last executing test programs: 3.028934173s ago: executing program 1 (id=1136): perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x3, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000000), 0x4) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = open(0x0, 0x143142, 0x0) sendfile(r2, 0xffffffffffffffff, 0x0, 0x1000000201005) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) modify_ldt$write(0x1, 0x0, 0x0) sendmsg$kcm(r1, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x3, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0xfffffffe) 2.133721066s ago: executing program 1 (id=1193): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x82c0, 0xc) close_range(r0, 0xffffffffffffffff, 0x2) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x29, 0x35, 0x0, 0x0) socket$pppoe(0x18, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003ac0)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, 0x18, 0x0}}], 0x1, 0x24000081) socket$inet6_sctp(0xa, 0x0, 0x84) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r2, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000048540)={0x0, 0x0, "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", "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"}) r3 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_REMOVE(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01f6ff0008007c000500050000000400"], 0x24}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r3, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[@ANYBLOB='$\b\bF', @ANYRES16=r4, @ANYBLOB="0c0229fd7000fbdbdf250200000008000200040000000800020005000000"], 0x24}}, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @remote}, 0x1c) fallocate(r3, 0x20, 0x0, 0x0) r5 = openat$cgroup_ro(r2, &(0x7f0000000180)='pids.current\x00', 0x26e1, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@bloom_filter={0x1e, 0x98c7, 0x7, 0x3, 0x1900, r5, 0x8, '\x00', 0x0, r0, 0x3, 0x0, 0x4, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000418110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70810000000f7007b8af8f200000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000951be24b9a005c07202e831b2bd5805602b8c4c25ed75d1c1bc413a657e9a247354da7e34083fb1345eb966d9a40a6036cf10b4497588ecb82a17d"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f00000007c0)={[{@sb={'sb', 0x3d, 0x55c5}}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@noquota}, {@abort}, {@noload}, {@noload}]}, 0x64, 0x50a, &(0x7f0000000200)="$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") r7 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r7, 0x0, &(0x7f0000000080)='ro\x00', 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r7, 0x7, 0x0, 0x0, 0x0) 2.133224516s ago: executing program 3 (id=1194): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000840)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) r1 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x140f, 0x9}, 0x10}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000580)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x2, [@volatile={0x0, 0x0, 0x0, 0x9, 0x3}, @struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x0, [{0x0, 0x1}]}, @enum={0x0, 0x0, 0x0, 0x4}]}}, 0x0, 0x4a}, 0x20) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NAT_REG_ADDR_MIN={0x8}, @NFTA_NAT_TYPE={0x8}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}]}], {0x14}}, 0x80}}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7020000f3ffffb0150000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r8, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r9, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=@delchain={0x24, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0x0, 0xffff}}}, 0x24}}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000380)=""/156, 0x9c}], 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x24}, 0x24}}, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r10, &(0x7f00000002c0), 0x40000000000009f, 0x0) r11 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r11, &(0x7f0000002f80)=[{{&(0x7f0000000280)={0xa, 0x4e20, 0xffffffc0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x60000}, 0x1c, &(0x7f0000000300)=[{&(0x7f00000002c0)="4a27c94b", 0x4}], 0x1, &(0x7f0000000340)=ANY=[@ANYBLOB="1400000000000000290000000b0000000000000100000000180000000000000029000000040000003b0000000000000058"], 0x88}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003080)=ANY=[@ANYBLOB="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"], 0x138}}], 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r5) add_key(&(0x7f00000003c0)='dns_resolver\x00', &(0x7f0000000400)={'syz', 0x3}, &(0x7f0000000080)="00000102", 0xfffff, r0) 1.977573439s ago: executing program 1 (id=1200): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x65, &(0x7f0000000080)=0x91, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) (async) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) time(0x0) sendmmsg$inet6(r0, &(0x7f0000000040)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) (async) sendmmsg$inet6(r0, &(0x7f0000000040)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 1.936905632s ago: executing program 3 (id=1202): mlockall(0x1) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000003b8100008500000007000000b50000005000510095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='mm_page_free_batched\x00', r0}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) r1 = open$dir(&(0x7f0000000000)='./file0\x00', 0x119840, 0x8) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_aout(r2, &(0x7f0000000000)=ANY=[], 0xc1) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000000000000000000004b84ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000400)='tlb_flush\x00', r3}, 0x10) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) keyctl$invalidate(0x15, 0x0) r4 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000040)) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r4, 0x80489439, &(0x7f0000000240)) syz_emit_ethernet(0xca, &(0x7f0000000480)=ANY=[@ANYBLOB="ffffffffffff0000000000000800450020bc0000000000019078ac1e0001ac1414bb0c00907800000000480000000000000000110000e0000002ac1414aa01000dee0dd9de36ed4bcc5b4e23440c00030000000000000000890f0000000000ffffffffffffffff444c0001ac1e00010000000000000000000000000000000000000000ac1414aa000000007f000001000000000000000000000000e000000200000000ffffffff00000000ffffffff0000000044140000000000000000000000000000000000000000003474a9525bbcd87e4d472e"], 0x0) gettid() r5 = fsopen(&(0x7f0000000000)='tmpfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) name_to_handle_at(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', &(0x7f0000000600)=ANY=[@ANYBLOB='\x003'], 0xfffffffffffffffe, 0x0) syz_open_dev$loop(&(0x7f0000000140), 0x7, 0x80000) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r6, 0x6, 0x1d, &(0x7f00000059c0), &(0x7f0000005a00)=0x14) waitid(0x0, 0x0, 0x0, 0x2000000e, 0x0) madvise(&(0x7f000042f000/0x800000)=nil, 0x800002, 0x14) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000005, 0x13, r2, 0x0) renameat(r1, &(0x7f0000000080)='./file0\x00', r2, &(0x7f00000000c0)='./file0\x00') 1.851076709s ago: executing program 1 (id=1203): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000380)=@filter={'filter\x00', 0xe, 0x2, 0x90, [0x0, 0x20000040, 0x20000070, 0x200000a0], 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00000600000000000000000000000000000000000000000000000000000000000000000000000000feffffff000000000000000000000000000000000007fffffe0000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff00000000"]}, 0x108) 1.849590599s ago: executing program 1 (id=1205): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@discard}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x1, 0x56a, &(0x7f00000015c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x103042, 0x0) pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f0000000200)='y', 0x1}], 0x1, 0x0, 0x0, 0x4c) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0x5) mknodat$null(0xffffffffffffff9c, 0x0, 0x0, 0x103) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = inotify_init1(0x0) inotify_add_watch(r1, &(0x7f0000000000)='.\x00', 0x50007a2) r2 = socket$unix(0x1, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') syz_mount_image$vfat(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x10000, 0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = syz_io_uring_setup(0x239, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000380)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r3, 0x2def, 0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000280)={0x1, &(0x7f0000000200)=[{0x6}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) mount(0x0, &(0x7f0000000540)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x104000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x1a49002, 0x0) mount$bind(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x39a72d8, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) bind$unix(r2, &(0x7f00000002c0)=@file={0x1, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'lo\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2400000021000000000000000000000002000000000000000000000005001600ff000005b9f7e3ed73bf7739d10e72ad5dfb65a5cfcbc6774438f6ca091922126f331dc2f3bf9dc5d3750c4a3ae97a66203b7057000000000000000000000000000068012a14192ded93bd626b6735aacf391b7bc2a891c30584fff7fda260f142f6151dae4bb0fc44a71595478d4a"], 0x24}}, 0x0) 1.783816825s ago: executing program 4 (id=1207): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="034886dd010000000000000000006000000001002100fe880001000000000021060000007d01ff02000000000000000000000000000100"], 0xfdef) 1.607073149s ago: executing program 4 (id=1210): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'vcan0\x00'}) ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307201, &(0x7f0000000f00)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x90) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt(r5, 0xff, 0x1, 0x0, &(0x7f00000002c0)=0xfffffffffffffecd) bpf$PROG_LOAD(0x5, &(0x7f0000001140)={0x0, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x90) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='freezer.self_freezing\x00', 0x275a, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x0, 0x4, 0x9}) socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xd4, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0x4400, &(0x7f0000000e40)=ANY=[@ANYBLOB='check=strict,session=0x0000000000000024,iocharset=ascii,overriderockperm,overriderockperm,gid=', @ANYRESOCT=0x0, @ANYRESHEX], 0xfe, 0xa15, &(0x7f00000002c0)="$eJzs3c1vHOd9B/DvrEiJog1VtlVXFWxrJUM2bbMUSdUSBB9qiVxKdPlSkBRgoS0sw5IKQURd2C1gGz3IQNFTjBhBECDJJfAxJwPOIb4EuiXHnHIIkPg/CIxcohwCBju7lJbkvog0RSrK57MYzdvveduZnUe73J0n/CVbWVkppy2uX/rxTlaWh8/5ya8++/yT+vTxrezNnrxa/DQZSFJN+v5Univ9E5ML87M9MrqZXElyOymS7Etj3sH+NWtXUnw7j99bv53ihzncJtnAJhtHTyv8Vdvt8w8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB5KE5Ojo2NFZqbnLr1Z7awcArzL/tXsvixH/S6+7FVskRT1KQMDq0N9Hz50b/fT9X+O55nG2jONkb8H8tFjTx987am+ymr6LhXaEe9/+NHNt5eXr713b1N/28C+Zrvqy/t2rHr3b+/Wkl2ozU0vzk/PnrtQq04vzlfPnj49evLi1GJ1ajq1xcuLS7XZ6sRC7dzS/EJ1aOKl6tjZs6eqtZHL85fmLkyOzNRWN575h/HR0dPVN0b+pXZuYXF+7uQbI4sTF6dnZqbnLpQx9d31mDP1E/Gfp5eqS7Vzs9Xq9RvL1071qmQ9aKztnmJt0HivnMZHx8fHxsbHx06/evbVM6OjfRs2jK6TDRG7f9Kye36yrddu+IYqzf4/M5nOXC7lzVTbPiYymYXMZ7bD/qbV/v/EyVrXclv7/9Ve/vC93UdS9v/PNdae69T/d6hL78fKSiPnraZffbyfD/NRbubtLGc51/LeN85xw+OP25RP9Zu3duPjQmqZy3QWM5/pzOZcuaXa3FLN2ZzO6YzmrVzMVBZTzVSmM5NaFnM5i1lKrTyjJrKQWs5lKfNZSDVDmchLqWYsZ3M2p1JNLSO5nPlcylwuZDLnylyu50b5vJ/qUse7QWP3EzTeJWib+/+Vh/F/gjxo234Nh61aafb/ezsGrKwuDU3sWK0AAACA7fT3v8iBQ0/+/DdJf54tP5efmp6pje52tQAAAIBtVH5d75n6rL++9GwK7/8BAADgUVOUv7ErkgzmaGOp8UuoPfEhAAAAADwiyr//P1efDdaXjqa4eyeUK7tdNwAAAGB79L7Hfs+IYnj19r/Vq4351WZE8z6/g1PTM7WRifmZ18byQnmXgfKXBhty25MU/eXPD17OsUbUscHGfHBtjgP1qLGR18byco43GzL0fH32/FCbyPFG5IuNyBe7RJ6qRwLAo+54l/74fvv/lzPciBg+0rc3Sd+RNj3rqJ4VAB4WvcfY6RlR/OO99//9zWzX9P9P5vofGl8pGMk7eTfLuZrh8tcG5TcO1uT6b582PzO4+zWE0Qz3+DRgNfaXZyoZ7vF5wGDLQC/DPT4RaMTm35NTD/5AAMAOOt6hH95M/z/c8v4/G9//3x1a6JqfFALAQ+HuCPYPcGG32wgArKWXBgAAAAAAAAAAAAAAAAAAAAAAAAAAgO23rXf7H9hi8t82x/V7sMMQbFjY33wOtp7Pd5LsXJ2LbS6rsg35rCTZqeO1cws5mGz5WW17Gu9Nsvvt6rnQ13xJ3Hx7ebeuSAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOykItnTbnsl2ZdkNMnJna/Vg3Nrtyuw8/6pdaW4kzv5IAd2rzoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAI+m5v3/K2nMH2tsSl8lOZHkSpJ/3e06bqc7u12BbbJ/i+la7v9fP+ZZKdLXOOwp+icmF+Zn64e/HPuh8tVnn39Sn1qS77vfcsrAyrrBJZolrI/90eOrS0+UqQYnr71/87/f/a/q5PlUsjfnl6ZmJmcvLLx+L8nTxRdJNY1p1Wp9//fEzz5t0/Iv6i1tb325U+WTM7mx3L9rl7p7ud3cWL42Xi9pqfbm0v/8540PWnY9mWPJ80PJ0NqS/qM+dSjpWPq7lVZ8Xfx/cSDfy5Xy+NefjWKlqB+ivynbv//6jeVrI++8u3y1Q50O5miSq8lA9zp93LL7aHk9aas86yr99VJHy6D6P4d6tLGrlhzHOrThifKUGWy2YW/HNrSqdm5DqeV5r7Tb36jRqQ41eiovtDnSK/uSzjV6ofuRbq/4uvh1cTG/yv+1jP9RqR//E+n86lybRRnZcqZ0jKw0IsuWj7fueGt95O++f1+1bztMDZv1rTUv3krL9b95rLbperRSdL0etZS4udfFuhLXnRVdXhdlj3RoXYrm1adTmmY9DzWiOtTzb/NK0nek21VxQ2/9So8ryt30r7ffvdXX/w+Kofw+t4z/AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPPyKZE+77ZXkRJKDq+vVZGUT2e7rtKMyWGy2itvq1t1/HgmVzSYo7uROPsiBB1MdAAAAAAAAAHba+cmvPvv8k/pU7G9uav59v5r0JTlYfHd/JhfmZ3tk1J9cSXK7vjzQZn+XP/fX0+Xxe+u362uHN9sSAOB+/TkAAP//mWBg/A==") bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000d00)=ANY=[@ANYBLOB="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"], 0x0, 0x4f}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f0000000340)=@file={0x1, './file0\x00'}, 0x6e) fcntl$lock(r6, 0x25, &(0x7f0000000040)={0x1, 0x2, 0x0, 0x200000002}) fcntl$lock(r4, 0x5, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) futex_waitv(&(0x7f0000000180)=[{0x0, &(0x7f0000000000), 0x2}, {0x3, &(0x7f0000000040)=0x3, 0x82}], 0x2, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x5, 0x0, 0x0, &(0x7f0000000000), 0x0) 1.375140198s ago: executing program 2 (id=1212): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) bind$netlink(0xffffffffffffffff, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000000), 0x4) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0x6, 0x8, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000540)={&(0x7f0000000800)=@newsa={0x130, 0x10, 0x200, 0x70bd28, 0x25dfdbff, {{@in6=@private0, @in=@loopback, 0x4e23, 0x0, 0x4e21, 0x6, 0xa, 0xa0, 0xa0, 0x8}, {@in6=@mcast2, 0x4d6, 0x2b}, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, {0x55, 0x800, 0x8, 0xc2f, 0x4, 0x30, 0x5, 0xa9}, {0x0, 0xc, 0x2, 0x5}, {0xc, 0x7, 0x5}, 0x70bd2b, 0x3506, 0x2, 0x3, 0x40, 0x80}, [@tfcpad={0x8, 0x16, 0x7ff}, @lifetime_val={0x24, 0x9, {0x1, 0xf, 0x400000000000, 0x6}}, @XFRMA_SET_MARK={0x8, 0x1d, 0xa}, @offload={0xc, 0x1c, {0x0, 0x2}}]}, 0x130}, 0x1, 0x0, 0x0, 0x400c010}, 0x80) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x8010, r4, 0x0) splice(r5, 0x0, r7, 0x0, 0x9, 0x0) write(r3, &(0x7f0000001100)="84", 0x1) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x66, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1ff}, 0x0, 0x0, 0x0, 0x0, 0x40000000000000}, 0x0, 0x100000000000, 0xffffffffffffffff, 0x0) tee(r2, r7, 0x81, 0x0) write$binfmt_elf64(r7, 0x0, 0xffac) write$binfmt_misc(r4, 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) socket$kcm(0x10, 0x2, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), r0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r6, &(0x7f00000001c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x200040c4}, 0x8821) socket$kcm(0x10, 0x2, 0x0) truncate(&(0x7f0000000200)='./file0\x00', 0x4) r8 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8}, {0x10, 0x2, [@TCA_RED_FLAGS={0xc, 0x4, {0x0, 0x17}}]}}]}, 0x3c}}, 0x0) 1.11210505s ago: executing program 0 (id=1214): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_group_source_req(r0, 0x29, 0x2f, &(0x7f0000000140)={0x93, {{0xa, 0x4e21, 0x4, @empty, 0xc}}, {{0xa, 0x4e24, 0x23f3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x9}}}, 0x108) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000007c0)=[@in6={0xa, 0x4e23, 0x6, @ipv4={'\x00', '\xff\xff', @empty}, 0x2b5a}, @in6={0xa, 0x4e20, 0x81, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x8}, @in6={0xa, 0x4e20, 0x794, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8}], 0x54) (async, rerun: 32) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e20, @loopback}]}, &(0x7f0000000100)=0x10) (async, rerun: 32) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x66, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r3 = getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) kcmp$KCMP_EPOLL_TFD(r3, 0x0, 0x7, r4, &(0x7f0000000300)) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "7f12ddc1517600"}) (async) r5 = syz_open_pts(r2, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000200)=0x2) (async) read(r5, 0x0, 0x2006) r6 = socket$can_j1939(0x1d, 0x2, 0x7) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$sock_int(r6, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r6, &(0x7f0000000240)={0x1d, r8}, 0x18) (async) socket$packet(0x11, 0x0, 0x300) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file2\x00', 0x18000, &(0x7f0000001b40)=ANY=[], 0x1, 0x2eb, &(0x7f00000004c0)="$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") (async, rerun: 32) r9 = syz_open_dev$usbfs(&(0x7f0000000c40), 0x310decfa, 0x1) (rerun: 32) ioctl$USBDEVFS_CONTROL(r9, 0x80045505, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)={0x2, 0x4, 0x8, 0x1, 0x80, r1, 0x5, '\x00', r8, 0xffffffffffffffff, 0x1, 0x2, 0x3}, 0x48) close_range(r1, 0xffffffffffffffff, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) r11 = perf_event_open(&(0x7f0000000580)={0x1, 0xc5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r11, 0x5452, &(0x7f00000006c0)='\x02;\xe5\b\x00\x1c\x9c\x00\x00\x00\x00\x00\x00\x91\xecB\xdcZ\xe5\xbd$\x05\x90\xa9\xf3\xc7\xcb\xb7\xf0\xa1;#\x989\xe9\x12\xdf^6T\xdf\xcd\x02\xc5\xb0\xba\x12\'QXp\t\xfc\xf3\x01\x02\xbc\xbf\xc0\xf0\x10\xee\xd3\\yy\xa4\xf9\xe8\x00\xdd\xe97 0_\xe4]W\xf7~\xacVK\xc9t\x9e+:\x85\xef\x94\x0e\x19\x9cV[N.\xeb\x9fJ>\xd9\x99\x88\xd8\xdd\xb8Y\xc3$\xc6\x93\v\x04REY\xf4\xea\xf2\xcd\xcd.\x16\x861\xa1\v\x8d\x8e\x84R\xa6\x83\x84\xc0\x01e\xc3\xc8\xcc?\xc8?