2) entered blocking state [ 558.807742][T10290] bridge0: port 3(vlan2) entered disabled state [ 558.814890][T10290] vlan2: entered allmulticast mode [ 558.820833][T10290] vlan2: left allmulticast mode [ 558.828978][T10295] loop3: detected capacity change from 0 to 2048 [ 558.858999][T10295] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 558.873305][T10295] ext4 filesystem being mounted at /175/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 558.887285][T10299] loop1: detected capacity change from 0 to 512 [ 558.896459][T10295] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: none. [ 558.916883][ T7584] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 558.928006][ T9661] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 558.946178][T10301] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 558.952830][T10301] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 559.043709][T10317] FAULT_INJECTION: forcing a failure. [ 559.043709][T10317] name failslab, interval 1, probability 0, space 0, times 0 [ 559.056482][T10317] CPU: 1 UID: 0 PID: 10317 Comm: syz.1.1726 Not tainted 6.11.0-rc4-syzkaller-00143-g3d5f968a177d #0 [ 559.067282][T10317] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 559.077526][T10317] Call Trace: [ 559.080835][T10317] [ 559.083914][T10317] dump_stack_lvl+0xf2/0x150 [ 559.086563][T10319] loop2: detected capacity change from 0 to 164 [ 559.088538][T10317] dump_stack+0x15/0x20 [ 559.095547][T10319] iso9660: Unknown parameter 'W‘[XÆ#µQô>ÉUÐÛï‘9õì—înöœ$±é2º*zƒ12““(¶ÀAQ¾7Ô)' [ 559.099101][T10317] should_fail_ex+0x229/0x230 [ 559.099142][T10317] ? tcf_idr_create+0x42/0x4c0 [ 559.117769][T10317] should_failslab+0x8f/0xb0 [ 559.122439][T10317] __kmalloc_noprof+0xa5/0x370 [ 559.127236][T10317] ? radix_tree_iter_tag_clear+0x109/0x180 [ 559.133091][T10317] tcf_idr_create+0x42/0x4c0 [ 559.137722][T10317] ? idr_alloc_u32+0x127/0x180 [ 559.142604][T10317] tcf_idr_create_from_flags+0x63/0x80 [ 559.148089][T10317] tcf_pedit_init+0x279/0x8e0 [ 559.152987][T10317] tcf_action_init_1+0x339/0x490 [ 559.158042][T10317] tcf_action_init+0x1a0/0x530 [ 559.162864][T10317] tc_ctl_action+0x292/0x840 [ 559.167498][T10317] ? __pfx_tc_ctl_action+0x10/0x10 [ 559.172395][T10311] netlink: 1 bytes leftover after parsing attributes in process `syz.3.1722'. [ 559.172662][T10317] rtnetlink_rcv_msg+0x6aa/0x710 [ 559.186451][T10317] ? ref_tracker_free+0x3a5/0x410 [ 559.191572][T10317] ? __dev_queue_xmit+0x161/0x1fe0 [ 559.196788][T10317] netlink_rcv_skb+0x12c/0x230 [ 559.201887][T10317] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 559.207414][T10317] rtnetlink_rcv+0x1c/0x30 [ 559.211851][T10317] netlink_unicast+0x599/0x670 [ 559.216640][T10317] netlink_sendmsg+0x5cc/0x6e0 [ 559.221462][T10317] ? __pfx_netlink_sendmsg+0x10/0x10 [ 559.226804][T10317] __sock_sendmsg+0x140/0x180 [ 559.231518][T10317] ____sys_sendmsg+0x312/0x410 [ 559.236304][T10317] __sys_sendmsg+0x1e9/0x280 [ 559.241007][T10317] __x64_sys_sendmsg+0x46/0x50 [ 559.245848][T10317] x64_sys_call+0x2689/0x2d60 [ 559.250540][T10317] do_syscall_64+0xc9/0x1c0 [ 559.255122][T10317] ? clear_bhb_loop+0x55/0xb0 [ 559.259818][T10317] ? clear_bhb_loop+0x55/0xb0 [ 559.264513][T10317] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 559.270461][T10317] RIP: 0033:0x7fab9c009e79 [ 559.274890][T10317] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 559.294562][T10317] RSP: 002b:00007fab9ac81038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 559.303126][T10317] RAX: ffffffffffffffda RBX: 00007fab9c1a5f80 RCX: 00007fab9c009e79 [ 559.311198][T10317] RDX: 0000000000000000 RSI: 0000000020000300 RDI: 0000000000000005 [ 559.319278][T10317] RBP: 00007fab9ac81090 R08: 0000000000000000 R09: 0000000000000000 [ 559.327260][T10317] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 559.335315][T10317] R13: 0000000000000000 R14: 00007fab9c1a5f80 R15: 00007ffe85b1bd48 [ 559.343325][T10317] [ 559.352183][T10311] netlink: 'syz.3.1722': attribute type 1 has an invalid length. [ 559.383240][T10330] FAULT_INJECTION: forcing a failure. [ 559.383240][T10330] name failslab, interval 1, probability 0, space 0, times 0 [ 559.395978][T10330] CPU: 1 UID: 0 PID: 10330 Comm: syz.3.1729 Not tainted 6.11.0-rc4-syzkaller-00143-g3d5f968a177d #0 [ 559.406925][T10330] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 559.417003][T10330] Call Trace: [ 559.420366][T10330] [ 559.423302][T10330] dump_stack_lvl+0xf2/0x150 [ 559.427997][T10330] dump_stack+0x15/0x20 [ 559.432225][T10330] should_fail_ex+0x229/0x230 [ 559.436932][T10330] ? __request_module+0x1d5/0x3e0 [ 559.442073][T10330] should_failslab+0x8f/0xb0 [ 559.446702][T10330] __kmalloc_node_track_caller_noprof+0xa6/0x380 [ 559.453085][T10330] ? should_failslab+0x8f/0xb0 [ 559.458015][T10330] kstrdup+0x3a/0x80 [ 559.461938][T10330] __request_module+0x1d5/0x3e0 [ 559.466885][T10330] ? nf_conntrack_helper_try_module_get+0xae/0x430 [ 559.473439][T10330] nf_conntrack_helper_try_module_get+0x236/0x430 [ 559.479947][T10330] nf_ct_add_helper+0x39/0xf0 [ 559.484764][T10330] tcf_ct_init+0xdda/0xe60 [ 559.489238][T10330] ? should_failslab+0x8f/0xb0 [ 559.494207][T10330] tcf_action_init_1+0x339/0x490 [ 559.499212][T10330] tcf_action_init+0x1a0/0x530 [ 559.504093][T10330] tc_ctl_action+0x292/0x840 [ 559.508847][T10330] ? __pfx_tc_ctl_action+0x10/0x10 [ 559.513978][T10330] rtnetlink_rcv_msg+0x6aa/0x710 [ 559.518973][T10330] ? ref_tracker_free+0x3a5/0x410 [ 559.524068][T10330] ? __dev_queue_xmit+0x161/0x1fe0 [ 559.529271][T10330] netlink_rcv_skb+0x12c/0x230 [ 559.534045][T10330] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 559.539523][T10330] rtnetlink_rcv+0x1c/0x30 [ 559.544016][T10330] netlink_unicast+0x599/0x670 [ 559.548938][T10330] netlink_sendmsg+0x5cc/0x6e0 [ 559.553729][T10330] ? __pfx_netlink_sendmsg+0x10/0x10 [ 559.559030][T10330] __sock_sendmsg+0x140/0x180 [ 559.563812][T10330] ____sys_sendmsg+0x312/0x410 [ 559.568615][T10330] __sys_sendmsg+0x1e9/0x280 [ 559.573225][T10330] __x64_sys_sendmsg+0x46/0x50 [ 559.578081][T10330] x64_sys_call+0x2689/0x2d60 [ 559.582773][T10330] do_syscall_64+0xc9/0x1c0 [ 559.587331][T10330] ? clear_bhb_loop+0x55/0xb0 [ 559.592071][T10330] ? clear_bhb_loop+0x55/0xb0 [ 559.596765][T10330] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 559.602932][T10330] RIP: 0033:0x7f79f19c9e79 [ 559.607441][T10330] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 559.627061][T10330] RSP: 002b:00007f79f0641038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 559.635560][T10330] RAX: ffffffffffffffda RBX: 00007f79f1b65f80 RCX: 00007f79f19c9e79 [ 559.643534][T10330] RDX: 0000000000000000 RSI: 0000000020000180 RDI: 0000000000000005 [ 559.651510][T10330] RBP: 00007f79f0641090 R08: 0000000000000000 R09: 0000000000000000 [ 559.659514][T10330] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 559.667488][T10330] R13: 0000000000000000 R14: 00007f79f1b65f80 R15: 00007fff6b4d6bf8 [ 559.675484][T10330] [ 559.770893][ T29] audit: type=1326 audit(1858645416.172:1261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10346 comm="syz.3.1731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79f19c9e79 code=0x7ffc0000 [ 559.773384][T10350] loop1: detected capacity change from 0 to 2048 [ 559.794477][ T29] audit: type=1326 audit(1858645416.172:1262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10346 comm="syz.3.1731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79f19c9e79 code=0x7ffc0000 [ 559.828483][T10353] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1733'. [ 559.830079][ T29] audit: type=1326 audit(1858645416.203:1263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10346 comm="syz.3.1731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f79f19c9e79 code=0x7ffc0000 [ 559.863343][ T29] audit: type=1326 audit(1858645416.203:1264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10346 comm="syz.3.1731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79f19c9e79 code=0x7ffc0000 [ 559.887142][ T29] audit: type=1326 audit(1858645416.203:1265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10346 comm="syz.3.1731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f79f19c9e79 code=0x7ffc0000 [ 559.905475][T10347] loop3: detected capacity change from 0 to 164 [ 559.910631][ T29] audit: type=1326 audit(1858645416.203:1266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10346 comm="syz.3.1731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79f19c9e79 code=0x7ffc0000 [ 559.951389][T10347] rock: corrupted directory entry. extent=41, offset=65536, size=8 [ 559.954216][T10350] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 559.960921][T10347] netlink: 'syz.3.1731': attribute type 1 has an invalid length. [ 559.984667][T10350] ext4 filesystem being mounted at /226/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 560.015562][T10350] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: none. [ 560.057796][T10362] loop4: detected capacity change from 0 to 512 [ 560.070707][ T7537] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 560.087335][T10364] netlink: 'syz.3.1736': attribute type 4 has an invalid length. [ 560.095223][T10364] netlink: 128124 bytes leftover after parsing attributes in process `syz.3.1736'. [ 560.118267][T10367] loop1: detected capacity change from 0 to 128 [ 560.174638][T10376] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1741'. [ 560.191329][T10376] FAULT_INJECTION: forcing a failure. [ 560.191329][T10376] name failslab, interval 1, probability 0, space 0, times 0 [ 560.205317][T10376] CPU: 1 UID: 0 PID: 10376 Comm: syz.1.1741 Not tainted 6.11.0-rc4-syzkaller-00143-g3d5f968a177d #0 [ 560.216128][T10376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 560.226258][T10376] Call Trace: [ 560.229590][T10376] [ 560.232534][T10376] dump_stack_lvl+0xf2/0x150 [ 560.237254][T10376] dump_stack+0x15/0x20 [ 560.241493][T10376] should_fail_ex+0x229/0x230 [ 560.246264][T10376] ? tcf_block_get_ext+0xd1/0xb90 [ 560.251313][T10376] should_failslab+0x8f/0xb0 [ 560.255957][T10376] __kmalloc_cache_noprof+0x4b/0x2a0 [ 560.261355][T10376] tcf_block_get_ext+0xd1/0xb90 [ 560.266248][T10376] tcf_block_get+0x66/0xa0 [ 560.270723][T10376] ? __pfx_tcf_chain_head_change_dflt+0x10/0x10 [ 560.276992][T10376] hfsc_init_qdisc+0xe1/0x230 [ 560.281687][T10376] ? __pfx_hfsc_init_qdisc+0x10/0x10 [ 560.286988][T10376] qdisc_create+0x6c1/0xae0 [ 560.291526][T10376] ? __nla_parse+0x40/0x60 [ 560.295959][T10376] tc_modify_qdisc+0x65f/0x1050 [ 560.300855][T10376] ? ns_capable+0x7d/0xb0 [ 560.305291][T10376] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 560.310655][T10376] rtnetlink_rcv_msg+0x6aa/0x710 [ 560.315681][T10376] ? ref_tracker_free+0x3a5/0x410 [ 560.320743][T10376] ? __dev_queue_xmit+0x161/0x1fe0 [ 560.325933][T10376] netlink_rcv_skb+0x12c/0x230 [ 560.330718][T10376] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 560.336287][T10376] rtnetlink_rcv+0x1c/0x30 [ 560.340737][T10376] netlink_unicast+0x599/0x670 [ 560.345544][T10376] netlink_sendmsg+0x5cc/0x6e0 [ 560.350336][T10376] ? __pfx_netlink_sendmsg+0x10/0x10 [ 560.355652][T10376] __sock_sendmsg+0x140/0x180 [ 560.360368][T10376] ____sys_sendmsg+0x312/0x410 [ 560.365167][T10376] __sys_sendmmsg+0x269/0x500 [ 560.369972][T10376] __x64_sys_sendmmsg+0x57/0x70 [ 560.374861][T10376] x64_sys_call+0xa49/0x2d60 [ 560.379489][T10376] do_syscall_64+0xc9/0x1c0 [ 560.384065][T10376] ? clear_bhb_loop+0x55/0xb0 [ 560.388768][T10376] ? clear_bhb_loop+0x55/0xb0 [ 560.393616][T10376] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 560.399552][T10376] RIP: 0033:0x7fab9c009e79 [ 560.404013][T10376] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 560.423782][T10376] RSP: 002b:00007fab9ac81038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 560.432207][T10376] RAX: ffffffffffffffda RBX: 00007fab9c1a5f80 RCX: 00007fab9c009e79 [ 560.440252][T10376] RDX: 040000000000009f RSI: 00000000200002c0 RDI: 0000000000000005 [ 560.448399][T10376] RBP: 00007fab9ac81090 R08: 0000000000000000 R09: 0000000000000000 [ 560.456385][T10376] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 560.464363][T10376] R13: 0000000000000000 R14: 00007fab9c1a5f80 R15: 00007ffe85b1bd48 [ 560.472349][T10376] [ 560.485608][T10371] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1739'. [ 560.515657][T10383] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1743'. [ 560.619859][T10394] loop2: detected capacity change from 0 to 512 [ 560.648245][T10398] loop1: detected capacity change from 0 to 128 [ 560.657506][T10398] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 560.671541][T10398] ext4 filesystem being mounted at /232/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 560.726352][T10398] FAULT_INJECTION: forcing a failure. [ 560.726352][T10398] name failslab, interval 1, probability 0, space 0, times 0 [ 560.739159][T10398] CPU: 1 UID: 0 PID: 10398 Comm: syz.1.1748 Not tainted 6.11.0-rc4-syzkaller-00143-g3d5f968a177d #0 [ 560.750025][T10398] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 560.760108][T10398] Call Trace: [ 560.763404][T10398] [ 560.766368][T10398] dump_stack_lvl+0xf2/0x150 [ 560.771047][T10398] dump_stack+0x15/0x20 [ 560.775222][T10398] should_fail_ex+0x229/0x230 [ 560.779921][T10398] ? alloc_buffer_head+0x35/0x1f0 [ 560.785006][T10398] should_failslab+0x8f/0xb0 [ 560.789617][T10398] kmem_cache_alloc_noprof+0x4c/0x290 [ 560.795104][T10398] alloc_buffer_head+0x35/0x1f0 [ 560.799970][T10398] folio_alloc_buffers+0x168/0x310 [ 560.805193][T10398] bdev_getblk+0x20c/0x3b0 [ 560.809676][T10398] ext4_ext_insert_extent+0xac7/0x2710 [ 560.815164][T10398] ext4_split_extent_at+0x57a/0x880 [ 560.820435][T10398] ext4_split_extent+0x291/0x2d0 [ 560.825386][T10398] ext4_ext_map_blocks+0xc0a/0x33b0 [ 560.830616][T10398] ? ext4_es_lookup_extent+0x35b/0x520 [ 560.836090][T10398] ext4_map_blocks+0x72a/0xf50 [ 560.840895][T10398] ext4_iomap_begin+0x4a9/0x5d0 [ 560.845838][T10398] iomap_iter+0x3cc/0x800 [ 560.850172][T10398] ? __pfx_ext4_iomap_begin+0x10/0x10 [ 560.855634][T10398] __iomap_dio_rw+0x6a3/0x1090 [ 560.860513][T10398] iomap_dio_rw+0x40/0x90 [ 560.864854][T10398] ext4_file_write_iter+0xaa4/0xe30 [ 560.871025][T10398] iter_file_splice_write+0x5e6/0x970 [ 560.876418][T10398] ? __pfx_iter_file_splice_write+0x10/0x10 [ 560.882348][T10398] direct_splice_actor+0x16c/0x2c0 [ 560.887506][T10398] splice_direct_to_actor+0x305/0x670 [ 560.892970][T10398] ? __pfx_direct_splice_actor+0x10/0x10 [ 560.898750][T10398] do_splice_direct+0xd7/0x150 [ 560.903541][T10398] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 560.909496][T10398] do_sendfile+0x3ab/0x950 [ 560.913928][T10398] __x64_sys_sendfile64+0x110/0x150 [ 560.919164][T10398] x64_sys_call+0xed5/0x2d60 [ 560.923788][T10398] do_syscall_64+0xc9/0x1c0 [ 560.928338][T10398] ? clear_bhb_loop+0x55/0xb0 [ 560.933099][T10398] ? clear_bhb_loop+0x55/0xb0 [ 560.937881][T10398] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 560.943796][T10398] RIP: 0033:0x7fab9c009e79 [ 560.948216][T10398] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 560.967953][T10398] RSP: 002b:00007fab9ac81038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 560.976372][T10398] RAX: ffffffffffffffda RBX: 00007fab9c1a5f80 RCX: 00007fab9c009e79 [ 560.984400][T10398] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004 [ 560.992414][T10398] RBP: 00007fab9ac81090 R08: 0000000000000000 R09: 0000000000000000 [ 561.000389][T10398] R10: 0000000000011f06 R11: 0000000000000246 R12: 0000000000000002 [ 561.008364][T10398] R13: 0000000000000000 R14: 00007fab9c1a5f80 R15: 00007ffe85b1bd48 [ 561.016417][T10398] [ 561.046980][ T7537] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 561.048258][T10402] loop3: detected capacity change from 0 to 512 [ 561.093037][T10422] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 561.111496][T10420] loop1: detected capacity change from 0 to 4096 [ 561.145583][T10420] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 561.189952][T10430] loop3: detected capacity change from 0 to 2048 [ 561.205331][ T7537] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 561.218543][T10439] loop4: detected capacity change from 0 to 164 [ 561.225611][T10439] iso9660: Unknown parameter 'W‘[XÆ#µQô>ÉUÐÛï‘9õì—înöœ$±é2º*zƒ12““(¶ÀAQ¾7Ô)' [ 561.237430][T10430] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 