last executing test programs: 1.361213629s ago: executing program 4 (id=825): r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000000940)=[{{&(0x7f00000004c0)={0xa, 0x4e1d, 0x0, @mcast2, 0x3f000000}, 0x1c, &(0x7f0000000780)=[{&(0x7f00000005c0)='r', 0x1}], 0x1}}], 0x1, 0x40875) 1.212666451s ago: executing program 0 (id=828): socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/time_for_children\x00') socket$inet6_tcp(0xa, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuset.memory_pressure\x00', 0x275a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000002000000000000000000007700000000000000650000000000000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_buf(r0, 0x0, 0x20, &(0x7f00000000c0)="172a309f", 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) socket$kcm(0xa, 0x5, 0x0) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./bus\x00', 0x410c84, &(0x7f0000000480)={[], [{@mask={'mask', 0x3d, '^MAY_WRITE'}}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@smackfsfloor}, {@euid_gt}, {@euid_lt}]}, 0x1, 0x775, &(0x7f0000001180)="$eJzs3c9rXNUeAPDvnSRNm/a95MGD9+oqIGigdGJqbBVcVFyIYKGga9thMg01k0zJTEoTAlpEcCOouBB007U/6s6tP7b6X7gQS9W0WHEhkTu5t502M2mSJpnqfD5wM+fceyfnfOf+OGfmHu4NoGeNpn8KEYcj4t0kYjibn0TEQDPVH3Fybb1bK8vldEpidfXlX5LmOjdXlsvR8p7UwSzz/4j45q2II4X15dYXl2ZK1WplPsuPN2YvjNcXl46eny1NV6Yrc8cnJiePnXjqxPGdi/W375cOXXvvhcc/P/nHm/+7+s63SZyMQ9my1jh2ymiMZp/JQPoR3uX5nS6sy5JuV4BtSQ/NvrWjPA7HcPQ1UwDAP9nrEbEKAPSYRPsPAD0m/x3g5spyOZ+6+4vE3rr+XETsX4s/v765tqQ/u2a3v3kddOhmcteVkSQiRnag/NGI+PjLVz9Np9il65AA7bxxOSLOjoyuP/8n68YsbNUTGyzbl72O3jPf+Q/2zldp/+fpdv2/wu3+T7Tp/wy2OXa3477H/4EdKGQDaf/v2Zaxbbda4s+M9GW5fzX7fAPJufPVSnpu+3dEjMXAYJqf2KCMsRt/3ui0rLX/9+v7r32Slp++3lmj8FP/4N3vmSo1Sg8Sc6vrlyMe6W8Xf3J7+ycd+r+nN1nGi8+8/VGnZWn8abz5tD7+yEYn7Y7VKxGPtd3+d0a0JRuOTxxv7g7j+U7Rxhc/fDjUqfzW7Z9Oafn5d4G9kG7/oY3jH0lax2vWt17Gd1eGv+607P7xt9//9yWvNNN5P+JSqdGYn4jYl7y0fv6xO+/N8/n6afxjj7Y//jfa/9PvhGc3GX//tZ8/2378uyuNf2pL23/riau3Zvo6lb+57T/ZTI1lczZz/ttsBR/kswMAAAAAAAAAAAAAAAAAAAAAAACAzSpExKFICsXb6UKhWFx7hvd/Y6hQrdUbR87VFuamovms7JEYKOS3uhxuuR/qRHY//Dx/7J78kxHxn4j4YPBAkt9HcarLsQMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABA7mCH5/+nfhzsdu0AgF2zv9sVAAD2nPYfAHqP9h8Aeo/2HwB6j/YfAHqP9h8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBddvrUqXRa/X1luZzmpy4uLszULh6dqtRnirML5WK5Nn+hOF2rTVcrxXJt9n7/r1qrXZiMuYVL441KvTFeX1w6M1tbmGucOT9bmq6cqQzsSVQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsDX1xaWZUrVamZfYRmL14ahG9xN92e70sNRnTxPJw1GNHU50+cQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8DfxVwAAAP//02Ii/w==") r1 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000108500000075000000a50000002300000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000140)='mmap_lock_acquire_returned\x00', r2}, 0x10) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r1, 0x0) fallocate(r1, 0x0, 0x0, 0x1000f4) socket$rds(0x15, 0x5, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) rt_sigprocmask(0x0, &(0x7f0000000200)={[0xfffffbfd]}, 0x0, 0x8) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x14, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020641c00000000002008007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8a48ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000400)='signal_generate\x00', r4}, 0x10) futex(&(0x7f000000cffc)=0x1, 0xd, 0x0, 0x0, 0x0, 0x0) clock_getres(0x3, &(0x7f0000000040)) semget$private(0x0, 0x2, 0x80) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x48, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$rtc(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) 1.212123641s ago: executing program 4 (id=829): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x6, 0x4, &(0x7f0000002180)=ANY=[@ANYBLOB="1802000000000000000000000000170000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x5, 0xc0, &(0x7f00000020c0)=""/192}, 0x80) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (async) syz_io_uring_setup(0x1114, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x313}, &(0x7f00000001c0)=0x0, &(0x7f0000000040)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) (async) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0xb, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x7e}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000003c0), 0x10}, 0x90) socket$nl_route(0x10, 0x3, 0x0) r1 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x26, 0x1, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x0, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7020000f3ffffb0150000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x0, 0x0, 0x0}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r3) bpf$ENABLE_STATS(0x20, 0x0, 0x0) syz_io_uring_setup(0x4072, 0x0, &(0x7f00000002c0)=0x0, 0x0) syz_io_uring_submit(r4, 0x0, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, &(0x7f00000004c0)=[{0x0}], 0x1}) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet(0x2, 0x80001, 0x84) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="30000000010805000000000000000000000000020900010073797a300000000005000300000000000600024000000000275ed1c4f305b5353294f590535fc9ef95bff9196547daa0bdbe97948ae673165d4b986b6917d086bb6b4d8510971b5d"], 0x30}, 0x1, 0x0, 0x0, 0x8004000}, 0x0) (async) r6 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r6, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f0000000300)={[{@grpquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x84}}, {@resuid}, {@max_batch_time={'max_batch_time', 0x3d, 0x3}}, {@lazytime}, {@jqfmt_vfsold}, {@usrquota}, {@data_err_abort}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") (async) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) unlinkat(r7, &(0x7f0000000240)='./file0\x00', 0x0) (async) chdir(&(0x7f0000000000)='./file0\x00') r8 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) lseek(r8, 0x0, 0x2) getdents(r8, 0x0, 0x0) (async) bind$inet(r6, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) 1.132905067s ago: executing program 4 (id=830): rseq(&(0x7f0000000040), 0x20, 0x0, 0x0) mmap(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x0, 0x6031, 0xffffffffffffffff, 0x700000000000000) 1.085411112s ago: executing program 4 (id=831): perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8d080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wakeup_count', 0x0, 0x82) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) preadv2(0xffffffffffffffff, &(0x7f0000000440)=[{&(0x7f00000005c0)=""/171, 0xff6c}, {&(0x7f0000000380)=""/159, 0x9f}], 0x2, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000240)={0x6000001f}) read$char_usb(r1, &(0x7f0000000100)=""/169, 0xa9) epoll_pwait(r0, &(0x7f0000000200)=[{}], 0xfffc, 0x0, 0x0, 0x0) 1.002938509s ago: executing program 4 (id=837): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x19, &(0x7f0000000280)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}}, @initr0, @printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x73}}, @alu={0x6, 0x0, 0xa}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x90) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x9, 0x9}}, './file0\x00'}) ioctl$TUNSETLINK(r2, 0x400454cd, 0x2) 939.232924ms ago: executing program 2 (id=838): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)) socket$inet6_mptcp(0xa, 0x1, 0x106) syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f00000004c0)={[{}]}, 0x1, 0x453, &(0x7f0000001040)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40086610, &(0x7f0000000140)={0x1, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$nl_generic(0x10, 0x3, 0x10) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r3) fremovexattr(r1, &(0x7f0000000000)=@known='system.posix_acl_default\x00') r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r4, 0x84, 0x1, 0x0, &(0x7f00000001c0)) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80080) write$P9_RVERSION(r5, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r6 = dup(r5) write$P9_RLERRORu(r6, &(0x7f0000000040)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r6, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0), 0x840, 0x0) 938.602703ms ago: executing program 4 (id=839): socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$BLKRESETZONE(0xffffffffffffffff, 0x40101283, 0x0) syz_open_dev$sg(0x0, 0xffffffffffffffe1, 0x220000) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x1000, &(0x7f0000001400)=""/4106}, 0x18) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x0, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) socket$inet6_dccp(0xa, 0x6, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$inet(r2, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r6, &(0x7f0000000140)=[{&(0x7f0000000680)='*', 0x1}], 0x1) r7 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)) r8 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$UHID_DESTROY(r8, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r9}, 0x10) write$UHID_INPUT(r8, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) splice(r4, 0x0, r6, 0x0, 0xf3a, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) splice(r5, 0x0, r10, 0x0, 0x7f, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={0x0, 0x40}}, 0x0) 937.184864ms ago: executing program 2 (id=840): r0 = syz_io_uring_setup(0xd3f, &(0x7f0000000480), &(0x7f0000000080)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r0, 0xce3, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x4ac9, 0x0, 0x20000000, 0x0, 0x0) 904.745386ms ago: executing program 2 (id=842): bind$inet6(0xffffffffffffffff, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket(0x2a, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="9c0000000001010c00000000000000000a0000003c0001802c00018014000300fc00000000000000000000000000000014000400fe8800000000000000000000000000010c0002800500010000000000080003400000200e3c0002802c00018014000300ff01000000000000000000000000000114000400fe8000000000000000000000000000aa0c00028005000100000000000800074000000000c48e6a1425cba294f329c7163f3e9677cf279bef4f424eaac61901e70708a79da5adbef90416b5c66051e0e3baa8b6759a80f2a85ef04cd1e88e14dfa7435c8f87110e61bbaeefe4ad957b7442fc862829"], 0x9c}}, 0x0) r4 = socket$inet6(0xa, 0x3, 0x3c) r5 = creat(&(0x7f0000000000)='./file0\x00', 0x0) write$binfmt_script(r5, &(0x7f0000000040)={'#! ', '', [{0x20, 'devlink\x00'}, {0x20, 'netdevsim'}, {0x20, 'netdevsim\x00'}, {0x20, ')+/%$\\'}]}, 0x29) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r5, 0xc04c5349, &(0x7f0000001040)={0x1, 0x81, 0x80000001}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) socket$xdp(0x2c, 0x3, 0x0) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000200)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000001d00000008000300", @ANYRES32=r8, @ANYBLOB], 0x34}}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0xfd, 0x0, 0x0, 0xa2009, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) r9 = syz_genetlink_get_family_id$devlink(&(0x7f00000032c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(0xffffffffffffffff, &(0x7f00000033c0)={0x0, 0x0, &(0x7f0000003380)={&(0x7f0000000300)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="0100000000000000000054000000280001"], 0x3c}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r5, &(0x7f0000000580)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000600)=ANY=[@ANYBLOB="4c0019ca01f49c26592c64fa6a26e8770462d1933051d1b388aa57907dde9ffa7e62d0eb681daaa8759158a23b7ea8ee41803e6753aae20bd7ddea42d9288c3505adab68628ca23371e78be8829f4272d5850773561fa3", @ANYRES16=r9, @ANYBLOB="010028bd7000fedbdf25420000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000d0087006c325f64726f7073000000000500830001000000"], 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x4005) sendmmsg$inet(r4, &(0x7f0000002600)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000180)="3aae1baf930b4569b9ddef9797ffd935c7d80e6466b3e4cf2dc9603583f5d4b61fbc65b6ac744d7319535e75bf552062e4cfde1ba7ce2926332ce18ea9740aa82ca692f123993e57cda00d2b1f4e799bd41e3f76258180fa91a42aaa8b1ebc4e0ea8fb12f2c71e6e5bc57a8e91f2540055725be06b02b7e014c13c5606ae71eaf747920c99483b228dfb0b9fed873efa221fccffa847cd374c92e6cb994be885abcc6201326d588495b7c1a7cb31fd1af386b7905e273b28c5188cd296f3c4aea382875920daa85e1a8c7e", 0xcb}, {&(0x7f0000002840)="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", 0x474}], 0x2}}], 0x2, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x800, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0x0, 0x6}}}, 0x24}}, 0x50) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) 904.125296ms ago: executing program 1 (id=843): syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x0, 0x10, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) semtimedop(0x0, &(0x7f0000000200)=[{0x0, 0x2}, {}], 0x2, 0x0) (fail_nth: 2) timer_create(0x0, &(0x7f0000000540)={0x0, 0x12}, &(0x7f0000000580)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000200)={0x0, 0x13, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)=0x0) timer_settime(r0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 659.934846ms ago: executing program 2 (id=844): syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x147) write$binfmt_script(r0, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='netlink_extack\x00'}, 0x10) r2 = socket$rds(0x15, 0x5, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newlink={0x54, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL={0x5}, @IFLA_GENEVE_TOS={0x5}, @IFLA_GENEVE_DF={0x5}, @IFLA_GENEVE_ID={0x8}]}}}]}, 0x54}}, 0x0) ioctl$sock_ifreq(r2, 0x89fd, &(0x7f0000000100)={'bond0\x00', @ifru_names='ipvlan0\x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r1}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb0100180000000000000010000000100000000a000000074000000000000eeeffffff0100000000000000000000613000"], 0x0, 0x32}, 0x20) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x6, [@union={0x4, 0x1, 0x0, 0x5, 0x0, 0x0, [{0x5}]}]}, {0x0, [0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x36, 0x0, 0x1}, 0x20) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000000003000000050003000000000018"], 0x34}}, 0x0) modify_ldt$write(0x1, &(0x7f0000000040)={0x400}, 0x10) sendmsg$BATADV_CMD_GET_VLAN(r4, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x11011524}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x1c, 0x0, 0x10, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xb}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40800}, 0x8000) modify_ldt$read(0x0, &(0x7f0000001880)=""/4096, 0x1000) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="600000000206050000000000000000000000000005000400000000000900020073797a3200000000140007800800064000006a000800084000005fdc0500050002000000050001000600000011000300686173683a69702c706f7274"], 0x60}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x0, 0x10, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) semtimedop(0x0, &(0x7f0000000200)=[{0x0, 0x2}, {}], 0x2, 0x0) timer_create(0x0, &(0x7f0000000540)={0x0, 0x15, 0x1}, &(0x7f0000000580)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000200)={0x0, 0x13, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)=0x0) timer_settime(r6, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 648.545047ms ago: executing program 1 (id=845): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x16a, &(0x7f0000000340)={@local, @random="c4bc9cac9686", @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x134, 0x6, 0x0, @ipv4={'\x00', '\xff\xff', @local}, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x4d, 0xe2, 0x0, 0x0, 0x0, {[@timestamp={0x3, 0xa}, @exp_fastopen={0xfe, 0x8, 0xf989, "e8e82b84"}, @mptcp=@remove_addr={0x1e, 0xed, 0x1, 0x0, "ba495517694e251fd70c63eeccd2baa9d3f31c69a4c374c0170f7e6d7b52836d441001b7d0f4bf6242d30985824bf78875d73d6b9bf12289312a2a0acba4fb0e51418c196972faca42587b88a6eba4c0264dc702ae0fca1e90e6231f55523ff721f5d1322c5e19b64aaa7a9fdbe684d0d12dbadd65e97f21a1516e1dfc63d704a0ea779b0c395fb85d47a22ca9c22044cfec7f2a37c219fd9acb001a8c8ea9d2c56454fb8945ac2b0faee31c460c7adcf503129ae4b487f357fb970431aae8b06944a2972d116c725264566d7c4b013bdac531964b906facada3503f8b372cda8d963d5651f6367158df"}, @generic={0x0, 0xb, "3172752e1c33909b83"}, @window={0x3, 0x3}, @exp_fastopen={0xfe, 0xb, 0xf989, "00408000000000"}, @exp_smc={0xfe, 0x6}]}}}}}}}}, 0x0) 632.508229ms ago: executing program 2 (id=846): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$sock_int(r2, 0x1, 0x19, 0x0, &(0x7f00000000c0)) bind$unix(r1, &(0x7f0000366000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x10, &(0x7f0000000500)=ANY=[@ANYRES32=r5, @ANYBLOB="88d400000000000000000000000000f217110000", @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000850000002a000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000", @ANYRESHEX=r0, @ANYRESDEC=r0], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xfffffe8a) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r6, 0xfca804a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ptrace$setregs(0xd, r4, 0x0, &(0x7f0000000140)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fbf7c5cd62d8cb329815e4d17cb42b8eec0c60fca2926ac49f") ptrace$peekuser(0x3, r4, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000340)=ANY=[@ANYBLOB="9fe82658206dbbbbbbbabbbb88a81ffa6a9db930af0081003100ff00020188a806100004bbbb81000000000000000607d2e4b8ddc928f2328623b52e2d8a324104", @ANYRESDEC=r2], 0x0) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$bt_hci(r7, 0x0, 0x1, &(0x7f0000005480)=""/64, &(0x7f0000005500)=0xfffffffffffffec2) write$binfmt_aout(r3, &(0x7f0000000300)=ANY=[], 0xff2e) r8 = socket$netlink(0x10, 0x3, 0x15) sendmsg$netlink(r8, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="2000000011000100000000000000000008000000", @ANYRES32=r8, @ANYBLOB="08000000ac1404008da463c94bb64129eea25fd9f4a59827024309e4da16ab08fafd2d4d3eb6cee9607d53cc5ce3dd3c20c4c0ff6c33d50ad35e03978dc88b47a94ed3f11ac3f4d868c0f953c2c999d8cd37b3582f3cf236a1636b35c517e13536d8af66837534e436269dade7aca8714ae1aaa2a2136cd23122a2"], 0x20}], 0x1}, 0x0) syz_open_pts(r3, 0x0) readv(r3, &(0x7f00000013c0)=[{&(0x7f0000000080)=""/229, 0xe5}], 0x1) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r9, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r9, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x3}, 0x1c) clock_gettime(0x0, &(0x7f0000000080)) 631.951489ms ago: executing program 1 (id=847): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x4f, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="7800000010000100000000000000020000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008001b000000000050001a804c000a80140007"], 0x78}}, 0x0) 540.018246ms ago: executing program 2 (id=848): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x35, 0x0, 0x0, 0x3ffffd}, {0x20}, {0x6}]}) sendto$inet6(0xffffffffffffffff, &(0x7f0000000340)='0', 0x1, 0x0, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x1) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000002100)=""/4120, &(0x7f0000000000)=0x1018) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000940)={[{@stripe={'stripe', 