last executing test programs: 4.508018252s ago: executing program 4 (id=3373): r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89101) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) quotactl_fd$Q_GETNEXTQUOTA(r0, 0x3, 0xee01, &(0x7f0000000140)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYRES64=r1], &(0x7f0000000000)='GPL\x00', 0xffff, 0x0, 0x0, 0x0, 0x2, '\x00', r1, 0x2}, 0x90) r2 = socket(0x10, 0x2, 0x0) r3 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000003200)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) dup3(r0, r5, 0x80000) r6 = openat$cgroup_freezer_state(r5, &(0x7f0000000140), 0x2, 0x0) r7 = openat$cgroup_procs(r5, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r7, &(0x7f0000000040), 0x12) r8 = epoll_create1(0x0) r9 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$RTC_WKALM_SET(r9, 0x4028700f, &(0x7f0000000140)={0x2, 0x0, {0x0, 0x0, 0x0, 0x18, 0x0, 0x60}}) dup3(r9, r8, 0x0) readv(r8, &(0x7f0000000280)=[{&(0x7f0000000100)=""/154, 0x4}, {0x0, 0x2}], 0x2) bind$inet6(r2, &(0x7f00000002c0)={0xa, 0x4e24, 0x200, @local, 0x149a}, 0x1c) r10 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) sendmsg$nl_route_sched(r10, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x1f}}]}, 0x38}}, 0x0) write$cgroup_freezer_state(r6, &(0x7f0000000400)='FROZEN\x00', 0x7) write$cgroup_freezer_state(r6, &(0x7f0000000080)='THAWED\x00', 0x7) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r11) socket$inet6_sctp(0xa, 0x1, 0x84) 4.494874833s ago: executing program 4 (id=3376): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) ioctl$TIOCGSOFTCAR(r1, 0x5452, &(0x7f0000001080)) 4.458103006s ago: executing program 4 (id=3377): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x6f, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) semtimedop(0x0, &(0x7f0000000040)=[{0x2, 0x7fff}], 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'vxcan0\x00'}) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000a80)={0x6}, 0x8) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = memfd_create(&(0x7f0000000000)=',\xea\x00', 0x0) ftruncate(r0, 0x7000000) finit_module(r0, 0x0, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) unshare(0x8000600) finit_module(r0, 0x0, 0x1000000) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x66, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 4.146960521s ago: executing program 4 (id=3388): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000300)=0x208) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x1, 0x0, 0x0) shutdown(r0, 0x1) 4.078165226s ago: executing program 4 (id=3389): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x20081e, &(0x7f0000002a80), 0x1, 0x505, &(0x7f0000000680)="$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") (async) openat$incfs(0xffffffffffffff9c, &(0x7f0000000080)='.log\x00', 0x181041, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.throttle.io_serviced\x00', 0x275a, 0x0) (async) socket(0x1e, 0x5, 0x0) (async) syz_io_uring_setup(0x239, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000180), &(0x7f00000001c0)) (async) r0 = socket(0xa, 0x3, 0x101) getsockopt$bt_BT_SECURITY(r0, 0x29, 0x7, 0x0, 0x6c9d20a5cb8366ff) (async) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) (async) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = fsopen(&(0x7f0000000040)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) tee(r4, r3, 0x8, 0x0) (async) listen(r1, 0x5d) (async) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) r5 = socket$nl_rdma(0x10, 0x3, 0x14) r6 = dup(r5) sendmsg$RDMA_NLDEV_CMD_GET(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)=ANY=[@ANYBLOB="10000000000000"], 0x10}}, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r6) 4.076044997s ago: executing program 4 (id=3391): sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4000000, 0x0, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000009c0)={'vcan0\x00', 0x0}) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f0000000540)=[{0x0, 0x0, {0x0, 0x0, 0x3}, {0x0, 0x0, 0x2}, 0xfd}, {0x0, 0x0, {0x0, 0x1}, {0x0, 0xff}}], 0x40) r2 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r2, &(0x7f0000000080)={0x1d, r1, 0x0, {0x0, 0xf1}}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1}}, 0xee) r3 = socket$nl_route(0x10, 0x3, 0x0) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000f00)=@newtfilter={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, r5}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4000000, 0x0, 0x0) (async) socket$can_j1939(0x1d, 0x2, 0x7) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000009c0)={'vcan0\x00'}) (async) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f0000000540)=[{0x0, 0x0, {0x0, 0x0, 0x3}, {0x0, 0x0, 0x2}, 0xfd}, {0x0, 0x0, {0x0, 0x1}, {0x0, 0xff}}], 0x40) (async) socket$can_j1939(0x1d, 0x2, 0x7) (async) bind$can_j1939(r2, &(0x7f0000000080)={0x1d, r1, 0x0, {0x0, 0xf1}}, 0x18) (async) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1}}, 0xee) (async) socket$nl_route(0x10, 0x3, 0x0) (async) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) (async) socket$can_j1939(0x1d, 0x2, 0x7) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000f00)=@newtfilter={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, r5}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) (async) 1.082758012s ago: executing program 3 (id=3429): pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fchdir(r0) close(r0) symlinkat(&(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x5f, 0xffffffffffffffff, {0x2}}, './file0\x00'}) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) close(r2) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000002180)={0x2, 0x400000000000003, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, [@sadb_lifetime={0x4, 0x3}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6}, @sadb_lifetime={0x4, 0x4}, @sadb_sa={0x2}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, @sadb_x_sa2={0x2, 0x13, 0xfe}]}, 0xc0}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r7, r6, 0x26}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r7}, &(0x7f0000000000), &(0x7f0000000080)=r2}, 0x20) recvmsg$unix(r4, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000001780)=""/4096, 0x1000}], 0x1}, 0x0) sendmsg$inet(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000380)="d5", 0x1}], 0x1}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 891.424007ms ago: executing program 3 (id=3433): r0 = openat$selinux_create(0xffffffffffffff9c, &(0x7f0000001100), 0x2, 0x0) writev(r0, &(0x7f00000011c0)=[{&(0x7f0000001140)="d24acbff40e18b2738fab28e45d56a71050adc421378f775831c6eb718f121b6abbab14a79599efbc6e5da8d530a19", 0x2f}], 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000340)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000200040010000800014004000000", 0x58}], 0x1) 890.317278ms ago: executing program 3 (id=3435): r0 = socket$nl_generic(0x10, 0x3, 0x10) getpid() r1 = socket$rds(0x15, 0x5, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) bind$rds(r1, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000100)='./file2\x00', 0x20005e, &(0x7f0000000280)={[{@jqfmt_vfsold}, {@errors_continue}, {@abort}, {@errors_remount}, {@norecovery}, {@minixdf}, {@nolazytime}, {@noquota}, {@norecovery}, {@usrquota}, {@user_xattr}]}, 0x1, 0x476, &(0x7f0000000700)="$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") r2 = io_uring_setup(0x1d7b, &(0x7f00000002c0)) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r2, 0xd, &(0x7f0000000140)={0x7, 0x0, 0x0, 0x0}, 0x20) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r2, 0xe, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000040)=[{0x0, 0xffffffff00000000}], &(0x7f0000000100), 0x7}, 0x20) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r2, 0xe, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x0, 0x1}, 0x20) setsockopt$RDS_CANCEL_SENT_TO(r1, 0x114, 0x1, &(0x7f0000000140)={0x2, 0x0, @private}, 0x10) getpid() ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000000)) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r4, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) bind$inet6(r4, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f0000000100)={@link_local, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010700", 0x8, 0x11, 0x0, @private1, @mcast2, {[], {0x0, 0xe22, 0x8}}}}}}, 0x0) ftruncate(0xffffffffffffffff, 0x0) r5 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) r6 = syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0) r7 = dup3(r5, r6, 0x0) ioctl$MON_IOCH_MFLUSH(r7, 0x9205, 0x0) syz_open_dev$rtc(&(0x7f0000000040), 0x1000, 0xc001) openat$bsg(0xffffffffffffff9c, &(0x7f00000001c0), 0x10040, 0x0) socket$netlink(0x10, 0x3, 0x4) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000240)=0xc) getegid() 841.151852ms ago: executing program 1 (id=3437): r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000029c0)) brk(0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x29, 0x5, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000d00)='sched_switch\x00'}, 0x10) write$evdev(r2, &(0x7f0000000000), 0x100000008) r3 = socket$inet6(0xa, 0x200000000003, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, &(0x7f00000002c0)={{r3}, 0x0, 0x0}) r4 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r4, &(0x7f0000000480)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) getpeername$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000140)=0x14) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x7, 0x2, 0x0, 0x0, 0xffffffffffffffff, 0x4, '\x00', r5}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{}, 0x0, 0x0}, 0x20) r6 = dup2(r4, r4) sendmmsg$inet6(r6, &(0x7f0000003f00)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)="3840000000000007e4ce8b2e44e6fb44858386d2a320b7531a3aff6b5b01702b8de4ab9c33af8b87", 0x28}], 0x1}}], 0x1, 0x0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x14, 0x2, 0x6, 0x101}, 0x14}}, 0xc800) move_mount(r0, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000200)='./file0/../file0/../file0\x00', 0x0, 0x1210020, &(0x7f00000001c0)=ANY=[@ANYBLOB='rootcontextI']) r7 = socket(0x2c, 0x800, 0x3) getsockopt$nfc_llcp(r7, 0x88, 0x68, 0x0, 0x205fffff) 721.663752ms ago: executing program 1 (id=3439): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x7, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="f4090000000000006910ae00000000006a8e0000000000000900740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x49) r0 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000280)=@generic={&(0x7f0000000240)='./file0\x00'}, 0x18) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x9, 0x42, 0x40}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000140), 0x1003, r1}, 0x38) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x9, 0x42, 0x40}, 0x48) r3 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r3, 0x29, 0x48, &(0x7f0000000100), 0x120) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000140), 0x1003, r0}, 0xfffffffffffffdcb) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000240)={r2, &(0x7f0000000140)="174661b2c3f23bcb1767a2eb3a4e444a6a3ccf52ff0dc3548b98621139b302d080773aaa0177ba3b5c678fb226d76b6c44c82190378cab450385425599675f0fc0e1f3d0e0ef9166c5bed7", &(0x7f00000000c0)=""/110}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x9, 0x42, 0x40}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socketpair(0x21, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002b80)=""/4096, 0x1000}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000003a40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb0100180000000000000024000000240000000400004000000000020000049b030000000000000200000039080000"], 0x0, 0x40, 0x0, 0x1}, 0x20) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r4, 0x29, 0x2a, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f00000005c0)=ANY=[@ANYBLOB="0b000000000000000a00000000000000ff020000000000000000000000000001000005000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000a00000000000000fe8000000000000000000000000000bb00000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000fe8000000000000000000000000000bb"], 0x190) syz_emit_ethernet(0x4e, &(0x7f0000000300)={@broadcast, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000600", 0x18, 0x4, 0x0, @remote, @mcast2, {[], @mld={0x0, 0x0, 0x0, 0x0, 0x0, @private0}}}}}}, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f0000000740)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x0, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1801000000081000000000000000000085"], 0x0}, 0x90) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 721.383612ms ago: executing program 0 (id=3440): perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) setxattr$incfs_id(&(0x7f0000000200)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0, 0x0, 0x0) r0 = socket(0x11, 0x800000003, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x90, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [], 0x0, [0x4, 0x2], [0x0, 0x4]}}}}, @TCA_RATE={0x6}]}, 0x90}}, 0x0) (fail_nth: 7) 719.912142ms ago: executing program 2 (id=3441): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = syz_io_uring_setup(0x364, &(0x7f00000003c0)={0x0, 0xd7b, 0x2000, 0x1, 0x3db, 0x0, r0}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r1, 0x0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f0000001480)=""/183, 0xb7}], 0x1}, 0x0, 0x40000103}) io_uring_enter(r2, 0x46f6, 0x0, 0x0, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f00000002c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb08060001080006040001e97fa2e74c0a0ad1000057330377ba25ac1414"], 0x0) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000100)={0x2, 0x0, @empty}, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r7, 0x6, 0x4, &(0x7f00000003c0)='dctcp-reno\x00', 0xb) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c0000001000010700000095f9f160857c0000003153180bc6d6fa2139b061e77a6452e1f7fef2f6a833a20455df7ff7d243c924280d24c713a101470b7adb89629ffafdf72d3992ee0566cb10740532b0166bd5fb53318ed48bf0b4080bbefd00000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r8, @ANYBLOB], 0x3c}}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0241, 0x0) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, 0xffffffffffffffff, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x5410, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "bb5dee00"}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r9, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="94000000030801080000000000000000070000020900010073797a310000000006000240080000001c0004800800024000000002080001402eed296f080001400001000014000480080001400000000308000140000000e0060002400a010000140004800800014000000001080001400000000206000240930000000500030088"], 0x94}}, 0x0) 336.211043ms ago: executing program 3 (id=3442): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000300)=0x208) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090011006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a68", 0x6c, 0x1, 0x0, 0x0) shutdown(r0, 0x1) 335.838513ms ago: executing program 2 (id=3443): ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, @local, @mcast2}}) socket$inet6(0xa, 0x3, 0x0) setsockopt$inet6_IPV6_RTHDR(0xffffffffffffffff, 0x29, 0x39, 0x0, 0x0) setsockopt$inet6_IPV6_DSTOPTS(0xffffffffffffffff, 0x29, 0x3b, 0x0, 0xc0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, 0x0, 0x0) r0 = fsopen(&(0x7f0000000140)='securityfs\x00', 0x0) r1 = memfd_secret(0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000280)={r2, r1, 0x2e, 0x4608, @void}, 0x10) close_range(r0, 0xffffffffffffffff, 0x3e00) 335.568133ms ago: executing program 3 (id=3444): r0 = syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000000)='./bus\x00', 0x280000a, &(0x7f00000007c0)=ANY=[@ANYBLOB='shortname=lower,shortname=win95,rodir,iocharset=default,uni_xlate=0,nonumtail=1,utf8=0,flush,rodir,shortname=win95,shortname=winnt,shortname=win95,showexec,uni_xlate=0,utf8=0,utf8=0,uni_xlate=0,shortname=mixed,\x00'], 0x97, 0x2b2, &(0x7f00000003c0)="$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") ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x40309410, &(0x7f0000000080)={0x5, 0x9, 0x2, 0xf, 0x1, [0x8, 0x400, 0xd10, 0x6]}) r1 = open(&(0x7f0000000240)='./file0\x00', 0x145142, 0x0) ftruncate(r1, 0x2007ffc) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000000000000000000004b84ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r2}, 0x10) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000940)={[{@stripe={'stripe', 0x3d, 0x80000000}}, {@dioread_nolock}, {@init_itable}, {@grpquota}, {@debug}, {@nojournal_checksum}]}, 0x4, 0x45d, &(0x7f0000000fc0)="$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") r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) fsetxattr(r3, &(0x7f00000000c0)=ANY=[@ANYBLOB='user.M].[#%%'], 0x0, 0x0, 0x0) fgetxattr(r3, &(0x7f00000004c0)=ANY=[@ANYBLOB="757365722e5d5d2e01802525"], 0x0, 0x0) inotify_init1(0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x10, 0x4, 0x8, 0x8, 0x180}, 0x48) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r5, &(0x7f0000000000), 0x248800) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x30, &(0x7f0000000000)='/proc/s\x00\x00s/\xfc\x12\x7f\xdbfS\x80|\xf44.\xab%\xf8\xff\xff\xff\xff\xff\xff\xff=\x11\xc8\xdd\x15\xcc\xd2\xf1d\'%\x11c\x91l,'}, 0x30) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc4081, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x3, 0x0, 0xffff0000, 0x3, 0x0, 0x6, 0x0, 0x1d1}, 0x0, 0x2, r5, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x200}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.net/syz0\x00', 0x1ff) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000a40)=@security={'security\x00', 0xe, 0x4, 0x618, 0xffffffff, 0x430, 0x0, 0x360, 0xffffffff, 0xffffffff, 0x548, 0x548, 0x548, 0xffffffff, 0x4, &(0x7f0000000340), {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private1={0xfc, 0x1, '\x00', 0x1}, [0x0, 0xffffffff, 0xffffffff, 0xffffff00], [0xffffffff, 0x0, 0xff, 0xffffff00], 'vcan0\x00', 'macsec0\x00', {}, {0xff}, 0x3b, 0xf7, 0x0, 0x1}, 0x0, 0x338, 0x360, 0x0, {}, [@common=@rt={{0x138}, {0x8, [0x9, 0x1], 0x10, 0x20, 0x5, [@dev, @mcast2, @private0, @local, @rand_addr=' \x01\x00', @private0={0xfc, 0x0, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, @mcast2, @local, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, @dev={0xfe, 0x80, '\x00', 0x1d}, @mcast2, @empty], 0x6}}, @common=@inet=@hashlimit3={{0x158}, {'caif0\x00', {0x8001, 0xff, 0x29, 0x8, 0x7, 0x2, 0x3, 0x12, 0x20, 0x80}, {0x7fff}}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x3, 0x3}, {0x0, 0x4, 0x4}}}}, {{@ipv6={@private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [0xff, 0xff000000, 0x0, 0xff], [0xff000000, 0xffffff, 0xffffffff, 0xffffffff], 'batadv_slave_0\x00', 'wlan1\x00', {}, {0xff}, 0x0, 0x29, 0x2, 0x10}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@eui64={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@dev={0xfe, 0x80, '\x00', 0x15}, 'veth1_to_bridge\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x678) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r6}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=@newtaction={0x14, 0x26, 0xffff, 0x70bd2b}, 0x14}}, 0x0) socketpair(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x89f1, &(0x7f0000000080)) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000005c0)='./file1\x00', 0x1018e50, &(0x7f0000000180), 0x6, 0x644, &(0x7f00000006c0)="$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") mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mknod(&(0x7f00000001c0)='./bus\x00', 0x1000, 0x0) close(r4) 279.147918ms ago: executing program 0 (id=3445): syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x0) syz_io_uring_setup(0x239, &(0x7f0000000200), 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) pipe2(&(0x7f0000000040), 0x0) socket$nl_generic(0x10, 0x3, 0x10) pselect6(0x40, &(0x7f0000000100)={0x40000}, 0x0, &(0x7f0000000000)={0x1fe}, &(0x7f0000000040), 0x0) 278.616908ms ago: executing program 1 (id=3446): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff004}, {0x1d}, {0x6}]}, 0x10) socket(0x10, 0x3, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x0, @rand_addr=' \x01\x00'}, {0xa, 