last executing test programs: 8.685561257s ago: executing program 3 (id=5083): syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000000)='./bus\x00', 0x100010e, &(0x7f0000000480)={[], [{@smackfsfloor={'smackfsfloor', 0x3d, '#! '}}, {@mask={'mask', 0x3d, 'MAY_READ'}}, {@smackfshat={'smackfshat', 0x3d, 'GPL\x00'}}, {@uid_gt={'uid>', 0xee00}}, {@func={'func', 0x3d, 'MODULE_CHECK'}}, {@dont_measure}, {@obj_type={'obj_type', 0x3d, '%%)'}}, {@subj_role={'subj_role', 0x3d, '/dev/snd/timer\x00'}}]}, 0x2, 0x474, &(0x7f0000000840)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events.local\x00', 0x275a, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x4, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x3a) ioctl$PPPIOCGL2TPSTATS(r2, 0x80487436, &(0x7f0000000040)="16bf76") write$binfmt_script(r0, &(0x7f0000000d80), 0x208e24b) inotify_init() bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000000380)={0x10, 0x0, 0x0, 0x400}, 0xc) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000280), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r4, 0x40045402, &(0x7f0000000040)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f00000083c0)={{0x2, 0x0, 0x40000}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r4, 0x40505412, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0xf}) syz_io_uring_setup(0xa7, &(0x7f0000000540)={0x0, 0x2d2c, 0x10, 0x0, 0x100017a}, &(0x7f0000000100)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r5, r6, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, {0xc075}}) ioctl$SNDRV_TIMER_IOCTL_START(r4, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r4, 0x54a2) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x5, &(0x7f00000003c0)=0x0) io_submit(r9, 0x1, &(0x7f0000000080)=[&(0x7f0000000400)={0x0, 0x0, 0x0, 0x5, 0x0, r8, 0x0}]) connect$unix(r8, &(0x7f0000000100)=@abs={0x0, 0x0, 0x4e23}, 0x6e) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000080)={0x0, @in={{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xd}}}, [0x8000, 0xfffffffffffffffe, 0xfffb, 0x8001, 0x8, 0x6000000000000, 0x4, 0x100400000, 0x10000, 0x44773838, 0x3, 0x4, 0x795, 0x2, 0x80008]}, &(0x7f00000001c0)=0x100) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r7, 0x84, 0x1f, &(0x7f0000000200)={r10, @in6={{0xa, 0x4e20, 0x8, @mcast2, 0xe9}}, 0x800, 0x1}, 0x90) r11 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) ioctl$sock_ifreq(r11, 0x8914, &(0x7f0000000000)={'bond0\x00', @ifru_map}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000d00000000080000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x17, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x90) 8.131924833s ago: executing program 3 (id=5087): r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000008c0), 0x0, 0x0) capset(0x0, 0x0) setpriority(0x0, 0x0, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, 0x0, 0x40) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000200)) io_setup(0x0, &(0x7f0000000240)) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x8, 0x110, 0xffffffffffffffff, 0x0) pread64(r0, &(0x7f0000001100)=""/236, 0xec, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = socket(0x2c, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4}, 0x48) connect$unix(r0, 0x0, 0xfeb7) arch_prctl$ARCH_SHSTK_UNLOCK(0x5004, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) r3 = accept4(r1, 0x0, &(0x7f0000000180), 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, 0x0) iopl(0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000e00)={0xf, 0x29, &(0x7f0000000ec0)=ANY=[@ANYBLOB="0100000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018120000", @ANYRES64=r3, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000b6080000850000000600000018320000050000000000000000000000185800000c000000000000000000000018120000", @ANYRES32=r2, @ANYRESDEC=r0, @ANYRES32=r2, @ANYBLOB="0000000000000000186900000b0000000000000003000000bf91000000000000b7020000020000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x67, &(0x7f0000000380)=""/103, 0x41000, 0x10, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000000300)={0x4, 0x10, 0x3ff, 0xa47b}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000400)=[r2, r2, r2, r2, 0xffffffffffffffff], 0x0, 0x10, 0x7fffffff}, 0x90) bpf$BPF_PROG_ATTACH(0x21, &(0x7f00000017c0)={@ifindex, r5, 0x0, 0x0, r4, @prog_id}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000100)) ioprio_set$pid(0x1, 0x0, 0x0) ioprio_get$pid(0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x3000490, &(0x7f00000001c0)={[{@dioread_lock}, {@usrjquota}, {@errors_remount}, {@norecovery}, {@auto_da_alloc}, {@noquota}, {@grpquota}, {@barrier_val}, {@grpjquota}, {@jqfmt_vfsold}]}, 0x45, 0x7b1, &(0x7f00000004c0)="$eJzs3c9rHNcdAPDvrFY/7VYqFFr3JCi0BuNV5ap2C4Wq9FAKNRjaUw+1xWotHK20RrsylhCJTQjkEkhCbsnF5/y8hFzz45BL8n8EGyeRTRxyCAqzP6SVtCvvOtKuHX8+MNZ7M2/2ve+82TfPmtFuAE+tyfSfTMSJiHg5iRivr08iYrCaykbM1so92NzIp0sSW1v/+Sqplrm/uZGPpn1Sx+qZX0fExy9EnMrsr7e8tr44VywWVur5qcrS1any2vrpK0tzC4WFwvLZ6ZmZM+f+dO7s4cX6zefrx++88s/fvzP73fO/evelT5KYjeP1bc1xHJbJmKwfk8H0EO7yj8OurG/ef7aDQk1nQPYoG0OX0o4ZqPfKiRiPgYP6Z7SXLQMAjspzEbHVzkDbLQDAEy2pXf//1u92AAC90vg9wP3NjXxj6e9vJHrr7t8jYqQWf+P+Zm1Ltn7PbqR6H3TsfrLrzkgSEROHUP9kRLzxwf/fSpc4ovuQAK3cuBkRlyYm94//yb5nFrr1h9arF5ozk3s2Gv+gdz5M5z9/bjX/y2zPf6LF/Ge4xXv3UTz8/Z+5fQjVtJXO//7a9Gzbg6b46yYG6rmfVed8g8nlK8VCOrb9PCJOxuBwmp8+oI6T976/125b8/zv61efeTOtP/25UyJzOzu8e5/5ucrcj4m52d2bEb/Jtoo/Hf+Hq/2ftJn/Xuiwjn/95cXX221L40/jbSz74z9aW7ciftey/5PtMsmBzydOVU+HqcZJ0cJ7szHWrv7J7E7/p0taf+P/Ar2Q9v/YwfFPJM3Pa5Y7funtp8U+uzX+UbtCzed/6/hbn/9DyX+r6aH6uutzlcrKdMRQ8u/968/s7NvIN8qn8Z/8bev3f2P8a3H+/y99/UsdHojsnS/ffvT4j1Ya/3xX/d91IkYeLA60q7+z/p/ZtU8n41+nDXzU4wYAAAAAAAAAAAAAAAAAAAAAAAAA3chExPFIMrntdCaTy9W+w/uXMZYplsqVU5dLq8vzUf2u7IkYzDQ+6nK86fNQp+ufh9/In9mT/2NE/CIiXhsereZz+VJxvt/BAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDdsTbf/5/6YnhP4YF+tBAAOBIjLuwA8LRJstl+NwEA6LWRrkqPHlk7AIDe6e76DwD8FLj+A8DT5yHX/71/BgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADdunD+fLpsfbu5kU/z89fWVhdL107PF8qLuaXVfC5fWrmaWyiVFoqFXL601PaFbtR+FEulqzOxvHp9qlIoV6bKa+sXl0qry5WLV5bmFgoXC4M9iwwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOldeW1+cKxYLKxJ9SSx+WuuHx6U9Et0l4kat/x6X9hxeIoZ2RonR/gxOAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAE+AHwIAAP//4VQjgA==") rename(&(0x7f00000002c0)='./file2\x00', &(0x7f0000000340)='./bus\x00') r6 = open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x0) r7 = open(&(0x7f0000007f80)='./bus\x00', 0x0, 0x0) sendfile(r6, r7, 0x0, 0x1000000201005) 7.908296931s ago: executing program 3 (id=5092): mkdir(&(0x7f0000000580)='./file0\x00', 0x0) socket$inet_udplite(0x2, 0x2, 0x88) (async) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, 0x0, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x5, &(0x7f0000000000)=@framed={{}, [@alu, @jmp={0x6}]}, 0x0}, 0x90) (async) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) (async) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_tcp_int(r2, 0x6, 0x5, 0x0, 0x0) (async) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) (async) write$sndseq(r1, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=@ipv6_newrule={0x34, 0x20, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_DPORT_RANGE={0x8, 0x18, {0x4e23, 0x4e23}}, @FIB_RULE_POLICY=@FRA_SUPPRESS_PREFIXLEN={0x8}, @FIB_RULE_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e20, 0x4e22}}]}, 0x34}}, 0x0) acct(&(0x7f0000000080)='./file0\x00') (async) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) (async) r3 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) (async, rerun: 64) socket$netlink(0x10, 0x3, 0x8000000004) (async, rerun: 64) name_to_handle_at(r3, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)=@ceph_nfs_fh={0x8}, 0x0, 0x200) 7.356771746s ago: executing program 3 (id=5098): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) r1 = socket$inet6(0xa, 0x3, 0x2f) prlimit64(0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000003c0)={{{@in6=@empty, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@private, 0x0, 0x6c}, 0x0, @in6=@empty, 0x0, 0x0, 0x0, 0x2}}, 0xe8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) 7.221759168s ago: executing program 3 (id=5099): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) mq_timedsend(r0, &(0x7f0000000600)="6d12483bb95dab4da2bccb9a5c51f7769b4aa2ed6f00bcfff2058843f7de72fa8f9dd7572991db9f2968c67d150dbd80321f91c14a7705c3d6e2292f74d074e24cdfdc28da61b60db4ac67a81c04430dd72555dcebe8193594b8fe29718d5781fe3f418379dab48089b86edc4facdbc388e30fdfabe867722b348dcfbff8f7745bb98584b3384eb1b1c541d05427c4e5c33b3692ebf599d4a179bcd27271d55e4a38ac7be3cae3e85eddbdcf574ac462df22b6b2242245f32d5826de908a96ea66331cad4d0ff094f552e118ee643f2f12f854c32d4e548bd82a69c4102bc516a41a52436f6dfd80133de801fdc8e75276c631f041d86269f2ba0791e8119868816c1fe9c78654919d6dcce67a5f32b77575867f43f76e99108bf9ee3fd550cc18f8bee8505da7ea8fe0a3a9e40c01be1d39435821c5f52cf39a7d5558f278b01be298e5460d3ebf011345ed0030603f767fe44876fdf1cb172a4cbfb2f7784ac61c4786a147b6d446eaf46d5b26c6b85580ba4913fc12a443d8dcf05d08513ae01a7f489826fdc8bff83c1708ebbc060aa72d25e6ce21521799bd37c34fdad973fd7e17070b7783bf341fc079c6b0c9811388430c84540d8d544d1887b73e3a9d2625358be4b09128ee7f8d2dacf2d9704b9143c0341568d1e39429e1d442d21878c87271e66651e12d077b8dd49c0bf285097e261a5116b91036368265c1c5b74353bb42ff4936e27a20c48dea290685b09c2e5baa29dbeb790969f793692fb112c973329236f30bd29c39ee6104e1e0ccd1f855e5837d156c83834661a2aa8929ad78c025413179d880ee905d0b1ee1c9c3eacb63ac807a6ce73d492502ce52beba9ea5214a9387e2c5a810a96e14956809b6865e46a9d9ce2deb4cce2155562dd7e3daef9b3c0c0a55f1fe1a89835971dbc9c09ee9d4abe827b0e87dcd08e5e7cf08869cdcd6fe7f42d93c075db2fec9d96aff21410c3cbd5d904ed147af08c297011ec105dec6fb319cc5637ac71dac05d01ef356dcc6b6bd3f8625204d92f6d0447c0ee5c72d13b4e951a5ba060d4e0ab4680bba08ca9e0079ed6332e6449e01ec480903b0f377e08e8146c8a1e86df678dd88f3768e0958b04f24d58f39a15ee93e4b3e1e2dcd91f8cd36c37b2806d5f7c1871d0e1d7496ac64b377a8fb32104166536597bbfd6d814b2eb41970ba1aef50238e34ec8069690029c58c8a01b28b711ff44aed4652629c7cdc7843d83efe9514bb5b1f80d1047e6075870c53505a142e48d6897d7811f84d8c3e8f9985f9a9d01c8fd68960aee376caa465f25622d7ff5deae8f0d628e048bc4387ca3046067768f3014a3ef4d1b55123ce45507ab1b6f587f6302bb9b715899d2fc20cabfd306549b6a2ec8ea5169e5be19cf59ef71cbb16d402cdc62a422b2bf5c01bb6139e60fd61ea4b77382c7e2e038c6511bfe08f7a3cea5e793f9e2cb4facce20e719d179104418f6745bf8065c70da3815c8e1a1b650d96865c41fd45dbcae51e1d54b41002c2f673cd1008dbf3f17847dd28d8fe3c24ef238000be692e05b0365cb7691fa8f134efe70df46b5cc4765def995971ae0c45f653292f4a3c26300e359afbe0c4f7b049f505ab8e8a0d4c7090cc07c62dbcb9bf6682425553de4ca63f98ac5d420d01bf729bf815683d11451eea0295675778f00bef94ac6e29dd2285847fd857cf2d204de3170e024169d568500befd5c6f34e9d3fcae78bd8fcd6d8f85fcf56241c7787d86bdfca06a6e69b996d72530c94eaa82e99f8ccbd66b53ce0f066fffcb3b643f84a1112c4c8a153ef745f7da3c4887f95de7df8dcf6653200eccb389a7aad4a874d347791cd00cf767bdd8d36de55cbc0879e11cddec175b36be0d1224d1dab7d8f8f3bab0f622d031be123b6ab48188716162afea5e0529830a39c3c9edc86b3e6020830f2f94060685d96887fb536afaedcd9523c53e5e210e87a07bc941b29b968ec9b0f6e5a74b929ad56ef7e80b981d39460040df8aedb253bc4681e72de2b3e886320b2f9a52f675bb08e4dee27b468d0822d6269ad1eee16d1c1781ad17b1fae21b44e427ace6d1fa932ca9c295c5ae74140ffea23ac2b70a6ca71af12c6d63adc32110521cee84dce3514c51417fa794fff4fb7b72844fbb3ba786173d3ffea23e03eb49acbd957d52494ffff3cd2dc420ace19bbe375aabb97953dd1b8adc24856a81b2888e2fb635332c2d4257cf6833ccb3135c0327f79c4846b691b693b066cd5de30ca40e29fe8775fd6a8844f566223008d017ccb6f2ee47496b61aa2900f64c1e2136c8dfbb6dd7ab368e0cfeb3e639657f16d9f26f0c575b61476ea7cd499e2fffe75f6118d19d6186e9433d1b92dc30e84bceba4c9bd8e889575c50da8e236d0ad184a2ae7e91e31485a44389a7c6a63c4d7588fa0755ae292102c46df1cfcc21eccfa5bc815a2491cb845de2feae93d5a9365cff327d048b7e66733b1d1cbf1eadae7296631f3f1681ab5878272a9b17e11f64e8ea8afbd297f388b951e39b94d909c74a4c667f6204128c84566c2347222a984f67177160e3f144518721f25aab93c9d0a34d407b84485bf1f2fa07af7de0617dbda0b2eb3ef839d6ad8649fa7133e14646cb30462e827a1bba8b6cf97c93c95552c70aae8ba4918f8b51275ed7e1f90f7ae7a5313aff699f54265adad4b0608a90165c8e7df729ceb0eda12357ea37e7bbb86fc542544c93d494d4edfd098432e389666a8a93f4333e630deefa87397ece144a59fbf736aeefb7b66744954e8076e9d0534508a3631dbdcd2c15b5fd844d62409bf6c63699ac5ff0cab98d4b7f0e33e5cb20853554c895ea26607e9554d74e1511c4c476c41aa7fa717259e5048d80f1f30f07dd5397c17d818dac1849b7ccf6425fa0265edfecb58a763615dedbe98e215ce63dd1688e191a191ccdb4e939bd370f68054440296cb511b5f070fb9479bdef321b7d124506f6345ac3c2ca0ef22292d3f83ec21908de3a3c7f98cc5e086034d0b08df704382a8ee9f6129542cac7dc5fd54e71270f5ea9739b625347f3200d6f74d41106aed8fa8af5a3a6cd58a44de62af681d449a44b5f86702e625a1658f2bb09e1c7a178ec27081bb8e0f3febf700a1663374325bbb17a17c6178fbc0424f83cfafdd8ed301450bc6822105e6033bc999c833ce3f60814f9db98c3880aae837027cc4fd82a1aa61d1c7fbacf0e5da0c820f97e35f52abb212dcfd77c7e159ef4f777a2cbf61508539660a577974291852a3dfdcb0706961faf65f62745240e281e9c1ea25a2bf29729008b59b5bac92c8ffc53b240761c0021edb53bad82a322510f480a53945c63803abb0b5947aa32a7ad5cf8059933ae4dc5d18a261b8d4a126dadd1d7f186cc0f3bc00c82c15516ea2a4b5a5517395d2a16a3beb920b16c706381bae273443ebfa3c37778596177de18a62cb96c08a35459a897ac87bcd87cdbcecae83c95cd4b5eb878a8d31e75955eb11e0cb58c6ad2b39f8f9350ff95778a961b07b4b0e4ff6b58caab6db44c6345c8ad9da0aef0c2b4a09e459a027d774da684ce2defd0b23b6e15ec573268050cba4cd1be4d899672ea3562f280df3b3ee878bd2e9989357829c363b4b47eacadeee76144957f4d76c3ea703aa5bf32f75a0370f49ae371f001eced8bbdaa781f66c83f959af0cb0ecbabeeeb0f91c26a22b430d5cae34e470f79f01446cdca5b70ba6448a8d9e4722dba03369b3204253eea942de2fb7b4408212a4c6a5d36c7e82417edd052a59d6d1ce2b0a2bd94f334647712cc2296e75db316be650195dd28a360e2e44fd32951b2b983d673bce51eea778d2ed2a2468c3b6b94b67ee175aa08f757d5522b43cefd5969511579cd79300802c811adad7b6bdf789f70bc76e94f8ea317043cf29b562a2041c553122ec338834455be1b68fe7470808451b0e1f1d444ae1e430c51c718a751142fa675a663e9d9f66a8a6199b56d18e4167e54942a37366fa0b5242de86bf1af6c758b2f0bb1f0fda16dc5241e3cc442326fdb501b95fe768c45781c8b60fbe576c7e790e2d5a2a76085cdca098fb3209b30a017eefbf6f8b315b38d8f8f194e456d1776cf6c9c4f4a99e9b50ca4bbc57ff1f035f13a3d8261617b5d55387488f9456a32400a84f95320e722c7abed22b9f8b574da8322fe104c12fb35c9d0c600dde78c47cd46647a8e24aafa53c68e2119ed1473bb3b7c9873d0a256e8eec8dc9f57820a7e23d49deb4041beae704b3fb527ce57316ff238515c248c80d51fd44e31dbb2d2e1d6b8007a03bf9b981fee094ee82f413698af66a3057621490d60207bca2e7a11e96cfb850a9a371ce672d0c4826be044acaa0a0a04fab4f2807eac896c48db2c35caf97fdf8bacb854f5351328cfbab2c3b251fc0abe20ba4b8fe8f4a98dfb76a0b1ea6b6463bdd900e23114c94f205f492a4acb30cc8a6efe6f73a96d3688853c60dce92732440db5ec245478bb64ebe9b60e7469ffb253febcda05613a8c1dbf72634e68d912e2fc98501d99c7dafb50081edcc60dc74daf9cecbcf65aa57661451fc6131f8c879b2181984bc4e0973ad6984837e19595caa35ff4713266b6a6c090a50afeb1461590c4c36f7fead0c9620af82302616c154e74199ee11353f6e9861472e2f1826afd0ce1a2ce9712b50019b32397960f54f4fce3c6655e13d8ef3ba20eaa3ca03a831a39732203dc3d2d3bf8de63fb4c96b3ec10cc852401f25a2575e98d9a25bf0767fc180f6fef5928565fa9ffdd620b6713f85bbc140060df1b50607b4eb51c0c71dac8ee2c19b9bd03b1840bb4d1f8a767d788a31926c9c39be4709dd57e856cb417d3947ce825f194fac18323f36a3b7743603abc628d477b3292a6b3f4965e882a110728f2a9f4fa8fd9d9d50859c48fe0f07f6a826bd5c5d8d645c0f7d8d03cf49be2419e2986f8ad55a228cacd0838f867a8612fd1c4b04d54dc9d5b05cc9395f5bb7fe918083bedfa33734a3f6afaf70379f4d423fa592dcfdeef84161df3f8f42204116442fc815a3cb3c79348d489296014fb8d4334c4ad776e14207ed2115781a0caac4cbfddf8f788f58cd9da9c33f145d87a187d7db78ce4368c5bdbba67fde5264a53a65a027a52aa09fd4943aeeae146a769a26a0f3597fd5004b60c179ce2bcafc78220d691c44c153c883bf942f01586b5321e4bbb28ab44d97bea3368f7c5d0c3dda0ef359065fd31f62060beb0b2a31f7164867e4b78f89f5ea0131aed7014ef3385f0b350ff847f4321b81c7dc9a484605ee397a2d5ea8ad9593020cea3acb6a106a560b4bf675c89aa3b14678dfef6602fdfa9afeeb6f16cb1b3cc944ad5d0492a3d07308c07dfc204c071d92f6b8b5694c70d166fe29f7894ceee7554dc32c71f3b971c8f20f2cafa4399a8755684090f90e6b45ee924d1205e0a075fd2259b6ca6430d28c780735353be38578b3cf1badcba4dae86419d4a0c1ec21f4a7510a08018e90974f0757aab8b51dc0fc068193d040cbd9706eeec02360da646b11cc5f1a544ecf24ce87c7165a0cb9bdb6990db03320ecf2f65fb6dfd1f3d32b2ae10723707cf5f30ea387f677aea100649c72e795b5f7d652e0e2fd0ae19eaf96f1b6453d056e01c97aa5c271b5e5f303fa4013f686cfbf64a1c1fe4263786b835e46a98699b8d5262520c4947987748ab21a48aef3", 0xfd1, 0x0, 0x0) mq_timedreceive(r0, &(0x7f0000004600)=""/102381, 0xfffffceb, 0x0, 0x0) (fail_nth: 1) 6.923733362s ago: executing program 3 (id=5101): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x26}, 0x90) ptrace(0x10, 0x1) inotify_init1(0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) readv(r0, &(0x7f0000001340)=[{&(0x7f0000001200)=""/158, 0x9e}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x1, 0x0, 0x0, "000080f100df000000a7d9de16c708db7200"}) syz_open_pts(r0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffe}, 0x48) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000900)={&(0x7f0000000780)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}}, 0x0, 0x26}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="180000190000000002000000000000001840000002000000000000000000000095000000000000009500000000000200"], &(0x7f0000000580)='syzkaller\x00', 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r2, 0x8, 0x0, 0x0, 0x14, &(0x7f0000000600)={0x1}, 0x10}, 0x90) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="d8000000180081054e81f782db4cb904021d0800fe007c05e8fe55a10a0015000200142603600e12080005007f370401a8001600200006000400027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2e98a61e284ce5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed", 0xb9}], 0x1}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_udplite(0xa, 0x2, 0x88) socket(0x0, 0x3, 0x0) fsopen(0x0, 0x0) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, 0x0, 0x0, 0xffffffffffffffff) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) ioctl$TIOCL_SETSEL(r4, 0x541c, &(0x7f0000000100)={0x2, {0x2, 0x13d, 0x0, 0x0, 0x204}}) ioctl$TIOCL_SETSEL(r4, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0x0, 0x0, 0x101}}) 2.548250491s ago: executing program 0 (id=5177): fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000340)={[{@nojournal_checksum}, {@nombcache}, {@noblock_validity}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@nodelalloc}, {@usrquota}, {@noauto_da_alloc}]}, 0xfe, 0x54d, &(0x7f0000000400)="$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") setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), &(0x7f0000000900)=ANY=[], 0xfeeb, 0x0) chdir(&(0x7f0000000100)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x10) 2.529449182s ago: executing program 0 (id=5179): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000200)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r1, 0x0, 0xb, &(0x7f00000000c0)=0xff00, 0x24) 2.467216107s ago: executing program 0 (id=5183): perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x800714, &(0x7f00000001c0)={[{@dioread_nolock}, {@user_xattr}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@debug}, {@mblk_io_submit}, {@errors_continue}, {@usrjquota}, {@prjquota}, {@nodiscard}]}, 0xfd, 0x43a, &(0x7f00000008c0)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14957e, 0x0) r0 = creat(&(0x7f0000001080)='./file0\x00', 0x0) fsetxattr(r0, &(0x7f0000000000)=@known='security.selinux\x00', &(0x7f00000001c0)='syz:', 0x3c8, 0x0) (fail_nth: 8) 2.248489065s ago: executing program 0 (id=5193): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x800714, &(0x7f00000003c0)={[{@dioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0x7}}, {@quota}, {@noinit_itable}, {@errors_continue}, {@errors_continue}, {@errors_remount}, {@delalloc}, {@auto_da_alloc}, {@norecovery}, {@errors_continue}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}]}, 