last executing test programs: 5.183426323s ago: executing program 4 (id=821): r0 = socket$inet(0x2, 0x4000000805, 0x0) sendmmsg(r0, &(0x7f0000000e40)=[{{&(0x7f00000001c0)=@l2tp={0x2, 0x0, @local}, 0x80, &(0x7f0000000300)=[{&(0x7f00000000c0)="ae", 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[{0x10, 0x84, 0x5}], 0x10}}], 0x2, 0x0) (fail_nth: 62) 4.944125453s ago: executing program 4 (id=825): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) (async, rerun: 64) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a30000000160a00000000000000000000000000000900020030000000000900010073797a30000000000400038014"], 0x58}}, 0x0) (async, rerun: 64) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r2 = dup2(r0, r1) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, @perf_bp={&(0x7f0000000080)}, 0x402, 0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (async, rerun: 64) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) (rerun: 64) write$P9_RGETLOCK(r2, &(0x7f0000000140)=ANY=[], 0x2c) (async, rerun: 32) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) (async, rerun: 32) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r5, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000300)=ANY=[@ANYBLOB="d097983b5398436273b18d0a45d04fdca2313501c8d07fc6c889aa6055e72ca6c48220881f60f756b4d5832471036017fd76367122d856ee35cb3d04cc0634445ceb55d7cd936bac23391e9f96f8fea25629a59eba3ec14ee4d36adde2ae62010000000c1b07944e21502bb162705b791f2f7fa603fd2a7da9fc2106c7f0d987f3874ccdc44f602840f27e53804a14130fd5bee194f81766327f933da428edc75827713b6a2097a09463b4258de778b280bd0d52dfa921aaab8ead11465c8666baed6be0af5ae6d5a291fa0284d176687ff708ba60a11e3ab8ac7b1681a64e61ebe6", @ANYRES16=r6, @ANYBLOB="010000000000000000001e00000004002f800c0006000100000001000000"], 0x24}}, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}}, 0x0, 0x0, 0x35, 0x0, "317f83735b4bb1eadc74dde27798c831eec04c24eeec7ff3d3137a508003d2d5c89ab0220cefebd4687636457b9822766c1bfea4e01ff23c6a4caeaf049a572a9774d3b882eb3b4a66c5ec48c29f065d"}, 0xd8) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f00000000c0)=@gcm_256={{}, '\x00', "5171bb672965593497418688ac68cb126474cd3660dab9e2086e246728d7a040", "05e2e505", "12000700"}, 0x38) (async, rerun: 64) setsockopt$inet6_tcp_int(r4, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) (rerun: 64) connect$inet6(r4, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000080)={'\x00', 0x8411}) (async) ioctl$TUNSETOFFLOAD(r7, 0x400454c9, 0x9) ioctl$TUNATTACHFILTER(r7, 0x401054d5, 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x12, r3, 0x0) 4.832902342s ago: executing program 2 (id=830): r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000001c0)={'syztnl1\x00', &(0x7f0000000180)={'sit0\x00', 0x0, 0x8000, 0x1, 0x7fff, 0x8, {{0x6, 0x4, 0x0, 0x19, 0x18, 0x66, 0x0, 0x9, 0x6, 0x0, @empty, @local, {[@end]}}}}}) r2 = socket$isdn(0x22, 0x2, 0x24) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x40, 0x0) r4 = dup2(r3, r2) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x89901) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x91, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_setup(0x1d64, &(0x7f00000009c0)={0x0, 0x94f4, 0x80, 0x3, 0x80000, 0x0, r3}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000280)={0x77359400}, &(0x7f0000048000), 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) epoll_pwait2(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000300)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000240), &(0x7f00000002c0)='%pK \x00'}, 0x20) r7 = bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000440)={{0xffffffffffffffff, 0xffffffffffffffff}, 0x0, 0x0}, 0x20) r9 = openat2(0xffffffffffffffff, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)={0x0, 0x2, 0x1}, 0x18) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000068c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x4}, 0x48) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000700)='freezer.self_freezing\x00', 0x275a, 0x0) write$binfmt_script(r11, &(0x7f0000000040), 0x208e24b) r12 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r12, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x2, @dev}, 0x10) sendfile(r12, r11, 0x0, 0xffefffff) r13 = syz_open_dev$tty1(0xc, 0x4, 0x1) r14 = dup(r13) accept$inet6(r4, &(0x7f0000006b80)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000006bc0)=0x1c) write$UHID_INPUT(r14, &(0x7f0000002080)={0xf, {"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", 0x104d}}, 0x1006) bpf$PROG_LOAD(0x5, &(0x7f0000006980)={0x1, 0xa, &(0x7f0000006a40)=ANY=[@ANYBLOB="6422eeffffffffff181100003dec4d206977849d319d3c659d6a4bcb37978bdc4eaa47a1f5fa20737d6f808b29af39e7e1fb10839af84dae3b8f6eb045fc9c480ee26f753e6eafe2a4edaea7fa3b2ecef4d1967dba1af1a13a9d00b51f5529a1c2f909c6c897a3af2bde0118d2f04897c50131f6eae2c8ecbe04f6fcef40c7cf89a1fc64c56bca6647f146885f65cd2b67982aa9f9036e2a62962c26c5e3510504d8cfc877b3c390e2338d9ea71beae05f46bf3bb238a44e98e9dc0dcf677b556d8bf89217cfafefd87e8afeef4d21771ba5f1c418d33f7194eef4742ceb55657f01eaba74332fc08eac1d8f52ee8454867f", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000001000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x51, &(0x7f0000000100)=""/81, 0x41100, 0x18, '\x00', r1, 0x12, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200)={0x1, 0xc, 0x3, 0x7f}, 0x10, 0x0, 0xffffffffffffffff, 0x2, &(0x7f0000000500)=[r5, r6, r7, r8, r9, r10, r11, 0xffffffffffffffff, r14, 0x1], &(0x7f0000006940)=[{0x1, 0x0, 0x0, 0x5}, {0x2, 0x2, 0xb}], 0x10, 0x31e97e8b}, 0x90) 4.747826978s ago: executing program 4 (id=835): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000000)=0xb2, 0x4) r1 = memfd_create(&(0x7f0000000080)='\xf3e\t\xa9\xff\vty\x01senux\x00', 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000040)=0xaf2, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0xce23, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xf00}, 0x1c) 4.714338551s ago: executing program 4 (id=836): socket(0x12, 0x3, 0x2) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_type(r2, &(0x7f00000001c0), 0x2, 0x0) write$cgroup_type(r3, &(0x7f0000000280), 0x9) r4 = openat$cgroup_procs(r2, &(0x7f0000000140)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000c40), 0x12) bpf$MAP_CREATE(0x0, 0x0, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000100), r5) r6 = epoll_create1(0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r7, &(0x7f00000000c0)) r8 = epoll_create1(0x0) ppoll(&(0x7f0000000080)=[{r8}], 0x1, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r6, &(0x7f0000000000)={0xa0000001}) sendmsg$IEEE802154_LLSEC_DEL_KEY(0xffffffffffffffff, &(0x7f0000001040)={0x0, 0x0, 0x0}, 0x0) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r10 = openat$cgroup_ro(r9, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r10, &(0x7f0000000200)=0x1, 0x12) r11 = openat$cgroup_procs(r1, &(0x7f0000000400)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r11, &(0x7f0000000080), 0x12) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000600), &(0x7f0000000680)={0x0}) 698.596784ms ago: executing program 2 (id=862): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001680)={{0x14, 0x10, 0x1, 0xe00}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWSETELEM={0x60, 0xc, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x34, 0x3, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x24, 0xb, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8}]}}}]}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xe4}}, 0x0) 698.089004ms ago: executing program 2 (id=863): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000710000008500000023000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000018110000", @ANYRES32=r0, @ANYRES64=0x0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a00)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_NG_TYPE={0x8}, @NFTA_NG_MODULUS={0x14, 0x2, 0x1, 0x0, 0xffffffff}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}}, 0x0) 697.768184ms ago: executing program 2 (id=865): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000002305e20000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000400)='kfree\x00', r0}, 0x10) io_setup(0x3, &(0x7f0000000180)) syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') close(0xffffffffffffffff) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000100001ff00000000000000000000000a2c000000050a01020000000000000000020000000900030073797a32000000000900010073797a300000000014000000020a031747d21400000000000000000014000000110001"], 0x68}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x5f, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000500000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f08000340000000045c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xe8}}, 0x0) 697.642044ms ago: executing program 2 (id=866): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100), 0x1, 0x500, &(0x7f0000000500)="$eJzs3U9sI1cZAPBvJn/sTdMmhR4AFbqUwoJWayfeNqp6oZwqhCoheuSwDYkTRbHjKHZKE/aQPXJHohInOHHmgMQBqSfuSBzgxqUckAqsQA0SByOP7V3njzfWbmzvxr+fNJo38+L53tvRvGd91s4LYGJdj4ijiJiNiPcjYqFzPuls8XZ7a/3dZ/fvrh3fv7uWRLP53j+TrL51Lno+0/Jc55r5iPjBOxE/Sk4F/VNE/eBwe7VSKe91ThUb1d1i/eDw1lZ1dbO8Wd4plVaWV5bevP1G6dL6+kr1N59ei4jf/+7Ln/zx6Fs/aTVrvlPX24/L1O76zIM4LdMR8b1hBBuDqU5/Zh/nw4/1IS5TGhGfi4hXs+d/Iaayu3nSydv07RG2DgAYhmZzIZoLvccAwFWXZjmwJC10cgHzkaaFQjuH91LMpZVavXFzo7a/s97OlS3GTLqxVSkvdXKFizGTbGxNl5ezcve4Ui6dOr4dES9GxM9y17Ljwlqtsj7OLz4AMMGeOzX//yfXnv8BgCsu/7CYG2c7AIDRyY+7AQDAyJn/AWDymP8BYPKY/wFg8pj/AWDymP8BYKJ8/913W1vzuPP+6/UPDva3ax/cWi/XtwvV/bXCWm1vt7BZq21m7+ypXnS9Sq22u/x67H9YbJTrjWL94PBOtba/07iTvdf7TnlmJL0CAB7lxVc+/ksSEUdvXcu26Hnf/4Vz9cvDbh0wTOm4GwCMzdS4GwCMzdnVvoBJIR8P9CzRe6/ndP5M4bSPBrp8at1QePrc+OIT5P+BZ5r8P0yux8v/+y4PV4H8P0yuZjOx5j8ATBg5fiC5oL739/+lZs/BYL//AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwJU0n21JWuisBT4faVooRDwfEYsxk2xsVcpLEfFCRPw5N5NrHS9HhHWDAOBZlv496az/dWPhtfnTtbO5/+ayfUT8+Bfv/fzD1UZjbzliNvnXg/ONjzrnS+NoPwBwke483Z3Huz67f3etu42yPZ9+p724aCvucWdr10zHdLbPZ7mGuX8nneO21veVqUuIf3QvIr5wXv+TLDey2Fn59HT8VuznRxo/PRE/zera+9a/xecvoS0waT5ujT9vn/f8pXE925///OezEerJdce/4zPjX/pg/JvqM/5dHzTG63/47pmTzYV23b2IL01HHHcv3jP+dOMnfeK/NmD8v778lVf71TV/GXEjzut/ciJWsVHdLdYPDm9tVVc3y5vlnVJpZXll6c3bb5SKWY662M1Un/WPt26+0C9+q/9zfeLnL+j/1wfs/6/+9/4Pv/qI+N/82vn3/6VHxG/Nid8YMP7q3G/z/epa8df79P+i+39zwPif/O1wfcA/BQBGoH5wuL1aqZT3hl1Ihx8iKyQRRyPoTruQ+/VP3xlVrCEW4ulohsLTVBj3yAQM28OHftwtAQAAAAAAAAAAAAAA+hnFfycadx8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4uv4fAAD//5iA1Hs=") r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000080)=@sack_info={0x0, 0x7, 0x1}, 0xc) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.numa_stat\x00', 0x275a, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f00000001c0)={0xa0, 0x19, 0x0, {0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x52a2}}, 0xa0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x8441, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x40086602, &(0x7f0000000240)) r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) unlinkat(r3, &(0x7f0000000280)='./file0\x00', 0x200) unshare(0x2000680) r4 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000002000000000000000000000a00000000000000000000000d"], 0x0, 0x32}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x11, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="183000006a000000000000000300000095"], &(0x7f0000000340)='syzkaller\x00', 0x4}, 0x90) fgetxattr(r5, 0x0, 0x0, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x3, 0x0, &(0x7f0000000440)) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) r6 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYRES32=0x0, @ANYBLOB="000000000000000014001280090001007665746800000000040002800800030000bf1c000a00"], 0x48}}, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0x8004587d, &(0x7f0000000080)) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) open_by_handle_at(r7, &(0x7f0000000240)=@reiserfs_2={0x4b, 0x2, {0x10}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x200000, &(0x7f0000000200)={[], [{@flag='sync'}]}, 0x1, 0x544, &(0x7f0000000540)="$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") pipe(&(0x7f0000000080)={0xffffffffffffffff}) write$binfmt_script(0xffffffffffffffff, 0x0, 0xb) splice(r8, 0x0, 0xffffffffffffffff, 0x0, 0x1000, 0x0) 696.623114ms ago: executing program 4 (id=867): perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x80000000000, 0x0, 0x0, 0x2, 0xfffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000240)="58000000140091d427323b4725458db4560200000000ff81000e224e227f0000017b00092b1e58e6000001e809000000fff7ffef3ac7100003ffffffffffff00000000000003000000deff0000000200000000000000000000f5e1d1a4d290cad25b240e357e844d153e9e9304b27295c0e1293765d6ec52aad9030000000000000042fd306bc87d04d08bbf75b7e099f303150e", 0x94}], 0x1) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000d00)=ANY=[@ANYBLOB="020f000014000000000000000000000005000600000000000a0000000000000000000000000000000000000000000000000000000000000005000500000000000a004e220000000000000000000000000000ffffac1e00010000000000000000080012000000020000000000000000000600000000000000000000000000000000000000000000000000ffffacfea0adf900000100000000000000000000000082f0f3d3f74aa50876c1"], 0xa0}}, 0x0) write$UHID_CREATE2(r0, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) connect(r2, &(0x7f0000000c80)=@sco={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x80) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x12, 0x0, 0x8, 0x2}, 0x48) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r3, 0x0, &(0x7f0000000280)=@udp}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000780)={r3, &(0x7f00000006c0), 0x0}, 0x20) r4 = bpf$ITER_CREATE(0x21, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000c40)=ANY=[@ANYRES32=0x41424344], 0x0) write$UHID_CREATE2(r4, &(0x7f0000000a40)=ANY=[@ANYBLOB="0b00000073797a300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ce0009000600000003000000000000007f000000494566cea422bd3ec44a2ebced99b4ab0492e499cb0bbfe593b31580ffdff3828235ee5c6a3e744bbcbb843ae54a33f45a4a0d7b6c5719274caefd7189bed2bd636d1b3bcc148c5cae350c7d563a19aa840504c229d87a2babb31339ca48b89729d91396dbb247dfd277a0f2fc67954f5d5d64e89d4b74780bb1c45665baf345c4caf72310ce82c141c2ab483279df83df227edfd0550f53234192de2e92a753d6661f99722ec235279424215bb1a63f93878c14b9a0a0af3a45a79a9e416254c16ec26aaa604e946336b92efaa6"], 0x1e6) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e21, @empty}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000100), 0x4) connect$inet(r5, &(0x7f0000000140)={0x2, 0x4e21, @empty}, 0x10) sendto$inet(r5, &(0x7f00000026c0)='?', 0xd0b9, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f0000000900)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000080)=""/105, 0x69}, {&(0x7f00000002c0)=""/74, 0x4a}, {&(0x7f0000000000)=""/61, 0x3d}], 0x3}}, {{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000200)=""/46, 0x2e}, {&(0x7f0000000400)=""/162, 0xa2}, {&(0x7f00000004c0)=""/240, 0xf0}, {&(0x7f00000007c0)=""/209, 0xd1}, {&(0x7f00000006c0)=""/87, 0x57}, {&(0x7f0000000980)=""/165, 0xa5}, {&(0x7f00000001c0)=""/5, 0x5}], 0x7}}], 0x2, 0x0, 0x0) r6 = socket$inet6(0xa, 0x1, 0x800) bind$inet6(r6, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x7d) 695.911144ms ago: executing program 2 (id=870): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r1 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x0) setregid(0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/asound/seq/clients\x00', 0x0, 0x0) lseek(r2, 0x9, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xd, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f0000000500)='f2fs_bmap\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0xe, &(0x7f0000000700)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000f0ffffff7a0af0ff0200000079a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b70500000100001b6a0af2fe000000008500000044000000b700000000000000950000000000000000e154cd8445974b26c933f7ffffffffe4fbffffff55bb2007ee51050512b5b42128aa090a79507df79f298129daa7a6b2f91af50342115e17392ac627c87881c000006146001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad229e5752548300000000dbc2777df150b7cdd77b85b941092314fd085f028f2ed1a4535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024b7041b1df65b3efd9af115646d14ce53d13d0ccacda1ef0900094fa737c28b99938512c816fdcceaede3faedc51d29a47fc813a2ec00f4c7a53ac271d6d7f4ea6bf97f2f33e2ea2e534300bcb3fdc4b4861004eefbda7f54f82a804da4f85db47a4a69bf9bc5fa96ee293fbd165a5a68488e40b030166565a097b1b44b451de736bb6d43db8db03d4b7745fef1d04ec633dee254a6d491b849a5a787e814c4fd21a18986252a70f8f92eb6f0e8c7db4bf23242a1f2c28159f09943b1b0452d1b72183aacf4a84f9130b775dd4e9e3070756f97ad791fa99dac06b57479321a0574fb30ff0000001989328c8ddc20ea011bf5742e0e0d4334db8b0600000016cb7fc20fb4791ec85823d0c48fb657c29b309c73f0977e7cde65a82b94c461d7962b0d2277a84af326f37f3e2c25a61ec45c3af97a8f17da954aff3fc8c108755f75ca13fb7c8bbd8b6e7dac1aba4b20dc7de058a4dfa7e85a8bdf1d41a2d8bda74d66f47cc180f82c5f573c6d394d3665016ac59dda0fde4745db06753a7ac74a2d32f7528751313694bf5700b20ef0c248ddd3da32396a614cacad4aff2066bb5d4045c958559b7dcb98a6273b8c651e24d9f679e4fbe948dfb4cc4a389469608241730459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5498f6589880ed6eea7f9c670012be05e7de0940313c5870786554df26236ebced9390cb6941b8375d936a7d2120eca291963eb2d537d8ee4de5c183c960119451c31539b22809e1d7f0cda06a9fa87d64cb77872a2cd8a104e16bb1a2ba9c29faa38c409d32b6b7d6cf13464ca03aff14a9aa4bd9539f5096412b92012e095b84c20243ff98df3347f0e399d1b9f27e3c33269c0e153b28b2d4410572bc45b9d3fa02208d304d455c36300000000022320178b00cc6ed7966130b547dbf8b497af002000000cd1d00000020000000ef19349ee7f31abc11c800000000000000000000000928ee53595a779d243a48cea769470424d2889ac04b2c4324ab7f4a5c81921f0128dfd70b438af60b060000000000000056642b49b745f3bf2cf7908b6d7d748308eea09fc361b4735efbf3411718d6ee7aebf9ef679dbfae9fb4a79f8a836804ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd13da202274f20675eb781925441578e93046aaddea8ec4ca37f71c2710a7ea8ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec7ffff35e62f4eeee50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e933119c5009c68c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada201bcbb5c252b28a60ca770663da451790cc30000000000000000c308e39bd5ffb6151d79c1cee1cd102e3c8e63e9fba05e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2b485185cc92fe7f791e8f6429309d6adab4b7e508e5bf024ed8f8a005f2bbf96c89739f5cf1e750d50517a59a3ad09e8802e8f4f535447cc0fc9d5f99a73145dfcedad69da9cd4375c624600e78f4458542b14f29611f95d4a31838eeb20c20ba82aa31771cd379ec83554cea5e6539db7384e1f58d81f2f2653c4d9818709e27c89b552d7fcd116bce9c764c714c9402c21d181aac59efb28d4f91652f6750b6ec962802c0320f8059195729d60c534ee8e8ff0755b67fe4c25edb85bcff24c757aa8090000000000008c420eb4304f66e3a37aaf000000c42a570f0e9dd5fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9174327d82761c26e329555f9290af4100000000000000749efd3763655500344bae34137f5ab0d534b8d63e4ca3b671f2de1cdf519192c6b59a601fd419adc16e2055b85058f793484305d7a1759782e4c571ee855a47bc00edf5e9020c09ab004321610b857e8717764b633b21cb32f0e03280e09758bd445ab91d20baca005452b79d7b574a247fa62fe45b3c4e93da3d51de