0x3d, 0x80000000}}, {@dioread_nolock}, {@init_itable}, {@grpquota}, {@debug}, {@nojournal_checksum}]}, 0x4, 0x466, &(0x7f00000009c0)="$eJzs3c9vFFUcAPDv7Lblp3YliPJDraKR+KOlBZGDF40mHjQx0QMea7sQZKGG1kQIUTQGj4bEu/Fo4l/gSS9GPZl41bshIYYL6GnN7M60u8t06S4tC+7nkwy8N/O2731n5u28mdfdBjC0JtJ/kojtEfFHRIw3s+0FJpr/3bh2Ye6faxfmkqjX3/47aZS7fu3CXF40f922PDMSUfo8ib0F9S6eO39qtlarns3yU0unP5haPHf++ZOnZ09UT1TPzBw9evjQ9ItHZl5YlzjTuK7v+Xhh3+7X37385tyxy+/98l2Sx98RR6GRnquc6LbxqXq95x94N7uvJZ0U7auk6FWbNq5BrEk5O7VHG/1/PMotJ/p4vPbZQBsHbKh6vV7f1UidKNp8sQ78jyUx6BYAg5Ff6NP733y5g8OPgbv6cvMGKI37RrY0t4xEKSsz2nF/u54mIuLYxX+/TpdYy3MIAIDb9EM6/nmuaPxXil0t5e7P5lAqEfFAROyIiCMRsTMiHoxolH0oIh7usf7OSZKbxz+lK30Ftkbp+O+lbG6rffyXj/6iUo6V+YtKjCbHT9aqB7N9ciBGN6X56S51/Pjq71+utq11/Jcuaf35WDBrx5WRjmmS+dml2X7j7XT104g9I3n8Yy1bkuWZgDT03RGxp886Tj7z7b7VtrXHv7kg/i56n5O7Sf2biKebx/9itB3/lQmrpPv85NTmqFUPTuVnxc1+/e3SW6vVf+vj39ma9ZUe/62F5/9yjZWVumvVs4u913Hpzy9Wvafp9/wfS95pW/fR7NLS2emIseSNZqNb1890lJtZKZ/Gf2B/cf/fESt7Ym9EpCfxIxHxaEQ8lrX98Yh4IiL2d4n/51eefL//+DdWGv/8Go7/8nx9S2IsOtcUJ8qnfvq+rdJKL/Gnx/9wI3UgW7OW97+sgU1dGng7+w4AAADuFaWI2B5JaXI5XSpNTjZ/h39nbC3VFhaXnj2+8OGZ+eZnBCoxWsqfdI23PA+dzm7r8/xMR/5Q9tz4q/KWRn5ybqE2P+jgYchtW6X/p/4qD7p1wIZbh3k04B5V3P83asoZuJu4/sPw0v9heBWM9LcMoh3AnVd0/f9kAO0A7ryO/m/aD4aI+38YXvo/DC/9H4bS4pbo/uF9CYnCRJS6lhkr/MqI9j/6EP3UHt2/0EFinRK3fu8wbAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAO4F/wUAAP//Y6rWtg==") open(&(0x7f0000000100)='./bus\x00', 0x143142, 0x0) open_tree(0xffffffffffffff9c, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f00000004c0)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @dev}, {0x2, 0x0, @empty}}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f00000001c0)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @dev}, {0x2, 0x0, @empty}, 0x0, 0x0, 0x0, 0x0, 0x8}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f00000004c0)={0x0, {0x2, 0x0, @multicast2}, {0x2, 0x0, @multicast2}, {0x2, 0x0, @empty}, 0x200}) socket$key(0xf, 0x3, 0x2) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.io_wait_time\x00', 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x89f1, &(0x7f0000000900)={'ip6tnl0\x00', @random="0600002000"}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r5, 0x8953, &(0x7f0000000100)={{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x0, @random="4df193f35347"}, 0x0, {0x2, 0x0, @private}, 'syz_tun\x00'}) 539.173256ms ago: executing program 1 (id=849): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xa, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="660a0000020000000000000000000000009500000000000000"], &(0x7f0000000080)='syzkaller\x00'}, 0x90) socket(0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f00000000c0)={[{@user_xattr}, {@nombcache}, {@data_writeback}, {@norecovery}, {@dioread_nolock}, {@lazytime}, {@init_itable_val={'init_itable', 0x3d, 0x5}}, {@debug}, {@errors_continue}]}, 0xfe, 0x55d, &(0x7f0000000980)="$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") (async) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f00000000c0)={[{@user_xattr}, {@nombcache}, {@data_writeback}, {@norecovery}, {@dioread_nolock}, {@lazytime}, {@init_itable_val={'init_itable', 0x3d, 0x5}}, {@debug}, {@errors_continue}]}, 0xfe, 0x55d, &(0x7f0000000980)="$eJzs3d9rW1UcAPDvTX/sp66DMdQHKezByVy6tv6Y4MN8FB0O9H2G9q6Mpsto0rHWgduDe9mLDEHEgfgH+O7j8B/wrxjoYMgo+uBL5aY3XbYmbZZlSzSfD9ztnPuj55yce07OyUm4AQytyeyfQsSrEfFNEnGo6dho5AcnN89bf3htLtuS2Nj47M8kknxf4/wk//9AHnklIn79OuJEYXu61dW1xVK5nC7n8ana0uWp6urayYtLpYV0Ib00Mzt7+p3Zmfffe7dnZX3z3N/ff3r3o9O3jq1/9/P9w7eTOBMH82PN5XgG15sjkzGZvyZjceaJE6d7kNggSfqdAboykrfzscj6gEMxkrd64P/vq4jYAIZUov3DkGqMAxpz+x7Ng/8zHny4OQHaXv7Rzc9GYm99brR/PXlsZpTNdyd6kH6Wxi9/3LmdbdG7zyEAdnX9RkScGh3d3v8lef/XvVMdnPNkGvo/eHHuZuOft1qNfwpb459oMf450KLtdmP39l+43+KypFefUmfjvw9ajn+3Fq0mRvLYS/Ux31hy4WI5zfq2lyPieIztyeI7reecXr+30e5Y8/gv27L0G2PBPB/3R/c8fs18qVZ6ljI3e3Aj4rWW499kq/6TFvWfvR7nOkzjaHrn9XbHdi//87XxU8QbLev/0YpWsvP65FT9fphq3BXb/XXz6G/t0u93+bP6379z+SeS5vXa6tOn8ePef9J2x7q9/8eTz+vh8Xzf1VKttjwdMZ58sn3/zKNrG/HG+Vn5jx/buf9rdf/vi4gvOiz/zSM32546CPU//1T1//SBex9/+UO79Dur/7froeP5nk76v04z+CyvHQAAAAAAAAyaQkQcjKRQ3AoXCsXi5vc7jsT+QrlSrZ24UFm5NB/138pOxFihsdJ9qOn7ENP592Eb8Zkn4rMRcTgivh3ZV48X5yrl+X4XHgAAAAAAAAAAAAAAAAAAAAbEgTa//8/8PtLykvEXm0PgufLIbxheu7b/XjzpCRhI3v9heHXV/vf1Ph/Ai+f9H4bUWL8zAPST938YXto/DC/tH4aX9g8AAAAAAAAAAAAAAAAAAAAAAAAAAAA9de7s2WzbWH94bS6Lz19ZXVmsXDk5n1YXi0src8W5yvLl4kKlslBOi3OVpd3+XrlSuTw9EytXp2pptTZVXV07v1RZuVQ7f3GptJCeTz1tCAAAAAAAAAAAAAAAAAAAALarrq4tlsrldFlAoKvA6GBkQ6ApcKsHrbvPHRMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANPk3AAD//0unNek=") read(0xffffffffffffffff, 0x0, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, 0x0) r0 = socket(0x29, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000400)=@newqdisc={0x40, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_FLOWS={0x8, 0x5, 0x1}]}}]}, 0x40}}, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = dup(0xffffffffffffffff) write$UHID_INPUT(r3, &(0x7f0000001040)={0x9, {"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", 0x1000}}, 0x1006) (async) write$UHID_INPUT(r3, &(0x7f0000001040)={0x9, {"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", 0x1000}}, 0x1006) sendmsg$NFQNL_MSG_VERDICT(0xffffffffffffffff, 0x0, 0x0) (async) sendmsg$NFQNL_MSG_VERDICT(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) (async) bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$bt_hci(r4, 0x84, 0x1, &(0x7f00000010c0)=""/4105, &(0x7f0000000000)=0x1009) socket$inet_udplite(0x2, 0x2, 0x88) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="10000000", @ANYRES16=r5, @ANYRES8], 0x10}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000780)) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000780)) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r7 = syz_open_dev$sg(&(0x7f0000000240), 0x5, 0x2) ioctl$SG_GET_PACK_ID(r7, 0x227c, &(0x7f0000000400)) (async) ioctl$SG_GET_PACK_ID(r7, 0x227c, &(0x7f0000000400)) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.net/devices.allow\x00', 0x0, 0x0) 528.513978ms ago: executing program 3 (id=850): perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000040), 0x10) sendmsg$can_bcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB="05000000000000000000000000080000", @ANYRES64=0x0, @ANYRES64=0xea60, @ANYRES64=0x0, @ANYRES64=0xea60, @ANYBLOB="0000000001"], 0x48}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)=ANY=[@ANYBLOB="0500"/16, @ANYRES64=0x0, @ANYRES64, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x38}, 0x300}, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f00000005c0)={{0x1, 0x1, 0x19}, './file0\x00'}) r2 = socket(0x28, 0x5, 0x0) r3 = socket(0x28, 0x5, 0x0) listen(r3, 0x0) connect$vsock_stream(r2, &(0x7f0000000080), 0x10) accept4$unix(r3, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x8000, &(0x7f0000000340)={[{@debug}]}, 0x80, 0x62d, &(0x7f00000032c0)="$eJzs3c9rHNcdAPDvzEqyZauVXUqpTUsFPdhQvJZcU7c92e6hPhhqqA8h5GBhSY7w+geWDLZjsAw5JJBACLmG4Ev+gZBr0DXkFgKJbzkHnBCc5JAEb5jZWWuz2rU3kla78Xw+MDNv3szue98dvZ03MzuaAEprKhulEfsi4lwSMdmybCIaC6eK9R5+fft8NiRRr///qySSIq+5/qNiujsbJY3XfHwy4neV9eUu3bx1cbZWb7gTcXj50tXDSzdvHVq8NHth/sL85Zkj/zx6bPpfMx9uTZy7i+mp0//70+svv/iPhU9qh5I4HmdHX5qLtji2ylTj040sxNb8kYg4liU6fC6wnSrF3+NoRPwhJqOSzzVMxuJrA60c0Ff1SmP/VB+rA6WTxKBrAAxGsx/QPLbvx3HwMHtwIhvf6BD/SHH0vjM/Ntr1MGk5MspyI/ZsQfkrEfHj7f1vZ0N0OQ8xsgXldC3/bkT8sdP2T/L49+SRZvGnkba8LktPF+c2svr9ZxN1SFrSvf393dlEaT/3S+Jv3Q5Z/MeLaZZ/ssv7P+0Uz1TbfNnaHwCDsXqi2JFnHZFY2/9lPcNm/yfa+z/19/NrQ+37ro3ovv9Lt+Ddny7v/4102v839/c783142tYPS2Ll2zOd33K0PePzV0+92a38qZb+XzZk5Tf7gj3YdNfwwd2I/W3xv5J/9Mnj7Z906P9mq5zrsYz/fvrlqW7LNhn/ptXvRRzoePyz1ivNUm3XJ5NoXp88OnN4YbE2P90Ydyzjg49eeLdb+YOOP9v+u7rE/6Ttn+Vd7bGM987cu9RI7Vi3bOKp8adfjCVn89RYPl5rXmPJ6WKVxuTG7PLytSNPrktznXw604j/4F87t/8u8ecHH+PNr8weXH3u4sNuyza5/R/Ve1yxmyz+uQ1u/zd6LOO756//uduy9fGvnZMY32hQAAAAAAAAUFJpfg02SauP02laLS68/T52pbUrS8t/W7hy/fJcxMH895CjafNK92RjPsnmZ4rfwzbnj7TN/z0i9kbEW5XxfL56/kptbtDBAwAAAAAAAAAAAAAAAAAAwJDYXdz//6h4Htg3lTStVgddK2Db9PMBc8Bw0/6hvPL2vz3PWwOGjP0/lFfH9u9LAUpBU4fy0v6hvLR/KC/tH8pL+4fy6t7+1y252++6AAAAAABbZu9fVu+PRMTKv8fzITNWLBsdaM2AftPGobwqg64AMDCPL/C7/R9Kp6f+//fFPwfsf3WAAUg6Zeadg/qTG/9qx1cCAAAAAAAAAAAAAH1wYN/q/cT9/1BKbvuD8trY/f+Vjb8UGBqd/vW/x4FAOTjGh5Lr4STAzm4L3P8PAAAAAAAAAAAAANtmIh+StFr8DHgi0rRajfhNROyJ0WRhsTY/HRG/jYjPKqM7svmZQVcaAAAAAAAAAAAAAAAAAAAAnjFLN29dnK3V5q+1Jn5Yl/NsJ5pPPB2W+rQmIul7EWm05YxHxDDE3p/ESEtOErGSbfmteOdk838/MQyfT5EY8BcTAAAAAAAAAAAAAAAAAACUUMu9x53tf2ebawQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA22/t+f/9Sww6RgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg1+mnAAAA//+EYjvS") io_uring_setup(0x30d3, &(0x7f00000000c0)) syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000180)='./bus\x00', 0x400000, &(0x7f0000000500)=ANY=[@ANYBLOB="666c7573682c6e6f646f74732c646973636172642c646d61736b3d30303030303030303030303030303030303030303030322c646d61736b3d30303030303030303030303030303030303030303137372c646f74732c6e6f646f74732c71756965742c646f74732c0023c3cb4d2e3cbf18508098ee0de2af38db67d42d1bc4ab714d52f019082433fc9ca2d7174b2c4e5531c9f4c7a4d53914e100"/167], 0x1, 0x140, &(0x7f0000000000)="$eJzs27Fq21AUBuDj2m3ddvFcOgi6dDJtn6CluFAqaEnwkEwJOFnsYIgXJZMfJS8YCJ683ZAo2Imxhwy2IPq+RT/8CO4dpMMV6OjT2XAwnpyO/8+i3WhE60dkMW9EJ15FM0rTAABeknlKcZNSSm+n8e4qUkpVrwgA2DbzHwDqx/wHgPox/wGgfvYPDv/+zPPeXpa1I66nRb/ol9ey//0n733N7nWWd82Kot9c9N/KPnvav473D/33tf2b+PK57O+6X//ylf5DDLa/fQAAAKiFbraw9nzf7W7qy/To+8DK+b0VH1s72wYA8AyTi8vh8Wh0ci4IgrAIVb+ZgG1bPvRVrwQAAAAAAAAAAAAAANhkF78TVb1HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAWHUbAAD//0DvUik=") sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/sctp\x00') move_mount(0xffffffffffffffff, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 504.604749ms ago: executing program 1 (id=851): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x1e, &(0x7f00000001c0), 0x1, 0x42f, &(0x7f0000000940)="$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") r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) lseek(r0, 0x7ffffb, 0x0) socket$packet(0x11, 0x0, 0x300) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REQ_SET_REG(r1, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000240)={0x3, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_group_source_req(r2, 0x0, 0x2b, &(0x7f0000000040)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x108) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x16, &(0x7f00000002c0)=ANY=[@ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x90) r3 = socket$netlink(0x10, 0x3, 0x0) socket$inet(0x2, 0x3, 0x2) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010d00000000000000850a000000000000000500000014000500200100000000000000000100000000001c00090008000000", @ANYRES32=r4], 0x4c}}, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x75, 0x1a1281) ioctl$USBDEVFS_FREE_STREAMS(r5, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="02002303100007006000000002000020d3"]) ioctl$AUTOFS_IOC_FAIL(r5, 0x4008550c, 0xf0ff1f00000000) 285.832077ms ago: executing program 0 (id=852): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)) socket$inet6_mptcp(0xa, 0x1, 0x106) syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f00000004c0)={[{}]}, 0x1, 0x453, &(0x7f0000001040)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40086610, &(0x7f0000000140)={0x1, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$nl_generic(0x10, 0x3, 0x10) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r3) fremovexattr(r1, &(0x7f0000000000)=@known='system.posix_acl_default\x00') r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r4, 0x84, 0x1, 0x0, &(0x7f00000001c0)) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80080) write$P9_RVERSION(r5, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r6 = dup(r5) write$P9_RLERRORu(r6, &(0x7f0000000040)=ANY=[@ANYBLOB="8b"], 0x53) openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0), 0x840, 0x0) 284.545467ms ago: executing program 3 (id=853): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="7800000010000100"/20, @ANYRESOCT=r0, @ANYBLOB="000000000000000008001b000000000050001a804c000a80140007"], 0x78}}, 0x4000002) 280.102848ms ago: executing program 0 (id=854): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4000, &(0x7f0000000040)={0x2, &(0x7f0000000080)=[{0x35}, {0x6}]}) 216.188133ms ago: executing program 0 (id=855): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x4f, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="7800000010000100000000000000060000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008001b000000000050001a804c000a80140007"], 0x78}}, 0x0) 215.685173ms ago: executing program 3 (id=856): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xf0ff}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0) connect$unix(r0, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) dup3(r1, r0, 0x0) r6 = accept(r0, 0x0, 0x0) ioctl$SIOCGETMIFCNT_IN6(r6, 0x89e0, 0x0) 207.283013ms ago: executing program 0 (id=857): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) unshare(0x400) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1004c}, 0x90) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f00000002c0)={0x3, &(0x7f0000000300)=[{0x28, 0x0, 0x0, 0xfffff030}, {0x5}, {0x6}]}, 0x10) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000180)=@framed={{0x18, 0x8}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}, {}, {0x85, 0x0, 0x0, 0x19}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0}, 0x90) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000140)='\\', 0x1}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r3 = socket$inet(0x2, 0x3, 0x1) connect(r1, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, r3, {0x2, 0x4e22, @multicast2}, 0x2, 0x3, 0x1, 0x4}}, 0x80) 169.277707ms ago: executing program 0 (id=858): syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x147) write$binfmt_script(r0, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='netlink_extack\x00'}, 0x10) r2 = socket$rds(0x15, 0x5, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newlink={0x54, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL={0x5}, @IFLA_GENEVE_TOS={0x5}, @IFLA_GENEVE_DF={0x5}, @IFLA_GENEVE_ID={0x8}]}}}]}, 0x54}}, 0x0) ioctl$sock_ifreq(r2, 0x89fd, &(0x7f0000000100)={'bond0\x00', @ifru_names='ipvlan0\x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r1}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb0100180000000000000010000000100000000a000000074000000000000eeeffffff0100000000000000000000613000"], 0x0, 0x32}, 0x20) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x6, [@union={0x4, 0x1, 0x0, 0x5, 0x0, 0x0, [{0x5}]}]}, {0x0, [0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x36, 0x0, 0x1}, 0x20) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000000003000000050003000000000018"], 0x34}}, 0x0) modify_ldt$write(0x1, &(0x7f0000000040)={0x400}, 0x10) sendmsg$BATADV_CMD_GET_VLAN(r4, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x11011524}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x1c, 0x0, 0x10, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xb}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40800}, 0x8000) modify_ldt$read(0x0, &(0x7f0000001880)=""/4096, 0x1000) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="600000000206050000000000000000000000000005000400000000000900020073797a3200000000140007800800064000006a000800084000005fdc0500050002000000050001000600000011000300686173683a69702c706f7274"], 0x60}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x0, 0x10, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) semtimedop(0x0, &(0x7f0000000200)=[{0x0, 0x2}, {}], 0x2, 0x0) timer_create(0x0, &(0x7f0000000540)={0x0, 0x15, 0x1}, &(0x7f0000000580)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000200)={0x0, 0x13, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)=0x0) timer_settime(r6, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 157.214868ms ago: executing program 1 (id=859): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$sock_int(r2, 0x1, 0x19, 0x0, &(0x7f00000000c0)) bind$unix(r1, &(0x7f0000366000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x10, &(0x7f0000000500)=ANY=[@ANYRES32=r5, @ANYBLOB="88d400000000000000000000000000f217110000", @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000850000002a000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000", @ANYRESHEX=r0, @ANYRESDEC=r0], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xfffffe8a) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r6, 0xfca804a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ptrace$setregs(0xd, r4, 0x0, &(0x7f0000000140)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fbf7c5cd62d8cb329815e4d17cb42b8eec0c60fca2926ac49f") ptrace$peekuser(0x3, r4, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000340)=ANY=[@ANYBLOB="9fe82658206dbbbbbbbabbbb88a81ffa6a9db930af0081003100ff00020188a806100004bbbb81000000000000000607d2e4b8ddc928f2328623b52e2d8a324104", @ANYRESDEC=r2], 0x0) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$bt_hci(r7, 0x0, 0x1, &(0x7f0000005480)=""/64, &(0x7f0000005500)=0xfffffffffffffec2) write$binfmt_aout(r3, &(0x7f0000000300)=ANY=[], 0xff2e) r8 = socket$netlink(0x10, 0x3, 0x15) sendmsg$netlink(r8, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="2000000011000100000000000000000008000000", @ANYRES32=r8, @ANYBLOB="08000000ac1404008da463c94bb64129eea25fd9f4a59827024309e4da16ab08fafd2d4d3eb6cee9607d53cc5ce3dd3c20c4c0ff6c33d50ad35e03978dc88b47a94ed3f11ac3f4d868c0f953c2c999d8cd37b3582f3cf236a1636b35c517e13536d8af66837534e436269dade7aca8714ae1aaa2a2136cd23122a2"], 0x20}], 0x1}, 0x0) syz_open_pts(r3, 0x0) readv(r3, &(0x7f00000013c0)=[{&(0x7f0000000080)=""/229, 0xe5}], 0x1) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r9, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r9, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x3}, 0x1c) clock_gettime(0x0, &(0x7f0000000080)) 25.516688ms ago: executing program 3 (id=860): r0 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0x0) r1 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3000000, 0x100010, 0xffffffffffffffff, 0x10000000) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r0, r1, &(0x7f00000000c0)=@IORING_OP_TIMEOUT={0xb, 0x6, 0x0, 0x0, 0x2, &(0x7f0000000040), 0x1, 0x1, 0x0, {0x0, r2}}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) syz_open_dev$sg(0x0, 0x0, 0x5) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newlink={0x38, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x0, 0x1800}, [@IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_RATE={0x10}]}]}]}, 0x38}}, 0x0) 24.562169ms ago: executing program 3 (id=861): r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) listen(r0, 0x800803fe) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x4e20, @local}, 0x10) r2 