0xee, 0x442, &(0x7f0000000d00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x0, 0x0, 0xffffffff}, 0x1c) syz_emit_ethernet(0x7b, &(0x7f00000005c0)={@link_local, @multicast, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "2a80c9", 0x45, 0x2f, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x6558, 0x1, 0x0, [], 'j'}}}}}}}, 0x0) r2 = open(&(0x7f0000000300)='./bus\x00', 0x143142, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r3 = open(&(0x7f0000000500)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r3, 0x4c04, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5c9d000ff8ee09e737ff0edf110ff4117639c2eb4b78c66ee677df701905b9aafab4afaaf755a3f6a004", "cba3d625780820d1cbf7db71038259ca171ce1a311ef97e4298d1e14ef01060000e9009600fdff00000000000000000000000000000000000400", "d300e6d6ae9ef30bea2a004000"}) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r3) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r2, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x10c, r4, 0x200, 0x70bd29, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0xa47}, {0xc, 0x90, 0x8}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0x6}, {0xc, 0x90, 0x5}}, {@pci={{0x8}, {0x11}}, {0x8}, {0xc, 0x8f, 0x922}, {0xc, 0x90, 0xfffffffffffffffe}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}, {0xc}, {0xc, 0x90, 0xc}}]}, 0x10c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4001) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000140)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}}, 0x0, 0x0, 0x44, 0x0, "e541bd3d3aa6a2d875e9671e8abcb31c134f3a9db8f52e1f54fe6e079f35ac63186c7244fc3b3801e79b8e5545b90f2dbec29f15cec2fd7e55d0345bce05c13ed90158fbdeb70322ea3188f81890e3db"}, 0xd8) bind$inet6(r5, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) recvfrom$rxrpc(r2, &(0x7f00000004c0)=""/17, 0x11, 0x1, &(0x7f0000000540)=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e20, 0x7, @mcast2, 0x544}}, 0x24) listen(r5, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000400)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0xa, 0x10, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "adf059fd789278e2fb03dc15d356998a"}]}}}}}}}, 0x0) pwrite64(r0, &(0x7f0000000140)='2', 0x1, 0x8000c61) 1.894508485s ago: executing program 0 (id=5205): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x2, 0x6, &(0x7f0000000180)=ANY=[@ANYBLOB="1802000000090000000000000000000018200000", @ANYRES32=r0, @ANYBLOB="000000000000001e850000000000000095"], &(0x7f0000000000)='GPL\x00', 0xa}, 0x90) 1.776927834s ago: executing program 4 (id=5208): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="340000000d06010100000000000000000001000005000100070000000d0003006c6973743a73657400000000"], 0x34}}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000180)) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)={0x28, 0x3, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x800}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @sctp}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}]}, 0x28}}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r2, &(0x7f00000001c0)={0x0, 0xfefa, &(0x7f00000000c0)={0x0, 0xffffffffffffff80}, 0x1, 0x0, 0x0, 0x20010}, 0x20000884) setsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000080)={0x0, 0x200, 0x40, 0x80000000, 0x9, 0x8}, 0x14) recvmmsg(0xffffffffffffffff, &(0x7f0000000fc0)=[{{&(0x7f00000003c0)=@caif=@dbg, 0x80, &(0x7f0000000480)=[{&(0x7f0000000440)=""/38, 0x26}], 0x1, &(0x7f00000004c0)=""/175, 0xaf}, 0xffff176e}, {{&(0x7f00000006c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x80, &(0x7f0000000940)=[{&(0x7f0000000740)=""/185, 0xb9}, {0x0}, {&(0x7f0000001940)=""/4096, 0x1000}, {0x0}], 0x4, &(0x7f0000000980)=""/69, 0x45}, 0xc07}, {{0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000a80)=""/214, 0xd6}, {&(0x7f0000000b80)=""/245, 0xf5}, {&(0x7f0000000c80)=""/251, 0xfb}, {&(0x7f0000000d80)=""/22, 0x16}], 0x4}, 0x2}], 0x3, 0x40, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kvm_test_age_hva\x00'}, 0x10) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x4c, 0x0, "01deaba05ccc4fa00711be66bd584ecd190428efc9e569f4b222158b227692cebc00924f2deea371bafa061b8f2959b4b696b22e4881f40a0d8f4c2fdea78893bc2c160df3e41db4153cfd9221d01c79"}, 0xd8) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wlan0\x00'}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x7, 0x6, 0x101, 0x0, 0x600, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0xffffff2d}]}, 0x24}}, 0x0) (fail_nth: 3) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x9, &(0x7f0000002440)=""/148, &(0x7f0000000040)=0x9) 1.776517334s ago: executing program 2 (id=5209): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x66, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x802) write$evdev(r0, &(0x7f0000000000), 0x100000008) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x80044584, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600000, 0x200000, 0x0, &(0x7f0000a00000/0x600000)=nil) 1.70404372s ago: executing program 4 (id=5210): sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="0600220500c48477bde4bb9fa6c8ffd881"], 0x3a) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000880), 0x8) ioctl$USBDEVFS_FREE_STREAMS(r3, 0x8008551d, &(0x7f0000000480)={0x22ef, 0xe, [{0xd}, {0x5}, {0xe, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0xc}, {0x6}, {0xc, 0x1}, {0x0, 0x1}, {0xf}, {0x5}, {0x8}, {0xa, 0x1}, {}]}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000e00)={r3, 0xe0, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000b00)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, &(0x7f0000000b80)=[0x0], &(0x7f0000000bc0)=[0x0, 0x0], 0x0, 0x60, &(0x7f0000000c00)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000c40), &(0x7f0000000c80), 0x8, 0x2a, 0x8, 0x8, &(0x7f0000000cc0)}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000001f40)=@bloom_filter={0x1e, 0x20, 0x6, 0x4, 0x4, 0xffffffffffffffff, 0x0, '\x00', r4, 0xffffffffffffffff, 0x6, 0x5, 0x0, 0x6}, 0x48) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000340)='./binderfs2/binder1\x00', 0x3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000380)={0x73622a85, 0x0, 0x3}) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000280)={&(0x7f00000004c0)={0xcc, 0x0, 0x800, 0x70bd26, 0x25dfdbff, {}, [@HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r7, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) getsockopt$IP6T_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x29, 0x45, &(0x7f0000000140)={'icmp\x00'}, &(0x7f00000001c0)=0x1e) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000004380), r8) sendmsg$NFC_CMD_VENDOR(r8, &(0x7f0000004500)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x1c, r9, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}}, 0x0) r10 = dup(r7) ioctl$EXT4_IOC_MOVE_EXT(r6, 0xc028660f, &(0x7f0000000100)={0x0, r6, 0xfffffffffffffff8, 0x3, 0x100, 0x8}) write$P9_RLERRORu(r10, &(0x7f00000000c0)=ANY=[@ANYBLOB="530000000700004600cd", @ANYRESOCT], 0x53) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r10}, 0x2c, {[], [], 0x6b}}) 1.574088111s ago: executing program 4 (id=5213): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='mm_page_free\x00'}, 0x10) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "69dcaf20127e9a854528f45826cb35be51ca73845d177dd8dba7221daeccfda56b75cfe286fdd14cb5b11b1cab614fec2236da7d88ea0f0700"}, 0x48, 0xfffffffffffffffe) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x66, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x110}, 0x0, 0x0, 0xffffffffffffffff, 0x1) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00'}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0xb1861, &(0x7f0000000640)={[{@i_version}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0xbc0}}, {@auto_da_alloc_val}, {@minixdf}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@journal_async_commit}, {@acl}, {@debug}], [{@defcontext={'defcontext', 0x3d, 'system_u'}}, {@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}, {@smackfsdef={'smackfsdef', 0x3d, '+\xbd'}}, {@obj_role={'obj_role', 0x3d, 'mm_page_free\x00'}}]}, 0x5, 0x57a, &(0x7f0000000a00)="$eJzs3V1rHFUfAPD/bDZ9f56mUIp6IYVeWKndNIkvFQTrpWixoPd1SaahZNMt2U1pYsH2wt54I0UQsSB+AO+9LH4BP0VBC0VKUKQIkdnMpttkN2/ddrfd3w8mOWdmNmfOnvmfnDMzywYwsI5mPwoRL0fEN0nEwZZtxcg3Hl3Zb+nBtclsSWJ5+dM/k0jydc39k/z3/jzzUkT8+lXEicL6cmsLizPlSiWdy/Oj9dnLo7WFxZMXZ8vT6XR6aXxi4vRbE+PvvvN21+r6+rm/v//kzod7vj629N3P9w7dSuJMHMi3tdbjCVxvzRwt/5unhuPMmh3HulBYP0l6fQDsyFAe58OR9QEHYyiPeuDF92VELAMDKhH/MKCa44Dm3L5L8+Dnxv0PViZA6+tfXLk2Ensac6N9S8ljM6NsvjvShfKzMn754/atbImNr0Ps3SQPsC3Xb0TEqWJxff+X5P3fzp1qXDze2NoyBu3/D/TSnWz880a78U9hdfwTbcY/+9vE7k5sHv+Fe10opqNs/Pde2/Hvatc1MpTn/tcY8w0nFy5W0lMR8f+IOB7Du7P8RvdzTi/dXe60rXX8ly1Z+c2xYH4c94q7H3/NVLlefpI6t7p/I+KVtuPfZLX9kzbtn70f57ZYxpH09qudtm1e/6dr+aeI19q2/6M7WsnG9ydHG+fDaPOsWO+vm0d+61R+r+uftf++jes/krTer61tv4wf9zxMO23b6fm/K/mskd6Vr7tartfnxiJ2JR+vXz/+6LXNfHP/rP7Hj23c/7U7/7PJ1+dbrP/Nwzc77toP7T+1rfbffuLuR1/80Kn8rbX/m43U8XzNmv7v4ZpLGQ1bPcAuvY0AAAAAAADQFwoRcSCSQmk1XSiUSivPdxyOfYVKtVY/caE6f2kqGp+VHYnhQvNO98HGLdiV5yHG8udhm89HjK/JT0TEoYj4dmhvI1+arFamel15AAAAAAAAAAAAAAAAAAAA6BP7O3z+P/P7UK+PDnjqGl9ssLvXRwH0wqZf+d+Nb3oC+tKm8Q+8sMQ/DC7xD4NL/MPgEv8wuMQ/DC7xD4NL/AMAAAAAAAAAAAAAAAAAAAAAAAAAAEBXnTt7NluWlx5cm8zyU1cW5meqV05OpbWZ0uz8ZGmyOne5NF2tTlfS0mR1drO/V6lWL4+Nx/zV0Xpaq4/WFhbPz1bnL9XPX5wtT6fn0+FnUisAAAAAAAAAAAAAAAAAAAB4vtQWFmfKlUo694wTxehBoTtMvB99cRhPs4IrdvTy4vpN/0REP9RL4gkSPe6YAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKDFfwEAAP///J083A==") fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) chdir(&(0x7f0000000140)='./file0\x00') r0 = syz_io_uring_setup(0x6908, &(0x7f0000000340)={0x0, 0x0, 0x10100}, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x77359400}, 0x1, 0x1}) io_uring_enter(r0, 0x184c, 0x0, 0x0, 0x0, 0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0x18, 0x20000000, r3) inotify_init1(0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000040)='./file1\x00', &(0x7f0000000240), &(0x7f0000000240)=ANY=[], 0xbed, 0x0) r4 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x18}}, 0x1c) listen(r4, 0x80080400) r5 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r5, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000002}, 0x10) getsockopt$inet_int(r5, 0x10d, 0xcd, &(0x7f0000000000), &(0x7f0000000080)=0x4) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000100)=0x2) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000040)=0xe) ioctl$TIOCVHANGUP(r6, 0x5437, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r7, 0x25, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8}) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) 1.454341161s ago: executing program 4 (id=5215): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet_mptcp(0x2, 0x1, 0x106) syz_open_dev$tty20(0xc, 0x4, 0x0) syz_io_uring_setup(0x34b6, &(0x7f0000000180), 0x0, 0x0) epoll_create(0xaf2) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x600000000000000) 1.436532882s ago: executing program 2 (id=5216): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="340000000d06010100000000000000000001000005000100070000000d0003006c6973743a73657400000000"], 0x34}}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000180)) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)={0x28, 0x3, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x800}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @sctp}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}]}, 0x28}}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r2, &(0x7f00000001c0)={0x0, 0xfefa, &(0x7f00000000c0)={0x0, 0xffffffffffffff80}, 0x1, 0x0, 0x0, 0x20010}, 0x20000884) setsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000080)={0x0, 0x200, 0x40, 0x80000000, 0x9, 0x8}, 0x14) recvmmsg(0xffffffffffffffff, &(0x7f0000000fc0)=[{{&(0x7f00000003c0)=@caif=@dbg, 0x80, &(0x7f0000000480)=[{&(0x7f0000000440)=""/38, 0x26}], 0x1, &(0x7f00000004c0)=""/175, 0xaf}, 0xffff176e}, {{&(0x7f00000006c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x80, &(0x7f0000000940)=[{&(0x7f0000000740)=""/185, 0xb9}, {0x0}, {&(0x7f0000001940)=""/4096, 0x1000}, {0x0}], 0x4, &(0x7f0000000980)=""/69, 0x45}, 0xc07}, {{0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000a80)=""/214, 0xd6}, {&(0x7f0000000b80)=""/245, 0xf5}, {&(0x7f0000000c80)=""/251, 0xfb}, {&(0x7f0000000d80)=""/22, 0x16}], 0x4}, 0x2}], 0x3, 0x40, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kvm_test_age_hva\x00'}, 0x10) socketpair$unix(0x1, 0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x0, 0x10060, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x2d) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket(0xa, 0x3, 0x3a) socket$inet_tcp(0x2, 0x1, 0x0) 1.3322097s ago: executing program 0 (id=5217): fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={0x0}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000340)={[{@nojournal_checksum}, {@nombcache}, {@noblock_validity}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@nodelalloc}, {@usrquota}, {@noauto_da_alloc}]}, 0xfe, 0x54d, &(0x7f0000000400)="$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") setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), &(0x7f0000000900)=ANY=[], 0xfeeb, 0x0) chdir(&(0x7f0000000100)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x10) 715.914741ms ago: executing program 1 (id=5223): sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="0600220500c48477bde4bb9fa6c8ffd881"], 0x3a) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000880), 0x8) ioctl$USBDEVFS_FREE_STREAMS(r3, 0x8008551d, &(0x7f0000000480)={0x22ef, 0xe, [{0xd}, {0x5}, {0xe, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0xc}, {0x6}, {0xc, 0x1}, {0x0, 0x1}, {0xf}, {0x5}, {0x8}, {0xa, 0x1}, {}]}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000e00)={r3, 0xe0, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000b00)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, &(0x7f0000000b80)=[0x0], &(0x7f0000000bc0)=[0x0, 0x0], 0x0, 0x60, &(0x7f0000000c00)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000c40), &(0x7f0000000c80), 0x8, 0x2a, 0x8, 0x8, &(0x7f0000000cc0)}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000001f40)=@bloom_filter={0x1e, 0x20, 0x6, 0x4, 0x4, 0xffffffffffffffff, 0x0, '\x00', r4, 0xffffffffffffffff, 0x6, 0x5, 0x0, 0x6}, 0x48) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000340)='./binderfs2/binder1\x00', 0x3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000380)={0x73622a85, 0x0, 0x3}) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000280)={&(0x7f00000004c0)={0xcc, 0x0, 0x800, 0x70bd26, 0x25dfdbff, {}, [@HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r7, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) getsockopt$IP6T_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x29, 0x45, &(0x7f0000000140)={'icmp\x00'}, &(0x7f00000001c0)=0x1e) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000004380), r8) sendmsg$NFC_CMD_VENDOR(r8, &(0x7f0000004500)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x1c, r9, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}}, 0x0) r10 = dup(r7) ioctl$EXT4_IOC_MOVE_EXT(r6, 0xc028660f, &(0x7f0000000100)={0x0, r6, 0xfffffffffffffff8, 0x3, 0x100, 0x8}) write$P9_RLERRORu(r10, &(0x7f00000000c0)=ANY=[@ANYBLOB="530000000700004600cd", @ANYRESOCT], 0x53) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r10}, 0x2c, {[], [], 0x6b}}) 599.059031ms ago: executing program 4 (id=5224): socket$inet6(0xa, 0x0, 0x3a) socket$inet6_mptcp(0xa, 0x1, 0x106) open(&(0x7f0000000280)='.\x00', 0x0, 0x0) socket$pppoe(0x18, 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) syz_io_uring_setup(0x239, &(0x7f0000000080), 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000180), 0xfea7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0x8, 0x4, 0x3}, 0x48) r2 = socket$rxrpc(0x21, 0x2, 0xa) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16, @ANYBLOB="2d01620000000900509072fb60cb08000300"], 0x2c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r5, @ANYBLOB="ff8305000007000d00ff", @ANYRES32=r2], 0x4}}, 0x0) sendfile(r4, r3, 0x0, 0x100000002) 559.440004ms ago: executing program 4 (id=5225): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x24, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') (async) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') lseek(r1, 0x4, 0x0) getdents64(r1, 0x0, 0x25) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) (async) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x2, 0x4, 0x7fe2, 0x1}, 0x48) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x2, 0x4, 0x7fe2, 0x1}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000002018f9ffffffffff1f0000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], &(0x7f0000000e80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = dup2(r4, r3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r5}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r5}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) tkill(0x0, 0x0) sysinfo(0x0) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x31, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="300000001800010380000000000000000a8067680000000300000000000010000100ff02000000000000000000000009009d01"], 0xff97}}, 0x0) (async) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x31, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="300000001800010380000000000000000a8067680000000300000000000010000100ff02000000000000000000000009009d01"], 0xff97}}, 0x0) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000002000000010000003fd13f96000000040000"], 0x0, 0x26}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{0x1, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xa, &(0x7f0000000500)=ANY=[@ANYBLOB="18d800000c0021000000000000000000850000004e37000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000000000000850000008600000015b60100ffffffff18000000ff0000000000000005000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0xa8, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, 0x0, r7, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x10}, 0x90) unshare(0x0) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x28, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r9, 0xc0182103, 0x0) r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7020000140000fbb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7020000140000fbb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) eventfd2(0x0, 0x0) socket$netlink(0x10, 0x3, 0x4) (async) r11 = socket$netlink(0x10, 0x3, 0x4) writev(r11, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001500192340834b80043f679a10ff3d425f9cc3f4ff7f4e32f61bcdf1e422000000000100804824cabecc4b381eaadc28f23457e792945f64009400050028925aaa000000c600000000000000feff2c707f8f00ff", 0x58}], 0x1) (async) writev(r11, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001500192340834b80043f679a10ff3d425f9cc3f4ff7f4e32f61bcdf1e422000000000100804824cabecc4b381eaadc28f23457e792945f64009400050028925aaa000000c600000000000000feff2c707f8f00ff", 0x58}], 0x1) sigaltstack(0x0, 0x0) (async) sigaltstack(0x0, 0x0) 524.451486ms ago: executing program 2 (id=5226): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x66, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x802) write$evdev(r0, &(0x7f0000000000), 0x100000008) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x80044584, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600000, 0x200000, 0x0, &(0x7f0000a00000/0x600000)=nil) 523.834847ms ago: executing program 1 (id=5227): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="4cf0ff00", @ANYRES16=r1, @ANYBLOB="010000000000000000000a00000038000380"], 0x4c}}, 0x0) 412.253515ms ago: executing program 1 (id=5228): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000200)={[{@nogrpid}, {@jqfmt_vfsv0}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@debug}, {@nombcache}, {@quota}]}, 0x3, 0x439, &(0x7f0000001840)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0xc0185879, &(0x7f0000000080)={@desc={0x4100, 0x0, @desc1}}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b400000000000000dd0a00000000000000e6ff2200000000000000009183dd223db6db226f34f0f0e009133cfffa9056d3824c01ce7c6e431e8aa20a492e416a2129338729648100c215e99fafb8548922db49217e228d67000000970a00"/104], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7}, 0x48) 322.975723ms ago: executing program 1 (id=5229): fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={0x0}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000340)={[{@nojournal_checksum}, {@nombcache}, {@noblock_validity}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@nodelalloc}, {@usrquota}, {@noauto_da_alloc}]}, 0xfe, 0x54d, &(0x7f0000000400)="$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") setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), &(0x7f0000000900)=ANY=[], 0xfeeb, 0x0) chdir(&(0x7f0000000100)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x10) 204.996923ms ago: executing program 1 (id=5230): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x1d}, {0x6}]}, 0x10) sendmmsg$inet(r0, &(0x7f00000005c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x700}}], 0x1, 0x0) 146.041488ms ago: executing program 2 (id=5231): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000180), 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="28fc0000", @ANYRES16=r4, @ANYBLOB="070000000000000000000200000014000180060001000200000008000300ac1414aa"], 0x28}}, 0x0) 145.762698ms ago: executing program 2 (id=5232): r0 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0x6, &(0x7f00000001c0)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in6={{0xa, 0x0, 0x0, @private1}}}}, &(0x7f0000000100)=0xb0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'pim6reg\x00', 0x1}) ioctl$TUNSETOFFLOAD(r3, 0x400454c9, 0x3) ioctl$TUNSETLINK(r3, 0x400454cd, 0xffff010e) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x0, 0x802, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5004}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x24020400) r4 = syz_io_uring_setup(0x44f, &(0x7f0000000140)={0x0, 0x0, 0x40}, &(0x7f0000000000)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000740)=@IORING_OP_RENAMEAT={0x23, 0x2, 0x0, r1, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='./file0\x00', r1}) io_uring_enter(r4, 0x42d3e, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x66, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, @perf_config_ext={0x0, 0x8}, 0x0, 0x0, 0x2, 0x0, 0xfffffffffffffffa, 0x0, 0xfffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BLKFLSBUF(r1, 0x1261, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x90) r8 = socket(0x10, 0x0, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000badcf90afefe60de1d"], 0x1c}}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r7) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) fallocate(r1, 0x0, 0x0, 0x2c2) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1) r10 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r10, 0x800448d2, &(0x7f0000000000)) r11 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r9) sendmsg$NLBL_CIPSOV4_C_ADD(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="01000000000000000000010000000800010002000000240004800500030001000000050003000000000005000300000000000500b600000000000800020002000000"], 0x48}}, 0x0) ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f0000000080)) 145.611347ms ago: executing program 1 (id=5233): mq_open(0x0, 0xb712bf5a5c494a7b, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000002480)={0xffffffffffffffff, 0xffffffffffffffff}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) io_setup(0x8, &(0x7f00000002c0)=0x0) io_submit(r4, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0}]) splice(r0, 0x0, r3, 0x0, 0x7, 0x0) write$P9_RWRITE(r3, &(0x7f0000000040)={0xb, 0x77, 0x0, 0x4000000}, 0x11000) write(r3, &(0x7f0000000140)='i', 0x1) read(r2, &(0x7f0000019440)=""/102391, 0x18ff7) dup2(r0, r1) 0s ago: executing program 2 (id=5234): socket$inet6(0xa, 0x0, 0x3a) socket$inet6_mptcp(0xa, 0x1, 0x106) open(&(0x7f0000000280)='.\x00', 0x0, 0x0) socket$pppoe(0x18, 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) syz_io_uring_setup(0x239, &(0x7f0000000080), 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000180), 0xfea7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0x8, 0x4, 0x3}, 0x48) r2 = socket$rxrpc(0x21, 0x2, 0xa) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16, @ANYBLOB="2d01620000000900509072fb60cb08000300"], 0x2c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r5, @ANYBLOB="ff8305000007000d00ff", @ANYRES32=r2], 0x4}}, 0x0) sendfile(r4, r3, 0x0, 0x100000002) kernel console output (not intermixed with test programs): netdevsim1 netdevsim1: renamed from eth1 [ 310.379012][ T29] audit: type=1400 audit(822.359:3679): avc: denied { mounton } for pid=19191 comm="syz.3.4831" path="/proc/737/task" dev="proc" ino=79223 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 310.404969][T19073] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 310.415415][T19073] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 310.464678][T19073] 8021q: adding VLAN 0 to HW filter on device bond0 [ 310.481668][T19073] 8021q: adding VLAN 0 to HW filter on device team0 [ 310.493741][ T3155] bridge0: port 1(bridge_slave_0) entered blocking state [ 310.500940][ T3155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 310.519360][ T3158] bridge0: port 2(bridge_slave_1) entered blocking state [ 310.526602][ T3158] bridge0: port 2(bridge_slave_1) entered forwarding state [ 310.548040][T19073] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 310.558425][T19073] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 310.590187][T19203] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4836'. [ 310.639429][T19073] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 310.748298][T19073] veth0_vlan: entered promiscuous mode [ 310.763919][T19073] veth1_vlan: entered promiscuous mode [ 310.795678][T19073] veth0_macvtap: entered promiscuous mode [ 310.812842][T19073] veth1_macvtap: entered promiscuous mode [ 310.840211][T19073] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 310.850787][T19073] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 310.860626][T19073] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 310.871934][T19073] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 310.881857][T19073] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 310.892332][T19073] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 310.902861][T19073] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 310.913397][T19073] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 310.923292][T19073] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 310.934420][T19073] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 310.944418][T19073] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 310.955074][T19073] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 310.965628][T19073] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 310.976124][T19073] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 310.986961][T19073] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 310.997392][T19073] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 311.007249][T19073] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 311.018254][T19073] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 311.028319][T19073] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 311.038748][T19073] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 311.049119][T19073] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 311.059567][T19073] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 311.069537][T19073] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 311.080612][T19073] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 311.090454][T19073] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 311.101139][T19073] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 311.114800][T19073] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 311.127406][T19073] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 311.138527][T19073] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 311.148535][T19073] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 311.159033][T19073] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 311.169460][T19073] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 311.179887][T19073] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 311.189746][T19073] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 311.200828][T19073] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 311.210686][T19073] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 311.221164][T19073] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 311.231551][T19073] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 311.242026][T19073] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 311.252098][T19073] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 311.263213][T19073] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 311.273462][T19073] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 311.284144][T19073] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 311.294273][T19073] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 311.305343][T19073] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 311.315565][T19073] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 311.326664][T19073] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 311.336554][T19073] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 311.347813][T19073] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 311.358697][T19073] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 311.369127][T19073] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 311.379014][T19073] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 311.390063][T19073] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 311.403385][T19073] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 311.412480][T19073] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.421825][T19073] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.430710][T19073] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.439502][T19073] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.617963][T19254] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4847'. [ 311.680515][T19262] devpts: called with bogus options [ 311.691444][ T29] audit: type=1400 audit(823.669:3680): avc: denied { write } for pid=19258 comm="syz.3.4849" name="cgroup.subtree_control" dev="cgroup2" ino=276 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 311.692498][T19259] SET target dimension over the limit! [ 311.799034][T19271] netlink: 'syz.3.4852': attribute type 4 has an invalid length. [ 311.827782][T19271] netlink: 'syz.3.4852': attribute type 4 has an invalid length. [ 312.090523][T19279] 9pnet: p9_errstr2errno: server reported unknown error Í01777777777777777777777 [ 312.135882][T19257] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4820'. [ 312.190118][T19287] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4859'. [ 312.211394][T19289] loop3: detected capacity change from 0 to 512 [ 312.223373][T19289] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 312.247101][T19289] EXT4-fs error (device loop3): ext4_ext_check_inode:520: inode #2: comm syz.3.4860: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 312.265446][T19289] EXT4-fs (loop3): get root inode failed [ 312.271200][T19289] EXT4-fs (loop3): mount failed [ 312.277363][ T29] audit: type=1400 audit(824.259:3681): avc: denied { map } for pid=19290 comm="syz.2.4861" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 312.280881][T19291] FAULT_INJECTION: forcing a failure. [ 312.280881][T19291] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 312.314643][T19291] CPU: 0 PID: 19291 Comm: syz.2.4861 Not tainted 6.10.0-syzkaller-00017-g5e0497553643 #0 [ 312.324426][T19291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 312.334488][T19291] Call Trace: [ 312.337757][T19291] [ 312.340670][T19291] dump_stack_lvl+0xf2/0x150 [ 312.345313][T19291] dump_stack+0x15/0x20 [ 312.349459][T19291] should_fail_ex+0x229/0x230 [ 312.354181][T19291] __should_fail_alloc_page+0xfd/0x110 [ 312.359665][T19291] __alloc_pages_noprof+0x109/0x360 [ 312.364854][T19291] alloc_pages_mpol_noprof+0xb1/0x1e0 [ 312.370222][T19291] vma_alloc_folio_noprof+0x176/0x2d0 [ 312.375738][T19291] handle_mm_fault+0xddb/0x2ac0 [ 312.380642][T19291] exc_page_fault+0x296/0x650 [ 312.385324][T19291] asm_exc_page_fault+0x26/0x30 [ 312.390205][T19291] RIP: 0010:rep_movs_alternative+0x4a/0x70 [ 312.396034][T19291] Code: 75 f1 c3 cc cc cc cc 66 0f 1f 84 00 00 00 00 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 a4 c3 cc cc cc cc 48 89 c8 48 c1 e9 03 83 e0 07 f3 48 a5 89 c1 [ 312.415662][T19291] RSP: 0018:ffffc90001667d60 EFLAGS: 00050206 [ 312.421775][T19291] RAX: ffff88813d53ed80 RBX: 000000002002b238 RCX: 0000000000000238 [ 312.429731][T19291] RDX: 0000000000000000 RSI: ffff888162b43dc8 RDI: 000000002002c000 [ 312.437689][T19291] RBP: 0000000000001000 R08: 0000000080000000 R09: 0000000000000000 [ 312.445655][T19291] R10: 0001888162b43000 R11: 0001888162b43fff R12: 000000002002c238 [ 312.453612][T19291] R13: 0000000022400000 R14: 0000000000001000 R15: ffff888162b43000 [ 312.461594][T19291] _copy_to_user+0x77/0xa0 [ 312.466088][T19291] pagemap_read+0x3b5/0x610 [ 312.470636][T19291] ? __pfx_pagemap_read+0x10/0x10 [ 312.475673][T19291] vfs_read+0x1a2/0x6e0 [ 312.479828][T19291] ? __rcu_read_unlock+0x4e/0x70 [ 312.484760][T19291] ? __fget_files+0x1da/0x210 [ 312.489437][T19291] __x64_sys_pread64+0xf7/0x150 [ 312.494437][T19291] x64_sys_call+0x2673/0x2d70 [ 312.499376][T19291] do_syscall_64+0xc9/0x1c0 [ 312.503926][T19291] ? clear_bhb_loop+0x55/0xb0 [ 312.508669][T19291] ? clear_bhb_loop+0x55/0xb0 [ 312.513388][T19291] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 312.519313][T19291] RIP: 0033:0x7fa826062bd9 [ 312.523710][T19291] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 312.543646][T19291] RSP: 002b:00007fa8252e4048 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 312.552106][T19291] RAX: ffffffffffffffda RBX: 00007fa8261f0f60 RCX: 00007fa826062bd9 [ 312.560065][T19291] RDX: 0000000000019000 RSI: 000000002001a240 RDI: 0000000000000003 [ 312.568023][T19291] RBP: 00007fa8252e40a0 R08: 0000000000000000 R09: 0000000000000000 [ 312.575989][T19291] R10: 0000000000100008 R11: 0000000000000246 R12: 0000000000000002 [ 312.584025][T19291] R13: 000000000000000b R14: 00007fa8261f0f60 R15: 00007ffc09bc4e68 [ 312.592038][T19291] [ 312.638684][T19299] loop0: detected capacity change from 0 to 512 [ 312.652042][T19299] EXT4-fs (loop0): unsupported inode size: 0 [ 312.658459][T19299] EXT4-fs (loop0): blocksize: 1024 [ 312.664509][T19301] program syz.2.4865 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 312.674613][T19289] loop3: detected capacity change from 0 to 128 [ 312.756620][T19307] FAULT_INJECTION: forcing a failure. [ 312.756620][T19307] name failslab, interval 1, probability 0, space 0, times 0 [ 312.769322][T19307] CPU: 0 PID: 19307 Comm: syz.2.4866 Not tainted 6.10.0-syzkaller-00017-g5e0497553643 #0 [ 312.779145][T19307] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 312.789268][T19307] Call Trace: [ 312.792550][T19307] [ 312.795488][T19307] dump_stack_lvl+0xf2/0x150 [ 312.800100][T19307] dump_stack+0x15/0x20 [ 312.804329][T19307] should_fail_ex+0x229/0x230 [ 312.809058][T19307] ? sctp_add_bind_addr+0x6f/0x1e0 [ 312.814249][T19307] __should_failslab+0x92/0xa0 [ 312.819064][T19307] should_failslab+0x9/0x20 [ 312.823596][T19307] kmalloc_trace_noprof+0x4b/0x2a0 [ 312.828719][T19307] sctp_add_bind_addr+0x6f/0x1e0 [ 312.833680][T19307] sctp_copy_local_addr_list+0x19b/0x220 [ 312.839326][T19307] sctp_copy_one_addr+0x83/0x410 [ 312.844253][T19307] sctp_bind_addr_copy+0x81/0x2b0 [ 312.849345][T19307] sctp_assoc_set_bind_addr_from_ep+0xc0/0xd0 [ 312.855407][T19307] sctp_connect_new_asoc+0x1d0/0x3b0 [ 312.860742][T19307] sctp_sendmsg+0xf05/0x1920 [ 312.865384][T19307] ? __pfx_sctp_sendmsg+0x10/0x10 [ 312.870392][T19307] inet_sendmsg+0xc5/0xd0 [ 312.874714][T19307] __sock_sendmsg+0x102/0x180 [ 312.879382][T19307] ____sys_sendmsg+0x312/0x410 [ 312.884157][T19307] __sys_sendmmsg+0x269/0x500 [ 312.888833][T19307] __x64_sys_sendmmsg+0x57/0x70 [ 312.893672][T19307] x64_sys_call+0xa87/0x2d70 [ 312.898299][T19307] do_syscall_64+0xc9/0x1c0 [ 312.902793][T19307] ? clear_bhb_loop+0x55/0xb0 [ 312.907511][T19307] ? clear_bhb_loop+0x55/0xb0 [ 312.912232][T19307] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 312.918211][T19307] RIP: 0033:0x7fa826062bd9 [ 312.922696][T19307] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 312.942379][T19307] RSP: 002b:00007fa8252c3048 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 312.950780][T19307] RAX: ffffffffffffffda RBX: 00007fa8261f1038 RCX: 00007fa826062bd9 [ 312.958861][T19307] RDX: 0000000000000001 RSI: 0000000020001680 RDI: 0000000000000008 [ 312.966904][T19307] RBP: 00007fa8252c30a0 R08: 0000000000000000 R09: 0000000000000000 [ 312.974964][T19307] R10: 00000000000000fc R11: 0000000000000246 R12: 0000000000000002 [ 312.982918][T19307] R13: 000000000000006e R14: 00007fa8261f1038 R15: 00007ffc09bc4e68 [ 312.990967][T19307] [ 313.027099][T19311] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4869'. [ 313.048062][T19317] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4870'. [ 313.160109][T19327] team0: entered promiscuous mode [ 313.165256][T19327] team_slave_0: entered promiscuous mode [ 313.171068][T19327] team_slave_1: entered promiscuous mode [ 313.188014][T19325] team0: left promiscuous mode [ 313.192854][T19325] team_slave_0: left promiscuous mode [ 313.199182][T19325] team_slave_1: left promiscuous mode [ 313.231652][T19332] loop3: detected capacity change from 0 to 512 [ 313.250023][T19332] EXT4-fs error (device loop3): ext4_orphan_get:1394: inode #15: comm syz.3.4874: casefold flag without casefold feature [ 313.271631][T19332] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz.3.4874: couldn't read orphan inode 15 (err -117) [ 313.271865][T19335] loop2: detected capacity change from 0 to 1024 [ 313.284657][T19332] EXT4-fs mount: 12 callbacks suppressed [ 313.284724][T19332] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 313.331718][T15273] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 313.337962][T19335] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 313.364562][T19335] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 313.382627][T19335] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 63 with max blocks 65 with error 28 [ 313.395104][T19335] EXT4-fs (loop2): This should not happen!! Data will be lost [ 313.395104][T19335] [ 313.404801][T19335] EXT4-fs (loop2): Total free blocks count 0 [ 313.411253][T19335] EXT4-fs (loop2): Free/Dirty block details [ 313.417211][T19335] EXT4-fs (loop2): free_blocks=68451041280 [ 313.423017][T19335] EXT4-fs (loop2): dirty_blocks=96 [ 313.428187][T19335] EXT4-fs (loop2): Block reservation details [ 313.434164][T19335] EXT4-fs (loop2): i_reserved_data_blocks=6 [ 313.510289][T19335] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 1 with error 28 [ 313.616470][T19360] loop1: detected capacity change from 0 to 512 [ 313.623146][T19360] ext2: Unknown parameter 'smackfsfloor' [ 313.639176][ T29] audit: type=1400 audit(825.619:3682): avc: denied { connect } for pid=19357 comm="syz.3.4883" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 313.661342][ T29] audit: type=1400 audit(825.639:3683): avc: denied { setopt } for pid=19357 comm="syz.3.4883" laddr=::1 lport=34 faddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 313.698965][T19365] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4885'. [ 313.754296][T19367] 9pnet: p9_errstr2errno: server reported unknown error Í01777777777777777777777 [ 313.834817][T19372] loop2: detected capacity change from 0 to 512 [ 313.851035][T19372] EXT4-fs (loop2): orphan cleanup on readonly fs [ 313.868891][T19372] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2234: inode #15: comm syz.2.4889: corrupted in-inode xattr: bad e_name length [ 313.904567][T19372] EXT4-fs error (device loop2): ext4_orphan_get:1399: comm syz.2.4889: couldn't read orphan inode 15 (err -117) [ 313.949591][T19372] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 313.971417][T19372] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 314.042924][T19383] loop1: detected capacity change from 0 to 1024 [ 314.050318][T19372] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4889'. [ 314.063680][T19383] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 314.116786][ T29] audit: type=1400 audit(826.099:3684): avc: denied { ioctl } for pid=19389 comm="syz.0.4895" path="user:[4026531837]" dev="nsfs" ino=4026531837 ioctlcmd=0x8940 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 314.169181][T19073] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 314.214117][T19400] 9pnet: p9_errstr2errno: server reported unknown error Í01777777777777777777777 [ 314.324795][T19416] loop0: detected capacity change from 0 to 4096 [ 314.337726][T19420] loop1: detected capacity change from 0 to 512 [ 314.344255][T19420] EXT4-fs: Ignoring removed nomblk_io_submit option [ 314.345462][T19416] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 314.385076][T19420] EXT4-fs error (device loop1): ext4_expand_extra_isize_ea:2806: inode #11: comm syz.1.4908: corrupted xattr block 95: invalid header [ 314.401415][T18880] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 314.411588][T19420] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.4908: bg 0: block 7: invalid block bitmap [ 314.434832][T19420] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 314.458215][T19420] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2972: inode #11: comm syz.1.4908: corrupted xattr block 95: invalid header [ 314.482152][T19420] EXT4-fs warning (device loop1): ext4_evict_inode:271: xattr delete (err -117) [ 314.517846][ T29] audit: type=1326 audit(826.489:3685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19423 comm="syz.0.4909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4abdc26bd9 code=0x7ffc0000 [ 314.541094][T19420] EXT4-fs (loop1): 1 orphan inode deleted [ 314.556118][T19420] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 314.585850][ T29] audit: type=1326 audit(826.529:3686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19423 comm="syz.0.4909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=127 compat=0 ip=0x7f4abdc26bd9 code=0x7ffc0000 [ 314.609160][ T29] audit: type=1326 audit(826.529:3687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19423 comm="syz.0.4909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4abdc26bd9 code=0x7ffc0000 [ 314.632222][ T29] audit: type=1326 audit(826.529:3688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19423 comm="syz.0.4909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4abdc26bd9 code=0x7ffc0000 [ 314.681588][ T29] audit: type=1400 audit(826.659:3689): avc: denied { write } for pid=19430 comm="syz.0.4912" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 314.688585][T19420] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 314.719155][T19434] loop0: detected capacity change from 0 to 128 [ 314.748437][ T29] audit: type=1400 audit(826.669:3690): avc: denied { mac_admin } for pid=19419 comm="syz.1.4908" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 314.837473][ T29] audit: type=1400 audit(826.729:3691): avc: denied { create } for pid=19419 comm="syz.1.4908" name=131377C5FC35D41454D5D41D29AD1A6029598146E6BE166E41AD0DBD4054033C9F33BBDA8224A2F3D772E7636E48B33CBF708372E8F1B9933EC5127743BE2206209EF02DF9CBF2F6E880D338 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=2321202E2F6367726F75702F66696C6530616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161 [ 314.838144][ T29] audit: type=1400 audit(826.729:3692): avc: denied { create } for pid=19419 comm="syz.1.4908" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=2321202E2F6367726F75702F66696C653061616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161 [ 314.962734][T19434] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 315.074306][T19073] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 315.088647][T19434] EXT4-fs (loop0): shut down requested (0) [ 315.095441][T19434] EXT4-fs warning (device loop0): ext4_group_add:1735: No reserved GDT blocks, can't resize [ 315.132571][T18880] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 315.133078][T19456] loop3: detected capacity change from 0 to 512 [ 315.150058][T19456] ext2: Unknown parameter 'smackfsfloor' [ 315.156475][T19458] FAULT_INJECTION: forcing a failure. [ 315.156475][T19458] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 315.169988][T19458] CPU: 1 PID: 19458 Comm: syz.1.4917 Not tainted 6.10.0-syzkaller-00017-g5e0497553643 #0 [ 315.179837][T19458] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 315.189907][T19458] Call Trace: [ 315.193189][T19458] [ 315.196203][T19458] dump_stack_lvl+0xf2/0x150 [ 315.200826][T19458] dump_stack+0x15/0x20 [ 315.205092][T19458] should_fail_ex+0x229/0x230 [ 315.209778][T19458] should_fail+0xb/0x10 [ 315.213944][T19458] should_fail_usercopy+0x1a/0x20 [ 315.219028][T19458] _copy_to_iter+0xd3/0xaf0 [ 315.223533][T19458] ? __virt_addr_valid+0x1ed/0x250 [ 315.228677][T19458] ? __check_object_size+0x35b/0x510 [ 315.233980][T19458] bcm_recvmsg+0xd1/0x2e0 [ 315.238365][T19458] ? __pfx_bcm_recvmsg+0x10/0x10 [ 315.243288][T19458] sock_recvmsg+0x13f/0x170 [ 315.247775][T19458] sock_read_iter+0x152/0x1a0 [ 315.252450][T19458] vfs_read+0x5e9/0x6e0 [ 315.256606][T19458] ? __rcu_read_unlock+0x4e/0x70 [ 315.261623][T19458] ksys_read+0xeb/0x1b0 [ 315.265789][T19458] __x64_sys_read+0x42/0x50 [ 315.270922][T19458] x64_sys_call+0x27e5/0x2d70 [ 315.275604][T19458] do_syscall_64+0xc9/0x1c0 [ 315.280136][T19458] ? clear_bhb_loop+0x55/0xb0 [ 315.284816][T19458] ? clear_bhb_loop+0x55/0xb0 [ 315.289552][T19458] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 315.295471][T19458] RIP: 0033:0x7f0d1211bbd9 [ 315.299950][T19458] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 315.319542][T19458] RSP: 002b:00007f0d1139d048 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 315.327946][T19458] RAX: ffffffffffffffda RBX: 00007f0d122a9f60 RCX: 00007f0d1211bbd9 [ 315.335905][T19458] RDX: 0000000000000038 RSI: 0000000020001480 RDI: 0000000000000003 [ 315.343891][T19458] RBP: 00007f0d1139d0a0 R08: 0000000000000000 R09: 0000000000000000 [ 315.351846][T19458] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 315.359869][T19458] R13: 000000000000000b R14: 00007f0d122a9f60 R15: 00007ffcb44314e8 [ 315.367896][T19458] [ 315.397827][T19438] chnl_net:caif_netlink_parms(): no params data found [ 315.474237][T19438] bridge0: port 1(bridge_slave_0) entered blocking state [ 315.481906][T19438] bridge0: port 1(bridge_slave_0) entered disabled state [ 315.495975][T19438] bridge_slave_0: entered allmulticast mode [ 315.502855][T19438] bridge_slave_0: entered promiscuous mode [ 315.523483][T19438] bridge0: port 2(bridge_slave_1) entered blocking state [ 315.530624][T19438] bridge0: port 2(bridge_slave_1) entered disabled state [ 315.538013][T19438] bridge_slave_1: entered allmulticast mode [ 315.544687][T19438] bridge_slave_1: entered promiscuous mode [ 315.553485][T19479] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4923'. [ 315.578575][T19438] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 315.592390][T19438] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 315.616681][T19438] team0: Port device team_slave_0 added [ 315.623466][T19438] team0: Port device team_slave_1 added [ 315.640529][T19438] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 315.647634][T19438] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 315.673826][T19438] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 315.686948][T19438] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 315.693910][T19438] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 315.719949][T19438] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 315.753738][T19438] hsr_slave_0: entered promiscuous mode [ 315.760070][T19438] hsr_slave_1: entered promiscuous mode [ 315.766163][T19438] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 315.773815][T19438] Cannot create hsr debugfs directory [ 315.821064][T19491] loop3: detected capacity change from 0 to 256 [ 315.849473][T19438] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.923169][T19438] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.962821][T19438] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.994489][T19497] 9pnet: p9_errstr2errno: server reported unknown error Í01777777777777777777777 [ 316.013527][T19438] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.068063][ T29] audit: type=1326 audit(828.049:3693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19498 comm="syz.3.4931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c780e6bd9 code=0x7ffc0000 [ 316.112642][T19438] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 316.133880][T19438] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 316.160673][T19438] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 316.178210][T19438] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 316.206136][T19516] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4935'. [ 316.283682][T19438] 8021q: adding VLAN 0 to HW filter on device bond0 [ 316.317900][T19519] loop1: detected capacity change from 0 to 1024 [ 316.327057][T19438] 8021q: adding VLAN 0 to HW filter on device team0 [ 316.348178][ T7179] bridge0: port 1(bridge_slave_0) entered blocking state [ 316.355285][ T7179] bridge0: port 1(bridge_slave_0) entered forwarding state [ 316.380842][ T970] bridge0: port 2(bridge_slave_1) entered blocking state [ 316.387987][ T970] bridge0: port 2(bridge_slave_1) entered forwarding state [ 316.401243][T19519] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 316.410063][T19525] loop3: detected capacity change from 0 to 256 [ 316.435098][T19438] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 316.445487][T19438] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 316.485339][T19528] loop0: detected capacity change from 0 to 1024 [ 316.504449][T19073] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 316.525160][T19525] team0: entered promiscuous mode [ 316.530668][T19525] team_slave_0: entered promiscuous mode [ 316.536467][T19525] team_slave_1: entered promiscuous mode [ 316.544677][T19438] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 316.565742][T19525] veth1_to_batadv: entered promiscuous mode [ 316.572846][T19528] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 316.583075][T19522] team0: left promiscuous mode [ 316.590398][T19522] team_slave_0: left promiscuous mode [ 316.595922][T19522] team_slave_1: left promiscuous mode [ 316.643184][T19521] veth1_to_batadv: left promiscuous mode [ 316.693492][T18880] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 316.727874][T19548] loop1: detected capacity change from 0 to 512 [ 316.746258][T19548] ext2: Unknown parameter 'smackfsfloor' [ 316.782834][T19555] loop0: detected capacity change from 0 to 2048 [ 316.857299][T19555] loop0: p1 < > p3 [ 316.863199][T19438] veth0_vlan: entered promiscuous mode [ 316.867993][T19555] loop0: p3 size 134217728 extends beyond EOD, truncated [ 316.877091][T19438] veth1_vlan: entered promiscuous mode [ 316.926790][T19438] veth0_macvtap: entered promiscuous mode [ 316.946900][T19438] veth1_macvtap: entered promiscuous mode [ 316.958694][T19555] loop0: detected capacity change from 0 to 512 [ 316.977861][T19438] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 316.989249][T19438] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 316.999098][T19438] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 317.009553][T19438] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 317.019967][T19438] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 317.030426][T19438] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 317.040316][T19438] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 317.051316][T19438] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 317.061205][T19438] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 317.071788][T19438] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 317.081942][T19438] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 317.092393][T19438] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 317.102228][T19438] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 317.113274][T19438] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 317.123195][T19438] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 317.133601][T19438] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 317.143727][T19438] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 317.154152][T19438] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 317.163998][T19438] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 317.174898][T19438] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 317.184696][T19438] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 317.195407][T19438] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 317.205811][T19438] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 317.216254][T19438] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 317.226710][T19438] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 317.237137][T19438] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 317.246947][T19438] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 317.257709][T19438] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 317.271225][T19438] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 317.282890][T19438] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 317.294398][T19438] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 317.304224][T19438] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 317.314647][T19438] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 317.324841][T19438] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 317.335324][T19438] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 317.345140][T19438] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 317.356062][T19438] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 317.365961][T19438] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 317.376558][T19438] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 317.387091][T19438] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 317.397526][T19438] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 317.407446][T19438] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 317.418271][T19438] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 317.428119][T19438] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 317.438565][T19438] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 317.448752][T19438] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 317.459172][T19438] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 317.469044][T19438] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 317.479839][T19438] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 317.489772][T19438] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 317.500164][T19438] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 317.510462][T19438] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 317.520861][T19438] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 317.530713][T19438] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 317.541536][T19438] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 317.551332][T19438] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 317.561777][T19438] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 317.574629][T19438] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 317.582586][T19555] hsr_slave_0: left promiscuous mode [ 317.589390][T19555] hsr_slave_1: left promiscuous mode [ 317.621944][T19438] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.631440][T19438] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.640149][T19438] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.648879][T19438] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.818498][T19587] netlink: 'syz.4.4957': attribute type 10 has an invalid length. [ 317.821142][T19579] loop0: detected capacity change from 0 to 4096 [ 317.842331][T19587] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 317.927955][T19585] loop3: detected capacity change from 0 to 256 [ 317.938493][T19579] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 318.022050][T19591] netlink: 14601 bytes leftover after parsing attributes in process `syz.4.4958'. [ 318.050836][T18880] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 318.131303][T19594] 9pnet: p9_errstr2errno: server reported unknown error Í01777777777777777777777 [ 318.142946][T19596] loop0: detected capacity change from 0 to 512 [ 318.153424][T19596] ext2: Unknown parameter 'smackfsfloor' [ 318.288890][T19616] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4968'. [ 318.421702][T19627] loop3: detected capacity change from 0 to 512 [ 318.451224][T19627] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 318.502509][T19627] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4972'. [ 318.524129][T19632] netlink: 44346 bytes leftover after parsing attributes in process `syz.0.4973'. [ 318.533849][T15273] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 318.594275][T19639] loop0: detected capacity change from 0 to 1024 [ 318.603521][T19639] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 318.652871][T19654] loop3: detected capacity change from 0 to 1024 [ 318.669047][T18880] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 318.670515][T19654] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 318.698409][T19661] loop1: detected capacity change from 0 to 128 [ 318.705301][T15273] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 318.733058][T19665] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=19665 comm=syz.0.4981 [ 318.784427][T19669] loop3: detected capacity change from 0 to 512 [ 318.791084][T19669] ext2: Unknown parameter 'smackfsfloor' [ 318.803102][T19665] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.4981'. [ 318.837726][T19672] loop1: detected capacity change from 0 to 2048 [ 318.844434][T19672] ext4: Unknown parameter 'fsname' [ 319.002260][T19684] loop1: detected capacity change from 0 to 512 [ 319.029572][T19684] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 319.056242][T19684] FAULT_INJECTION: forcing a failure. [ 319.056242][T19684] name failslab, interval 1, probability 