0x0, 0x0, @mcast2={0xff, 0x5}}, r2}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000340)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x0, @local}, r2}}, 0x48) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 278.470588ms ago: executing program 0 (id=3447): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0x4, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40100000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18080000000000000000000000000002850000000f000000850000002a00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @remote}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$SIOCSIFHWADDR(r3, 0x8923, &(0x7f0000000000)={'vlan0\x00', @local}) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) 278.278278ms ago: executing program 2 (id=3448): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000004000000000464968d382063688139fb14cd22651fd0014942cb90000fcffffff950000000000a31bb2d284a1103e25bdee82baeab9a072c914873e6a550b59314af6de0e0000000000000087870a2ddaad17b98084dc117e6f968aec1e5afa1847"], &(0x7f0000000100)='syzkaller\x00', 0x1}, 0x90) r0 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000100)='rxrpc\x00', 0x0, &(0x7f0000000680)="0000000000000001ff6943b80000000800000013f200000000861f4104bfeacd1f63dd65dd530700a28f2cbf86f474fad8cb594ed9fabe9ec277bb8d", 0x3c, r0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff"], 0x7c}}, 0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x468, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x43c, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000]}, @TCA_TBF_RATE64={0xc}, @TCA_TBF_PARMS={0x28, 0x1, {{}, {0x2, 0x0, 0x0, 0x0, 0x0, 0x40}}}]}}]}, 0x468}}, 0x0) bind$l2tp6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x20) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f00005f5000)={0x1000000, 0x0, &(0x7f0000000280)={&(0x7f0000000f40)=ANY=[@ANYBLOB="020300001b0000000000000000000000040003000000000000000000000000000000000000000000000000000000000005000600000000000a0000000000000000000000000000000000000000000000000000000000000004000400000000000000000000000000000000000000000000000000000000000200010000000000000000000000000005000500000000000a00000000000000fe88000000000000000000000000000100000000000000000300070000000000020000000000000000000000000000000100150000000000010014"], 0xd8}}, 0x0) r6 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r6, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback, 0x0, 0x1}, 0x20) bind$l2tp6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback, 0x0, 0x4}, 0x20) r7 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r7, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r7, 0x29, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000307"], 0x20) connect$inet6(r7, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3d}}}, 0x1c) 232.095001ms ago: executing program 1 (id=3449): perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, 0x0) mremap(&(0x7f00000ab000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f0000ffc000/0x2000)=nil) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="180100000004"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000002c0), 0x1000a) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x3e8, 0x200, 0x200, 0x212, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2}}, {@mac}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'erspan0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local}, {@mac=@multicast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$inet_sctp(0x2, 0x0, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 229.437581ms ago: executing program 0 (id=3450): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00'}) (async) r1 = syz_open_procfs(0x0, &(0x7f0000002180)='net/mcfilter\x00') preadv(r1, &(0x7f0000000740)=[{&(0x7f0000000300)=""/49, 0x31}], 0x1, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000400)=""/252, 0xfc}, {&(0x7f0000000340)=""/79, 0x4f}, {&(0x7f00000002c0)=""/56, 0x38}, {&(0x7f00000021c0)=""/4096, 0x1000}], 0x4, 0x0, 0x3) (async) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) ftruncate(0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) (async) r4 = io_uring_setup(0x79ac, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x3}) (async) r5 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f00000000c0)=0x0) (async) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r8) sendmsg$NFC_CMD_DEV_UP(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="010000000000000000400200000008000100", @ANYRES32=r7], 0x1c}}, 0x0) (async) connect$nfc_llcp(r5, &(0x7f0000000000)={0x27, r7, 0x0, 0x0, 0x0, 0x0, "f235cd041ecfd237d48b9fc39aa09025f026b0634b6f82bded015a1b2cc967eff95fd0b6841d40ae65cd6ddd03de31eba0328a09ff4f717c7b1b1c65e750c8", 0x1d}, 0x60) (async) bind$nfc_llcp(r5, &(0x7f0000000240)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "d9298498abdba7f061bd1ca44c226af5160e961711a07760760beeab11e88509de7f1939e8abff005597c8ef039a5be42200", 0x38}, 0x60) listen(r5, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) (async) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7020000f3ffffb0150000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r10) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="340000051000090600000000f429c1574e230508", @ANYRES32=0x0, @ANYBLOB="adffa888000000001400128009000100626f6e640000000004000280"], 0x34}}, 0x0) r11 = perf_event_open(&(0x7f0000000700)={0x0, 0x80, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfff, 0x24f}, 0x0, 0x0, 0x1}, 0xffffffffffffffff, 0xf, 0xffffffffffffffff, 0x0) (async) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES32], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r11, 0x40042408, r12) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000200)={[{@nogrpid}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@debug}, {@nombcache}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000040)=ANY=[], 0xfe37, 0x0) 213.534583ms ago: executing program 2 (id=3451): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f0000000280)={[{@grpquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x88}}, {@resuid}, {@max_batch_time={'max_batch_time', 0x3d, 0x3}}, {@lazytime}, {@usrquota}, {@data_err_abort}, {@data_err_abort}]}, 0x1, 0x5d8, &(0x7f0000001200)="$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") syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x3048000, &(0x7f0000000080)={[{@noquota}]}, 0x4, 0x552, &(0x7f0000002080)="$eJzs3c9vHFcdAPDvjH82TesEeoAKSIBCQFF2400bVb20uYBQVQlRcUAcUmNvLJNdr/GuS20s1f0bQAKJE/AfcEDigNQTB24ckTggpHJACmCBYiSQFs3s2Nk6a7y117ut9/ORJjPvvZ35vmdn/N6+tecFMLauRsRORExHxBsRMVfkJ8UWr3S27HUPd7cX93a3F5Not1//e5KXZ3nRdU7myeKasxHxja9GfCd5PG5zc+v+Qq1WXS/S5VZ9rdzc3LqxUl9Yri5XVyuV2/O3b75464XKwNp6pf7LB19ZefWbv/n1p9/7/c6Xf5BV62JR1t2OQeo0feogTmYyIl49i2AjMFHsp0dcD04mjYiPRcTn8vt/Liby/50AwHnWbs9Fe647DQCcd2k+B5akpYhI02IQUOrM4T0TF9Jao9m6fq+xsbrUmSu7FFPpvZVa9eblmT9+L3/xVJKl5/OyvDxPVw6lb0XE5Yj40cwTebq02KgtjWbIAwBj78nu/j8i/jWTpqVSX6f2+FQPAPjImB11BQCAodP/A8D40f8DwPjpo/8vPuzfOfO6AADD4f0/AIwf/T8AjB/9PwCMla+/9lq2tfeK518vvbm5cb/x5o2lavN+qb6xWFpsrK+VlhuN5fyZPfXjrldrNNbmn4+Nt8qtarNVbm5u3a03NlZbd/Pnet+tTg2lVQDA/3P5yrt/SCJi56Un8i261nLQV8P5lo66AsDITJzmZAME+EjrtdrXL0ZQD2D4+urC80HC7868LsBo9HyY92zPw/f7yQcI4veM4EPl2if7n/+3xjOcL+b/YXydbP7/5YHXAxi+XvP/wHhot5PDa/5PHxQBAOfSKX6Fr/32oAYhwEgdt5j3QD7/BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgHPmYkR8N5K0lK8Fnmb/pqVSxFMRcSmmknsrterNiHg6rkTE1EyWnh91pQGAU0r/mhTrf12be+7i4dLp5N8z+T4ivv/T13/81kKrtT6f5f/jIH9mf/mwyqPzTrGuIAAwYHn/XSn2XW/kH+5uL+5vw6zPgzvx32Ip4sW93e18y/KLvLcjZvOxxIV/JjFZnDMbEc9GxMQA4u+8ExGf6NX+JJ8buVSsfNodP4rYTw01fvq++Gle1tlng6+PD6AuMG7evRMRr/S6/9K4mu973/9Z7uQA4j+407nY/s++va74k0WkiR7xs3v+ar8xnv/t1x7LbM91yt6JeHayV/zkIH5yRPzn+oz/p0995ocvH1HW/lnEtegdvztWuVVfKzc3t26s1BeWq8vV1Url9vztmy/eeqFSzueoy/sz1Y/720vXnz6qbln7L3TF318XP4s627P90wfnfqHP9v/8P298+7OPkjOH43/p872//8/0jN+R9Ylf7DP+woVfHbl8dxZ/6Yiv/3Hf/+vdFzoyQsR7f9la6rOqAMAQNDe37i/UatX1D3SQ9f7dOdm70JNc59iDrIr9vXh/uHi6oH+Os2jFCQ+mzuqreuYHkwdjxcFe+VvZFYfcnHTgrTjVwcNhxRrdzyRgOB7d9KOuCQAAAAAAAAAAAAAAcJRh/OnSqNsIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA+fW/AAAA//9ZAtRs") syz_io_uring_setup(0x24f9, &(0x7f0000002ec0)={0x0, 0xfffffffc, 0x2, 0x0, 0x1}, &(0x7f0000000080), &(0x7f0000000140)) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000001840)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0x0, 0x4}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x4, &(0x7f0000000540)=[{0x6, 0x0, 0x0, 0x7ffffdbf}, {0x2, 0x0, 0x9, 0x1}, {0x95e7, 0x9, 0x7f, 0x2}, {0x59, 0x80, 0x80, 0x9}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x90) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f0000000040)=0x7fff0000) syz_emit_ethernet(0x4e, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaabaa86dd60ff00f500180600fe8000000000000000000000000000aafe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="60c2000090780000fe020000"], 0x0) syz_emit_ethernet(0x5e, &(0x7f00000003c0)=ANY=[@ANYBLOB="aaaaaa8aaaaa00000000000086dd60083ff200010000804fc1a6af523eb3852f5693c96c02fe8000000000080000000000000000bbff02000000000000000000000000000100004e228401486c6e43e44c1d11e50160d68e4b33199b09957312294cff5a8d0604391fadbff18238359b42017e3e35ee137de99d5b9048db722220", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="a03a0000907800001312fb6b9acd8f4e1c92833a2f1e90339d180000"], 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0), 0x13f}}, 0x20) socket$nl_route(0x10, 0x3, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="c92ebb094911181f46379ce0baa1212ea5428ab71e16e270332d136dfbfd55556ae99c0cedf8a6d2b281100fc1654400f1346ad45f72093c427d2ccb3c693c1dc984da9ef054200bd88ff98591cde8b1eaf17a516b49856354efca7d3db7416b1dabac55763c96ccb31b5996a544e3570bca2ae2486d87bbda0e68bb44a41f26e06c8125bff03b6a458d96c7c5ac98cf646b464e99cef89709a0333df4bccaf2ef9d0b95ad5bb329f10a496bf4b99e5dd907434f50fde9d47a53", 0xba}, {&(0x7f0000000840)="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", 0x1000}, {&(0x7f0000000100)="44a52fc2d0095058edfe7abd813ddb0f516b7d66d80236824d5cc4c1b2fff963db05964ca32e5c211a50aba6e3b3f63b07cde21c11112917f28a7d7a510effa29861083965a9c7a845b556ca728c6429b18232f48473b9d4c0ebd1be", 