\x19\xb2\xa2\xe1\xac<\xe9f\x11\xff3\xc7\x19\x9e\x19\xf5-\xfe\xbd\xae\xbbR\x82\x16\xf9\x15S\x03U\xe0\xd8t\xe3%96') (async, rerun: 32) ioctl$PERF_EVENT_IOC_PERIOD(r11, 0x40082404, &(0x7f0000000200)=0x7fff) (rerun: 32) 1.1119356s ago: executing program 2 (id=1215): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x4000, &(0x7f0000000080)={[{@errors_remount}, {@max_batch_time={'max_batch_time', 0x3d, 0x30}}, {@nodelalloc}, {@bsdgroups}, {@noblock_validity}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4}}]}, 0xfe, 0x465, &(0x7f0000000140)="$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") 1.063055434s ago: executing program 0 (id=1216): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000700)=@mangle={'mangle\x00', 0x64, 0x6, 0x750, 0xd0, 0x300, 0xd0, 0x1b8, 0xd0, 0x680, 0x680, 0x680, 0x680, 0x680, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0xfffe, 0x703}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@uncond, 0x0, 0x100, 0x148, 0x0, {}, [@common=@unspec=@connmark={{0x30}}, @common=@inet=@socket1={{0x28}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4=@private}}}, {{@uncond, 0x0, 0x108, 0x130, 0x0, {}, [@common=@frag={{0x30}}, @common=@frag={{0x30}}]}, @inet=@DSCP={0x28}}, {{@uncond, 0x4c000000, 0x228, 0x250, 0x0, {}, [@common=@rt={{0x138}, {0x0, [], 0x0, 0x0, 0x0, [@remote, @ipv4={'\x00', '\xff\xff', @empty}, @remote, @ipv4={'\x00', '\xff\xff', @private}, @dev, @private0, @loopback, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @loopback, @private1, @remote, @private1, @mcast2, @private0, @private2]}}, @common=@dst={{0x48}}]}, @common=@inet=@TCPMSS={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x7b0) 1.062577494s ago: executing program 3 (id=1217): socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x8, &(0x7f00000038c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x10) r0 = perf_event_open(&(0x7f0000000040)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) perf_event_open(&(0x7f0000000040)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r0, 0x3) r1 = syz_io_uring_setup(0xf3b, &(0x7f0000000480)={0x0, 0x523d}, &(0x7f0000000080)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000140)=@IORING_OP_WRITEV={0x2, 0x0, 0x2000, @fd_index=0x4, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r1, 0x47ba, 0x0, 0x0, 0x0, 0x0) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f00000000c0)=0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r6) sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="010000000000000002000200000008000100", @ANYRES32=r5, @ANYBLOB], 0x1c}}, 0x0) write$nci(r4, &(0x7f0000000200)=@NCI_OP_CORE_GENERIC_ERROR_NTF={0x0, 0x0, 0x3, 0x7, 0x1, 0x1}, 0x4) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000040)='./file2\x00', 0x10000, &(0x7f00000008c0), 0x1, 0x546, &(0x7f0000000200)="$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") mknod$loop(&(0x7f0000000140)='./file0\x00', 0x2000, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x3, &(0x7f0000001280)=[{0x64}, {0x35, 0x0, 0x3c, 0x10001}, {0x6, 0x0, 0x8}]}) r9 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000880)={0x0, 0x0, 0x0}, &(0x7f0000000480)=0xc) syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x201000, &(0x7f0000000bc0)=ANY=[@ANYBLOB='check=strict,overriderockperm,cruft,iocharset=cp932,block=0x0000000000000200,nojoliet,check=relaxed,nojoliet,map=off,overriderockperm,gid=', @ANYRESHEX=r11, @ANYBLOB="2c6d6f64653d3078303030303030303030303030306665382c7569643da954d2f9b67a347b772d6d202b594ca5d9e4c863c4b448ddfa4326e8db2c349aa1ff496237e4598252cabcc2d296e6d22ca0f7f12c9d861f9eead3bee3d95f592400853eb36bab88ad0164b9c22bcf1eb85fbdefabb793a8ca3fa3d3d6918ccd2952bd74c4ec92b062905d985b9531c76a03262fb882b01c9d8a", @ANYRESHEX=r10, @ANYBLOB=',utf8,\x00'], 0x3d, 0x563, &(0x7f0000001240)="$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") quotactl_fd$Q_QUOTAON(r8, 0xffffffff80000202, r10, &(0x7f0000000180)='./file0\x00') socket$inet_udplite(0x2, 0x2, 0x88) setresuid(0x0, 0x0, 0x0) r12 = syz_io_uring_setup(0x5, &(0x7f0000000140)={0x0, 0x0, 0x3e40, 0x0, 0x10000}, &(0x7f00000004c0), &(0x7f0000fff000)) r13 = epoll_create(0x40) epoll_ctl$EPOLL_CTL_ADD(r13, 0x1, r12, &(0x7f0000000040)={0xa000000d}) lstat(&(0x7f0000000780)='./file0\x00', &(0x7f0000000980)) 1.061412234s ago: executing program 0 (id=1218): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, 0x0, &(0x7f00000000c0)='GPL\x00'}, 0x90) unshare(0x28000600) fstatfs(0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'gre0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xc, 0x0, &(0x7f0000000780)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='tlb_flush\x00', r1}, 0x10) modify_ldt$write(0x1, &(0x7f0000000200), 0x10) modify_ldt$write2(0x11, &(0x7f00000009c0), 0x10) 1.025037927s ago: executing program 0 (id=1219): bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0xf, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x41}, {{}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x28, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 998.280009ms ago: executing program 1 (id=1220): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180100002100ff00000000003b810000850000006d0000000700000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) syz_mount_image$vfat(&(0x7f0000003880), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x6, 0x2a6, &(0x7f0000000440)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map, r3, 0x26}, 0x10) sendmsg$inet(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000500)='>', 0x1}], 0x1}, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) r4 = open_tree(r1, &(0x7f0000000280)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 935.039294ms ago: executing program 0 (id=1221): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000001e004b05000000000000000007000000", @ANYRES32=0x0, @ANYBLOB="a6ff00000000000008000a00", @ANYRES32=r2], 0x28}}, 0x0) 907.936977ms ago: executing program 0 (id=1222): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000040)) socket$inet6_tcp(0xa, 0x1, 0x0) rename(0x0, &(0x7f0000000840)='./file1\x00') socket$nl_xfrm(0x10, 0x3, 0x6) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r0, &(0x7f0000000140)={0x20000010}) epoll_wait(r0, &(0x7f0000000040)=[{}], 0x2, 0xfffff001) epoll_wait(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={0xffffffffffffffff, 0x10, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000000200ac83f8fa00000300000d00000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000f02000000e0fd000000000000000f02000000c03e0000c687c70d0b04e83bb098b2a9327a41782cc1e8e61427136e5c42dbaa1596017b90bd8f306354"], &(0x7f0000000440)=""/11, 0x66, 0xb, 0x1}, 0x20) connect$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x66, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x34, r5, 0x1, 0x0, 0x0, {0x2, 0x2, 0x2}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x34}, 0x1, 0x40030000000000}, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4040}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./file0\x00', 0x400, &(0x7f0000000000)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000"], 0x1, 0x2a1, &(0x7f0000000580)="$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") rename(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='./control\x00') sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[@ANYBLOB="880000000314010001000000000000000900020073797a3000000000080041007278650014003300736974300000000000000000000000000900020073797a3100000000080041007369770014003300766c616e3100000000000000000000000900020073797a31000000000800410072786500140033006970365f76746930000000000000000046c965efb30435ea8d26ff63bb32d0e1c9b825b42b39b5b89394b7e3d5e33a60f3b7257f5380d211688b2eedc0cdf38d93e832ff17e7f64b40f33be61a5f886d33ce40e14712e7b06f052899e90163b85ea67f32deaa57c26d628e2d00450f851842a29519a6de3d18"], 0x88}}, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r6, 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x101000) 754.077419ms ago: executing program 4 (id=1223): r0 = syz_clone(0x80888100, 0x0, 0x50, 0x0, 0x0, 0x0) ptrace(0x10, r0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r1 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_JOIN_FILTERS(r1, 0x65, 0x6, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0x43, 0x0, 0x0) ioctl$sock_proto_private(0xffffffffffffffff, 0x89e8, 0x0) r3 = socket(0x10, 0x803, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) recvmmsg(r3, 0x0, 0x0, 0x0, &(0x7f0000003700)={0x77359400}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000100a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021100011800c000100636f756e74657200980000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000006c000380680000800800034000000002"], 0x12c}}, 0x0) 652.462597ms ago: executing program 4 (id=1224): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000005000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000000800024000000000180003801400010076657468305f746f5f687372000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014000100"], 0xfc}}, 0x0) 652.280217ms ago: executing program 2 (id=1225): socket$packet(0x11, 0x3, 0x300) socket$inet6(0xa, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) socket$packet(0x11, 0x2, 0x300) syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000180), 0xfea7) socket$can_bcm(0x1d, 0x2, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r2, &(0x7f0000002a00)={0x0, {'syz0\x00', 'syz0\x00', 'syz0\x00', &(0x7f00000000c0)=""/43, 0x2b}}, 0x120) write$UHID_SET_REPORT_REPLY(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="3f00000000000000f4765db4"], 0xc) socket$rxrpc(0x21, 0x2, 0xa) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x66, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x0, 0x0, r3, 0x0) mount(0x0, &(0x7f0000000300)='./bus\x00', 0x0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) syz_open_dev$evdev(&(0x7f0000000180), 0x0, 0x0) r4 = syz_open_dev$usbmon(&(0x7f0000000900), 0x0, 0x0) ioctl$MON_IOCX_MFETCH(r4, 0xc0109207, &(0x7f0000000080)={0x0}) syz_open_dev$usbfs(&(0x7f0000000000), 0x205, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.stat\x00', 0x275a, 0x0) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 651.977597ms ago: executing program 4 (id=1226): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) bind$netlink(0xffffffffffffffff, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000000), 0x4) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0x6, 0x8, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000540)={&(0x7f0000000800)=@newsa={0x130, 0x10, 0x200, 0x70bd28, 0x25dfdbff, {{@in6=@private0, @in=@loopback, 0x4e23, 0x0, 0x4e21, 0x6, 0xa, 0xa0, 0xa0, 0x8}, {@in6=@mcast2, 0x4d6, 0x2b}, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, {0x55, 0x800, 0x8, 0xc2f, 0x4, 0x30, 0x5, 0xa9}, {0x0, 0xc, 0x2, 0x5}, {0xc, 0x7, 0x5}, 0x70bd2b, 0x3506, 0x2, 0x3, 0x40, 0x80}, [@tfcpad={0x8, 0x16, 0x7ff}, @lifetime_val={0x24, 0x9, {0x1, 0xf, 0x400000000000, 0x6}}, @XFRMA_SET_MARK={0x8, 0x1d, 0xa}, @offload={0xc, 0x1c, {0x0, 0x2}}]}, 0x130}, 0x1, 0x0, 0x0, 0x400c010}, 0x80) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x8010, r4, 0x0) splice(r5, 0x0, r7, 0x0, 0x9, 0x0) write(r3, &(0x7f0000001100)="84", 0x1) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x66, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1ff}, 0x0, 0x0, 0x0, 0x0, 0x40000000000000}, 0x0, 0x100000000000, 0xffffffffffffffff, 0x0) tee(r2, r7, 0x81, 0x0) write$binfmt_elf64(r7, 0x0, 0xffac) write$binfmt_misc(r4, 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) socket$kcm(0x10, 0x2, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), r0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r6, &(0x7f00000001c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x200040c4}, 0x8821) socket$kcm(0x10, 0x2, 0x0) truncate(&(0x7f0000000200)='./file0\x00', 0x4) r8 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8}, {0x10, 0x2, [@TCA_RED_FLAGS={0xc, 0x4, {0x0, 0x17}}]}}]}, 0x3c}}, 0x0) 191.722425ms ago: executing program 3 (id=1227): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x54}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000002580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000080a01010000000000000000020000000900010073797a300000000038000000060a17d50000000000000000020000000900020073797a32000000000900010073797a30000000000c0003400000000000000002"], 0xcdc}, 0x1, 0x0, 0x2400000000000000}, 0x0) 154.239518ms ago: executing program 2 (id=1228): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000001000030401f80000000000000000eb00", @ANYRES32=0x0, @ANYBLOB="a5fdad880000000008ef0a00", @ANYRES32, @ANYBLOB="200012800b00010067656e6576650000100002800600050000000000040006"], 0x48}}, 0x0) 51.174557ms ago: executing program 3 (id=1229): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, 0x0, &(0x7f00000000c0)='GPL\x00'}, 0x90) unshare(0x28000600) fstatfs(0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'gre0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xc, 0x0, &(0x7f0000000780)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='tlb_flush\x00', r1}, 0x10) modify_ldt$write(0x1, &(0x7f0000000200), 0x10) modify_ldt$write2(0x11, &(0x7f00000009c0), 0x10) 50.977817ms ago: executing program 2 (id=1230): mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x0, 0x8, 0x67f6}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) socket$netlink(0x10, 0x3, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRESHEX=r1], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x657207ad1582eca1}, 0x90) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x8, &(0x7f0000003880)=ANY=[], &(0x7f0000000100)='GPL\x00'}, 0x90) r3 = socket$kcm(0xa, 0x5, 0x0) r4 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x840) ioctl$SCSI_IOCTL_GET_PCI(r4, 0x2284, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x890b, &(0x7f0000000000)) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000300)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0) sendmsg$kcm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x20040800) 50.526996ms ago: executing program 3 (id=1231): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x42a002, 0x100) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000640)='./file2\x00', 0x10050, &(0x7f0000000040), 0x3, 0x51e, &(0x7f0000000680)="$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") lstat(&(0x7f0000000240)='./file2\x00', 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x0, 0x0) socket(0x1d, 0x2, 0x6) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000080)={0x101}, 0x8) recvmmsg(r1, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x80000040, 0x0) setsockopt$llc_int(r0, 0x10c, 0x7, &(0x7f0000000000), 0x4) 26.025188ms ago: executing program 4 (id=1232): r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB, @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) getresgid(&(0x7f0000005f00), &(0x7f0000005f40), &(0x7f0000005f80)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000004c0)) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20008000) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="200000006800e97800000000000000000a0000000000000008000500", @ANYRES32=r5], 0x20}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@ipv6_newrule={0x24, 0x18, 0x409, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x1}]}, 0x24}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000740)=ANY=[@ANYBLOB="2000000010003704000000000000000000002c00", @ANYRES32=r5, @ANYBLOB="925979421d47c54f99f14a976e370100000000000068bdaf8c27807223741b8f3bedd6aa485e2988f6acb832adf95e0e297ba0112695f660760311beec63fa198d8ee1efea333f0f96eb6f74fe76eeb4662a5a638d2d55dffa39fa19e0e9ee906dacbc0269163a84530dc04c6f986a316c1087b429bbe3ccef08e7c15e563d459307"], 0x20}}, 0x0) 0s ago: executing program 2 (id=1233): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2000000, &(0x7f0000000240), 0x21, 0x4a6, &(0x7f0000000a40)="$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") creat(&(0x7f0000000040)='./file0/file1\x00', 0x0) unlink(&(0x7f0000000100)='./file0/file1\x00') r0 = socket(0x1, 0x802, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000002c0)={'ip6_vti0\x00', &(0x7f0000000000)=@ethtool_per_queue_op={0x4b, 0x29, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2]}}) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000540)='rcu_utilization\x00'}, 0x10) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) r3 = epoll_create1(0x0) socket$key(0xf, 0x3, 0x2) epoll_pwait(0xffffffffffffffff, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0x6, 0x57, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000300)) syz_open_dev$tty1(0xc, 0x4, 0x1) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x88040, 0x0) fsopen(&(0x7f0000000a00)='tmpfs\x00', 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) fsync(r4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r5, 0x29, 0x42, 0x0, 0x0) getsockopt$inet6_buf(r5, 0x29, 0x44, &(0x7f0000001500)=""/11, &(0x7f0000000280)=0xb) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x66, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) syz_emit_ethernet(0x32, &(0x7f00000002c0)={@broadcast, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0) kernel console output (not intermixed with test programs): block 64) failed [ 84.470592][ T6722] FAT-fs (loop4): Directory bread(block 65) failed [ 84.477406][ T6722] FAT-fs (loop4): Directory bread(block 66) failed [ 84.484080][ T6722] FAT-fs (loop4): Directory bread(block 67) failed [ 84.490905][ T6722] FAT-fs (loop4): Directory bread(block 68) failed [ 84.497631][ T6722] FAT-fs (loop4): Directory bread(block 69) failed [ 84.500880][ T6717] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 84.504264][ T6722] FAT-fs (loop4): Directory bread(block 70) failed [ 84.520864][ T6717] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 32 with error 28 [ 84.525340][ T6722] FAT-fs (loop4): Directory bread(block 71) failed [ 84.537608][ T6717] EXT4-fs (loop3): This should not happen!! Data will be lost [ 84.537608][ T6717] [ 84.537622][ T6717] EXT4-fs (loop3): Total free blocks count 0 [ 84.537632][ T6717] EXT4-fs (loop3): Free/Dirty block details [ 84.537642][ T6717] EXT4-fs (loop3): free_blocks=2415919104 [ 84.544549][ T6722] FAT-fs (loop4): Directory bread(block 72) failed [ 84.554101][ T6717] EXT4-fs (loop3): dirty_blocks=48 [ 84.560747][ T6722] FAT-fs (loop4): Directory bread(block 73) failed [ 84.565924][ T6717] EXT4-fs (loop3): Block reservation details [ 84.595828][ T6717] EXT4-fs (loop3): i_reserved_data_blocks=3 [ 84.628153][ T6733] loop0: detected capacity change from 0 to 256 [ 