0, space 0, times 0 [ 319.069619][T19684] CPU: 1 PID: 19684 Comm: syz.1.4988 Not tainted 6.10.0-syzkaller-00017-g5e0497553643 #0 [ 319.079478][T19684] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 319.089593][T19684] Call Trace: [ 319.092870][T19684] [ 319.095871][T19684] dump_stack_lvl+0xf2/0x150 [ 319.100468][T19684] dump_stack+0x15/0x20 [ 319.104659][T19684] should_fail_ex+0x229/0x230 [ 319.109334][T19684] ? __es_insert_extent+0x575/0xf60 [ 319.114569][T19684] __should_failslab+0x92/0xa0 [ 319.119336][T19684] should_failslab+0x9/0x20 [ 319.123846][T19684] kmem_cache_alloc_noprof+0x4c/0x290 [ 319.129650][T19684] __es_insert_extent+0x575/0xf60 [ 319.134677][T19684] ext4_es_insert_extent+0x3e5/0x1c10 [ 319.140058][T19684] ext4_map_blocks+0x3ee/0xf50 [ 319.144849][T19684] ext4_getblk+0x112/0x500 [ 319.149251][T19684] ext4_bread_batch+0x5b/0x360 [ 319.154010][T19684] __ext4_find_entry+0x9d3/0x10a0 [ 319.159112][T19684] ? __rcu_read_unlock+0x4e/0x70 [ 319.164121][T19684] ? may_create+0x2a8/0x2f0 [ 319.168608][T19684] ext4_lookup+0xba/0x390 [ 319.172951][T19684] ? __pfx_ext4_lookup+0x10/0x10 [ 319.177889][T19684] path_openat+0xc5f/0x1fa0 [ 319.182554][T19684] do_filp_open+0xf7/0x200 [ 319.187062][T19684] do_sys_openat2+0xab/0x120 [ 319.191638][T19684] __x64_sys_openat+0xf3/0x120 [ 319.196447][T19684] x64_sys_call+0x1057/0x2d70 [ 319.201176][T19684] do_syscall_64+0xc9/0x1c0 [ 319.205730][T19684] ? clear_bhb_loop+0x55/0xb0 [ 319.210412][T19684] ? clear_bhb_loop+0x55/0xb0 [ 319.215170][T19684] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 319.221083][T19684] RIP: 0033:0x7f0d1211bbd9 [ 319.225476][T19684] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 319.245086][T19684] RSP: 002b:00007f0d1139d048 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 319.253561][T19684] RAX: ffffffffffffffda RBX: 00007f0d122a9f60 RCX: 00007f0d1211bbd9 [ 319.261512][T19684] RDX: 0000000000143042 RSI: 0000000020000040 RDI: ffffffffffffff9c [ 319.269470][T19684] RBP: 00007f0d1139d0a0 R08: 0000000000000000 R09: 0000000000000000 [ 319.277452][T19684] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 319.285461][T19684] R13: 000000000000000b R14: 00007f0d122a9f60 R15: 00007ffcb44314e8 [ 319.293413][T19684] [ 319.316008][T19684] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.4988: bg 0: block 256: padding at end of block bitmap is not set [ 319.331174][T19684] __quota_error: 48 callbacks suppressed [ 319.331185][T19684] Quota error (device loop1): write_blk: dquota write failed [ 319.344220][T19684] Quota error (device loop1): find_free_dqentry: Can't write quota data block 5 [ 319.353316][T19684] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 319.363902][T19684] EXT4-fs error (device loop1): ext4_acquire_dquot:6860: comm syz.1.4988: Failed to acquire dquot type 1 [ 319.386413][T19073] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 319.441317][T19704] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4993'. [ 319.483049][T19708] 9pnet: p9_errstr2errno: server reported unknown error Í01777777777777777777777 [ 319.485865][T19710] team0: Device ipvlan2 failed to register rx_handler [ 319.621551][T19716] loop1: detected capacity change from 0 to 1024 [ 319.630512][T19716] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 319.663734][T19073] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 319.701544][T19722] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5003'. [ 319.759322][T19737] loop0: detected capacity change from 0 to 512 [ 319.776699][ T29] audit: type=1400 audit(831.759:3742): avc: denied { execute } for pid=19738 comm="syz.4.5009" path="/dev/bsg/blkio.throttle.io_service_bytes_recursive" dev="devtmpfs" ino=773 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 319.802660][ T29] audit: type=1400 audit(831.759:3743): avc: denied { mounton } for pid=19738 comm="syz.4.5009" path="/14/file0" dev="ramfs" ino=82426 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 319.825266][T19737] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 319.857976][T18880] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 319.914586][T19744] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 319.971768][T19746] loop1: detected capacity change from 0 to 512 [ 319.978890][T19746] ext2: Unknown parameter 'smackfsfloor' [ 320.131944][T19751] loop0: detected capacity change from 0 to 1024 [ 320.140824][T19751] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 320.171565][T18880] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 320.183880][T19755] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5014'. [ 320.214895][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 320.236646][ T29] audit: type=1400 audit(832.219:3744): avc: denied { getopt } for pid=19763 comm="syz.0.5017" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 320.260436][ T29] audit: type=1400 audit(832.239:3745): avc: denied { write } for pid=19765 comm="syz.1.5018" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 320.353153][T19782] loop3: detected capacity change from 0 to 512 [ 320.361444][T19782] ext2: Unknown parameter 'smackfsfloor' [ 320.361516][T19779] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=19779 comm=syz.1.5023 [ 320.629994][T19791] loop3: detected capacity change from 0 to 512 [ 320.666703][T19791] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 320.705434][T15273] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 320.860201][T19799] __nla_validate_parse: 2 callbacks suppressed [ 320.860212][T19799] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5028'. [ 321.086559][ T29] audit: type=1400 audit(833.069:3746): avc: denied { shutdown } for pid=19804 comm="syz.1.5031" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 321.110520][T19806] loop1: detected capacity change from 0 to 512 [ 321.118114][T19806] EXT4-fs: Ignoring removed i_version option [ 321.124120][T19806] EXT4-fs: Ignoring removed nobh option [ 321.141399][T19806] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 321.198316][T19806] EXT4-fs (loop1): 1 truncate cleaned up [ 321.214079][T19806] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 321.355315][T19815] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=19815 comm=syz.0.5035 [ 321.466034][T19822] loop0: detected capacity change from 0 to 512 [ 321.472652][T19822] ext2: Unknown parameter 'smackfsfloor' [ 321.654076][T19825] loop3: detected capacity change from 0 to 1024 [ 321.706865][T19825] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5038'. [ 321.717451][T19805] syz.1.5031 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_NOWARN|__GFP_ZERO), order=0, oom_score_adj=1000 [ 321.732134][T19805] CPU: 1 PID: 19805 Comm: syz.1.5031 Not tainted 6.10.0-syzkaller-00017-g5e0497553643 #0 [ 321.742006][T19805] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 321.752071][T19805] Call Trace: [ 321.755326][T19805] [ 321.758236][T19805] dump_stack_lvl+0xf2/0x150 [ 321.762813][T19805] dump_stack+0x15/0x20 [ 321.767032][T19805] dump_header+0x83/0x2d0 [ 321.771362][T19805] oom_kill_process+0x33e/0x4c0 [ 321.776232][T19805] out_of_memory+0x9af/0xbe0 [ 321.780845][T19805] ? try_to_free_mem_cgroup_pages+0x22a/0x4e0 [ 321.786973][T19805] mem_cgroup_out_of_memory+0x13e/0x190 [ 321.792606][T19805] try_charge_memcg+0x745/0xcd0 [ 321.797454][T19805] ? get_page_from_freelist+0x1a30/0x1a70 [ 321.803272][T19805] obj_cgroup_charge_pages+0xbd/0x1d0 [ 321.808696][T19805] __memcg_kmem_charge_page+0x9d/0x170 [ 321.814228][T19805] __alloc_pages_noprof+0x1bc/0x360 [ 321.819455][T19805] alloc_pages_mpol_noprof+0xb1/0x1e0 [ 321.824831][T19805] alloc_pages_noprof+0xe1/0x100 [ 321.829860][T19805] __vmalloc_node_range_noprof+0x719/0xef0 [ 321.835748][T19805] kvmalloc_node_noprof+0x121/0x170 [ 321.840939][T19805] ? ip_set_alloc+0x1f/0x30 [ 321.845496][T19805] ip_set_alloc+0x1f/0x30 [ 321.849819][T19805] hash_netiface_create+0x273/0x730 [ 321.855085][T19805] ? __nla_parse+0x40/0x60 [ 321.859519][T19805] ? __pfx_hash_netiface_create+0x10/0x10 [ 321.865235][T19805] ip_set_create+0x359/0x8a0 [ 321.869821][T19805] ? memchr+0x1/0x50 [ 321.873797][T19805] ? __nla_parse+0x40/0x60 [ 321.878203][T19805] nfnetlink_rcv_msg+0x4a9/0x570 [ 321.883196][T19805] netlink_rcv_skb+0x12c/0x230 [ 321.888015][T19805] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 321.893546][T19805] nfnetlink_rcv+0x16c/0x15b0 [ 321.898288][T19805] ? kmem_cache_free+0xd8/0x280 [ 321.903179][T19805] ? nlmon_xmit+0x51/0x60 [ 321.907735][T19805] ? __kfree_skb+0x102/0x150 [ 321.912386][T19805] ? consume_skb+0x57/0x180 [ 321.916879][T19805] ? nlmon_xmit+0x51/0x60 [ 321.921201][T19805] ? dev_hard_start_xmit+0x3c1/0x3f0 [ 321.926474][T19805] ? __dev_queue_xmit+0xb21/0x1e50 [ 321.931572][T19805] ? ref_tracker_free+0x3a5/0x410 [ 321.936592][T19805] ? __netlink_deliver_tap+0x495/0x4c0 [ 321.942038][T19805] netlink_unicast+0x58d/0x660 [ 321.946818][T19805] netlink_sendmsg+0x5ca/0x6e0 [ 321.951573][T19805] ? __pfx_netlink_sendmsg+0x10/0x10 [ 321.956844][T19805] __sock_sendmsg+0x140/0x180 [ 321.961701][T19805] ____sys_sendmsg+0x312/0x410 [ 321.966460][T19805] __sys_sendmsg+0x1e9/0x280 [ 321.971041][T19805] ? futex_wait+0x18e/0x1c0 [ 321.975606][T19805] __x64_sys_sendmsg+0x46/0x50 [ 321.980363][T19805] x64_sys_call+0xb25/0x2d70 [ 321.984945][T19805] do_syscall_64+0xc9/0x1c0 [ 321.989597][T19805] ? clear_bhb_loop+0x55/0xb0 [ 321.994270][T19805] ? clear_bhb_loop+0x55/0xb0 [ 321.998941][T19805] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 322.004912][T19805] RIP: 0033:0x7f0d1211bbd9 [ 322.009336][T19805] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 322.029192][T19805] RSP: 002b:00007f0d1139d048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 322.037617][T19805] RAX: ffffffffffffffda RBX: 00007f0d122a9f60 RCX: 00007f0d1211bbd9 [ 322.045645][T19805] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000004 [ 322.053622][T19805] RBP: 00007f0d1218ae60 R08: 0000000000000000 R09: 0000000000000000 [ 322.061586][T19805] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 322.069545][T19805] R13: 000000000000000b R14: 00007f0d122a9f60 R15: 00007ffcb44314e8 [ 322.077509][T19805] [ 322.081556][T19805] memory: usage 307200kB, limit 307200kB, failcnt 4849 [ 322.088795][T19805] memory+swap: usage 307664kB, limit 9007199254740988kB, failcnt 0 [ 322.097417][T19805] kmem: usage 307092kB, limit 9007199254740988kB, failcnt 0 [ 322.104717][T19805] Memory cgroup stats for /syz1: [ 322.129773][T19805] cache 98304 [ 322.131246][T19830] loop0: detected capacity change from 0 to 1024 [ 322.134717][T19805] rss 0 [ 322.134726][T19805] shmem 0 [ 322.150975][T19805] mapped_file 1650688 [ 322.154939][T19805] dirty 98304 [ 322.158296][T19805] writeback 0 [ 322.161588][T19805] workingset_refault_anon 250 [ 322.166831][T19805] workingset_refault_file 1692 [ 322.171588][T19805] swap 475136 [ 322.174884][T19805] swapcached 12288 [ 322.178666][T19805] pgpgin 430409 [ 322.182114][T19805] pgpgout 430382 [ 322.185659][T19805] pgfault 430646 [ 322.189444][T19805] pgmajfault 135 [ 322.193147][T19805] inactive_anon 0 [ 322.197400][T19805] active_anon 12288 [ 322.201195][T19805] inactive_file 0 [ 322.204819][T19805] active_file 98304 [ 322.208659][T19805] unevictable 0 [ 322.212110][T19805] hierarchical_memory_limit 314572800 [ 322.217611][T19805] hierarchical_memsw_limit 9223372036854771712 [ 322.223754][T19805] total_cache 98304 [ 322.228729][T19805] total_rss 0 [ 322.232019][T19805] total_shmem 0 [ 322.235473][T19805] total_mapped_file 1650688 [ 322.240061][T19805] total_dirty 98304 [ 322.243909][T19805] total_writeback 0 [ 322.247726][T19805] total_workingset_refault_anon 250 [ 322.252984][T19805] total_workingset_refault_file 1692 [ 322.258922][T19805] total_swap 475136 [ 322.262726][T19805] total_swapcached 12288 [ 322.266974][T19805] total_pgpgin 430409 [ 322.271020][T19805] total_pgpgout 430382 [ 322.275602][T19805] total_pgfault 430646 [ 322.279872][T19805] total_pgmajfault 135 [ 322.285759][T19805] total_inactive_anon 0 [ 322.289355][T19830] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 322.290205][T19805] total_active_anon 12288 [ 322.309719][T19805] total_inactive_file 0 [ 322.313859][T19805] total_active_file 98304 [ 322.318363][T19805] total_unevictable 0 [ 322.322332][T19805] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.5031,pid=19804,uid=0 [ 322.338650][T19805] Memory cgroup out of memory: Killed process 19804 (syz.1.5031) total-vm:82488kB, anon-rss:452kB, file-rss:11688kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 322.408290][T18880] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 322.501723][T19844] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5044'. [ 322.598754][T19850] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=19850 comm=syz.0.5047 [ 322.628322][T19073] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 322.634686][T19853] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5049'. [ 322.738027][ T7433] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.804491][T19866] loop1: detected capacity change from 0 to 512 [ 322.830175][ T7433] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.831818][T19865] 9pnet: p9_errstr2errno: server reported unknown error Í01777777777777777777777 [ 322.857951][T19866] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2234: inode #15: comm syz.1.5048: corrupted in-inode xattr: invalid ea_ino [ 322.884706][T19866] EXT4-fs error (device loop1): ext4_orphan_get:1399: comm syz.1.5048: couldn't read orphan inode 15 (err -117) [ 322.906897][T19866] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 322.928167][ T7433] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.932141][T19878] loop0: detected capacity change from 0 to 128 [ 322.980109][T19882] loop3: detected capacity change from 0 to 512 [ 323.000622][ T7433] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.014815][T19882] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 323.045226][T15273] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 323.055820][T19859] chnl_net:caif_netlink_parms(): no params data found [ 323.097842][T19859] bridge0: port 1(bridge_slave_0) entered blocking state [ 323.104931][T19859] bridge0: port 1(bridge_slave_0) entered disabled state [ 323.118651][ T29] audit: type=1400 audit(835.099:3747): avc: denied { accept } for pid=19894 comm="syz.3.5055" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 323.141183][T19859] bridge_slave_0: entered allmulticast mode [ 323.147832][T19859] bridge_slave_0: entered promiscuous mode [ 323.161243][T19859] bridge0: port 2(bridge_slave_1) entered blocking state [ 323.168399][T19859] bridge0: port 2(bridge_slave_1) entered disabled state [ 323.174204][T19897] loop3: detected capacity change from 0 to 512 [ 323.175670][T19859] bridge_slave_1: entered allmulticast mode [ 323.188241][T19859] bridge_slave_1: entered promiscuous mode [ 323.197332][ T7433] bridge_slave_1: left allmulticast mode [ 323.203046][ T7433] bridge_slave_1: left promiscuous mode [ 323.209375][ T7433] bridge0: port 2(bridge_slave_1) entered disabled state [ 323.217671][ T7433] bridge_slave_0: left allmulticast mode [ 323.223443][ T7433] bridge_slave_0: left promiscuous mode [ 323.229164][ T7433] bridge0: port 1(bridge_slave_0) entered disabled state [ 323.239198][T19897] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 323.260043][T19900] EXT4-fs error (device loop3): ext4_do_update_inode:5075: inode #2: comm syz.3.5056: corrupted inode contents [ 323.272164][T19900] EXT4-fs error (device loop3): ext4_dirty_inode:5935: inode #2: comm syz.3.5056: mark_inode_dirty error [ 323.286745][T19900] EXT4-fs error (device loop3): ext4_do_update_inode:5075: inode #2: comm syz.3.5056: corrupted inode contents [ 323.300632][T19900] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #2: comm syz.3.5056: mark_inode_dirty error [ 323.319571][T15273] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 323.339319][ T7433] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 323.350362][ T7433] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 323.361336][ T7433] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 323.374003][ T7433] bond0 (unregistering): Released all slaves [ 323.382999][T19904] loop3: detected capacity change from 0 to 256 [ 323.399784][T19859] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 323.410793][T19859] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 323.443742][T19859] team0: Port device team_slave_0 added [ 323.451754][T19859] team0: Port device team_slave_1 added [ 323.463104][T19908] netlink: 72 bytes leftover after parsing attributes in process `syz.3.5061'. [ 323.480936][ T29] audit: type=1400 audit(835.459:3748): avc: denied { checkpoint_restore } for pid=19909 comm="syz.0.5058" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 323.513065][T19859] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 323.520050][T19859] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 323.546451][T19859] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 323.560582][T19859] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 323.567570][T19859] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 323.594136][T19859] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 323.615080][T19073] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 323.626758][ T7433] hsr_slave_0: left promiscuous mode [ 323.637209][ T7433] hsr_slave_1: left promiscuous mode [ 323.645243][ T7433] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 323.652749][ T7433] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 323.660963][ T7433] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 323.668548][ T7433] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 323.678946][ T7433] veth1_macvtap: left promiscuous mode [ 323.684420][ T7433] veth0_macvtap: left promiscuous mode [ 323.689966][ T7433] veth1_vlan: left promiscuous mode [ 323.695292][ T7433] veth0_vlan: left promiscuous mode [ 323.753665][T19924] FAULT_INJECTION: forcing a failure. [ 323.753665][T19924] name failslab, interval 1, probability 0, space 0, times 0 [ 323.767171][T19924] CPU: 1 PID: 19924 Comm: syz.3.5065 Not tainted 6.10.0-syzkaller-00017-g5e0497553643 #0 [ 323.777010][T19924] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 323.787125][T19924] Call Trace: [ 323.790505][T19924] [ 323.793427][T19924] dump_stack_lvl+0xf2/0x150 [ 323.798032][T19924] dump_stack+0x15/0x20 [ 323.802241][T19924] should_fail_ex+0x229/0x230 [ 323.806919][T19924] ? __kernfs_new_node+0x6a/0x380 [ 323.811954][T19924] __should_failslab+0x92/0xa0 [ 323.816799][T19924] should_failslab+0x9/0x20 [ 323.821319][T19924] kmem_cache_alloc_noprof+0x4c/0x290 [ 323.826740][T19924] __kernfs_new_node+0x6a/0x380 [ 323.831625][T19924] ? rb_insert_color+0x6a/0x290 [ 323.836497][T19924] ? up_write+0x30/0xf0 [ 323.840736][T19924] ? kernfs_activate+0x256/0x270 [ 323.845685][T19924] kernfs_new_node+0xc8/0x140 [ 323.850365][T19924] __kernfs_create_file+0x49/0x180 [ 323.855482][T19924] ? __pfx_slab_attr_store+0x10/0x10 [ 323.860754][T19924] sysfs_add_file_mode_ns+0x136/0x1c0 [ 323.866134][T19924] internal_create_group+0x464/0x9b0 [ 323.871492][T19924] sysfs_create_group+0x1f/0x30 [ 323.876327][T19924] sysfs_slab_add+0x157/0x290 [ 323.880979][T19924] __kmem_cache_create+0x45d/0x5f0 [ 323.886075][T19924] ? kmem_cache_alloc_noprof+0x10c/0x290 [ 323.891716][T19924] kmem_cache_create_usercopy+0x150/0x2c0 [ 323.897434][T19924] p9_client_create+0x81c/0xa80 [ 323.902304][T19924] v9fs_session_init+0xf9/0xda0 [ 323.907144][T19924] ? __rcu_read_unlock+0x4e/0x70 [ 323.912140][T19924] ? __rcu_read_unlock+0x4e/0x70 [ 