0x5c}], 0x3, &(0x7f00000004c0)=[@ip_ttl={{0x14, 0x0, 0x2, 0x2}}, @ip_ttl={{0x14}}, @ip_tos_u8={{0x11}}, @ip_ttl={{0x14, 0x0, 0x2, 0x5}}, @ip_tos_u8={{0x11}}], 0x78}, 0x20006800) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)) perf_event_open(&(0x7f0000000300)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000098, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', 0x0, 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000300)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f00000001c0)) r2 = gettid() sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a940000001100010000000000000000000000000a"], 0x28}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x14) mount$bind(0x0, &(0x7f0000000040)='./file0/file0\x00', 0x0, 0x20000, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r3, 0x8922, &(0x7f0000000000)={'dummy0\x00'}) 156.472218ms ago: executing program 1 (id=3452): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) io_uring_setup(0x4f02, &(0x7f0000000000)) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000140)={0x16f, @time}) r2 = socket$netlink(0x10, 0x3, 0x14) getdents(0xffffffffffffffff, &(0x7f0000000040)=""/104, 0x4d) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r2, {0x6}}, './file0\x00'}) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r3, &(0x7f0000000140)={0x15, 0x110, 0xfa00, {r4, 0x0, 0x30, 0x30, 0x0, @in6={0x1b, 0x101, 0x0, @loopback, 0x3ff}, @ib={0x1b, 0xffff, 0x0, {"0e080000000000000000000004000001"}, 0x0, 0xffffffffffffffff, 0x2}}}, 0x118) write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f0000000340)={0x7, 0x8, 0xfa00, {r4}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f0000000280)={0x1, 0x10, 0xfa00, {&(0x7f0000000040), r4}}, 0x18) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) 80.159734ms ago: executing program 2 (id=3453): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="30004c003500010000000000000000000300000004000000180001801400100005000f0000020000080002"], 0x30}}, 0x0) 80.013324ms ago: executing program 0 (id=3454): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000300)=0x208) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090011006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a68", 0x6c, 0x1, 0x0, 0x0) shutdown(r0, 0x1) 79.602114ms ago: executing program 0 (id=3455): fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6800) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000080)={0x30, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd=r3}, @typed={0x8, 0x0, 0x0, 0x0, @fd}, @nested={0xd, 0x2b, 0x0, 0x1, [@typed={0x8, 0x3, 0x0, 0x0, @fd=r2}, @generic='=']}]}, 0x30}], 0x1}, 0x0) (async) sendmsg$netlink(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000080)={0x30, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd=r3}, @typed={0x8, 0x0, 0x0, 0x0, @fd}, @nested={0xd, 0x2b, 0x0, 0x1, [@typed={0x8, 0x3, 0x0, 0x0, @fd=r2}, @generic='=']}]}, 0x30}], 0x1}, 0x0) r4 = dup(0xffffffffffffffff) ioctl$USBDEVFS_CONTROL(r4, 0xc0185500, &(0x7f0000000080)={0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0}) (async) ioctl$USBDEVFS_CONTROL(r4, 0xc0185500, &(0x7f0000000080)={0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0}) socket$netlink(0x10, 0x3, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=@framed={{}, [@jmp={0x5, 0x0, 0xa}, @alu={0x7}]}, &(0x7f00000000c0)='GPL\x00'}, 0x90) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$l2tp6(0xa, 0x2, 0x73) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, 0x0, 0x0) gettid() (async) r5 = gettid() syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000040)='./file2\x00', 0x101080e, &(0x7f00000001c0)=ANY=[@ANYBLOB="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", @ANYRES16=r5, @ANYRESOCT=r5], 0x1, 0x67e, &(0x7f0000001600)="$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") r6 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000268000/0x4000)=nil, 0x4000, 0x1000002, 0x10, r6, 0x0) process_vm_writev(r5, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) (async) process_vm_writev(r5, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000080)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private1}}}, 0xa0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r7, 0x7, &(0x7f0000000080)) (async) fcntl$lock(r7, 0x7, &(0x7f0000000080)) flock(r7, 0x1) r8 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/3\x00') read$eventfd(r8, &(0x7f0000000080), 0x8) (async) read$eventfd(r8, &(0x7f0000000080), 0x8) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000080), 0xfffffebe}], 0x1) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) (async) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) 69.865545ms ago: executing program 1 (id=3456): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "6f0b7a7c15048e51"}) write$UHID_INPUT(r1, &(0x7f0000000040)={0xc, {"a29bad214fc752f91b3e090987f70e06d038e7ff7fc6e5539b3264078b089b0e083860090890e0878f0f1ac6e7049b334c959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31310d3b5d0936cd3b78070daa61d8e809ea882f5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5003a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d780231c9c99a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f068bb87af8b90fd8f08876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd7072f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d27df2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb84bed4b281769177c6d594f88a4facfd4c735a20307c737afae5136651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2c1cde360500000000000000b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e51074b41bc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600", 0x1000}}, 0x1006) 56.584066ms ago: executing program 2 (id=3457): bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f00000000c0)={0x0, 0x2, 0x6, @local}, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\v\x00', @ANYRES16=r1, @ANYBLOB="010000000900000000001400000018000180140002006e657464657673696d3000000001000008001c000700000005000b"], 0x3c}}, 0x0) 0s ago: executing program 3 (id=3458): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000100)=0xcf7) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) ppoll(&(0x7f0000000140)=[{r0}], 0x1, 0x0, 0x0, 0x0) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="04", 0x1}], 0x1}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010d00000000000000850a040200000000008500000014000540200100000000000000000100000000001c000900080000d6", @ANYRES32=r2], 0x4c}}, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = gettid() r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r6, 0xc0a85320, &(0x7f0000000180)={{0x80, 0x1}, 'port1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r6, 0xc0a85320, &(0x7f00000000c0)={{0x80}, 'port0\x00', 0x0, 0x141019, 0xfffffffc}) write$binfmt_script(r5, &(0x7f0000000340), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) process_vm_writev(r4, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x14) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) r7 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$IP6T_SO_GET_INFO(r3, 0x29, 0x40, &(0x7f0000000240)={'security\x00', 0x0, [0x10, 0x0, 0x3, 0x86]}, &(0x7f00000002c0)=0x54) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="380000001000010400000000010000000000000062b6c5c5c51cd1472a8544b2eefd038faacd56011bc49f3b85c1e748ed3ffd4a0d3543e8a4ff0610993580c510cbd7a7adf71a717e56e3a9a839c90f56cb21291afec2c20b254b9f5f34445e413000000000", @ANYRES32=r10, @ANYBLOB="00000000000000001400128009000100626f6e64000000000400028004001a80"], 0x38}}, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0x8, 0x3, 0x480, 0x0, 0xa, 0x148, 0x0, 0x10, 0x3e8, 0x2a8, 0x2a8, 0x3e8, 0x2a8, 0x3, 0x0, {[{{@ip={@rand_addr, @multicast1, 0x0, 0x0, 'bridge0\x00', 'rose0\x00'}, 0x0, 0x120, 0x190, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'geneve0\x00', {0x0, 0x0, 0x9, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@inet=@hashlimit1={{0x58}, {'pim6reg0\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x6, 0xa359e000}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f2f7b90ad2b60c45cb4ea6e7bf902bdc2ff8a9304d9f655c746adc0bdc773506378bc0d27efd6abb05175089830cc46186074d7de46d5af300"}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'pimreg1\x00', 'veth0_to_team\x00'}, 0x0, 0x1f0, 0x258, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'geneve0\x00', {0x0, 0xff, 0x0, 0x0, 0x0, 0x7fff, 0x200}}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x4e0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00'}, 0x10) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r11, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000000)=ANY=[@ANYBLOB="640100001000010000000000feff0000ac1414aa000000000000000000000000fe8000000000000000000000000000aa00"/64, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ffffffff000000000000000000000000000000006c000000fe8000000000000000000000080000bb0000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000480003006465666c6174650000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000b0000000000240020"], 0x164}}, 0x0) kernel console output (not intermixed with test programs): ange from 0 to 512 [ 198.358101][T12612] EXT4-fs: Ignoring removed orlov option [ 198.372077][T12612] EXT4-fs warning (device loop0): dx_probe:877: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 198.384009][T12612] EXT4-fs warning (device loop0): dx_probe:880: Enable large directory feature to access it [ 198.394266][T12612] EXT4-fs warning (device loop0): dx_probe:965: inode #2: comm syz.0.2923: Corrupt directory, running e2fsck is recommended [ 198.425767][T12612] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2 [ 198.436877][T12612] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2234: inode #15: comm syz.0.2923: corrupted in-inode xattr: overlapping e_value [ 198.448016][T12605] loop1: detected capacity change from 0 to 1024 [ 198.459324][T12612] EXT4-fs (loop0): Remounting filesystem read-only [ 198.469031][T12620] loop2: detected capacity change from 0 to 1024 [ 198.473530][T12612] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 