647c10dd49944dc87c92332af00f191b66b6a6f732a91f0e2e9120bed64069dcf82d3e5e0361e58c79d497247d278888901d442ad7f8536605a644e9e3d769db497c3960dfde12182334caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d0920a23c2a86abbdf357849a651733e57f31019876026888c8ccb85c86b4f8ffffff7f000000002c331fca0e541b7ca211c28ed61c525708a13d115b43f8b1894c8fa8a1000000002100000000000000000001000027c9a46157a3609b6fd9843ee19ec647249a9375de5858818f3c4a4fa6ce46f4d42b07199de8b99231ace58c77819ee214e49666c464d35ca9b5143ed3b3dc8c17a23692759ccf5a205311b7ab22532697b861dfb54609fd88e6043bd52ae84c1bb0c8a6c769f952283a1f4e3842edb3d42c68a27ef6a1296dfff4a979369b0e8ebc62887aa46e824d86869ec4ab392b0a74f91381dcc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4dc521a3d9356b4b8b5917c4c860495b240e80063bde261fd00000000007271e28ef6806bc8e139c49b91c76bea3858f78fbd8d31330d89069f9648a2ff93060ff073b3a113e47edf76f7d116d2b0976cf2ec527c030931651dd315003b7a6a5433a2bb3c035fc6846abe389b25c988f0bbb889560ae99ec4b227eda2e63a1c31a2c2bd48a822cbe92b6524e0cd8020ecaa34e19e7141d5e221509342bfe7d294d1eb3de6a50ca0301f89c2ee627e949c68b3a4a412a9b7d503a26e9a714ee5f72d8805dd1bfbd081f6a5d1f128ddfe14cb9194e26a44fac273461fc5c0e0a33db7f2d43ea8086cf059f40fa2640b6bfb74dd35f5a31059c01517cf4b6641fce9a24b96767b837ca037a1199735c375c705c798e0e208e4a5259d0bfa526b462af45a6eab34000000000000000000000000c4426344ec1a3366515dee221e747f55d7dd02534bc503b9b28277c253e410986bef2111a99cc448d652929f8a67a6a1d3f00dcad91aff428aade3f85714a1d3ef29acd4d49b62339c10c2ec0daca8d4c1090000000000000084d8223edbccbf9258b7374e79a1f8bf3fb73c8c6dbb7bbdfc399847a11921f97eba0ea14c4fed9a71eedb97c02461792e3a49dac16c60c3fcaab222025d78963c3ac899fa8b63f58a30212c9b2d7fe751e2046b78f86e22861b6504c667350244dd6d9189a8b9c45f8aaff9db694811ca86ed978f23eed7459c0382074170cf1e25b0e9ba3d1cc309353eea4cd8ab96bafda393276bdd8d32ead8db9e1b54d2d3d50e2815268fc1a6ec566981bc8ca2a4583f3d40e817433d0f4f25cfe6cc1897449ba5f26a9d66ac73e6f5c401376f23a314e0b9ff997d22f3e34b7524642c248aa813edaa626f0000000000000000004f9e02a3b51a97c4b1c1b411cc6bee2a56f29c55a6aac45f0cfc318fae02922a403431d4e5a4396cad2c8dd34037bc041a2ba1505ba2c4889122ca04e85881aad5f8bfc12e6741872aad21bf5301cd4c607ef50a991c410f7c60e45b5c193f813a36d841165b91b5e170f6ba24558df57145eb8142a6ed87c6d5cbae3e52d569996604669a6e9ca1a3689c795970b4bcd00881faff52a6766fafa07ed7d4a49f47d34fd76a394adcb33a270b6a14e74bca7c2ea92dd845d3f774fde1bbea911c1ea76d52f7912e2597e6a33380647ed44956730b5b84662b8e659124379c0d86b1d28fdfa3cd2013103e3048c4ad4f5a4dcd133b2fc8fae3b51e4433cee7c08e67c7d7ed4432045e10f8718e5c163b1704fa2c707b61a1a9f63edfceff1a0cd7baf4a15b2fd607a09d398d73243bdcc664fbd5f582e48af2a18b02f0184a7bdd95ac78241e6749e74b152702333c56588375f806f10578eaae329c4f8dfb83e5524e2c9aa59ce7828bd1f146b2a4150fb2a8ced08e2ffac81e921e8a6f0071361a0acdbd125fb5f5e9ffe98e38509582a496afd30ca460dbfca77915a18b7b9ef6c1d6e13bc12fe43063cfecfafb05bf2339ad61533fbf3e410b403182742fa2d40c402cb83c2fef46a36f17c1abf97b0e2d114bd1472ab4207aa060f9e5d91c4a4911b1a1df47b858be141ab3386f26f561df35678489dc1b9f10eee1b2ab3dfdaedd7e06ff8a127f1743fcb32d7f80d40aebc1ea72edc348f5f9ba4bace97db948c24c679c6d6e7c9d49db1b2a6082bb0e8b013bd1ee3612cd43cd2a3cb83754bb34081599ce2a33600d4120353e477237c1dcf66b6a353aa1832d60179da56951d2b77e91c3e73fc7285d1ed2722a30c10f9cfd4a20ae6dc32f5d90a9290b393daff597ad7d5d3e5a73b25002ad928c92bd3d1be2444ff00f6b7719f06ddca6b48db95a746032d5ca0d4c460bb30a43ed735504192cb6ce50eed19a552101cb7bbf82c4924e2a862bd51ebaeb8e15e5428a87b56b81eff64a75baf33ae2b67b55a724cbbe788a8d8ece234a81e90186aca593260d559c0cb2f2be882288db291b231b8d", @ANYRES8=r0, @ANYRES16=r1, @ANYRES16=0xffffffffffffffff, @ANYRESHEX], &(0x7f0000000640)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xa, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000040), 0x10}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$EVIOCGBITKEY(0xffffffffffffffff, 0x80404521, &(0x7f0000000440)=""/112) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000002c0)={'erspan0\x00'}) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1f, 0xf, &(0x7f0000001580)=ANY=[@ANYBLOB="18110000", @ANYRESOCT=r4, @ANYBLOB, @ANYRES32=r5, @ANYBLOB="0000000000000000b702000000000000850000008600000094aa0600fdffffff85000000b700009e2ad0acab0400000000000000d83c1debd362c9d929dec0f9b90deab540a50a8fae24898a7f84c708d7943ffefbda41f1b0284e47ac7dbf446a883d9e69d4c5bd639c49a71f6ee33e09e28bb27a7cb40e7a901d0948b05d8a53264e1071889435aa1c6a324c704fbfaf7241c06adba54cc46910def04d736180ae08a069cf3aaa26aabb7b3c3f43fb1ad879f256d48ac169def20bb6e1b949c5e16be37e"], 0x0, 0x6, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000540)={0x4, 0xb, 0x10000}, 0x10}, 0x90) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x1, 0x84) r7 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_IPV6_RTHDR(r7, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="0002020100000000ff02000000000000625bf56210000001"], 0x18) connect$inet6(r7, &(0x7f0000000040)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) r8 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$ARPT_SO_SET_REPLACE(r8, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x7, 0x4, 0x3f0, 0x220, 0x0, 0x220, 0x308, 0x308, 0x110, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @broadcast, @multicast1}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@link_local, @mac=@local, @rand_addr, @empty}}}, {{@arp={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'dvmrp1\x00', 'virt_wifi0\x00'}, 0xc0, 0xe8}, @unspec=@MARK={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000004c0), 0x4) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000200)={0xffffffffffffffff, 0x2000000, 0x14, 0x0, &(0x7f00000001c0)="5cdd3086ddffff6633c9bbac88a8861000dffd00", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 695.174054ms ago: executing program 4 (id=872): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) (async) r2 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f0000000440), 0x4) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, &(0x7f0000000240)={'filter\x00', 0x7, 0x4, 0x408, 0x0, 0x0, 0x0, 0x320, 0x320, 0x320, 0x4, &(0x7f0000000080), {[{{@arp={@multicast2, @private=0xa010102, 0x0, 0xffffffff, 0x8, 0x5, {@empty, {[0xff, 0xff, 0x0, 0x0, 0xff, 0xff]}}, {@empty, {[0xff, 0xff, 0x0, 0x0, 0xff]}}, 0x2, 0x7f, 0x3, 0x5, 0xfa40, 0x9, 'batadv_slave_1\x00', 'veth0_to_batadv\x00', {0xff}, {}, 0x0, 0x130}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x7, 0x23, {0x2}}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x37}, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, 0x4, 0xffffffff}}}, {{@arp={@local, @multicast2, 0x0, 0xff, 0x9, 0x7, {@mac=@random="7f3f81728767"}, {@mac=@local, {[0x0, 0x0, 0x0, 0x0, 0xff, 0xff]}}, 0x2, 0x5, 0x6, 0x5, 0x200, 0x8, 'sit0\x00', 'erspan0\x00', {}, {}, 0x0, 0x20}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @multicast2, @broadcast, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x458) (async) syz_mount_image$ext4(&(0x7f0000000200)='ext3\x00', &(0x7f00000007c0)='./file1\x00', 0x322942a, &(0x7f0000000000)={[{@init_itable}, {@i_version}]}, 0xff, 0x780, &(0x7f0000000800)="$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") (async, rerun: 32) arch_prctl$ARCH_GET_CPUID(0x1011) (rerun: 32) 674.341646ms ago: executing program 1 (id=873): perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0190b0ca000000000000020202000900030073797a32000000050900010073"], 0x40}, 0x1, 0x40030000000000}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 650.318468ms ago: executing program 1 (id=874): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(r0, 0x0, 0x0) 571.404224ms ago: executing program 1 (id=876): perf_event_open(&(0x7f0000000140)={0x3, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x400000000000000, 0xffffffffffffffff, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) bpf$MAP_CREATE(0x0, 0x0, 0x0) move_mount(0xffffffffffffff9c, 0x0, 0xffffffffffffffff, 0x0, 0x0) syz_read_part_table(0x1057, &(0x7f0000000000)="$eJzsz72JAkEYx+H/7t3tR3Ag2JQNWI6iLViEoJjZlwWYjIwuBuaiwfMEMz/eYYI3fFab01Sbc/b1XiQZ75NyKaX9a2oO8//tmK55/V76Q5/0SVZl3WV4dPt8/012ybXUnk2zoR4/SZPl8f0LAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMD3uwUAAP//avoO/Q==") 392.934908ms ago: executing program 3 (id=879): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet(0x2, 0x3, 0x4) socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000500), r1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newlink={0x78, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0xc3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE={0x8, 0x2, @remote}]}}}, @IFLA_XDP={0x3c, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x7}, @IFLA_XDP_FD={0x8}, @IFLA_XDP_FD, @IFLA_XDP_FLAGS={0xfffffffffffffc5d}, @IFLA_XDP_FLAGS={0x8}, @IFLA_XDP_EXPECTED_FD={0x8}]}]}, 0x78}, 0x1, 0x2}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff) syz_socket_connect_nvme_tcp() bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0xb) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) close(0xffffffffffffffff) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'team_slave_0\x00'}) 283.216317ms ago: executing program 0 (id=880): r0 = socket$inet_tcp(0x2, 0x1, 0x0) (async) r1 = perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ftruncate(0xffffffffffffffff, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001780)=@bpf_tracing={0x1a, 0x21, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x6}, [@map_idx={0x18, 0x2, 0x5, 0x0, 0x8}, @map_val={0x18, 0x6, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xded1}}, @map_val={0x18, 0x9, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x200}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x6a6}, @printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}]}, &(0x7f00000001c0)='GPL\x00', 0xfffffc00, 0x1000, &(0x7f0000000780)=""/4096, 0x41100, 0x6d, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000000600)={0x0, 0x2, 0x4, 0x7}, 0x10, 0x1dad9, 0xffffffffffffffff, 0x7, &(0x7f0000000640)=[0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000680)=[{0x1, 0x4, 0x3, 0xb}, {0x1, 0x4, 0x2, 0x9}, {0x2, 0x2, 0x4, 0x5}, {0x0, 0x2, 0x8}, {0x0, 0x3, 0x6, 0x6}, {0x0, 0x4, 0x4, 0x4}, {0x1, 0x2, 0x5, 0x1}], 0x10, 0xf}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r3) ioctl$PIO_SCRNMAP(r2, 0x4b41, &(0x7f0000001f80)) (async) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0x47f) (async) r4 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000000c0), 0x8c202, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_DEL(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0xb4, 0x2, 0x9, 0x201, 0x0, 0x0, {}, [@NFCTH_STATUS={0x8}, @NFCTH_QUEUE_NUM={0x8}, @NFCTH_TUPLE={0x90, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev}, {0x14, 0x4, @local}}}, @CTA_TUPLE_IP={0x0, 0x1, 0x0, 0x1, @ipv6={{0x0, 0x3, @dev}, {0x0, 0x4, @ipv4={'\x00', '\xff\xff', @multicast1}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv6={{0x0, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x0, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0xb4}}, 0x0) (async) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x50, 0x2, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x2}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x7}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x20048840) (async) setsockopt$inet_tcp_int(r0, 0x6, 0x18, &(0x7f0000000040), 0x4) (async) r6 = perf_event_open(&(0x7f0000001840)={0x2, 0x80, 0xe, 0x8, 0x4, 0x38, 0x0, 0x6, 0x411, 0x8, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x2, @perf_config_ext={0xc7f, 0xf4df}, 0x10002, 0x4, 0x17, 0x7, 0x3, 0x8, 0x4, 0x0, 0x2, 0x0, 0xf994}, 0x0, 0x0, r4, 0xa) ioctl$PERF_EVENT_IOC_RESET(r6, 0x2403, 0x8000000000000001) r7 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) pwritev(r7, &(0x7f0000000740)=[{&(0x7f0000000240)='V', 0x1}], 0x1, 0x3, 0x0) (async) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x8001, 0xfffe}, 0x14) (async) shutdown(r0, 0x2) write$selinux_load(r7, &(0x7f0000000280)={0xf97cff8c, 0x8, 'SE Linux', "86eb79817c06d29c50595b76ac6942cb7b504b8d9ed68f8df550d112aca832e1e58a31ab5420ecdbf1846ae8f27a1630acd08cee0798b973053399e43b5d83663d8571df7dc5ffc61743bcb5369749955c7fd4ecde2a709b2178d2f1dd8c112e1dc7d951f1eb25b2662b325c8304ccee161b1b7ed95ad3eb5e69d448d99a9a66790b2e37fd23e19a7debbab6eed550bd0d016e5b6307656c054f109bdac1a198b521c0ecd2c934a8a824638c6ce91f75573f1c500a246e6fbed580b9f816c041acefd8bbff0f989502d6ebd0e21f8dccfd0eee49de89a9922eee972b6b6ae4b7aa9a3f563a9ec7b599"}, 0xf9) 283.079778ms ago: executing program 1 (id=881): perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x3c1, 0x3, 0x318, 0x148, 0x178, 0xc, 0x148, 0x178, 0x248, 0x258, 0x258, 0x248, 0x258, 0x3, 0x0, {[{{@ipv6={@loopback={0x1f0}, @mcast2, [0x0, 0x0, 0x0, 0x10000000], [], 'syzkaller0\x00', 'netpci0\x00'}, 0x0, 0x108, 0x148, 0x0, {}, [@common=@unspec=@statistic={{0x38}}, @common=@icmp6={{0x28}, {0x0, "c375"}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "1f4f4328b954deca86e41ed96a4ea63033f276cd53571aadaab6f00dbd07"}}}, {{@ipv6={@mcast1, @private1, [], [], 'wg2\x00', 'hsr0\x00'}, 0x0, 0xd0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@inet=@SET2={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x378) 282.803118ms ago: executing program 0 (id=882): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c40)={0x0, 0x17, &(0x7f0000000780)=ANY=[@ANYBLOB="18110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702009642000000850000008600000018100000", @ANYRES32, @ANYBLOB="000000000000000000000000f0ffffff185000"/32], 0x0}, 0x90) socket$rxrpc(0x21, 0x2, 0xa) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000006c0)={'syztnl2\x00', &(0x7f0000000640)={'ip6gre0\x00', 0x0, 0x4, 0x6, 0x81, 0xfffffff7, 0x45, @empty, @private2, 0x1, 0x20, 0xfffffff7, 0x483}}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000002c0)=[{{&(0x7f0000000b00)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x63, 0x0}}], 0x1, 0x0) unshare(0x400) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) write$binfmt_script(r0, 0x0, 0xfffffe5d) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) syz_io_uring_setup(0x2cdb, &(0x7f0000000300)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000400)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x25, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0}}) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x59) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYRES32, @ANYRESDEC=r1, @ANYBLOB="3d27135c51d99c6cb9247fff2158504dddad3a217e51142506fd0b3f4ed6df54702e5b2f99a721b6dc", @ANYRES64=r2], 0xb8}}, 0x20000811) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="b8000000190001000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0xb8}}, 0x0) 263.681169ms ago: executing program 3 (id=883): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000009de00)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newnexthop={0x18, 0x68, 0x1}, 0x18}, 0x1, 0x8847}, 0x0) 247.20107ms ago: executing program 0 (id=884): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000bc0)={0x11, 0xb, &(0x7f0000000740)=ANY=[@ANYRES32=0x1, @ANYBLOB="0000000000000000b702000000000000850000008600c2ee8b2bdbeb97bf4344ec60000018410000f9"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x10000000}, 0x90) 191.395405ms ago: executing program 0 (id=885): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="180100001c0000000000000000100000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f0000000780)='netlink_extack\x00', r0}, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4c0100001000130100000000000000007f00000100"/60, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000032000000ac14140000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000100000000000000000048000200656362286369706865725f6e756c6c290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008001600001000000c001c"], 0x14c}}, 0x0) 188.531585ms ago: executing program 1 (id=886): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@updsa={0xf0, 0x1a, 0x1, 0x0, 0x0, {{@in6=@private1, @in=@empty, 0x0, 0x0, 0x600}, {@in=@local, 0x0, 0x3c}, @in6=@empty, {}, {}, {}, 0x0, 0x0, 0xa}}, 0xf0}}, 0x0) 188.380205ms ago: executing program 3 (id=887): socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x1}, 0x62) socket$nl_netfilter(0x10, 0x3, 0xc) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940001000000fcffc50000000f00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='netlink_extack\x00', r0}, 0x10) openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xa, 0x4, 0x4, 0x8}, 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000), 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7050000080000a8c5000000a5000000180100002020640500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b300000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x38, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='pids.current\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0x0, r2}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r3, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)={@ifindex, 0xffffffffffffffff, 0x0, 0x7000000, 0x4, @prog_fd}, 0x20) 178.914466ms ago: executing program 1 (id=888): socket$igmp6(0xa, 0x3, 0x2) fsmount(0xffffffffffffffff, 0x1, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000080)='./file0\x00', 0x101c08a, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x6, 0x2c8, &(0x7f0000002500)="$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") r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1451c2, 0x0) ftruncate(r1, 0x2007ffb) sendfile(r1, r1, 0x0, 0x800000009) socket$xdp(0x2c, 0x3, 0x0) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x19, &(0x7f0000002740), &(0x7f0000002780)=0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x12, 0xc, 0x8, 0x3}, 0x48) r3 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r2, &(0x7f00000000c0), &(0x7f0000000000)=@udp6=r3}, 0x20) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000080)) ioctl$PPPIOCSMAXCID(r4, 0x40047451, &(0x7f0000000100)=0xffff0000) ioctl$PPPIOCSMAXCID(r4, 0x40047451, &(0x7f0000002540)) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000e40)=ANY=[@ANYBLOB="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"/3576], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r5}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0x2, 0x8, 0xd0eb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r6 = socket$inet6(0xa, 0x3, 0xff) r7 = syz_open_dev$loop(&(0x7f00000000c0), 0x0, 0x0) ioctl$IOC_PR_RELEASE(r7, 0x401070ca, 0x0) r8 = dup2(r6, r6) r9 = eventfd(0x0) dup3(r9, r8, 0x0) gettid() 137.640799ms ago: executing program 3 (id=889): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c00000d20000100000000000000000002000000000000000000000008000b002dc108e5080017004e204e"], 0x2c}}, 0x0) 132.797479ms ago: executing program 0 (id=890): syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000180), 0xfc, 0x58b, &(0x7f0000000800)="$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") r0 = open(&(0x7f0000000040)='./file1\x00', 0x80242, 0x0) write$P9_RREADDIR(r0, &(0x7f0000000100)={0xb}, 0xb) sendfile(r0, r0, &(0x7f0000000240), 