84.663991][ T6716] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 32 with max blocks 1 with error 28 [ 84.676352][ T6716] EXT4-fs (loop3): This should not happen!! Data will be lost [ 84.676352][ T6716] [ 84.723829][ T6739] loop3: detected capacity change from 0 to 512 [ 84.732908][ T6739] EXT4-fs: dax option not supported [ 84.734484][ T6733] loop0: detected capacity change from 0 to 128 [ 84.802487][ T6733] loop0: detected capacity change from 0 to 512 [ 84.813574][ T6733] loop0: detected capacity change from 0 to 512 [ 84.885071][ T6742] netlink: 'syz.3.869': attribute type 1 has an invalid length. [ 84.892786][ T6742] netlink: 'syz.3.869': attribute type 2 has an invalid length. [ 85.023673][ T6753] loop0: detected capacity change from 0 to 2048 [ 85.207803][ T6765] veth1_virt_wifi: entered promiscuous mode [ 85.222407][ T6765] bridge0: entered promiscuous mode [ 85.234890][ T6765] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 85.249697][ T6765] Cannot create hsr debugfs directory [ 85.848546][ T6788] loop4: detected capacity change from 0 to 2048 [ 85.894900][ T6788] loop4: p1 p2 < > p3 p4 < p5 > [ 85.899876][ T6788] loop4: partition table partially beyond EOD, truncated [ 85.909651][ T6788] loop4: p1 start 2305 is beyond EOD, truncated [ 85.916061][ T6788] loop4: p2 start 4294902784 is beyond EOD, truncated [ 85.922853][ T6788] loop4: p3 start 4278191616 is beyond EOD, truncated [ 85.932599][ T6788] loop4: p5 start 2305 is beyond EOD, truncated [ 85.952693][ T6792] loop3: detected capacity change from 0 to 512 [ 85.960516][ T6792] EXT4-fs (loop3): orphan cleanup on readonly fs [ 85.967530][ T6792] EXT4-fs error (device loop3): ext4_acquire_dquot:6848: comm syz.3.883: Failed to acquire dquot type 1 [ 85.979683][ T6792] EXT4-fs (loop3): 1 truncate cleaned up [ 86.046049][ T6801] loop4: detected capacity change from 0 to 1024 [ 86.052696][ T6801] EXT4-fs: Ignoring removed orlov option [ 86.059193][ T6801] EXT4-fs: Ignoring removed nomblk_io_submit option [ 86.088465][ T6801] process 'syz.4.887' launched './file0/file0' with NULL argv: empty string added [ 86.439445][ T40] nci: nci_rsp_packet: unknown rsp opcode 0x42d [ 86.445869][ T40] nci: nci_rx_work: unknown MT 0x6 [ 86.938889][ T56] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.977549][ T56] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.013867][ T6841] chnl_net:caif_netlink_parms(): no params data found [ 87.027297][ T56] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.060798][ T6841] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.068041][ T6841] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.075904][ T6841] bridge_slave_0: entered allmulticast mode [ 87.084596][ T6841] bridge_slave_0: entered promiscuous mode [ 87.094421][ T56] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.105628][ T6856] netlink: 'syz.0.899': attribute type 6 has an invalid length. [ 87.113312][ T6856] netlink: 'syz.0.899': attribute type 4 has an invalid length. [ 87.120998][ T6856] IPv6: NLM_F_CREATE should be specified when creating new route [ 87.130903][ T6841] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.138042][ T6841] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.146087][ T6841] bridge_slave_1: entered allmulticast mode [ 87.152674][ T6841] bridge_slave_1: entered promiscuous mode [ 87.170521][ T6841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.181427][ T6841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.205684][ T6841] team0: Port device team_slave_0 added [ 87.214134][ T6841] team0: Port device team_slave_1 added [ 87.228358][ T56] bridge_slave_1: left allmulticast mode [ 87.234012][ T56] bridge_slave_1: left promiscuous mode [ 87.239689][ T56] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.253013][ T56] bridge_slave_0: left allmulticast mode [ 87.259034][ T56] bridge_slave_0: left promiscuous mode [ 87.264736][ T56] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.274083][ T6863] FAULT_INJECTION: forcing a failure. [ 87.274083][ T6863] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 87.285771][ T6869] loop4: detected capacity change from 0 to 512 [ 87.287191][ T6863] CPU: 1 UID: 0 PID: 6863 Comm: syz.2.901 Not tainted 6.11.0-rc2-syzkaller-00111-gee9a43b7cfe2 #0 [ 87.303912][ T6863] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 87.313955][ T6863] Call Trace: [ 87.317223][ T6863] [ 87.320141][ T6863] dump_stack_lvl+0xf2/0x150 [ 87.324733][ T6863] dump_stack+0x15/0x20 [ 87.328886][ T6863] should_fail_ex+0x229/0x230 [ 87.333560][ T6863] should_fail+0xb/0x10 [ 87.337740][ T6863] should_fail_usercopy+0x1a/0x20 [ 87.342761][ T6863] strncpy_from_user+0x25/0x270 [ 87.347796][ T6863] __se_sys_add_key+0x81/0x320 [ 87.352587][ T6863] ? fput+0x13b/0x180 [ 87.356595][ T6863] __x64_sys_add_key+0x67/0x80 [ 87.361381][ T6863] x64_sys_call+0x157d/0x2d60 [ 87.366066][ T6863] do_syscall_64+0xc9/0x1c0 [ 87.370642][ T6863] ? clear_bhb_loop+0x55/0xb0 [ 87.375395][ T6863] ? clear_bhb_loop+0x55/0xb0 [ 87.380081][ T6863] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.386051][ T6863] RIP: 0033:0x7f70454279f9 [ 87.390451][ T6863] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 87.410128][ T6863] RSP: 002b:00007f70440a7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 87.418581][ T6863] RAX: ffffffffffffffda RBX: 00007f70455b5f80 RCX: 00007f70454279f9 [ 87.426591][ T6863] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000000 [ 87.434551][ T6863] RBP: 00007f70440a7090 R08: fffffffffffffffd R09: 0000000000000000 [ 87.442584][ T6863] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 87.450619][ T6863] R13: 0000000000000000 R14: 00007f70455b5f80 R15: 00007fff84dca478 [ 87.458582][ T6863] [ 87.465220][ T6869] EXT4-fs warning (device loop4): ext4_multi_mount_protect:398: Unable to create kmmpd thread for loop4. [ 87.528190][ T6880] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 87.567112][ T56] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 87.578003][ T56] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 87.588858][ T56] bond0 (unregistering): Released all slaves [ 87.600334][ T6868] __nla_validate_parse: 13 callbacks suppressed [ 87.600344][ T6868] netlink: 28 bytes leftover after parsing attributes in process `syz.3.904'. [ 87.635575][ T6841] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.642580][ T6841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.652028][ T6883] netlink: 56 bytes leftover after parsing attributes in process `syz.3.909'. [ 87.668732][ T6841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.689095][ T6841] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.696229][ T6841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.722167][ T6841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.746771][ T6841] hsr_slave_0: entered promiscuous mode [ 87.752784][ T6841] hsr_slave_1: entered promiscuous mode [ 87.758847][ T6841] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 87.766490][ T6841] Cannot create hsr debugfs directory [ 87.773760][ T56] hsr_slave_0: left promiscuous mode [ 87.779545][ T56] hsr_slave_1: left promiscuous mode [ 87.785293][ T56] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 87.792844][ T56] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 87.800456][ T56] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 87.807965][ T56] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 87.817116][ T56] veth1_macvtap: left promiscuous mode [ 87.822572][ T56] veth0_macvtap: left promiscuous mode [ 87.828148][ T56] veth1_vlan: left promiscuous mode [ 87.833369][ T56] veth0_vlan: left promiscuous mode [ 87.924664][ T56] team0 (unregistering): Port device team_slave_1 removed [ 87.939991][ T56] team0 (unregistering): Port device team_slave_0 removed [ 88.088227][ T6890] chnl_net:caif_netlink_parms(): no params data found [ 88.119249][ T6890] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.126381][ T6890] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.133508][ T6890] bridge_slave_0: entered allmulticast mode [ 88.139984][ T6890] bridge_slave_0: entered promiscuous mode [ 88.148643][ T6890] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.155930][ T6890] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.163146][ T6890] bridge_slave_1: entered allmulticast mode [ 88.171472][ T6890] bridge_slave_1: entered promiscuous mode [ 88.189148][ T6890] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.199773][ T6890] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.223667][ T6890] team0: Port device team_slave_0 added [ 88.230401][ T6890] team0: Port device team_slave_1 added [ 88.246722][ T6890] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.253735][ T6890] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.279870][ T6890] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.291016][ T6890] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.297992][ T6890] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.323977][ T6890] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.350063][ T6890] hsr_slave_0: entered promiscuous mode [ 88.356649][ T6890] hsr_slave_1: entered promiscuous mode [ 88.362739][ T6890] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 88.370562][ T6890] Cannot create hsr debugfs directory [ 88.431509][ T11] nci: nci_rsp_packet: unknown rsp opcode 0x42d [ 88.437864][ T11] nci: nci_rx_work: unknown MT 0x6 [ 88.468105][ T6890] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.508883][ T6890] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.569244][ T6890] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.573077][ T6920] loop3: detected capacity change from 0 to 8192 [ 88.588903][ T6920] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 88.628384][ T6890] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.640604][ T29] kauditd_printk_skb: 48 callbacks suppressed [ 88.640616][ T29] audit: type=1400 audit(1723214521.037:792): avc: denied { setopt } for pid=6919 comm="syz.3.915" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 88.678375][ T56] bridge_slave_1: left allmulticast mode [ 88.684040][ T56] bridge_slave_1: left promiscuous mode [ 88.689686][ T56] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.700199][ T56] bridge_slave_0: left allmulticast mode [ 88.705970][ T56] bridge_slave_0: left promiscuous mode [ 88.711695][ T56] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.866534][ T56] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 88.877175][ T56] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 88.887231][ T56] bond0 (unregistering): Released all slaves [ 88.916439][ T6929] netlink: 28 bytes leftover after parsing attributes in process `syz.0.918'. [ 88.949412][ T29] audit: type=1326 audit(1723214521.337:793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6933 comm="syz.0.920" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0c5f5879f9 code=0x0 [ 88.996224][ T56] hsr_slave_0: left promiscuous mode [ 89.001976][ T56] hsr_slave_1: left promiscuous mode [ 89.007673][ T56] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 89.015329][ T56] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 89.023237][ T56] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 89.030705][ T56] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 89.040206][ T56] veth1_macvtap: left promiscuous mode [ 89.045694][ T56] veth0_macvtap: left promiscuous mode [ 89.051190][ T56] veth1_vlan: left promiscuous mode [ 89.056492][ T56] veth0_vlan: left promiscuous mode [ 89.147435][ T56] team0 (unregistering): Port device team_slave_1 removed [ 89.160581][ T56] team0 (unregistering): Port device team_slave_0 removed [ 89.210626][ T6841] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 89.221297][ T6841] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 89.229473][ T6890] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 89.241679][ T6841] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 89.262565][ T6890] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 89.269422][ T6942] netlink: 56 bytes leftover after parsing attributes in process `syz.4.923'. [ 89.280302][ T6841] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 89.289331][ T6890] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 89.299702][ T6890] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 89.382582][ T6890] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.410274][ T6841] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.421740][ T6890] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.436696][ T6936] chnl_net:caif_netlink_parms(): no params data found [ 89.449021][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.456103][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.473360][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.480456][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.490129][ T6841] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.510484][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.517610][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.526753][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.533782][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.553170][ T56] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.583945][ T6936] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.591283][ T6936] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.599097][ T6936] bridge_slave_0: entered allmulticast mode [ 89.605625][ T6936] bridge_slave_0: entered promiscuous mode [ 89.612547][ T6936] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.619683][ T6936] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.626929][ T6936] bridge_slave_1: entered allmulticast mode [ 89.633213][ T6936] bridge_slave_1: entered promiscuous mode [ 89.648088][ T56] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.667164][ T6936] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.677768][ T6936] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.707430][ T56] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.718905][ T6936] team0: Port device team_slave_0 added [ 89.726221][ T6936] team0: Port device team_slave_1 added [ 89.746304][ T6936] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.753242][ T6936] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.779267][ T6936] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.791216][ T6936] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.798231][ T6936] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.824221][ T6936] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.839842][ T56] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.876820][ T6936] hsr_slave_0: entered promiscuous mode [ 89.882947][ T6936] hsr_slave_1: entered promiscuous mode [ 89.888922][ T6936] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.896903][ T6936] Cannot create hsr debugfs directory [ 89.946166][ T56] bridge_slave_1: left allmulticast mode [ 89.951829][ T56] bridge_slave_1: left promiscuous mode [ 89.957536][ T56] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.968233][ T56] bridge_slave_0: left allmulticast mode [ 89.973868][ T56] bridge_slave_0: left promiscuous mode [ 89.979801][ T56] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.086996][ T56] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 90.097781][ T56] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 90.110222][ T56] bond0 (unregistering): Released all slaves [ 90.134956][ T6890] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.166842][ T6841] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.195689][ T6971] loop4: detected capacity change from 0 to 1024 [ 90.221715][ T56] hsr_slave_0: left promiscuous mode [ 90.227910][ T6971] EXT4-fs (loop4): can't mount with commit=6, fs mounted w/o journal [ 90.239086][ T56] hsr_slave_1: left promiscuous mode [ 90.247508][ T56] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 90.255048][ T56] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 90.266648][ T56] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 90.274297][ T56] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 90.284830][ T56] veth1_macvtap: left promiscuous mode [ 90.290337][ T56] veth0_macvtap: left promiscuous mode [ 90.295888][ T56] veth1_vlan: left promiscuous mode [ 90.301190][ T56] veth0_vlan: left promiscuous mode [ 90.393056][ T56] team0 (unregistering): Port device team_slave_1 removed [ 90.403838][ T56] team0 (unregistering): Port device team_slave_0 removed [ 90.452787][ T6971] netlink: 'syz.4.925': attribute type 3 has an invalid length. [ 90.513831][ T6986] loop4: detected capacity change from 0 to 128 [ 90.530891][ T6890] veth0_vlan: entered promiscuous mode [ 90.540121][ T6986] ext4 filesystem being mounted at /101/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 90.545381][ T6890] veth1_vlan: entered promiscuous mode [ 90.592523][ T6890] veth0_macvtap: entered promiscuous mode [ 90.600599][ T6890] veth1_macvtap: entered promiscuous mode [ 90.617347][ T6890] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.627916][ T6890] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.637816][ T6890] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.648307][ T6890] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.659997][ T6890] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.678091][ T6890] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.688598][ T6890] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.698521][ T6890] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.708930][ T6890] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.718742][ T6890] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.729169][ T6890] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.739002][ T6890] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.749483][ T6890] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.759295][ T6890] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.769710][ T6890] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.780543][ T6890] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.804099][ T6841] veth0_vlan: entered promiscuous mode [ 90.813417][ T6841] veth1_vlan: entered promiscuous mode [ 90.820628][ T6890] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.829449][ T6890] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.838157][ T6890] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.846884][ T6890] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.877229][ T6841] veth0_macvtap: entered promiscuous mode [ 90.897816][ T6841] veth1_macvtap: entered promiscuous mode [ 90.908981][ T6841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.919590][ T6841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.929418][ T6841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.939922][ T6841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.949868][ T6841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.960300][ T6841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.971970][ T7003] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7003 comm=syz.2.911 [ 90.973379][ T6841] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.984309][ T29] audit: type=1400 audit(1723214523.367:794): avc: denied { create } for pid=7004 comm="syz.4.934" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=decnet_socket permissive=1 [ 91.018736][ T6841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.029321][ T6841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.029331][ T6841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.029343][ T6841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.029396][ T6841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.029408][ T6841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.029420][ T6841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.029432][ T6841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.029444][ T6841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.029456][ T6841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.029475][ T6841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.029486][ T6841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.030695][ T6841] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.057238][ T7005] syzkaller0: entered promiscuous mode [ 91.163776][ T7005] syzkaller0: entered allmulticast mode [ 91.176372][ T6841] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.185123][ T6841] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.194008][ T6841] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.202795][ T6841] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.281083][ T6936] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 91.292470][ T6936] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 91.306914][ T6936] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 91.317202][ T6936] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 91.346591][ T56] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.418519][ T56] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.448846][ T6936] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.456837][ T3278] nci: nci_rsp_packet: unknown rsp opcode 0x42d [ 91.463174][ T3278] nci: nci_rx_work: unknown MT 0x6 [ 91.470045][ T7001] chnl_net:caif_netlink_parms(): no params data found [ 91.489511][ T56] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.528230][ T7001] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.535365][ T7001] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.542513][ T7001] bridge_slave_0: entered allmulticast mode [ 91.548913][ T7001] bridge_slave_0: entered promiscuous mode [ 91.561066][ T56] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.572445][ T7001] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.579595][ T7001] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.586905][ T7001] bridge_slave_1: entered allmulticast mode [ 91.593345][ T7001] bridge_slave_1: entered promiscuous mode [ 91.607549][ T6936] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.628584][ T7001] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.639713][ T7001] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.659661][ T3278] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.666777][ T3278] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.685048][ T7001] team0: Port device team_slave_0 added [ 91.693243][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.700367][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.710646][ T7001] team0: Port device team_slave_1 added [ 91.740174][ T7001] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.747219][ T7001] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.773215][ T7001] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.786216][ T7001] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.793201][ T7001] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.819710][ T7001] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.851715][ T56] bridge_slave_1: left allmulticast mode [ 91.857551][ T56] bridge_slave_1: left promiscuous mode [ 91.863217][ T56] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.870942][ T56] bridge_slave_0: left allmulticast mode [ 91.876705][ T56] bridge_slave_0: left promiscuous mode [ 91.882404][ T56] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.956332][ T56] bridge0 (unregistering): left promiscuous mode [ 92.067573][ T56] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 92.077975][ T56] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 92.088379][ T56] bond0 (unregistering): Released all slaves [ 92.103723][ T7001] hsr_slave_0: entered promiscuous mode [ 92.110059][ T7001] hsr_slave_1: entered promiscuous mode [ 92.115888][ T7001] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 92.123438][ T7001] Cannot create hsr debugfs directory [ 92.139464][ T6936] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 92.180129][ T56] veth1_virt_wifi: left promiscuous mode [ 92.188090][ T56] hsr_slave_0: left promiscuous mode [ 92.193740][ T56] hsr_slave_1: left promiscuous mode [ 92.199428][ T56] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 92.206914][ T56] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 92.214426][ T56] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 92.223545][ T56] veth1_macvtap: left promiscuous mode [ 92.229154][ T56] veth0_macvtap: left promiscuous mode [ 92.234775][ T56] veth1_vlan: left promiscuous mode [ 92.240150][ T56] veth0_vlan: left promiscuous mode [ 92.312209][ T56] pimreg (unregistering): left allmulticast mode [ 92.355194][ T56] team0 (unregistering): Port device team_slave_1 removed [ 92.366836][ T56] team0 (unregistering): Port device team_slave_0 removed [ 92.416902][ T7053] netlink: 4 bytes leftover after parsing attributes in process `syz.4.943'. [ 92.432881][ T7056] netlink: 12 bytes leftover after parsing attributes in process `syz.4.943'. [ 92.468882][ T6936] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.535141][ T29] audit: type=1400 audit(1723214524.927:795): avc: denied { create } for pid=7064 comm="syz.4.946" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 92.542365][ T6936] veth0_vlan: entered promiscuous mode [ 92.572317][ T7075] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 92.579751][ T29] audit: type=1400 audit(1723214524.957:796): avc: denied { write } for pid=7074 comm="syz.1.947" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 92.599695][ T7075] batadv_slave_0: entered allmulticast mode [ 92.615840][ T6936] veth1_vlan: entered promiscuous mode [ 92.634252][ T6936] veth0_macvtap: entered promiscuous mode [ 92.642141][ T6936] veth1_macvtap: entered promiscuous mode [ 92.653579][ T6936] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.664287][ T6936] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.674118][ T6936] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.684545][ T6936] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.694516][ T6936] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.705111][ T6936] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.716565][ T6936] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.733557][ T6936] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.744094][ T6936] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.753987][ T6936] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.764433][ T6936] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.774274][ T6936] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.784725][ T6936] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.794534][ T6936] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.804971][ T6936] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.814782][ T6936] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.825229][ T6936] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.835085][ T6936] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.845499][ T6936] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.857343][ T6936] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.871724][ T6936] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.880609][ T6936] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.889402][ T6936] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.898113][ T6936] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.928815][ T7085] netlink: 56 bytes leftover after parsing attributes in process `syz.1.950'. [ 92.968875][ T7001] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 92.979518][ T7001] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 92.989094][ T7001] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 92.999016][ T7001] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 93.006282][ T7090] netlink: 56 bytes leftover after parsing attributes in process `syz.3.951'. [ 93.042275][ T7001] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.055914][ T7001] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.066271][ T3356] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.073356][ T3356] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.083559][ T3278] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.090750][ T3278] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.156906][ T7001] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.222317][ T7001] veth0_vlan: entered promiscuous mode [ 93.231726][ T7001] veth1_vlan: entered promiscuous mode [ 93.248800][ T7001] veth0_macvtap: entered promiscuous mode [ 93.257164][ T7001] veth1_macvtap: entered promiscuous mode [ 93.268574][ T7001] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.279100][ T7001] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.289076][ T7001] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.299520][ T7001] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.309433][ T7001] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.319846][ T7001] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.329736][ T7001] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.340257][ T7001] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.351988][ T7001] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.365020][ T7001] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.375510][ T7001] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.385342][ T7001] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.395824][ T7001] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.405704][ T7001] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.416295][ T7001] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.426130][ T7001] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.436560][ T7001] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.446418][ T7001] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.456859][ T7001] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.466800][ T7001] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.477220][ T7001] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.487185][ T7001] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.497720][ T7001] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.508711][ T7001] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.519758][ T7001] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.528654][ T7001] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.537468][ T7001] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.546313][ T7001] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.589131][ T29] audit: type=1326 audit(1723214525.977:797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7110 comm="syz.0.933" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f556f5779f9 code=0x0 [ 93.753734][ T7120] loop4: detected capacity change from 0 to 256 [ 93.831070][ T7125] netlink: 24 bytes leftover after parsing attributes in process `syz.1.958'. [ 93.899878][ T7130] FAULT_INJECTION: forcing a failure. [ 93.899878][ T7130] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 93.912975][ T7130] CPU: 0 UID: 0 PID: 7130 Comm: syz.1.960 Not tainted 6.11.0-rc2-syzkaller-00111-gee9a43b7cfe2 #0 [ 93.923561][ T7130] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 93.933685][ T7130] Call Trace: [ 93.936965][ T7130] [ 93.939898][ T7130] dump_stack_lvl+0xf2/0x150 [ 93.944499][ T7130] dump_stack+0x15/0x20 [ 93.948731][ T7130] should_fail_ex+0x229/0x230 [ 93.953416][ T7130] should_fail+0xb/0x10 [ 93.957599][ T7130] should_fail_usercopy+0x1a/0x20 [ 93.962740][ T7130] _copy_from_user+0x1e/0xd0 [ 93.967332][ T7130] __sys_bpf+0x14e/0x7a0 [ 93.971619][ T7130] __x64_sys_bpf+0x43/0x50 [ 93.976099][ T7130] x64_sys_call+0x2625/0x2d60 [ 93.980767][ T7130] do_syscall_64+0xc9/0x1c0 [ 93.985344][ T7130] ? clear_bhb_loop+0x55/0xb0 [ 93.990028][ T7130] ? clear_bhb_loop+0x55/0xb0 [ 93.994734][ T7130] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.000643][ T7130] RIP: 0033:0x7f2c5fff79f9 [ 94.005068][ T7130] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 94.024661][ T7130] RSP: 002b:00007f2c5ec77038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 94.033114][ T7130] RAX: ffffffffffffffda RBX: 00007f2c60185f80 RCX: 00007f2c5fff79f9 [ 94.041070][ T7130] RDX: 0000000000000090 RSI: 0000000020000400 RDI: 0000000000000005 [ 94.049025][ T7130] RBP: 00007f2c5ec77090 R08: 0000000000000000 R09: 0000000000000000 [ 94.056981][ T7130] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 94.065018][ T7130] R13: 0000000000000000 R14: 00007f2c60185f80 R15: 00007ffd5529d2d8 [ 94.072977][ T7130] [ 94.098623][ T7137] FAULT_INJECTION: forcing a failure. [ 94.098623][ T7137] name failslab, interval 1, probability 0, space 0, times 0 [ 94.111359][ T7137] CPU: 0 UID: 0 PID: 7137 Comm: syz.1.963 Not tainted 6.11.0-rc2-syzkaller-00111-gee9a43b7cfe2 #0 [ 94.121973][ T7137] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 94.132061][ T7137] Call Trace: [ 94.135338][ T7137] [ 94.138408][ T7137] dump_stack_lvl+0xf2/0x150 [ 94.143094][ T7137] dump_stack+0x15/0x20 [ 94.147262][ T7137] should_fail_ex+0x229/0x230 [ 94.151947][ T7137] ? __nf_conntrack_alloc+0xcd/0x280 [ 94.157327][ T7137] should_failslab+0x8f/0xb0 [ 94.161981][ T7137] kmem_cache_alloc_noprof+0x4c/0x290 [ 94.167360][ T7137] __nf_conntrack_alloc+0xcd/0x280 [ 94.172484][ T7137] init_conntrack+0x191/0x970 [ 94.177170][ T7137] nf_conntrack_in+0x899/0xf20 [ 94.182022][ T7137] ? __pfx_ipv6_conntrack_in+0x10/0x10 [ 94.187540][ T7137] ipv6_conntrack_in+0x1d/0x30 [ 94.192330][ T7137] nf_hook_slow+0x86/0x1b0 [ 94.196838][ T7137] ipv6_rcv+0x113/0x150 [ 94.201055][ T7137] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 94.206297][ T7137] __netif_receive_skb+0xa2/0x280 [ 94.211322][ T7137] netif_receive_skb+0x4a/0x320 [ 94.213978][ T7132] chnl_net:caif_netlink_parms(): no params data found [ 94.216160][ T7137] ? virtio_net_hdr_to_skb+0x6c4/0xb50 [ 94.216184][ T7137] ? tun_rx_batched+0xba/0x410 [ 94.216202][ T7137] tun_rx_batched+0xf0/0x410 [ 94.216258][ T7137] tun_get_user+0x1e77/0x24b0 [ 94.216278][ T7137] ? kstrtoull+0x110/0x140 [ 94.216295][ T7137] ? ref_tracker_alloc+0x1f5/0x2f0 [ 94.216395][ T7137] ? selinux_file_permission+0x22c/0x360 [ 94.257684][ T7137] tun_chr_write_iter+0x18e/0x240 [ 94.262703][ T7137] vfs_write+0x78f/0x900 [ 94.266975][ T7137] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 94.272533][ T7137] ksys_write+0xeb/0x1b0 [ 94.276758][ T7137] __x64_sys_write+0x42/0x50 [ 94.281329][ T7137] x64_sys_call+0x27dd/0x2d60 [ 94.285986][ T7137] do_syscall_64+0xc9/0x1c0 [ 94.290488][ T7137] ? clear_bhb_loop+0x55/0xb0 [ 94.295169][ T7137] ? clear_bhb_loop+0x55/0xb0 [ 94.299902][ T7137] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.305824][ T7137] RIP: 0033:0x7f2c5fff79f9 [ 94.310214][ T7137] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 94.330014][ T7137] RSP: 002b:00007f2c5ec77038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 94.338418][ T7137] RAX: ffffffffffffffda RBX: 00007f2c60185f80 RCX: 00007f2c5fff79f9 [ 94.346373][ T7137] RDX: 000000000000fdef RSI: 0000000020000300 RDI: 00000000000000c8 [ 94.354320][ T7137] RBP: 00007f2c5ec77090 R08: 0000000000000000 R09: 0000000000000000 [ 94.362284][ T7137] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 94.370238][ T7137] R13: 0000000000000000 R14: 00007f2c60185f80 R15: 00007ffd5529d2d8 [ 94.378299][ T7137] [ 94.412306][ T7132] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.419409][ T7132] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.427180][ T7132] bridge_slave_0: entered allmulticast mode [ 94.433957][ T7132] bridge_slave_0: entered promiscuous mode [ 94.442047][ T7132] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.449230][ T7132] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.456730][ T7132] bridge_slave_1: entered allmulticast mode [ 94.463122][ T7158] loop1: detected capacity change from 0 to 128 [ 94.463212][ T7132] bridge_slave_1: entered promiscuous mode [ 94.473374][ T7158] ext4 filesystem being mounted at /17/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 94.499722][ T7132] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.510618][ T7132] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.540424][ T7132] team0: Port device team_slave_0 added [ 94.546152][ T7162] netlink: 56 bytes leftover after parsing attributes in process `syz.1.968'. [ 94.547211][ T7132] team0: Port device team_slave_1 added [ 94.573421][ T7132] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.580526][ T7132] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.606539][ T7132] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.620979][ T7132] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.627974][ T7132] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.654001][ T7132] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.668680][ T7166] loop4: detected capacity change from 0 to 256 [ 94.690499][ T7132] hsr_slave_0: entered promiscuous mode [ 94.697347][ T7132] hsr_slave_1: entered promiscuous mode [ 94.703332][ T7132] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 94.711281][ T7132] Cannot create hsr debugfs directory [ 94.727780][ T29] audit: type=1400 audit(1723214527.117:798): avc: denied { remount } for pid=7169 comm="syz.3.971" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 94.802031][ T29] audit: type=1400 audit(1723214527.187:799): avc: denied { bind } for pid=7181 comm="syz.3.973" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 94.853982][ T7132] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.942207][ T7203] loop3: detected capacity change from 0 to 256 [ 94.970357][ T7205] loop4: detected capacity change from 0 to 512 [ 94.986065][ T7205] ext4 filesystem being mounted at /117/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 95.049461][ T7211] dccp_invalid_packet: P.Data Offset(0) too small [ 95.130854][ T29] audit: type=1326 audit(1723214527.517:800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7213 comm="syz.4.985" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc28d3a79f9 code=0x0 [ 95.236970][ T29] audit: type=1400 audit(1723214527.627:801): avc: denied { relabelfrom } for pid=7215 comm="syz.3.986" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 95.256852][ T29] audit: type=1400 audit(1723214527.627:802): avc: denied { relabelto } for pid=7215 comm="syz.3.986" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 95.283681][ T7216] syzkaller0: entered promiscuous mode [ 95.289285][ T7216] syzkaller0: entered allmulticast mode [ 95.521990][ T7225] batadv_slave_0: entered promiscuous mode [ 95.527890][ T7225] batadv_slave_0: left allmulticast mode [ 95.565371][ T7232] FAULT_INJECTION: forcing a failure. [ 95.565371][ T7232] name failslab, interval 1, probability 0, space 0, times 0 [ 95.578420][ T7232] CPU: 0 UID: 0 PID: 7232 Comm: syz.1.993 Not tainted 6.11.0-rc2-syzkaller-00111-gee9a43b7cfe2 #0 [ 95.589013][ T7232] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 95.599109][ T7232] Call Trace: [ 95.602367][ T7232] [ 95.605310][ T7232] dump_stack_lvl+0xf2/0x150 [ 95.609895][ T7232] dump_stack+0x15/0x20 [ 95.614042][ T7232] should_fail_ex+0x229/0x230 [ 95.618777][ T7232] ? prepare_creds+0x37/0x480 [ 95.623454][ T7232] should_failslab+0x8f/0xb0 [ 95.628031][ T7232] kmem_cache_alloc_noprof+0x4c/0x290 [ 95.633385][ T7232] prepare_creds+0x37/0x480 [ 95.637868][ T7232] join_session_keyring+0x19/0x2a0 [ 95.642961][ T7232] lookup_user_key+0x1ba/0xdf0 [ 95.647759][ T7232] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 95.653925][ T7232] __se_sys_add_key+0x24b/0x320 [ 95.658833][ T7232] ? fput+0x13b/0x180 [ 95.662881][ T7232] __x64_sys_add_key+0x67/0x80 [ 95.667632][ T7232] x64_sys_call+0x157d/0x2d60 [ 95.672304][ T7232] do_syscall_64+0xc9/0x1c0 [ 95.676881][ T7232] ? clear_bhb_loop+0x55/0xb0 [ 95.681603][ T7232] ? clear_bhb_loop+0x55/0xb0 [ 95.686271][ T7232] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.692164][ T7232] RIP: 0033:0x7f2c5fff79f9 [ 95.696558][ T7232] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 95.716145][ T7232] RSP: 002b:00007f2c5ec77038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 95.724537][ T7232] RAX: ffffffffffffffda RBX: 00007f2c60185f80 RCX: 00007f2c5fff79f9 [ 95.732565][ T7232] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000000 [ 95.740525][ T7232] RBP: 00007f2c5ec77090 R08: fffffffffffffffd R09: 0000000000000000 [ 95.748475][ T7232] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 95.756504][ T7232] R13: 0000000000000000 R14: 00007f2c60185f80 R15: 00007ffd5529d2d8 [ 95.764457][ T7232] [ 95.784504][ T7235] loop1: detected capacity change from 0 to 256 [ 95.792309][ T7235] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000001) [ 95.800178][ T7235] FAT-fs (loop1): Filesystem has been set read-only [ 95.820412][ T7237] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 95.937952][ T7241] netlink: 56 bytes leftover after parsing attributes in process `syz.1.996'. [ 96.183313][ T7252] loop4: detected capacity change from 0 to 512 [ 96.196068][ T7252] EXT4-fs mount: 42 callbacks suppressed [ 96.196079][ T7252] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 96.214696][ T7252] ext4 filesystem being mounted at /122/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 96.228507][ T7252] 9pnet_fd: Insufficient options for proto=fd [ 96.261585][ T5449] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.319714][ T7132] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.367902][ T7132] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.459779][ T7132] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.506675][ T56] bridge_slave_1: left allmulticast mode [ 96.510919][ T7260] loop4: detected capacity change from 0 to 1024 [ 96.512331][ T56] bridge_slave_1: left promiscuous mode [ 96.519261][ T7260] EXT4-fs: Ignoring removed nobh option [ 96.524442][ T56] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.529953][ T7260] ext4: Unknown parameter 'fowner<00000000000000000000' [ 96.545806][ T56] bridge_slave_0: left allmulticast mode [ 96.551523][ T56] bridge_slave_0: left promiscuous mode [ 96.557256][ T56] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.577756][ T7262] loop4: detected capacity change from 0 to 128 [ 96.677070][ T56] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 96.688231][ T56] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 96.699880][ T56] bond0 (unregistering): Released all slaves [ 96.730057][ T7264] syzkaller0: entered promiscuous mode [ 96.735593][ T7264] syzkaller0: entered allmulticast mode [ 96.764506][ T7132] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 96.773081][ T7132] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 96.781972][ T7132] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 96.790491][ T7132] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 96.824961][ T7132] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.842502][ T56] hsr_slave_0: left promiscuous mode [ 96.852502][ T56] hsr_slave_1: left promiscuous mode [ 96.860948][ T56] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 96.868518][ T56] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 96.873041][ T7272] loop4: detected capacity change from 0 to 256 [ 96.883020][ T56] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 96.890562][ T56] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 96.902228][ T56] veth1_macvtap: left promiscuous mode [ 96.905572][ T7274] loop1: detected capacity change from 0 to 1024 [ 96.907737][ T56] veth0_macvtap: left promiscuous mode [ 96.919617][ T56] veth1_vlan: left promiscuous mode [ 96.923397][ T7274] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 96.924925][ T56] veth0_vlan: left promiscuous mode [ 96.977410][ T6841] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.989547][ T29] audit: type=1400 audit(1723214529.387:803): avc: denied { write } for pid=7276 comm="syz.4.1008" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 97.025411][ T29] audit: type=1326 audit(1723214529.417:804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7278 comm="syz.1.1007" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2c5fff79f9 code=0x0 [ 97.080782][ T56] team0 (unregistering): Port device team_slave_1 removed [ 97.091519][ T56] team0 (unregistering): Port device team_slave_0 removed [ 97.132369][ T29] audit: type=1400 audit(1723214529.517:805): avc: denied { read } for pid=7276 comm="syz.4.1008" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 97.136528][ T7132] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.164152][ T3356] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.171236][ T3356] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.182897][ T3356] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.189954][ T3356] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.250191][ T7132] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.310775][ T7132] veth0_vlan: entered promiscuous mode [ 97.318975][ T7132] veth1_vlan: entered promiscuous mode [ 97.333478][ T7132] veth0_macvtap: entered promiscuous mode [ 97.340994][ T7132] veth1_macvtap: entered promiscuous mode [ 97.351549][ T7132] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.362078][ T7132] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.371902][ T7132] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.382342][ T7132] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.392183][ T7132] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.402607][ T7132] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.412439][ T7132] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.422920][ T7132] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.433825][ T7132] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.445930][ T7132] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 97.456451][ T7132] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.466321][ T7132] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 97.476757][ T7132] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.486580][ T7132] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 97.497054][ T7132] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.506951][ T7132] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 97.517378][ T7132] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.527227][ T7132] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 97.537671][ T7132] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.547526][ T7132] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 97.557973][ T7132] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.567810][ T7132] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 97.580531][ T7132] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.592687][ T7132] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.603194][ T7132] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.611962][ T7132] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.620687][ T7132] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.629405][ T7132] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.710819][ T7296] loop2: detected capacity change from 0 to 2048 [ 97.725871][ T7296] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 97.738910][ T7296] netlink: 260 bytes leftover after parsing attributes in process `syz.2.962'. [ 97.754423][ T7296] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 97.769669][ T7296] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 32 with error 28 [ 97.781935][ T7296] EXT4-fs (loop2): This should not happen!! Data will be lost [ 97.781935][ T7296] [ 97.791642][ T7296] EXT4-fs (loop2): Total free blocks count 0 [ 97.797714][ T7296] EXT4-fs (loop2): Free/Dirty block details [ 97.803650][ T7296] EXT4-fs (loop2): free_blocks=2415919104 [ 97.809461][ T7296] EXT4-fs (loop2): dirty_blocks=48 [ 97.814810][ T7296] EXT4-fs (loop2): Block reservation details [ 97.820816][ T7296] EXT4-fs (loop2): i_reserved_data_blocks=3 [ 97.854507][ T7295] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 32 with max blocks 1 with error 28 [ 97.891812][ T7310] loop1: detected capacity change from 0 to 512 [ 97.898661][ T6994] nci: nci_rsp_packet: unknown rsp opcode 0x42d [ 97.905061][ T6994] nci: nci_rx_work: unknown MT 0x6 [ 97.907167][ T7310] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 97.922935][ T7310] ext4 filesystem being mounted at /32/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 98.708845][ T7325] pim6reg1: entered promiscuous mode [ 98.712049][ T7327] FAULT_INJECTION: forcing a failure. [ 98.712049][ T7327] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 98.714234][ T7325] pim6reg1: entered allmulticast mode [ 98.727327][ T7327] CPU: 1 UID: 0 PID: 7327 Comm: syz.3.1015 Not tainted 6.11.0-rc2-syzkaller-00111-gee9a43b7cfe2 #0 [ 98.743362][ T7327] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 98.753416][ T7327] Call Trace: [ 98.756688][ T7327] [ 98.759631][ T7327] dump_stack_lvl+0xf2/0x150 [ 98.764260][ T7327] dump_stack+0x15/0x20 [ 98.768412][ T7327] should_fail_ex+0x229/0x230 [ 98.773163][ T7327] should_fail+0xb/0x10 [ 98.777359][ T7327] should_fail_usercopy+0x1a/0x20 [ 98.782376][ T7327] _copy_to_user+0x1e/0xa0 [ 98.786850][ T7327] simple_read_from_buffer+0xa0/0x110 [ 98.792249][ T7327] proc_fail_nth_read+0xfc/0x140 [ 98.797180][ T7327] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 98.802824][ T7327] vfs_read+0x1a2/0x6e0 [ 98.807141][ T7327] ? __rcu_read_unlock+0x4e/0x70 [ 98.812518][ T7327] ? __fget_files+0x1da/0x210 [ 98.817226][ T7327] ksys_read+0xeb/0x1b0 [ 98.821414][ T7327] __x64_sys_read+0x42/0x50 [ 98.825953][ T7327] x64_sys_call+0x27d3/0x2d60 [ 98.830655][ T7327] do_syscall_64+0xc9/0x1c0 [ 98.835152][ T7327] ? clear_bhb_loop+0x55/0xb0 [ 98.839886][ T7327] ? clear_bhb_loop+0x55/0xb0 [ 98.844556][ T7327] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.850441][ T7327] RIP: 0033:0x7ff6db33643c [ 98.854843][ T7327] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8d 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8d 02 00 48 [ 98.874529][ T7327] RSP: 002b:00007ff6d9fb7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 98.882967][ T7327] RAX: ffffffffffffffda RBX: 00007ff6db4c5f80 RCX: 00007ff6db33643c [ 98.890929][ T7327] RDX: 000000000000000f RSI: 00007ff6d9fb70a0 RDI: 0000000000000004 [ 98.898887][ T7327] RBP: 00007ff6d9fb7090 R08: 0000000000000000 R09: 0000000000000000 [ 98.906848][ T7327] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 98.914868][ T7327] R13: 0000000000000000 R14: 00007ff6db4c5f80 R15: 00007ffdeee94178 [ 98.922830][ T7327] [ 98.947428][ T6841] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.954757][ T29] audit: type=1107 audit(1723214531.337:806): pid=7330 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 98.986308][ T29] audit: type=1400 audit(1723214531.377:807): avc: denied { read } for pid=7334 comm="syz.1.1017" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 99.021148][ T7339] dccp_invalid_packet: P.Data Offset(0) too small [ 99.203554][ T6993] nci: nci_rsp_packet: unknown rsp opcode 0x42d [ 99.209949][ T6993] nci: nci_rx_work: unknown MT 0x6 [ 99.934545][ T7359] netlink: 'syz.4.1024': attribute type 32 has an invalid length. [ 100.008824][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 100.008836][ T29] audit: type=1326 audit(1723214532.397:809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7364 comm="syz.3.1027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6db3379f9 code=0x7ffc0000 [ 100.030032][ T7365] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1027'. [ 100.040244][ T29] audit: type=1326 audit(1723214532.397:810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7364 comm="syz.3.1027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6db3379f9 code=0x7ffc0000 [ 100.070594][ T29] audit: type=1326 audit(1723214532.397:811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7364 comm="syz.3.1027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7ff6db3379f9 code=0x7ffc0000 [ 100.093932][ T29] audit: type=1326 audit(1723214532.417:812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7364 comm="syz.3.1027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6db3379f9 code=0x7ffc0000 [ 100.117287][ T29] audit: type=1326 audit(1723214532.417:813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7364 comm="syz.3.1027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6db3379f9 code=0x7ffc0000 [ 100.140690][ T29] audit: type=1326 audit(1723214532.417:814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7364 comm="syz.3.1027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7ff6db3379f9 code=0x7ffc0000 [ 100.163871][ T29] audit: type=1326 audit(1723214532.417:815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7364 comm="syz.3.1027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6db3379f9 code=0x7ffc0000 [ 100.187410][ T29] audit: type=1326 audit(1723214532.417:816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7364 comm="syz.3.1027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6db3379f9 code=0x7ffc0000 [ 100.210761][ T29] audit: type=1326 audit(1723214532.417:817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7364 comm="syz.3.1027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=173 compat=0 ip=0x7ff6db3379f9 code=0x7ffc0000 [ 100.234064][ T29] audit: type=1326 audit(1723214532.417:818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7364 comm="syz.3.1027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6db3379f9 code=0x7ffc0000 [ 100.340085][ T7397] loop4: detected capacity change from 0 to 512 [ 100.346965][ T7397] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 100.357580][ T7397] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec018, mo2=0002] [ 100.365669][ T6994] nci: nci_rsp_packet: unknown rsp opcode 0x42d [ 100.366719][ T7397] System zones: 1-12 [ 100.371982][ T6994] nci: nci_rx_work: unknown MT 0x6 [ 100.381463][ T7397] EXT4-fs (loop4): 1 truncate cleaned up [ 100.387688][ T7397] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.439066][ T5449] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.456131][ T7406] loop4: detected capacity change from 0 to 512 [ 100.462884][ T7406] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 100.473997][ T7406] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 100.488696][ T7406] EXT4-fs (loop4): Remounting filesystem read-only [ 100.495277][ T7406] EXT4-fs (loop4): 1 truncate cleaned up [ 100.501172][ T7406] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 100.513236][ T7406] SELinux: (dev loop4, type ext4) getxattr errno 5 [ 100.520375][ T7406] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.149097][ T7424] loop0: detected capacity change from 0 to 164 [ 101.179545][ T7429] FAULT_INJECTION: forcing a failure. [ 101.179545][ T7429] name failslab, interval 1, probability 0, space 0, times 0 [ 101.192196][ T7429] CPU: 1 UID: 0 PID: 7429 Comm: syz.1.1045 Not tainted 