198.488058][T12612] SELinux: (dev loop0, type ext4) getxattr errno 5 [ 198.488218][T12605] EXT4-fs: Ignoring removed nomblk_io_submit option [ 198.495255][T12612] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.511188][T12605] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 198.523271][T12605] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 198.533646][T12620] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 198.552445][T12605] System zones: 0-1, 3-36 [ 198.559683][T12605] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 198.582209][ T29] audit: type=1400 audit(1720267410.007:1617): avc: denied { create } for pid=12611 comm="syz.0.2923" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 198.618631][T12630] FAULT_INJECTION: forcing a failure. [ 198.618631][T12630] name failslab, interval 1, probability 0, space 0, times 0 [ 198.631461][T12630] CPU: 1 PID: 12630 Comm: syz.4.2929 Not tainted 6.10.0-rc6-syzkaller-00212-g1dd28064d416 #0 [ 198.641760][T12630] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 198.651831][T12630] Call Trace: [ 198.655119][T12630] [ 198.658063][T12630] dump_stack_lvl+0xf2/0x150 [ 198.662818][T12630] dump_stack+0x15/0x20 [ 198.667069][T12630] should_fail_ex+0x229/0x230 [ 198.671783][T12630] ? __alloc_skb+0x10b/0x300 [ 198.676386][T12630] __should_failslab+0x92/0xa0 [ 198.681202][T12630] should_failslab+0x9/0x20 [ 198.685803][T12630] kmem_cache_alloc_node_noprof+0x51/0x2b0 [ 198.691642][T12630] __alloc_skb+0x10b/0x300 [ 198.696121][T12630] netlink_alloc_large_skb+0xad/0xe0 [ 198.697014][T10821] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.701756][T12630] netlink_sendmsg+0x3b4/0x6e0 [ 198.715577][T12630] ? __pfx_netlink_sendmsg+0x10/0x10 [ 198.720895][T12630] __sock_sendmsg+0x140/0x180 [ 198.725652][T12630] ____sys_sendmsg+0x312/0x410 [ 198.730523][T12630] __sys_sendmsg+0x1e9/0x280 [ 198.735428][T12630] __x64_sys_sendmsg+0x46/0x50 [ 198.740208][T12630] x64_sys_call+0xb25/0x2d70 [ 198.744915][T12630] do_syscall_64+0xc9/0x1c0 [ 198.749526][T12630] ? clear_bhb_loop+0x55/0xb0 [ 198.754271][T12630] ? clear_bhb_loop+0x55/0xb0 [ 198.758969][T12630] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 198.764943][T12630] RIP: 0033:0x7f2da2148bd9 [ 198.769519][T12630] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 198.789185][T12630] RSP: 002b:00007f2da13ca048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 198.798130][T12630] RAX: ffffffffffffffda RBX: 00007f2da22d6f60 RCX: 00007f2da2148bd9 [ 198.806115][T12630] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000005 [ 198.814098][T12630] RBP: 00007f2da13ca0a0 R08: 0000000000000000 R09: 0000000000000000 [ 198.822283][T12630] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 198.830357][T12630] R13: 000000000000000b R14: 00007f2da22d6f60 R15: 00007ffde608bca8 [ 198.838350][T12630] [ 198.873753][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 198.885060][T12639] netlink: 'syz.2.2928': attribute type 4 has an invalid length. [ 198.924124][T12639] netlink: 'syz.2.2928': attribute type 17 has an invalid length. [ 198.986270][T12641] loop4: detected capacity change from 0 to 1024 [ 199.012880][T12639] __nla_validate_parse: 3 callbacks suppressed [ 199.012901][T12639] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2928'. [ 199.048612][T12641] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 199.119346][T12651] loop0: detected capacity change from 0 to 512 [ 199.151323][T12653] 9pnet_fd: Insufficient options for proto=fd [ 199.162706][T11538] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.179595][T12655] loop3: detected capacity change from 0 to 1024 [ 199.188056][T12651] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 199.199963][T12653] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2935'. [ 199.216539][T12651] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 199.236799][T12655] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 199.285218][T12661] loop2: detected capacity change from 0 to 1024 [ 199.286727][ T3159] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 199.301304][T12655] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 199.316746][T12655] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 63 with max blocks 65 with error 28 [ 199.319085][T12661] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 199.329140][T12655] EXT4-fs (loop3): This should not happen!! Data will be lost [ 199.329140][T12655] [ 199.351724][T12655] EXT4-fs (loop3): Total free blocks count 0 [ 199.357900][T12655] EXT4-fs (loop3): Free/Dirty block details [ 199.363844][T12655] EXT4-fs (loop3): free_blocks=68451041280 [ 199.369661][T12655] EXT4-fs (loop3): dirty_blocks=96 [ 199.375023][T12655] EXT4-fs (loop3): Block reservation details [ 199.381013][T12655] EXT4-fs (loop3): i_reserved_data_blocks=6 [ 199.388082][T10821] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.388748][T12231] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.431693][T11601] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.453028][T11970] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 199.469805][T12670] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2939'. [ 199.489929][T12672] loop4: detected capacity change from 0 to 2048 [ 199.502233][T12668] loop2: detected capacity change from 0 to 512 [ 199.505823][T12672] EXT4-fs (loop4): cluster size (2048) smaller than block size (4096) [ 199.544500][T12668] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 199.550493][T12679] loop1: detected capacity change from 0 to 512 [ 199.558699][T12683] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2942'. [ 199.564328][T12668] ext4 filesystem being mounted at /143/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 199.577514][T12679] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 199.594465][T12672] MD5 Hash not found for [fe80::bb].0->[ff02::1].20002 [F.]L3 index 0 [ 199.604263][T10821] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 199.622937][T12679] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 199.638167][T12690] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2948'. [ 199.647194][ T29] audit: type=1400 audit(1720267411.067:1618): avc: denied { read } for pid=12681 comm="syz.3.2942" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 199.647871][T12679] ext4 filesystem being mounted at /14/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 199.671617][T12692] netlink: 'syz.0.2949': attribute type 10 has an invalid length. [ 199.694856][T12231] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.707447][T12690] hub 6-0:1.0: USB hub found [ 199.709513][T12695] loop3: detected capacity change from 0 to 512 [ 199.712177][T12690] hub 6-0:1.0: 8 ports detected [ 199.725320][T12692] team0: Port device dummy0 added [ 199.735604][T12695] EXT4-fs (loop3): can't mount with journal_checksum, fs mounted w/o journal [ 199.776513][T12702] loop1: detected capacity change from 0 to 1764 [ 199.800913][T12704] bridge2: entered promiscuous mode [ 199.806495][T12704] bridge2: entered allmulticast mode [ 199.827136][T12695] batadv_slave_1: entered promiscuous mode [ 199.851642][T12714] loop2: detected capacity change from 0 to 2048 [ 199.859418][T12714] EXT4-fs (loop2): cluster size (2048) smaller than block size (4096) [ 199.869385][T12704] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2953'. [ 199.879964][T12694] batadv_slave_1: left promiscuous mode [ 199.894735][T12717] loop1: detected capacity change from 0 to 512 [ 199.908209][T12714] MD5 Hash not found for [fe80::bb].0->[ff02::1].20002 [F.]L3 index 0 [ 199.913955][T12720] loop0: detected capacity change from 0 to 2048 [ 199.928298][T12717] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 199.966003][T12717] EXT4-fs (loop1): Errors on filesystem, clearing orphan list. [ 199.974465][T12720] EXT4-fs (loop0): cluster size (2048) smaller than block size (4096) [ 199.974961][T12717] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 200.019236][T12720] MD5 Hash not found for [fe80::bb].0->[ff02::1].20002 [F.]L3 index 0 [ 200.037992][T12717] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12717 comm=syz.1.2954 [ 200.040763][T12728] loop2: detected capacity change from 0 to 128 [ 200.054864][T12717] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2954'. [ 200.075182][T12728] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 200.133434][T12728] loop2: detected capacity change from 128 to 0 [ 200.141421][T12728] bio_check_eod: 50 callbacks suppressed [ 200.141434][T12728] syz.2.2960: attempt to access beyond end of device [ 200.141434][T12728] loop2: rw=524288, sector=33, nr_sectors = 1 limit=0 [ 200.167191][T12728] syz.2.2960: attempt to access beyond end of device [ 200.167191][T12728] loop2: rw=524288, sector=34, nr_sectors = 1 limit=0 [ 200.182420][T12728] syz.2.2960: attempt to access beyond end of device [ 200.182420][T12728] loop2: rw=524288, sector=35, nr_sectors = 1 limit=0 [ 200.201153][T12728] syz.2.2960: attempt to access beyond end of device [ 200.201153][T12728] loop2: rw=524288, sector=36, nr_sectors = 1 limit=0 [ 200.215504][T12728] syz.2.2960: attempt to access beyond end of device [ 200.215504][T12728] loop2: rw=524288, sector=37, nr_sectors = 1 limit=0 [ 200.230845][T12728] syz.2.2960: attempt to access beyond end of device [ 200.230845][T12728] loop2: rw=524288, sector=38, nr_sectors = 1 limit=0 [ 200.234779][T12763] loop0: detected capacity change from 0 to 2048 [ 200.245277][T12728] syz.2.2960: attempt to access beyond end of device [ 200.245277][T12728] loop2: rw=524288, sector=39, nr_sectors = 1 limit=0 [ 200.267024][T12728] syz.2.2960: attempt to access beyond end of device [ 200.267024][T12728] loop2: rw=524288, sector=40, nr_sectors = 1 limit=0 [ 200.270736][T12763] EXT4-fs (loop0): cluster size (2048) smaller than block size (4096) [ 200.289867][T12728] syz.2.2960: attempt to access beyond end of device [ 200.289867][T12728] loop2: rw=0, sector=33, nr_sectors = 1 limit=0 [ 200.303748][ T3163] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 200.306549][T12728] FAT-fs (loop2): Directory bread(block 33) failed [ 200.318781][T12728] syz.2.2960: attempt to access beyond end of device [ 200.318781][T12728] loop2: rw=0, sector=34, nr_sectors = 1 limit=0 [ 200.339969][T12763] MD5 Hash not found for [fe80::bb].0->[ff02::1].20002 [F.]L3 index 0 [ 200.348366][T12728] FAT-fs (loop2): Directory bread(block 34) failed [ 200.358536][T12728] FAT-fs (loop2): Directory bread(block 35) failed [ 200.367150][T12728] FAT-fs (loop2): Directory bread(block 36) failed [ 200.369995][T12768] dummy0: entered promiscuous mode [ 200.373797][T12728] FAT-fs (loop2): Directory bread(block 37) failed [ 200.385826][T12768] dummy0: left promiscuous mode [ 200.388439][T12728] FAT-fs (loop2): Directory bread(block 38) failed [ 200.402744][T12728] FAT-fs (loop2): Directory bread(block 39) failed [ 200.409514][T12728] FAT-fs (loop2): Directory bread(block 40) failed [ 200.416314][T12728] FAT-fs (loop2): Directory bread(block 33) failed [ 200.424694][T12728] FAT-fs (loop2): Directory bread(block 34) failed [ 200.485187][T11952] FAT-fs (loop2): bread failed in fat_clusters_flush [ 200.492402][T12303] FAT-fs (loop2): unable to read boot sector to mark fs as dirty [ 200.619283][T12787] Illegal XDP return value 4294967274 on prog (id 666) dev N/A, expect packet loss! [ 200.630862][T12787] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2984'. [ 200.664452][T12231] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.745531][T12799] loop1: detected capacity change from 0 to 2048 [ 200.772732][T12799] EXT4-fs (loop1): cluster size (2048) smaller than block size (4096) [ 200.838199][T12799] MD5 Hash not found for [fe80::bb].0->[ff02::1].20002 [F.]L3 index 0 [ 200.859482][T12805] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2987'. [ 200.885371][T12819] ip6gretap0: entered promiscuous mode [ 200.892151][T12819] batadv_slave_0: entered promiscuous mode [ 200.901910][T12819] ip6gretap0: left promiscuous mode [ 200.909989][T12819] batadv_slave_0: left promiscuous mode [ 200.940350][T12824] loop1: detected capacity change from 0 to 512 [ 200.952592][T12824] EXT4-fs: Ignoring removed oldalloc option [ 200.960272][T12824] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 201.030316][T12819] loop1: detected capacity change from 0 to 764 [ 201.031974][T12802] chnl_net:caif_netlink_parms(): no params data found [ 201.037112][T12819] iso9660: Unknown parameter 'ext3' [ 201.078828][T12802] bridge0: port 1(bridge_slave_0) entered blocking state [ 201.082603][T12839] loop3: detected capacity change from 0 to 512 [ 201.085989][T12802] bridge0: port 1(bridge_slave_0) entered disabled state [ 201.099604][T12802] bridge_slave_0: entered allmulticast mode [ 201.105916][T12819] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 201.106810][T12802] bridge_slave_0: entered promiscuous mode [ 201.119512][T12839] EXT4-fs (loop3): can't mount with commit=246, fs mounted w/o journal [ 201.123921][T12802] bridge0: port 2(bridge_slave_1) entered blocking state [ 201.137377][T12819] loop1: detected capacity change from 0 to 512 [ 201.137761][T12802] bridge0: port 2(bridge_slave_1) entered disabled state [ 201.146326][T12819] EXT4-fs error (device loop1): ext4_orphan_get:1394: inode #15: comm syz.1.2992: casefold flag without casefold feature [ 201.151679][T12802] bridge_slave_1: entered allmulticast mode [ 201.166070][T12819] EXT4-fs error (device loop1): ext4_orphan_get:1399: comm syz.1.2992: couldn't read orphan inode 15 (err -117) [ 201.170196][T12802] bridge_slave_1: entered promiscuous mode [ 201.182936][T12819] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 201.210963][T12802] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 201.229945][T12802] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 201.238914][T12844] loop3: detected capacity change from 0 to 2048 [ 201.246022][T12844] EXT4-fs (loop3): cluster size (2048) smaller than block size (4096) [ 201.255402][T12231] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.266578][T12802] team0: Port device team_slave_0 added [ 201.273783][T12802] team0: Port device team_slave_1 added [ 201.290376][T12802] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 201.297436][T12802] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 201.316822][T12844] MD5 Hash not found for [fe80::bb].0->[ff02::1].20002 [F.]L3 index 0 [ 201.323393][T12802] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 201.344853][ T3979] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 201.355047][T12802] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 201.362011][T12802] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 201.388283][T12802] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 201.406525][T12846] veth0_vlan: entered allmulticast mode [ 201.444987][T12846] ªªªªªª: renamed from vlan0 [ 201.480262][T12802] hsr_slave_0: entered promiscuous mode [ 201.498810][T12802] hsr_slave_1: entered promiscuous mode [ 201.634015][T12864] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3010'. [ 201.645107][T12861] FAULT_INJECTION: forcing a failure. [ 201.645107][T12861] name failslab, interval 1, probability 0, space 0, times 0 [ 201.657895][T12861] CPU: 1 PID: 12861 Comm: syz.0.3009 Not tainted 6.10.0-rc6-syzkaller-00212-g1dd28064d416 #0 [ 201.668095][T12861] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 201.678212][T12861] Call Trace: [ 201.681509][T12861] [ 201.684864][T12861] dump_stack_lvl+0xf2/0x150 [ 201.689540][T12861] dump_stack+0x15/0x20 [ 201.693745][T12861] should_fail_ex+0x229/0x230 [ 201.698468][T12861] ? sctp_add_bind_addr+0x6f/0x1e0 [ 201.703663][T12861] __should_failslab+0x92/0xa0 [ 201.708479][T12861] should_failslab+0x9/0x20 [ 201.713018][T12861] kmalloc_trace_noprof+0x4b/0x2a0 [ 201.718192][T12861] sctp_add_bind_addr+0x6f/0x1e0 [ 201.723228][T12861] sctp_copy_local_addr_list+0x19b/0x220 [ 201.728888][T12861] sctp_copy_one_addr+0x83/0x410 [ 201.733842][T12861] sctp_bind_addr_copy+0x81/0x2b0 [ 201.738893][T12861] sctp_assoc_set_bind_addr_from_ep+0xc0/0xd0 [ 201.745139][T12861] sctp_connect_new_asoc+0x1d0/0x3b0 [ 201.750547][T12861] sctp_sendmsg+0xf05/0x1920 [ 201.755172][T12861] ? __pfx_sctp_sendmsg+0x10/0x10 [ 201.760259][T12861] inet_sendmsg+0xc5/0xd0 [ 201.764677][T12861] __sock_sendmsg+0x102/0x180 [ 201.769373][T12861] __sys_sendto+0x1e5/0x260 [ 201.774034][T12861] __x64_sys_sendto+0x78/0x90 [ 201.778775][T12861] x64_sys_call+0x16d7/0x2d70 [ 201.783494][T12861] do_syscall_64+0xc9/0x1c0 [ 201.788160][T12861] ? clear_bhb_loop+0x55/0xb0 [ 201.792856][T12861] ? clear_bhb_loop+0x55/0xb0 [ 201.797596][T12861] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 201.803573][T12861] RIP: 0033:0x7f33083f9bd9 [ 201.807998][T12861] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 201.827698][T12861] RSP: 002b:00007f330767b048 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 201.836213][T12861] RAX: ffffffffffffffda RBX: 00007f3308587f60 RCX: 00007f33083f9bd9 [ 201.844205][T12861] RDX: 0000000000034000 RSI: 0000000020847fff RDI: 0000000000000003 [ 201.852187][T12861] RBP: 00007f330767b0a0 R08: 000000002005ffe4 R09: 000000000000001c [ 201.860189][T12861] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 201.868246][T12861] R13: 000000000000000b R14: 00007f3308587f60 R15: 00007ffe3d1c8ac8 [ 201.876398][T12861] [ 201.904980][T10715] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 201.929485][T12802] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.985431][T12802] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.025135][T12885] loop4: detected capacity change from 0 to 256 [ 202.038426][T12888] FAULT_INJECTION: forcing a failure. [ 202.038426][T12888] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 202.051781][T12888] CPU: 0 PID: 12888 Comm: syz.0.3020 Not tainted 6.10.0-rc6-syzkaller-00212-g1dd28064d416 #0 [ 202.062067][T12888] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 202.072134][T12888] Call Trace: [ 202.075417][T12888] [ 202.078404][T12888] dump_stack_lvl+0xf2/0x150 [ 202.083179][T12888] dump_stack+0x15/0x20 [ 202.087386][T12888] should_fail_ex+0x229/0x230 [ 202.092110][T12888] should_fail+0xb/0x10 [ 202.096447][T12888] should_fail_usercopy+0x1a/0x20 [ 202.101552][T12888] _copy_from_user+0x1e/0xd0 [ 202.106265][T12888] kstrtouint_from_user+0x76/0xe0 [ 202.111409][T12888] proc_fail_nth_write+0x4f/0x160 [ 202.116541][T12888] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 202.122210][T12888] vfs_write+0x28b/0x900 [ 202.126539][T12888] ? __fget_files+0x1da/0x210 [ 202.131273][T12888] ksys_write+0xeb/0x1b0 [ 202.135563][T12888] __x64_sys_write+0x42/0x50 [ 202.140171][T12888] x64_sys_call+0x27ef/0x2d70 [ 202.144867][T12888] do_syscall_64+0xc9/0x1c0 [ 202.149432][T12888] ? clear_bhb_loop+0x55/0xb0 [ 202.154175][T12888] ? clear_bhb_loop+0x55/0xb0 [ 202.158915][T12888] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.164829][T12888] RIP: 0033:0x7f33083f875f [ 202.169281][T12888] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 29 8c 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 7c 8c 02 00 48 [ 202.189007][T12888] RSP: 002b:00007f330767b040 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 202.197450][T12888] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f33083f875f [ 202.205488][T12888] RDX: 0000000000000001 RSI: 00007f330767b0b0 RDI: 0000000000000004 [ 202.213514][T12888] RBP: 00007f330767b0a0 R08: 0000000000000000 R09: 0000000000000000 [ 202.221557][T12888] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 202.229646][T12888] R13: 000000000000000b R14: 00007f3308587f60 R15: 00007ffe3d1c8ac8 [ 202.237637][T12888] [ 202.256985][T12891] loop1: detected capacity change from 0 to 1024 [ 202.270836][T12885] FAT-fs (loop4): Directory bread(block 64) failed [ 202.279927][T12897] loop0: detected capacity change from 0 to 1764 [ 202.283182][T12885] FAT-fs (loop4): Directory bread(block 65) failed [ 202.286866][T12891] EXT4-fs: Ignoring removed oldalloc option [ 202.299762][T12891] EXT4-fs (loop1): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 202.302670][T12885] FAT-fs (loop4): Directory bread(block 66) failed [ 