561.252408][T10430] ext4 filesystem being mounted at /186/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 561.270090][T10439] loop4: detected capacity change from 0 to 2048 [ 561.278705][T10430] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: none. [ 561.306830][ T7584] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 561.352777][T10455] loop1: detected capacity change from 0 to 128 [ 561.369283][T10455] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 561.381795][T10455] ext4 filesystem being mounted at /237/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 561.438182][ T7537] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 561.526352][T10462] loop3: detected capacity change from 0 to 512 [ 561.536298][T10462] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 561.549879][T10462] EXT4-fs (loop3): 1 truncate cleaned up [ 561.556536][T10462] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 561.558588][T10469] loop1: detected capacity change from 0 to 164 [ 561.575540][T10469] iso9660: Unknown parameter 'W‘[XÆ#µQô>ÉUÐÛï‘9õì—înöœ$±é2º*zƒ12““(¶ÀAQ¾7Ô)' [ 561.607878][T10469] loop1: detected capacity change from 0 to 2048 [ 561.628725][T10469] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 561.648723][ T7584] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 561.720796][T10475] loop3: detected capacity change from 0 to 2048 [ 561.734688][T10475] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 561.869184][ T7584] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 561.896881][T10483] loop3: detected capacity change from 0 to 128 [ 563.149149][T10236] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 570.452421][ T7537] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 570.500684][T10504] loop2: detected capacity change from 0 to 128 [ 570.565288][T10509] syzkaller0: entered promiscuous mode [ 570.566794][T10517] loop2: detected capacity change from 0 to 2048 [ 570.571141][T10509] syzkaller0: entered allmulticast mode [ 570.588317][ T29] kauditd_printk_skb: 40 callbacks suppressed [ 570.588336][ T29] audit: type=1326 audit(1858645427.209:1307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10514 comm="syz.0.1789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79f4e59e79 code=0x7fc00000 [ 570.620100][T10517] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 570.620176][T10517] ext4 filesystem being mounted at /29/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 570.626540][ T29] audit: type=1326 audit(1858645427.209:1308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10514 comm="syz.0.1789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f79f4e59e79 code=0x7fc00000 [ 570.705188][T10517] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: none. [ 570.708355][T10528] __nla_validate_parse: 7 callbacks suppressed [ 570.708374][T10528] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1792'. [ 570.754946][T10530] 9pnet_fd: Insufficient options for proto=fd [ 570.766879][ T9661] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 570.838023][T10535] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1794'. [ 570.870627][T10544] FAULT_INJECTION: forcing a failure. [ 570.870627][T10544] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 570.883783][T10544] CPU: 0 UID: 0 PID: 10544 Comm: syz.2.1797 Not tainted 6.11.0-rc4-syzkaller-00143-g3d5f968a177d #0 [ 570.894570][T10544] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 570.904874][T10544] Call Trace: [ 570.908266][T10544] [ 570.911199][T10544] dump_stack_lvl+0xf2/0x150 [ 570.915834][T10544] dump_stack+0x15/0x20 [ 570.920031][T10544] should_fail_ex+0x229/0x230 [ 570.924832][T10544] should_fail+0xb/0x10 [ 570.929021][T10544] should_fail_usercopy+0x1a/0x20 [ 570.934088][T10544] _copy_from_user+0x1e/0xd0 [ 570.938734][T10544] copy_from_sockptr_offset+0x6b/0xb0 [ 570.944161][T10544] do_ip6t_set_ctl+0x6a4/0x8c0 [ 570.948951][T10544] ? __rcu_read_unlock+0x4e/0x70 [ 570.953917][T10544] nf_setsockopt+0x195/0x1b0 [ 570.958552][T10544] ipv6_setsockopt+0x126/0x140 [ 570.963376][T10544] tcp_setsockopt+0x93/0xb0 [ 570.967942][T10544] sock_common_setsockopt+0x64/0x80 [ 570.973193][T10544] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 570.979119][T10544] __sys_setsockopt+0x1d8/0x250 [ 570.984075][T10544] __x64_sys_setsockopt+0x66/0x80 [ 570.989500][T10544] x64_sys_call+0x278d/0x2d60 [ 570.994204][T10544] do_syscall_64+0xc9/0x1c0 [ 570.998733][T10544] ? clear_bhb_loop+0x55/0xb0 [ 571.003447][T10544] ? clear_bhb_loop+0x55/0xb0 [ 571.008293][T10544] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 571.014217][T10544] RIP: 0033:0x7f7c93469e79 [ 571.018652][T10544] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 571.038293][T10544] RSP: 002b:00007f7c920e7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 571.046738][T10544] RAX: ffffffffffffffda RBX: 00007f7c93605f80 RCX: 00007f7c93469e79 [ 571.054741][T10544] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 571.062764][T10544] RBP: 00007f7c920e7090 R08: 00000000000014c8 R09: 0000000000000000 [ 571.071207][T10544] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000001 [ 571.079226][T10544] R13: 0000000000000000 R14: 00007f7c93605f80 R15: 00007ffdfdfc19c8 [ 571.087222][T10544] [ 571.161585][T10558] loop1: detected capacity change from 0 to 128 [ 571.175741][ T29] audit: type=1400 audit(1858645427.797:1309): avc: denied { getopt } for pid=10552 comm="syz.1.1800" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 571.247301][ T29] audit: type=1326 audit(1858645427.868:1310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10564 comm="syz.2.1803" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7c93469e79 code=0x0 [ 571.283934][T10568] loop1: detected capacity change from 0 to 2048 [ 571.300047][T10568] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 571.314593][T10568] ext4 filesystem being mounted at /247/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 571.329370][T10568] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: none. [ 571.340382][T10548] loop3: detected capacity change from 0 to 2048 [ 571.349221][T10548] EXT4-fs: Ignoring removed oldalloc option [ 571.353697][ T29] audit: type=1326 audit(1858645427.979:1311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10514 comm="syz.0.1789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79f4e59e79 code=0x7fc00000 [ 571.355234][T10548] EXT4-fs: Ignoring removed i_version option [ 571.378874][ T29] audit: type=1326 audit(1858645427.979:1312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10514 comm="syz.0.1789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79f4e59e79 code=0x7fc00000 [ 571.408444][ T29] audit: type=1326 audit(1858645427.979:1313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10514 comm="syz.0.1789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79f4e59e79 code=0x7fc00000 [ 571.432056][ T29] audit: type=1326 audit(1858645427.979:1314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10514 comm="syz.0.1789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79f4e59e79 code=0x7fc00000 [ 571.455663][ T29] audit: type=1326 audit(1858645427.979:1315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10514 comm="syz.0.1789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79f4e59e79 code=0x7fc00000 [ 571.479310][ T29] audit: type=1326 audit(1858645427.979:1316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10514 comm="syz.0.1789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79f4e59e79 code=0x7fc00000 [ 571.491866][T10548] EXT4-fs (loop3): bad geometry: first data block 0 is beyond end of filesystem (0) [ 571.520831][ T7537] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 571.648832][T10585] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1808'. [ 571.667804][T10587] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1807'. [ 571.686464][T10587] 9pnet_fd: Insufficient options for proto=fd [ 571.712852][T10589] loop4: detected capacity change from 0 to 128 [ 571.785876][ T3336] hid-generic 0000:0000:0000.001C: unknown main item tag 0x7 [ 571.793428][ T3336] hid-generic 0000:0000:0000.001C: ignoring exceeding usage max [ 571.805051][ T3336] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 571.815537][T10597] 9pnet_fd: Insufficient options for proto=fd [ 571.831699][ T3336] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 571.839260][ T3336] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 571.846795][ T3336] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 571.854286][ T3336] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 571.861828][ T3336] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 571.869238][ T3336] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 571.876677][ T3336] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 571.884348][ T3336] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 571.891990][ T3336] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 571.899395][ T3336] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 571.906832][ T3336] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 571.911973][T10599] FAULT_INJECTION: forcing a failure. [ 571.911973][T10599] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 571.914257][ T3336] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 571.927287][T10599] CPU: 1 UID: 0 PID: 10599 Comm: syz.0.1813 Not tainted 6.11.0-rc4-syzkaller-00143-g3d5f968a177d #0 [ 571.934829][ T3336] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 571.934853][ T3336] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 571.945668][T10599] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 571.945685][T10599] Call Trace: [ 571.945694][T10599] [ 571.945702][T10599] dump_stack_lvl+0xf2/0x150 [ 571.945741][T10599] dump_stack+0x15/0x20 [ 571.953124][ T3336] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 571.960456][T10599] should_fail_ex+0x229/0x230 [ 571.970544][ T3336] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 571.973808][T10599] should_fail+0xb/0x10 [ 571.976742][ T3336] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 571.981307][T10599] should_fail_usercopy+0x1a/0x20 [ 571.985522][ T3336] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 571.992879][T10599] _copy_from_user+0x1e/0xd0 [ 571.997772][ T3336] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 572.005369][T10599] do_ip6t_set_ctl+0x42c/0x8c0 [ 572.009574][ T3336] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 572.016907][T10599] nf_setsockopt+0x195/0x1b0 [ 572.058259][T10599] ipv6_setsockopt+0x126/0x140 [ 572.063108][T10599] rawv6_setsockopt+0x21e/0x410 [ 572.068120][T10599] sock_common_setsockopt+0x64/0x80 [ 572.073357][T10599] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 572.077818][T10602] netlink: 'syz.4.1811': attribute type 9 has an invalid length. [ 572.079300][T10599] __sys_setsockopt+0x1d8/0x250 [ 572.079335][T10599] __x64_sys_setsockopt+0x66/0x80 [ 572.079369][T10599] x64_sys_call+0x278d/0x2d60 [ 572.101648][T10599] do_syscall_64+0xc9/0x1c0 [ 572.106370][T10599] ? clear_bhb_loop+0x55/0xb0 [ 572.111063][T10599] ? clear_bhb_loop+0x55/0xb0 [ 572.115802][T10599] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 572.121835][T10599] RIP: 0033:0x7f79f4e59e79 [ 572.126260][T10599] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 572.145903][T10599] RSP: 002b:00007f79f3ad7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 572.154321][T10599] RAX: ffffffffffffffda RBX: 00007f79f4ff5f80 RCX: 00007f79f4e59e79 [ 572.162305][T10599] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000005 [ 572.170359][T10599] RBP: 00007f79f3ad7090 R08: 0000000000000560 R09: 0000000000000000 [ 572.178424][T10599] R10: 0000000020000340 R11: 0000000000000246 R12: 0000000000000001 [ 572.186411][T10599] R13: 0000000000000000 R14: 00007f79f4ff5f80 R15: 00007ffd3da04ab8 [ 572.194399][T10599] [ 572.211000][T10603] loop3: detected capacity change from 0 to 512 [ 572.238648][T10603] EXT4-fs (loop3): couldn't mount as ext2 due to feature incompatibilities [ 572.265122][ T3336] hid-generic 0000:0000:0000.001C: hidraw0: HID v0.00 Device [syz0] on syz0 [ 572.396016][T10617] team0 (unregistering): Port device team_slave_0 removed [ 572.433574][T10617] team0 (unregistering): Port device team_slave_1 removed [ 572.572617][T10640] netlink: 1320 bytes leftover after parsing attributes in process `syz.3.1826'. [ 572.650747][ T35] hid-generic 0000:0000:0000.001D: unknown main item tag 0x7 [ 572.658202][ T35] hid-generic 0000:0000:0000.001D: ignoring exceeding usage max [ 572.669785][ T35] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 572.677317][ T35] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 572.684780][ T35] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 572.692267][ T35] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 572.698362][T10648] netlink: 'syz.0.1829': attribute type 9 has an invalid length. [ 572.699690][ T35] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 572.714973][ T35] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 572.722682][ T35] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 572.730201][ T35] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 572.737603][ T35] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 572.745035][ T35] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 572.752557][ T35] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 572.759970][ T35] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 572.767375][ T35] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 572.774869][ T35] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 572.782300][ T35] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 572.789895][ T35] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 572.797285][ T35] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 572.804715][ T35] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 572.812155][ T35] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 572.819645][ T35] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 572.827024][ T35] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 572.839314][ T35] hid-generic 0000:0000:0000.001D: hidraw0: HID v0.00 Device [syz0] on syz0 [ 573.166141][T10674] loop2: detected capacity change from 0 to 164 [ 573.177640][T10674] IPv6: Can't replace route, no match found [ 573.237058][T10676] loop4: detected capacity change from 0 to 8192 [ 573.293193][T10676] loop4: p1 p2 p3 p4 [ 573.297406][T10676] loop4: p1 size 108922248 extends beyond EOD, truncated [ 573.305298][T10676] loop4: p2 start 861536256 is beyond EOD, truncated [ 573.312025][T10676] loop4: p3 start 851968 is beyond EOD, truncated [ 573.318535][T10676] loop4: p4 size 65536 extends beyond EOD, truncated [ 573.434053][T10693] netlink: 'syz.4.1845': attribute type 2 has an invalid length. [ 573.442164][T10693] netlink: 'syz.4.1845': attribute type 1 has an invalid length. [ 573.450314][T10693] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1845'. [ 573.518155][T10696] loop3: detected capacity change from 0 to 128 [ 574.062116][T10725] FAULT_INJECTION: forcing a failure. [ 574.062116][T10725] name failslab, interval 1, probability 0, space 0, times 0 [ 574.074892][T10725] CPU: 0 UID: 0 PID: 10725 Comm: syz.0.1855 Not tainted 6.11.0-rc4-syzkaller-00143-g3d5f968a177d #0 [ 574.085717][T10725] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 574.095827][T10725] Call Trace: [ 574.099120][T10725] [ 574.102242][T10725] dump_stack_lvl+0xf2/0x150 [ 574.106923][T10725] dump_stack+0x15/0x20 [ 574.111143][T10725] should_fail_ex+0x229/0x230 [ 574.115834][T10725] ? shmem_alloc_inode+0x34/0x50 [ 574.120826][T10725] should_failslab+0x8f/0xb0 [ 574.125435][T10725] kmem_cache_alloc_lru_noprof+0x51/0x2a0 [ 574.131258][T10725] shmem_alloc_inode+0x34/0x50 [ 574.136064][T10725] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 574.141537][T10725] alloc_inode+0x3c/0x160 [ 574.145897][T10725] new_inode+0x1e/0x100 [ 574.150169][T10725] shmem_get_inode+0x258/0x740 [ 574.155083][T10725] __shmem_file_setup+0x127/0x1f0 [ 574.160183][T10725] shmem_file_setup+0x3b/0x50 [ 574.164884][T10725] __se_sys_memfd_create+0x31d/0x600 [ 574.170365][T10725] __x64_sys_memfd_create+0x31/0x40 [ 574.175603][T10725] x64_sys_call+0x2891/0x2d60 [ 574.180368][T10725] do_syscall_64+0xc9/0x1c0 [ 