6.11.0-rc2-syzkaller-00111-gee9a43b7cfe2 #0 [ 101.202871][ T7429] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 101.212954][ T7429] Call Trace: [ 101.216222][ T7429] [ 101.219204][ T7429] dump_stack_lvl+0xf2/0x150 [ 101.223859][ T7429] dump_stack+0x15/0x20 [ 101.228021][ T7429] should_fail_ex+0x229/0x230 [ 101.232831][ T7429] ? nf_ct_ext_add+0xe6/0x1a0 [ 101.237547][ T7429] should_failslab+0x8f/0xb0 [ 101.242148][ T7429] __kmalloc_node_track_caller_noprof+0xa6/0x380 [ 101.248499][ T7429] krealloc_noprof+0x48/0xa0 [ 101.253161][ T7429] nf_ct_ext_add+0xe6/0x1a0 [ 101.257675][ T7429] init_conntrack+0x539/0x970 [ 101.262342][ T7429] nf_conntrack_in+0x899/0xf20 [ 101.267106][ T7429] ? __pfx_ipv6_conntrack_in+0x10/0x10 [ 101.272661][ T7429] ipv6_conntrack_in+0x1d/0x30 [ 101.277494][ T7429] nf_hook_slow+0x86/0x1b0 [ 101.281903][ T7429] ipv6_rcv+0x113/0x150 [ 101.286106][ T7429] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 101.291298][ T7429] __netif_receive_skb+0xa2/0x280 [ 101.296355][ T7429] netif_receive_skb+0x4a/0x320 [ 101.301195][ T7429] ? virtio_net_hdr_to_skb+0x6c4/0xb50 [ 101.306688][ T7429] ? tun_rx_batched+0xba/0x410 [ 101.311438][ T7429] tun_rx_batched+0xf0/0x410 [ 101.316017][ T7429] tun_get_user+0x1e77/0x24b0 [ 101.320681][ T7429] ? kstrtoull+0x110/0x140 [ 101.325139][ T7429] ? ref_tracker_alloc+0x1f5/0x2f0 [ 101.330314][ T7429] ? selinux_file_permission+0x22c/0x360 [ 101.335941][ T7429] tun_chr_write_iter+0x18e/0x240 [ 101.340964][ T7429] vfs_write+0x78f/0x900 [ 101.345231][ T7429] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 101.350773][ T7429] ksys_write+0xeb/0x1b0 [ 101.355012][ T7429] __x64_sys_write+0x42/0x50 [ 101.359600][ T7429] x64_sys_call+0x27dd/0x2d60 [ 101.364269][ T7429] do_syscall_64+0xc9/0x1c0 [ 101.368766][ T7429] ? clear_bhb_loop+0x55/0xb0 [ 101.373486][ T7429] ? clear_bhb_loop+0x55/0xb0 [ 101.378277][ T7429] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.384176][ T7429] RIP: 0033:0x7f2c5fff79f9 [ 101.388578][ T7429] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 101.408178][ T7429] RSP: 002b:00007f2c5ec77038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 101.416632][ T7429] RAX: ffffffffffffffda RBX: 00007f2c60185f80 RCX: 00007f2c5fff79f9 [ 101.424632][ T7429] RDX: 000000000000fdef RSI: 0000000020000300 RDI: 00000000000000c8 [ 101.432613][ T7429] RBP: 00007f2c5ec77090 R08: 0000000000000000 R09: 0000000000000000 [ 101.440571][ T7429] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 101.448559][ T7429] R13: 0000000000000000 R14: 00007f2c60185f80 R15: 00007ffd5529d2d8 [ 101.456561][ T7429] [ 101.461381][ T7435] loop0: detected capacity change from 0 to 128 [ 101.532377][ T7439] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1050'. [ 101.642624][ T7458] FAULT_INJECTION: forcing a failure. [ 101.642624][ T7458] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 101.655756][ T7458] CPU: 0 UID: 0 PID: 7458 Comm: syz.1.1059 Not tainted 6.11.0-rc2-syzkaller-00111-gee9a43b7cfe2 #0 [ 101.666442][ T7458] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 101.676503][ T7458] Call Trace: [ 101.679768][ T7458] [ 101.682684][ T7458] dump_stack_lvl+0xf2/0x150 [ 101.687393][ T7458] dump_stack+0x15/0x20 [ 101.691541][ T7458] should_fail_ex+0x229/0x230 [ 101.696328][ T7458] should_fail+0xb/0x10 [ 101.700496][ T7458] should_fail_usercopy+0x1a/0x20 [ 101.705517][ T7458] _copy_from_user+0x1e/0xd0 [ 101.710290][ T7458] move_addr_to_kernel+0x82/0x120 [ 101.715349][ T7458] __sys_connect+0x74/0x1c0 [ 101.719943][ T7458] __x64_sys_connect+0x41/0x50 [ 101.724776][ T7458] x64_sys_call+0x2220/0x2d60 [ 101.729474][ T7458] do_syscall_64+0xc9/0x1c0 [ 101.734025][ T7458] ? clear_bhb_loop+0x55/0xb0 [ 101.738723][ T7458] ? clear_bhb_loop+0x55/0xb0 [ 101.743424][ T7458] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.749311][ T7458] RIP: 0033:0x7f2c5fff79f9 [ 101.753718][ T7458] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 101.773441][ T7458] RSP: 002b:00007f2c5ec77038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 101.781846][ T7458] RAX: ffffffffffffffda RBX: 00007f2c60185f80 RCX: 00007f2c5fff79f9 [ 101.789829][ T7458] RDX: 000000000000001e RSI: 0000000020000400 RDI: 0000000000000003 [ 101.797836][ T7458] RBP: 00007f2c5ec77090 R08: 0000000000000000 R09: 0000000000000000 [ 101.805791][ T7458] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 101.813822][ T7458] R13: 0000000000000000 R14: 00007f2c60185f80 R15: 00007ffd5529d2d8 [ 101.821782][ T7458] [ 101.843423][ T7463] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 101.922140][ T7465] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1061'. [ 102.368428][ T7487] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 102.381783][ T7489] loop3: detected capacity change from 0 to 128 [ 102.390176][ T7489] vfat: Unknown parameter 'ÿÿÿÿ18446744073709551615' [ 102.487524][ T7501] dccp_invalid_packet: P.Data Offset(0) too small [ 102.650102][ T7503] loop4: detected capacity change from 0 to 512 [ 102.656566][ T7503] EXT4-fs: Ignoring removed bh option [ 102.662903][ T7503] EXT4-fs (loop4): orphan cleanup on readonly fs [ 102.669574][ T7503] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 102.677838][ T7503] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.1073: invalid indirect mapped block 8 (level 2) [ 102.691191][ T7503] EXT4-fs (loop4): Remounting filesystem read-only [ 102.700340][ T7503] EXT4-fs (loop4): 1 truncate cleaned up [ 102.707497][ T7503] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 102.720138][ T7503] SELinux: (dev loop4, type ext4) getxattr errno 5 [ 102.728514][ T7503] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.755085][ T7514] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1076'. [ 102.835096][ T7528] loop0: detected capacity change from 0 to 512 [ 102.842722][ T7528] EXT4-fs (loop0): write access unavailable, skipping orphan cleanup [ 102.851343][ T7528] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 102.854136][ T7531] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 102.878837][ T7001] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.961610][ T7537] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1083'. [ 103.004922][ T7541] netlink: 'syz.0.1085': attribute type 1 has an invalid length. [ 103.049823][ T7549] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 103.125687][ T7551] loop0: detected capacity change from 0 to 256 [ 103.132151][ T7551] vfat: Unknown parameter 'shortna}e' [ 103.222462][ T7573] loop1: detected capacity change from 0 to 1024 [ 103.230725][ T7573] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.285333][ T7577] netlink: zone id is out of range [ 103.290547][ T7577] netlink: set zone limit has 8 unknown bytes [ 103.312726][ T7579] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1095'. [ 103.387648][ T7584] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 103.396133][ T7584] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 103.477640][ T7587] 9pnet_fd: Insufficient options for proto=fd [ 103.520257][ T7593] loop2: detected capacity change from 0 to 512 [ 103.528357][ T7593] EXT4-fs error (device loop2): ext4_get_branch:178: inode #13: block 33619980: comm syz.2.1100: invalid block [ 103.541557][ T7593] EXT4-fs (loop2): Remounting filesystem read-only [ 103.548526][ T7593] EXT4-fs (loop2): 1 truncate cleaned up [ 103.555924][ T7593] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.568104][ T7593] SELinux: (dev loop2, type ext4) getxattr errno 5 [ 103.577593][ T7593] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.911294][ T7615] loop0: detected capacity change from 0 to 2048 [ 103.920998][ T7615] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 103.930848][ T7615] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 103.946940][ T7615] EXT4-fs (loop0): failed to initialize system zone (-117) [ 103.954826][ T7615] EXT4-fs (loop0): mount failed [ 103.966644][ T7615] netlink: 'syz.0.1107': attribute type 27 has an invalid length. [ 103.981196][ T7621] loop2: detected capacity change from 0 to 128 [ 104.005395][ T7626] loop2: detected capacity change from 0 to 256 [ 104.009979][ T7628] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1112'. [ 104.028048][ T7626] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1111'. [ 104.081248][ T6841] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.117369][ T7634] pim6reg: entered allmulticast mode [ 104.154841][ T7641] pim6reg: left allmulticast mode [ 104.248154][ T7647] loop2: detected capacity change from 0 to 128 [ 104.263975][ T7647] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 104.278272][ T7647] ext4 filesystem being mounted at /24/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 104.332619][ T7654] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1119'. [ 104.333220][ T7132] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 104.455275][ T7660] netlink: 'syz.2.1121': attribute type 1 has an invalid length. [ 104.754071][ T7681] FAULT_INJECTION: forcing a failure. [ 104.754071][ T7681] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 104.767384][ T7681] CPU: 0 UID: 0 PID: 7681 Comm: syz.1.1129 Not tainted 6.11.0-rc2-syzkaller-00111-gee9a43b7cfe2 #0 [ 104.778159][ T7681] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 104.788212][ T7681] Call Trace: [ 104.791486][ T7681] [ 104.794482][ T7681] dump_stack_lvl+0xf2/0x150 [ 104.799089][ T7681] dump_stack+0x15/0x20 [ 104.803310][ T7681] should_fail_ex+0x229/0x230 [ 104.807998][ T7681] should_fail+0xb/0x10 [ 104.812251][ T7681] should_fail_usercopy+0x1a/0x20 [ 104.817335][ T7681] _copy_from_user+0x1e/0xd0 [ 104.821928][ T7681] memdup_user+0x64/0xc0 [ 104.826167][ T7681] strndup_user+0x68/0xa0 [ 104.830489][ T7681] __se_sys_mount+0x4e/0x2d0 [ 104.835196][ T7681] ? fput+0x13b/0x180 [ 104.839427][ T7681] ? ksys_write+0x178/0x1b0 [ 104.843923][ T7681] __x64_sys_mount+0x67/0x80 [ 104.848569][ T7681] x64_sys_call+0x203e/0x2d60 [ 104.853236][ T7681] do_syscall_64+0xc9/0x1c0 [ 104.857733][ T7681] ? clear_bhb_loop+0x55/0xb0 [ 104.862419][ T7681] ? clear_bhb_loop+0x55/0xb0 [ 104.867164][ T7681] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.873048][ T7681] RIP: 0033:0x7f2c5fff79f9 [ 104.877545][ T7681] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 104.897143][ T7681] RSP: 002b:00007f2c5ec77038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 104.905540][ T7681] RAX: ffffffffffffffda RBX: 00007f2c60185f80 RCX: 00007f2c5fff79f9 [ 104.913495][ T7681] RDX: 00000000200000c0 RSI: 0000000020000080 RDI: 0000000000000000 [ 104.921468][ T7681] RBP: 00007f2c5ec77090 R08: 0000000000000000 R09: 0000000000000000 [ 104.929489][ T7681] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 104.937444][ T7681] R13: 0000000000000000 R14: 00007f2c60185f80 R15: 00007ffd5529d2d8 [ 104.945408][ T7681] [ 105.204046][ T56] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.263292][ T56] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.270125][ T7709] loop0: detected capacity change from 0 to 512 [ 105.285934][ T7709] loop0: detected capacity change from 0 to 512 [ 105.292635][ T7709] EXT4-fs: Ignoring removed orlov option [ 105.308738][ T56] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.349599][ T7695] chnl_net:caif_netlink_parms(): no params data found [ 105.368923][ T56] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.422714][ T7724] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1146'. [ 105.433023][ T7695] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.440160][ T7695] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.447497][ T7695] bridge_slave_0: entered allmulticast mode [ 105.454076][ T7695] bridge_slave_0: entered promiscuous mode [ 105.463745][ T7695] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.465109][ T7726] loop3: detected capacity change from 0 to 2048 [ 105.470913][ T7695] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.486280][ T7695] bridge_slave_1: entered allmulticast mode [ 105.487927][ T7726] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1139'. [ 105.492823][ T7695] bridge_slave_1: entered promiscuous mode [ 105.538816][ T7733] loop3: detected capacity change from 0 to 736 [ 105.548470][ T7695] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 105.560093][ T7733] rock: directory entry would overflow storage [ 105.566279][ T7733] rock: sig=0x3b10, size=4, remaining=3 [ 105.568532][ T7695] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 105.581575][ T56] bridge_slave_1: left allmulticast mode [ 105.587241][ T56] bridge_slave_1: left promiscuous mode [ 105.592935][ T56] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.600846][ T56] bridge_slave_0: left allmulticast mode [ 105.606583][ T56] bridge_slave_0: left promiscuous mode [ 105.612226][ T56] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.665623][ T7738] loop3: detected capacity change from 0 to 2048 [ 105.675948][ T7738] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 105.688815][ T7738] netlink: 260 bytes leftover after parsing attributes in process `syz.3.1142'. [ 105.705135][ T7738] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 105.720086][ T7738] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 32 with error 28 [ 105.720529][ T56] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 105.732441][ T7738] EXT4-fs (loop3): This should not happen!! Data will be lost [ 105.732441][ T7738] [ 105.750690][ T7738] EXT4-fs (loop3): Total free blocks count 0 [ 105.756705][ T7738] EXT4-fs (loop3): Free/Dirty block details [ 105.762587][ T7738] EXT4-fs (loop3): free_blocks=2415919104 [ 105.768323][ T7738] EXT4-fs (loop3): dirty_blocks=48 [ 105.773418][ T7738] EXT4-fs (loop3): Block reservation details [ 105.779474][ T7738] EXT4-fs (loop3): i_reserved_data_blocks=3 [ 105.787661][ T56] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 105.798025][ T56] bond0 (unregistering): Released all slaves [ 105.815965][ T7737] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 32 with max blocks 1 with error 28 [ 105.833641][ T7705] chnl_net:caif_netlink_parms(): no params data found [ 105.844678][ T7695] team0: Port device team_slave_0 added [ 105.851588][ T7695] team0: Port device team_slave_1 added [ 105.883169][ T7695] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 105.890169][ T7695] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.911583][ T7755] loop3: detected capacity change from 0 to 256 [ 105.916788][ T7695] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 105.934796][ T7695] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 105.941746][ T7695] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.967687][ T7695] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 105.985976][ T56] hsr_slave_0: left promiscuous mode [ 105.991694][ T56] hsr_slave_1: left promiscuous mode [ 105.997646][ T56] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 106.005375][ T56] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 106.012758][ T56] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 106.023414][ T56] veth1_macvtap: left promiscuous mode [ 106.028948][ T56] veth0_macvtap: left promiscuous mode [ 106.034510][ T56] veth1_vlan: left promiscuous mode [ 106.039711][ T56] veth0_vlan: left promiscuous mode [ 106.167596][ T56] team0 (unregistering): Port device team_slave_1 removed [ 106.179369][ T56] team0 (unregistering): Port device team_slave_0 removed [ 106.237544][ T7758] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1147'. [ 106.246518][ T7761] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1147'. [ 106.268397][ T7771] SELinux: Context system_u:object_r:load_policy_exec_t:s0 is not valid (left unmapped). [ 106.268987][ T29] kauditd_printk_skb: 54 callbacks suppressed [ 106.268998][ T29] audit: type=1400 audit(1723214538.657:873): avc: denied { mac_admin } for pid=7767 comm="syz.3.1150" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 106.318175][ T29] audit: type=1400 audit(1723214538.677:874): avc: denied { relabelto } for pid=7767 comm="syz.3.1150" name="event0" dev="devtmpfs" ino=218 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:load_policy_exec_t:s0" [ 106.345942][ T29] audit: type=1400 audit(1723214538.677:875): avc: denied { associate } for pid=7767 comm="syz.3.1150" name="event0" dev="devtmpfs" ino=218 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 srawcon="system_u:object_r:load_policy_exec_t:s0" [ 106.378351][ T7695] hsr_slave_0: entered promiscuous mode [ 106.386089][ T7695] hsr_slave_1: entered promiscuous mode [ 106.392106][ T7695] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 106.399901][ T7695] Cannot create hsr debugfs directory [ 106.407442][ T7705] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.414504][ T7705] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.422429][ T7705] bridge_slave_0: entered allmulticast mode [ 106.430889][ T7705] bridge_slave_0: entered promiscuous mode [ 106.438306][ T7705] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.445480][ T7705] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.453109][ T7705] bridge_slave_1: entered allmulticast mode [ 106.459995][ T7705] bridge_slave_1: entered promiscuous mode [ 106.489570][ T7705] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 106.499921][ T7779] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1153'. [ 106.508971][ T7779] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: invalid value (0) [ 106.518447][ T7779] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: allowed values 1 - 65535 [ 106.556742][ T7705] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 106.590693][ T7705] team0: Port device team_slave_0 added [ 106.598734][ T7705] team0: Port device team_slave_1 added [ 106.629963][ T7705] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 106.636934][ T7705] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 106.662858][ T7705] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 106.681101][ T7705] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 106.688097][ T7705] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 106.714109][ T7705] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 106.757235][ T7695] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.791062][ T7705] hsr_slave_0: entered promiscuous mode [ 106.799618][ T29] audit: type=1326 audit(1723214539.187:876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7784 comm="syz.4.1155" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc28d3a79f9 code=0x0 [ 106.800494][ T7705] hsr_slave_1: entered promiscuous mode [ 106.828620][ T7705] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 106.837601][ T7705] Cannot create hsr debugfs directory [ 106.847277][ T7695] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.907366][ T7695] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.968169][ T7695] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.006695][ T56] bridge_slave_1: left allmulticast mode [ 107.012369][ T56] bridge_slave_1: left promiscuous mode [ 107.018075][ T56] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.025632][ T56] bridge_slave_0: left allmulticast mode [ 107.031249][ T56] bridge_slave_0: left promiscuous mode [ 107.037007][ T56] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.083439][ T7788] loop3: detected capacity change from 0 to 256 [ 107.147416][ T56] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 107.158258][ T56] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 107.208782][ T56] bond0 (unregistering): Released all slaves [ 107.230610][ T7798] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1161'. [ 107.240073][ T56] bond1 (unregistering): Released all slaves [ 107.265141][ T7695] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 107.273619][ T7695] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 107.277140][ T7806] loop0: detected capacity change from 0 to 256 [ 107.290540][ T7695] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 107.299837][ T7695] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 107.339887][ T7695] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.349922][ T7809] loop0: detected capacity change from 0 to 128 [ 107.352365][ T7695] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.364047][ T7809] msdos: Unknown parameter 'ÿÿÿÿÿÿÿÿ' [ 107.369475][ T56] hsr_slave_0: left promiscuous mode [ 107.370613][ T7809] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 107.382356][ T7809] vhci_hcd: invalid port number 219 [ 107.383120][ T56] hsr_slave_1: left promiscuous mode [ 107.387697][ T7809] vhci_hcd: default hub control req: ecdb v6ab1 i00db l1556 [ 107.402648][ T56] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 107.410097][ T56] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 107.417650][ T56] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 107.425226][ T56] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 107.434484][ T56] veth1_macvtap: left promiscuous mode [ 107.439928][ T56] veth0_macvtap: left promiscuous mode [ 107.445488][ T56] veth1_vlan: left promiscuous mode [ 107.450822][ T56] veth0_vlan: left promiscuous mode [ 107.469093][ T29] audit: type=1400 audit(1723214539.857:877): avc: denied { ioctl } for pid=7808 comm="syz.0.1166" path="socket:[26188]" dev="sockfs" ino=26188 ioctlcmd=0x5878 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 107.549513][ T56] team0 (unregistering): Port device team_slave_1 removed [ 107.559799][ T56] team0 (unregistering): Port device team_slave_0 removed [ 107.607072][ T3278] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.614145][ T3278] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.626386][ T3356] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.633474][ T3356] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.648461][ T7816] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 107.717747][ T7695] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.731472][ T7823] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1169'. [ 107.773244][ T7705] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 107.782180][ T7705] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 107.800366][ T7705] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 107.813277][ T7705] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 107.854749][ T7695] veth0_vlan: entered promiscuous mode [ 107.870585][ T7695] veth1_vlan: entered promiscuous mode [ 107.884583][ T7838] loop4: detected capacity change from 0 to 512 [ 107.901596][ T7838] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #15: comm syz.4.1172: casefold flag without casefold feature [ 107.904046][ T7835] loop0: detected capacity change from 0 to 512 [ 107.922557][ T7838] EXT4-fs (loop4): Remounting filesystem read-only [ 107.928601][ T7705] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.929541][ T7838] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 107.949122][ T7838] SELinux: (dev loop4, type ext4) getxattr errno 5 [ 107.953810][ T7695] veth0_macvtap: entered promiscuous mode [ 107.956195][ T7838] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.969314][ T7705] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.983059][ T7695] veth1_macvtap: entered promiscuous mode [ 108.000040][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.007102][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.017022][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.024142][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.039479][ T7856] loop4: detected capacity change from 0 to 256 [ 108.051910][ T7695] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 108.062487][ T7695] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.072435][ T7695] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 108.083112][ T7695] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.093792][ T7695] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 108.104313][ T7695] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.114289][ T7695] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 108.124777][ T7695] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.136610][ T7695] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.145105][ T7695] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 108.155564][ T7695] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.165392][ T7695] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 108.175876][ T7695] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.185718][ T7695] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 108.196132][ T7695] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.205986][ T7695] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 108.216506][ T7695] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.226348][ T7695] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 108.236776][ T7695] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.246593][ T7695] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 108.257021][ T7695] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.267858][ T7695] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.284544][ T7695] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.293414][ T7695] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.302277][ T7695] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.311047][ T7695] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.330521][ T7858] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 108.342505][ T7858] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 108.356282][ T7858] bond0 (unregistering): Released all slaves [ 108.447885][ T7869] loop3: detected capacity change from 0 to 512 [ 108.460519][ T7705] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.460775][ T7877] netlink: 92 bytes leftover after parsing attributes in process `syz.2.1179'. [ 108.468331][ T7869] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 108.476284][ T7877] netlink: 92 bytes leftover after parsing attributes in process `syz.2.1179'. [ 108.515894][ T7869] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 108.568899][ T7869] EXT4-fs (loop3): Remounting filesystem read-only [ 108.590796][ T7869] EXT4-fs (loop3): 1 truncate cleaned up [ 108.602512][ T7869] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 108.632175][ T7887] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 108.633118][ T7869] SELinux: (dev loop3, type ext4) getxattr errno 5 [ 108.641776][ T7705] veth0_vlan: entered promiscuous mode [ 108.667326][ T7869] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.671363][ T7705] veth1_vlan: entered promiscuous mode [ 108.739482][ T7705] veth0_macvtap: entered promiscuous mode [ 108.754896][ T7896] loop3: detected capacity change from 0 to 256 [ 108.756758][ T7705] veth1_macvtap: entered promiscuous mode [ 108.795533][ T7705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 108.806040][ T7705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.815919][ T7705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 108.826492][ T7705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.836405][ T7705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 108.847055][ T7705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.856895][ T7705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 108.867426][ T7705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.869352][ T7901] FAULT_INJECTION: forcing a failure. [ 108.869352][ T7901] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 108.877276][ T7705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 108.877290][ T7705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.890304][ T7901] CPU: 0 UID: 0 PID: 7901 Comm: syz.2.1186 Not tainted 6.11.0-rc2-syzkaller-00111-gee9a43b7cfe2 #0 [ 108.890327][ T7901] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 108.890338][ T7901] Call Trace: [ 108.890345][ T7901] [ 108.890353][ T7901] dump_stack_lvl+0xf2/0x150 [ 108.942013][ T7901] dump_stack+0x15/0x20 [ 108.946166][ T7901] should_fail_ex+0x229/0x230 [ 108.950899][ T7901] should_fail+0xb/0x10 [ 108.955049][ T7901] should_fail_usercopy+0x1a/0x20 [ 108.960114][ T7901] _copy_to_user+0x1e/0xa0 [ 108.964594][ T7901] simple_read_from_buffer+0xa0/0x110 [ 108.969959][ T7901] proc_fail_nth_read+0xfc/0x140 [ 108.974888][ T7901] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 108.980496][ T7901] vfs_read+0x1a2/0x6e0 [ 108.984676][ T7901] ? __rcu_read_unlock+0x4e/0x70 [ 108.989603][ T7901] ? __fget_files+0x1da/0x210 [ 108.994313][ T7901] ksys_read+0xeb/0x1b0 [ 108.998519][ T7901] __x64_sys_read+0x42/0x50 [ 109.003016][ T7901] x64_sys_call+0x27d3/0x2d60 [ 109.007686][ T7901] do_syscall_64+0xc9/0x1c0 [ 109.012183][ T7901] ? clear_bhb_loop+0x55/0xb0 [ 109.016852][ T7901] ? clear_bhb_loop+0x55/0xb0 [ 109.021521][ T7901] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.027447][ T7901] RIP: 0033:0x7fa1e5aa643c [ 109.031907][ T7901] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8d 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8d 02 00 48 [ 109.051580][ T7901] RSP: 002b:00007fa1e4727030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 109.060058][ T7901] RAX: ffffffffffffffda RBX: 00007fa1e5c35f80 RCX: 00007fa1e5aa643c [ 109.068014][ T7901] RDX: 000000000000000f RSI: 00007fa1e47270a0 RDI: 0000000000000005 [ 109.075971][ T7901] RBP: 00007fa1e4727090 R08: 0000000000000000 R09: 0000000000000000 [ 109.083961][ T7901] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 109.091939][ T7901] R13: 0000000000000000 R14: 00007fa1e5c35f80 R15: 00007ffca679d968 [ 109.099900][ T7901] [ 109.137450][ T7705] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.155233][ T7705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 109.156228][ T7896] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 109.165737][ T7705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.165760][ T7705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 109.165772][ T7705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.165788][ T7705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 109.216821][ T7705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.224298][ T29] audit: type=1400 audit(1723214541.597:878): avc: denied { read } for pid=7894 comm="iou-wrk-7896" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 109.226623][ T7705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 109.256438][ T7705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.266301][ T7705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 109.276723][ T7705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.286602][ T7705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 109.297026][ T7705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.306856][ T7705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 109.317301][ T7705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.331986][ T7705] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.343375][ T7705] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.352123][ T7705] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.360890][ T7705] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.369688][ T7705] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.432613][ T7910] netlink: 'syz.2.1189': attribute type 10 has an invalid length. [ 109.448050][ T7913] netlink: 'syz.0.1190': attribute type 29 has an invalid length. [ 109.450841][ T7912] FAULT_INJECTION: forcing a failure. [ 109.450841][ T7912] name failslab, interval 1, probability 0, space 0, times 0 [ 109.468583][ T7912] CPU: 0 UID: 0 PID: 7912 Comm: syz.3.1188 Not tainted 6.11.0-rc2-syzkaller-00111-gee9a43b7cfe2 #0 [ 109.479258][ T7912] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 109.489313][ T7912] Call Trace: [ 109.492593][ T7912] [ 109.495519][ T7912] dump_stack_lvl+0xf2/0x150 [ 109.500138][ T7912] dump_stack+0x15/0x20 [ 109.504347][ T7912] should_fail_ex+0x229/0x230 [ 109.506582][ T7914] loop2: detected capacity change from 0 to 128 [ 109.509028][ T7912] ? alloc_vmap_area+0x1e1/0x1830 [ 109.520311][ T7912] should_failslab+0x8f/0xb0 [ 109.524951][ T7912] kmem_cache_alloc_node_noprof+0x51/0x2b0 [ 109.530760][ T7912] alloc_vmap_area+0x1e1/0x1830 [ 109.535683][ T7912] ? __rcu_read_unlock+0x4e/0x70 [ 109.540655][ T7912] ? should_fail_ex+0xd7/0x230 [ 109.543447][ T7914] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 109.545471][ T7912] __get_vm_area_node+0x15e/0x1b0 [ 109.545549][ T7912] __vmalloc_node_range_noprof+0x2eb/0xef0 [ 109.568247][ T7912] ? bpf_prog_alloc_no_stats+0x49/0x290 [ 109.572967][ T7914] ext4 filesystem being mounted at /6/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 109.573856][ T7912] ? __rcu_read_unlock+0x4e/0x70 [ 109.573880][ T7912] ? bpf_prog_alloc_no_stats+0x49/0x290 [ 109.573905][ T7912] __vmalloc_noprof+0x5e/0x70 [ 109.620562][ T7912] ? bpf_prog_alloc_no_stats+0x49/0x290 [ 109.626122][ T7912] bpf_prog_alloc_no_stats+0x49/0x290 [ 109.631553][ T7912] ? bpf_prog_alloc+0x28/0x150 [ 109.636331][ T7912] bpf_prog_alloc+0x3a/0x150 [ 109.640927][ T7912] bpf_prog_load+0x4d1/0x1060 [ 109.645621][ T7912] __sys_bpf+0x463/0x7a0 [ 109.649919][ T7912] __x64_sys_bpf+0x43/0x50 [ 109.654349][ T7912] x64_sys_call+0x2625/0x2d60 [ 109.659033][ T7912] do_syscall_64+0xc9/0x1c0 [ 109.663543][ T7912] ? clear_bhb_loop+0x55/0xb0 [ 109.668232][ T7912] ? clear_bhb_loop+0x55/0xb0 [ 109.672924][ T7912] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.678823][ T7912] RIP: 0033:0x7ff6db3379f9 [ 109.683271][ T7912] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 109.702938][ T7912] RSP: 002b:00007ff6d9fb7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 109.711401][ T7912] RAX: ffffffffffffffda RBX: 00007ff6db4c5f80 RCX: 00007ff6db3379f9 [ 109.719378][ T7912] RDX: 0000000000000090 RSI: 0000000020000400 RDI: 0000000000000005 [ 109.727373][ T7912] RBP: 00007ff6d9fb7090 R08: 0000000000000000 R09: 0000000000000000 [ 109.735341][ T7912] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 109.743409][ T7912] R13: 0000000000000000 R14: 00007ff6db4c5f80 R15: 00007ffdeee94178 [ 109.751386][ T7912] [ 109.754439][ T7912] syz.3.1188: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=syz3,mems_allowed=0 [ 109.771047][ T7912] CPU: 0 UID: 0 PID: 7912 Comm: syz.3.1188 Not tainted 6.11.0-rc2-syzkaller-00111-gee9a43b7cfe2 #0 [ 109.781729][ T7912] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 109.791837][ T7912] Call Trace: [ 109.795109][ T7912] [ 109.798059][ T7912] dump_stack_lvl+0xf2/0x150 [ 109.802663][ T7912] dump_stack+0x15/0x20 [ 109.806820][ T7912] warn_alloc+0x145/0x1b0 [ 109.811241][ T7912] ? kfree+0xd5/0x290 [ 109.815272][ T7912] __vmalloc_node_range_noprof+0x310/0xef0 [ 109.821208][ T7912] ? __rcu_read_unlock+0x4e/0x70 [ 109.826195][ T7912] ? bpf_prog_alloc_no_stats+0x49/0x290 [ 109.831817][ T7912] __vmalloc_noprof+0x5e/0x70 [ 109.836496][ T7912] ? bpf_prog_alloc_no_stats+0x49/0x290 [ 109.842061][ T7912] bpf_prog_alloc_no_stats+0x49/0x290 [ 109.847443][ T7912] ? bpf_prog_alloc+0x28/0x150 [ 109.852208][ T7912] bpf_prog_alloc+0x3a/0x150 [ 109.856826][ T7912] bpf_prog_load+0x4d1/0x1060 [ 109.861618][ T7912] __sys_bpf+0x463/0x7a0 [ 109.865871][ T7912] __x64_sys_bpf+0x43/0x50 [ 109.870375][ T7912] x64_sys_call+0x2625/0x2d60 [ 109.875056][ T7912] do_syscall_64+0xc9/0x1c0 [ 109.879718][ T7912] ? clear_bhb_loop+0x55/0xb0 [ 109.884403][ T7912] ? clear_bhb_loop+0x55/0xb0 [ 109.889098][ T7912] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.894994][ T7912] RIP: 0033:0x7ff6db3379f9 [ 109.899397][ T7912] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 109.919006][ T7912] RSP: 002b:00007ff6d9fb7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 109.927454][ T7912] RAX: ffffffffffffffda RBX: 00007ff6db4c5f80 RCX: 00007ff6db3379f9 [ 109.935471][ T7912] RDX: 0000000000000090 RSI: 0000000020000400 RDI: 0000000000000005 [ 109.943473][ T7912] RBP: 00007ff6d9fb7090 R08: 0000000000000000 R09: 0000000000000000 [ 109.951433][ T7912] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 109.959460][ T7912] R13: 0000000000000000 R14: 00007ff6db4c5f80 R15: 00007ffdeee94178 [ 109.967502][ T7912] [ 109.970665][ T7912] Mem-Info: [ 109.973782][ T7912] active_anon:3020 inactive_anon:1 isolated_anon:0 [ 109.973782][ T7912] active_file:3851 inactive_file:23960 isolated_file:0 [ 109.973782][ T7912] unevictable:28 dirty:206 writeback:0 [ 109.973782][ T7912] slab_reclaimable:2725 slab_unreclaimable:19424 [ 109.973782][ T7912] mapped:21213 shmem:835 pagetables:605 [ 109.973782][ T7912] sec_pagetables:0 bounce:0 [ 109.973782][ T7912] kernel_misc_reclaimable:0 [ 109.973782][ T7912] free:1873552 free_pcp:12804 