0x7f03) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) 75.356194ms ago: executing program 3 (id=891): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x0) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), r0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_freezer_state(r2, 0x0, 0x2, 0x0) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000300), 0x12) write$cgroup_freezer_state(0xffffffffffffffff, 0x0, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_type(r4, &(0x7f00000001c0), 0x2, 0x0) write$cgroup_type(r5, &(0x7f0000000280), 0x9) r6 = openat$cgroup_procs(r4, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f0000000c40), 0x12) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_ro(r7, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r8, &(0x7f0000000200)=0x1, 0x12) openat$cgroup_procs(r3, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r8, &(0x7f0000000180), 0x12) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) socket$packet(0x11, 0x0, 0x300) recvmmsg(r0, &(0x7f00000001c0), 0x0, 0x40012040, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00'}) sendmsg$MPTCP_PM_CMD_ANNOUNCE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYRES16=r1, @ANYRES32, @ANYBLOB="01000000000007000000000000003c"], 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x4884) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newlink={0x40, 0x10, 0x49920d862a92153b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_ADDRESS={0xa}]}, 0x40}}, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) 17.595419ms ago: executing program 0 (id=892): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c10, &(0x7f0000000040)={[{@nobh}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000}}]}, 0xff, 0x23f, &(0x7f0000000540)="$eJzs3T1oLFUYBuB3Zne95t5FrtoI4g+IiAbCtRNsYqMQkBBEBBUiIjZKIsQEu8TKxkJrlVQ2QeyMlpIm2CiCVdQUsRE0WBgstFiZnURisuLPxh1xngdmZ2b3nPnOMPOe3WbYAK11Nclskk6S6SS9JMXpBnfWy9Xj3c2p3cVkMHjsh2LYrt6vnfS7kmQjyQNJdsoiL3STte2nDn7ae+Se11d7d7+7/eTURE/y2OHB/qNH78y/9sHc/WufffHdfJHZ9H93XhevGPFet0hu+jeK/UcU3aZHwF+x8Mr7X1a5vznJXcP891KmvnhvrFy308t9b/9R3ze///zWSY4VuHiDQa/6DtwYAK1TJumnKGeS1NtlOTNT/4b/qnO5fHF55eXp55dXl55reqYCLko/2X/4o0sfXjmT/287df6B/68q/48vbH1dbR91mh4NMBG31asq/9PPrN8b+YfWkX9oL/mH9pJ/aC/5h/aSf2gv+Yf2kn9oL/mH9pJ/aK/T+QcA2mVwqeknkIGmND3/AAAAAAAAAAAAAAAAAAAA521O7S6eLJOq+clbyeFDSbqj6neG/0ecXD98vfxjUTX7TVF3G8vTd4x5gDG91/DT1zd802z9T29vtv76UrLxapJr3e75+684vv/+uRv/5PPes2MW+JuKM/sPPjHZ+mf9stVs/bm95ONq/rk2av4pc8twPXr+6VfXb8z6L/085gEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACYmF8DAAD//xFQbUc=") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000d40)={0x0, 0x2904c, 0x3fffffffffffe52, 0x10003, '\x00', [{0x0, 0x0, 0x0, 0xfe52}, {0xffffffff}]}) 0s ago: executing program 3 (id=893): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413ec50000000f00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r1}, 0x10) sendmsg$nl_xfrm(r0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000300)={0xffffffffffffffff, &(0x7f0000000380)="eecd8179ce3365698809802bff10e49e90234024c0df5c1f741a790949ed7498c7418695a1196510491e1b1fabf68fefaa04e86f24954e6f26ed2d0910d2a9e4b148c458103b3fed7430cb00374eaa9f307865375b5d368d760c2bf9e60c578ee9a3a51fba4b9f7b5911cc17c59250a11f6e357f26c4d223269288cb1b6d7fd575e3763b0613a514c751abbfe2d5c27e239e", &(0x7f00000002c0)=""/42}, 0x20) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000404000000002e"], 0x0, 0x37}, 0x20) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x2) io_uring_register$IORING_REGISTER_IOWQ_AFF(0xffffffffffffffff, 0x11, &(0x7f0000000540)="fb6ddd91a667605493a87d67f2543c3844881b5337a33148d69c72d3ac", 0x1d) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, &(0x7f0000000040)={0x20, 0x1, 0x0, 0x3f, 0x0, 0x0, 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000004440)=@base={0x12, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r2, 0x20, 0x1}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x0, 0x3, 0x0, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001d80)=ANY=[@ANYRES32], &(0x7f0000000340)='syzkaller\x00'}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020696c2502000000002020207b1af8ff00000000bfa1000000000000070100921f9648737f00f81a00ffb702000008000000b703000000000000850000002d59000085000000070000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='ext4_es_remove_extent\x00', r4}, 0x10) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f0000000240)={0x8, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r5, 0x29, 0x30, &(0x7f0000000900)={0x8, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x2, [{{0xa, 0x0, 0x0, @private1}}, {{0xa, 0x0, 0x0, @private1}}]}, 0x190) unlink(&(0x7f0000000140)='./cgroup\x00') perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0x18000000000002a0, 0xfe, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0xfe, 0x0, &(0x7f0000000100)="b9ff03316844268cb89e14f0080048e0050000000000008877fbac141516e000030a83070403b180008903040000845013f2325f003901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014c0000c0adc043084617d7ecf41effff38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d7da058f6efa6d1f5f7ff400"/254, 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0}, 0x50) bpf$ENABLE_STATS(0x20, 0x0, 0x0) kernel console output (not intermixed with test programs): T4497] vlan2: entered promiscuous mode [ 49.681782][ T4504] loop2: detected capacity change from 0 to 128 [ 49.693277][ T4505] loop0: detected capacity change from 0 to 1024 [ 49.702151][ T4505] EXT4-fs (loop0): inodes count not valid: 0 vs 32 [ 49.737946][ T4064] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 49.745797][ T4064] FAT-fs (loop2): Filesystem has been set read-only [ 49.766003][ T4511] loop0: detected capacity change from 0 to 1024 [ 49.775588][ T4511] EXT4-fs: Ignoring removed orlov option [ 49.781374][ T4511] EXT4-fs: Ignoring removed nomblk_io_submit option [ 49.797531][ T4512] loop4: detected capacity change from 0 to 164 [ 49.801723][ T4511] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.824123][ T4507] rock: directory entry would overflow storage [ 49.830521][ T4507] rock: sig=0x4f50, size=4, remaining=3 [ 49.836240][ T4507] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 49.845074][ T3088] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.870776][ T4516] loop0: detected capacity change from 0 to 512 [ 49.880868][ T4516] EXT4-fs error (device loop0): ext4_orphan_get:1394: inode #15: comm syz.0.338: iget: bad extended attribute block 1 [ 49.900801][ T4516] EXT4-fs error (device loop0): ext4_orphan_get:1399: comm syz.0.338: couldn't read orphan inode 15 (err -117) [ 49.924200][ T4516] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.939244][ T4519] loop4: detected capacity change from 0 to 4096 [ 49.960442][ T4519] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.039161][ T1552] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 50.086643][ T3850] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.133434][ T4548] loop4: detected capacity change from 0 to 2048 [ 50.146488][ T4529] chnl_net:caif_netlink_parms(): no params data found [ 50.187203][ T4557] delete_channel: no stack [ 50.203477][ T4557] netlink: 'syz.4.347': attribute type 1 has an invalid length. [ 50.211334][ T4529] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.218510][ T4529] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.225729][ T4529] bridge_slave_0: entered allmulticast mode [ 50.232770][ T4529] bridge_slave_0: entered promiscuous mode [ 50.243699][ T4529] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.250803][ T4529] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.258142][ T4529] bridge_slave_1: entered allmulticast mode [ 50.264602][ T4529] bridge_slave_1: entered promiscuous mode [ 50.270733][ T4558] netlink: 4 bytes leftover after parsing attributes in process `syz.4.347'. [ 50.297650][ T4529] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 50.308360][ T4529] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 50.323961][ T4560] loop4: detected capacity change from 0 to 1024 [ 50.330778][ T4560] EXT4-fs: Ignoring removed orlov option [ 50.336512][ T4560] EXT4-fs: Ignoring removed nomblk_io_submit option [ 50.347831][ T4560] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.361810][ T4529] team0: Port device team_slave_0 added [ 50.370048][ T4529] team0: Port device team_slave_1 added [ 50.378298][ T3850] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.398665][ T4529] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 50.405670][ T4529] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 50.431589][ T4529] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 50.442827][ T4529] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 50.449808][ T4529] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 50.475873][ T4529] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 50.524457][ T4529] hsr_slave_0: entered promiscuous mode [ 50.526633][ T4564] loop4: detected capacity change from 0 to 164 [ 50.536761][ T4529] hsr_slave_1: entered promiscuous mode [ 50.543361][ T4529] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 50.543528][ T4564] rock: directory entry would overflow storage [ 50.551277][ T4529] Cannot create hsr debugfs directory [ 50.557197][ T4564] rock: sig=0x4f50, size=4, remaining=3 [ 50.568058][ T4564] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 50.620025][ T4529] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.704556][ T3088] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.734213][ T4529] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.851365][ T4529] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.964929][ T4578] capability: warning: `syz.1.352' uses 32-bit capabilities (legacy support in use) [ 50.989040][ T4529] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.075716][ T4582] netlink: 596 bytes leftover after parsing attributes in process `syz.1.354'. [ 51.109487][ T4529] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 51.121519][ T4529] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 51.131343][ T4529] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 51.140671][ T4529] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 51.178428][ T4590] vlan2: entered promiscuous mode [ 51.183490][ T4590] macvtap0: entered promiscuous mode [ 51.189317][ T4590] vlan2: entered allmulticast mode [ 51.194429][ T4590] macvtap0: entered allmulticast mode [ 51.199869][ T4590] veth0_macvtap: entered allmulticast mode [ 51.223267][ T4529] 8021q: adding VLAN 0 to HW filter on device bond0 [ 51.238163][ T4529] 8021q: adding VLAN 0 to HW filter on device team0 [ 51.248114][ T4595] loop1: detected capacity change from 0 to 512 [ 51.249096][ T3162] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.261539][ T3162] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.270688][ T4595] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 51.280312][ T4595] EXT4-fs (loop1): warning: checktime reached, running e2fsck is recommended [ 51.290360][ T3162] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.297429][ T3162] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.297782][ T4595] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a84ec02c, mo2=0002] [ 51.312841][ T4595] System zones: 0-2, 18-18, 34-34 [ 51.319215][ T4595] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1137: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 51.333890][ T4595] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.357: bg 0: block 408: padding at end of block bitmap is not set [ 51.348407][ T4595] EXT4-fs (loop1): Remounting filesystem read-only [ 51.354936][ T4595] EXT4-fs (loop1): 1 truncate cleaned up [ 51.361064][ T4595] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.370611][ T4529] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 51.373645][ T4595] SELinux: (dev loop1, type ext4) getxattr errno 5 [ 51.388506][ T4595] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.456879][ T4529] veth0_vlan: entered promiscuous mode [ 51.470739][ T4529] veth1_vlan: entered promiscuous mode [ 51.490246][ T4529] veth0_macvtap: entered promiscuous mode [ 51.498432][ T4529] veth1_macvtap: entered promiscuous mode [ 51.512206][ T4610] loop4: detected capacity change from 0 to 1024 [ 51.514767][ T4529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 51.529142][ T4529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.539086][ T4529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 51.546188][ T4610] EXT4-fs: Ignoring removed orlov option [ 51.549599][ T4529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.555202][ T4610] EXT4-fs: Ignoring removed nomblk_io_submit option [ 51.564951][ T4529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 51.581989][ T4529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.591895][ T4529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 51.602432][ T4529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.605240][ T4595] loop1: detected capacity change from 0 to 8192 [ 51.612308][ T4529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 51.629078][ T4529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.638934][ T4529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 51.649407][ T4529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.661901][ T4529] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 51.673580][ T4529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 51.673935][ T4610] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.684151][ T4529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.706118][ T4529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 51.716576][ T4529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.726430][ T4529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 51.737006][ T4529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.746858][ T4529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 51.757347][ T4529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.767346][ T4529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 51.777942][ T4529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.788064][ T4529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 51.798555][ T4529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.810346][ T4529] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 51.821925][ T3850] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.822126][ T4529] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.839608][ T4529] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.848343][ T4529] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.857072][ T4529] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.883838][ T4616] vxcan1: entered promiscuous mode [ 51.894806][ T4616] A link change request failed with some changes committed already. Interface vxcan1 may have been left with an inconsistent configuration, please check. [ 51.925197][ T4614] loop1: detected capacity change from 0 to 164 [ 51.934878][ T4614] rock: directory entry would overflow storage [ 51.941105][ T4614] rock: sig=0x4f50, size=4, remaining=3 [ 51.946693][ T4614] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 52.033651][ T4624] loop3: detected capacity change from 0 to 1764 [ 52.041298][ T4624] iso9660: Unknown parameter '0x0000000000000009' [ 52.441950][ T4645] loop0: detected capacity change from 0 to 512 [ 52.502757][ T4645] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.516427][ T4645] ext4 filesystem being mounted at /117/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 52.530220][ T4645] EXT4-fs error (device loop0): ext4_do_update_inode:5075: inode #2: comm syz.0.368: corrupted inode contents [ 52.542273][ T4645] EXT4-fs error (device loop0): ext4_dirty_inode:5935: inode #2: comm syz.0.368: mark_inode_dirty error [ 52.657916][ T4645] EXT4-fs error (device loop0): ext4_do_update_inode:5075: inode #2: comm syz.0.368: corrupted inode contents [ 52.692401][ T4645] EXT4-fs error (device loop0): __ext4_ext_dirty:202: inode #2: comm syz.0.368: mark_inode_dirty error [ 52.779109][ T3088] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.910011][ T4656] loop1: detected capacity change from 0 to 128 [ 52.961554][ T4659] loop0: detected capacity change from 0 to 512 [ 52.977001][ T4661] loop1: detected capacity change from 0 to 512 [ 52.983621][ T4659] EXT4-fs: Ignoring removed nobh option [ 52.995258][ T4661] EXT4-fs (loop1): 1 truncate cleaned up [ 52.996334][ T4659] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2 [ 53.001846][ T4661] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.009014][ T4659] EXT4-fs error (device loop0): ext4_orphan_get:1394: inode #13: comm syz.0.369: casefold flag without casefold feature [ 53.010759][ T4659] EXT4-fs error (device loop0): ext4_orphan_get:1399: comm syz.0.369: couldn't read orphan inode 13 (err -117) [ 53.046921][ T4659] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.073276][ T4667] SELinux: security_context_str_to_sid (ñN) failed with errno=-22 [ 53.142470][ T3781] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.180221][ T4681] loop1: detected capacity change from 0 to 256 [ 53.203424][ T4681] FAT-fs (loop1): Directory bread(block 64) failed [ 53.210117][ T4681] FAT-fs (loop1): Directory bread(block 65) failed [ 53.217261][ T4681] FAT-fs (loop1): Directory bread(block 66) failed [ 53.223778][ T4681] FAT-fs (loop1): Directory bread(block 67) failed [ 53.230762][ T4681] FAT-fs (loop1): Directory bread(block 68) failed [ 53.237718][ T4681] FAT-fs (loop1): Directory bread(block 69) failed [ 53.239423][ T4687] loop4: detected capacity change from 0 to 1024 [ 53.244244][ T4681] FAT-fs (loop1): Directory bread(block 70) failed [ 53.260780][ T4681] FAT-fs (loop1): Directory bread(block 71) failed [ 53.268383][ T4681] FAT-fs (loop1): Directory bread(block 72) failed [ 53.274953][ T4681] FAT-fs (loop1): Directory bread(block 73) failed [ 53.302275][ T4687] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.341339][ T3850] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.369952][ T4701] loop3: detected capacity change from 0 to 1024 [ 53.402651][ T4701] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.474735][ T4529] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.544489][ T4725] loop4: detected capacity change from 0 to 1024 [ 53.552477][ T4725] EXT4-fs: Ignoring removed orlov option [ 53.558240][ T4725] EXT4-fs: Ignoring removed nomblk_io_submit option [ 53.618592][ T29] kauditd_printk_skb: 96 callbacks suppressed [ 53.618606][ T29] audit: type=1400 audit(1721278692.318:457): avc: denied { read } for pid=4729 comm="syz.4.393" name="ppp" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 53.736801][ T4732] netlink: 9 bytes leftover after parsing attributes in process `syz.4.394'. [ 53.761423][ T4732] gretap0: entered promiscuous mode [ 53.982683][ T29] audit: type=1400 audit(1721278692.678:458): avc: denied { bind } for pid=4737 comm="syz.0.395" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 54.005149][ T29] audit: type=1400 