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$pppoe(0x18, 0x1, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r2, 0xd000943e, &(0x7f0000000440)={0x0, 0x0, "4d6bd52e95aa703bb205e52b90ae97279392bd32edf9855ad07b7dbb93de440d4c39a307a7220656b4f6c17937322ccd0fa7846f7df7f1c6e69c0c4d8e23b5843ef0c646727d75ab1444e8855c07c7ea5561279c42379efc9dd731292e8e916a4c8bcb6048f99784bf7ce3ccf75d38fed4a068b260affacb618d66243b50a364c2c042ebde2c75af832d31e7645ba35a0746018c9d5b9040867512d65b1977245f29b92662bc38f1dd3219155f9d6ac58bdb648895b036a75f9bc4086eff56e0728816837e40293b7b353041e52f5ba8f5557d66b2f5700e7818396cb7423b60567afdeafc3b2139e446717f252395de10337ed7ecdd788a1c43d3192c09ee17", "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"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r3, 0xc0709411, &(0x7f0000000000)={{r4, 0x9, 0x9, 0xf60, 0x8000000000000001, 0xabd, 0x6, 0xb197, 0x3, 0x8, 0x7fff, 0x10, 0x1, 0x4, 0x7}, 0x28, [0x0, 0x0, 0x0, 0x0, 0x0]}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x6e002, 0x0) 0s ago: executing program 3 (id=862): bpf$ENABLE_STATS(0x20, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000200)={'syztnl1\x00', &(0x7f0000000140)={'erspan0\x00', 0x0, 0x8, 0x7a8, 0x67, 0x12, {{0xf, 0x4, 0x2, 0x7, 0x3c, 0x66, 0x0, 0xf1, 0x2f, 0x0, @multicast1, @multicast2, {[@timestamp={0x44, 0x20, 0x52, 0x0, 0xa, [0x2364, 0x0, 0x6, 0xffffffff, 0x8, 0x2, 0x4]}, @lsrr={0x83, 0x7, 0x1a, [@initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}}}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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"/3143], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x90) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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"/3143], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r1, 0x31, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4e, 0x0, 0x0, 0xfffffffffffffe9a, 0x0, 0x0, 0x0, 0x0}}, 0x10) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_type(r2, &(0x7f0000000100), 0x2, 0x0) (async) r3 = openat$cgroup_type(r2, &(0x7f0000000100), 0x2, 0x0) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000040)) r5 = syz_io_uring_setup(0xd79, &(0x7f00000035c0)={0x0, 0xfffffffc, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000003580)=0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000300)=@in={0x2, 0x0, @local}}) io_uring_enter(r5, 0x291c, 0x0, 0x0, 0x0, 0x0) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000080)=0x9) (async) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000080)=0x9) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) (async) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r8 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000640)='blkio.bfq.io_service_bytes_recursive\x00', 0x0, 0x0) io_uring_enter(r8, 0x168f, 0xf35e, 0x26, &(0x7f0000000680)={[0x101]}, 0x8) (async) io_uring_enter(r8, 0x168f, 0xf35e, 0x26, &(0x7f0000000680)={[0x101]}, 0x8) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000000)=0x7f) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) (async) r9 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$SCSI_IOCTL_GET_PCI(r9, 0x227f, 0x0) openat$cgroup_int(r2, &(0x7f0000000080)='cpuset.memory_spread_page\x00', 0x2, 0x0) (async) openat$cgroup_int(r2, &(0x7f0000000080)='cpuset.memory_spread_page\x00', 0x2, 0x0) write$cgroup_type(r3, &(0x7f00000000c0), 0x9) kernel console output (not intermixed with test programs): NG: The mand mount option has been deprecated and [ 53.805046][ T4463] and is ignored by this kernel. Remove the mand [ 53.805046][ T4463] option from the mount to silence this warning. [ 53.805046][ T4463] ======================================================= [ 53.842217][ T4463] EXT4-fs: Ignoring removed oldalloc option [ 53.850238][ T4463] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 53.863087][ T4463] ext4 filesystem being mounted at /82/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 53.906961][ T4232] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.931480][ T4473] loop3: detected capacity change from 0 to 128 [ 53.939716][ T4473] vfat: Unknown parameter '1844674407370955161518446744073709551615' [ 53.958950][ T3093] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 53.977644][ T4473] loop3: detected capacity change from 0 to 256 [ 54.003149][ T4481] netlink: 12 bytes leftover after parsing attributes in process `syz.4.431'. [ 54.016658][ T4479] loop0: detected capacity change from 0 to 512 [ 54.021199][ T4485] loop2: detected capacity change from 0 to 1024 [ 54.027742][ T4479] EXT4-fs: Ignoring removed nobh option [ 54.035215][ T4479] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 54.046818][ T4485] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.047618][ T4479] EXT4-fs (loop0): 1 truncate cleaned up [ 54.065830][ T4479] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.091789][ T4494] loop3: detected capacity change from 0 to 512 [ 54.095851][ T4485] netlink: 8 bytes leftover after parsing attributes in process `syz.2.432'. [ 54.104014][ T4495] loop4: detected capacity change from 0 to 512 [ 54.106876][ T4485] netlink: 16 bytes leftover after parsing attributes in process `syz.2.432'. [ 54.114119][ T4494] ext2: Unknown parameter 'euid<00000000000000000000' [ 54.122548][ T4495] EXT4-fs: Ignoring removed bh option [ 54.133677][ T3091] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.144702][ T3093] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.146721][ T4495] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 54.166189][ T4495] EXT4-fs (loop4): 1 truncate cleaned up [ 54.172385][ T4495] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.175730][ T4498] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 54.214284][ T4503] loop0: detected capacity change from 0 to 128 [ 54.227817][ T4498] loop2: detected capacity change from 0 to 1024 [ 54.239879][ T4498] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.252313][ T3091] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 54.260211][ T3091] FAT-fs (loop0): Filesystem has been set read-only [ 54.268544][ T3093] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.309638][ T4510] IPVS: set_ctl: invalid protocol: 43 224.0.0.1:20000 [ 54.318323][ T4508] loop2: detected capacity change from 0 to 2048 [ 54.358930][ T4508] loop2: p1 < > p3 [ 54.363836][ T4508] loop2: p3 size 134217728 extends beyond EOD, truncated [ 54.388703][ C0] eth0: bad gso: type: 1, size: 1408 [ 54.403022][ C0] eth0: bad gso: type: 1, size: 1408 [ 54.417051][ T4524] loop1: detected capacity change from 0 to 128 [ 54.563917][ T3583] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.611371][ T3583] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.640092][ T4528] loop1: detected capacity change from 0 to 2048 [ 54.660996][ T3583] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.677733][ T4528] loop1: p1 < > p3 [ 54.682243][ T4528] loop1: p3 size 134217728 extends beyond EOD, truncated [ 54.713823][ T3583] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.730615][ T4537] loop1: detected capacity change from 0 to 764 [ 54.765979][ T4537] rock: directory entry would overflow storage [ 54.772213][ T4537] rock: sig=0x4f50, size=4, remaining=3 [ 54.777930][ T4537] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 54.789195][ T3583] bridge_slave_1: left allmulticast mode [ 54.794897][ T3583] bridge_slave_1: left promiscuous mode [ 54.800639][ T3583] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.809465][ T3583] bridge_slave_0: left allmulticast mode [ 54.815545][ T3583] bridge_slave_0: left promiscuous mode [ 54.821305][ T3583] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.894775][ T4232] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.920647][ T3583] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 54.927351][ T4548] qrtr: Invalid version 7 [ 54.938231][ T3583] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 54.950253][ T3583] bond0 (unregistering): Released all slaves [ 55.005256][ T3583] tipc: Left network mode [ 55.022816][ T4529] chnl_net:caif_netlink_parms(): no params data found [ 55.041502][ T3583] hsr_slave_0: left promiscuous mode [ 55.047972][ T3583] hsr_slave_1: left promiscuous mode [ 55.051623][ T4561] netlink: 'syz.4.456': attribute type 29 has an invalid length. [ 55.061286][ T3583] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 55.068785][ T3583] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 55.076770][ T3583] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 55.084237][ T3583] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 55.093771][ T3583] veth1_macvtap: left promiscuous mode [ 55.099351][ T3583] veth0_macvtap: left promiscuous mode [ 55.104933][ T3583] veth1_vlan: left promiscuous mode [ 55.110265][ T3583] veth0_vlan: left promiscuous mode [ 55.196270][ T3583] team0 (unregistering): Port device team_slave_1 removed [ 55.207478][ T3583] team0 (unregistering): Port device team_slave_0 removed [ 55.256468][ T4561] tipc: Started in network mode [ 55.261422][ T4561] tipc: Node identity fe800000000000000000000000000013, cluster identity 4711 [ 55.270787][ T4561] tipc: Enabled bearer , priority 10 [ 55.296317][ T4529] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.296319][ T4568] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4568 comm=syz.2.458 [ 55.315874][ T4529] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.323098][ T4529] bridge_slave_0: entered allmulticast mode [ 55.329695][ T4529] bridge_slave_0: entered promiscuous mode [ 55.336851][ T4529] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.344046][ T4529] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.351457][ T4529] bridge_slave_1: entered allmulticast mode [ 55.358528][ T4529] bridge_slave_1: entered promiscuous mode [ 55.380145][ T4529] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.393291][ T4529] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.396864][ T4573] loop4: detected capacity change from 0 to 512 [ 55.427891][ T4529] team0: Port device team_slave_0 added [ 55.434615][ T4529] team0: Port device team_slave_1 added [ 55.455705][ T4529] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.462740][ T4529] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.488812][ T4529] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.500319][ T4529] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.507556][ T4529] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.533764][ T4529] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.549210][ T4589] team0: Device ipvlan1 failed to register rx_handler [ 55.586154][ T4529] hsr_slave_0: entered promiscuous mode [ 55.592975][ T4529] hsr_slave_1: entered promiscuous mode [ 55.615979][ T4599] netlink: 'syz.2.468': attribute type 29 has an invalid length. [ 55.620313][ T4597] loop4: detected capacity change from 0 to 2048 [ 55.632958][ T4599] tipc: Enabled bearer , priority 10 [ 55.667892][ T4597] loop4: p1 < > p4 [ 55.676874][ T4597] loop4: p4 size 8388608 extends beyond EOD, truncated [ 55.752369][ T4608] FAULT_INJECTION: forcing a failure. [ 55.752369][ T4608] name failslab, interval 1, probability 0, space 0, times 0 [ 55.765171][ T4608] CPU: 1 UID: 0 PID: 4608 Comm: syz.1.472 Not tainted 6.10.0-syzkaller-12030-g66ebbdfdeb09 #0 [ 55.775523][ T4608] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 55.785603][ T4608] Call Trace: [ 55.788900][ T4608] [ 55.791840][ T4608] dump_stack_lvl+0xf2/0x150 [ 55.796500][ T4608] dump_stack+0x15/0x20 [ 55.800759][ T4608] should_fail_ex+0x229/0x230 [ 55.805638][ T4608] ? alloc_pipe_info+0xb0/0x360 [ 55.805664][ T4610] loop3: detected capacity change from 0 to 128 [ 55.810503][ T4608] should_failslab+0x8f/0xb0 [ 55.821393][ T4608] __kmalloc_cache_noprof+0x4b/0x2a0 [ 55.826809][ T4608] ? _parse_integer+0x27/0x30 [ 55.831513][ T4608] alloc_pipe_info+0xb0/0x360 [ 55.836222][ T4608] splice_direct_to_actor+0x615/0x670 [ 55.837761][ T4610] vfat: Unknown parameter 'iocharsEt' [ 55.841655][ T4608] ? kstrtouint_from_user+0xb0/0xe0 [ 55.841687][ T4608] ? __pfx_direct_splice_actor+0x10/0x10 [ 55.857889][ T4608] ? avc_policy_seqno+0x15/0x20 [ 55.862761][ T4608] ? selinux_file_permission+0x22c/0x360 [ 55.868431][ T4608] do_splice_direct+0xd7/0x150 [ 55.873254][ T4608] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 55.879204][ T4608] do_sendfile+0x3ab/0x950 [ 55.883656][ T4608] __x64_sys_sendfile64+0x110/0x150 [ 55.888876][ T4608] x64_sys_call+0xfc3/0x2e00 [ 55.893568][ T4608] do_syscall_64+0xc9/0x1c0 [ 55.898220][ T4608] ? clear_bhb_loop+0x55/0xb0 [ 55.902966][ T4608] ? clear_bhb_loop+0x55/0xb0 [ 55.907732][ T4608] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 55.913777][ T4608] RIP: 0033:0x7ff23cef5f19 [ 55.918268][ T4608] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 55.937891][ T4608] RSP: 002b:00007ff23bb77048 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 55.946311][ T4608] RAX: ffffffffffffffda RBX: 00007ff23d085f60 RCX: 00007ff23cef5f19 [ 55.954295][ T4608] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004 [ 55.962313][ T4608] RBP: 00007ff23bb770a0 R08: 0000000000000000 R09: 0000000000000000 [ 55.970288][ T4608] R10: 000000007ffff000 R11: 0000000000000246 R12: 0000000000000001 [ 55.978262][ T4608] R13: 000000000000000b R14: 00007ff23d085f60 R15: 00007ffe221ca188 [ 55.986241][ T4608] [ 56.004944][ T4615] __nla_validate_parse: 3 callbacks suppressed [ 56.004963][ T4615] netlink: 28 bytes leftover after parsing attributes in process `syz.2.473'. [ 56.020122][ T4615] netlink: 28 bytes leftover after parsing attributes in process `syz.2.473'. [ 56.100642][ T4629] macvlan0: entered allmulticast mode [ 56.106061][ T4629] veth1_vlan: entered allmulticast mode [ 56.164845][ T4631] netlink: 'syz.4.481': attribute type 29 has an invalid length. [ 56.175801][ T4631] tipc: Enabling of bearer rejected, already enabled [ 56.184610][ T29] kauditd_printk_skb: 612 callbacks suppressed [ 56.184632][ T29] audit: type=1326 audit(1721752028.380:1287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4626 comm="syz.2.479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa034db5f19 code=0x7fc00000 [ 56.192969][ T4639] qrtr: Invalid version 7 [ 56.222955][ T29] audit: type=1326 audit(1721752028.390:1288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4626 comm="syz.2.479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa034db5f19 code=0x7fc00000 [ 56.242945][ T4529] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 56.262972][ T4529] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 56.272567][ T4529] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 56.279453][ T3162] tipc: Node number set to 4269801491 [ 56.289684][ T4529] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 56.309870][ T4529] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.317041][ T4529] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.324353][ T4529] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.331706][ T4529] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.354940][ T3162] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.363593][ T3162] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.363969][ T4655] loop4: detected capacity change from 0 to 512 [ 56.379161][ T4655] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 56.390786][ T4655] EXT4-fs (loop4): 1 truncate cleaned up [ 56.396834][ T4655] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 56.413598][ T4655] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 56.438909][ T4529] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.453364][ T4529] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.463458][ T29] audit: type=1400 audit(1721752028.660:1289): avc: denied { ioctl } for pid=4661 comm="syz.1.491" path="/dev/input/event1" dev="devtmpfs" ino=218 ioctlcmd=0x45a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 56.463516][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.463558][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.505589][ T29] audit: type=1400 audit(1721752028.690:1290): avc: denied { read } for pid=4661 comm="syz.1.491" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 56.528841][ T29] audit: type=1400 audit(1721752028.690:1291): avc: denied { open } for pid=4661 comm="syz.1.491" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 56.530209][ T4529] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 56.562917][ T4529] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 56.573318][ T29] audit: type=1400 audit(1721752028.700:1292): avc: denied { ioctl } for pid=4661 comm="syz.1.491" path="/dev/autofs" dev="devtmpfs" ino=91 ioctlcmd=0x937e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 56.604223][ T3161] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.611379][ T3161] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.681045][ T4232] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.692388][ T4529] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.736031][ T4679] netlink: 'syz.3.492': attribute type 10 has an invalid length. [ 56.756003][ T4689] 9pnet_fd: Insufficient options for proto=fd [ 56.763570][ T4679] netlink: 100 bytes leftover after parsing attributes in process `syz.3.492'. [ 56.772860][ T4679] netlink: 100 bytes leftover after parsing attributes in process `syz.3.492'. [ 56.789690][ T4687] loop1: detected capacity change from 0 to 512 [ 56.798673][ T4687] EXT4-fs (loop1): invalid inodes per group: 11 [ 56.798673][ T4687] [ 56.851800][ T4697] loop4: detected capacity change from 0 to 1024 [ 56.865957][ T4529] veth0_vlan: entered promiscuous mode [ 56.869618][ T4702] loop1: detected capacity change from 0 to 128 [ 56.875384][ T4529] veth1_vlan: entered promiscuous mode [ 56.883951][ T4697] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 56.895046][ T4697] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 56.903130][ T4697] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e840e018, mo2=0000] [ 56.904010][ T4529] veth0_macvtap: entered promiscuous mode [ 56.913541][ T4697] System zones: 0-1, 3-12 [ 56.921673][ T4697] EXT4-fs (loop4): orphan cleanup on readonly fs [ 56.925341][ T4529] veth1_macvtap: entered promiscuous mode [ 56.933880][ T4697] EXT4-fs error (device loop4): ext4_free_blocks:6590: comm syz.4.500: Freeing blocks not in datazone - block = 0, count = 4096 [ 56.952804][ T4529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.963301][ T4529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.968717][ T29] audit: type=1326 audit(1721752029.130:1293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4626 comm="syz.2.479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa034db5f19 code=0x7fc00000 [ 56.973143][ T4529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.996500][ T29] audit: type=1326 audit(1721752029.130:1294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4626 comm="syz.2.479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa034db5f19 code=0x7fc00000 [ 57.006810][ T4529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.006830][ T4529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.006870][ T4529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.006887][ T4529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.030105][ T29] audit: type=1326 audit(1721752029.130:1295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4626 comm="syz.2.479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa034db5f19 code=0x7fc00000 [ 57.039874][ T4529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.042062][ T4529] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.050310][ T29] audit: type=1326 audit(1721752029.130:1296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4626 comm="syz.2.479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa034db5f19 code=0x7fc00000 [ 57.066389][ T4529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.072391][ T4697] EXT4-fs (loop4): 1 orphan inode deleted [ 57.094006][ T4529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.094024][ T4529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.106718][ T4697] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 57.111103][ T4529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.111120][ T4529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.111136][ T4529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.111150][ T4529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.111165][ T4529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.129899][ T4529] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.245325][ T4529] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.254107][ T4529] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.262959][ T4529] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.267963][ T4717] loop2: detected capacity change from 0 to 512 [ 57.272042][ T4529] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.280369][ T4717] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 57.300146][ T4717] EXT4-fs (loop2): 1 truncate cleaned up [ 57.307050][ T4717] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 57.332176][ T4717] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 57.392644][ T4722] loop0: detected capacity change from 0 to 4096 [ 57.399682][ T4722] EXT4-fs: Ignoring removed nobh option [ 57.405312][ T4722] EXT4-fs: Ignoring removed i_version option [ 57.413559][ T4722] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 57.444767][ T4529] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.472255][ T4730] netlink: 20 bytes leftover after parsing attributes in process `syz.0.508'. [ 57.472677][ T4728] 9pnet_fd: Insufficient options for proto=fd [ 57.488689][ T4730] loop0: detected capacity change from 0 to 1024 [ 57.498876][ T4730] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 57.531131][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 57.556069][ T4529] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.565986][ T3093] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.585496][ T4738] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4096 sclass=netlink_route_socket pid=4738 comm=syz.0.511 [ 57.614466][ T4747] netlink: 'syz.0.514': attribute type 4 has an invalid length. [ 57.628697][ T4747] loop0: detected capacity change from 0 to 512 [ 57.639788][ T4747] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 57.652403][ T4747] ext4 filesystem being mounted at /3/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 57.665348][ T4747] netlink: 14601 bytes leftover after parsing attributes in process `syz.0.514'. [ 57.687145][ T4529] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.691228][ T4751] qrtr: Invalid version 7 [ 57.709999][ T4753] loop0: detected capacity change from 0 to 512 [ 57.738260][ T4750] qrtr: Invalid version 7 [ 57.782531][ T4753] syzkaller0: entered promiscuous mode [ 57.788115][ T4753] syzkaller0: entered allmulticast mode [ 58.131856][ T4761] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4761 comm=syz.1.517 [ 58.149764][ T4761] loop1: detected capacity change from 0 to 512 [ 58.159064][ T4761] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 58.171675][ T4761] ext4 filesystem being mounted at /65/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 58.184427][ T4761] netlink: 14601 bytes leftover after parsing attributes in process `syz.1.517'. [ 58.194306][ T4761] netlink: 12 bytes leftover after parsing attributes in process `syz.1.517'. [ 58.214673][ T3420] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.478630][ T4786] loop2: detected capacity change from 0 to 512 [ 58.485937][ T4786] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 58.498729][ T4786] EXT4-fs (loop2): 1 truncate cleaned up [ 58.505911][ T4786] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 58.554411][ T4794] loop3: detected capacity change from 0 to 128 [ 58.562395][ T4794] netlink: 128 bytes leftover after parsing attributes in process `syz.3.528'. [ 58.619494][ T4804] loop3: detected capacity change from 0 to 512 [ 58.626468][ T4804] EXT4-fs (loop3): unable to read superblock [ 58.653483][ T4808] loop3: detected capacity change from 0 to 512 [ 58.661441][ T4813] netlink: 'syz.1.534': attribute type 4 has an invalid length. [ 58.678849][ T4813] loop1: detected capacity change from 0 to 512 [ 58.688990][ T4813] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 58.701585][ T4813] ext4 filesystem being mounted at /74/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 58.714874][ T4813] netlink: 14601 bytes leftover after parsing attributes in process `syz.1.534'. [ 58.725980][ T4813] FAULT_INJECTION: forcing a failure. [ 58.725980][ T4813] name failslab, interval 1, probability 0, space 0, times 0 [ 58.738686][ T4813] CPU: 0 UID: 0 PID: 4813 Comm: syz.1.534 Not tainted 6.10.0-syzkaller-12030-g66ebbdfdeb09 #0 [ 58.748949][ T4813] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 58.759066][ T4813] Call Trace: [ 58.762420][ T4813] [ 58.765351][ T4813] dump_stack_lvl+0xf2/0x150 [ 58.770048][ T4813] dump_stack+0x15/0x20 [ 58.774256][ T4813] should_fail_ex+0x229/0x230 [ 58.778981][ T4813] ? __kvmalloc_node_noprof+0x72/0x170 [ 58.784450][ T4813] should_failslab+0x8f/0xb0 [ 58.789142][ T4813] __kmalloc_node_noprof+0xa8/0x380 [ 58.794425][ T4813] __kvmalloc_node_noprof+0x72/0x170 [ 58.799756][ T4813] alloc_netdev_mqs+0x9d/0x8d0 [ 58.804596][ T4813] ? __pfx_geneve_setup+0x10/0x10 [ 58.809753][ T4813] rtnl_create_link+0x233/0x680 [ 58.814700][ T4813] rtnl_newlink+0xe12/0x1690 [ 58.819385][ T4813] ? security_capable+0x64/0x80 [ 58.824279][ T4813] ? ns_capable+0x7d/0xb0 [ 58.828713][ T4813] ? __pfx_rtnl_newlink+0x10/0x10 [ 58.833913][ T4813] rtnetlink_rcv_msg+0x6aa/0x710 [ 58.838868][ T4813] ? ref_tracker_free+0x3a5/0x410 [ 58.843946][ T4813] ? __dev_queue_xmit+0x161/0x1fe0 [ 58.849163][ T4813] netlink_rcv_skb+0x12c/0x230 [ 58.853939][ T4813] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 58.859460][ T4813] rtnetlink_rcv+0x1c/0x30 [ 58.863953][ T4813] netlink_unicast+0x593/0x670 [ 58.868751][ T4813] netlink_sendmsg+0x5cc/0x6e0 [ 58.873567][ T4813] ? __pfx_netlink_sendmsg+0x10/0x10 [ 58.878945][ T4813] __sock_sendmsg+0x140/0x180 [ 58.883630][ T4813] ____sys_sendmsg+0x312/0x410 [ 58.888528][ T4813] __sys_sendmsg+0x1e9/0x280 [ 58.893244][ T4813] __x64_sys_sendmsg+0x46/0x50 [ 58.898082][ T4813] x64_sys_call+0x26f8/0x2e00 [ 58.902813][ T4813] do_syscall_64+0xc9/0x1c0 [ 58.907411][ T4813] ? clear_bhb_loop+0x55/0xb0 [ 58.912166][ T4813] ? clear_bhb_loop+0x55/0xb0 [ 58.916859][ T4813] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 58.922829][ T4813] RIP: 0033:0x7ff23cef5f19 [ 58.927253][ T4813] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 58.947198][ T4813] RSP: 002b:00007ff23bb77048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 58.955626][ T4813] RAX: ffffffffffffffda RBX: 00007ff23d085f60 RCX: 00007ff23cef5f19 [ 58.963603][ T4813] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 000000000000000b [ 58.971596][ T4813] RBP: 00007ff23bb770a0 R08: 0000000000000000 R09: 0000000000000000 [ 58.979683][ T4813] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 58.987702][ T4813] R13: 000000000000000b R14: 00007ff23d085f60 R15: 00007ffe221ca188 [ 58.996116][ T4813] [ 59.000056][ T4818] qrtr: Invalid version 7 [ 59.015701][ T4232] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.026944][ T3420] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.049899][ T4822] FAULT_INJECTION: forcing a failure. [ 59.049899][ T4822] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 59.063182][ T4822] CPU: 0 UID: 0 PID: 4822 Comm: syz.1.537 Not tainted 6.10.0-syzkaller-12030-g66ebbdfdeb09 #0 [ 59.073627][ T4822] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 59.083690][ T4822] Call Trace: [ 59.087042][ T4822] [ 59.089976][ T4822] dump_stack_lvl+0xf2/0x150 [ 59.094595][ T4822] dump_stack+0x15/0x20 [ 59.098755][ T4822] should_fail_ex+0x229/0x230 [ 59.103449][ T4822] should_fail+0xb/0x10 [ 59.107620][ T4822] should_fail_usercopy+0x1a/0x20 [ 59.112661][ T4822] _copy_from_user+0x1e/0xd0 [ 59.117286][ T4822] kstrtouint_from_user+0x76/0xe0 [ 59.122328][ T4822] proc_fail_nth_write+0x4f/0x160 [ 59.127422][ T4822] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 59.133123][ T4822] vfs_write+0x28b/0x900 [ 59.137385][ T4822] ? __fget_files+0x1da/0x210 [ 59.142134][ T4822] ksys_write+0xeb/0x1b0 [ 59.146435][ T4822] __x64_sys_write+0x42/0x50 [ 59.151055][ T4822] x64_sys_call+0x2a40/0x2e00 [ 59.155859][ T4822] do_syscall_64+0xc9/0x1c0 [ 59.160431][ T4822] ? clear_bhb_loop+0x55/0xb0 [ 59.165144][ T4822] ? clear_bhb_loop+0x55/0xb0 [ 59.169888][ T4822] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 59.175806][ T4822] RIP: 0033:0x7ff23cef4a9f [ 59.180228][ T4822] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 29 8c 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 7c 8c 02 00 48 [ 59.199851][ T4822] RSP: 002b:00007ff23bb77040 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 59.208272][ T4822] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007ff23cef4a9f [ 59.216250][ T4822] RDX: 0000000000000001 RSI: 00007ff23bb770b0 RDI: 0000000000000006 [ 59.224229][ T4822] RBP: 00007ff23bb770a0 R08: 0000000000000000 R09: 0000000000000000 [ 59.232267][ T4822] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 59.240249][ T4822] R13: 000000000000000b R14: 00007ff23d085f60 R15: 00007ffe221ca188 [ 59.248278][ T4822] [ 59.297025][ T4827] A link change request failed with some changes committed already. Interface veth0_to_bond may have been left with an inconsistent configuration, please check. [ 59.324045][ T3093] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.377069][ T4836] cgroup: Unknown subsys name 'fowner>00000000000000000000' [ 59.380149][ T4830] sctp: [Deprecated]: syz.2.540 (pid 4830) Use of int in maxseg socket option. [ 59.380149][ T4830] Use struct sctp_assoc_value instead [ 59.426471][ T4840] x_tables: unsorted underflow at hook 2 [ 59.434780][ T4844] nfs: Unknown parameter '' [ 59.464053][ T4848] loop2: detected capacity change from 0 to 512 [ 59.472907][ T4848] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2240: inode #15: comm syz.2.545: corrupted in-inode xattr: e_name out of bounds [ 59.486948][ T4848] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.545: couldn't read orphan inode 15 (err -117) [ 59.500923][ T4848] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 59.520293][ T4848] EXT4-fs error (device loop2): ext4_add_entry:2435: inode #2: comm syz.2.545: Directory hole found for htree leaf block 0 [ 60.212279][ T4865] loop1: detected capacity change from 0 to 512 [ 60.218901][ T4865] EXT4-fs: Ignoring removed nobh option [ 60.224806][ T4865] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 60.236258][ T4865] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2862: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 60.249875][ T4865] EXT4-fs (loop1): 1 truncate cleaned up [ 60.255812][ T4865] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 60.297467][ T3093] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.311267][ T4865] loop1: detected capacity change from 512 to 0 [ 60.325810][ T3420] syz-executor: attempt to access beyond end of device [ 60.325810][ T3420] loop1: rw=12288, sector=26, nr_sectors = 2 limit=0 [ 60.334827][ T4870] loop4: detected capacity change from 0 to 512 [ 60.346579][ T4870] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 60.356772][ T3420] syz-executor: attempt to access beyond end of device [ 60.356772][ T3420] loop1: rw=524288, sector=12, nr_sectors = 2 limit=0 [ 60.370582][ T4868] loop2: detected capacity change from 0 to 512 [ 60.372419][ T3420] syz-executor: attempt to access beyond end of device [ 60.372419][ T3420] loop1: rw=524288, sector=14, nr_sectors = 2 limit=0 [ 60.392190][ T3420] syz-executor: attempt to access beyond end of device [ 60.392190][ T3420] loop1: rw=524288, sector=16, nr_sectors = 2 limit=0 [ 60.398013][ T4870] EXT4-fs (loop4): 1 truncate cleaned up [ 60.406520][ T3420] syz-executor: attempt to access beyond end of device [ 60.406520][ T3420] loop1: rw=524288, sector=18, nr_sectors = 2 limit=0 [ 60.418311][ T4868] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 60.425334][ T3420] syz-executor: attempt to access beyond end of device [ 60.425334][ T3420] loop1: rw=12288, sector=10, nr_sectors = 2 limit=0 [ 60.432925][ T4868] EXT4-fs (loop2): orphan cleanup on readonly fs [ 60.447352][ T3420] EXT4-fs error (device loop1): ext4_get_inode_loc:4574: inode #2: block 5: comm syz-executor: unable to read itable block [ 60.452828][ T4868] EXT4-fs warning (device loop2): ext4_enable_quotas:7066: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 60.481179][ T3420] syz-executor: attempt to access beyond end of device [ 60.481179][ T3420] loop1: rw=145409, sector=2, nr_sectors = 2 limit=0 [ 60.481570][ T4868] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 60.495183][ T3420] Buffer I/O error on dev loop1, logical block 1, lost sync page write [ 60.501826][ T4868] EXT4-fs error (device loop2): ext4_orphan_get:1391: inode #16: comm syz.2.550: casefold flag without casefold feature [ 60.511346][ T3420] EXT4-fs (loop1): I/O error while writing superblock [ 60.523400][ T4868] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.550: couldn't read orphan inode 16 (err -117) [ 60.529479][ T3420] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5810: IO failure [ 60.529574][ T3420] syz-executor: attempt to access beyond end of device [ 60.529574][ T3420] loop1: rw=145409, sector=2, nr_sectors = 2 limit=0 [ 60.563918][ T3420] Buffer I/O error on dev loop1, logical block 1, lost sync page write [ 60.572609][ T3420] EXT4-fs (loop1): I/O error while writing superblock [ 60.579422][ T3420] EXT4-fs error (device loop1): ext4_dirty_inode:6014: inode #2: comm syz-executor: mark_inode_dirty error [ 60.590857][ T3420] syz-executor: attempt to access beyond end of device [ 60.590857][ T3420] loop1: rw=145409, sector=2, nr_sectors = 2 limit=0 [ 60.604381][ T3420] Buffer I/O error on dev loop1, logical block 1, lost sync page write [ 60.612682][ T3420] EXT4-fs (loop1): I/O error while writing superblock [ 60.619905][ T1219] kworker/u8:5: attempt to access beyond end of device [ 60.619905][ T1219] loop1: rw=524288, sector=10, nr_sectors = 2 limit=0 [ 60.633711][ T1219] EXT4-fs error (device loop1): __ext4_get_inode_loc_noinmem:4559: inode #18: block 9: comm kworker/u8:5: unable to read itable block [ 60.647633][ T1219] Buffer I/O error on dev loop1, logical block 1, lost sync page write [ 60.655901][ T1219] EXT4-fs (loop1): I/O error while writing superblock [ 60.662781][ T1219] EXT4-fs error (device loop1): __ext4_get_inode_loc_noinmem:4559: inode #2: block 5: comm kworker/u8:5: unable to read itable block [ 60.676589][ T1219] Buffer I/O error on dev loop1, logical block 1, lost sync page write [ 60.685244][ T1219] EXT4-fs (loop1): I/O error while writing superblock [ 60.693444][ T3420] Buffer I/O error on dev loop1, logical block 1, lost sync page write [ 60.701794][ T3420] EXT4-fs (loop1): I/O error while writing superblock [ 60.804007][ T4876] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 60.811917][ T4876] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 60.819097][ C1] vcan0: j1939_tp_rxtimer: 0xffff8881138dda00: rx timeout, send abort [ 60.819152][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811440b200: rx timeout, send abort [ 60.827515][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff8881138dda00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 60.827580][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88811440b200: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 60.880869][ T4879] sctp: [Deprecated]: syz.3.554 (pid 4879) Use of int in max_burst socket option deprecated. [ 60.880869][ T4879] Use struct sctp_assoc_value instead [ 60.976454][ T1219] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.017191][ T4885] loop2: detected capacity change from 0 to 512 [ 61.024254][ T4885] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 61.037620][ T4885] EXT4-fs (loop2): 1 orphan inode deleted [ 61.043506][ T4885] EXT4-fs (loop2): 1 truncate cleaned up [ 61.056491][ T4885] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 61.065104][ T1219] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.078865][ T4885] EXT4-fs (loop2): Remounting filesystem read-only [ 61.133086][ T1219] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.165750][ T4902] FAULT_INJECTION: forcing a failure. [ 61.165750][ T4902] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 61.178922][ T4902] CPU: 0 UID: 0 PID: 4902 Comm: syz.2.560 Not tainted 6.10.0-syzkaller-12030-g66ebbdfdeb09 #0 [ 61.189195][ T4902] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 61.199285][ T4902] Call Trace: [ 61.202659][ T4902] [ 61.205643][ T4902] dump_stack_lvl+0xf2/0x150 [ 61.210256][ T4902] dump_stack+0x15/0x20 [ 61.214488][ T4902] should_fail_ex+0x229/0x230 [ 61.219202][ T4902] should_fail+0xb/0x10 [ 61.223390][ T4902] should_fail_usercopy+0x1a/0x20 [ 61.228536][ T4902] _copy_from_user+0x1e/0xd0 [ 61.233176][ T4902] input_event_from_user+0x126/0x1e0 [ 61.237414][ T29] kauditd_printk_skb: 113 callbacks suppressed [ 61.237507][ T29] audit: type=1400 audit(1721752289.358:1409): avc: denied { bind } for pid=4898 comm="syz.3.561" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 61.238470][ T4902] ? input_inject_event+0xe1/0x100 [ 61.244664][ T29] audit: type=1400 audit(1721752289.358:1410): avc: denied { setopt } for pid=4898 