free_cma:0 [ 110.018681][ T7912] Node 0 active_anon:9644kB inactive_anon:4kB active_file:15404kB inactive_file:95840kB unevictable:112kB isolated(anon):0kB isolated(file):0kB mapped:84852kB dirty:824kB writeback:0kB shmem:904kB writeback_tmp:0kB kernel_stack:2992kB pagetables:2420kB sec_pagetables:0kB all_unreclaimable? no [ 110.046349][ T7912] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 110.073271][ T7912] lowmem_reserve[]: 0 2866 7844 0 [ 110.078313][ T7912] Node 0 DMA32 free:2950412kB boost:0kB min:4136kB low:7068kB high:10000kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2953944kB mlocked:0kB bounce:0kB free_pcp:3532kB local_pcp:3532kB free_cma:0kB [ 110.107055][ T7912] lowmem_reserve[]: 0 0 4978 0 [ 110.111822][ T7912] Node 0 Normal free:4528436kB boost:0kB min:7184kB low:12280kB high:17376kB reserved_highatomic:0KB active_anon:9644kB inactive_anon:4kB active_file:15404kB inactive_file:95840kB unevictable:112kB writepending:824kB present:5242880kB managed:5098208kB mlocked:72kB bounce:0kB free_pcp:50092kB local_pcp:5100kB free_cma:0kB [ 110.142185][ T7912] lowmem_reserve[]: 0 0 0 0 [ 110.146777][ T7912] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 110.159464][ T7912] Node 0 DMA32: 3*4kB (M) 2*8kB (M) 3*16kB (M) 4*32kB (M) 3*64kB (M) 3*128kB (M) 4*256kB (M) 3*512kB (M) 2*1024kB (M) 2*2048kB (M) 718*4096kB (M) = 2950412kB [ 110.175526][ T7912] Node 0 Normal: 770*4kB (ME) 678*8kB (UME) 389*16kB (ME) 71*32kB (UME) 89*64kB (UME) 39*128kB (UM) 101*256kB (UME) 46*512kB (UME) 53*1024kB (UME) 37*2048kB (UME) 1055*4096kB (UM) = 4528424kB [ 110.194591][ T7912] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 110.203936][ T7912] 28040 total pagecache pages [ 110.208634][ T7912] 2 pages in swap cache [ 110.212786][ T7912] Free swap = 124656kB [ 110.216968][ T7912] Total swap = 124996kB [ 110.221108][ T7912] 2097051 pages RAM [ 110.224937][ T7912] 0 pages HighMem/MovableOnly [ 110.229618][ T7912] 80173 pages reserved [ 110.249469][ T7910] team0: Failed to send port change of device netdevsim1 via netlink (err -105) [ 110.250365][ T29] audit: type=1400 audit(1723214542.637:879): avc: denied { ioctl } for pid=7923 comm="syz.3.1192" path="socket:[26443]" dev="sockfs" ino=26443 ioctlcmd=0x48d2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 110.272293][ T7910] team0: Failed to send options change via netlink (err -105) [ 110.291424][ T7910] team0: Port device netdevsim1 added [ 110.334256][ T29] audit: type=1326 audit(1723214542.717:880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7931 comm="syz.0.1196" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f556f5779f9 code=0x0 [ 110.357715][ T7695] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 110.397897][ T7936] loop1: detected capacity change from 0 to 512 [ 110.414661][ T29] audit: type=1400 audit(1723214542.797:881): avc: denied { getopt } for pid=7934 comm="syz.4.1197" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 110.420129][ T7936] EXT4-fs (loop1): unable to read superblock [ 110.472726][ T29] audit: type=1326 audit(1723214542.857:882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7942 comm="syz.1.1200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d609579f9 code=0x7ffc0000 [ 110.511128][ T7946] loop4: detected capacity change from 0 to 512 [ 110.518542][ T7946] EXT4-fs (loop4): orphan cleanup on readonly fs [ 110.526834][ T7946] EXT4-fs error (device loop4): ext4_acquire_dquot:6848: comm syz.4.1201: Failed to acquire dquot type 1 [ 110.538703][ T7946] EXT4-fs (loop4): 1 truncate cleaned up [ 110.544739][ T7946] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 110.583564][ T5449] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.599803][ T7956] loop1: detected capacity change from 0 to 1024 [ 110.608119][ T7956] EXT4-fs: Ignoring removed orlov option [ 110.613791][ T7956] EXT4-fs: Ignoring removed nomblk_io_submit option [ 110.631358][ T7954] __nla_validate_parse: 1 callbacks suppressed [ 110.631369][ T7954] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1204'. [ 110.646517][ T7954] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1204'. [ 110.661620][ T7954] veth1_virt_wifi: entered promiscuous mode [ 110.669380][ T7954] bridge0: entered promiscuous mode [ 110.675772][ T7956] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 110.688190][ T7954] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 110.696252][ T7954] Cannot create hsr debugfs directory [ 110.709061][ T7961] dccp_invalid_packet: P.Data Offset(0) too small [ 110.757607][ T7967] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 110.775875][ T7967] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 110.997652][ T7979] loop4: detected capacity change from 0 to 1764 [ 111.004524][ T7979] iso9660: Bad value for 'gid' [ 111.009347][ T7979] iso9660: Bad value for 'gid' [ 111.362325][ T7996] loop2: detected capacity change from 0 to 512 [ 111.396763][ T7996] EXT4-fs error (device loop2): ext4_get_branch:178: inode #13: block 33619980: comm syz.2.1215: invalid block [ 111.449119][ T7996] EXT4-fs (loop2): Remounting filesystem read-only [ 111.458924][ T29] kauditd_printk_skb: 12 callbacks suppressed [ 111.458963][ T29] audit: type=1400 audit(1723214543.847:893): avc: denied { unmount } for pid=7705 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 111.465412][ T7996] EXT4-fs (loop2): 1 truncate cleaned up [ 111.502922][ T29] audit: type=1400 audit(1723214543.887:894): avc: denied { unlink } for pid=7705 comm="syz-executor" name="file1" dev="loop1" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 111.516425][ T8011] loop3: detected capacity change from 0 to 512 [ 111.546508][ T8011] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 111.555676][ T8011] EXT4-fs error (device loop3): ext4_ext_check_inode:520: inode #15: comm syz.3.1217: pblk 0 bad header/extent: invalid eh_entries - magic f30a, entries 24833, max 4(4), depth 0(0) [ 111.562805][ T7996] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 111.586225][ T7996] SELinux: (dev loop2, type ext4) getxattr errno 5 [ 111.592986][ T8011] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.1217: couldn't read orphan inode 15 (err -117) [ 111.605384][ T7996] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.615987][ T8011] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 111.634319][ T8011] ext2 filesystem being mounted at /57/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 111.665449][ T29] audit: type=1400 audit(1723214544.057:895): avc: denied { create } for pid=8001 comm="syz.3.1217" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=chr_file permissive=1 [ 111.693035][ T8011] EXT4-fs error (device loop3): ext4_add_entry:2435: inode #2: comm syz.3.1217: Directory hole found for htree leaf block 0 [ 111.758474][ T3338] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 111.765909][ T3338] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 111.773322][ T3338] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 111.780781][ T3338] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 111.788356][ T3338] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 111.795977][ T3338] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 111.803358][ T3338] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 111.810794][ T3338] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 111.818319][ T3338] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 111.825734][ T3338] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 111.833141][ T3338] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 111.840555][ T3338] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 111.847955][ T3338] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 111.855361][ T3338] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 111.862768][ T3338] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 111.870235][ T3338] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 111.877667][ T3338] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 111.885061][ T3338] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 111.892206][ T29] audit: type=1400 audit(1723214544.277:896): avc: denied { read } for pid=8022 comm="syz.2.1225" name="usbmon0" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 111.892464][ T3338] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 111.923057][ T3338] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 111.930558][ T3338] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 111.937944][ T3338] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 111.945382][ T3338] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 111.952782][ T3338] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 111.959249][ T8024] loop0: detected capacity change from 0 to 128 [ 111.960168][ T3338] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 111.968412][ T8024] ip6_vti0 speed is unknown, defaulting to 1000 [ 111.973867][ T3338] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 111.981158][ T8024] ip6_vti0 speed is unknown, defaulting to 1000 [ 111.987435][ T3338] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 111.993838][ T8024] ip6_vti0 speed is unknown, defaulting to 1000 [ 112.001013][ T3338] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 112.014703][ T3338] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 112.022083][ T3338] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 112.029491][ T3338] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 112.037017][ T3338] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 112.041460][ T8024] infiniband syz1: set active [ 112.044408][ T3338] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 112.049076][ T8024] infiniband syz1: added ip6_vti0 [ 112.056519][ T3338] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 112.065323][ T3335] ip6_vti0 speed is unknown, defaulting to 1000 [ 112.068794][ T3338] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 112.076827][ T29] audit: type=1400 audit(1723214544.317:897): avc: denied { open } for pid=8022 comm="syz.2.1225" path="/dev/usbmon0" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 112.082362][ T3338] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 112.106013][ T29] audit: type=1400 audit(1723214544.347:898): avc: denied { ioctl } for pid=8022 comm="syz.2.1225" path="/dev/usbmon0" dev="devtmpfs" ino=117 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 112.113363][ T3338] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 112.146098][ T3338] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 112.153488][ T3338] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 112.160898][ T3338] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 112.168310][ T3338] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 112.175751][ T3338] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 112.183145][ T3338] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 112.196843][ T3338] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz0] on syz0 [ 112.201595][ T8024] RDS/IB: syz1: added [ 112.211133][ T8024] smc: adding ib device syz1 with port count 1 [ 112.218890][ T8024] smc: ib device syz1 port 1 has pnetid [ 112.224937][ T3322] ip6_vti0 speed is unknown, defaulting to 1000 [ 112.231779][ T8024] ip6_vti0 speed is unknown, defaulting to 1000 [ 112.256211][ T6936] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.302002][ T8036] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1228'. [ 112.367687][ T8024] ip6_vti0 speed is unknown, defaulting to 1000 [ 112.389207][ T8043] netlink: 'syz.2.1230': attribute type 10 has an invalid length. [ 112.404742][ T8043] netlink: 'syz.2.1230': attribute type 10 has an invalid length. [ 112.413859][ T8043] team0: Port device netdevsim1 removed [ 112.422626][ T8043] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 112.447696][ T8049] loop2: detected capacity change from 0 to 512 [ 112.460357][ T8045] loop3: detected capacity change from 0 to 512 [ 112.475028][ T8045] ================================================================== [ 112.483123][ T8045] BUG: KCSAN: data-race in has_bh_in_lru / invalidate_bh_lru [ 112.490500][ T8045] [ 112.492809][ T8045] write to 0xffff888237d2b910 of 8 bytes by task 8049 on cpu 1: [ 112.500423][ T8045] invalidate_bh_lru+0x8b/0xf0 [ 112.505177][ T8045] smp_call_function_many_cond+0x690/0xc20 [ 112.510973][ T8045] on_each_cpu_cond_mask+0x3c/0x90 [ 112.516076][ T8045] invalidate_bh_lrus+0x2a/0x30 [ 112.520916][ T8045] set_blocksize+0x25b/0x280 [ 112.525497][ T8045] sb_set_blocksize+0x2c/0xb0 [ 112.530167][ T8045] ext4_fill_super+0xdca/0x39e0 [ 112.535009][ T8045] get_tree_bdev+0x256/0x2e0 [ 112.539593][ T8045] ext4_get_tree+0x1c/0x30 [ 112.544000][ T8045] vfs_get_tree+0x56/0x1d0 [ 112.548402][ T8045] do_new_mount+0x227/0x690 [ 112.552898][ T8045] path_mount+0x49b/0xb30 [ 112.557221][ T8045] __se_sys_mount+0x27c/0x2d0 [ 112.561892][ T8045] __x64_sys_mount+0x67/0x80 [ 112.566477][ T8045] x64_sys_call+0x203e/0x2d60 [ 112.571143][ T8045] do_syscall_64+0xc9/0x1c0 [ 112.575643][ T8045] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.581530][ T8045] [ 112.583839][ T8045] read to 0xffff888237d2b910 of 8 bytes by task 8045 on cpu 0: [ 112.591366][ T8045] has_bh_in_lru+0x35/0x1f0 [ 112.595863][ T8045] smp_call_function_many_cond+0x2d5/0xc20 [ 112.601658][ T8045] on_each_cpu_cond_mask+0x3c/0x90 [ 112.606758][ T8045] invalidate_bh_lrus+0x2a/0x30 [ 112.611601][ T8045] set_blocksize+0x25b/0x280 [ 112.616180][ T8045] sb_set_blocksize+0x2c/0xb0 [ 112.620843][ T8045] ext4_fill_super+0xdca/0x39e0 [ 112.625686][ T8045] get_tree_bdev+0x256/0x2e0 [ 112.630275][ T8045] ext4_get_tree+0x1c/0x30 [ 112.634681][ T8045] vfs_get_tree+0x56/0x1d0 [ 112.639084][ T8045] do_new_mount+0x227/0x690 [ 112.643581][ T8045] path_mount+0x49b/0xb30 [ 112.647903][ T8045] __se_sys_mount+0x27c/0x2d0 [ 112.652572][ T8045] __x64_sys_mount+0x67/0x80 [ 112.657157][ T8045] x64_sys_call+0x203e/0x2d60 [ 112.661824][ T8045] do_syscall_64+0xc9/0x1c0 [ 112.666320][ T8045] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.672208][ T8045] [ 112.674513][ T8045] value changed: 0xffff88810645e4e0 -> 0x0000000000000000 [ 112.681607][ T8045] [ 112.683913][ T8045] Reported by Kernel Concurrency Sanitizer on: [ 112.690043][ T8045] CPU: 0 UID: 0 PID: 8045 Comm: syz.3.1231 Not tainted 6.11.0-rc2-syzkaller-00111-gee9a43b7cfe2 #0 [ 112.700703][ T8045] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 112.710742][ T8045] ================================================================== [ 112.735505][ T8045] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 112.741388][ T8024] ip6_vti0 speed is unknown, defaulting to 1000 [ 112.743427][ T8045] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 112.757767][ T8045] System zones: 0-1, 15-15, 18-18, 34-34 [ 112.763911][ T8045] EXT4-fs (loop3): orphan cleanup on readonly fs [ 112.766222][ T8049] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.770286][ T8045] Quota error (device loop3): v2_read_header: Failed header read: expected=8 got=0 [ 112.792405][ T8045] EXT4-fs warning (device loop3): ext4_enable_quotas:7066: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 112.804309][ T8049] ext4 filesystem being mounted at /18/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 112.806925][ T8045] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 112.835889][ T8045] EXT4-fs error (device loop3): ext4_orphan_get:1417: comm syz.3.1231: bad orphan inode 16 [ 112.847658][ T8045] ext4_test_bit(bit=15, block=18) = 1 [ 112.851843][ T29] audit: type=1400 audit(1723214545.237:899): avc: denied { read } for pid=8048 comm="syz.2.1233" name="file1" dev="loop2" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 112.853020][ T8045] is_bad_inode(inode)=0 [ 112.853028][ T8045] NEXT_ORPHAN(inode)=0 [ 112.853033][ T8045] max_ino=32 [ 112.853038][ T8045] i_nlink=2 [ 112.853352][ T8045] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 112.919955][ T6936] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.947398][ T8024] ip6_vti0 speed is unknown, defaulting to 1000 [ 113.014588][ T29] audit: type=1400 audit(1723214545.407:900): avc: denied { unlink } for pid=7695 comm="syz-executor" name="memory.events" dev="loop2" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 113.040065][ T8024] ip6_vti0 speed is unknown, defaulting to 1000 [ 113.048817][ T7695] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.088813][ T8024] ip6_vti0 speed is unknown, defaulting to 1000 [ 113.121448][ T8024] ip6_vti0 speed is unknown, defaulting to 1000 [ 113.153748][ T8024] ip6_vti0 speed is unknown, defaulting to 1000 [ 115.815272][ T7705] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.831230][ T56] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.877244][ T56] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.918289][ T56] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.977785][ T56] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.045334][ T56] bridge_slave_1: left allmulticast mode [ 116.051009][ T56] bridge_slave_1: left promiscuous mode [ 116.056699][ T56] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.065756][ T56] bridge_slave_0: left allmulticast mode [ 116.071381][ T56] bridge_slave_0: left promiscuous mode [ 116.077116][ T56] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.148482][ T56] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 116.159499][ T56] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 116.169926][ T56] bond0 (unregistering): Released all slaves [ 116.268241][ T56] hsr_slave_0: left promiscuous mode [ 116.273819][ T56] hsr_slave_1: left promiscuous mode [ 116.279591][ T56] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 116.287053][ T56] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 116.297000][ T56] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 116.304453][ T56] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 116.313730][ T56] veth1_macvtap: left promiscuous mode [ 116.319343][ T56] veth0_macvtap: left promiscuous mode [ 116.324954][ T56] veth1_vlan: left promiscuous mode [ 116.330168][ T56] veth0_vlan: left promiscuous mode [ 116.415749][ T56] team0 (unregistering): Port device team_slave_1 removed [ 116.426261][ T56] team0 (unregistering): Port device team_slave_0 removed