323.917134][T19924] ? v9fs_mount+0x53/0x560 [ 323.921348][T19948] loop1: detected capacity change from 0 to 1024 [ 323.921545][T19924] ? __should_failslab+0x92/0xa0 [ 323.932611][T19948] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 323.932765][T19924] ? should_failslab+0x9/0x20 [ 323.949897][T19924] v9fs_mount+0x69/0x560 [ 323.954161][T19924] ? __pfx_v9fs_mount+0x10/0x10 [ 323.959083][T19924] legacy_get_tree+0x77/0xd0 [ 323.963695][T19924] vfs_get_tree+0x56/0x1d0 [ 323.968168][T19924] do_new_mount+0x227/0x690 [ 323.972679][T19924] path_mount+0x49b/0xb30 [ 323.977004][T19924] __se_sys_mount+0x27f/0x2d0 [ 323.981691][T19924] __x64_sys_mount+0x67/0x80 [ 323.986324][T19924] x64_sys_call+0x25c9/0x2d70 [ 323.990998][T19924] do_syscall_64+0xc9/0x1c0 [ 323.995541][T19924] ? clear_bhb_loop+0x55/0xb0 [ 324.000263][T19924] ? clear_bhb_loop+0x55/0xb0 [ 324.004919][T19924] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 324.010796][T19924] RIP: 0033:0x7f6c780e6bd9 [ 324.015195][T19924] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 324.034808][T19924] RSP: 002b:00007f6c77347048 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 324.043280][T19924] RAX: ffffffffffffffda RBX: 00007f6c78275038 RCX: 00007f6c780e6bd9 [ 324.051233][T19924] RDX: 0000000020000180 RSI: 0000000020000000 RDI: 0000000000000000 [ 324.059282][T19924] RBP: 00007f6c773470a0 R08: 00000000200004c0 R09: 0000000000000000 [ 324.067250][T19924] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 324.075261][T19924] R13: 000000000000006e R14: 00007f6c78275038 R15: 00007ffe1d1132c8 [ 324.083240][T19924] [ 324.094116][T19073] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 324.104565][T19924] kmem_cache_create_usercopy(9p-fcall-cache) failed with error -12 [ 324.112603][T19924] CPU: 1 PID: 19924 Comm: syz.3.5065 Not tainted 6.10.0-syzkaller-00017-g5e0497553643 #0 [ 324.122386][T19924] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 324.132460][T19924] Call Trace: [ 324.135723][T19924] [ 324.138751][T19924] dump_stack_lvl+0xf2/0x150 [ 324.143356][T19924] dump_stack+0x15/0x20 [ 324.147535][T19924] kmem_cache_create_usercopy+0x239/0x2c0 [ 324.153266][T19924] p9_client_create+0x81c/0xa80 [ 324.158242][T19924] v9fs_session_init+0xf9/0xda0 [ 324.163294][T19924] ? __rcu_read_unlock+0x4e/0x70 [ 324.168272][T19924] ? __rcu_read_unlock+0x4e/0x70 [ 324.173211][T19924] ? v9fs_mount+0x53/0x560 [ 324.177619][T19924] ? __should_failslab+0x92/0xa0 [ 324.182594][T19924] ? should_failslab+0x9/0x20 [ 324.187272][T19924] v9fs_mount+0x69/0x560 [ 324.191533][T19924] ? __pfx_v9fs_mount+0x10/0x10 [ 324.196376][T19924] legacy_get_tree+0x77/0xd0 [ 324.201044][T19924] vfs_get_tree+0x56/0x1d0 [ 324.205452][T19924] do_new_mount+0x227/0x690 [ 324.209943][T19924] path_mount+0x49b/0xb30 [ 324.214294][T19924] __se_sys_mount+0x27f/0x2d0 [ 324.219071][T19924] __x64_sys_mount+0x67/0x80 [ 324.223721][T19924] x64_sys_call+0x25c9/0x2d70 [ 324.228439][T19924] do_syscall_64+0xc9/0x1c0 [ 324.233008][T19924] ? clear_bhb_loop+0x55/0xb0 [ 324.237710][T19924] ? clear_bhb_loop+0x55/0xb0 [ 324.242410][T19924] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 324.248300][T19924] RIP: 0033:0x7f6c780e6bd9 [ 324.252801][T19924] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 324.272455][T19924] RSP: 002b:00007f6c77347048 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 324.280949][T19924] RAX: ffffffffffffffda RBX: 00007f6c78275038 RCX: 00007f6c780e6bd9 [ 324.288921][T19924] RDX: 0000000020000180 RSI: 0000000020000000 RDI: 0000000000000000 [ 324.296906][T19924] RBP: 00007f6c773470a0 R08: 00000000200004c0 R09: 0000000000000000 [ 324.304873][T19924] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 324.312823][T19924] R13: 000000000000006e R14: 00007f6c78275038 R15: 00007ffe1d1132c8 [ 324.320776][T19924] [ 324.348252][ T7433] team0 (unregistering): Port device team_slave_1 removed [ 324.367099][ T7433] team0 (unregistering): Port device team_slave_0 removed [ 324.410998][T19918] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5063'. [ 324.474184][T19859] hsr_slave_0: entered promiscuous mode [ 324.480873][T19859] hsr_slave_1: entered promiscuous mode [ 324.487054][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 324.487070][ T29] audit: type=1400 audit(836.469:3752): avc: denied { unmount } for pid=15273 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 324.525772][T19859] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 324.537528][T19859] Cannot create hsr debugfs directory [ 324.542339][T19959] loop0: detected capacity change from 0 to 4096 [ 324.563943][T19959] EXT4-fs error (device loop0): ext4_quota_enable:7034: comm syz.0.5071: inode #255: comm syz.0.5071: iget: illegal inode # [ 324.563954][T19963] loop3: detected capacity change from 0 to 512 [ 324.564050][T19959] EXT4-fs error (device loop0): ext4_quota_enable:7037: comm syz.0.5071: Bad quota inode: 255, type: 2 [ 324.577905][T19963] ext2: Unknown parameter 'smackfsfloor' [ 324.606025][T19959] EXT4-fs warning (device loop0): ext4_enable_quotas:7078: Failed to enable quota tracking (type=2, err=-117, ino=255). Please run e2fsck to fix. [ 324.634557][T19959] EXT4-fs (loop0): mount failed [ 324.828097][T19950] syz.1.5069 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 324.839831][T19950] CPU: 1 PID: 19950 Comm: syz.1.5069 Not tainted 6.10.0-syzkaller-00017-g5e0497553643 #0 [ 324.849712][T19950] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 324.859767][T19950] Call Trace: [ 324.863036][T19950] [ 324.866032][T19950] dump_stack_lvl+0xf2/0x150 [ 324.870684][T19950] dump_stack+0x15/0x20 [ 324.874834][T19950] dump_header+0x83/0x2d0 [ 324.879198][T19950] oom_kill_process+0x33e/0x4c0 [ 324.884107][T19950] out_of_memory+0x9af/0xbe0 [ 324.888684][T19950] ? try_to_free_mem_cgroup_pages+0x22a/0x4e0 [ 324.894743][T19950] mem_cgroup_out_of_memory+0x13e/0x190 [ 324.900414][T19950] try_charge_memcg+0x745/0xcd0 [ 324.905261][T19950] ? _raw_spin_unlock+0x26/0x50 [ 324.910160][T19950] ? radix_tree_lookup+0xf9/0x150 [ 324.915178][T19950] mem_cgroup_swapin_charge_folio+0x107/0x1a0 [ 324.921255][T19950] __read_swap_cache_async+0x2b9/0x520 [ 324.926769][T19950] swap_cluster_readahead+0x276/0x3f0 [ 324.932320][T19950] swapin_readahead+0xe2/0x7a0 [ 324.937073][T19950] ? __filemap_get_folio+0x420/0x5b0 [ 324.942415][T19950] ? swap_cache_get_folio+0x6e/0x210 [ 324.947688][T19950] do_swap_page+0x3bc/0x1840 [ 324.952272][T19950] ? cgroup_rstat_updated+0x99/0x550 [ 324.957563][T19950] ? __rcu_read_lock+0x36/0x50 [ 324.962342][T19950] handle_mm_fault+0x8b9/0x2ac0 [ 324.967313][T19950] exc_page_fault+0x3b9/0x650 [ 324.972068][T19950] asm_exc_page_fault+0x26/0x30 [ 324.976911][T19950] RIP: 0033:0x7f0d11ff0564 [ 324.981418][T19950] Code: 00 69 3d 53 b1 de 00 e8 03 00 00 48 8d 1d 14 9a 2b 00 e8 df b5 12 00 eb 11 0f 1f 44 00 00 48 81 c3 d8 00 00 00 48 39 dd 74 bc <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df e8 87 ee ff ff eb [ 325.001077][T19950] RSP: 002b:00007ffcb44315d0 EFLAGS: 00010202 [ 325.007144][T19950] RAX: 0000000000000000 RBX: 00007f0d122a9f60 RCX: 0000000000000000 [ 325.015112][T19950] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000555570a3d808 [ 325.023072][T19950] RBP: 00007f0d122aba60 R08: 0000000000000000 R09: 7fffffffffffffff [ 325.031076][T19950] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000004f62c [ 325.039036][T19950] R13: 0000000000000032 R14: 00007f0d122aba60 R15: 00007f0d122aa038 [ 325.047113][T19950] [ 325.050927][T19950] memory: usage 307200kB, limit 307200kB, failcnt 5065 [ 325.057843][T19950] memory+swap: usage 297764kB, limit 9007199254740988kB, failcnt 0 [ 325.065872][T19950] kmem: usage 278744kB, limit 9007199254740988kB, failcnt 0 [ 325.073373][T19950] Memory cgroup stats for /syz1: [ 325.081763][T19950] cache 16384 [ 325.090572][T19950] rss 4096 [ 325.093607][T19950] shmem 0 [ 325.096552][T19950] mapped_file 16384 [ 325.100354][T19950] dirty 16384 [ 325.103778][T19950] writeback 12288 [ 325.107449][T19950] workingset_refault_anon 308 [ 325.107686][T19971] netlink: 'syz.3.5074': attribute type 4 has an invalid length. [ 325.112108][T19950] workingset_refault_file 1756 [ 325.123596][T19971] loop3: detected capacity change from 0 to 736 [ 325.125141][T19950] swap 188416 [ 325.125149][T19950] swapcached 16384 [ 325.131603][T19971] iso9660: Bad value for 'mode' [ 325.134650][T19950] pgpgin 430968 [ 325.147311][T19950] pgpgout 430960 [ 325.150843][T19950] pgfault 431409 [ 325.154413][T19950] pgmajfault 146 [ 325.157984][T19950] inactive_anon 16384 [ 325.162007][T19950] active_anon 0 [ 325.165817][T19950] inactive_file 16384 [ 325.169863][T19950] active_file 0 [ 325.173308][T19950] unevictable 0 [ 325.177334][T19950] hierarchical_memory_limit 314572800 [ 325.182772][T19950] hierarchical_memsw_limit 9223372036854771712 [ 325.188981][T19950] total_cache 16384 [ 325.192781][T19950] total_rss 4096 [ 325.196544][T19950] total_shmem 0 [ 325.200022][T19950] total_mapped_file 16384 [ 325.204340][T19950] total_dirty 16384 [ 325.208958][T19950] total_writeback 12288 [ 325.213101][T19950] total_workingset_refault_anon 308 [ 325.218338][T19950] total_workingset_refault_file 1756 [ 325.223609][T19950] total_swap 188416 [ 325.227434][T19950] total_swapcached 16384 [ 325.231654][T19950] total_pgpgin 430968 [ 325.235619][T19950] total_pgpgout 430960 [ 325.240288][T19950] total_pgfault 431409 [ 325.244356][T19950] total_pgmajfault 146 [ 325.248444][T19950] total_inactive_anon 16384 [ 325.252931][T19950] total_active_anon 0 [ 325.256928][T19950] total_inactive_file 16384 [ 325.261409][T19950] total_active_file 0 [ 325.265406][T19950] total_unevictable 0 [ 325.269994][T19950] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.5069,pid=19950,uid=0 [ 325.285086][T19950] Memory cgroup out of memory: Killed process 19950 (syz.1.5069) total-vm:80752kB, anon-rss:452kB, file-rss:10016kB, shmem-rss:0kB, UID:0 pgtables:100kB oom_score_adj:1000 [ 325.366601][T19982] 9pnet: p9_errstr2errno: server reported unknown error Í01777777777777777777777 [ 325.421321][T19859] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 325.433372][T19859] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 325.442349][T19859] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 325.453767][T19989] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5080'. [ 325.464093][T19859] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 325.532233][T19996] loop3: detected capacity change from 0 to 512 [ 325.546404][T19996] ext2: Unknown parameter 'smackfsfloor' [ 325.548913][T19988] FAULT_INJECTION: forcing a failure. [ 325.548913][T19988] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 325.559084][T19859] 8021q: adding VLAN 0 to HW filter on device bond0 [ 325.565093][T19988] CPU: 0 PID: 19988 Comm: syz.0.5081 Not tainted 6.10.0-syzkaller-00017-g5e0497553643 #0 [ 325.579205][T19859] 8021q: adding VLAN 0 to HW filter on device team0 [ 325.581361][T19988] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 325.581374][T19988] Call Trace: [ 325.581380][T19988] [ 325.592133][ T3158] bridge0: port 1(bridge_slave_0) entered blocking state [ 325.597973][T19988] dump_stack_lvl+0xf2/0x150 [ 325.601294][ T3158] bridge0: port 1(bridge_slave_0) entered forwarding state [ 325.604162][T19988] dump_stack+0x15/0x20 [ 325.627209][T19988] should_fail_ex+0x229/0x230 [ 325.627718][T19859] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 325.631885][T19988] should_fail+0xb/0x10 [ 325.642641][T19859] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 325.646766][T19988] should_fail_usercopy+0x1a/0x20 [ 325.660915][ T3158] bridge0: port 2(bridge_slave_1) entered blocking state [ 325.662127][T19988] _copy_to_user+0x1e/0xa0 [ 325.669237][ T3158] bridge0: port 2(bridge_slave_1) entered forwarding state [ 325.673518][T19988] simple_read_from_buffer+0xa0/0x110 [ 325.686101][T19988] proc_fail_nth_read+0xfc/0x140 [ 325.691096][T19988] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 325.696662][T19988] vfs_read+0x1a2/0x6e0 [ 325.700888][T19988] ? __rcu_read_unlock+0x4e/0x70 [ 325.705873][T19988] ? __fget_files+0x1da/0x210 [ 325.710555][T19988] ksys_read+0xeb/0x1b0 [ 325.714771][T19988] __x64_sys_read+0x42/0x50 [ 325.719267][T19988] x64_sys_call+0x27e5/0x2d70 [ 325.724028][T19988] do_syscall_64+0xc9/0x1c0 [ 325.728570][T19988] ? clear_bhb_loop+0x55/0xb0 [ 325.733257][T19988] ? clear_bhb_loop+0x55/0xb0 [ 325.737936][T19988] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 325.743884][T19988] RIP: 0033:0x7f4abdc256bc [ 325.748283][T19988] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8c 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 1f 8d 02 00 48 [ 325.767957][T19988] RSP: 002b:00007f4abcea8040 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 325.776357][T19988] RAX: ffffffffffffffda RBX: 00007f4abddb4f60 RCX: 00007f4abdc256bc [ 325.784311][T19988] RDX: 000000000000000f RSI: 00007f4abcea80b0 RDI: 0000000000000003 [ 325.792303][T19988] RBP: 00007f4abcea80a0 R08: 0000000000000000 R09: 0000000000000000 [ 325.800318][T19988] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 325.808274][T19988] R13: 000000000000000b R14: 00007f4abddb4f60 R15: 00007ffcf89b8938 [ 325.816239][T19988] [ 325.902125][T19859] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 325.920757][T20005] loop0: detected capacity change from 0 to 128 [ 326.039481][ T29] audit: type=1400 audit(838.019:3753): avc: denied { accept } for pid=20017 comm="syz.3.5087" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 326.051215][T20019] loop3: detected capacity change from 0 to 2048 [ 326.067467][T19859] veth0_vlan: entered promiscuous mode [ 326.082550][T19859] veth1_vlan: entered promiscuous mode [ 326.099969][T20019] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 326.106265][T19859] veth0_macvtap: entered promiscuous mode [ 326.123121][T19859] veth1_macvtap: entered promiscuous mode [ 326.124879][T20019] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.5087: bg 0: block 234: padding at end of block bitmap is not set [ 326.135188][T19859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 326.149336][ T29] audit: type=1400 audit(838.099:3754): avc: denied { rename } for pid=20017 comm="syz.3.5087" name="file2" dev="loop3" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 326.154275][T19859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 326.186676][T19859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 326.197226][T19859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 326.198255][T20019] EXT4-fs (loop3): Remounting filesystem read-only [ 326.207328][T19859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 326.224677][T19859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 326.234496][T19859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 326.244944][T19859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 326.255302][T19859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 326.265843][T19859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 326.276536][T19859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 326.287752][T19859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 326.297798][T19859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 326.308916][T19859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 326.318855][T19859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 326.329292][T19859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 326.339645][T19859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 326.350204][T19859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 326.359999][T19859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 326.370881][T19859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 326.380695][T19859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 326.391228][T19859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 326.401413][T19859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 326.411834][T19859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 326.421624][T19859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 326.432384][T19859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 326.442308][T19859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 326.452780][T19859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 326.469995][T15273] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 326.480795][T19859] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 326.506053][T20045] loop1: detected capacity change from 0 to 1024 [ 326.513822][T20036] bridge0: port 2(bridge_slave_1) entered disabled state [ 326.521134][T20036] bridge0: port 1(bridge_slave_0) entered disabled state [ 326.532187][T20045] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 326.535231][T20036] bridge0: entered allmulticast mode [ 326.559724][T20037] bridge_slave_1: left allmulticast mode [ 326.565657][T20037] bridge_slave_1: left promiscuous mode [ 326.571487][T20037] bridge0: port 2(bridge_slave_1) entered disabled state [ 326.580975][T20037] bridge_slave_0: left allmulticast mode [ 326.586947][T20037] bridge_slave_0: left promiscuous mode [ 326.592655][T20037] bridge0: port 1(bridge_slave_0) entered disabled state [ 326.610551][T19073] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 326.612956][ T29] audit: type=1400 audit(838.589:3755): avc: denied { mount } for pid=20049 comm="syz.3.5092" name="/" dev="configfs" ino=347 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 326.648375][T19859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 326.658952][T19859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 326.669198][T19859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 326.679659][T19859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 326.689493][T19859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 326.700524][T19859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 326.710798][T19859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 326.721423][T19859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 326.731885][T19859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 326.742407][T19859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 326.752256][T19859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 326.763294][T19859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 326.773130][T19859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 326.783719][T19859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 326.794199][T19859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 326.804675][T19859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 326.806174][ T29] audit: type=1400 audit(838.759:3756): avc: denied { unmount } for pid=15273 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 326.814565][T19859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 326.845119][T19859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 326.855281][T19859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 326.866416][T19859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 326.876235][T19859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 326.886752][T19859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 326.896992][T19859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 326.907408][T19859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 326.917816][T19859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 326.928788][T19859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 326.938591][T19859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 326.949133][T19859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 