audit(1721278692.698:459): avc: denied { create } for pid=4737 comm="syz.0.395" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 54.029232][ T4738] bond_slave_0: entered promiscuous mode [ 54.034911][ T4738] bond_slave_1: entered promiscuous mode [ 54.043850][ T4738] bond_slave_0: left promiscuous mode [ 54.049280][ T4738] bond_slave_1: left promiscuous mode [ 54.112085][ T4741] loop4: detected capacity change from 0 to 1024 [ 54.121527][ T29] audit: type=1400 audit(1721278692.818:460): avc: denied { remount } for pid=4740 comm="syz.4.397" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 54.141316][ T29] audit: type=1400 audit(1721278692.828:461): avc: denied { read } for pid=4740 comm="syz.4.397" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 54.164300][ T29] audit: type=1400 audit(1721278692.828:462): avc: denied { open } for pid=4740 comm="syz.4.397" path="/dev/nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 54.181488][ T4747] cgroup: noprefix used incorrectly [ 54.294170][ T4754] loop4: detected capacity change from 0 to 1024 [ 54.301353][ T4754] EXT4-fs: Ignoring removed orlov option [ 54.307282][ T4754] EXT4-fs: Ignoring removed nomblk_io_submit option [ 54.354786][ T29] audit: type=1326 audit(1721278693.048:463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4755 comm="syz.0.404" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6b44fa5ad9 code=0x0 [ 54.397439][ T29] audit: type=1400 audit(1721278693.088:464): avc: denied { read } for pid=4766 comm="syz.1.408" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 54.399625][ T4767] erspan1: entered allmulticast mode [ 54.437508][ T29] audit: type=1326 audit(1721278693.128:465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4768 comm="syz.0.409" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6b44fa5ad9 code=0x0 [ 54.447712][ T4771] loop1: detected capacity change from 0 to 512 [ 54.468899][ T4771] EXT4-fs (loop1): corrupt root inode, run e2fsck [ 54.475349][ T4771] EXT4-fs (loop1): mount failed [ 54.514458][ T4779] netlink: 'syz.4.413': attribute type 3 has an invalid length. [ 54.522146][ T4779] netlink: 'syz.4.413': attribute type 1 has an invalid length. [ 54.529886][ T4779] netlink: 112865 bytes leftover after parsing attributes in process `syz.4.413'. [ 54.554859][ T29] audit: type=1400 audit(1721278693.248:466): avc: denied { create } for pid=4782 comm="syz.4.414" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 55.299378][ T4794] loop0: detected capacity change from 0 to 1024 [ 55.307633][ T4794] EXT4-fs: Ignoring removed orlov option [ 55.313406][ T4794] EXT4-fs: Ignoring removed nomblk_io_submit option [ 55.331688][ T4798] loop1: detected capacity change from 0 to 1024 [ 55.338429][ T4798] EXT4-fs: Ignoring removed bh option [ 55.390334][ T4803] loop0: detected capacity change from 0 to 512 [ 55.396533][ T4806] loop1: detected capacity change from 0 to 2048 [ 55.397018][ T4803] EXT4-fs: Ignoring removed mblk_io_submit option [ 55.410783][ T4803] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 55.412137][ T4806] ext3: Unknown parameter 'uid<00000000000000000000' [ 55.421181][ T4803] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b042c118, mo2=0002] [ 55.434279][ T4803] System zones: 1-12 [ 55.440068][ T4803] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2234: inode #15: comm syz.0.421: corrupted in-inode xattr: e_value size too large [ 55.454240][ T4803] EXT4-fs error (device loop0): ext4_orphan_get:1399: comm syz.0.421: couldn't read orphan inode 15 (err -117) [ 55.599870][ T40] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.639160][ T40] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.660107][ T4810] loop4: detected capacity change from 0 to 8192 [ 55.791596][ T4810] loop4: p1 < > p2 p3 < p5 p6 > p4 [ 55.792928][ T4830] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks [ 55.796852][ T4810] loop4: partition table partially beyond EOD, truncated [ 55.816226][ T4810] loop4: p1 start 277760 is beyond EOD, truncated [ 55.822665][ T4810] loop4: p2 start 6684676 is beyond EOD, truncated [ 55.836693][ T4810] loop4: p5 start 6684676 is beyond EOD, truncated [ 55.853625][ T2785] loop4: p1 < > p2 p3 < p5 p6 > p4 [ 55.859042][ T2785] loop4: partition table partially beyond EOD, truncated [ 55.868195][ T2785] loop4: p1 start 277760 is beyond EOD, truncated [ 55.874641][ T2785] loop4: p2 start 6684676 is beyond EOD, truncated [ 55.882527][ T2785] loop4: p5 start 6684676 is beyond EOD, truncated [ 55.890508][ T40] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.913044][ T4819] chnl_net:caif_netlink_parms(): no params data found [ 55.928592][ T3074] udevd[3074]: inotify_add_watch(7, /dev/loop4p6, 10) failed: No such file or directory [ 55.939559][ T4811] udevd[4811]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 55.961681][ T40] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.983089][ T4840] loop4: detected capacity change from 0 to 1024 [ 56.000275][ T4840] EXT4-fs: Ignoring removed orlov option [ 56.006085][ T4840] EXT4-fs: Ignoring removed nomblk_io_submit option [ 56.008936][ T4843] loop1: detected capacity change from 0 to 736 [ 56.022974][ T4843] iso9660: Bad value for 'mode' [ 56.029051][ T4819] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.036204][ T4819] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.046835][ T4843] loop1: detected capacity change from 0 to 512 [ 56.057146][ T4819] bridge_slave_0: entered allmulticast mode [ 56.086260][ T4819] bridge_slave_0: entered promiscuous mode [ 56.086348][ T4843] ext4 filesystem being mounted at /66/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 56.134327][ T40] bridge_slave_1: left allmulticast mode [ 56.140014][ T40] bridge_slave_1: left promiscuous mode [ 56.145801][ T40] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.188773][ T40] bridge_slave_0: left allmulticast mode [ 56.194485][ T40] bridge_slave_0: left promiscuous mode [ 56.200172][ T40] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.322443][ T40] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 56.335625][ T40] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 56.347138][ T40] bond0 (unregistering): Released all slaves [ 56.365926][ T4819] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.373064][ T4819] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.382764][ T4819] bridge_slave_1: entered allmulticast mode [ 56.390762][ T4819] bridge_slave_1: entered promiscuous mode [ 56.422731][ T4819] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.434678][ T4819] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.466923][ T4819] team0: Port device team_slave_0 added [ 56.473984][ T4819] team0: Port device team_slave_1 added [ 56.508218][ T4861] loop4: detected capacity change from 0 to 764 [ 56.531249][ T40] hsr_slave_0: left promiscuous mode [ 56.547630][ T40] hsr_slave_1: left promiscuous mode [ 56.556492][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 56.564046][ T40] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 56.571957][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 56.579607][ T40] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 56.589619][ T40] veth1_macvtap: left promiscuous mode [ 56.595110][ T40] veth0_macvtap: left promiscuous mode [ 56.600720][ T40] veth1_vlan: left promiscuous mode [ 56.606046][ T40] veth0_vlan: left promiscuous mode [ 56.692740][ T40] team0 (unregistering): Port device team_slave_1 removed [ 56.702272][ T40] team0 (unregistering): Port device team_slave_0 removed [ 56.739041][ T4819] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.746067][ T4819] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.772035][ T4819] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.789365][ T4819] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.796355][ T4819] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.822394][ T4819] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.853816][ T4881] loop1: detected capacity change from 0 to 512 [ 56.860497][ T4881] EXT4-fs: Ignoring removed i_version option [ 56.867250][ T4881] EXT4-fs: Ignoring removed mblk_io_submit option [ 56.874017][ T4881] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 56.884879][ T4819] hsr_slave_0: entered promiscuous mode [ 56.891821][ T4819] hsr_slave_1: entered promiscuous mode [ 56.899683][ T4881] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b056e118, mo2=0002] [ 56.913332][ T4881] System zones: 1-12 [ 56.926049][ T4881] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2234: inode #15: comm syz.1.438: corrupted in-inode xattr: e_value size too large [ 56.952197][ T4881] EXT4-fs error (device loop1): ext4_orphan_get:1399: comm syz.1.438: couldn't read orphan inode 15 (err -117) [ 57.017715][ T4896] loop0: detected capacity change from 0 to 512 [ 57.025157][ T4896] EXT4-fs: Ignoring removed mblk_io_submit option [ 57.042835][ T4896] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2234: inode #12: comm syz.0.441: corrupted in-inode xattr: invalid ea_ino [ 57.069125][ T4896] EXT4-fs error (device loop0): ext4_orphan_get:1399: comm syz.0.441: couldn't read orphan inode 12 (err -117) [ 57.085066][ T4896] openvswitch: netlink: Key type 31 is not supported [ 57.123929][ T4908] netlink: 168 bytes leftover after parsing attributes in process `syz.0.443'. [ 57.241296][ T4923] loop4: detected capacity change from 0 to 256 [ 57.271328][ T4928] loop1: detected capacity change from 0 to 256 [ 57.291078][ T4928] FAULT_INJECTION: forcing a failure. [ 57.291078][ T4928] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 57.304469][ T4928] CPU: 0 PID: 4928 Comm: syz.1.448 Not tainted 6.10.0-syzkaller-04472-g51835949dda3 #0 [ 57.314190][ T4928] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 57.324265][ T4928] Call Trace: [ 57.327569][ T4928] [ 57.330521][ T4928] dump_stack_lvl+0xf2/0x150 [ 57.335157][ T4928] dump_stack+0x15/0x20 [ 57.339385][ T4928] should_fail_ex+0x229/0x230 [ 57.344092][ T4928] __should_fail_alloc_page+0xfd/0x110 [ 57.349563][ T4928] alloc_pages_bulk_noprof+0x106/0x6b0 [ 57.355021][ T4928] ? __kmalloc_noprof+0x165/0x370 [ 57.360140][ T4928] copy_splice_read+0xfa/0x5d0 [ 57.364917][ T4928] ? alloc_pipe_info+0x1cb/0x360 [ 57.369881][ T4928] ? __kmalloc_noprof+0x203/0x370 [ 57.374909][ T4928] ? __pfx_copy_splice_read+0x10/0x10 [ 57.380334][ T4928] splice_direct_to_actor+0x26c/0x670 [ 57.385721][ T4928] ? __pfx_direct_splice_actor+0x10/0x10 [ 57.391422][ T4928] do_splice_direct+0xd7/0x150 [ 57.396219][ T4928] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 57.402129][ T4928] do_sendfile+0x3ab/0x950 [ 57.406607][ T4928] __x64_sys_sendfile64+0x110/0x150 [ 57.411812][ T4928] x64_sys_call+0xed5/0x2d60 [ 57.416437][ T4928] do_syscall_64+0xc9/0x1c0 [ 57.420942][ T4928] ? clear_bhb_loop+0x55/0xb0 [ 57.425670][ T4928] ? clear_bhb_loop+0x55/0xb0 [ 57.430349][ T4928] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 57.436279][ T4928] RIP: 0033:0x7fcf44265ad9 [ 57.440685][ T4928] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 57.460507][ T4928] RSP: 002b:00007fcf434e7048 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 57.468950][ T4928] RAX: ffffffffffffffda RBX: 00007fcf443f3f60 RCX: 00007fcf44265ad9 [ 57.476967][ T4928] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000005 [ 57.484985][ T4928] RBP: 00007fcf434e70a0 R08: 0000000000000000 R09: 0000000000000000 [ 57.492963][ T4928] R10: 0000000080000000 R11: 0000000000000246 R12: 0000000000000001 [ 57.500928][ T4928] R13: 000000000000000b R14: 00007fcf443f3f60 R15: 00007fff0c19e088 [ 57.508918][ T4928] [ 57.991505][ T4947] xt_TCPMSS: Only works on TCP SYN packets [ 58.005618][ T4819] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 58.061754][ T4819] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 58.121857][ T4819] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 58.163114][ T4819] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 58.278341][ T4819] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.289655][ T4819] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.308179][ T4819] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 58.318636][ T4819] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 58.333797][ T3160] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.340990][ T3160] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.387474][ T4961] loop3: detected capacity change from 0 to 256 [ 58.395551][ T3160] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.402645][ T3160] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.403057][ T4961] vfat: Unknown parameter '0177777777777777777777700000000000000000000' [ 58.425664][ T4962] loop4: detected capacity change from 0 to 512 [ 58.450187][ T4965] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4965 comm=syz.4.453 [ 58.554954][ T4819] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.571044][ T4996] xt_TCPMSS: Only works on TCP SYN packets [ 58.734565][ T4819] veth0_vlan: entered promiscuous mode [ 58.743972][ T4819] veth1_vlan: entered promiscuous mode [ 58.783492][ T4819] veth0_macvtap: entered promiscuous mode [ 58.787694][ T5045] loop0: detected capacity change from 0 to 512 [ 58.799805][ T4819] veth1_macvtap: entered promiscuous mode [ 58.818196][ T4819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.828767][ T4819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.838621][ T4819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.849086][ T4819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.858911][ T4819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.869368][ T4819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.879196][ T4819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.889707][ T4819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.899541][ T4819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.909993][ T4819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.919859][ T4819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.930419][ T4819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.942406][ T4819] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.957413][ T4819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.967887][ T4819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.977715][ T4819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.988147][ T4819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.997965][ T4819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.008576][ T4819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.018407][ T4819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.028852][ T4819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.038680][ T4819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.049122][ T4819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.058962][ T4819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.069528][ T4819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.077048][ T29] kauditd_printk_skb: 21 callbacks suppressed [ 59.077070][ T29] audit: type=1400 audit(1721278697.768:488): avc: denied { read } for pid=5055 comm="syz.0.471" path="socket:[10170]" dev="sockfs" ino=10170 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 59.081482][ T4819] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.130285][ T29] audit: type=1400 audit(1721278697.828:489): avc: denied { execute } for pid=5055 comm="syz.0.471" path="/144/blkio.bfq.time_recursive" dev="tmpfs" ino=809 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 59.174333][ T4819] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.183174][ T4819] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.192433][ T4819] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.201501][ T4819] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.216948][ T5071] netlink: 12 bytes leftover after parsing attributes in process `syz.1.475'. [ 59.308887][ T5081] loop1: detected capacity change from 0 to 2048 [ 59.401390][ T29] audit: type=1326 audit(1721278698.098:490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5077 comm="syz.2.426" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2996795ad9 code=0x0 [ 59.427137][ T29] audit: type=1326 audit(1721278698.118:491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5077 comm="syz.2.426" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2996795ad9 code=0x0 [ 59.452536][ T5088] tipc: Started in network mode [ 59.457427][ T5088] tipc: Node identity ac1414aa, cluster identity 4711 [ 59.465316][ T5088] tipc: New replicast peer: 100.1.1.1 [ 59.470749][ T5088] tipc: Enabled bearer , priority 10 [ 59.617740][ T5096] qrtr: Invalid version 255 [ 59.623811][ T29] audit: type=1400 audit(1721278698.318:492): avc: denied { getopt } for pid=5095 comm="syz.1.481" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 59.640077][ T5096] dvmrp1: entered allmulticast mode [ 59.657006][ T5096] dvmrp1: left allmulticast mode [ 59.703691][ T5102] loop3: detected capacity change from 0 to 256 [ 59.711944][ T29] audit: type=1400 audit(1721278698.408:493): avc: denied { read } for pid=5100 comm="syz.2.483" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 59.733651][ T5104] xt_hashlimit: invalid interval [ 59.793513][ T5109] loop0: detected capacity change from 0 to 1024 [ 59.913777][ T29] audit: type=1400 audit(1721278698.608:494): avc: denied { getopt } for pid=5110 comm="syz.2.486" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 59.933690][ T29] audit: type=1400 audit(1721278698.608:495): avc: denied { read } for pid=5110 comm="syz.2.486" name="uhid" dev="devtmpfs" ino=227 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 59.956498][ T29] audit: type=1400 audit(1721278698.608:496): avc: denied { open } for pid=5110 comm="syz.2.486" path="/dev/uhid" dev="devtmpfs" ino=227 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 59.991769][ T5126] loop0: detected capacity change from 0 to 1024 [ 60.017163][ T5126] netlink: 64 bytes leftover after parsing attributes in process `syz.0.492'. [ 60.031364][ T5130] loop2: detected capacity change from 0 to 512 [ 60.049786][ T5130] EXT4-fs (loop2): ea_inode feature is not supported for Hurd [ 60.062853][ T5130] netlink: 'syz.2.494': attribute type 10 has an invalid length. [ 60.084315][ T5130] team0: Port device netdevsim1 added [ 60.092204][ T5130] netlink: 'syz.2.494': attribute type 10 has an invalid length. [ 60.107989][ T5130] team0: Port device netdevsim1 removed [ 60.120164][ T5130] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 60.171667][ T5143] loop1: detected capacity change from 0 to 2048 [ 60.185027][ T5143] EXT4-fs: Ignoring removed nomblk_io_submit option [ 60.191856][ T5143] ext4: Unknown parameter 'nomblk_io_submitbarrier' [ 60.220598][ T5143] netlink: 28 bytes leftover after parsing attributes in process `syz.1.500'. [ 60.237751][ T29] audit: type=1400 audit(1721278698.878:497): avc: denied { mounton } for pid=5142 comm="syz.1.500" path="/syzcgroup/unified/syz1/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 60.278107][ T5152] netlink: 