574.184911][T10725] ? clear_bhb_loop+0x55/0xb0 [ 574.189704][T10725] ? clear_bhb_loop+0x55/0xb0 [ 574.194419][T10725] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 574.200391][T10725] RIP: 0033:0x7f79f4e59e79 [ 574.204830][T10725] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 574.224446][T10725] RSP: 002b:00007f79f3ad6d68 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 574.232916][T10725] RAX: ffffffffffffffda RBX: 000000000000105c RCX: 00007f79f4e59e79 [ 574.240910][T10725] RDX: 00007f79f3ad6dec RSI: 0000000000000000 RDI: 00007f79f4ec8131 [ 574.249081][T10725] RBP: 0000000020001080 R08: 00007f79f3ad6b07 R09: 0000000000000000 [ 574.257063][T10725] R10: 000000000000000a R11: 0000000000000202 R12: 0000000000000001 [ 574.265093][T10725] R13: 00007f79f3ad6dec R14: 00007f79f3ad6df0 R15: 00007ffd3da04ab8 [ 574.273088][T10725] [ 574.328823][T10733] netlink: 'syz.0.1857': attribute type 2 has an invalid length. [ 574.336700][T10733] netlink: 'syz.0.1857': attribute type 1 has an invalid length. [ 574.344514][T10733] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1857'. [ 574.456356][T10751] FAULT_INJECTION: forcing a failure. [ 574.456356][T10751] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 574.469582][T10751] CPU: 1 UID: 0 PID: 10751 Comm: syz.1.1863 Not tainted 6.11.0-rc4-syzkaller-00143-g3d5f968a177d #0 [ 574.480394][T10751] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 574.490598][T10751] Call Trace: [ 574.493917][T10751] [ 574.496859][T10751] dump_stack_lvl+0xf2/0x150 [ 574.501500][T10751] dump_stack+0x15/0x20 [ 574.505694][T10751] should_fail_ex+0x229/0x230 [ 574.510413][T10751] should_fail+0xb/0x10 [ 574.514641][T10751] should_fail_usercopy+0x1a/0x20 [ 574.519766][T10751] _copy_from_user+0x1e/0xd0 [ 574.524572][T10751] copy_msghdr_from_user+0x54/0x2a0 [ 574.529988][T10751] __sys_sendmsg+0x17d/0x280 [ 574.534717][T10751] __x64_sys_sendmsg+0x46/0x50 [ 574.539568][T10751] x64_sys_call+0x2689/0x2d60 [ 574.544337][T10751] do_syscall_64+0xc9/0x1c0 [ 574.548901][T10751] ? clear_bhb_loop+0x55/0xb0 [ 574.553642][T10751] ? clear_bhb_loop+0x55/0xb0 [ 574.558529][T10751] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 574.564543][T10751] RIP: 0033:0x7fab9c009e79 [ 574.568997][T10751] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 574.569025][T10751] RSP: 002b:00007fab9ac81038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 574.569050][T10751] RAX: ffffffffffffffda RBX: 00007fab9c1a5f80 RCX: 00007fab9c009e79 [ 574.569068][T10751] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000003 [ 574.569082][T10751] RBP: 00007fab9ac81090 R08: 0000000000000000 R09: 0000000000000000 [ 574.569095][T10751] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 574.569160][T10751] R13: 0000000000000000 R14: 00007fab9c1a5f80 R15: 00007ffe85b1bd48 [ 574.569177][T10751] [ 574.589604][T10762] FAULT_INJECTION: forcing a failure. [ 574.589604][T10762] name failslab, interval 1, probability 0, space 0, times 0 [ 574.654842][T10760] FAULT_INJECTION: forcing a failure. [ 574.654842][T10760] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 574.662133][T10762] CPU: 0 UID: 0 PID: 10762 Comm: syz.4.1868 Not tainted 6.11.0-rc4-syzkaller-00143-g3d5f968a177d #0 [ 574.686032][T10762] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 574.686048][T10762] Call Trace: [ 574.686057][T10762] [ 574.686130][T10762] dump_stack_lvl+0xf2/0x150 [ 574.686179][T10762] dump_stack+0x15/0x20 [ 574.686256][T10762] should_fail_ex+0x229/0x230 [ 574.686340][T10762] ? __anon_vma_prepare+0x73/0x310 [ 574.686367][T10762] should_failslab+0x8f/0xb0 [ 574.686441][T10762] kmem_cache_alloc_noprof+0x4c/0x290 [ 574.686549][T10762] __anon_vma_prepare+0x73/0x310 [ 574.686575][T10762] ? do_wp_page+0xf7d/0x22c0 [ 574.686600][T10762] do_wp_page+0xfc0/0x22c0 [ 574.686663][T10762] ? __rcu_read_lock+0x36/0x50 [ 574.686684][T10762] ? __rcu_read_lock+0x36/0x50 [ 574.686711][T10762] handle_mm_fault+0xbf0/0x2940 [ 574.686744][T10762] exc_page_fault+0x296/0x650 [ 574.686817][T10762] asm_exc_page_fault+0x26/0x30 [ 574.686847][T10762] RIP: 0010:__put_user_4+0x11/0x20 [ 574.686871][T10762] Code: 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <89> 01 31 c9 0f 01 ca c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 [ 574.686923][T10762] RSP: 0018:ffffc9000140fdb8 EFLAGS: 00050206 [ 574.686939][T10762] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000020000000 [ 574.686953][T10762] RDX: 0000000000000093 RSI: 0000000000000000 RDI: ffffc9000140fdf4 [ 574.686966][T10762] RBP: 0000000000000000 R08: 0001c9000140fdf7 R09: 0000000000000000 [ 574.686980][T10762] R10: 0001ffffffffffff R11: 0001c9000140fdf4 R12: 0000000020000000 [ 574.686993][T10762] R13: 0000000000000000 R14: ffff88811c03f800 R15: ffffc9000140fdf4 [ 574.687012][T10762] packet_getsockopt+0x5e8/0x6f0 [ 574.687153][T10762] do_sock_getsockopt+0x121/0x1a0 [ 574.687181][T10762] ? __pfx_packet_getsockopt+0x10/0x10 [ 574.687203][T10762] __sys_getsockopt+0x19a/0x210 [ 574.687266][T10762] __x64_sys_getsockopt+0x66/0x80 [ 574.687367][T10762] x64_sys_call+0x11cd/0x2d60 [ 574.687466][T10762] do_syscall_64+0xc9/0x1c0 [ 574.687505][T10762] ? clear_bhb_loop+0x55/0xb0 [ 574.687540][T10762] ? clear_bhb_loop+0x55/0xb0 [ 574.687610][T10762] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 574.687640][T10762] RIP: 0033:0x7f8894fe9e79 [ 574.687656][T10762] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 574.687675][T10762] RSP: 002b:00007f8893c61038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 574.687700][T10762] RAX: ffffffffffffffda RBX: 00007f8895185f80 RCX: 00007f8894fe9e79 [ 574.687757][T10762] RDX: 0000000000000017 RSI: 0000000000000107 RDI: 0000000000000003 [ 574.687770][T10762] RBP: 00007f8893c61090 R08: 0000000020000000 R09: 0000000000000000 [ 574.687784][T10762] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 574.687814][T10762] R13: 0000000000000000 R14: 00007f8895185f80 R15: 00007fffa09d8fb8 [ 574.687831][T10762] [ 574.687840][T10760] CPU: 1 UID: 0 PID: 10760 Comm: syz.0.1867 Not tainted 6.11.0-rc4-syzkaller-00143-g3d5f968a177d #0 [ 574.687872][T10760] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 574.687885][T10760] Call Trace: [ 574.687893][T10760] [ 574.687900][T10760] dump_stack_lvl+0xf2/0x150 [ 574.688018][T10760] dump_stack+0x15/0x20 [ 574.688062][T10760] should_fail_ex+0x229/0x230 [ 574.688098][T10760] should_fail+0xb/0x10 [ 574.688130][T10760] should_fail_usercopy+0x1a/0x20 [ 574.688218][T10760] _copy_from_user+0x1e/0xd0 [ 574.688252][T10760] copy_msghdr_from_user+0x54/0x2a0 [ 574.688294][T10760] do_recvmmsg+0x290/0x720 [ 574.688350][T10760] __x64_sys_recvmmsg+0xe2/0x170 [ 574.688383][T10760] x64_sys_call+0x26e3/0x2d60 [ 574.688432][T10760] do_syscall_64+0xc9/0x1c0 [ 574.688474][T10760] ? clear_bhb_loop+0x55/0xb0 [ 574.688502][T10760] ? clear_bhb_loop+0x55/0xb0 [ 574.688566][T10760] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 574.688659][T10760] RIP: 0033:0x7f79f4e59e79 [ 574.688684][T10760] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 574.688708][T10760] RSP: 002b:00007f79f3ad7038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 574.688730][T10760] RAX: ffffffffffffffda RBX: 00007f79f4ff5f80 RCX: 00007f79f4e59e79 [ 574.688745][T10760] RDX: 0400000000000284 RSI: 0000000020000040 RDI: 0000000000000003 [ 574.688763][T10760] RBP: 00007f79f3ad7090 R08: 0000000000000000 R09: 0000000000000000 [ 574.688779][T10760] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000002 [ 574.688794][T10760] R13: 0000000000000000 R14: 00007f79f4ff5f80 R15: 00007ffd3da04ab8 [ 574.688871][T10760] [ 574.729594][T10770] netlink: 'syz.4.1871': attribute type 2 has an invalid length. [ 574.875473][T10780] FAULT_INJECTION: forcing a failure. [ 574.875473][T10780] name failslab, interval 1, probability 0, space 0, times 0 [ 574.878503][T10770] netlink: 'syz.4.1871': attribute type 1 has an invalid length. [ 574.883507][T10780] CPU: 0 UID: 0 PID: 10780 Comm: syz.2.1873 Not tainted 6.11.0-rc4-syzkaller-00143-g3d5f968a177d #0 [ 574.888464][T10770] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1871'. [ 574.892731][T10780] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 