326.972212][T19859] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 326.976201][T20069] FAULT_INJECTION: forcing a failure. [ 326.976201][T20069] name failslab, interval 1, probability 0, space 0, times 0 [ 326.992760][T20069] CPU: 1 PID: 20069 Comm: syz.3.5099 Not tainted 6.10.0-syzkaller-00017-g5e0497553643 #0 [ 326.993931][T19859] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.002553][T20069] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 327.002565][T20069] Call Trace: [ 327.002570][T20069] [ 327.002577][T20069] dump_stack_lvl+0xf2/0x150 [ 327.002675][T20069] dump_stack+0x15/0x20 [ 327.011438][T19859] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.021375][T20069] should_fail_ex+0x229/0x230 [ 327.024729][T19859] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.027630][T20069] ? do_mq_timedreceive+0x241/0x6e0 [ 327.027711][T20069] __should_failslab+0x92/0xa0 [ 327.032296][T19859] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.036413][T20069] should_failslab+0x9/0x20 [ 327.036444][T20069] kmalloc_trace_noprof+0x4b/0x2a0 [ 327.036472][T20069] do_mq_timedreceive+0x241/0x6e0 [ 327.092221][T20069] __x64_sys_mq_timedreceive+0xca/0x150 [ 327.097844][T20069] x64_sys_call+0x2c77/0x2d70 [ 327.102559][T20069] do_syscall_64+0xc9/0x1c0 [ 327.107152][T20069] ? clear_bhb_loop+0x55/0xb0 [ 327.111841][T20069] ? clear_bhb_loop+0x55/0xb0 [ 327.116552][T20069] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 327.122519][T20069] RIP: 0033:0x7f6c780e6bd9 [ 327.127041][T20069] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 327.146755][T20069] RSP: 002b:00007f6c77368048 EFLAGS: 00000246 ORIG_RAX: 00000000000000f3 [ 327.155161][T20069] RAX: ffffffffffffffda RBX: 00007f6c78274f60 RCX: 00007f6c780e6bd9 [ 327.163123][T20069] RDX: 00000000fffffceb RSI: 0000000020004600 RDI: 0000000000000003 [ 327.171083][T20069] RBP: 00007f6c773680a0 R08: 0000000000000000 R09: 0000000000000000 [ 327.179042][T20069] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 327.187010][T20069] R13: 000000000000000b R14: 00007f6c78274f60 R15: 00007ffe1d1132c8 [ 327.195355][T20069] [ 327.303110][T20082] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5103'. [ 327.339244][T20086] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5104'. [ 327.348479][T20086] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5104'. [ 327.386350][T20086] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5104'. [ 327.398241][T20033] chnl_net:caif_netlink_parms(): no params data found [ 327.423161][T20092] loop0: detected capacity change from 0 to 1024 [ 327.436637][T20092] EXT4-fs error (device loop0): ext4_orphan_get:1420: comm syz.0.5105: bad orphan inode 2097152 [ 327.448273][T20092] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 327.475334][T20033] bridge0: port 1(bridge_slave_0) entered blocking state [ 327.477727][T18880] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 327.482630][T20033] bridge0: port 1(bridge_slave_0) entered disabled state [ 327.499308][T20033] bridge_slave_0: entered allmulticast mode [ 327.505810][T20033] bridge_slave_0: entered promiscuous mode [ 327.513355][T20033] bridge0: port 2(bridge_slave_1) entered blocking state [ 327.520461][T20033] bridge0: port 2(bridge_slave_1) entered disabled state [ 327.528331][T20033] bridge_slave_1: entered allmulticast mode [ 327.535189][T20033] bridge_slave_1: entered promiscuous mode [ 327.557541][T20033] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 327.561596][T20103] loop1: detected capacity change from 0 to 2048 [ 327.569875][T20033] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 327.593552][T20103] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 327.609486][T20105] loop0: detected capacity change from 0 to 1024 [ 327.618169][T20033] team0: Port device team_slave_0 added [ 327.624859][T20033] team0: Port device team_slave_1 added [ 327.633209][T19073] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 327.649233][T20105] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 327.664562][T20033] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 327.671566][T20033] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 327.698092][T20033] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 327.711097][T20033] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 327.718093][T20033] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 327.744561][T20033] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 327.758674][T18880] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 327.769976][ T29] audit: type=1326 audit(839.739:3757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20112 comm="syz.1.5111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f0d12112c27 code=0x7ffc0000 [ 327.792778][ T29] audit: type=1326 audit(839.739:3758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20112 comm="syz.1.5111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0d120b75d9 code=0x7ffc0000 [ 327.807134][T20115] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5111'. [ 327.815567][ T29] audit: type=1326 audit(839.739:3759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20112 comm="syz.1.5111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f0d12112c27 code=0x7ffc0000 [ 327.847259][ T29] audit: type=1326 audit(839.739:3760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20112 comm="syz.1.5111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0d120b75d9 code=0x7ffc0000 [ 327.870188][ T29] audit: type=1326 audit(839.739:3761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20112 comm="syz.1.5111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f0d12112c27 code=0x7ffc0000 [ 327.939535][T20033] hsr_slave_0: entered promiscuous mode [ 327.945967][T20033] hsr_slave_1: entered promiscuous mode [ 327.952400][T20033] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 327.963704][T20033] Cannot create hsr debugfs directory [ 328.104917][T20033] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.108452][T20124] loop0: detected capacity change from 0 to 512 [ 328.132888][T20124] ext2: Unknown parameter 'smackfsfloor' [ 328.167672][T20033] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.225967][T20126] loop4: detected capacity change from 256 to 11 [ 328.239819][T20033] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.260987][T20128] FAULT_INJECTION: forcing a failure. [ 328.260987][T20128] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 328.274350][T20128] CPU: 0 PID: 20128 Comm: syz.4.5117 Not tainted 6.10.0-syzkaller-00017-g5e0497553643 #0 [ 328.284156][T20128] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 328.294191][T20128] Call Trace: [ 328.297463][T20128] [ 328.300375][T20128] dump_stack_lvl+0xf2/0x150 [ 328.304952][T20128] dump_stack+0x15/0x20 [ 328.309218][T20128] should_fail_ex+0x229/0x230 [ 328.313891][T20128] __should_fail_alloc_page+0xfd/0x110 [ 328.319444][T20128] __alloc_pages_noprof+0x109/0x360 [ 328.324638][T20128] alloc_pages_mpol_noprof+0xb1/0x1e0 [ 328.330098][T20128] shmem_get_folio_gfp+0x3e4/0xb70 [ 328.335279][T20128] shmem_write_begin+0xa0/0x1c0 [ 328.340119][T20128] generic_perform_write+0x1d5/0x410 [ 328.345400][T20128] ? __pfx_shmem_write_end+0x10/0x10 [ 328.350711][T20128] shmem_file_write_iter+0xc8/0xf0 [ 328.355893][T20128] vfs_write+0x78f/0x900 [ 328.360137][T20128] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 328.365991][T20128] ksys_write+0xeb/0x1b0 [ 328.370218][T20128] __x64_sys_write+0x42/0x50 [ 328.374841][T20128] x64_sys_call+0x27ef/0x2d70 [ 328.379499][T20128] do_syscall_64+0xc9/0x1c0 [ 328.384044][T20128] ? clear_bhb_loop+0x55/0xb0 [ 328.388723][T20128] ? clear_bhb_loop+0x55/0xb0 [ 328.393431][T20128] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 328.399414][T20128] RIP: 0033:0x7f3334dea75f [ 328.403877][T20128] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 29 8c 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 7c 8c 02 00 48 [ 328.423470][T20128] RSP: 002b:00007f333406ce00 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 328.431930][T20128] RAX: ffffffffffffffda RBX: 0000000000020000 RCX: 00007f3334dea75f [ 328.439952][T20128] RDX: 0000000000020000 RSI: 00007f332bc4d000 RDI: 0000000000000004 [ 328.447970][T20128] RBP: 0000000000000000 R08: 0000000000000000 R09: 00000000000001b9 [ 328.455919][T20128] R10: 0000000020000302 R11: 0000000000000293 R12: 0000000000000004 [ 328.463866][T20128] R13: 00007f333406cf00 R14: 00007f333406cec0 R15: 00007f332bc4d000 [ 328.471824][T20128] [ 328.494718][T20033] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.564667][T20033] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 328.573641][T20033] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 328.593144][T20033] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 328.611409][T20033] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 328.637530][T20139] loop1: detected capacity change from 0 to 2048 [ 328.657168][T20139] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 328.661566][T20033] 8021q: adding VLAN 0 to HW filter on device bond0 [ 328.711789][T20143] rdma_rxe: rxe_newlink: failed to add team_slave_1 [ 328.823181][ T4975] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 328.840453][T20033] 8021q: adding VLAN 0 to HW filter on device team0 [ 328.857309][ T3158] bridge0: port 1(bridge_slave_0) entered blocking state [ 328.864439][ T3158] bridge0: port 1(bridge_slave_0) entered forwarding state [ 328.876671][ T4975] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 511 with max blocks 1 with error 28 [ 328.889805][ T4975] EXT4-fs (loop1): This should not happen!! Data will be lost [ 328.889805][ T4975] [ 328.899476][ T4975] EXT4-fs (loop1): Total free blocks count 0 [ 328.905447][ T4975] EXT4-fs (loop1): Free/Dirty block details [ 328.911355][ T4975] EXT4-fs (loop1): free_blocks=2415919104 [ 328.917711][ T4975] EXT4-fs (loop1): dirty_blocks=16 [ 328.922813][ T4975] EXT4-fs (loop1): Block reservation details [ 328.928791][ T4975] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 328.943318][ T3159] bridge0: port 2(bridge_slave_1) entered blocking state [ 328.950439][ T3159] bridge0: port 2(bridge_slave_1) entered forwarding state [ 328.978227][T20033] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 328.989209][T20033] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 329.000988][T19073] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 329.058927][T20033] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 329.092627][T20153] netlink: 76 bytes leftover after parsing attributes in process `syz.1.5124'. [ 329.139119][T20033] veth0_vlan: entered promiscuous mode [ 329.148165][T20033] veth1_vlan: entered promiscuous mode [ 329.168083][T20033] veth0_macvtap: entered promiscuous mode [ 329.178881][T20033] veth1_macvtap: entered promiscuous mode [ 329.191692][T20033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 329.202827][T20033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 329.212646][T20033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 329.223075][T20033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 329.233316][T20033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 329.243773][T20033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 329.253601][T20033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 329.264648][T20033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 329.274977][T20033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 329.285575][T20033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 329.296162][T20033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 329.306585][T20033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 329.316484][T20033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 329.327466][T20033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 329.337276][T20033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 329.348264][T20033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 329.358423][T20033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 329.368863][T20033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 329.378824][T20033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 329.389587][T20033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 329.399593][T20033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 329.409998][T20033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 329.420222][T20033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 329.430648][T20033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 329.440476][T20033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 329.451574][T20033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 329.461434][T20033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 329.471948][T20033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 329.482355][T20033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 329.492783][T20033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 329.537475][T20033] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 329.564216][T20033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 329.575099][T20033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 329.584977][T20033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 329.595634][T20033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 329.605539][T20033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 329.616010][T20033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 329.625833][T20033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 329.636744][T20033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 329.646559][T20033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 329.656995][T20033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 329.666903][T20033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 329.677347][T20033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 329.687170][T20033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 329.697661][T20033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 329.707550][T20033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 329.718017][T20033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 329.727825][T20033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 329.738275][T20033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 329.748445][T20033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 329.758921][T20033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 329.768771][T20033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 329.779254][T20033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 329.789170][T20033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 329.799639][T20033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 329.809471][T20033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 329.819892][T20033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 329.829729][T20033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 329.840290][T20033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 329.850094][T20033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 329.860592][T20033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 329.877445][T20033] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 329.889410][T20033] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.898213][T20033] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.907356][T20033] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.916345][T20033] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.982334][T20189] 9pnet: p9_errstr2errno: server reported unknown error Í01777777777777777777777 [ 330.186551][T20196] loop2: detected capacity change from 0 to 1024 [ 330.207495][T20196] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 330.240714][T20033] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 330.293588][T20202] loop2: detected capacity change from 0 to 1024 [ 330.300267][T20202] EXT4-fs: Ignoring removed i_version option [ 330.307246][T20202] ext4: Unknown parameter 'minix' [ 330.351046][T20202] loop2: detected capacity change from 0 to 128 [ 330.574878][T20224] loop2: detected capacity change from 0 to 1024 [ 330.640764][T20230] loop2: detected capacity change from 0 to 1024 [ 330.660280][T20230] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 330.679673][ T29] kauditd_printk_skb: 1727 callbacks suppressed [ 330.679687][ T29] audit: type=1400 audit(842.659:5489): avc: denied { create } for pid=20237 comm="syz.4.5152" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 330.720804][ T29] audit: type=1400 audit(842.699:5490): avc: denied { getopt } for pid=20237 comm="syz.4.5152" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 330.744025][T20033] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 330.821435][T20258] netlink: 900 bytes leftover after parsing attributes in process `syz.0.5160'. [ 330.892629][T20268] loop0: detected capacity change from 0 to 1024 [ 330.896364][ T29] audit: type=1326 audit(842.869:5491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20265 comm="syz.4.5165" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3334debbd9 code=0x0 [ 331.053275][T20277] loop1: detected capacity change from 0 to 512 [ 331.063869][T20277] EXT4-fs error (device loop1): ext4_orphan_get:1394: inode #15: comm syz.1.5167: casefold flag without casefold feature [ 331.080662][T20277] EXT4-fs error (device loop1): ext4_orphan_get:1399: comm syz.1.5167: couldn't read orphan inode 15 (err -117) [ 331.133944][T20274] FAULT_INJECTION: forcing a failure. [ 331.133944][T20274] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 331.147093][T20274] CPU: 0 PID: 20274 Comm: syz.0.5166 Not tainted 6.10.0-syzkaller-00017-g5e0497553643 #0 [ 331.156891][T20274] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 331.167021][T20274] Call Trace: [ 331.170297][T20274] [ 331.173220][T20274] dump_stack_lvl+0xf2/0x150 [ 331.177817][T20274] dump_stack+0x15/0x20 [ 331.182013][T20274] should_fail_ex+0x229/0x230 [ 331.186793][T20274] should_fail+0xb/0x10 [ 331.190994][T20274] should_fail_usercopy+0x1a/0x20 [ 331.196092][T20274] _copy_from_user+0x1e/0xd0 [ 331.200728][T20274] kstrtouint_from_user+0x76/0xe0 [ 331.205743][T20274] proc_fail_nth_write+0x4f/0x160 [ 331.210834][T20274] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 331.216541][T20274] vfs_write+0x28b/0x900 [ 331.220824][T20274] ? __fget_files+0x1da/0x210 [ 331.225501][T20274] ksys_write+0xeb/0x1b0 [ 331.229739][T20274] __x64_sys_write+0x42/0x50 [ 331.234339][T20274] x64_sys_call+0x27ef/0x2d70 [ 331.239067][T20274] do_syscall_64+0xc9/0x1c0 [ 331.243606][T20274] ? clear_bhb_loop+0x55/0xb0 [ 331.248416][T20274] ? clear_bhb_loop+0x55/0xb0 [ 331.253160][T20274] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 331.259044][T20274] RIP: 0033:0x7f4abdc2575f [ 331.263438][T20274] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 29 8c 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 7c 8c 02 00 48 [ 331.283375][T20274] RSP: 002b:00007f4abcea8040 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 331.291765][T20274] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f4abdc2575f [ 331.299811][T20274] RDX: 0000000000000001 RSI: 00007f4abcea80b0 RDI: 0000000000000005 [ 331.307812][T20274] RBP: 00007f4abcea80a0 R08: 0000000000000000 R09: 0000000000000000 [ 331.315789][T20274] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 331.323791][T20274] R13: 000000000000000b R14: 00007f4abddb4f60 R15: 00007ffcf89b8938 [ 331.331745][T20274] [ 331.376286][T20296] loop2: detected capacity change from 0 to 128 [ 331.381130][T20300] FAULT_INJECTION: forcing a failure. [ 331.381130][T20300] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 331.395741][T20300] CPU: 1 PID: 20300 Comm: syz.0.5172 Not tainted 6.10.0-syzkaller-00017-g5e0497553643 #0 [ 331.405543][T20300] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 331.415737][T20300] Call Trace: [ 331.419017][T20300] [ 331.421950][T20300] dump_stack_lvl+0xf2/0x150 [ 331.426536][T20300] dump_stack+0x15/0x20 [ 331.430688][T20300] should_fail_ex+0x229/0x230 [ 331.435366][T20300] should_fail+0xb/0x10 [ 331.439511][T20300] should_fail_usercopy+0x1a/0x20 [ 331.444609][T20300] _copy_to_user+0x1e/0xa0 [ 331.449113][T20300] simple_read_from_buffer+0xa0/0x110 [ 331.454489][T20300] proc_fail_nth_read+0xfc/0x140 [ 331.459496][T20300] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 331.465084][T20300] vfs_read+0x1a2/0x6e0 [ 331.469268][T20300] ? __rcu_read_unlock+0x4e/0x70 [ 331.474237][T20300] ? __fget_files+0x1da/0x210 [ 331.478987][T20300] ksys_read+0xeb/0x1b0 [ 331.483135][T20300] __x64_sys_read+0x42/0x50 [ 331.487675][T20300] x64_sys_call+0x27e5/0x2d70 [ 331.492345][T20300] do_syscall_64+0xc9/0x1c0 [ 331.496900][T20300] ? clear_bhb_loop+0x55/0xb0 [ 331.502039][T20300] ? clear_bhb_loop+0x55/0xb0 [ 331.506749][T20300] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 331.512892][T20300] RIP: 0033:0x7f4abdc256bc [ 331.517291][T20300] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8c 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 1f 8d 02 00 48 [ 331.536887][T20300] RSP: 002b:00007f4abcea8040 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 331.545296][T20300] RAX: ffffffffffffffda RBX: 00007f4abddb4f60 RCX: 00007f4abdc256bc [ 331.553327][T20300] RDX: 000000000000000f RSI: 00007f4abcea80b0 RDI: 0000000000000006 [ 331.561283][T20300] RBP: 00007f4abcea80a0 R08: 0000000000000000 R09: 0000000000000000 [ 331.569308][T20300] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 331.577325][T20300] R13: 000000000000000b R14: 00007f4abddb4f60 R15: 00007ffcf89b8938 [ 331.585284][T20300] [ 331.588359][T20307] netlink: 'syz.1.5176': attribute type 5 has an invalid length. [ 331.611561][T20309] loop0: detected capacity change from 0 to 1024 [ 331.683926][T20313] loop1: detected capacity change from 0 to 2048 [ 331.693053][T20320] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5181'. [ 331.740697][T20327] loop0: detected capacity change from 0 to 512 [ 331.749362][T20327] EXT4-fs: Ignoring removed mblk_io_submit option [ 331.750287][T20313] loop1: p1 p2 p3 [ 331.760065][T20313] loop1: p1 size 458752 extends beyond EOD, truncated [ 331.771349][T20327] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a064e01c, mo2=0002] [ 331.775907][T20313] loop1: p2 start 4294902784 is beyond EOD, truncated [ 331.779398][T20327] System zones: 1-12 [ 331.786716][T20313] loop1: p3 start 4278191616 is beyond EOD, truncated [ 331.808433][T20327] EXT4-fs error (device loop0): ext4_orphan_get:1394: inode #15: comm syz.0.5183: casefold flag without casefold feature [ 331.828097][ T29] audit: type=1400 audit(843.809:5492): avc: denied { getopt } for pid=20312 comm="syz.1.5178" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 331.847288][T20327] EXT4-fs error (device loop0): ext4_orphan_get:1399: comm syz.0.5183: couldn't read orphan inode 15 (err -117) [ 331.873447][ T29] audit: type=1400 audit(843.819:5493): avc: denied { getopt } for pid=20312 comm="syz.1.5178" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 331.893028][ T29] audit: type=1400 audit(843.849:5494): avc: denied { relabelto } for pid=20325 comm="syz.0.5183" name="file0" dev="loop0" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="syz:ead_nolock,user_xattr,debug_want_extra_isize=0x000000000000005c,debug,mblk_io_submit,errors=continue,usrjquota=,prjquota,nodiscard," [ 331.951005][T20354] xt_l2tp: wrong L2TP version: 0 [ 331.983105][T20358] loop0: detected capacity change from 0 to 512 [ 332.002091][ T29] audit: type=1400 audit(843.969:5495): avc: denied { ioctl } for pid=20353 comm="syz.4.5194" path="/dev/usbmon0" dev="devtmpfs" ino=117 ioctlcmd=0x9204 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 332.037048][T20358] EXT4-fs error (device loop0): ext4_orphan_get:1394: inode #15: comm syz.0.5193: casefold flag without casefold feature [ 332.065562][T20356] bridge0: port 3(vlan2) entered blocking state [ 332.071988][T20356] bridge0: port 3(vlan2) entered disabled state [ 332.078883][T20358] EXT4-fs error (device loop0): ext4_orphan_get:1399: comm syz.0.5193: couldn't read orphan inode 15 (err -117) [ 332.091692][T20356] vlan2: entered allmulticast mode [ 332.100451][T20356] vlan2: left allmulticast mode [ 332.106631][ T29] audit: type=1326 audit(844.089:5496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20368 comm="syz.2.5198" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa1f72a5bd9 code=0x0 [ 332.181100][T20358] loop0: detected capacity change from 512 to 64 [ 332.192929][T20358] syz.0.5193: attempt to access beyond end of device [ 332.192929][T20358] loop0: rw=2051, sector=506, nr_sectors = 2 limit=64 [ 332.212429][T20358] EXT4-fs (loop0): discard request in group:0 block:252 count:1 failed with -5 [ 332.224607][T20358] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6551: IO failure [ 332.229738][T20382] loop1: detected capacity change from 0 to 1024 [ 332.237385][T20358] syz.0.5193: attempt to access beyond end of device [ 332.237385][T20358] loop0: rw=2051, sector=510, nr_sectors = 2 limit=64 [ 332.261258][T20358] EXT4-fs (loop0): discard request in group:0 block:254 count:1 failed with -5 [ 332.272213][T20384] loop2: detected capacity change from 0 to 256 [ 332.281653][T20358] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6551: IO failure [ 332.297190][T18880] EXT4-fs warning (device loop0): htree_dirblock_to_tree:1082: inode #2: lblock 0: comm syz-executor: error -12 reading directory block [ 332.376779][T20390] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5207'. [ 332.389211][T20392] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=20392 comm=syz.1.5206 [ 332.416099][T20394] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5208'. [ 332.455404][T20399] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.5206'. [ 332.477718][T20392] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.5206'. [ 332.498041][T20398] 9pnet: p9_errstr2errno: server reported unknown error Í01777777777777777777777 [ 332.578875][T20407] bridge0: port 3(vlan2) entered blocking state [ 332.585163][T20407] bridge0: port 3(vlan2) entered disabled state [ 332.605907][T20407] vlan2: entered allmulticast mode [ 332.616165][T20407] vlan2: left allmulticast mode [ 332.628788][ T11] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.711854][ T11] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.725388][T20412] loop1: detected capacity change from 0 to 512 [ 332.763938][T20418] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5216'. [ 332.780191][ T11] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.880748][ T11] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.901898][T20428] loop1: detected capacity change from 0 to 128 [ 333.000417][T20439] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=20439 comm=syz.1.5221 [ 333.013344][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 333.028535][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 333.039616][ T11] bond0 (unregistering): Released all slaves [ 333.110653][T20440] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.5221'. [ 333.126690][T20439] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.5221'. [ 333.168650][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 333.168695][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 333.185260][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 333.185346][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 333.193065][ T11] veth1_macvtap: left promiscuous mode [ 333.193156][ T11] veth0_macvtap: left promiscuous mode [ 333.193256][ T11] veth1_vlan: left promiscuous mode [ 333.216480][ T11] veth0_vlan: left promiscuous mode [ 333.290674][ T11] team0 (unregistering): Port device team_slave_1 removed [ 333.302223][ T11] team0 (unregistering): Port device team_slave_0 removed [ 333.342659][T20422] chnl_net:caif_netlink_parms(): no params data found [ 333.379269][T20422] bridge0: port 1(bridge_slave_0) entered blocking state [ 333.386367][T20422] bridge0: port 1(bridge_slave_0) entered disabled state [ 333.393972][T20422] bridge_slave_0: entered allmulticast mode [ 333.400800][T20422] bridge_slave_0: entered promiscuous mode [ 333.407869][T20422] bridge0: port 2(bridge_slave_1) entered blocking state [ 333.414904][T20422] bridge0: port 2(bridge_slave_1) entered disabled state [ 333.422412][T20422] bridge_slave_1: entered allmulticast mode [ 333.428915][T20422] bridge_slave_1: entered promiscuous mode [ 333.455595][T20422] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 333.455888][T20455] 9pnet: p9_errstr2errno: server reported unknown error Í01777777777777777777777 [ 333.466443][T20422] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 333.511591][T20422] team0: Port device team_slave_0 added [ 333.518135][T20422] team0: Port device team_slave_1 added [ 333.535275][T20422] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 333.542343][T20422] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 333.568277][T20422] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 333.579660][T20422] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 333.586636][T20422] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 333.612707][T20422] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 333.681836][T20462] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5225'. [ 333.690863][T20461] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5225'. [ 333.704842][ T29] audit: type=1326 audit(845.689:5497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20460 comm="syz.4.5225" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3334debbd9 code=0x0 [ 333.731107][T20422] hsr_slave_0: entered promiscuous mode [ 333.738724][T20422] hsr_slave_1: entered promiscuous mode [ 333.748841][T20468] loop1: detected capacity change from 0 to 512 [ 333.756448][T20422] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 333.767332][T20468] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 333.777354][T20422] Cannot create hsr debugfs directory [ 333.790034][T20468] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 333.800512][ T29] audit: type=1400 audit(845.779:5498): avc: denied { nlmsg_write } for pid=20460 comm="syz.4.5225" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 333.819196][T20468] System zones: 1-12 [ 333.833384][T20468] EXT4-fs (loop1): 1 truncate cleaned up [ 333.917686][T20474] loop1: detected capacity change from 0 to 1024 [ 334.003793][ C0] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 334.038851][T20483] pim6reg: tun_chr_ioctl cmd 1074025677 [ 334.044741][T20483] pim6reg: linktype set to 270 [ 334.132718][T20422] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 334.145008][T20422] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 334.154244][T20422] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 334.168603][T20422] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 334.221174][T20422] 8021q: adding VLAN 0 to HW filter on device bond0 [ 334.239443][T20422] 8021q: adding VLAN 0 to HW filter on device team0 [ 334.249997][T20486] ================================================================== [ 334.258107][T20486] BUG: KCSAN: data-race in file_update_time / inode_update_timestamps [ 334.266261][T20486] [ 334.268568][T20486] read to 0xffff8881081773f0 of 8 bytes by task 20488 on cpu 0: [ 334.276180][T20486] file_update_time+0x98/0x2c0 [ 334.280932][T20486] pipe_write+0xa87/0xd30 [ 334.285243][T20486] vfs_write+0x78f/0x900 [ 334.289476][T20486] ksys_write+0xeb/0x1b0 [ 334.293708][T20486] __x64_sys_write+0x42/0x50 [ 334.298289][T20486] x64_sys_call+0x27ef/0x2d70 [ 334.302956][T20486] do_syscall_64+0xc9/0x1c0 [ 334.307453][T20486] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 334.313361][T20486] [ 334.315684][T20486] write to 0xffff8881081773f0 of 8 bytes by task 20486 on cpu 1: [ 334.323385][T20486] inode_update_timestamps+0x16f/0x280 [ 334.328833][T20486] file_update_time+0x22f/0x2c0 [ 334.333679][T20486] pipe_write+0xa87/0xd30 [ 334.337992][T20486] vfs_write+0x78f/0x900 [ 334.342225][T20486] ksys_write+0xeb/0x1b0 [ 334.346473][T20486] __x64_sys_write+0x42/0x50 [ 334.351073][T20486] x64_sys_call+0x27ef/0x2d70 [ 334.355741][T20486] do_syscall_64+0xc9/0x1c0 [ 334.360248][T20486] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 334.366136][T20486] [ 334.368443][T20486] value changed: 0x0000000000964edb -> 0x000000000db33dd9 [ 334.375546][T20486] [ 334.377851][T20486] Reported by Kernel Concurrency Sanitizer on: [ 334.383978][T20486] CPU: 1 PID: 20486 Comm: syz.1.5233 Not tainted 6.10.0-syzkaller-00017-g5e0497553643 #0 [ 334.393765][T20486] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 334.403804][T20486] ================================================================== SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 334.416127][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 334.423314][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 334.447568][ T3155] bridge0: port 2(bridge_slave_1) entered blocking state [ 334.454758][ T3155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 334.840993][ T50] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 334.851492][ T50] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.898335][ T50] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 334.908865][ T50] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.959595][ T50] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 334.970273][ T50] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.070614][ T50] netdevsim netdevsim3 ä (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 335.080129][ T50] netdevsim netdevsim3 ä (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.194043][ T50] bridge_slave_1: left allmulticast mode [ 335.199724][ T50] bridge_slave_1: left promiscuous mode [ 335.205316][ T50] bridge0: port 2(bridge_slave_1) entered disabled state [ 335.213247][ T50] bridge_slave_0: left allmulticast mode [ 335.218997][ T50] bridge_slave_0: left promiscuous mode [ 335.224650][ T50] bridge0: port 1(bridge_slave_0) entered disabled state [ 335.487660][ T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 335.498643][ T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 335.509237][ T50] bond0 (unregistering): Released all slaves [ 335.546705][ T50] tipc: Left network mode [ 335.650998][ T50] hsr_slave_0: left promiscuous mode [ 335.656721][ T50] hsr_slave_1: left promiscuous mode [ 335.662452][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 335.670219][ T50] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 335.679237][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 335.686727][ T50] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 335.696742][ T50] veth1_macvtap: left promiscuous mode [ 335.702218][ T50] veth0_macvtap: left promiscuous mode [ 335.763152][ T50] team0 (unregistering): Port device team_slave_1 removed [ 335.775847][ T50] team0 (unregistering): Port device team_slave_0 removed [ 336.115735][ T50] IPVS: stop unused estimator thread 0... [ 336.251757][ T50] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.312854][ T50] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.338967][ T50] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.388935][ T50] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.471094][ T50] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.529314][ T50] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.580085][ T50] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.628873][ T50] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.688708][ T50] bridge_slave_1: left allmulticast mode [ 336.694374][ T50] bridge_slave_1: left promiscuous mode [ 336.699989][ T50] bridge0: port 2(bridge_slave_1) entered disabled state [ 336.708381][ T50] bridge_slave_0: left allmulticast mode [ 336.713998][ T50] bridge_slave_0: left promiscuous mode [ 336.719717][ T50] bridge0: port 1(bridge_slave_0) entered disabled state [ 336.728273][ T50] bridge_slave_1: left allmulticast mode [ 336.733958][ T50] bridge_slave_1: left promiscuous mode [ 336.739625][ T50] bridge0: port 2(bridge_slave_1) entered disabled state [ 336.747780][ T50] bridge_slave_0: left allmulticast mode [ 336.753416][ T50] bridge_slave_0: left promiscuous mode [ 336.759178][ T50] bridge0: port 1(bridge_slave_0) entered disabled state [ 336.958630][ T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 336.968914][ T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 336.979392][ T50] bond0 (unregistering): Released all slaves [ 336.988707][ T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 336.999588][ T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 337.009807][ T50] bond0 (unregistering): Released all slaves [ 337.202793][ T50] hsr_slave_0: left promiscuous mode [ 337.208870][ T50] hsr_slave_1: left promiscuous mode [ 337.214758][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 337.222307][ T50] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 337.232007][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 337.239855][ T50] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 337.249066][ T50] hsr_slave_0: left promiscuous mode [ 337.254872][ T50] hsr_slave_1: left promiscuous mode [ 337.260502][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 337.268398][ T50] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 337.278173][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 337.285544][ T50] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 337.298118][ T50] veth1_macvtap: left promiscuous mode [ 337.303588][ T50] veth0_macvtap: left promiscuous mode [ 337.309482][ T50] veth1_vlan: left promiscuous mode [ 337.314717][ T50] veth0_vlan: left promiscuous mode [ 337.320316][ T50] veth1_macvtap: left promiscuous mode [ 337.325787][ T50] veth0_macvtap: left promiscuous mode [ 337.331291][ T50] veth1_vlan: left promiscuous mode [ 337.337162][ T50] veth0_vlan: left promiscuous mode [ 337.460571][ T50] team0 (unregistering): Port device team_slave_1 removed [ 337.471552][ T50] team0 (unregistering): Port device team_slave_0 removed [ 337.534127][ T50] team0 (unregistering): Port device team_slave_1 removed [ 337.545267][ T50] team0 (unregistering): Port device team_slave_0 removed [ 338.268096][ T50] bridge_slave_1: left allmulticast mode [ 338.273780][ T50] bridge_slave_1: left promiscuous mode [ 338.279463][ T50] bridge0: port 2(bridge_slave_1) entered disabled state [ 338.288672][ T50] bridge_slave_0: left allmulticast mode [ 338.294291][ T50] bridge_slave_0: left promiscuous mode [ 338.299957][ T50] bridge0: port 1(bridge_slave_0) entered disabled state [ 338.378419][ T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 338.388598][ T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 338.398554][ T50] bond0 (unregistering): Released all slaves [ 338.520529][ T50] hsr_slave_0: left promiscuous mode [ 338.527336][ T50] hsr_slave_1: left promiscuous mode [ 338.533157][ T50] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 338.540713][ T50] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 338.587725][ T50] team0 (unregistering): Port device team_slave_1 removed [ 338.600561][ T50] team0 (unregistering): Port device team_slave_0 removed