comm="syz.3.561" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 61.289248][ T4902] evdev_write+0x288/0x420 [ 61.293700][ T4902] ? __pfx_evdev_write+0x10/0x10 [ 61.298683][ T4902] vfs_write+0x28b/0x900 [ 61.302969][ T4902] ? __fget_files+0x1da/0x210 [ 61.307674][ T4902] ksys_write+0xeb/0x1b0 [ 61.311995][ T4902] __x64_sys_write+0x42/0x50 [ 61.316613][ T4902] x64_sys_call+0x2a40/0x2e00 [ 61.321447][ T4902] do_syscall_64+0xc9/0x1c0 [ 61.326031][ T4902] ? clear_bhb_loop+0x55/0xb0 [ 61.330782][ T4902] ? clear_bhb_loop+0x55/0xb0 [ 61.335523][ T4902] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 61.341479][ T4902] RIP: 0033:0x7fa034db5f19 [ 61.345914][ T4902] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 61.365735][ T4902] RSP: 002b:00007fa033a16048 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 61.374224][ T4902] RAX: ffffffffffffffda RBX: 00007fa034f46038 RCX: 00007fa034db5f19 [ 61.382217][ T4902] RDX: 0000000000001068 RSI: 0000000020000040 RDI: 0000000000000005 [ 61.390373][ T4902] RBP: 00007fa033a160a0 R08: 0000000000000000 R09: 0000000000000000 [ 61.398358][ T4902] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 61.406344][ T4902] R13: 000000000000006e R14: 00007fa034f46038 R15: 00007ffe24ed3ba8 [ 61.414341][ T4902] [ 61.431034][ T1219] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.454247][ T4886] chnl_net:caif_netlink_parms(): no params data found [ 61.510262][ T4909] syzkaller1: entered promiscuous mode [ 61.515786][ T4909] syzkaller1: entered allmulticast mode [ 61.536603][ T1219] bridge_slave_1: left allmulticast mode [ 61.542365][ T1219] bridge_slave_1: left promiscuous mode [ 61.548202][ T1219] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.562489][ T1219] bridge_slave_0: left allmulticast mode [ 61.568226][ T1219] bridge_slave_0: left promiscuous mode [ 61.573918][ T1219] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.690460][ T1219] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 61.701190][ T1219] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 61.712971][ T1219] bond0 (unregistering): Released all slaves [ 61.762995][ T4886] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.770178][ T4886] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.780069][ T4886] bridge_slave_0: entered allmulticast mode [ 61.786788][ T4886] bridge_slave_0: entered promiscuous mode [ 61.794170][ T4886] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.801389][ T4886] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.809852][ T4886] bridge_slave_1: entered allmulticast mode [ 61.816562][ T4886] bridge_slave_1: entered promiscuous mode [ 61.852976][ T4886] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.865753][ T1219] hsr_slave_0: left promiscuous mode [ 61.871994][ T1219] hsr_slave_1: left promiscuous mode [ 61.878901][ T1219] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 61.886353][ T1219] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 61.899885][ T1219] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 61.907353][ T1219] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 61.919527][ T1219] veth1_macvtap: left promiscuous mode [ 61.925045][ T1219] veth0_macvtap: left promiscuous mode [ 61.930682][ T1219] veth1_vlan: left allmulticast mode [ 61.935988][ T1219] veth1_vlan: left promiscuous mode [ 61.941336][ T1219] veth0_vlan: left promiscuous mode [ 61.972362][ T4922] ebt_among: src integrity fail: 300 [ 62.036675][ T4926] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 62.102725][ T1219] macvlan0 (unregistering): left allmulticast mode [ 62.167006][ T29] audit: type=1400 audit(1721752290.358:1411): avc: denied { setcheckreqprot } for pid=4928 comm="syz.4.568" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 62.197734][ T1219] team0 (unregistering): Port device team_slave_1 removed [ 62.210117][ T1219] team0 (unregistering): Port device team_slave_0 removed [ 62.218696][ T4933] serio: Serial port pts0 [ 62.301246][ T4886] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.334115][ T4936] loop3: detected capacity change from 0 to 512 [ 62.341070][ T4936] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 62.361581][ T4936] EXT4-fs (loop3): 1 orphan inode deleted [ 62.367450][ T4936] EXT4-fs (loop3): 1 truncate cleaned up [ 62.377620][ T4886] team0: Port device team_slave_0 added [ 62.388920][ T4886] team0: Port device team_slave_1 added [ 62.398427][ T4939] loop4: detected capacity change from 0 to 512 [ 62.422805][ T4886] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.429887][ T4886] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.455960][ T4886] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.478390][ T4886] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.485456][ T4886] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.511510][ T4886] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.513364][ T4939] ext4 filesystem being mounted at /46/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 62.522216][ T29] audit: type=1326 audit(1721752290.678:1412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4935 comm="syz.3.569" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7eb4b15f19 code=0x0 [ 62.568093][ T4886] hsr_slave_0: entered promiscuous mode [ 62.575486][ T4886] hsr_slave_1: entered promiscuous mode [ 62.577313][ T29] audit: type=1326 audit(1721752290.768:1413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4938 comm="syz.4.570" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f82cdb85f19 code=0x0 [ 62.604056][ T4886] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.611857][ T4886] Cannot create hsr debugfs directory [ 62.659842][ T29] audit: type=1400 audit(1721752290.858:1414): avc: denied { bind } for pid=4935 comm="syz.3.569" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 62.699924][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 62.701333][ T29] audit: type=1400 audit(1721752290.898:1415): avc: denied { listen } for pid=4935 comm="syz.3.569" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 62.713329][ T4946] __nla_validate_parse: 5 callbacks suppressed [ 62.713346][ T4946] netlink: 8 bytes leftover after parsing attributes in process `syz.2.572'. [ 62.744427][ T4946] netlink: 8 bytes leftover after parsing attributes in process `syz.2.572'. [ 62.753434][ T4946] netlink: 8 bytes leftover after parsing attributes in process `syz.2.572'. [ 62.854453][ T29] audit: type=1400 audit(1721752291.048:1416): avc: denied { mount } for pid=4957 comm="syz.0.574" name="/" dev="configfs" ino=1155 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 62.957233][ T29] audit: type=1400 audit(1721752291.148:1417): avc: denied { search } for pid=4957 comm="syz.0.574" name="/" dev="configfs" ino=1155 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 63.073794][ T4886] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 63.082906][ T4886] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 63.091889][ T4886] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 63.101617][ T4886] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 63.120867][ T29] audit: type=1400 audit(1721752291.318:1418): avc: denied { unmount } for pid=4529 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 63.158968][ T4961] loop0: detected capacity change from 0 to 512 [ 63.169627][ T4886] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.182890][ T4961] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2240: inode #15: comm syz.0.575: corrupted in-inode xattr: bad e_name length [ 63.196196][ T4886] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.203616][ T4961] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.575: couldn't read orphan inode 15 (err -117) [ 63.209735][ T3653] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.222563][ T3653] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.236324][ T3163] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.243445][ T3163] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.316891][ T4968] loop0: detected capacity change from 0 to 2048 [ 63.359385][ T11] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 63.366279][ T4886] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.377838][ T11] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 63.393232][ T11] EXT4-fs (loop0): This should not happen!! Data will be lost [ 63.393232][ T11] [ 63.402961][ T11] EXT4-fs (loop0): Total free blocks count 0 [ 63.409007][ T11] EXT4-fs (loop0): Free/Dirty block details [ 63.414916][ T11] EXT4-fs (loop0): free_blocks=2415919104 [ 63.420696][ T11] EXT4-fs (loop0): dirty_blocks=32 [ 63.425833][ T11] EXT4-fs (loop0): Block reservation details [ 63.431910][ T11] EXT4-fs (loop0): i_reserved_data_blocks=2 [ 63.442271][ T28] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 31 with max blocks 1 with error 28 [ 63.454827][ T28] EXT4-fs (loop0): This should not happen!! Data will be lost [ 63.454827][ T28] [ 63.464206][ T4886] veth0_vlan: entered promiscuous mode [ 63.476951][ T4886] veth1_vlan: entered promiscuous mode [ 63.498285][ T4886] veth0_macvtap: entered promiscuous mode [ 63.510746][ T4886] veth1_macvtap: entered promiscuous mode [ 63.522904][ T4886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.533520][ T4886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.543637][ T4886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.554171][ T4886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.564317][ T4886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.574829][ T4886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.584850][ T4886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.595338][ T4886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.608659][ T4886] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.617539][ T4886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.628156][ T4886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.638043][ T4886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.648560][ T4886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.658431][ T4886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.669079][ T4886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.679056][ T4886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.689531][ T4886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.701665][ T4886] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.714548][ T4886] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.723360][ T4886] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.732144][ T4886] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.740922][ T4886] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.819272][ T5017] netlink: 'syz.1.557': attribute type 2 has an invalid length. [ 64.166150][ T5051] loop0: detected capacity change from 0 to 1024 [ 64.260209][ T5061] loop3: detected capacity change from 0 to 512 [ 64.260697][ T5058] loop1: detected capacity change from 0 to 512 [ 64.267104][ T5061] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 64.294589][ T5061] EXT4-fs (loop3): 1 truncate cleaned up [ 64.304760][ T5058] EXT4-fs (loop1): corrupt root inode, run e2fsck [ 64.315982][ T5058] EXT4-fs (loop1): mount failed [ 64.365127][ T5058] loop1: detected capacity change from 0 to 256 [ 64.382427][ T5076] loop4: detected capacity change from 0 to 512 [ 64.400087][ T5058] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 64.411246][ T5076] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 64.432934][ T5078] netlink: 28 bytes leftover after parsing attributes in process `syz.0.614'. [ 64.449198][ T5076] EXT4-fs (loop4): 1 truncate cleaned up [ 64.461851][ T5083] loop3: detected capacity change from 0 to 512 [ 64.490097][ T5083] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 64.519807][ T5083] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a016c018, mo2=0002] [ 64.538687][ T5083] System zones: 1-12 [ 64.544239][ T5083] EXT4-fs (loop3): 1 truncate cleaned up [ 64.726498][ T5109] netlink: 84 bytes leftover after parsing attributes in process `syz.1.621'. [ 64.748824][ T5111] loop2: detected capacity change from 0 to 512 [ 64.757553][ T5111] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2240: inode #15: comm syz.2.622: corrupted in-inode xattr: invalid ea_ino [ 64.771074][ T5111] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.622: couldn't read orphan inode 15 (err -117) [ 64.872358][ T5119] FAULT_INJECTION: forcing a failure. [ 64.872358][ T5119] name failslab, interval 1, probability 0, space 0, times 0 [ 64.885107][ T5119] CPU: 0 UID: 0 PID: 5119 Comm: syz.2.623 Not tainted 6.10.0-syzkaller-12030-g66ebbdfdeb09 #0 [ 64.895402][ T5119] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 64.905462][ T5119] Call Trace: [ 64.908745][ T5119] [ 64.911691][ T5119] dump_stack_lvl+0xf2/0x150 [ 64.916295][ T5119] dump_stack+0x15/0x20 [ 64.920528][ T5119] should_fail_ex+0x229/0x230 [ 64.925215][ T5119] ? io_cqring_event_overflow+0x5a/0x300 [ 64.930908][ T5119] should_failslab+0x8f/0xb0 [ 64.935591][ T5119] __kmalloc_noprof+0xa5/0x370 [ 64.940368][ T5119] io_cqring_event_overflow+0x5a/0x300 [ 64.945841][ T5119] io_req_cqe_overflow+0x89/0xb0 [ 64.950820][ T5119] __io_submit_flush_completions+0x34e/0xa00 [ 64.956909][ T5119] io_submit_sqes+0xe91/0x1080 [ 64.961780][ T5119] ? kstrtouint_from_user+0xb0/0xe0 [ 64.967001][ T5119] __se_sys_io_uring_enter+0x1c6/0x15a0 [ 64.972563][ T5119] ? __fget_files+0x1da/0x210 [ 64.977266][ T5119] ? fput+0x13b/0x180 [ 64.981258][ T5119] ? ksys_write+0x178/0x1b0 [ 64.985915][ T5119] __x64_sys_io_uring_enter+0x78/0x90 [ 64.991374][ T5119] x64_sys_call+0x26d0/0x2e00 [ 64.996058][ T5119] do_syscall_64+0xc9/0x1c0 [ 65.000577][ T5119] ? clear_bhb_loop+0x55/0xb0 [ 65.005267][ T5119] ? clear_bhb_loop+0x55/0xb0 [ 65.009958][ T5119] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 65.015939][ T5119] RIP: 0033:0x7fa034db5f19 [ 65.020348][ T5119] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 65.039963][ T5119] RSP: 002b:00007fa033a37048 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 65.048425][ T5119] RAX: ffffffffffffffda RBX: 00007fa034f45f60 RCX: 00007fa034db5f19 [ 65.056476][ T5119] RDX: 0000000000000000 RSI: 0000000000006256 RDI: 0000000000000004 [ 65.064460][ T5119] RBP: 00007fa033a370a0 R08: 0000000000000000 R09: 0000000000000000 [ 65.072494][ T5119] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 65.080500][ T5119] R13: 000000000000000b R14: 00007fa034f45f60 R15: 00007ffe24ed3ba8 [ 65.088699][ T5119] [ 65.126372][ T5123] loop2: detected capacity change from 0 to 512 [ 65.133213][ T5123] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 65.144350][ T5123] EXT4-fs (loop2): 1 truncate cleaned up [ 65.154887][ T5123] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 65.194282][ T3086] EXT4-fs error (device loop3): ext4_readdir:260: inode #11: block 54: comm syz-executor: path /134/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 65.216975][ T3086] EXT4-fs error (device loop3): ext4_empty_dir:3126: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 65.238441][ T3086] EXT4-fs error (device loop3): ext4_readdir:260: inode #11: block 54: comm syz-executor: path /134/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 65.260408][ T3086] EXT4-fs error (device loop3): ext4_empty_dir:3126: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 65.284687][ T3086] EXT4-fs error (device loop3): ext4_readdir:260: inode #11: block 54: comm syz-executor: path /134/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 65.306188][ T5128] netlink: 'syz.4.628': attribute type 4 has an invalid length. [ 65.315685][ T3086] EXT4-fs error (device loop3): ext4_empty_dir:3126: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 65.338560][ T3086] EXT4-fs error (device loop3): ext4_readdir:260: inode #11: block 54: comm syz-executor: path /134/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 65.360756][ T3086] EXT4-fs error (device loop3): ext4_empty_dir:3126: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 65.382127][ T3086] EXT4-fs error (device loop3): ext4_readdir:260: inode #11: block 54: comm syz-executor: path /134/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 65.404089][ T3086] EXT4-fs error (device loop3): ext4_empty_dir:3126: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 65.447750][ T5131] loop4: detected capacity change from 0 to 736 [ 65.454378][ T5131] iso9660: Bad value for 'mode' [ 65.503892][ T5139] FAULT_INJECTION: forcing a failure. [ 65.503892][ T5139] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 65.517084][ T5139] CPU: 1 UID: 0 PID: 5139 Comm: syz.0.633 Not tainted 6.10.0-syzkaller-12030-g66ebbdfdeb09 #0 [ 65.527481][ T5139] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 65.537542][ T5139] Call Trace: [ 65.540905][ T5139] [ 65.543837][ T5139] dump_stack_lvl+0xf2/0x150 [ 65.548502][ T5139] dump_stack+0x15/0x20 [ 65.552769][ T5139] should_fail_ex+0x229/0x230 [ 65.557463][ T5139] should_fail+0xb/0x10 [ 65.561637][ T5139] should_fail_usercopy+0x1a/0x20 [ 65.566698][ T5139] _copy_from_user+0x1e/0xd0 [ 65.571305][ T5139] move_addr_to_kernel+0x82/0x120 [ 65.576348][ T5139] __sys_sendto+0x16b/0x260 [ 65.580918][ T5139] __x64_sys_sendto+0x78/0x90 [ 65.585610][ T5139] x64_sys_call+0x2bc6/0x2e00 [ 65.590331][ T5139] do_syscall_64+0xc9/0x1c0 [ 65.594872][ T5139] ? clear_bhb_loop+0x55/0xb0 [ 65.599565][ T5139] ? clear_bhb_loop+0x55/0xb0 [ 65.604282][ T5139] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 65.610207][ T5139] RIP: 0033:0x7f38d5755f19 [ 65.614628][ T5139] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 65.634242][ T5139] RSP: 002b:00007f38d43d7048 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 65.642709][ T5139] RAX: ffffffffffffffda RBX: 00007f38d58e5f60 RCX: 00007f38d5755f19 [ 65.650706][ T5139] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 65.658690][ T5139] RBP: 00007f38d43d70a0 R08: 0000000020e68000 R09: 0000000000000010 [ 65.666665][ T5139] R10: 00000000200007fd R11: 0000000000000246 R12: 0000000000000001 [ 65.674732][ T5139] R13: 000000000000000b R14: 00007f38d58e5f60 R15: 00007ffd0291a608 [ 65.682755][ T5139] [ 65.756063][ T5152] loop0: detected capacity change from 0 to 512 [ 65.762984][ T5152] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 65.773991][ T5152] EXT4-fs (loop0): 1 truncate cleaned up [ 65.800738][ T5156] netlink: 20 bytes leftover after parsing attributes in process `syz.2.638'. [ 65.825946][ T5152] netlink: 56 bytes leftover after parsing attributes in process `syz.0.637'. [ 65.832516][ T5161] loop2: detected capacity change from 0 to 512 [ 65.836878][ T5159] loop1: detected capacity change from 0 to 512 [ 65.844666][ T5161] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 65.859762][ T5161] EXT4-fs (loop2): 1 truncate cleaned up [ 65.866478][ T5159] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2240: inode #15: comm syz.1.639: corrupted in-inode xattr: invalid ea_ino [ 65.870002][ T5161] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 65.881540][ T5159] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.639: couldn't read orphan inode 15 (err -117) [ 65.950425][ C0] eth0: bad gso: type: 1, size: 1408 [ 65.957714][ T28] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.976365][ T5174] loop1: detected capacity change from 0 to 256 [ 66.031867][ T28] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.104119][ T28] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.154050][ T28] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.174444][ T5204] loop2: detected capacity change from 0 to 8192 [ 66.223838][ T5210] sctp: [Deprecated]: syz.1.653 (pid 5210) Use of struct sctp_assoc_value in delayed_ack socket option. [ 66.223838][ T5210] Use struct sctp_sack_info instead [ 66.243657][ T5182] chnl_net:caif_netlink_parms(): no params data found [ 66.245240][ T5210] loop1: detected capacity change from 0 to 128 [ 66.257181][ T29] kauditd_printk_skb: 34 callbacks suppressed [ 66.257212][ T29] audit: type=1400 audit(1721752294.448:1453): avc: denied { remount } for pid=5209 comm="syz.1.653" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 66.330933][ T28] bridge_slave_1: left allmulticast mode [ 66.336724][ T28] bridge_slave_1: left promiscuous mode [ 66.342412][ T28] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.352621][ T28] bridge_slave_0: left allmulticast mode [ 66.358350][ T28] bridge_slave_0: left promiscuous mode [ 66.364073][ T28] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.530882][ T28] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 66.541523][ T28] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 66.552201][ T28] bond0 (unregistering): Released all slaves [ 66.559258][ T29] audit: type=1326 audit(1721752294.758:1454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5221 comm="syz.1.656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72d9695f19 code=0x7fc00000 [ 66.582789][ T29] audit: type=1326 audit(1721752294.758:1455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5221 comm="syz.1.656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f72d9695f19 code=0x7fc00000 [ 66.606773][ T5182] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.613876][ T5182] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.621040][ T5182] bridge_slave_0: entered allmulticast mode [ 66.627719][ T5182] bridge_slave_0: entered promiscuous mode [ 66.634516][ T5226] FAULT_INJECTION: forcing a failure. [ 66.634516][ T5226] name failslab, interval 1, probability 0, space 0, times 0 [ 66.647247][ T5226] CPU: 0 UID: 0 PID: 5226 Comm: syz.2.657 Not tainted 6.10.0-syzkaller-12030-g66ebbdfdeb09 #0 [ 66.657580][ T5226] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 66.667635][ T5226] Call Trace: [ 66.670910][ T5226] [ 66.673839][ T5226] dump_stack_lvl+0xf2/0x150 [ 66.678431][ T5226] dump_stack+0x15/0x20 [ 66.682586][ T5226] should_fail_ex+0x229/0x230 [ 66.687311][ T5226] ? __kvmalloc_node_noprof+0x72/0x170 [ 66.692826][ T5226] should_failslab+0x8f/0xb0 [ 66.697434][ T5226] __kmalloc_node_noprof+0xa8/0x380 [ 66.702662][ T5226] __kvmalloc_node_noprof+0x72/0x170 [ 66.708030][ T5226] alloc_netdev_mqs+0x6b6/0x8d0 [ 66.712914][ T5226] rtnl_create_link+0x233/0x680 [ 66.717771][ T5226] rtnl_newlink+0xe12/0x1690 [ 66.722372][ T5226] ? __list_del_entry_valid_or_report+0x5f/0xf0 [ 66.728641][ T5226] ? _raw_spin_unlock+0x26/0x50 [ 66.733502][ T5226] ? __mutex_lock+0x221/0x8e0 [ 66.738252][ T5226] ? __pfx_rtnl_newlink+0x10/0x10 [ 66.743369][ T5226] rtnetlink_rcv_msg+0x6aa/0x710 [ 66.748375][ T5226] ? ref_tracker_free+0x3a5/0x410 [ 66.753427][ T5226] ? __dev_queue_xmit+0x161/0x1fe0 [ 66.758650][ T5226] netlink_rcv_skb+0x12c/0x230 [ 66.763496][ T5226] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 66.768992][ T5226] rtnetlink_rcv+0x1c/0x30 [ 66.773441][ T5226] netlink_unicast+0x593/0x670 [ 66.778261][ T5226] netlink_sendmsg+0x5cc/0x6e0 [ 66.783037][ T5226] ? __pfx_netlink_sendmsg+0x10/0x10 [ 66.788380][ T5226] __sock_sendmsg+0x140/0x180 [ 66.793062][ T5226] ____sys_sendmsg+0x312/0x410 [ 66.797909][ T5226] __sys_sendmsg+0x1e9/0x280 [ 66.802542][ T5226] __x64_sys_sendmsg+0x46/0x50 [ 66.807317][ T5226] x64_sys_call+0x26f8/0x2e00 [ 66.812001][ T5226] do_syscall_64+0xc9/0x1c0 [ 66.816651][ T5226] ? clear_bhb_loop+0x55/0xb0 [ 66.821330][ T5226] ? clear_bhb_loop+0x55/0xb0 [ 66.826016][ T5226] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 66.831983][ T5226] RIP: 0033:0x7fa034db5f19 [ 66.836394][ T5226] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 66.856009][ T5226] RSP: 002b:00007fa033a37048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 66.864480][ T5226] RAX: ffffffffffffffda RBX: 00007fa034f45f60 RCX: 00007fa034db5f19 [ 66.872485][ T5226] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000003 [ 66.880461][ T5226] RBP: 00007fa033a370a0 R08: 0000000000000000 R09: 0000000000000000 [ 66.888539][ T5226] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 66.896515][ T5226] R13: 000000000000000b R14: 00007fa034f45f60 R15: 00007ffe24ed3ba8 [ 66.904521][ T5226] [ 66.928458][ T5182] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.935736][ T5182] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.943206][ T29] audit: type=1400 audit(1721752295.138:1456): avc: denied { read } for pid=5228 comm="syz.0.658" name="ptp0" dev="devtmpfs" ino=220 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 66.953481][ T5182] bridge_slave_1: entered allmulticast mode [ 66.966291][ T29] audit: type=1400 audit(1721752295.138:1457): avc: denied { open } for pid=5228 comm="syz.0.658" path="/dev/ptp0" dev="devtmpfs" ino=220 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 66.977649][ T5182] bridge_slave_1: entered promiscuous mode [ 67.001984][ T28] tipc: Left network mode [ 67.005028][ T5235] loop2: detected capacity change from 0 to 512 [ 67.013406][ T5235] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 67.025796][ T5235] EXT4-fs (loop2): 1 truncate cleaned up [ 67.032210][ T5235] EXT4-fs mount: 33 callbacks suppressed [ 67.032228][ T5235] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 67.064393][ T5182] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.070221][ T5241] loop0: detected capacity change from 0 to 1764 [ 67.079975][ T5235] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 67.082047][ T5182] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.096966][ T5241] ISOFS: Logical zone size(0) < hardware blocksize(1024) [ 67.107894][ T5241] openvswitch: netlink: VXLAN extension 0 has unexpected len 5 expected 0 [ 67.118504][ T28] hsr_slave_0: left promiscuous mode [ 67.124098][ T28] hsr_slave_1: left promiscuous mode [ 67.130598][ T28] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 67.138095][ T28] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 67.145980][ T28] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 67.153438][ T28] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 67.162564][ T28] veth1_macvtap: left promiscuous mode [ 67.168087][ T28] veth0_macvtap: left promiscuous mode [ 67.173620][ T28] veth1_vlan: left promiscuous mode [ 67.178982][ T28] @˙: left promiscuous mode [ 67.264555][ T28] team0 (unregistering): Port device team_slave_1 removed [ 67.274881][ T28] team0 (unregistering): Port device team_slave_0 removed [ 67.287791][ T29] audit: type=1326 audit(1721752295.478:1458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5221 comm="syz.1.656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72d9695f19 code=0x7fc00000 [ 67.311233][ T29] audit: type=1326 audit(1721752295.478:1459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5221 comm="syz.1.656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f72d9695f19 code=0x7fc00000 [ 67.334548][ T29] audit: type=1326 audit(1721752295.478:1460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5221 comm="syz.1.656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72d9695f19 code=0x7fc00000 [ 67.358193][ T29] audit: type=1326 audit(1721752295.478:1461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5221 comm="syz.1.656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72d9695f19 code=0x7fc00000 [ 67.381558][ T29] audit: type=1326 audit(1721752295.478:1462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5221 comm="syz.1.656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72d9695f19 code=0x7fc00000 [ 67.416988][ T5182] team0: Port device team_slave_0 added [ 67.423674][ T3093] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.424242][ T5182] team0: Port device team_slave_1 added [ 67.452264][ T5182] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.459349][ T5182] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.485330][ T5182] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.502742][ T5182] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.510004][ T5182] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.536328][ T5182] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.562097][ T5255] loop2: detected capacity change from 0 to 512 [ 67.575749][ T5182] hsr_slave_0: entered promiscuous mode [ 67.578962][ T5255] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.594520][ T5255] ext4 filesystem being mounted at /135/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 67.594752][ T5182] hsr_slave_1: entered promiscuous mode [ 67.611975][ T5182] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 67.619593][ T5182] Cannot create hsr debugfs directory [ 67.644558][ T3093] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.826226][ T5270] loop2: detected capacity change from 0 to 512 [ 67.840937][ T5270] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.853664][ T5270] ext4 filesystem being mounted at /138/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 67.885695][ T3093] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.936083][ T5182] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 67.940245][ T5280] loop2: detected capacity change from 0 to 512 [ 67.949859][ T5280] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 67.951972][ T5182] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 67.968149][ T5280] EXT4-fs (loop2): 1 truncate cleaned up [ 67.974395][ T5280] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 67.977696][ T5182] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 67.996486][ T5182] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 68.006892][ T5280] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 68.035796][ T5182] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.048946][ T5182] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.058578][ T3164] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.065815][ T3164] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.077626][ T3164] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.084700][ T3164] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.105363][ T5182] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 68.115816][ T5182] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 68.180209][ T5182] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.238897][ T3093] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.257088][ T5182] veth0_vlan: entered promiscuous mode [ 68.266583][ T5182] veth1_vlan: entered promiscuous mode [ 68.285652][ T5182] veth0_macvtap: entered promiscuous mode [ 68.293377][ T5182] veth1_macvtap: entered promiscuous mode [ 68.304685][ T5182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.315297][ T5182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.325280][ T5182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.335906][ T5182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.345783][ T5182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.356301][ T5182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.366137][ T5182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.376655][ T5182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.388458][ T5182] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.402289][ T5182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.412794][ T5182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.422655][ T5182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.433114][ T5182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.442960][ T5182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.453395][ T5182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.463288][ T5182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.473935][ T5182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.485059][ T5182] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.494524][ T5182] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.503403][ T5182] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.512172][ T5182] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.520903][ T5182] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.586775][ T5315] FAULT_INJECTION: forcing a failure. [ 68.586775][ T5315] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 68.596007][ T5309] loop4: detected capacity change from 0 to 512 [ 68.600298][ T5315] CPU: 1 UID: 0 PID: 5315 Comm: syz.2.680 Not tainted 6.10.0-syzkaller-12030-g66ebbdfdeb09 #0 [ 68.616684][ T5315] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 68.626831][ T5315] Call Trace: [ 68.630152][ T5315] [ 68.633091][ T5315] dump_stack_lvl+0xf2/0x150 [ 68.637772][ T5315] dump_stack+0x15/0x20 [ 68.641935][ T5315] should_fail_ex+0x229/0x230 [ 68.646654][ T5315] should_fail_alloc_page+0xfd/0x110 [ 68.651964][ T5315] __alloc_pages_noprof+0x109/0x360 [ 68.657404][ T5315] alloc_pages_mpol_noprof+0xb1/0x1e0 [ 68.662898][ T5315] folio_alloc_mpol_noprof+0x36/0x70 [ 68.668216][ T5315] shmem_get_folio_gfp+0x3eb/0xd80 [ 68.673352][ T5315] shmem_write_begin+0xa0/0x1c0 [ 68.678234][ T5315] generic_perform_write+0x1b4/0x580 [ 68.683565][ T5315] shmem_file_write_iter+0xc8/0xf0 [ 68.688716][ T5315] vfs_write+0x78f/0x900 [ 68.692991][ T5315] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 68.698957][ T5315] ksys_write+0xeb/0x1b0 [ 68.703395][ T5315] __x64_sys_write+0x42/0x50 [ 68.708031][ T5315] x64_sys_call+0x2a40/0x2e00 [ 68.712750][ T5315] do_syscall_64+0xc9/0x1c0 [ 68.717274][ T5315] ? clear_bhb_loop+0x55/0xb0 [ 68.722036][ T5315] ? clear_bhb_loop+0x55/0xb0 [ 68.726786][ T5315] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.732712][ T5315] RIP: 0033:0x7fa034db4a9f [ 68.737136][ T5315] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 29 8c 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 7c 8c 02 00 48 [ 68.756755][ T5315] RSP: 002b:00007fa033a36e00 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 68.765176][ T5315] RAX: ffffffffffffffda RBX: 0000000000100000 RCX: 00007fa034db4a9f [ 68.773164][ T5315] RDX: 0000000000100000 RSI: 00007fa02b617000 RDI: 0000000000000004 [ 68.781320][ T5315] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000764 [ 68.789468][ T5315] R10: 00000000000003c4 R11: 0000000000000293 R12: 0000000000000004 [ 68.797511][ T5315] R13: 00007fa033a36f00 R14: 00007fa033a36ec0 R15: 00007fa02b617000 [ 68.805495][ T5315] [ 68.822659][ T5309] EXT4-fs (loop4): orphan cleanup on readonly fs [ 68.830372][ T5309] EXT4-fs error (device loop4): ext4_acquire_dquot:6848: comm syz.4.679: Failed to acquire dquot type 0 [ 68.842485][ T5309] EXT4-fs (loop4): 1 truncate cleaned up [ 68.849514][ T5309] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 68.862751][ T5309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.885145][ T5309] netlink: get zone limit has 8 unknown bytes [ 68.909567][ T5325] loop4: detected capacity change from 0 to 512 [ 68.926155][ T5325] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 68.969347][ T5325] EXT4-fs (loop4): 1 truncate cleaned up [ 68.975389][ T5325] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.056819][ T5325] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 69.083404][ T5348] loop2: detected capacity change from 0 to 1024 [ 69.090374][ T5348] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 69.148367][ T5362] FAULT_INJECTION: forcing a failure. [ 69.148367][ T5362] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 69.161653][ T5362] CPU: 1 UID: 0 PID: 5362 Comm: syz.2.698 Not tainted 6.10.0-syzkaller-12030-g66ebbdfdeb09 #0 [ 69.171952][ T5362] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 69.178284][ T5367] loop1: detected capacity change from 0 to 512 [ 69.182013][ T5362] Call Trace: [ 69.182024][ T5362] [ 69.182032][ T5362] dump_stack_lvl+0xf2/0x150 [ 69.182059][ T5362] dump_stack+0x15/0x20 [ 69.203264][ T5362] should_fail_ex+0x229/0x230 [ 69.208037][ T5362] should_fail+0xb/0x10 [ 69.212233][ T5362] should_fail_usercopy+0x1a/0x20 [ 69.217362][ T5362] _copy_from_user+0x1e/0xd0 [ 69.222023][ T5362] copy_msghdr_from_user+0x54/0x2a0 [ 69.227252][ T5362] __sys_sendmsg+0x17d/0x280 [ 69.231880][ T5362] __x64_sys_sendmsg+0x46/0x50 [ 69.236750][ T5362] x64_sys_call+0x26f8/0x2e00 [ 69.241542][ T5362] do_syscall_64+0xc9/0x1c0 [ 69.246053][ T5362] ? clear_bhb_loop+0x55/0xb0 [ 69.250738][ T5362] ? clear_bhb_loop+0x55/0xb0 [ 69.255437][ T5362] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.261390][ T5362] RIP: 0033:0x7fa034db5f19 [ 69.265807][ T5362] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 69.285486][ T5362] RSP: 002b:00007fa033a37048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 69.293908][ T5362] RAX: ffffffffffffffda RBX: 00007fa034f45f60 RCX: 00007fa034db5f19 [ 69.301929][ T5362] RDX: 0000000000000000 RSI: 0000000020000300 RDI: 0000000000000004 [ 69.309903][ T5362] RBP: 00007fa033a370a0 R08: 0000000000000000 R09: 0000000000000000 [ 69.317878][ T5362] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 69.325916][ T5362] R13: 000000000000000b R14: 00007fa034f45f60 R15: 00007ffe24ed3ba8 [ 69.333899][ T5362] [ 69.354225][ C0] eth0: bad gso: type: 1, size: 1408 [ 69.360958][ C0] eth0: bad gso: type: 1, size: 1408 [ 69.386608][ T5376] netlink: 4 bytes leftover after parsing attributes in process `syz.2.704'. [ 69.431633][ T5382] netlink: 148 bytes leftover after parsing attributes in process `syz.1.707'. [ 69.459050][ T4232] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.506618][ T5388] loop4: detected capacity change from 0 to 2048 [ 69.519341][ T5388] EXT4-fs (loop4): stripe (4100) is not aligned with cluster size (16), stripe is disabled [ 69.549012][ T5388] EXT4-fs error (device loop4): ext4_ext_check_inode:520: inode #2: comm syz.4.710: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 5(5) [ 69.568125][ T5388] EXT4-fs (loop4): get root inode failed [ 69.573840][ T5388] EXT4-fs (loop4): mount failed [ 69.705219][ T5405] loop4: detected capacity change from 0 to 512 [ 69.713314][ T5406] openvswitch: netlink: IP tunnel dst address not specified [ 69.713710][ T5405] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 69.743673][ T5409] loop2: detected capacity change from 0 to 512 [ 69.757541][ T5405] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a016c018, mo2=0002] [ 69.760582][ T5409] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 69.773813][ T5405] System zones: 1-12 [ 69.783087][ T5405] EXT4-fs (loop4): 1 truncate cleaned up [ 69.789988][ T5405] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.850584][ T5409] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a016c018, mo2=0002] [ 69.853083][ T5414] loop3: detected capacity change from 0 to 512 [ 69.866604][ T5414] EXT4-fs (loop3): external journal device major/minor numbers have changed [ 69.875295][ T5409] System zones: 1-12 [ 69.883259][ T5414] block device autoloading is deprecated and will be removed. [ 69.890816][ T5409] EXT4-fs (loop2): 1 truncate cleaned up [ 69.891434][ T5414] bio_check_eod: 12 callbacks suppressed [ 69.891449][ T5414] syz.3.717: attempt to access beyond end of device [ 69.891449][ T5414] loop75: rw=0, sector=2, nr_sectors = 2 limit=0 [ 69.916575][ T5409] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.919577][ T5414] EXT4-fs (loop3): couldn't read superblock of external journal [ 69.980154][ T5422] loop1: detected capacity change from 0 to 512 [ 69.988199][ T5422] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 70.001147][ T5422] EXT4-fs (loop1): 1 truncate cleaned up [ 70.008865][ T5422] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.032415][ T5422] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 70.063913][ T4886] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.412060][ T5436] autofs4:pid:5436:validate_dev_ioctl: path string terminator missing for cmd(0xc018937e) [ 70.428393][ T5436] loop1: detected capacity change from 0 to 1024 [ 70.435750][ T5436] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 70.446745][ T5436] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 70.447117][ T4232] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.454774][ T5436] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e840e018, mo2=0000] [ 70.471995][ T5436] System zones: 0-1, 3-12 [ 70.476544][ T5436] EXT4-fs (loop1): orphan cleanup on readonly fs [ 70.483821][ T5436] EXT4-fs error (device loop1): ext4_free_blocks:6590: comm syz.1.722: Freeing blocks not in datazone - block = 0, count = 4096 [ 70.495225][ C0] eth0: bad gso: type: 1, size: 1408 [ 70.498202][ T3093] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.502822][ T5436] EXT4-fs (loop1): 1 orphan inode deleted [ 70.517996][ T5436] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 70.541090][ T5436] EXT4-fs error (device loop1): ext4_search_dir:1505: inode #2: block 16: comm syz.1.722: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 70.586938][ T4886] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.612420][ T5447] loop1: detected capacity change from 0 to 512 [ 70.629951][ T5447] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.642984][ T5447] ext4 filesystem being mounted at /34/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 70.655567][ T5447] EXT4-fs error (device loop1): ext4_acquire_dquot:6848: comm syz.1.726: Failed to acquire dquot type 1 [ 70.684894][ C0] hrtimer: interrupt took 24286 ns [ 70.712640][ T4886] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.725721][ T5455] netlink: 20 bytes leftover after parsing attributes in process `syz.2.728'. [ 70.737277][ T5455] netlink: zone id is out of range [ 70.766438][ T5464] loop1: detected capacity change from 0 to 512 [ 70.774356][ T5464] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 70.779834][ T5466] netlink: 28 bytes leftover after parsing attributes in process `syz.2.734'. [ 70.785678][ T5464] EXT4-fs (loop1): 1 truncate cleaned up [ 70.799636][ T5464] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.821257][ T5464] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 70.875098][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 70.923005][ T5477] loop2: detected capacity change from 0 to 512 [ 70.930094][ T5477] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 70.940812][ T5477] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a016c018, mo2=0002] [ 70.948774][ T5477] System zones: 1-12 [ 70.953032][ T5477] EXT4-fs (loop2): 1 truncate cleaned up [ 70.959247][ T5477] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.036154][ T4886] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.315102][ T29] kauditd_printk_skb: 375 callbacks suppressed [ 71.315116][ T29] audit: type=1326 audit(1721752310.507:1834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5438 comm="syz.4.724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82cdb85f19 code=0x7fc00000 [ 71.439211][ T5517] loop1: detected capacity change from 0 to 512 [ 71.446078][ T5517] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 71.458732][ T5517] EXT4-fs (loop1): 1 truncate cleaned up [ 71.464989][ T5517] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.465956][ T5519] netlink: 9 bytes leftover after parsing attributes in process `syz.4.751'. [ 71.486691][ T5519] gretap0: entered promiscuous mode [ 71.501396][ T5517] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 71.510406][ T5519] loop4: detected capacity change from 0 to 128 [ 71.536813][ T5523] FAULT_INJECTION: forcing a failure. [ 71.536813][ T5523] name failslab, interval 1, probability 0, space 0, times 0 [ 71.549772][ T5523] CPU: 0 UID: 0 PID: 5523 Comm: syz.4.752 Not tainted 6.10.0-syzkaller-12030-g66ebbdfdeb09 #0 [ 71.560273][ T5523] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 71.570406][ T5523] Call Trace: [ 71.573722][ T5523] [ 71.576703][ T5523] dump_stack_lvl+0xf2/0x150 [ 71.581293][ T5523] dump_stack+0x15/0x20 [ 71.585605][ T5523] should_fail_ex+0x229/0x230 [ 71.590406][ T5523] ? nf_ct_ext_add+0xe6/0x1a0 [ 71.595119][ T5523] should_failslab+0x8f/0xb0 [ 71.599782][ T5523] __kmalloc_node_track_caller_noprof+0xa6/0x380 [ 71.606145][ T5523] krealloc_noprof+0x48/0xa0 [ 71.610740][ T5523] nf_ct_ext_add+0xe6/0x1a0 [ 71.615255][ T5523] init_conntrack+0x539/0x970 [ 71.619936][ T5523] nf_conntrack_in+0x899/0xf20 [ 71.624708][ T5523] ? __pfx_ipv6_conntrack_local+0x10/0x10 [ 71.630496][ T5523] ipv6_conntrack_local+0x1d/0x30 [ 71.635602][ T5523] nf_hook_slow+0x86/0x1b0 [ 71.640141][ T5523] __ip6_local_out+0x241/0x260 [ 71.644981][ T5523] ? __pfx_dst_output+0x10/0x10 [ 71.649840][ T5523] ip6_local_out+0x26/0xd0 [ 71.654266][ T5523] ip6_send_skb+0x47/0x100 [ 71.658752][ T5523] udp_v6_send_skb+0x760/0xbf0 [ 71.663536][ T5523] udpv6_sendmsg+0x14db/0x1590 [ 71.668303][ T5523] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 71.673903][ T5523] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 71.679059][ T5523] inet6_sendmsg+0xaf/0xd0 [ 71.683484][ T5523] __sock_sendmsg+0x8b/0x180 [ 71.688073][ T5523] ____sys_sendmsg+0x312/0x410 [ 71.692933][ T5523] __sys_sendmmsg+0x269/0x500 [ 71.697638][ T5523] __x64_sys_sendmmsg+0x57/0x70 [ 71.702498][ T5523] x64_sys_call+0x2b4e/0x2e00 [ 71.707207][ T5523] do_syscall_64+0xc9/0x1c0 [ 71.711885][ T5523] ? clear_bhb_loop+0x55/0xb0 [ 71.716568][ T5523] ? clear_bhb_loop+0x55/0xb0 [ 71.721252][ T5523] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 71.727502][ T5523] RIP: 0033:0x7f82cdb85f19 [ 71.731918][ T5523] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 71.751534][ T5523] RSP: 002b:00007f82cc807048 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 71.759953][ T5523] RAX: ffffffffffffffda RBX: 00007f82cdd15f60 RCX: 00007f82cdb85f19 [ 71.767926][ T5523] RDX: 0000000000000001 RSI: 0000000020004880 RDI: 0000000000000003 [ 71.775917][ T5523] RBP: 00007f82cc8070a0 R08: 0000000000000000 R09: 0000000000000000 [ 71.784024][ T5523] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 71.792052][ T5523] R13: 000000000000000b R14: 00007f82cdd15f60 R15: 00007ffda85d0198 [ 71.800030][ T5523] [ 71.815327][ T3093] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.843741][ T29] audit: type=1400 audit(1721752311.037:1835): avc: denied { ioctl } for pid=5526 comm="syz.4.754" path="socket:[12978]" dev="sockfs" ino=12978 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 71.865945][ T5529] FAULT_INJECTION: forcing a failure. [ 71.865945][ T5529] name failslab, interval 1, probability 0, space 0, times 0 [ 71.882467][ T5529] CPU: 0 UID: 0 PID: 5529 Comm: syz.3.755 Not tainted 6.10.0-syzkaller-12030-g66ebbdfdeb09 #0 [ 71.892819][ T5529] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 71.895259][ T29] audit: type=1400 audit(1721752311.077:1836): avc: denied { connect } for pid=5532 comm="syz.2.756" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 71.902968][ T5529] Call Trace: [ 71.902978][ T5529] [ 71.902986][ T5529] dump_stack_lvl+0xf2/0x150 [ 71.903013][ T5529] dump_stack+0x15/0x20 [ 71.903032][ T5529] should_fail_ex+0x229/0x230 [ 71.903073][ T5529] ? netlbl_mgmt_add_common+0x5ba/0x940 [ 71.947888][ T5529] should_failslab+0x8f/0xb0 [ 71.952499][ T5529] __kmalloc_cache_noprof+0x4b/0x2a0 [ 71.957899][ T5529] ? nla_strscpy+0xed/0x120 [ 71.962518][ T5529] netlbl_mgmt_add_common+0x5ba/0x940 [ 71.967920][ T5529] ? __nla_parse+0x40/0x60 [ 71.972469][ T5529] netlbl_mgmt_add+0x19d/0x1d0 [ 71.977314][ T5529] genl_rcv_msg+0x61b/0x6c0 [ 71.981923][ T5529] ? __pfx_netlbl_mgmt_add+0x10/0x10 [ 71.987303][ T5529] ? __rcu_read_unlock+0x4e/0x70 [ 71.992313][ T5529] netlink_rcv_skb+0x12c/0x230 [ 71.997170][ T5529] ? __pfx_genl_rcv_msg+0x10/0x10 [ 72.002226][ T5529] genl_rcv+0x28/0x40 [ 72.006225][ T5529] netlink_unicast+0x593/0x670 [ 72.011001][ T5529] netlink_sendmsg+0x5cc/0x6e0 [ 72.015838][ T5529] ? __pfx_netlink_sendmsg+0x10/0x10 [ 72.021164][ T5529] __sock_sendmsg+0x140/0x180 [ 72.025889][ T5529] ____sys_sendmsg+0x312/0x410 [ 72.030725][ T5529] __sys_sendmsg+0x1e9/0x280 [ 72.035343][ T5529] __x64_sys_sendmsg+0x46/0x50 [ 72.040124][ T5529] x64_sys_call+0x26f8/0x2e00 [ 72.045054][ T5529] do_syscall_64+0xc9/0x1c0 [ 72.049569][ T5529] ? clear_bhb_loop+0x55/0xb0 [ 72.054316][ T5529] ? clear_bhb_loop+0x55/0xb0 [ 72.059068][ T5529] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 72.065108][ T5529] RIP: 0033:0x7fb272745f19 [ 72.069539][ T5529] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 72.089155][ T5529] RSP: 002b:00007fb2713c7048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 72.097745][ T5529] RAX: ffffffffffffffda RBX: 00007fb2728d5f60 RCX: 00007fb272745f19 [ 72.105790][ T5529] RDX: 0000000000000000 RSI: 0000000020000480 RDI: 0000000000000005 [ 72.113850][ T5529] RBP: 00007fb2713c70a0 R08: 0000000000000000 R09: 0000000000000000 [ 72.121824][ T5529] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 72.129805][ T5529] R13: 000000000000000b R14: 00007fb2728d5f60 R15: 00007ffd0be52d88 [ 72.137833][ T5529] [ 72.156543][ T29] audit: type=1400 audit(1721752311.347:1837): avc: denied { write } for pid=5532 comm="syz.2.756" path="socket:[13984]" dev="sockfs" ino=13984 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 72.159605][ T5535] loop4: detected capacity change from 0 to 1024 [ 72.190777][ T4886] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.202860][ T29] audit: type=1326 audit(1721752311.397:1838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5532 comm="syz.2.756" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa034db5f19 code=0x0 [ 72.240329][ T5541] ALSA: seq fatal error: cannot create timer (-22) [ 72.274164][ T5541] loop3: detected capacity change from 0 to 512 [ 72.289225][ T5541] ext4: Unknown parameter 'fowner<00000000000000000000' [ 72.292221][ T5535] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.305112][ T29] audit: type=1400 audit(1721752311.497:1839): avc: denied { write } for pid=5532 comm="syz.2.756" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 72.365990][ T29] audit: type=1400 audit(1721752311.557:1840): avc: denied { map } for pid=5526 comm="syz.4.754" path="/72/file1/blkio.bfq.io_wait_time_recursive" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 72.385503][ T5541] loop3: detected capacity change from 0 to 8192 [ 72.399525][ T5527] netlink: 176 bytes leftover after parsing attributes in process `syz.4.754'. [ 72.414527][ T5527] FAULT_INJECTION: forcing a failure. [ 72.414527][ T5527] name failslab, interval 1, probability 0, space 0, times 0 [ 72.424475][ T29] audit: type=1400 audit(1721752311.597:1841): avc: denied { execute } for pid=5526 comm="syz.4.754" path="/72/file1/blkio.bfq.io_wait_time_recursive" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 72.427241][ T5527] CPU: 0 UID: 0 PID: 5527 Comm: syz.4.754 Not tainted 6.10.0-syzkaller-12030-g66ebbdfdeb09 #0 [ 72.462713][ T5527] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 72.465181][ T5541] loop3: p4 < > [ 72.472836][ T5527] Call Trace: [ 72.472848][ T5527] [ 72.472857][ T5527] dump_stack_lvl+0xf2/0x150 [ 72.487331][ T5527] dump_stack+0x15/0x20 [ 72.491502][ T5527] should_fail_ex+0x229/0x230 [ 72.496225][ T5527] ? memcg_list_lru_alloc+0x1de/0x740 [ 72.501619][ T5527] should_failslab+0x8f/0xb0 [ 72.506237][ T5527] __kmalloc_noprof+0xa5/0x370 [ 72.511017][ T5527] memcg_list_lru_alloc+0x1de/0x740 [ 72.516285][ T5527] __memcg_slab_post_alloc_hook+0x1a2/0x650 [ 72.522201][ T5527] ? __d_alloc+0x3d/0x340 [ 72.526549][ T5527] ? should_fail_ex+0xd7/0x230 [ 72.531363][ T5527] ? __d_alloc+0x3d/0x340 [ 72.535798][ T5527] kmem_cache_alloc_lru_noprof+0x1ae/0x2a0 [ 72.541699][ T5527] __d_alloc+0x3d/0x340 [ 72.545884][ T5527] d_alloc_pseudo+0x1e/0x80 [ 72.550419][ T5527] alloc_file_pseudo+0x70/0x140 [ 72.555356][ T5527] hugetlb_file_setup+0x290/0x3c0 [ 72.560398][ T5527] ksys_mmap_pgoff+0x172/0x340 [ 72.565255][ T5527] x64_sys_call+0x1940/0x2e00 [ 72.569999][ T5527] do_syscall_64+0xc9/0x1c0 [ 72.574508][ T5527] ? clear_bhb_loop+0x55/0xb0 [ 72.579220][ T5527] ? clear_bhb_loop+0x55/0xb0 [ 72.583935][ T5527] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 72.589879][ T5527] RIP: 0033:0x7f82cdb85f19 [ 72.594301][ T5527] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 72.613922][ T5527] RSP: 002b:00007f82cc807048 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 72.622363][ T5527] RAX: ffffffffffffffda RBX: 00007f82cdd15f60 RCX: 00007f82cdb85f19 [ 72.630338][ T5527] RDX: 0000000004000002 RSI: 0000000000c00000 RDI: 0000000020400000 [ 72.638321][ T5527] RBP: 00007f82cc8070a0 R08: ffffffffffffffff R09: 0000000000000000 [ 72.646309][ T5527] R10: 0000000000050032 R11: 0000000000000246 R12: 0000000000000001 [ 72.654301][ T5527] R13: 000000000000000b R14: 00007f82cdd15f60 R15: 00007ffda85d0198 [ 72.662339][ T5527] [ 72.680636][ T5564] loop0: detected capacity change from 0 to 512 [ 72.698190][ T5564] EXT4-fs (loop0): orphan cleanup on readonly fs [ 72.704993][ T5564] Quota error (device loop0): find_tree_dqentry: Cycle in quota tree detected: block 2 index 0 [ 72.715619][ T5564] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 72.725123][ T5564] EXT4-fs error (device loop0): ext4_acquire_dquot:6848: comm syz.0.761: Failed to acquire dquot type 1 [ 72.739362][ T5564] EXT4-fs (loop0): 1 truncate cleaned up [ 72.745571][ T5564] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 72.763398][ T5568] loop3: detected capacity change from 0 to 512 [ 72.787177][ T3583] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.816967][ T5544] chnl_net:caif_netlink_parms(): no params data found [ 72.850834][ T4232] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.867655][ T3583] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.881165][ T5573] FAULT_INJECTION: forcing a failure. [ 72.881165][ T5573] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 72.894715][ T5573] CPU: 0 UID: 0 PID: 5573 Comm: syz.2.765 Not tainted 6.10.0-syzkaller-12030-g66ebbdfdeb09 #0 [ 72.904979][ T5573] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 72.915039][ T5573] Call Trace: [ 72.918318][ T5573] [ 72.921250][ T5573] dump_stack_lvl+0xf2/0x150 [ 72.925898][ T5573] dump_stack+0x15/0x20 [ 72.930119][ T5573] should_fail_ex+0x229/0x230 [ 72.934892][ T5573] should_fail_alloc_page+0xfd/0x110 [ 72.940199][ T5573] __alloc_pages_noprof+0x109/0x360 [ 72.945420][ T5573] alloc_pages_mpol_noprof+0xb1/0x1e0 [ 72.950870][ T5573] vma_alloc_folio_noprof+0x182/0x2d0 [ 72.956257][ T5573] handle_mm_fault+0xf13/0x28c0 [ 72.961156][ T5573] exc_page_fault+0x3b9/0x650 [ 72.965943][ T5573] asm_exc_page_fault+0x26/0x30 [ 72.970853][ T5573] RIP: 0033:0x7fa034c7b703 [ 72.975333][ T5573] Code: 1f 84 00 00 00 00 00 3d 00 01 00 00 75 29 45 31 f6 48 83 c4 18 44 89 f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 40 00 49 8b 0f <44> 88 34 01 49 83 47 10 01 eb 92 66 90 8d 90 ff fe ff ff 83 fa 1c [ 72.994948][ T5573] RSP: 002b:00007fa033a364b0 EFLAGS: 00010202 [ 73.001024][ T5573] RAX: 0000000000008000 RBX: 00007fa033a36550 RCX: 00007fa02b617000 [ 73.009001][ T5573] RDX: 00007fa033a366f0 RSI: 0000000000000011 RDI: 00007fa033a365f0 [ 73.017004][ T5573] RBP: 0000000000000028 R08: 0000000000000007 R09: 000000000000003b [ 73.024977][ T5573] R10: 000000000000004c R11: 00007fa033a36550 R12: 0000000000000001 [ 73.032951][ T5573] R13: 00007fa034e35fa0 R14: 0000000000000002 R15: 00007fa033a365f0 [ 73.040934][ T5573] [ 73.044448][ T5573] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 73.090926][ T5573] loop2: detected capacity change from 0 to 2048 [ 73.136511][ T5577] loop3: detected capacity change from 0 to 512 [ 73.155320][ T5573] EXT4-fs error (device loop2): ext4_ext_check_inode:520: inode #2: comm syz.2.765: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 5(5) [ 73.174083][ T5577] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 73.186297][ T5573] EXT4-fs (loop2): get root inode failed [ 73.192109][ T5573] EXT4-fs (loop2): mount failed [ 73.202794][ T5577] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a016c018, mo2=0002] [ 73.212302][ T5577] System zones: 1-12 [ 73.217178][ T5577] EXT4-fs (loop3): 1 truncate cleaned up [ 73.225845][ T5577] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.245504][ T3583] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.310679][ T5544] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.317861][ T5544] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.328507][ T5544] bridge_slave_0: entered allmulticast mode [ 73.336373][ T5544] bridge_slave_0: entered promiscuous mode [ 73.349254][ T3583] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.366493][ T5544] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.373632][ T5544] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.382249][ T5544] bridge_slave_1: entered allmulticast mode [ 73.389594][ T5544] bridge_slave_1: entered promiscuous mode [ 73.410586][ T5544] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.423151][ T5544] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.438957][ T4529] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.480914][ T5544] team0: Port device team_slave_0 added [ 73.487071][ T5584] loop4: detected capacity change from 0 to 8192 [ 73.489179][ T5586] loop2: detected capacity change from 0 to 512 [ 73.502640][ T5544] team0: Port device team_slave_1 added [ 73.513761][ T5586] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 73.526280][ T5586] EXT4-fs (loop2): 1 truncate cleaned up [ 73.532431][ T5586] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.546514][ T3583] bridge_slave_1: left allmulticast mode [ 73.552362][ T3583] bridge_slave_1: left promiscuous mode [ 73.556918][ T5584] loop4: p1 < > p2 < p5 > p4 [ 73.558074][ T3583] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.565188][ T5584] loop4: p4 size 16776960 extends beyond EOD, truncated [ 73.577309][ T3583] bridge_slave_0: left allmulticast mode [ 73.578845][ T5584] loop4: p5 size 16776960 extends beyond EOD, truncated [ 73.582980][ T3583] bridge_slave_0: left promiscuous mode [ 73.595674][ T3583] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.631804][ T5595] loop4: detected capacity change from 0 to 512 [ 73.638835][ T5595] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 73.650022][ T5595] EXT4-fs (loop4): 1 truncate cleaned up [ 73.657015][ T5595] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.701239][ T5182] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.713144][ T3583] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 73.724918][ T3583] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 73.737944][ T3583] bond0 (unregistering): Released all slaves [ 73.743325][ T5603] loop3: detected capacity change from 0 to 1024 [ 73.751255][ T5603] EXT4-fs: Ignoring removed orlov option [ 73.753142][ T5544] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.757098][ T5603] /dev/loop3: Can't open blockdev [ 73.763873][ T5544] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.763905][ T5544] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.766136][ T5604] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 73.770866][ T5544] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.819893][ T5544] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.845819][ T5544] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.895905][ T5544] hsr_slave_0: entered promiscuous mode [ 73.897037][ T5611] loop3: detected capacity change from 0 to 512 [ 73.908206][ T5544] hsr_slave_1: entered promiscuous mode [ 73.917958][ T5544] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 73.932088][ T5544] Cannot create hsr debugfs directory [ 73.951543][ T3583] hsr_slave_0: left promiscuous mode [ 73.959022][ T3583] hsr_slave_1: left promiscuous mode [ 73.965127][ T3583] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 73.972644][ T3583] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 73.982141][ T3583] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 73.989685][ T3583] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 74.001170][ T3583] veth1_macvtap: left promiscuous mode [ 74.006761][ T3583] veth0_macvtap: left promiscuous mode [ 74.012617][ T3583] veth1_vlan: left promiscuous mode [ 74.018020][ T3583] veth0_vlan: left promiscuous mode [ 74.114798][ T3583] team0 (unregistering): Port device team_slave_1 removed [ 74.124877][ T3583] team0 (unregistering): Port device team_slave_0 removed [ 74.200583][ T3093] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.201199][ T4232] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.253275][ T5637] loop0: detected capacity change from 0 to 256 [ 74.270089][ T5637] msdos: Unknown parameter 'showexkhçBodots' [ 74.302906][ T5644] loop0: detected capacity change from 0 to 512 [ 74.337699][ T5648] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1014 sclass=netlink_route_socket pid=5648 comm=syz.0.786 [ 74.395449][ T5654] loop2: detected capacity change from 0 to 1024 [ 74.396367][ T5656] loop4: detected capacity change from 0 to 512 [ 74.411352][ T5656] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 74.423346][ T5656] EXT4-fs (loop4): 1 truncate cleaned up [ 74.429415][ T5656] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.446475][ T5656] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 74.502039][ T5663] netlink: 148 bytes leftover after parsing attributes in process `syz.2.793'. [ 74.529481][ T5665] loop0: detected capacity change from 0 to 512 [ 74.546660][ T5665] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 74.566204][ T5544] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 74.574300][ T5665] EXT4-fs (loop0): 1 truncate cleaned up [ 74.583925][ T5544] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 74.590920][ T5665] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.606245][ T5544] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 74.616264][ T5544] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 74.648403][ T5665] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 74.665962][ T5544] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.680028][ T5544] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.693748][ T3163] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.700927][ T3163] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.712857][ T4232] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.712984][ T3163] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.728995][ T3163] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.768998][ T5673] loop4: detected capacity change from 0 to 512 [ 74.833019][ T5544] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.894590][ T4529] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.929568][ T5544] veth0_vlan: entered promiscuous mode [ 74.938202][ T5544] veth1_vlan: entered promiscuous mode [ 74.956776][ T5544] veth0_macvtap: entered promiscuous mode [ 74.965269][ T5544] veth1_macvtap: entered promiscuous mode [ 74.982959][ T5544] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.993543][ T5544] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.003748][ T5544] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.014225][ T5544] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.024074][ T5544] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.034571][ T5544] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.044429][ T5544] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.055002][ T5544] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.067691][ T5544] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.079233][ T5698] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1014 sclass=netlink_route_socket pid=5698 comm=syz.0.802 [ 75.121213][ T5544] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.131826][ T5544] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.141776][ T5544] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.152226][ T5544] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.162048][ T5544] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.172497][ T5544] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.182396][ T5544] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.192933][ T5544] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.204212][ T5544] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.217363][ T5544] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.226168][ T5544] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.235053][ T5544] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.243815][ T5544] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.344427][ T5715] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 75.650112][ T5733] ipip0: entered promiscuous mode [ 75.676724][ T5735] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 75.734277][ T5745] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1014 sclass=netlink_route_socket pid=5745 comm=syz.2.815 [ 75.804885][ T5751] loop4: detected capacity change from 0 to 512 [ 75.811904][ T5751] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 75.823008][ T5751] EXT4-fs (loop4): 1 truncate cleaned up [ 75.829293][ T5751] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.848332][ T5751] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 75.917970][ T5763] loop2: detected capacity change from 0 to 512 [ 75.924897][ T5763] EXT4-fs (loop2): can't mount with data=, fs mounted w/o journal [ 76.014465][ T5763] bridge_slave_0: left allmulticast mode [ 76.020234][ T5763] bridge_slave_0: left promiscuous mode [ 76.025860][ T5763] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.034654][ T5763] bridge_slave_1: left allmulticast mode [ 76.040415][ T5763] bridge_slave_1: left promiscuous mode [ 76.046111][ T5763] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.056230][ T5763] bond0: (slave bond_slave_0): Releasing backup interface [ 76.068466][ T5763] bond0: (slave bond_slave_1): Releasing backup interface [ 76.086243][ T5763] team0: Port device team_slave_0 removed [ 76.098147][ T5763] team0: Port device team_slave_1 removed [ 76.105451][ T5763] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 76.112995][ T5763] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 76.123260][ T5763] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 76.130744][ T5763] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 76.174303][ T4232] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.235345][ T5770] loop1: detected capacity change from 0 to 256 [ 76.335592][ T29] kauditd_printk_skb: 80 callbacks suppressed [ 76.335608][ T29] audit: type=1400 audit(1721752315.588:1922): avc: denied { ioctl } for pid=5771 comm="syz.2.827" path="socket:[15649]" dev="sockfs" ino=15649 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 76.381768][ T5782] loop0: detected capacity change from 0 to 2048 [ 76.388628][ T5782] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 76.456778][ T5792] netlink: 24 bytes leftover after parsing attributes in process `syz.2.833'. [ 76.479319][ T5792] team0: entered promiscuous mode [ 76.492251][ T5797] netlink: 12 bytes leftover after parsing attributes in process `syz.1.835'. [ 76.504633][ T5804] loop3: detected capacity change from 0 to 512 [ 76.504978][ T5797] geneve2: entered promiscuous mode [ 76.516211][ T5797] geneve2: entered allmulticast mode [ 76.518538][ T5804] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 76.535801][ T5790] team0: left promiscuous mode [ 76.540996][ T5797] netlink: 8 bytes leftover after parsing attributes in process `syz.1.835'. [ 76.545384][ T5804] EXT4-fs (loop3): 1 truncate cleaned up [ 76.556634][ T5804] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.574846][ T5809] loop2: detected capacity change from 0 to 512 [ 76.602328][ T5804] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 76.633749][ T29] audit: type=1400 audit(1721752315.888:1923): avc: denied { write } for pid=5810 comm="syz.4.839" name="uhid" dev="devtmpfs" ino=226 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 76.657673][ T5822] FAULT_INJECTION: forcing a failure. [ 76.657673][ T5822] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 76.670812][ T5822] CPU: 0 UID: 0 PID: 5822 Comm: syz.1.843 Not tainted 6.10.0-syzkaller-12030-g66ebbdfdeb09 #0 [ 76.681147][ T5822] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 76.681187][ T5824] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 76.691217][ T5822] Call Trace: [ 76.691247][ T5822] [ 76.691255][ T5822] dump_stack_lvl+0xf2/0x150 [ 76.712059][ T5822] dump_stack+0x15/0x20 [ 76.716228][ T5822] should_fail_ex+0x229/0x230 [ 76.720966][ T5822] should_fail+0xb/0x10 [ 76.725212][ T5822] should_fail_usercopy+0x1a/0x20 [ 76.730256][ T5822] _copy_to_user+0x1e/0xa0 [ 76.734725][ T5822] simple_read_from_buffer+0xa0/0x110 [ 76.740136][ T5822] proc_fail_nth_read+0xfc/0x140 [ 76.745127][ T5822] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 76.750773][ T5822] vfs_read+0x1a2/0x6e0 [ 76.755034][ T5822] ? __rcu_read_unlock+0x4e/0x70 [ 76.759977][ T5822] ? __fget_files+0x1da/0x210 [ 76.764704][ T5822] ksys_read+0xeb/0x1b0 [ 76.768918][ T5822] __x64_sys_read+0x42/0x50 [ 76.773581][ T5822] x64_sys_call+0x2a36/0x2e00 [ 76.778287][ T5822] do_syscall_64+0xc9/0x1c0 [ 76.782824][ T5822] ? clear_bhb_loop+0x55/0xb0 [ 76.787529][ T5822] ? clear_bhb_loop+0x55/0xb0 [ 76.792214][ T5822] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.798226][ T5822] RIP: 0033:0x7fd1b5dc49fc [ 76.802730][ T5822] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8c 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 1f 8d 02 00 48 [ 76.822431][ T5822] RSP: 002b:00007fd1b4a47040 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 76.830906][ T5822] RAX: ffffffffffffffda RBX: 00007fd1b5f55f60 RCX: 00007fd1b5dc49fc [ 76.838915][ T5822] RDX: 000000000000000f RSI: 00007fd1b4a470b0 RDI: 0000000000000004 [ 76.847033][ T5822] RBP: 00007fd1b4a470a0 R08: 0000000000000000 R09: 0000000000000000 [ 76.855094][ T5822] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 76.863149][ T5822] R13: 000000000000000b R14: 00007fd1b5f55f60 R15: 00007ffef369edc8 [ 76.871368][ T5822] [ 76.912062][ T5830] netlink: 52 bytes leftover after parsing attributes in process `syz.1.847'. [ 76.921137][ T5830] netlink: 52 bytes leftover after parsing attributes in process `syz.1.847'. [ 76.930317][ T29] audit: type=1400 audit(1721752316.178:1924): avc: denied { create } for pid=5827 comm="syz.2.846" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 76.942514][ T5830] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 76.968955][ T29] audit: type=1326 audit(1721752316.228:1925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5833 comm="syz.2.848" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa034db5f19 code=0x0 [ 76.999502][ T5837] loop1: detected capacity change from 0 to 1024 [ 77.007220][ T5182] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.023593][ T5842] loop2: detected capacity change from 0 to 512 [ 77.037348][ T5842] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 77.048854][ T5845] loop1: detected capacity change from 0 to 512 [ 77.051134][ T5846] autofs4:pid:5846:validate_dev_ioctl: path string terminator missing for cmd(0xc018937e) [ 77.055879][ T5845] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 77.074984][ T5846] loop3: detected capacity change from 0 to 1024 [ 77.076760][ T5842] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a016c018, mo2=0002] [ 77.083771][ T5846] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 77.089646][ T5842] System zones: 1-12 [ 77.103015][ T5845] EXT4-fs (loop1): 1 truncate cleaned up [ 77.110348][ T5842] EXT4-fs (loop2): 1 truncate cleaned up [ 77.110738][ T5845] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 77.116492][ T5842] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.129853][ T5846] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 77.148676][ T5846] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e840e018, mo2=0000] [ 77.156692][ T5845] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 77.156857][ T5846] System zones: 0-1, 3-12 [ 77.168722][ T5846] EXT4-fs (loop3): orphan cleanup on readonly fs [ 77.175312][ T5846] EXT4-fs error (device loop3): ext4_free_blocks:6590: comm syz.3.850: Freeing blocks not in datazone - block = 0, count = 4096 [ 77.189355][ T5846] EXT4-fs (loop3): 1 orphan inode deleted [ 77.195567][ T5846] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 77.234397][ T5852] loop0: detected capacity change from 0 to 512 [ 77.250296][ T5182] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.269916][ T5856] netlink: 88 bytes leftover after parsing attributes in process `syz.3.853'. [ 77.280399][ T5858] netlink: 52 bytes leftover after parsing attributes in process `syz.0.855'. [ 77.289418][ T5858] netlink: 52 bytes leftover after parsing attributes in process `syz.0.855'. [ 77.298846][ T5858] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 77.319996][ T5860] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 77.341228][ T29] audit: type=1400 audit(1721752316.588:1926): avc: denied { connect } for pid=5861 comm="syz.0.857" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 77.377147][ T5865] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 77.378440][ T5544] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.484104][ T29] audit: type=1400 audit(1721752316.738:1927): avc: denied { ioctl } for pid=5874 comm="syz.3.861" path="socket:[14908]" dev="sockfs" ino=14908 ioctlcmd=0x9411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 77.542465][ T5877] ================================================================== [ 77.550593][ T5877] BUG: KCSAN: data-race in kernfs_iop_permission / kernfs_iop_permission [ 77.559058][ T5877] [ 77.561386][ T5877] write to 0xffff888105393ad8 of 8 bytes by task 5878 on cpu 1: [ 77.569109][ T5877] kernfs_iop_permission+0x13f/0x220 [ 77.574458][ T5877] inode_permission+0x18c/0x300 [ 77.579321][ T5877] link_path_walk+0x5f3/0x820 [ 77.584014][ T5877] path_lookupat+0x72/0x2b0 [ 77.588528][ T5877] do_o_path+0x44/0x120 [ 77.592693][ T5877] path_openat+0x1bd2/0x1f10 [ 77.597297][ T5877] do_filp_open+0xf7/0x200 [ 77.601725][ T5877] do_sys_openat2+0xab/0x120 [ 77.606323][ T5877] __x64_sys_openat+0xf3/0x120 [ 77.611112][ T5877] x64_sys_call+0x1ac/0x2e00 [ 77.615710][ T5877] do_syscall_64+0xc9/0x1c0 [ 77.620215][ T5877] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.626124][ T5877] [ 77.628450][ T5877] write to 0xffff888105393ad8 of 8 bytes by task 5877 on cpu 0: [ 77.636080][ T5877] kernfs_iop_permission+0x13f/0x220 [ 77.641380][ T5877] inode_permission+0x18c/0x300 [ 77.646241][ T5877] link_path_walk+0x5f3/0x820 [ 77.650924][ T5877] path_lookupat+0x72/0x2b0 [ 77.655435][ T5877] do_o_path+0x44/0x120 [ 77.659603][ T5877] path_openat+0x1bd2/0x1f10 [ 77.664209][ T5877] do_filp_open+0xf7/0x200 [ 77.668641][ T5877] do_sys_openat2+0xab/0x120 [ 77.673326][ T5877] __x64_sys_openat+0xf3/0x120 [ 77.678101][ T5877] x64_sys_call+0x1ac/0x2e00 [ 77.682703][ T5877] do_syscall_64+0xc9/0x1c0 [ 77.687213][ T5877] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.693151][ T5877] [ 77.695491][ T5877] value changed: 0x00000000669fd9c3 -> 0x00000000669fdafc [ 77.702597][ T5877] [ 77.704920][ T5877] Reported by Kernel Concurrency Sanitizer on: [ 77.711067][ T5877] CPU: 0 UID: 0 PID: 5877 Comm: syz.3.862 Not tainted 6.10.0-syzkaller-12030-g66ebbdfdeb09 #0 [ 77.721310][ T5877] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 77.731387][ T5877] ================================================================== [ 77.808140][ T3093] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.