574.892749][T10780] Call Trace: [ 574.892758][T10780] [ 574.892766][T10780] dump_stack_lvl+0xf2/0x150 [ 575.221274][T10780] dump_stack+0x15/0x20 [ 575.221316][T10780] should_fail_ex+0x229/0x230 [ 575.221350][T10780] ? __alloc_skb+0x10b/0x310 [ 575.221405][T10780] should_failslab+0x8f/0xb0 [ 575.221439][T10780] kmem_cache_alloc_node_noprof+0x51/0x2b0 [ 575.221530][T10780] __alloc_skb+0x10b/0x310 [ 575.221554][T10780] alloc_skb_with_frags+0x7f/0x400 [ 575.221578][T10780] ? mntput_no_expire+0x70/0x3c0 [ 575.221617][T10780] ? __rcu_read_unlock+0x4e/0x70 [ 575.221638][T10780] ? avc_has_perm_noaudit+0x1cc/0x210 [ 575.221736][T10780] sock_alloc_send_pskb+0x435/0x4f0 [ 575.221777][T10780] ? __rcu_read_unlock+0x4e/0x70 [ 575.221799][T10780] raw_sendmsg+0x15c/0x940 [ 575.221857][T10780] ? __pfx_raw_sendmsg+0x10/0x10 [ 575.221888][T10780] __sock_sendmsg+0x140/0x180 [ 575.221927][T10780] sock_write_iter+0x164/0x1b0 [ 575.221963][T10780] vfs_write+0x78f/0x900 [ 575.222033][T10780] ? __pfx_sock_write_iter+0x10/0x10 [ 575.222069][T10780] ksys_write+0xeb/0x1b0 [ 575.222169][T10780] __x64_sys_write+0x42/0x50 [ 575.222267][T10780] x64_sys_call+0x27dd/0x2d60 [ 575.222296][T10780] do_syscall_64+0xc9/0x1c0 [ 575.222343][T10780] ? clear_bhb_loop+0x55/0xb0 [ 575.222476][T10780] ? clear_bhb_loop+0x55/0xb0 [ 575.222506][T10780] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 575.222599][T10780] RIP: 0033:0x7f7c93469e79 [ 575.222616][T10780] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 575.222636][T10780] RSP: 002b:00007f7c920e7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 575.222656][T10780] RAX: ffffffffffffffda RBX: 00007f7c93605f80 RCX: 00007f7c93469e79 [ 575.222679][T10780] RDX: 0000000000000010 RSI: 0000000020000100 RDI: 0000000000000003 [ 575.222693][T10780] RBP: 00007f7c920e7090 R08: 0000000000000000 R09: 0000000000000000 [ 575.222707][T10780] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 575.222770][T10780] R13: 0000000000000000 R14: 00007f7c93605f80 R15: 00007ffdfdfc19c8 [ 575.222788][T10780] [ 575.286853][T10785] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1875'. [ 575.356216][T10791] pim6reg: entered allmulticast mode [ 575.447290][T10802] futex_wake_op: syz.2.1879 tries to shift op by -1; fix this program [ 575.452231][T10795] netlink: 'syz.2.1879': attribute type 3 has an invalid length. [ 575.461865][T10802] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1879'. [ 575.466875][T10791] pim6reg: left allmulticast mode [ 575.606125][T10812] netlink: 'syz.1.1884': attribute type 2 has an invalid length. [ 575.737540][T10829] loop1: detected capacity change from 0 to 2048 [ 575.748832][T10829] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 575.761686][T10829] ext4 filesystem being mounted at /267/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 575.776069][T10829] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: none. [ 575.788984][T10834] __nla_validate_parse: 1 callbacks suppressed [ 575.789003][T10834] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1892'. [ 575.804777][ T7537] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 575.818289][ T29] kauditd_printk_skb: 122 callbacks suppressed [ 575.818305][ T29] audit: type=1326 audit(1858645432.500:1439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10826 comm="syz.2.1890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c93469e79 code=0x7fc00000 [ 575.877733][ T29] audit: type=1326 audit(1858645432.561:1440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10826 comm="syz.2.1890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f7c93469e79 code=0x7fc00000 [ 575.902138][T10844] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10844 comm=syz.4.1892 [ 575.917314][ T29] audit: type=1400 audit(1858645432.601:1441): avc: denied { read } for pid=10833 comm="syz.4.1892" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 575.960234][T10848] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1896'. [ 575.988540][T10850] loop1: detected capacity change from 0 to 512 [ 575.995516][T10850] EXT4-fs: mb_optimize_scan should be set to 0 or 1. [ 576.283282][T10869] loop3: detected capacity change from 0 to 512 [ 576.293883][T10869] EXT4-fs error (device loop3): ext4_quota_enable:7022: inode #4: comm syz.3.1903: iget: special inode unallocated [ 576.306451][T10869] EXT4-fs error (device loop3): ext4_quota_enable:7025: comm syz.3.1903: Bad quota inode: 4, type: 1 [ 576.319880][T10869] EXT4-fs warning (device loop3): ext4_enable_quotas:7066: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 576.334788][T10869] EXT4-fs (loop3): mount failed [ 576.484730][T10882] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1907'. [ 576.533085][T10886] FAULT_INJECTION: forcing a failure. [ 576.533085][T10886] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 576.546530][T10886] CPU: 1 UID: 0 PID: 10886 Comm: syz.0.1909 Not tainted 6.11.0-rc4-syzkaller-00143-g3d5f968a177d #0 [ 576.557324][T10886] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 576.567452][T10886] Call Trace: [ 576.570746][T10886] [ 576.573684][T10886] dump_stack_lvl+0xf2/0x150 [ 576.578386][T10886] dump_stack+0x15/0x20 [ 576.582570][T10886] should_fail_ex+0x229/0x230 [ 576.587323][T10886] should_fail_alloc_page+0xfd/0x110 [ 576.592698][T10886] __alloc_pages_noprof+0x109/0x360 [ 576.598128][T10886] alloc_pages_mpol_noprof+0xb1/0x1e0 [ 576.603530][T10886] alloc_pages_noprof+0xe1/0x100 [ 576.608573][T10886] pte_alloc_one+0x32/0xf0 [ 576.613051][T10886] __pte_alloc+0x33/0x270 [ 576.617388][T10886] handle_mm_fault+0x19e3/0x2940 [ 576.622422][T10886] exc_page_fault+0x296/0x650 [ 576.627153][T10886] asm_exc_page_fault+0x26/0x30 [ 576.632020][T10886] RIP: 0010:__get_user_4+0x11/0x20 [ 576.637150][T10886] Code: 01 ca c3 cc cc cc cc 66 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 89 c2 48 c1 fa 3f 48 09 d0 0f 01 cb <8b> 10 31 c0 0f 01 ca c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 [ 576.656810][T10886] RSP: 0018:ffffc9000144fdb8 EFLAGS: 00050206 [ 576.662881][T10886] RAX: 0000000020000000 RBX: ffff888114291a00 RCX: 0000000000000000 [ 576.670860][T10886] RDX: 0000000000000000 RSI: 0000000000000107 RDI: 0000000000000107 [ 576.678837][T10886] RBP: 0000000000000107 R08: ffffffff848d02b2 R09: 0000000000000000 [ 576.686878][T10886] R10: ffffc9000144fdd0 R11: 0001c9000144fdf4 R12: 0000000020000000 [ 576.694888][T10886] R13: 0000000000000017 R14: ffff88810f427000 R15: 0000000000000017 [ 576.703051][T10886] ? packet_getsockopt+0x82/0x6f0 [ 576.708102][T10886] packet_getsockopt+0x92/0x6f0 [ 576.713165][T10886] do_sock_getsockopt+0x121/0x1a0 [ 576.718215][T10886] ? __pfx_packet_getsockopt+0x10/0x10 [ 576.723735][T10886] __sys_getsockopt+0x19a/0x210 [ 576.728697][T10886] __x64_sys_getsockopt+0x66/0x80 [ 576.733737][T10886] x64_sys_call+0x11cd/0x2d60 [ 576.738523][T10886] do_syscall_64+0xc9/0x1c0 [ 576.743072][T10886] ? clear_bhb_loop+0x55/0xb0 [ 576.747832][T10886] ? clear_bhb_loop+0x55/0xb0 [ 576.752569][T10886] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 576.758495][T10886] RIP: 0033:0x7f79f4e59e79 [ 576.762975][T10886] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 576.782723][T10886] RSP: 002b:00007f79f3ad7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 576.791241][T10886] RAX: ffffffffffffffda RBX: 00007f79f4ff5f80 RCX: 00007f79f4e59e79 [ 576.799219][T10886] RDX: 0000000000000017 RSI: 0000000000000107 RDI: 0000000000000003 [ 576.807198][T10886] RBP: 00007f79f3ad7090 R08: 0000000020000000 R09: 0000000000000000 [ 576.815249][T10886] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 576.823315][T10886] R13: 0000000000000000 R14: 00007f79f4ff5f80 R15: 00007ffd3da04ab8 [ 576.831359][T10886] [ 576.839690][ T29] audit: type=1326 audit(1858645433.237:1442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10826 comm="syz.2.1890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c93469e79 code=0x7fc00000 [ 576.920561][T10898] loop1: detected capacity change from 0 to 512 [ 576.953808][T10902] loop2: detected capacity change from 0 to 2048 [ 576.954176][T10898] EXT4-fs error (device loop1): ext4_quota_enable:7022: inode #4: comm syz.1.1915: iget: special inode unallocated [ 576.975121][T10898] EXT4-fs error (device loop1): ext4_quota_enable:7025: comm syz.1.1915: Bad quota inode: 4, type: 1 [ 576.977238][T10902] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 576.991503][T10898] EXT4-fs warning (device loop1): ext4_enable_quotas:7066: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 576.999337][T10902] ext4 filesystem being mounted at /51/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 577.024929][T10898] EXT4-fs (loop1): mount failed [ 577.058195][T10902] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: none. [ 577.081799][ T9661] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 577.089151][T10911] loop4: detected capacity change from 0 to 2048 [ 577.119881][T10914] validate_nla: 5 callbacks suppressed [ 577.119980][T10914] netlink: 'syz.1.1920': attribute type 2 has an invalid length. [ 577.135607][T10914] netlink: 'syz.1.1920': attribute type 1 has an invalid length. [ 577.143356][T10914] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1920'. [ 577.161400][ T3336] hid-generic 0000:0000:0000.001E: unknown main item tag 0x7 [ 577.169378][ T3336] hid-generic 0000:0000:0000.001E: ignoring exceeding usage max [ 577.179616][T10918] FAULT_INJECTION: forcing a failure. [ 577.179616][T10918] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 577.182438][ T3336] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 577.192787][T10918] CPU: 1 UID: 0 PID: 10918 Comm: syz.2.1919 Not tainted 6.11.0-rc4-syzkaller-00143-g3d5f968a177d #0 [ 577.192820][T10918] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 577.192835][T10918] Call Trace: [ 577.192844][T10918] [ 577.192853][T10918] dump_stack_lvl+0xf2/0x150 [ 577.192898][T10918] dump_stack+0x15/0x20 [ 577.193001][T10918] should_fail_ex+0x229/0x230 [ 577.193042][T10918] should_fail+0xb/0x10 [ 577.193132][T10918] should_fail_usercopy+0x1a/0x20 [ 577.193169][T10918] _copy_from_user+0x1e/0xd0 [ 577.193200][T10918] copy_msghdr_from_user+0x54/0x2a0 [ 577.211199][ T3336] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 577.211404][T10918] __sys_sendmsg+0x17d/0x280 [ 577.221537][ T3336] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 577.224814][T10918] __x64_sys_sendmsg+0x46/0x50 [ 577.224851][T10918] x64_sys_call+0x2689/0x2d60 [ 577.224923][T10918] do_syscall_64+0xc9/0x1c0 [ 577.224963][T10918] ? clear_bhb_loop+0x55/0xb0 [ 577.224995][T10918] ? clear_bhb_loop+0x55/0xb0 [ 577.225073][T10918] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 577.228061][ T3336] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 577.232777][T10918] RIP: 0033:0x7f7c93469e79 [ 577.232799][T10918] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 577.232824][T10918] RSP: 002b:00007f7c920e7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 577.237189][ T3336] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 577.241671][T10918] RAX: ffffffffffffffda RBX: 00007f7c93605f80 RCX: 00007f7c93469e79 [ 577.241691][T10918] RDX: 0000000000000000 RSI: 0000000020000180 RDI: 0000000000000008 [ 577.246084][ T3336] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 577.250860][T10918] RBP: 00007f7c920e7090 R08: 0000000000000000 R09: 0000000000000000 [ 577.250878][T10918] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 577.250894][T10918] R13: 0000000000000000 R14: 00007f7c93605f80 R15: 00007ffdfdfc19c8 [ 577.255779][ T3336] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 577.260683][T10918] [ 577.298105][T10919] netlink: 'syz.4.1921': attribute type 9 has an invalid length. [ 577.300133][ T3336] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 577.435658][ T3336] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 577.443173][ T3336] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 577.450902][ T3336] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 577.458348][ T3336] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 577.466248][ T3336] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 577.473932][ T3336] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 577.481642][ T3336] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 577.489156][ T3336] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 577.496903][ T3336] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 577.504379][ T3336] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 577.512071][ T3336] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 577.519651][ T3336] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 577.527297][ T3336] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 577.537992][ T3336] hid-generic 0000:0000:0000.001E: hidraw0: HID v0.00 Device [syz0] on syz0 [ 577.559838][ T29] audit: type=1326 audit(1858645434.236:1443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10922 comm="syz.1.1922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab9c009e79 code=0x7fc00000 [ 577.601314][ T29] audit: type=1326 audit(1858645434.297:1444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10922 comm="syz.1.1922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fab9c009e79 code=0x7fc00000 [ 578.259919][ T29] audit: type=1326 audit(1858645434.962:1445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10922 comm="syz.1.1922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab9c009e79 code=0x7fc00000 [ 578.303174][T10946] netlink: 'syz.1.1930': attribute type 12 has an invalid length. [ 578.311186][T10946] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1930'. [ 578.394361][T10949] loop1: detected capacity change from 0 to 2048 [ 578.401524][T10949] EXT4-fs: Ignoring removed orlov option [ 578.407358][T10949] EXT4-fs: Ignoring removed nobh option [ 578.415437][T10949] ext2: Unknown parameter 'permit_directio' [ 578.566651][T10952] loop4: detected capacity change from 0 to 512 [ 578.633193][T10953] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=36 sclass=netlink_tcpdiag_socket pid=10953 comm=syz.1.1931 [ 578.963749][T10955] netlink: 'syz.4.1933': attribute type 2 has an invalid length. [ 578.971820][T10955] netlink: 'syz.4.1933': attribute type 1 has an invalid length. [ 578.979599][T10955] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1933'. [ 579.047773][T10959] openvswitch: netlink: Message has 1 unknown bytes. [ 579.061983][T10959] vcan0: entered promiscuous mode [ 579.067159][T10959] vlan3: entered promiscuous mode [ 579.074205][T10959] vcan0: left promiscuous mode [ 579.188679][T10961] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1936'. [ 579.200073][T10961] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1936'. [ 579.438278][ T29] audit: type=1326 audit(1858645436.152:1446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10970 comm="syz.0.1940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79f4e59e79 code=0x7fc00000 [ 579.488517][ T29] audit: type=1326 audit(1858645436.202:1447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10970 comm="syz.0.1940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f79f4e59e79 code=0x7fc00000 [ 580.132866][T10984] loop4: detected capacity change from 0 to 512 [ 580.164132][ T29] audit: type=1326 audit(1858645436.877:1448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10970 comm="syz.0.1940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79f4e59e79 code=0x7fc00000 [ 580.197454][T10989] netlink: 'syz.1.1945': attribute type 2 has an invalid length. [ 580.200375][T10990] FAULT_INJECTION: forcing a failure. [ 580.200375][T10990] name failslab, interval 1, probability 0, space 0, times 0 [ 580.205258][T10989] netlink: 'syz.1.1945': attribute type 1 has an invalid length. [ 580.218061][T10990] CPU: 1 UID: 0 PID: 10990 Comm: syz.4.1946 Not tainted 6.11.0-rc4-syzkaller-00143-g3d5f968a177d #0 [ 580.225763][T10989] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1945'. [ 580.236484][T10990] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 580.236504][T10990] Call Trace: [ 580.236514][T10990] [ 580.261908][T10990] dump_stack_lvl+0xf2/0x150 [ 580.266545][T10990] dump_stack+0x15/0x20 [ 580.270798][T10990] should_fail_ex+0x229/0x230 [ 580.275562][T10990] ? __alloc_skb+0x10b/0x310 [ 580.280172][T10990] should_failslab+0x8f/0xb0 [ 580.284793][T10990] kmem_cache_alloc_node_noprof+0x51/0x2b0 [ 580.290711][T10990] __alloc_skb+0x10b/0x310 [ 580.295161][T10990] _sctp_make_chunk+0x53/0x210 [ 580.300018][T10990] sctp_make_datafrag_empty+0x6f/0x1e0 [ 580.305507][T10990] ? __zone_watermark_ok+0x60/0x100 [ 580.310773][T10990] sctp_datamsg_from_user+0x548/0x930 [ 580.316247][T10990] ? sctp_primitive_ASSOCIATE+0x72/0x90 [ 580.321922][T10990] sctp_sendmsg_to_asoc+0x959/0xbe0 [ 580.324143][T10997] FAULT_INJECTION: forcing a failure. [ 580.324143][T10997] name failslab, interval 1, probability 0, space 0, times 0 [ 580.327144][T10990] sctp_sendmsg+0x136f/0x1920 [ 580.344427][T10990] ? __pfx_sctp_sendmsg+0x10/0x10 [ 580.349526][T10990] inet_sendmsg+0xc5/0xd0 [ 580.353911][T10990] __sock_sendmsg+0x102/0x180 [ 580.358665][T10990] ____sys_sendmsg+0x312/0x410 [ 580.363570][T10990] __sys_sendmmsg+0x269/0x500 [ 580.368445][T10990] __x64_sys_sendmmsg+0x57/0x70 [ 580.373407][T10990] x64_sys_call+0xa49/0x2d60 [ 580.378017][T10990] do_syscall_64+0xc9/0x1c0 [ 580.382614][T10990] ? clear_bhb_loop+0x55/0xb0 [ 580.387308][T10990] ? clear_bhb_loop+0x55/0xb0 [ 580.392071][T10990] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 580.398096][T10990] RIP: 0033:0x7f8894fe9e79 [ 580.402581][T10990] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 580.422199][T10990] RSP: 002b:00007f8893c61038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 580.430759][T10990] RAX: ffffffffffffffda RBX: 00007f8895185f80 RCX: 00007f8894fe9e79 [ 580.438814][T10990] RDX: 0000000000000002 RSI: 0000000020000040 RDI: 0000000000000003 [ 580.446790][T10990] RBP: 00007f8893c61090 R08: 0000000000000000 R09: 0000000000000000 [ 580.454784][T10990] R10: 0000000004008040 R11: 0000000000000246 R12: 0000000000000002 [ 580.462760][T10990] R13: 0000000000000000 R14: 00007f8895185f80 R15: 00007fffa09d8fb8 [ 580.470745][T10990] [ 580.473834][T10997] CPU: 0 UID: 0 PID: 10997 Comm: syz.3.1949 Not tainted 6.11.0-rc4-syzkaller-00143-g3d5f968a177d #0 [ 580.484626][T10997] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 580.494687][T10997] Call Trace: [ 580.497965][T10997] [ 580.500958][T10997] dump_stack_lvl+0xf2/0x150 [ 580.505572][T10997] dump_stack+0x15/0x20 [ 580.509747][T10997] should_fail_ex+0x229/0x230 [ 580.514505][T10997] ? genl_family_rcv_msg_attrs_parse+0x75/0x1a0 [ 580.520813][T10997] should_failslab+0x8f/0xb0 [ 580.525489][T10997] __kmalloc_noprof+0xa5/0x370 [ 580.530320][T10997] genl_family_rcv_msg_attrs_parse+0x75/0x1a0 [ 580.536423][T10997] ? ns_capable+0x7d/0xb0 [ 580.540769][T10997] genl_rcv_msg+0x470/0x6c0 [ 580.545292][T10997] ? __pfx_nl802154_pre_doit+0x10/0x10 [ 580.550784][T10997] ? __pfx_nl802154_set_llsec_params+0x10/0x10 [ 580.556977][T10997] ? __pfx_nl802154_post_doit+0x10/0x10 [ 580.562664][T10997] ? __rcu_read_unlock+0x4e/0x70 [ 580.567872][T10997] ? avc_has_perm_noaudit+0x1cc/0x210 [ 580.573344][T10997] netlink_rcv_skb+0x12c/0x230 [ 580.578120][T10997] ? __pfx_genl_rcv_msg+0x10/0x10 [ 580.583185][T10997] genl_rcv+0x28/0x40 [ 580.587255][T10997] netlink_unicast+0x599/0x670 [ 580.592031][T10997] netlink_sendmsg+0x5cc/0x6e0 [ 580.596835][T10997] ? __pfx_netlink_sendmsg+0x10/0x10 [ 580.602172][T10997] __sock_sendmsg+0x140/0x180 [ 580.606889][T10997] ____sys_sendmsg+0x312/0x410 [ 580.611846][T10997] __sys_sendmsg+0x1e9/0x280 [ 580.616482][T10997] __x64_sys_sendmsg+0x46/0x50 [ 580.621424][T10997] x64_sys_call+0x2689/0x2d60 [ 580.626127][T10997] do_syscall_64+0xc9/0x1c0 [ 580.630708][T10997] ? clear_bhb_loop+0x55/0xb0 [ 580.635429][T10997] ? clear_bhb_loop+0x55/0xb0 [ 580.640254][T10997] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 580.646165][T10997] RIP: 0033:0x7f79f19c9e79 [ 580.650600][T10997] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 580.670370][T10997] RSP: 002b:00007f79f0641038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 580.678811][T10997] RAX: ffffffffffffffda RBX: 00007f79f1b65f80 RCX: 00007f79f19c9e79 [ 580.686857][T10997] RDX: 0000000000000000 RSI: 0000000020000ec0 RDI: 0000000000000004 [ 580.694904][T10997] RBP: 00007f79f0641090 R08: 0000000000000000 R09: 0000000000000000 [ 580.702879][T10997] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 580.710886][T10997] R13: 0000000000000000 R14: 00007f79f1b65f80 R15: 00007fff6b4d6bf8 [ 580.718931][T10997] [ 580.842799][T11003] team0 (unregistering): Port device team_slave_0 removed [ 580.919873][T11007] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=36 sclass=netlink_tcpdiag_socket pid=11007 comm=syz.0.1947 [ 581.265185][T11011] openvswitch: netlink: Message has 1 unknown bytes. [ 581.275405][T11003] team0 (unregistering): Port device team_slave_1 removed [ 581.292654][T11011] vcan0: entered promiscuous mode [ 581.297797][T11011] vlan2: entered promiscuous mode [ 581.304227][T11011] vcan0: left promiscuous mode [ 581.316690][ T29] audit: type=1326 audit(1858645438.045:1449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11009 comm="syz.4.1954" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8894fe9e79 code=0x0 [ 581.367053][ T29] audit: type=1326 audit(1858645438.086:1450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11009 comm="syz.4.1954" exe="/root/syz-executor" sig=31 arch=c000003e syscall=436 compat=0 ip=0x7f8894fe9e79 code=0x0 [ 581.437223][T11023] netlink: 'syz.3.1958': attribute type 2 has an invalid length. [ 581.445175][T11023] netlink: 'syz.3.1958': attribute type 1 has an invalid length. [ 581.453047][T11023] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1958'. [ 582.110345][T11040] loop1: detected capacity change from 0 to 512 [ 582.127928][T11040] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 582.140785][T11040] ext4 filesystem being mounted at /286/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 582.159144][ T29] audit: type=1400 audit(1858645438.891:1451): avc: denied { append } for pid=11039 comm="syz.1.1964" name="file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 582.161140][T11040] Process accounting resumed [ 582.188772][T11040] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 582.211852][ T7537] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 582.227375][T11045] loop2: detected capacity change from 0 to 1024 [ 582.234014][T11045] EXT4-fs: Ignoring removed orlov option [ 582.239828][T11045] EXT4-fs: Ignoring removed nomblk_io_submit option [ 582.253781][T11048] ================================================================== [ 582.261892][T11048] BUG: KCSAN: data-race in mas_wr_modify / mtree_range_walk [ 582.269182][T11048] [ 582.271498][T11048] write to 0xffff8881044a3560 of 8 bytes by task 11046 on cpu 0: [ 582.279208][T11048] mas_wr_modify+0x155c/0x3c90 [ 582.283986][T11048] mas_wr_store_entry+0x250/0x390 [ 582.289111][T11048] mas_store_prealloc+0x151/0x2b0 [ 582.294140][T11048] vma_expand+0x57f/0x660 [ 582.297756][T11045] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 582.298462][T11048] mmap_region+0x80c/0x1620 [ 582.298487][T11048] do_mmap+0x72a/0xb70 [ 582.319109][T11048] vm_mmap_pgoff+0x133/0x290 [ 582.323714][T11048] ksys_mmap_pgoff+0xd0/0x340 [ 582.328392][T11048] x64_sys_call+0x1884/0x2d60 [ 582.333075][T11048] do_syscall_64+0xc9/0x1c0 [ 582.337589][T11048] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 582.343602][T11048] [ 582.345932][T11048] read to 0xffff8881044a3560 of 8 bytes by task 11048 on cpu 1: [ 582.353574][T11048] mtree_range_walk+0x1b4/0x460 [ 582.358425][T11048] mas_walk+0x16e/0x320 [ 582.362669][T11048] lock_vma_under_rcu+0x84/0x260 [ 582.367710][T11048] exc_page_fault+0x150/0x650 [ 582.372426][T11048] asm_exc_page_fault+0x26/0x30 [ 582.377281][T11048] [ 582.379609][T11048] value changed: 0x00007fab927fdfff -> 0x00007fab927dcfff [ 582.386804][T11048] [ 582.389124][T11048] Reported by Kernel Concurrency Sanitizer on: [ 582.395525][T11048] CPU: 1 UID: 0 PID: 11048 Comm: syz.1.1966 Not tainted 6.11.0-rc4-syzkaller-00143-g3d5f968a177d #0 [ 582.406384][T11048] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 582.416525][T11048] ================================================================== [ 582.440037][ T9661] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.