'syz.0.503': attribute type 3 has an invalid length. [ 60.476156][ T3160] tipc: Node number set to 2886997162 [ 60.690696][ T5165] loop1: detected capacity change from 0 to 256 [ 60.731958][ T5165] netlink: 8 bytes leftover after parsing attributes in process `syz.1.508'. [ 61.167011][ T5173] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=61200 sclass=netlink_route_socket pid=5173 comm=syz.3.509 [ 61.184790][ T5169] ieee802154 phy0 wpan0: encryption failed: -22 [ 61.222758][ T5181] netlink: 'syz.2.512': attribute type 1 has an invalid length. [ 61.392505][ T5203] loop0: detected capacity change from 0 to 128 [ 61.500669][ T5209] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=61200 sclass=netlink_route_socket pid=5209 comm=syz.1.524 [ 61.831044][ T5219] loop0: detected capacity change from 0 to 1024 [ 61.856981][ T5219] netlink: 28 bytes leftover after parsing attributes in process `syz.0.527'. [ 61.865921][ T5219] team0: entered promiscuous mode [ 61.870929][ T5219] team_slave_0: entered promiscuous mode [ 61.876722][ T5219] team_slave_1: entered promiscuous mode [ 61.882423][ T5219] team0: entered allmulticast mode [ 61.887613][ T5219] team_slave_0: entered allmulticast mode [ 61.893426][ T5219] team_slave_1: entered allmulticast mode [ 61.904786][ T5219] team0: Cannot enslave team device to itself [ 61.961208][ T5233] loop1: detected capacity change from 0 to 1024 [ 61.968118][ T5233] ext4: Unknown parameter 'euid<00000000000000060929' [ 62.004900][ T5238] loop0: detected capacity change from 0 to 132 [ 62.038452][ T5238] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR [ 62.038479][ T5238] EXT4-fs: failed to create workqueue [ 62.053349][ T5238] EXT4-fs (loop0): mount failed [ 62.080814][ T5246] netlink: 20 bytes leftover after parsing attributes in process `syz.0.534'. [ 62.106050][ T5248] loop0: detected capacity change from 0 to 2048 [ 62.138202][ T5248] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.145368][ T5248] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.264384][ T5260] openvswitch: netlink: ufid size 62 bytes exceeds the range (1, 16) [ 62.272555][ T5260] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 62.312691][ T5267] loop2: detected capacity change from 0 to 512 [ 62.319278][ T5267] EXT4-fs: test_dummy_encryption option not supported [ 62.348799][ T5271] bridge0: port 3(veth3) entered blocking state [ 62.355109][ T5271] bridge0: port 3(veth3) entered disabled state [ 62.362324][ T5271] veth3: entered allmulticast mode [ 62.372768][ T5271] veth3: entered promiscuous mode [ 62.397773][ T5272] loop0: detected capacity change from 0 to 1024 [ 62.404507][ T5272] EXT4-fs: Ignoring removed orlov option [ 62.426296][ T5272] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 62.435107][ T5272] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 62.446075][ T5272] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (12914!=20869) [ 62.457183][ T5272] EXT4-fs (loop0): invalid journal inode [ 62.462843][ T5272] EXT4-fs (loop0): can't get journal size [ 62.631566][ T5286] loop2: detected capacity change from 0 to 512 [ 62.641672][ T5286] EXT4-fs: Ignoring removed oldalloc option [ 62.655627][ T5286] EXT4-fs error (device loop2): ext4_xattr_inode_iget:436: comm syz.2.546: Parent and EA inode have the same ino 15 [ 62.669303][ T5286] EXT4-fs (loop2): Remounting filesystem read-only [ 62.675935][ T5286] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2856: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 62.689091][ T5286] EXT4-fs warning (device loop2): ext4_evict_inode:254: couldn't mark inode dirty (err -5) [ 62.699466][ T5286] EXT4-fs (loop2): 1 orphan inode deleted [ 62.705718][ T5286] SELinux: (dev loop2, type ext4) getxattr errno 5 [ 62.754238][ T5291] netlink: 12 bytes leftover after parsing attributes in process `syz.3.548'. [ 62.897848][ T5291] netlink: 4 bytes leftover after parsing attributes in process `syz.3.548'. [ 63.291894][ T5307] netlink: 172 bytes leftover after parsing attributes in process `syz.3.553'. [ 63.448893][ T5326] loop0: detected capacity change from 0 to 256 [ 63.480089][ T5327] nfs: Unknown parameter './file0' [ 63.488315][ T5326] nfs: Unknown parameter './file0' [ 63.500376][ T5327] netlink: 16 bytes leftover after parsing attributes in process `syz.0.558'. [ 63.534144][ T5327] Core dump to core aborted: cannot preserve file permissions [ 63.735554][ T5369] netlink: 20 bytes leftover after parsing attributes in process `syz.4.574'. [ 63.840495][ T5390] netlink: 'syz.2.582': attribute type 1 has an invalid length. [ 63.848247][ T5390] netlink: 4 bytes leftover after parsing attributes in process `syz.2.582'. [ 64.219116][ T3153] IPVS: starting estimator thread 0... [ 64.281009][ T5410] loop2: detected capacity change from 0 to 512 [ 64.309821][ T5410] ext4 filesystem being mounted at /21/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 64.310519][ T5412] loop4: detected capacity change from 0 to 512 [ 64.326567][ T29] kauditd_printk_skb: 199 callbacks suppressed [ 64.326579][ T29] audit: type=1400 audit(1721278703.018:697): avc: denied { write } for pid=5409 comm="syz.2.589" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 64.354419][ T29] audit: type=1400 audit(1721278703.018:698): avc: denied { add_name } for pid=5409 comm="syz.2.589" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 64.374934][ T29] audit: type=1400 audit(1721278703.018:699): avc: denied { create } for pid=5409 comm="syz.2.589" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 64.395132][ T5402] IPVS: using max 3552 ests per chain, 177600 per kthread [ 64.413290][ T5412] EXT4-fs: Ignoring removed orlov option [ 64.460144][ T4819] EXT4-fs error (device loop2): ext4_readdir:260: inode #2: block 3: comm syz-executor: path /21/file0: bad entry in directory: rec_len is smaller than minimal - offset=60, inode=113, rec_len=0, size=2048 fake=0 [ 64.478302][ T29] audit: type=1400 audit(1721278703.108:700): avc: denied { read write open } for pid=5409 comm="syz.2.589" path="/21/file0/bus" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 64.482114][ T5412] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 64.503934][ T29] audit: type=1400 audit(1721278703.108:701): avc: denied { mounton } for pid=5409 comm="syz.2.589" path="/21/file0/bus" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 64.503957][ T29] audit: type=1400 audit(1721278703.128:702): avc: denied { bind } for pid=5419 comm="syz.1.591" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 64.550487][ T5426] loop0: detected capacity change from 0 to 1024 [ 64.554018][ T29] audit: type=1400 audit(1721278703.138:703): avc: denied { connect } for pid=5419 comm="syz.1.591" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 64.581820][ T5412] EXT4-fs (loop4): orphan cleanup on readonly fs [ 64.586953][ T4819] EXT4-fs error (device loop2): ext4_readdir:260: inode #2: block 12: comm syz-executor: path /21/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5066064, rec_len=1, size=2048 fake=0 [ 64.588644][ T5412] Quota error (device loop4): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 64.619196][ T5412] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 64.629187][ T5412] EXT4-fs error (device loop4): ext4_acquire_dquot:6844: comm syz.4.590: Failed to acquire dquot type 1 [ 64.632297][ T5426] EXT4-fs: Ignoring removed orlov option [ 64.641835][ T5412] EXT4-fs (loop4): 1 truncate cleaned up [ 64.646245][ T5426] EXT4-fs: Ignoring removed nomblk_io_submit option [ 64.672626][ T5428] netlink: 20 bytes leftover after parsing attributes in process `syz.1.595'. [ 64.685442][ T4819] EXT4-fs error (device loop2): ext4_readdir:260: inode #2: block 13: comm syz-executor: path /21/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653246737, rec_len=1, size=2048 fake=0 [ 64.714302][ T4819] EXT4-fs error (device loop2): ext4_readdir:260: inode #2: block 14: comm syz-executor: path /21/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 64.739743][ T29] audit: type=1400 audit(1721278703.408:704): avc: denied { setopt } for pid=5429 comm="syz.3.596" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 64.766532][ T4819] EXT4-fs error (device loop2): ext4_readdir:260: inode #2: block 15: comm syz-executor: path /21/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 64.788652][ T4819] EXT4-fs error (device loop2): ext4_readdir:260: inode #2: block 16: comm syz-executor: path /21/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653245223, rec_len=1, size=2048 fake=0 [ 64.816205][ T4819] EXT4-fs error (device loop2): ext4_readdir:260: inode #2: block 17: comm syz-executor: path /21/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 64.844302][ T5438] netlink: 12 bytes leftover after parsing attributes in process `syz.1.600'. [ 64.858447][ T4819] EXT4-fs error (device loop2): ext4_map_blocks:580: inode #2: block 18: comm syz-executor: lblock 23 mapped to illegal pblock 18 (length 1) [ 64.898675][ T5440] netlink: 8 bytes leftover after parsing attributes in process `syz.1.601'. [ 64.955421][ T5445] loop0: detected capacity change from 0 to 512 [ 64.979087][ T5445] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 64.991276][ T5453] loop1: detected capacity change from 0 to 256 [ 64.997777][ T5445] System zones: 0-2, 18-18, 34-34 [ 65.009833][ T5445] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.602: bg 0: block 248: padding at end of block bitmap is not set [ 65.028063][ T5445] EXT4-fs error (device loop0): ext4_acquire_dquot:6844: comm syz.0.602: Failed to acquire dquot type 1 [ 65.045149][ T5455] netlink: 'syz.4.605': attribute type 17 has an invalid length. [ 65.052950][ T5455] netlink: 48 bytes leftover after parsing attributes in process `syz.4.605'. [ 65.062077][ T5445] EXT4-fs (loop0): 1 truncate cleaned up [ 65.068175][ T5445] ext4 filesystem being mounted at /174/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 65.150996][ T50] EXT4-fs error (device loop0): ext4_release_dquot:6867: comm kworker/u8:3: Failed to release dquot type 1 [ 65.175152][ T5463] loop1: detected capacity change from 0 to 512 [ 65.188294][ T5463] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2234: inode #15: comm syz.1.608: corrupted in-inode xattr: invalid ea_ino [ 65.201794][ T5463] EXT4-fs error (device loop1): ext4_orphan_get:1399: comm syz.1.608: couldn't read orphan inode 15 (err -117) [ 65.258022][ T5468] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5468 comm=syz.0.610 [ 65.560735][ T5485] netlink: 'syz.1.616': attribute type 1 has an invalid length. [ 65.580192][ T5488] loop0: detected capacity change from 0 to 4096 [ 65.691319][ T5501] loop0: detected capacity change from 0 to 512 [ 65.719425][ T5501] ext4 filesystem being mounted at /185/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 65.769976][ T5506] loop1: detected capacity change from 0 to 1024 [ 65.781765][ T5506] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (24866!=20869) [ 65.803026][ T5506] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 65.813817][ T5506] EXT4-fs (loop1): invalid journal inode [ 65.846230][ T5509] loop3: detected capacity change from 0 to 2048 [ 65.867841][ T3160] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 65.875406][ T3160] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 65.899227][ T3160] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz0] on syz1 [ 65.910376][ T5509] ext4 filesystem being mounted at /37/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 66.147844][ T4819] EXT4-fs unmount: 45 callbacks suppressed [ 66.147858][ T4819] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.314925][ T5529] loop4: detected capacity change from 0 to 164 [ 66.349244][ T5525] rock: directory entry would overflow storage [ 66.355427][ T5525] rock: sig=0x4f50, size=4, remaining=3 [ 66.361016][ T5525] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 66.492340][ T5539] 9pnet_fd: Insufficient options for proto=fd [ 66.510851][ T5524] chnl_net:caif_netlink_parms(): no params data found [ 66.528999][ T4529] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.563228][ T5542] vhci_hcd: invalid port number 0 [ 66.644681][ T5549] netlink: zone id is out of range [ 66.668894][ T5524] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.676364][ T5524] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.693633][ T5549] netlink: zone id is out of range [ 66.701696][ T5524] bridge_slave_0: entered allmulticast mode [ 66.708208][ T5524] bridge_slave_0: entered promiscuous mode [ 66.711375][ T5549] netlink: zone id is out of range [ 66.715669][ T5524] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.726356][ T5524] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.735971][ T5524] bridge_slave_1: entered allmulticast mode [ 66.744207][ T5524] bridge_slave_1: entered promiscuous mode [ 66.763062][ T5549] netlink: zone id is out of range [ 66.780147][ T5549] netlink: del zone limit has 4 unknown bytes [ 66.826636][ T5554] process 'syz.1.635' launched './file1' with NULL argv: empty string added [ 66.875574][ T5524] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.887955][ T5524] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.050398][ T5524] team0: Port device team_slave_0 added [ 67.074856][ T5524] team0: Port device team_slave_1 added [ 67.123410][ T5524] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.130398][ T5524] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.156419][ T5524] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.198038][ T5524] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.204997][ T5524] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.231000][ T5524] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.278288][ T5524] hsr_slave_0: entered promiscuous mode [ 67.284490][ T5524] hsr_slave_1: entered promiscuous mode [ 67.290543][ T5524] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 67.298139][ T5524] Cannot create hsr debugfs directory [ 67.316390][ T5568] loop1: detected capacity change from 0 to 164 [ 67.326130][ T5568] rock: directory entry would overflow storage [ 67.332305][ T5568] rock: sig=0x4f50, size=4, remaining=3 [ 67.337987][ T5568] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 67.401727][ T5571] loop1: detected capacity change from 0 to 1024 [ 67.420426][ T5571] EXT4-fs: Ignoring removed orlov option [ 67.426216][ T5571] EXT4-fs: Ignoring removed nomblk_io_submit option [ 67.440309][ T5524] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.467220][ T5571] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 67.510413][ T3781] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.522050][ T5524] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.574473][ T5578] 9pnet_fd: Insufficient options for proto=fd [ 67.594009][ T5524] bond0: (slave netdevsim1): Releasing backup interface [ 67.612164][ T5524] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.638314][ T5582] usb usb5: usbfs: process 5582 (syz.0.644) did not claim interface 0 before use [ 67.668357][ T5524] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.694367][ T5586] loop0: detected capacity change from 0 to 128 [ 67.713649][ T5586] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 67.738139][ T5586] ext4 filesystem being mounted at /192/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 67.782103][ T5524] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 67.792776][ T5524] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 67.801192][ T5524] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 67.809942][ T5524] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 67.860195][ T5524] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.876454][ T5524] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.890412][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.890491][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.892162][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.892260][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.901929][ T5609] __nla_validate_parse: 3 callbacks suppressed [ 67.901942][ T5609] netlink: 12 bytes leftover after parsing attributes in process `syz.4.652'. [ 67.914930][ T5524] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 67.953393][ T5524] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 68.070056][ T3088] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 68.203537][ T5620] 9pnet_fd: Insufficient options for proto=fd [ 68.235655][ T5626] loop3: detected capacity change from 0 to 512 [ 68.248360][ T5524] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.315440][ T5628] FAULT_INJECTION: forcing a failure. [ 68.315440][ T5628] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 68.328766][ T5628] CPU: 0 PID: 5628 Comm: syz.1.658 Not tainted 6.10.0-syzkaller-04472-g51835949dda3 #0 [ 68.338534][ T5628] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 68.348587][ T5628] Call Trace: [ 68.351864][ T5628] [ 68.354783][ T5628] dump_stack_lvl+0xf2/0x150 [ 68.359459][ T5628] dump_stack+0x15/0x20 [ 68.363625][ T5628] should_fail_ex+0x229/0x230 [ 68.368454][ T5628] __should_fail_alloc_page+0xfd/0x110 [ 68.373930][ T5628] __alloc_pages_noprof+0x109/0x360 [ 68.379148][ T5628] alloc_pages_mpol_noprof+0xb1/0x1e0 [ 68.384643][ T5628] shmem_get_folio_gfp+0x3e4/0xb70 [ 68.389831][ T5628] shmem_write_begin+0xa0/0x1c0 [ 68.394774][ T5628] generic_perform_write+0x1d5/0x410 [ 68.400069][ T5628] ? __pfx_shmem_write_end+0x10/0x10 [ 68.405411][ T5628] shmem_file_write_iter+0xc8/0xf0 [ 68.410579][ T5628] vfs_write+0x78f/0x900 [ 68.414933][ T5628] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 68.420769][ T5628] ksys_write+0xeb/0x1b0 [ 68.425021][ T5628] __x64_sys_write+0x42/0x50 [ 68.429734][ T5628] x64_sys_call+0x27dd/0x2d60 [ 68.434464][ T5628] do_syscall_64+0xc9/0x1c0 [ 68.439044][ T5628] ? clear_bhb_loop+0x55/0xb0 [ 68.443735][ T5628] ? clear_bhb_loop+0x55/0xb0 [ 68.448655][ T5628] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.454640][ T5628] RIP: 0033:0x7fcf4426465f [ 68.459056][ T5628] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 29 8c 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 7c 8c 02 00 48 [ 68.470073][ T5524] veth0_vlan: entered promiscuous mode [ 68.478814][ T5628] RSP: 002b:00007fcf434e6e00 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 68.478837][ T5628] RAX: ffffffffffffffda RBX: 0000000000040000 RCX: 00007fcf4426465f [ 68.478857][ T5628] RDX: 0000000000040000 RSI: 00007fcf3b0c7000 RDI: 0000000000000006 [ 68.493950][ T5524] veth1_vlan: entered promiscuous mode [ 68.500624][ T5628] RBP: 0000000000000000 R08: 0000000000000000 R09: 00000000000004e3 [ 68.500639][ T5628] R10: 0000000020000842 R11: 0000000000000293 R12: 0000000000000006 [ 68.500651][ T5628] R13: 00007fcf434e6f00 R14: 00007fcf434e6ec0 R15: 00007fcf3b0c7000 [ 68.500667][ T5628] [ 68.540606][ T5626] EXT4-fs error (device loop3): ext4_orphan_get:1394: inode #15: comm syz.3.657: casefold flag without casefold feature [ 68.553817][ T5637] netlink: 14 bytes leftover after parsing attributes in process `syz.0.659'. [ 68.554879][ T5626] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz.3.657: couldn't read orphan inode 15 (err -117) [ 68.588637][ T5640] netlink: 112 bytes leftover after parsing attributes in process `syz.0.660'. [ 68.590077][ T5524] veth0_macvtap: entered promiscuous mode [ 68.608087][ T5524] veth1_macvtap: entered promiscuous mode [ 68.618105][ T5626] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 68.620828][ T5524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.640809][ T5524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.650665][ T5524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.661270][ T5524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.671297][ T5524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.673543][ T5645] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 68.681975][ T5524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.702245][ T5524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.712875][ T5524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.722904][ T5524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.733360][ T5524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.743419][ T5524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.753907][ T5524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.763868][ T5524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.774323][ T5524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.786009][ T5524] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.808326][ T5524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.818980][ T5524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.828900][ T5524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.839465][ T5524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.849563][ T5524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.860013][ T5524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.870214][ T5524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.880669][ T5524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.883112][ T5655] loop1: detected capacity change from 0 to 1024 [ 68.890698][ T5524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.907418][ T5524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.917280][ T5524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.927710][ T5524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.937584][ T5524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.948019][ T5524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.963520][ T5655] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (24866!=20869) [ 68.983259][ T5655] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 68.999737][ T5524] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.012691][ T4529] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.027520][ T5524] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.036395][ T5524] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.045117][ T5524] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.051689][ T5664] loop0: detected capacity change from 0 to 1024 [ 69.053920][ T5524] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.073752][ T5664] EXT4-fs: Ignoring removed orlov option [ 69.079468][ T5664] EXT4-fs: Ignoring removed nomblk_io_submit option [ 69.102745][ T5655] EXT4-fs (loop1): invalid journal inode [ 69.130653][ T5664] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.143899][ T5668] netlink: 116 bytes leftover after parsing attributes in process `syz.3.670'. [ 69.240508][ T5676] loop3: detected capacity change from 0 to 1024 [ 69.249036][ T3088] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.259986][ T5676] EXT4-fs (loop3): blocks per group (131072) and clusters per group (8192) inconsistent [ 69.304884][ T5676] loop3: detected capacity change from 0 to 512 [ 69.342285][ T29] kauditd_printk_skb: 127 callbacks suppressed [ 69.342298][ T29] audit: type=1400 audit(1721278708.038:829): avc: denied { write } for pid=5681 comm="syz.4.674" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 69.434476][ T5683] loop4: detected capacity change from 0 to 256 [ 69.444040][ T5690] loop0: detected capacity change from 0 to 128 [ 69.450752][ T5690] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 69.462740][ T29] audit: type=1400 audit(1721278708.148:830): avc: denied { read } for pid=5688 comm="syz.3.676" dev="sockfs" ino=13013 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 69.484075][ T29] audit: type=1400 audit(1721278708.148:831): avc: denied { read write } for pid=5688 comm="syz.3.676" name="sg0" dev="devtmpfs" ino=111 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 69.507941][ T29] audit: type=1400 audit(1721278708.148:832): avc: denied { open } for pid=5688 comm="syz.3.676" path="/dev/sg0" dev="devtmpfs" ino=111 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 69.520996][ T5695] netlink: 4 bytes leftover after parsing attributes in process `syz.3.678'. [ 69.531654][ T29] audit: type=1400 audit(1721278708.148:833): avc: denied { map } for pid=5688 comm="syz.3.676" path="/dev/sg0" dev="devtmpfs" ino=111 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 69.531680][ T29] audit: type=1400 audit(1721278708.148:834): avc: denied { execute } for pid=5688 comm="syz.3.676" path="/dev/sg0" dev="devtmpfs" ino=111 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 69.599143][ T5696] loop3: detected capacity change from 0 to 128 [ 69.614954][ T5690] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 69.646860][ T29] audit: type=1400 audit(1721278708.338:835): avc: denied { getopt } for pid=5693 comm="syz.3.678" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 69.707516][ T29] audit: type=1400 audit(1721278708.408:836): avc: denied { ioctl } for pid=5698 comm="syz.3.679" path="socket:[13403]" dev="sockfs" ino=13403 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 69.747584][ T5704] loop2: detected capacity change from 0 to 1024 [ 69.758658][ T5700] loop3: detected capacity change from 0 to 512 [ 69.775525][ T5704] EXT4-fs: Ignoring removed orlov option [ 69.781243][ T5704] EXT4-fs: Ignoring removed nomblk_io_submit option [ 69.785166][ T29] audit: type=1400 audit(1721278708.438:837): avc: denied { nlmsg_read } for pid=5702 comm="syz.0.680" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 69.808405][ T29] audit: type=1400 audit(1721278708.468:838): avc: denied { create } for pid=5707 comm="syz.0.684" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 69.845905][ T5716] FAULT_INJECTION: forcing a failure. [ 69.845905][ T5716] name failslab, interval 1, probability 0, space 0, times 0 [ 69.858574][ T5716] CPU: 0 PID: 5716 Comm: syz.4.685 Not tainted 6.10.0-syzkaller-04472-g51835949dda3 #0 [ 69.868222][ T5716] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 69.878438][ T5716] Call Trace: [ 69.881774][ T5716] [ 69.884725][ T5716] dump_stack_lvl+0xf2/0x150 [ 69.889325][ T5716] dump_stack+0x15/0x20 [ 69.893559][ T5716] should_fail_ex+0x229/0x230 [ 69.898237][ T5716] ? sctp_add_bind_addr+0x6f/0x1e0 [ 69.903441][ T5716] __should_failslab+0x92/0xa0 [ 69.908216][ T5716] should_failslab+0x9/0x20 [ 69.912794][ T5716] kmalloc_trace_noprof+0x4b/0x2a0 [ 69.917929][ T5716] sctp_add_bind_addr+0x6f/0x1e0 [ 69.922861][ T5716] sctp_copy_local_addr_list+0x19b/0x220 [ 69.928488][ T5716] sctp_copy_one_addr+0x83/0x410 [ 69.933462][ T5716] sctp_bind_addr_copy+0x81/0x2b0 [ 69.938516][ T5716] sctp_assoc_set_bind_addr_from_ep+0xc0/0xd0 [ 69.944574][ T5716] sctp_connect_new_asoc+0x1d0/0x3b0 [ 69.950028][ T5716] sctp_sendmsg+0xf05/0x1920 [ 69.954797][ T5716] ? __pfx_sctp_sendmsg+0x10/0x10 [ 69.959819][ T5716] inet_sendmsg+0xc5/0xd0 [ 69.964139][ T5716] __sock_sendmsg+0x102/0x180 [ 69.968994][ T5716] ____sys_sendmsg+0x312/0x410 [ 69.973822][ T5716] __sys_sendmmsg+0x269/0x500 [ 69.978507][ T5716] __x64_sys_sendmmsg+0x57/0x70 [ 69.983411][ T5716] x64_sys_call+0xa49/0x2d60 [ 69.988037][ T5716] do_syscall_64+0xc9/0x1c0 [ 69.992611][ T5716] ? clear_bhb_loop+0x55/0xb0 [ 69.997285][ T5716] ? clear_bhb_loop+0x55/0xb0 [ 70.002063][ T5716] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 70.007952][ T5716] RIP: 0033:0x7fc69fd55ad9 [ 70.012353][ T5716] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 70.032397][ T5716] RSP: 002b:00007fc69efd7048 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 70.040798][ T5716] RAX: ffffffffffffffda RBX: 00007fc69fee3f60 RCX: 00007fc69fd55ad9 [ 70.048756][ T5716] RDX: 0000000000000001 RSI: 00000000200032c0 RDI: 0000000000000004 [ 70.056718][ T5716] RBP: 00007fc69efd70a0 R08: 0000000000000000 R09: 0000000000000000 [ 70.064745][ T5716] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 70.072714][ T5716] R13: 000000000000000b R14: 00007fc69fee3f60 R15: 00007ffed8dc2548 [ 70.080739][ T5716] [ 70.117496][ T5700] EXT4-fs error (device loop3): ext4_orphan_get:1394: inode #15: comm syz.3.679: iget: bad extended attribute block 1 [ 70.122339][ T5704] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.130759][ T5700] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz.3.679: couldn't read orphan inode 15 (err -117) [ 70.170164][ T5700] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.170963][ T5722] netlink: 104 bytes leftover after parsing attributes in process `syz.0.688'. [ 70.209882][ T5524] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.266500][ T5742] loop0: detected capacity change from 0 to 512 [ 70.272923][ T28] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 70.310504][ T5742] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.323527][ T5742] ext4 filesystem being mounted at /209/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 70.337858][ T5742] FAULT_INJECTION: forcing a failure. [ 70.337858][ T5742] name failslab, interval 1, probability 0, space 0, times 0 [ 70.350588][ T5742] CPU: 1 PID: 5742 Comm: syz.0.693 Not tainted 6.10.0-syzkaller-04472-g51835949dda3 #0 [ 70.360288][ T5742] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 70.370361][ T5742] Call Trace: [ 70.373636][ T5742] [ 70.376620][ T5742] dump_stack_lvl+0xf2/0x150 [ 70.381226][ T5742] dump_stack+0x15/0x20 [ 70.385390][ T5742] should_fail_ex+0x229/0x230 [ 70.390084][ T5742] ? do_insert_tree+0x4c/0x960 [ 70.394853][ T5742] __should_failslab+0x92/0xa0 [ 70.399701][ T5742] should_failslab+0x9/0x20 [ 70.404219][ T5742] __kmalloc_noprof+0xa5/0x370 [ 70.409065][ T5742] ? kfree+0x164/0x290 [ 70.413242][ T5742] do_insert_tree+0x4c/0x960 [ 70.417890][ T5742] ? find_tree_dqentry+0x86e/0x890 [ 70.423008][ T5742] ? qtree_write_dquot+0x6f/0x320 [ 70.428031][ T5742] ? __should_failslab+0x92/0xa0 [ 70.432971][ T5742] ? should_failslab+0x9/0x20 [ 70.437710][ T5742] ? __kmalloc_noprof+0x165/0x370 [ 70.442810][ T5742] qtree_write_dquot+0x2e4/0x320 [ 70.447812][ T5742] v2_write_dquot+0xd3/0x130 [ 70.452436][ T5742] dquot_acquire+0x1ba/0x2b0 [ 70.457177][ T5742] ext4_acquire_dquot+0x170/0x210 [ 70.462208][ T5742] dqget+0x522/0x8b0 [ 70.466173][ T5742] __dquot_initialize+0x194/0x760 [ 70.471206][ T5742] dquot_initialize+0x1a/0x20 [ 70.475886][ T5742] ext4_create+0x4b/0x2f0 [ 70.480276][ T5742] ? __pfx_ext4_create+0x10/0x10 [ 70.485244][ T5742] path_openat+0xdbc/0x1f10 [ 70.489748][ T5742] do_filp_open+0xf7/0x200 [ 70.494226][ T5742] do_sys_openat2+0xab/0x120 [ 70.498906][ T5742] __x64_sys_creat+0x66/0x90 [ 70.503528][ T5742] x64_sys_call+0x2cbf/0x2d60 [ 70.508276][ T5742] do_syscall_64+0xc9/0x1c0 [ 70.512823][ T5742] ? clear_bhb_loop+0x55/0xb0 [ 70.517513][ T5742] ? clear_bhb_loop+0x55/0xb0 [ 70.522254][ T5742] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 70.528181][ T5742] RIP: 0033:0x7f6b44fa5ad9 [ 70.532584][ T5742] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 70.552196][ T5742] RSP: 002b:00007f6b44227048 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 70.560609][ T5742] RAX: ffffffffffffffda RBX: 00007f6b45133f60 RCX: 00007f6b44fa5ad9 [ 70.568584][ T5742] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000040 [ 70.576553][ T5742] RBP: 00007f6b442270a0 R08: 0000000000000000 R09: 0000000000000000 [ 70.584525][ T5742] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 70.592499][ T5742] R13: 000000000000000b R14: 00007f6b45133f60 R15: 00007ffc15e54408 [ 70.600549][ T5742] [ 70.603607][ T5742] EXT4-fs error (device loop0): ext4_acquire_dquot:6844: comm syz.0.693: Failed to acquire dquot type 0 [ 70.629205][ T3088] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.649940][ T4529] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.678522][ T5763] loop0: detected capacity change from 0 to 512 [ 70.696112][ T5763] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 0 overlaps block group descriptors [ 70.706939][ T5766] loop3: detected capacity change from 0 to 1024 [ 70.707271][ T5766] EXT4-fs: Ignoring removed orlov option [ 70.713567][ T5763] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 0 not in group (block 2)! [ 70.713590][ T5763] EXT4-fs (loop0): group descriptors corrupted! [ 70.719608][ T5766] EXT4-fs: Ignoring removed nomblk_io_submit option [ 70.777221][ T5766] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.815201][ T5770] loop2: detected capacity change from 0 to 1024 [ 70.866693][ T4529] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.876622][ T5770] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (24866!=20869) [ 70.923131][ T5770] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 70.950138][ T5770] EXT4-fs (loop2): invalid journal inode [ 70.954026][ T5771] loop0: detected capacity change from 0 to 4096 [ 70.963165][ T5771] EXT4-fs: Invalid want_extra_isize 7 [ 71.011459][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 71.328588][ T5791] loop4: detected capacity change from 0 to 256 [ 71.503359][ T5781] SET target dimension over the limit! [ 71.698598][ T5813] loop0: detected capacity change from 0 to 512 [ 71.740030][ T5813] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.758154][ T5824] netlink: 12 bytes leftover after parsing attributes in process `syz.3.720'. [ 71.764737][ T5813] ext4 filesystem being mounted at /213/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 71.851496][ T5830] loop1: detected capacity change from 0 to 1024 [ 71.868113][ T5830] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (24866!=20869) [ 71.902207][ T5830] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 71.919972][ T5830] EXT4-fs (loop1): invalid journal inode [ 72.029934][ T5835] loop2: detected capacity change from 0 to 512 [ 72.038870][ T5835] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 72.047765][ T5835] EXT4-fs (loop2): invalid journal inode [ 72.053532][ T5835] EXT4-fs (loop2): can't get journal size [ 72.061443][ T5835] EXT4-fs (loop2): 1 truncate cleaned up [ 72.067515][ T5835] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.201436][ T5524] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.241007][ T5844] netlink: 8 bytes leftover after parsing attributes in process `syz.4.723'. [ 72.301202][ T5853] netlink: 12 bytes leftover after parsing attributes in process `syz.2.727'. [ 72.353280][ T5863] netlink: 60 bytes leftover after parsing attributes in process `syz.2.729'. [ 72.411701][ T5867] FAULT_INJECTION: forcing a failure. [ 72.411701][ T5867] name failslab, interval 1, probability 0, space 0, times 0 [ 72.424366][ T5867] CPU: 1 PID: 5867 Comm: syz.2.731 Not tainted 6.10.0-syzkaller-04472-g51835949dda3 #0 [ 72.434024][ T5867] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 72.444079][ T5867] Call Trace: [ 72.447358][ T5867] [ 72.450342][ T5867] dump_stack_lvl+0xf2/0x150 [ 72.455042][ T5867] dump_stack+0x15/0x20 [ 72.459197][ T5867] should_fail_ex+0x229/0x230 [ 72.463886][ T5867] ? cttimeout_default_set+0xb8/0x1c0 [ 72.469271][ T5867] __should_failslab+0x92/0xa0 [ 72.474047][ T5867] should_failslab+0x9/0x20 [ 72.478554][ T5867] __kmalloc_noprof+0xa5/0x370 [ 72.483342][ T5867] cttimeout_default_set+0xb8/0x1c0 [ 72.488544][ T5867] nfnetlink_rcv_msg+0x4a9/0x570 [ 72.493511][ T5867] netlink_rcv_skb+0x12c/0x230 [ 72.498363][ T5867] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 72.503831][ T5867] nfnetlink_rcv+0x16c/0x15b0 [ 72.508516][ T5867] ? kmem_cache_free+0xd8/0x280 [ 72.513368][ T5867] ? nlmon_xmit+0x51/0x60 [ 72.517751][ T5867] ? __kfree_skb+0x102/0x150 [ 72.522362][ T5867] ? consume_skb+0x57/0x180 [ 72.526908][ T5867] ? nlmon_xmit+0x51/0x60 [ 72.531243][ T5867] ? dev_hard_start_xmit+0x3c1/0x3f0 [ 72.536533][ T5867] ? __dev_queue_xmit+0xb86/0x1fe0 [ 72.541728][ T5867] ? ref_tracker_free+0x3a5/0x410 [ 72.546920][ T5867] ? __dev_queue_xmit+0x161/0x1fe0 [ 72.552078][ T5867] ? __netlink_deliver_tap+0x495/0x4c0 [ 72.557600][ T5867] netlink_unicast+0x593/0x670 [ 72.562373][ T5867] netlink_sendmsg+0x5cc/0x6e0 [ 72.567146][ T5867] ? __pfx_netlink_sendmsg+0x10/0x10 [ 72.572594][ T5867] __sock_sendmsg+0x140/0x180 [ 72.577317][ T5867] ____sys_sendmsg+0x312/0x410 [ 72.580440][ T5819] syz.1.719 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_NOWARN|__GFP_ZERO), order=0, oom_score_adj=1000 [ 72.582072][ T5867] __sys_sendmsg+0x1e9/0x280 [ 72.600798][ T5867] __x64_sys_sendmsg+0x46/0x50 [ 72.605607][ T5867] x64_sys_call+0x2689/0x2d60 [ 72.610277][ T5867] do_syscall_64+0xc9/0x1c0 [ 72.614766][ T5867] ? clear_bhb_loop+0x55/0xb0 [ 72.619439][ T5867] ? clear_bhb_loop+0x55/0xb0 [ 72.624112][ T5867] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 72.630001][ T5867] RIP: 0033:0x7f367acd5ad9 [ 72.634403][ T5867] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 72.654002][ T5867] RSP: 002b:00007f3679f57048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 72.662401][ T5867] RAX: ffffffffffffffda RBX: 00007f367ae63f60 RCX: 00007f367acd5ad9 [ 72.670359][ T5867] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000003 [ 72.678342][ T5867] RBP: 00007f3679f570a0 R08: 0000000000000000 R09: 0000000000000000 [ 72.686302][ T5867] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 72.694359][ T5867] R13: 000000000000000b R14: 00007f367ae63f60 R15: 00007fff0168e0b8 [ 72.702333][ T5867] [ 72.705342][ T5819] CPU: 0 PID: 5819 Comm: syz.1.719 Not tainted 6.10.0-syzkaller-04472-g51835949dda3 #0 [ 72.715144][ T5819] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 72.725204][ T5819] Call Trace: [ 72.728481][ T5819] [ 72.731409][ T5819] dump_stack_lvl+0xf2/0x150 [ 72.736044][ T5819] dump_stack+0x15/0x20 [ 72.740209][ T5819] dump_header+0x83/0x2d0 [ 72.744588][ T5819] oom_kill_process+0x33e/0x4c0 [ 72.749433][ T5819] out_of_memory+0x9af/0xbe0 [ 72.754022][ T5819] ? try_to_free_mem_cgroup_pages+0x22a/0x4e0 [ 72.760143][ T5819] mem_cgroup_out_of_memory+0x13e/0x190 [ 72.765696][ T5819] try_charge_memcg+0x745/0xcd0 [ 72.770536][ T5819] ? get_page_from_freelist+0x1a30/0x1a70 [ 72.776256][ T5819] obj_cgroup_charge_pages+0xbd/0x1d0 [ 72.781624][ T5819] __memcg_kmem_charge_page+0x9d/0x170 [ 72.787120][ T5819] __alloc_pages_noprof+0x1bc/0x360 [ 72.792315][ T5819] alloc_pages_mpol_noprof+0xb1/0x1e0 [ 72.797746][ T5819] alloc_pages_noprof+0xe1/0x100 [ 72.802734][ T5819] __vmalloc_node_range_noprof+0x719/0xef0 [ 72.808652][ T5819] kvmalloc_node_noprof+0x121/0x170 [ 72.813842][ T5819] ? ip_set_alloc+0x1f/0x30 [ 72.818373][ T5819] ip_set_alloc+0x1f/0x30 [ 72.822741][ T5819] hash_netiface_create+0x273/0x730 [ 72.827942][ T5819] ? __nla_parse+0x40/0x60 [ 72.832359][ T5819] ? __pfx_hash_netiface_create+0x10/0x10 [ 72.838077][ T5819] ip_set_create+0x359/0x8a0 [ 72.842689][ T5819] ? memchr+0x1/0x50 [ 72.846579][ T5819] ? __nla_parse+0x40/0x60 [ 72.851015][ T5819] nfnetlink_rcv_msg+0x4a9/0x570 [ 72.855953][ T5819] netlink_rcv_skb+0x12c/0x230 [ 72.860745][ T5819] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 72.866200][ T5819] nfnetlink_rcv+0x16c/0x15b0 [ 72.870880][ T5819] ? kmem_cache_free+0xd8/0x280 [ 72.875729][ T5819] ? nlmon_xmit+0x51/0x60 [ 72.880082][ T5819] ? __kfree_skb+0x102/0x150 [ 72.884730][ T5819] ? consume_skb+0x57/0x180 [ 72.889332][ T5819] ? nlmon_xmit+0x51/0x60 [ 72.893800][ T5819] ? dev_hard_start_xmit+0x3c1/0x3f0 [ 72.899161][ T5819] ? __dev_queue_xmit+0xb86/0x1fe0 [ 72.904321][ T5819] ? ref_tracker_free+0x3a5/0x410 [ 72.909361][ T5819] ? __dev_queue_xmit+0x161/0x1fe0 [ 72.914468][ T5819] ? __netlink_deliver_tap+0x495/0x4c0 [ 72.919978][ T5819] netlink_unicast+0x593/0x670 [ 72.924752][ T5819] netlink_sendmsg+0x5cc/0x6e0 [ 72.929550][ T5819] ? __pfx_netlink_sendmsg+0x10/0x10 [ 72.934827][ T5819] __sock_sendmsg+0x140/0x180 [ 72.939612][ T5819] ____sys_sendmsg+0x312/0x410 [ 72.944372][ T5819] __sys_sendmsg+0x1e9/0x280 [ 72.949065][ T5819] ? futex_wait+0x18e/0x1c0 [ 72.953563][ T5819] __x64_sys_sendmsg+0x46/0x50 [ 72.958382][ T5819] x64_sys_call+0x2689/0x2d60 [ 72.963051][ T5819] do_syscall_64+0xc9/0x1c0 [ 72.967540][ T5819] ? clear_bhb_loop+0x55/0xb0 [ 72.972238][ T5819] ? clear_bhb_loop+0x55/0xb0 [ 72.976910][ T5819] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 72.982805][ T5819] RIP: 0033:0x7fcf44265ad9 [ 72.987210][ T5819] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 73.006807][ T5819] RSP: 002b:00007fcf434e7048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 73.015209][ T5819] RAX: ffffffffffffffda RBX: 00007fcf443f3f60 RCX: 00007fcf44265ad9 [ 73.023189][ T5819] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000006 [ 73.031153][ T5819] RBP: 00007fcf442d4e5d R08: 0000000000000000 R09: 0000000000000000 [ 73.039193][ T5819] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 73.047158][ T5819] R13: 000000000000000b R14: 00007fcf443f3f60 R15: 00007fff0c19e088 [ 73.055145][ T5819] [ 73.058348][ T5819] memory: usage 307180kB, limit 307200kB, failcnt 235 [ 73.065177][ T5819] memory+swap: usage 319200kB, limit 9007199254740988kB, failcnt 0 [ 73.073178][ T5819] kmem: usage 307036kB, limit 9007199254740988kB, failcnt 0 [ 73.080542][ T5819] Memory cgroup stats for /syz1: [ 73.102689][ T5819] cache 143360 [ 73.111186][ T5819] rss 8192 [ 73.114212][ T5819] shmem 0 [ 73.117231][ T5819] mapped_file 143360 [ 73.121123][ T5819] dirty 143360 [ 73.124493][ T5819] writeback 0 [ 73.127873][ T5819] workingset_refault_anon 357 [ 73.132617][ T5819] workingset_refault_file 136 [ 73.137396][ T5819] swap 12288000 [ 73.140882][ T5819] swapcached 24576 [ 73.144593][ T5819] pgpgin 56696 [ 73.148035][ T5819] pgpgout 56655 [ 73.151553][ T5819] pgfault 69880 [ 73.155009][ T5819] pgmajfault 176 [ 73.158587][ T5819] inactive_anon 8192 [ 73.162535][ T5819] active_anon 16384 [ 73.165739][ T5877] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 73.166339][ T5819] inactive_file 143360 [ 73.166348][ T5819] active_file 0 [ 73.166354][ T5819] unevictable 0 [ 73.166361][ T5819] hierarchical_memory_limit 314572800 [ 73.166369][ T5819] hierarchical_memsw_limit 9223372036854771712 [ 73.200005][ T5819] total_cache 143360 [ 73.202481][ T5885] loop2: detected capacity change from 0 to 1024 [ 73.203877][ T5819] total_rss 8192 [ 73.203886][ T5819] total_shmem 0 [ 73.217319][ T5885] EXT4-fs: Ignoring removed orlov option [ 73.217352][ T5885] EXT4-fs: Ignoring removed nomblk_io_submit option [ 73.222943][ T5819] total_mapped_file 143360 [ 73.222953][ T5819] total_dirty 143360 [ 73.222967][ T5819] total_writeback 0 [ 73.222973][ T5819] total_workingset_refault_anon 357 [ 73.222979][ T5819] total_workingset_refault_file 136 [ 73.222986][ T5819] total_swap 12288000 [ 73.222992][ T5819] total_swapcached 24576 [ 73.222999][ T5819] total_pgpgin 56696 [ 73.223006][ T5819] total_pgpgout 56655 [ 73.258135][ T5885] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.260519][ T5819] total_pgfault 69880 [ 73.260527][ T5819] total_pgmajfault 176 [ 73.260533][ T5819] total_inactive_anon 8192 [ 73.260539][ T5819] total_active_anon 16384 [ 73.260546][ T5819] total_inactive_file 143360 [ 73.260552][ T5819] total_active_file 0 [ 73.307395][ T5819] total_unevictable 0 [ 73.311452][ T5819] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.719,pid=5818,uid=0 [ 73.326284][ T5819] Memory cgroup out of memory: Killed process 5818 (syz.1.719) total-vm:80884kB, anon-rss:452kB, file-rss:10044kB, shmem-rss:0kB, UID:0 pgtables:112kB oom_score_adj:1000 [ 73.369426][ T5890] loop3: detected capacity change from 0 to 512 [ 73.378190][ T5524] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.423765][ T5893] FAULT_INJECTION: forcing a failure. [ 73.423765][ T5893] name failslab, interval 1, probability 0, space 0, times 0 [ 73.436592][ T5893] CPU: 1 PID: 5893 Comm: syz.2.739 Not tainted 6.10.0-syzkaller-04472-g51835949dda3 #0 [ 73.446230][ T5893] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 73.456308][ T5893] Call Trace: [ 73.459602][ T5893] [ 73.462529][ T5893] dump_stack_lvl+0xf2/0x150 [ 73.467144][ T5893] dump_stack+0x15/0x20 [ 73.471308][ T5893] should_fail_ex+0x229/0x230 [ 73.475991][ T5893] ? cttimeout_default_set+0xb8/0x1c0 [ 73.481357][ T5893] __should_failslab+0x92/0xa0 [ 73.486198][ T5893] should_failslab+0x9/0x20 [ 73.490702][ T5893] __kmalloc_noprof+0xa5/0x370 [ 73.495471][ T5893] cttimeout_default_set+0xb8/0x1c0 [ 73.500686][ T5893] nfnetlink_rcv_msg+0x4a9/0x570 [ 73.505702][ T5893] netlink_rcv_skb+0x12c/0x230 [ 73.510471][ T5893] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 73.515974][ T5893] nfnetlink_rcv+0x16c/0x15b0 [ 73.520678][ T5893] ? kmem_cache_free+0xd8/0x280 [ 73.525532][ T5893] ? nlmon_xmit+0x51/0x60 [ 73.529851][ T5893] ? __kfree_skb+0x102/0x150 [ 73.534439][ T5893] ? consume_skb+0x57/0x180 [ 73.538944][ T5893] ? nlmon_xmit+0x51/0x60 [ 73.543269][ T5893] ? dev_hard_start_xmit+0x3c1/0x3f0 [ 73.548641][ T5893] ? __dev_queue_xmit+0xb86/0x1fe0 [ 73.549638][ T5883] loop4: detected capacity change from 0 to 164 [ 73.553757][ T5893] ? ref_tracker_free+0x3a5/0x410 [ 73.565000][ T5893] ? __dev_queue_xmit+0x161/0x1fe0 [ 73.570132][ T5893] ? __netlink_deliver_tap+0x495/0x4c0 [ 73.575652][ T5893] netlink_unicast+0x593/0x670 [ 73.580504][ T5893] netlink_sendmsg+0x5cc/0x6e0 [ 73.585301][ T5893] ? __pfx_netlink_sendmsg+0x10/0x10 [ 73.590646][ T5893] __sock_sendmsg+0x140/0x180 [ 73.595354][ T5893] ____sys_sendmsg+0x312/0x410 [ 73.600191][ T5893] __sys_sendmsg+0x1e9/0x280 [ 73.604780][ T5893] __x64_sys_sendmsg+0x46/0x50 [ 73.609536][ T5893] x64_sys_call+0x2689/0x2d60 [ 73.614253][ T5893] do_syscall_64+0xc9/0x1c0 [ 73.618809][ T5893] ? clear_bhb_loop+0x55/0xb0 [ 73.623481][ T5893] ? clear_bhb_loop+0x55/0xb0 [ 73.628212][ T5893] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 73.634101][ T5893] RIP: 0033:0x7f367acd5ad9 [ 73.638501][ T5893] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 73.658162][ T5893] RSP: 002b:00007f3679f57048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 73.666602][ T5893] RAX: ffffffffffffffda RBX: 00007f367ae63f60 RCX: 00007f367acd5ad9 [ 73.674633][ T5893] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000003 [ 73.682624][ T5893] RBP: 00007f3679f570a0 R08: 0000000000000000 R09: 0000000000000000 [ 73.690583][ T5893] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 73.698542][ T5893] R13: 000000000000000b R14: 00007f367ae63f60 R15: 00007fff0168e0b8 [ 73.706661][ T5893] [ 73.719006][ T3088] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.738993][ T5890] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.770939][ T5890] ext4 filesystem being mounted at /52/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 73.781540][ T5883] rock: directory entry would overflow storage [ 73.787777][ T5883] rock: sig=0x4f50, size=4, remaining=3 [ 73.793350][ T5883] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 73.826201][ T5890] loop3: detected capacity change from 512 to 0 [ 73.834431][ T5890] syz.3.740: attempt to access beyond end of device [ 73.834431][ T5890] loop3: rw=12288, sector=64, nr_sectors = 4 limit=0 [ 73.849432][ T5890] EXT4-fs error (device loop3): ext4_acquire_dquot:6844: comm syz.3.740: Failed to acquire dquot type 1 [ 73.862570][ T5890] syz.3.740: attempt to access beyond end of device [ 73.862570][ T5890] loop3: rw=14337, sector=0, nr_sectors = 4 limit=0 [ 73.875907][ T5890] Buffer I/O error on dev loop3, logical block 0, lost sync page write [ 73.889437][ T5890] EXT4-fs (loop3): I/O error while writing superblock [ 73.911772][ T4529] syz-executor: attempt to access beyond end of device [ 73.911772][ T4529] loop3: rw=12288, sector=12, nr_sectors = 4 limit=0 [ 73.926522][ T4529] syz-executor: attempt to access beyond end of device [ 73.926522][ T4529] loop3: rw=524288, sector=140, nr_sectors = 4 limit=0 [ 73.940436][ T4529] syz-executor: attempt to access beyond end of device [ 73.940436][ T4529] loop3: rw=524288, sector=144, nr_sectors = 4 limit=0 [ 73.961067][ T4529] syz-executor: attempt to access beyond end of device [ 73.961067][ T4529] loop3: rw=12288, sector=136, nr_sectors = 4 limit=0 [ 73.975263][ T4529] EXT4-fs error (device loop3): ext4_get_inode_loc:4495: inode #2: block 34: comm syz-executor: unable to read itable block [ 73.990873][ T4529] syz-executor: attempt to access beyond end of device [ 73.990873][ T4529] loop3: rw=14337, sector=0, nr_sectors = 4 limit=0 [ 74.004306][ T4529] Buffer I/O error on dev loop3, logical block 0, lost sync page write [ 74.014237][ T4529] EXT4-fs (loop3): I/O error while writing superblock [ 74.021082][ T4529] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5731: IO failure [ 74.030641][ T5923] vhci_hcd: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub [ 74.043434][ T5923] xt_TCPMSS: Only works on TCP SYN packets [ 74.050461][ T5923] loop7: detected capacity change from 0 to 16384 [ 74.058696][ T4529] syz-executor: attempt to access beyond end of device [ 74.058696][ T4529] loop3: rw=14337, sector=0, nr_sectors = 4 limit=0 [ 74.072170][ T4529] Buffer I/O error on dev loop3, logical block 0, lost sync page write [ 74.082684][ T4529] EXT4-fs (loop3): I/O error while writing superblock [ 74.089514][ T4529] EXT4-fs error (device loop3): ext4_dirty_inode:5935: inode #2: comm syz-executor: mark_inode_dirty error [ 74.093047][ T5925] loop4: detected capacity change from 0 to 512 [ 74.101814][ T4529] syz-executor: attempt to access beyond end of device [ 74.101814][ T4529] loop3: rw=14337, sector=0, nr_sectors = 4 limit=0 [ 74.120793][ T4529] Buffer I/O error on dev loop3, logical block 0, lost sync page write [ 74.129461][ T4529] EXT4-fs (loop3): I/O error while writing superblock [ 74.141470][ T3199] kworker/u8:7: attempt to access beyond end of device [ 74.141470][ T3199] loop3: rw=524288, sector=140, nr_sectors = 4 limit=0 [ 74.164171][ T3199] EXT4-fs error (device loop3): __ext4_get_inode_loc_noinmem:4480: inode #4: block 34: comm kworker/u8:7: unable to read itable block [ 74.178140][ T3199] Buffer I/O error on dev loop3, logical block 0, lost sync page write [ 74.186606][ T3199] EXT4-fs (loop3): I/O error while writing superblock [ 74.189731][ T5923] I/O error, dev loop7, sector 256 op 0x0:(READ) flags 0x80700 phys_seg 30 prio class 0 [ 74.193623][ T3199] EXT4-fs error (device loop3): __ext4_get_inode_loc_noinmem:4480: inode #18: block 35: comm kworker/u8:7: unable to read itable block [ 74.217793][ T5923] I/O error, dev loop7, sector 136 op 0x0:(READ) flags 0x80700 phys_seg 14 prio class 0 [ 74.218967][ T3199] Buffer I/O error on dev loop3, logical block 0, lost sync page write [ 74.237831][ T5925] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.245955][ T5923] I/O error, dev loop7, sector 136 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 74.250359][ T5925] ext4 filesystem being mounted at /110/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 74.259580][ T5923] Buffer I/O error on dev loop7, logical block 17, async page read [ 74.270499][ T3199] EXT4-fs (loop3): I/O error while writing superblock [ 74.284790][ T3199] EXT4-fs error (device loop3): __ext4_get_inode_loc_noinmem:4480: inode #2: block 34: comm kworker/u8:7: unable to read itable block [ 74.298664][ T3199] Buffer I/O error on dev loop3, logical block 0, lost sync page write [ 74.306940][ T3199] EXT4-fs (loop3): I/O error while writing superblock [ 74.314095][ T4529] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.323468][ T4529] Buffer I/O error on dev loop3, logical block 0, lost sync page write [ 74.331759][ T4529] EXT4-fs (loop3): I/O error while writing superblock [ 74.338731][ T5923] I/O error, dev loop7, sector 128 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 74.348422][ T5923] Buffer I/O error on dev loop7, logical block 16, lost async page write [ 74.541799][ T29] kauditd_printk_skb: 39 callbacks suppressed [ 74.541813][ T29] audit: type=1400 audit(1721278713.238:875): avc: denied { create } for pid=5941 comm="syz.2.757" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 74.582170][ T29] audit: type=1400 audit(1721278713.238:876): avc: denied { write } for pid=5941 comm="syz.2.757" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 74.696692][ T5959] loop1: detected capacity change from 0 to 164 [ 74.756076][ T29] audit: type=1400 audit(1721278713.438:877): avc: denied { write } for pid=5961 comm="syz.2.765" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 74.793079][ T5947] rock: directory entry would overflow storage [ 74.799311][ T5947] rock: sig=0x4f50, size=4, remaining=3 [ 74.804881][ T5947] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 74.821803][ T5971] ip_vti0: entered promiscuous mode [ 74.827292][ T5971] vlan2: entered promiscuous mode [ 74.832438][ T5971] vlan2: entered allmulticast mode [ 74.837668][ T5971] ip_vti0: entered allmulticast mode [ 74.852992][ T5971] ip_vti0: left allmulticast mode [ 74.858237][ T5971] ip_vti0: left promiscuous mode [ 74.897505][ T5973] tipc: Enabling of bearer rejected, already enabled [ 74.926012][ T3850] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.977195][ T5976] loop1: detected capacity change from 0 to 8192 [ 74.993778][ T5950] chnl_net:caif_netlink_parms(): no params data found [ 75.002273][ T5976] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 75.049247][ T29] audit: type=1400 audit(1721278713.748:878): avc: denied { read } for pid=5985 comm="syz.4.769" name="event0" dev="devtmpfs" ino=217 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 75.072873][ T29] audit: type=1400 audit(1721278713.748:879): avc: denied { open } for pid=5985 comm="syz.4.769" path="/dev/input/event0" dev="devtmpfs" ino=217 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 75.099441][ T5982] netlink: 92 bytes leftover after parsing attributes in process `syz.0.771'. [ 75.108431][ T5982] netlink: 92 bytes leftover after parsing attributes in process `syz.0.771'. [ 75.296834][ T5990] netlink: 'syz.2.770': attribute type 10 has an invalid length. [ 75.304641][ T5990] netlink: 40 bytes leftover after parsing attributes in process `syz.2.770'. [ 75.314633][ T5990] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 75.418906][ T29] audit: type=1400 audit(1721278714.118:880): avc: denied { bind } for pid=5999 comm="syz.1.774" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 75.438813][ T6004] netlink: 20 bytes leftover after parsing attributes in process `syz.1.774'. [ 75.439152][ T5950] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.454805][ T5950] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.463499][ T5950] bridge_slave_0: entered allmulticast mode [ 75.470269][ T5950] bridge_slave_0: entered promiscuous mode [ 75.477452][ T6004] netlink: 4 bytes leftover after parsing attributes in process `syz.1.774'. [ 75.486617][ T5950] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.493693][ T5950] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.501471][ T5950] bridge_slave_1: entered allmulticast mode [ 75.508206][ T5950] bridge_slave_1: entered promiscuous mode [ 75.534823][ T6011] loop1: detected capacity change from 0 to 512 [ 75.546436][ T6011] EXT4-fs: Ignoring removed i_version option [ 75.552464][ T6011] EXT4-fs: Ignoring removed nobh option [ 75.560586][ T5950] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.561103][ T6011] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 75.572423][ T6012] bond_slave_0: entered promiscuous mode [ 75.582723][ T6011] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 75.588322][ T6012] bond_slave_1: entered promiscuous mode [ 75.602597][ T6011] EXT4-fs (loop1): 1 truncate cleaned up [ 75.605389][ T6009] loop4: detected capacity change from 0 to 164 [ 75.609880][ T6011] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.633392][ T6012] vlan2: entered promiscuous mode [ 75.638499][ T6012] bond0: entered promiscuous mode [ 75.643749][ T6012] vlan2: entered allmulticast mode [ 75.644106][ T6009] rock: directory entry would overflow storage [ 75.648943][ T6012] bond0: entered allmulticast mode [ 75.648958][ T6012] bond_slave_0: entered allmulticast mode [ 75.655111][ T6009] rock: sig=0x4f50, size=4, remaining=3 [ 75.660265][ T6012] bond_slave_1: entered allmulticast mode [ 75.677497][ T6009] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 75.685126][ T6012] bond0: left allmulticast mode [ 75.690111][ T6012] bond_slave_0: left allmulticast mode [ 75.695600][ T6012] bond_slave_1: left allmulticast mode [ 75.701116][ T6012] bond0: left promiscuous mode [ 75.706121][ T6012] bond_slave_0: left promiscuous mode [ 75.711525][ T6012] bond_slave_1: left promiscuous mode [ 75.717725][ T3781] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.739134][ T5950] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.771109][ T5950] team0: Port device team_slave_0 added [ 75.781703][ T5950] team0: Port device team_slave_1 added [ 75.869312][ T5950] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.876353][ T5950] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.902593][ T5950] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.915890][ T5950] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.922851][ T5950] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.948799][ T5950] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.994997][ T5950] hsr_slave_0: entered promiscuous mode [ 76.001766][ T5950] hsr_slave_1: entered promiscuous mode [ 76.008616][ T5950] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 76.016250][ T5950] Cannot create hsr debugfs directory [ 76.120059][ T5950] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.198140][ T5950] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.275987][ T5950] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.286535][ T29] audit: type=1400 audit(1721278714.968:881): avc: denied { mounton } for pid=6088 comm="syz.4.786" path="/113/bus" dev="tmpfs" ino=642 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 76.320125][ T6101] netlink: 9 bytes leftover after parsing attributes in process `syz.4.789'. [ 76.392808][ T6115] netlink: 48 bytes leftover after parsing attributes in process `syz.4.790'. [ 76.623191][ T5950] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.637548][ T29] audit: type=1400 audit(1721278715.338:882): avc: denied { create } for pid=6147 comm="syz.4.791" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 76.657000][ T29] audit: type=1400 audit(1721278715.338:883): avc: denied { bind } for pid=6147 comm="syz.4.791" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 76.680452][ T6148] netlink: 4 bytes leftover after parsing attributes in process `syz.4.791'. [ 76.728364][ T6169] loop4: detected capacity change from 0 to 512 [ 76.744936][ T5950] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 76.755510][ T6169] EXT4-fs error (device loop4): ext4_orphan_get:1394: inode #15: comm syz.4.792: iget: bad extended attribute block 1 [ 76.769974][ T5950] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 76.780830][ T6169] EXT4-fs error (device loop4): ext4_orphan_get:1399: comm syz.4.792: couldn't read orphan inode 15 (err -117) [ 76.780878][ T5950] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 76.794711][ T6169] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.814744][ T5950] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 76.877273][ T5950] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.892348][ T40] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 76.892623][ T5950] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.911981][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.919083][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.935327][ T6198] loop2: detected capacity change from 0 to 164 [ 76.942556][ T5950] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 76.953001][ T5950] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 76.966672][ T3153] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.969043][ T6198] rock: directory entry would overflow storage [ 76.973801][ T3153] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.979957][ T6198] rock: sig=0x4f50, size=4, remaining=3 [ 76.992708][ T6198] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 77.052103][ T5950] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.114344][ T29] audit: type=1326 audit(1721278715.808:884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6212 comm="syz.2.796" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f367acd5ad9 code=0x0 [ 77.141082][ T5950] veth0_vlan: entered promiscuous mode [ 77.151955][ T5950] veth1_vlan: entered promiscuous mode [ 77.180722][ T5950] veth0_macvtap: entered promiscuous mode [ 77.189064][ T5950] veth1_macvtap: entered promiscuous mode [ 77.218099][ T5950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.228664][ T5950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.238522][ T5950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.248975][ T5950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.258808][ T5950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.269274][ T5950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.279187][ T5950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.288998][ T6235] loop2: detected capacity change from 0 to 8192 [ 77.289621][ T5950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.305716][ T5950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.307798][ T6235] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 77.316266][ T5950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.336482][ T5950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.346996][ T5950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.356862][ T5950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.367325][ T5950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.377189][ T5950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.387676][ T5950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.401064][ T5950] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.420775][ T5950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.431293][ T5950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.441185][ T5950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.447904][ T6243] loop2: detected capacity change from 0 to 512 [ 77.451685][ T5950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.467795][ T5950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.478304][ T5950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.488147][ T5950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.498577][ T5950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.508513][ T5950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.518958][ T5950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.528756][ T6243] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.528807][ T5950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.543351][ T6243] ext4 filesystem being mounted at /53/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 77.551607][ T5950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.551625][ T5950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.551640][ T5950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.591913][ T5950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.602425][ T5950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.613426][ T5524] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.616852][ T5950] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.633183][ T5950] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.642069][ T5950] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.650781][ T5950] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.659553][ T5950] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.668662][ T3850] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.765774][ T6274] loop3: detected capacity change from 0 to 2048 [ 77.785497][ T6279] loop1: detected capacity change from 0 to 512 [ 77.801660][ T6274] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 77.821903][ T6287] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 77.829188][ T6287] IPv6: NLM_F_CREATE should be set when creating new route [ 77.836425][ T6287] IPv6: NLM_F_CREATE should be set when creating new route [ 77.840052][ T6279] EXT4-fs (loop1): inodes count not valid: 67 vs 32 [ 77.847473][ T6274] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.760: bg 0: block 136: padding at end of block bitmap is not set [ 77.936148][ T6286] loop0: detected capacity change from 0 to 164 [ 77.938305][ T6295] A link change request failed with some changes committed already. Interface vxcan1 may have been left with an inconsistent configuration, please check. [ 77.962730][ T6286] rock: directory entry would overflow storage [ 77.969193][ T6286] rock: sig=0x4f50, size=4, remaining=3 [ 77.974964][ T6286] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 77.985177][ T6293] netlink: 18 bytes leftover after parsing attributes in process `syz.1.811'. [ 78.007449][ T5950] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.009765][ T6293] bridge0: entered promiscuous mode [ 78.024499][ T6287] netlink: 12 bytes leftover after parsing attributes in process `syz.4.809'. [ 78.063449][ T6293] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 78.072271][ T6293] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 78.081070][ T6293] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 78.089798][ T6293] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 78.117926][ T6308] Process accounting resumed [ 78.202078][ T6317] bridge0: Device is already in use. [ 78.211411][ T6322] FAULT_INJECTION: forcing a failure. [ 78.211411][ T6322] name failslab, interval 1, probability 0, space 0, times 0 [ 78.224155][ T6322] CPU: 1 PID: 6322 Comm: syz.4.821 Not tainted 6.10.0-syzkaller-04472-g51835949dda3 #0 [ 78.233959][ T6322] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 78.244089][ T6322] Call Trace: [ 78.247363][ T6322] [ 78.250287][ T6322] dump_stack_lvl+0xf2/0x150 [ 78.254882][ T6322] dump_stack+0x15/0x20 [ 78.259148][ T6322] should_fail_ex+0x229/0x230 [ 78.263940][ T6322] ? sctp_add_bind_addr+0x6f/0x1e0 [ 78.269072][ T6322] __should_failslab+0x92/0xa0 [ 78.273852][ T6322] should_failslab+0x9/0x20 [ 78.278404][ T6322] kmalloc_trace_noprof+0x4b/0x2a0 [ 78.283577][ T6322] sctp_add_bind_addr+0x6f/0x1e0 [ 78.288522][ T6322] sctp_copy_local_addr_list+0x19b/0x220 [ 78.294164][ T6322] sctp_copy_one_addr+0x83/0x410 [ 78.299138][ T6322] sctp_bind_addr_copy+0x81/0x2b0 [ 78.304238][ T6322] sctp_assoc_set_bind_addr_from_ep+0xc0/0xd0 [ 78.310299][ T6322] sctp_connect_new_asoc+0x1d0/0x3b0 [ 78.315638][ T6322] sctp_sendmsg+0xf05/0x1920 [ 78.320227][ T6322] ? __pfx_sctp_sendmsg+0x10/0x10 [ 78.325255][ T6322] inet_sendmsg+0xc5/0xd0 [ 78.329614][ T6322] __sock_sendmsg+0x102/0x180 [ 78.334279][ T6322] ____sys_sendmsg+0x312/0x410 [ 78.339040][ T6322] __sys_sendmmsg+0x269/0x500 [ 78.343724][ T6322] __x64_sys_sendmmsg+0x57/0x70 [ 78.348750][ T6322] x64_sys_call+0xa49/0x2d60 [ 78.353335][ T6322] do_syscall_64+0xc9/0x1c0 [ 78.357826][ T6322] ? clear_bhb_loop+0x55/0xb0 [ 78.362500][ T6322] ? clear_bhb_loop+0x55/0xb0 [ 78.367181][ T6322] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.373088][ T6322] RIP: 0033:0x7fc69fd55ad9 [ 78.377497][ T6322] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 78.397097][ T6322] RSP: 002b:00007fc69efd7048 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 78.405525][ T6322] RAX: ffffffffffffffda RBX: 00007fc69fee3f60 RCX: 00007fc69fd55ad9 [ 78.413515][ T6322] RDX: 0000000000000002 RSI: 0000000020000e40 RDI: 0000000000000003 [ 78.421478][ T6322] RBP: 00007fc69efd70a0 R08: 0000000000000000 R09: 0000000000000000 [ 78.429503][ T6322] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 78.437469][ T6322] R13: 000000000000000b R14: 00007fc69fee3f60 R15: 00007ffed8dc2548 [ 78.445512][ T6322] [ 78.510535][ T6327] pim6reg1: entered promiscuous mode [ 78.515974][ T6327] pim6reg1: entered allmulticast mode [ 78.549355][ T6337] loop3: detected capacity change from 0 to 512 [ 78.556641][ T6337] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 78.566229][ T6337] EXT4-fs (loop3): orphan cleanup on readonly fs [ 78.575663][ T6337] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.826: bg 0: block 248: padding at end of block bitmap is not set [ 78.598757][ T6351] delete_channel: no stack [ 78.603850][ T6337] EXT4-fs error (device loop3): ext4_acquire_dquot:6844: comm syz.3.826: Failed to acquire dquot type 1 [ 78.628592][ T6337] EXT4-fs (loop3): 1 truncate cleaned up [ 78.635408][ T6357] tmpfs: Unknown parameter 'nr_iw' [ 78.643419][ T6337] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 78.658119][ T6337] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.725316][ T6370] --map-set only usable from mangle table [ 78.752549][ T6363] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 78.752549][ T6363] The task syz.0.832 (6363) triggered the difference, watch for misbehavior. [ 78.887770][ T6392] loop3: detected capacity change from 0 to 164 [ 78.924733][ T6384] rock: directory entry would overflow storage [ 78.930200][ T6397] loop0: detected capacity change from 0 to 128 [ 78.930953][ T6384] rock: sig=0x4f50, size=4, remaining=3 [ 78.942751][ T6384] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 79.002176][ T6399] x_tables: duplicate underflow at hook 2 [ 79.059263][ T6405] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 79.072795][ T6408] loop1: detected capacity change from 0 to 2048 [ 79.081405][ T6405] capability: warning: `syz.3.849' uses deprecated v2 capabilities in a way that may be insecure [ 79.092415][ T6408] EXT4-fs: Ignoring removed bh option [ 79.097928][ T6408] EXT4-fs: Ignoring removed nomblk_io_submit option [ 79.111995][ T6408] EXT4-fs: Ignoring removed nobh option [ 79.128681][ T6408] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.160201][ T3781] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.433109][ T6430] loop3: detected capacity change from 0 to 164 [ 79.441143][ T6430] rock: directory entry would overflow storage [ 79.447381][ T6430] rock: sig=0x4f50, size=4, remaining=3 [ 79.453078][ T6430] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 79.542215][ T6447] loop2: detected capacity change from 0 to 512 [ 79.550163][ T6445] loop3: detected capacity change from 0 to 128 [ 79.559261][ T6445] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 79.574016][ T6445] ext4 filesystem being mounted at /16/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 79.582633][ T6447] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 79.620082][ T6447] ext4 filesystem being mounted at /65/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 79.632464][ T5950] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 79.638040][ T29] kauditd_printk_skb: 29 callbacks suppressed [ 79.638186][ T29] audit: type=1400 audit(2000000001.570:912): avc: denied { mount } for pid=6446 comm="syz.2.866" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 79.649638][ T6447] EXT4-fs (loop2): shut down requested (0) [ 79.686670][ T6447] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=16 [ 79.695604][ T6447] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=16 [ 79.704587][ T6447] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=16 [ 79.704598][ T29] audit: type=1400 audit(2000000001.640:913): avc: denied { read } for pid=6446 comm="syz.2.866" dev="loop2" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 79.734536][ T29] audit: type=1400 audit(2000000001.650:914): avc: denied { open } for pid=6446 comm="syz.2.866" path="/" dev="loop2" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 79.756878][ T5524] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 79.766056][ T40] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 79.776770][ T40] Quota error (device loop2): write_blk: dquota write failed [ 79.784298][ T40] Quota error (device loop2): free_dqentry: Can't write quota data block 5 [ 79.793298][ T40] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 79.803954][ T40] Quota error (device loop2): write_blk: dquota write failed [ 79.811350][ T40] Quota error (device loop2): free_dqentry: Can't write quota data block 5 [ 82.715730][ T6458] __nla_validate_parse: 8 callbacks suppressed [ 82.715744][ T6458] netlink: 92 bytes leftover after parsing attributes in process `syz.3.871'. [ 82.736619][ T6467] netlink: 20 bytes leftover after parsing attributes in process `syz.1.873'. [ 82.747635][ T6464] loop4: detected capacity change from 0 to 2048 [ 82.797408][ T6464] loop4: detected capacity change from 0 to 2048 [ 82.846382][ T6464] loop4: detected capacity change from 0 to 2048 [ 82.882889][ T6476] loop3: detected capacity change from 0 to 164 [ 82.890172][ T6464] loop4: detected capacity change from 0 to 2048 [ 82.898320][ T6476] rock: directory entry would overflow storage [ 82.904610][ T6476] rock: sig=0x4f50, size=4, remaining=3 [ 82.910208][ T6476] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 82.911191][ T6464] loop4: detected capacity change from 0 to 2048 [ 82.943010][ T6464] loop4: detected capacity change from 0 to 2048 [ 82.965135][ T6464] loop4: detected capacity change from 0 to 2048 [ 83.004994][ T6464] loop4: detected capacity change from 0 to 2048 [ 83.025712][ T6484] netlink: 32 bytes leftover after parsing attributes in process `syz.3.879'. [ 83.033398][ T6464] loop4: detected capacity change from 0 to 2048 [ 83.056031][ T6464] loop4: detected capacity change from 0 to 2048 [ 83.090475][ T6464] loop4: detected capacity change from 0 to 2048 [ 83.099533][ T6484] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 83.134523][ T6495] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 83.152806][ T6464] loop4: detected capacity change from 0 to 2048 [ 83.186435][ T6464] loop4: detected capacity change from 0 to 2048 [ 83.205414][ T6505] netlink: 92 bytes leftover after parsing attributes in process `syz.0.885'. [ 83.232025][ T6464] loop4: detected capacity change from 0 to 2048 [ 83.245473][ T6508] loop1: detected capacity change from 0 to 256 [ 83.262310][ T6464] loop4: detected capacity change from 0 to 2048 [ 83.300603][ T6464] loop4: detected capacity change from 0 to 2048 [ 83.325353][ T6512] loop0: detected capacity change from 0 to 1024 [ 83.335587][ T6464] loop4: detected capacity change from 0 to 2048 [ 83.357008][ T6512] EXT4-fs (loop0): couldn't mount as ext3 due to feature incompatibilities [ 83.365241][ T6464] loop4: detected capacity change from 0 to 2048 [ 83.394429][ T6518] loop0: detected capacity change from 0 to 128 [ 83.417719][ T6518] EXT4-fs: Ignoring removed nobh option [ 83.418104][ T6464] loop4: detected capacity change from 0 to 2048 [ 83.424685][ T6518] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 83.443204][ T2785] ================================================================== [ 83.451304][ T2785] BUG: KCSAN: data-race in __fsnotify_parent / fsnotify_put_mark [ 83.459035][ T2785] [ 83.461344][ T2785] write to 0xffff88810122d150 of 4 bytes by task 4811 on cpu 0: [ 83.468959][ T2785] fsnotify_put_mark+0x2d8/0x5d0 [ 83.473895][ T2785] __se_sys_inotify_rm_watch+0x105/0x180 [ 83.479526][ T2785] __x64_sys_inotify_rm_watch+0x31/0x40 [ 83.485067][ T2785] x64_sys_call+0x1ae0/0x2d60 [ 83.489736][ T2785] do_syscall_64+0xc9/0x1c0 [ 83.494229][ T2785] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.500123][ T2785] [ 83.502431][ T2785] read to 0xffff88810122d150 of 4 bytes by task 2785 on cpu 1: [ 83.509960][ T2785] __fsnotify_parent+0xd4/0x370 [ 83.514801][ T2785] __fput+0x5ca/0x6f0 [ 83.518780][ T2785] __fput_sync+0x44/0x60 [ 83.523016][ T2785] __se_sys_close+0x101/0x1b0 [ 83.527687][ T2785] __x64_sys_close+0x1f/0x30 [ 83.532270][ T2785] x64_sys_call+0x25cb/0x2d60 [ 83.536939][ T2785] do_syscall_64+0xc9/0x1c0 [ 83.541430][ T2785] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.547321][ T2785] [ 83.549630][ T2785] value changed: 0x00002008 -> 0x00000000 [ 83.555336][ T2785] [ 83.557645][ T2785] Reported by Kernel Concurrency Sanitizer on: [ 83.563775][ T2785] CPU: 1 PID: 2785 Comm: udevd Not tainted 6.10.0-syzkaller-04472-g51835949dda3 #0 [ 83.573049][ T2785] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 83.583092][ T2785] ================================================================== [ 83.613950][ C1] hrtimer: interrupt took 25562 ns [ 83.622938][ T6518] ext4 filesystem being mounted at /232/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 83.644576][ T3088] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.