202.327132][T12802] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.336534][T12885] FAT-fs (loop4): Directory bread(block 67) failed [ 202.353266][T12885] FAT-fs (loop4): Directory bread(block 68) failed [ 202.369365][T12897] loop0: detected capacity change from 0 to 512 [ 202.378063][T12891] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 202.390341][T12885] FAT-fs (loop4): Directory bread(block 69) failed [ 202.391349][T12897] EXT4-fs warning (device loop0): ext4_multi_mount_protect:292: Invalid MMP block in superblock [ 202.397212][T12885] FAT-fs (loop4): Directory bread(block 70) failed [ 202.414351][T12885] FAT-fs (loop4): Directory bread(block 71) failed [ 202.421011][T12885] FAT-fs (loop4): Directory bread(block 72) failed [ 202.427743][T12885] FAT-fs (loop4): Directory bread(block 73) failed [ 202.442781][T12802] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.461002][T12231] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.492361][T12897] netlink: 'syz.0.3024': attribute type 13 has an invalid length. [ 202.522535][T12802] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 202.536851][T12802] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 202.546790][T12802] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 202.557096][T12802] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 202.701069][T12927] veth0_vlan: entered allmulticast mode [ 202.785669][T12933] ªªªªªª: renamed from vlan0 [ 202.899936][T12802] 8021q: adding VLAN 0 to HW filter on device bond0 [ 202.941695][T12802] 8021q: adding VLAN 0 to HW filter on device team0 [ 203.014438][ T3162] bridge0: port 1(bridge_slave_0) entered blocking state [ 203.021566][ T3162] bridge0: port 1(bridge_slave_0) entered forwarding state [ 203.055076][T12948] loop0: detected capacity change from 0 to 128 [ 203.073863][ T3162] bridge0: port 2(bridge_slave_1) entered blocking state [ 203.081011][ T3162] bridge0: port 2(bridge_slave_1) entered forwarding state [ 203.232388][T12802] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 203.331781][T12957] loop0: detected capacity change from 0 to 2048 [ 203.353048][T12957] EXT4-fs (loop0): cluster size (2048) smaller than block size (4096) [ 203.540251][T12802] veth0_vlan: entered promiscuous mode [ 203.567648][T12802] veth1_vlan: entered promiscuous mode [ 203.593966][T12979] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 203.598624][ T29] audit: type=1400 audit(1720267415.027:1619): avc: denied { read } for pid=12972 comm="syz.0.3045" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 203.617799][T12802] veth0_macvtap: entered promiscuous mode [ 203.649359][ T29] audit: type=1400 audit(1720267415.077:1620): avc: denied { write } for pid=12976 comm="syz.4.3047" name="cgroup.subtree_control" dev="cgroup2" ino=220 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 203.651827][T12802] veth1_macvtap: entered promiscuous mode [ 203.692521][T12802] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 203.703260][T12802] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.713114][T12802] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 203.724387][T12802] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.734655][T12802] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 203.745344][T12802] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.755509][T12802] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 203.766081][T12802] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.776029][T12802] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 203.786482][T12802] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.796364][T12802] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 203.806890][T12802] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.817177][T12802] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 203.827674][T12802] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.837774][T12802] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 203.848264][T12802] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.858286][T12802] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 203.868741][T12802] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.880420][T12802] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 203.900047][T12802] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 203.910864][T12802] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.920986][T12802] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 203.931768][T12802] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.941754][T12802] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 203.952407][T12802] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.962295][T12802] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 203.972764][T12802] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.982593][T12802] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 203.993398][T12802] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.003268][T12802] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 204.013754][T12802] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.023587][T12802] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 204.034040][T12802] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.043965][T12802] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 204.054409][T12802] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.064302][T12802] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 204.074791][T12802] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.093691][T12802] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 204.110560][T12802] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.119572][T12802] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.128659][T12802] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.137909][T12802] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.139992][T13000] loop4: detected capacity change from 0 to 512 [ 204.155169][T13000] EXT4-fs: Ignoring removed i_version option [ 204.161204][T13000] EXT4-fs: Ignoring removed nobh option [ 204.183656][T13000] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 204.215360][T13000] EXT4-fs (loop4): 1 truncate cleaned up [ 204.221620][T13000] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 204.248278][T13010] loop0: detected capacity change from 0 to 512 [ 204.249450][T13009] loop3: detected capacity change from 0 to 2048 [ 204.272190][ T29] audit: type=1400 audit(1720267415.697:1621): avc: denied { unmount } for pid=11538 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 204.276627][T11538] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.302881][T13014] FAULT_INJECTION: forcing a failure. [ 204.302881][T13014] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 204.308882][T13010] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 204.316042][T13014] CPU: 1 PID: 13014 Comm: syz.2.2989 Not tainted 6.10.0-rc6-syzkaller-00212-g1dd28064d416 #0 [ 204.331124][T13010] ext4 filesystem being mounted at /94/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 204.338586][T13014] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 204.338606][T13014] Call Trace: [ 204.338616][T13014] [ 204.338625][T13014] dump_stack_lvl+0xf2/0x150 [ 204.338662][T13014] dump_stack+0x15/0x20 [ 204.338692][T13014] should_fail_ex+0x229/0x230 [ 204.338766][T13014] should_fail+0xb/0x10 [ 204.353248][T13009] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 204.359128][T13014] should_fail_usercopy+0x1a/0x20 [ 204.400196][T13014] _copy_from_user+0x1e/0xd0 [ 204.404882][T13014] vt_ioctl+0x9b1/0x1810 [ 204.409147][T13014] tty_ioctl+0x821/0xbe0 [ 204.413408][T13014] ? __pfx_tty_ioctl+0x10/0x10 [ 204.418337][T13014] __se_sys_ioctl+0xd3/0x150 [ 204.423049][T13014] __x64_sys_ioctl+0x43/0x50 [ 204.427680][T13014] x64_sys_call+0x1581/0x2d70 [ 204.432412][T13014] do_syscall_64+0xc9/0x1c0 [ 204.436937][T13014] ? clear_bhb_loop+0x55/0xb0 [ 204.441629][T13014] ? clear_bhb_loop+0x55/0xb0 [ 204.446319][T13014] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.452340][T13014] RIP: 0033:0x7feeb350abd9 [ 204.456759][T13014] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 204.476511][T13014] RSP: 002b:00007feeb278c048 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 204.484935][T13014] RAX: ffffffffffffffda RBX: 00007feeb3698f60 RCX: 00007feeb350abd9 [ 204.492916][T13014] RDX: 0000000020000740 RSI: 0000000000004b72 RDI: 0000000000000003 [ 204.501084][T13014] RBP: 00007feeb278c0a0 R08: 0000000000000000 R09: 0000000000000000 [ 204.509067][T13014] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 204.517082][T13014] R13: 000000000000000b R14: 00007feeb3698f60 R15: 00007ffc052b5828 [ 204.525092][T13014] [ 204.538419][T13020] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 204.553711][ T3979] net_ratelimit: 93 callbacks suppressed [ 204.553728][ T3979] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 204.559631][T13019] EXT4-fs error (device loop0): ext4_empty_dir:3104: inode #12: block 31: comm syz.0.3059: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=1, rec_len=6, size=1024 fake=1 [ 204.587061][T13019] EXT4-fs warning (device loop0): ext4_empty_dir:3106: inode #12: comm syz.0.3059: directory missing '..' [ 204.622484][T12184] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.646877][T11601] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.690456][T13042] Process accounting resumed [ 204.725534][T13056] FAULT_INJECTION: forcing a failure. [ 204.725534][T13056] name failslab, interval 1, probability 0, space 0, times 0 [ 204.739576][T13056] CPU: 1 PID: 13056 Comm: syz.1.3069 Not tainted 6.10.0-rc6-syzkaller-00212-g1dd28064d416 #0 [ 204.749761][T13056] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 204.759840][T13056] Call Trace: [ 204.763131][T13056] [ 204.766118][T13056] dump_stack_lvl+0xf2/0x150 [ 204.770819][T13056] dump_stack+0x15/0x20 [ 204.774994][T13056] should_fail_ex+0x229/0x230 [ 204.779848][T13056] ? skb_clone+0x154/0x1f0 [ 204.784527][T13056] __should_failslab+0x92/0xa0 [ 204.789357][T13056] should_failslab+0x9/0x20 [ 204.793904][T13056] kmem_cache_alloc_noprof+0x4c/0x290 [ 204.799325][T13056] skb_clone+0x154/0x1f0 [ 204.803658][T13056] __netlink_deliver_tap+0x2bd/0x4c0 [ 204.808969][T13056] netlink_unicast+0x63b/0x660 [ 204.813803][T13056] netlink_sendmsg+0x5ca/0x6e0 [ 204.818610][T13056] ? __pfx_netlink_sendmsg+0x10/0x10 [ 204.824340][T13056] __sock_sendmsg+0x140/0x180 [ 204.829138][T13056] ____sys_sendmsg+0x312/0x410 [ 204.834096][T13056] __sys_sendmmsg+0x269/0x500 [ 204.838866][T13056] __x64_sys_sendmmsg+0x57/0x70 [ 204.843767][T13056] x64_sys_call+0xa87/0x2d70 [ 204.848686][T13056] do_syscall_64+0xc9/0x1c0 [ 204.853214][T13056] ? clear_bhb_loop+0x55/0xb0 [ 204.857980][T13056] ? clear_bhb_loop+0x55/0xb0 [ 204.862750][T13056] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.868653][T13056] RIP: 0033:0x7f0e62c13bd9 [ 204.873151][T13056] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 204.892817][T13056] RSP: 002b:00007f0e61e95048 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 204.901286][T13056] RAX: ffffffffffffffda RBX: 00007f0e62da1f60 RCX: 00007f0e62c13bd9 [ 204.909272][T13056] RDX: 040000000000009f RSI: 00000000200002c0 RDI: 0000000000000004 [ 204.917437][T13056] RBP: 00007f0e61e950a0 R08: 0000000000000000 R09: 0000000000000000 [ 204.925456][T13056] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 204.933470][T13056] R13: 000000000000000b R14: 00007f0e62da1f60 R15: 00007ffcc91cab18 [ 204.941663][T13056] [ 204.979790][T13061] loop0: detected capacity change from 0 to 2048 [ 204.990615][ T3162] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 205.014321][T13060] IPv6: Can't replace route, no match found [ 205.026448][T13061] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 205.096605][T13061] __nla_validate_parse: 5 callbacks suppressed [ 205.096626][T13061] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3067'. [ 205.106128][ T3162] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 205.163895][T11601] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.223348][T13076] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 205.464506][T13094] tipc: Started in network mode [ 205.469434][T13094] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 205.493609][T13094] tipc: New replicast peer: 0000:0000:0000:0000:0000:ffff:ac1e:0001 [ 205.501891][T13094] tipc: Enabled bearer , priority 10 [ 205.517508][T13096] loop4: detected capacity change from 0 to 512 [ 205.544812][T13098] netlink: 'syz.3.3082': attribute type 21 has an invalid length. [ 205.552708][T13098] netlink: 156 bytes leftover after parsing attributes in process `syz.3.3082'. [ 205.562417][T13100] loop0: detected capacity change from 0 to 128 [ 205.566289][T13098] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3082'. [ 205.580370][T13096] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 205.597256][ T3979] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 205.609918][T13096] ext4 filesystem being mounted at /98/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 205.694394][T11538] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.707216][T13106] FAULT_INJECTION: forcing a failure. [ 205.707216][T13106] name failslab, interval 1, probability 0, space 0, times 0 [ 205.720126][T13106] CPU: 0 PID: 13106 Comm: syz.3.3084 Not tainted 6.10.0-rc6-syzkaller-00212-g1dd28064d416 #0 [ 205.730670][T13106] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 205.740862][T13106] Call Trace: [ 205.744179][T13106] [ 205.747159][T13106] dump_stack_lvl+0xf2/0x150 [ 205.751785][T13106] dump_stack+0x15/0x20 [ 205.755958][T13106] should_fail_ex+0x229/0x230 [ 205.760660][T13106] ? __d_alloc+0x3d/0x330 [ 205.765005][T13106] __should_failslab+0x92/0xa0 [ 205.769825][T13106] should_failslab+0x9/0x20 [ 205.774369][T13106] kmem_cache_alloc_lru_noprof+0x51/0x2a0 [ 205.780108][T13106] __d_alloc+0x3d/0x330 [ 205.784275][T13106] d_alloc_pseudo+0x1e/0x80 [ 205.788850][T13106] alloc_file_pseudo+0x70/0x140 [ 205.793765][T13106] __shmem_file_setup+0x1bb/0x1f0 [ 205.798956][T13106] shmem_file_setup+0x3b/0x50 [ 205.803663][T13106] __se_sys_memfd_create+0x31d/0x600 [ 205.809037][T13106] __x64_sys_memfd_create+0x31/0x40 [ 205.814350][T13106] x64_sys_call+0x28b7/0x2d70 [ 205.819248][T13106] do_syscall_64+0xc9/0x1c0 [ 205.823797][T13106] ? clear_bhb_loop+0x55/0xb0 [ 205.828538][T13106] ? clear_bhb_loop+0x55/0xb0 [ 205.833378][T13106] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 205.839297][T13106] RIP: 0033:0x7f19a6926bd9 [ 205.843719][T13106] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 205.863623][T13106] RSP: 002b:00007f19a5b86e28 EFLAGS: 00000206 ORIG_RAX: 000000000000013f [ 205.872050][T13106] RAX: ffffffffffffffda RBX: 00000000000007b1 RCX: 00007f19a6926bd9 [ 205.880086][T13106] RDX: 00007f19a5b86f00 RSI: 0000000000000000 RDI: 00007f19a6994d24 [ 205.888209][T13106] RBP: 00000000200004c0 R08: 00007f19a5b86bc7 R09: 00007f19a5b86e50 [ 205.896187][T13106] R10: 000000000000000a R11: 0000000000000206 R12: 00000000200000c0 [ 205.904183][T13106] R13: 00007f19a5b86f00 R14: 00007f19a5b86ec0 R15: 00000000200001c0 [ 205.912195][T13106] [ 205.983836][ T3159] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 206.102687][T13076] Cannot find add_set index 0 as target [ 206.143203][T13114] FAULT_INJECTION: forcing a failure. [ 206.143203][T13114] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 206.156389][T13114] CPU: 1 PID: 13114 Comm: syz.2.3086 Not tainted 6.10.0-rc6-syzkaller-00212-g1dd28064d416 #0 [ 206.166642][T13114] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 206.167081][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 206.176725][T13114] Call Trace: [ 206.176737][T13114] [ 206.176746][T13114] dump_stack_lvl+0xf2/0x150 [ 206.195803][T13114] dump_stack+0x15/0x20 [ 206.200063][T13114] should_fail_ex+0x229/0x230 [ 206.204806][T13114] should_fail+0xb/0x10 [ 206.209075][T13114] should_fail_usercopy+0x1a/0x20 [ 206.214190][T13114] _copy_from_user+0x1e/0xd0 [ 206.218823][T13114] virtual_ncidev_write+0x8c/0x150 [ 206.224052][T13114] vfs_writev+0x402/0x880 [ 206.228435][T13114] ? __pfx_virtual_ncidev_write+0x10/0x10 [ 206.234264][T13114] do_writev+0xf8/0x220 [ 206.238506][T13114] __x64_sys_writev+0x45/0x50 [ 206.243212][T13114] x64_sys_call+0x1ee2/0x2d70 [ 206.247928][T13114] do_syscall_64+0xc9/0x1c0 [ 206.252452][T13114] ? clear_bhb_loop+0x55/0xb0 [ 206.257146][T13114] ? clear_bhb_loop+0x55/0xb0 [ 206.261853][T13114] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.267831][T13114] RIP: 0033:0x7feeb350abd9 [ 206.272349][T13114] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 206.292081][T13114] RSP: 002b:00007feeb278c048 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 206.300518][T13114] RAX: ffffffffffffffda RBX: 00007feeb3698f60 RCX: 00007feeb350abd9 [ 206.308507][T13114] RDX: 0000000000000002 RSI: 00000000200001c0 RDI: 0000000000000003 [ 206.316494][T13114] RBP: 00007feeb278c0a0 R08: 0000000000000000 R09: 0000000000000000 [ 206.324476][T13114] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 206.332457][T13114] R13: 000000000000000b R14: 00007feeb3698f60 R15: 00007ffc052b5828 [ 206.341270][T13114] [ 206.397476][T13120] netlink: 'syz.1.3088': attribute type 29 has an invalid length. [ 206.407882][T13120] netlink: 'syz.1.3088': attribute type 29 has an invalid length. [ 206.424803][T13120] netlink: 'syz.1.3088': attribute type 29 has an invalid length. [ 206.455767][T13137] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 206.464948][T13137] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 206.476029][T13133] vlan0: entered promiscuous mode [ 206.481360][T13133] veth0: entered promiscuous mode [ 206.485133][T13137] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 206.494782][T13133] team0: Port device vlan0 added [ 206.584606][T13149] syz.4.3097 (13149): attempted to duplicate a private mapping with mremap. This is not supported. [ 206.623442][ T3979] tipc: Node number set to 1 [ 206.637304][T13155] loop4: detected capacity change from 0 to 512 [ 206.646411][T13154] loop2: detected capacity change from 0 to 1024 [ 206.653960][T13155] EXT4-fs (loop4): inodes count not valid: 115 vs 32 [ 206.657024][T13154] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 206.682892][T13154] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e842e118, mo2=0000] [ 206.701273][T13154] System zones: 0-1, 3-12 [ 206.716710][T13154] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.3101: Invalid block bitmap block 0 in block_group 0 [ 206.733407][T13154] Quota error (device loop2): write_blk: dquota write failed [ 206.740858][T13154] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 206.783234][T13154] EXT4-fs error (device loop2): ext4_acquire_dquot:6860: comm syz.2.3101: Failed to acquire dquot type 0 [ 206.812543][T13154] EXT4-fs error (device loop2): ext4_free_blocks:6590: comm syz.2.3101: Freeing blocks not in datazone - block = 0, count = 4096 [ 206.851825][T13165] netlink: 'syz.1.3104': attribute type 29 has an invalid length. [ 206.879600][T13154] EXT4-fs error (device loop2): ext4_read_inode_bitmap:140: comm syz.2.3101: Invalid inode bitmap blk 0 in block_group 0 [ 206.885112][T13165] netlink: 'syz.1.3104': attribute type 29 has an invalid length. [ 206.893578][T13154] EXT4-fs error (device loop2) in ext4_free_inode:362: Corrupt filesystem [ 206.911848][ T11] Quota error (device loop2): do_check_range: Getting block 0 out of range 1-8 [ 206.920991][ T11] EXT4-fs error (device loop2): ext4_release_dquot:6883: comm kworker/u8:0: Failed to release dquot type 0 [ 206.937362][T13154] EXT4-fs (loop2): 1 orphan inode deleted [ 206.942560][T13165] netlink: 'syz.1.3104': attribute type 29 has an invalid length. [ 206.946398][T13154] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 207.093158][T12802] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 207.114795][T13181] netlink: 'syz.0.3110': attribute type 10 has an invalid length. [ 207.119563][T13199] FAULT_INJECTION: forcing a failure. [ 207.119563][T13199] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 207.135831][T13199] CPU: 0 PID: 13199 Comm: syz.4.3118 Not tainted 6.10.0-rc6-syzkaller-00212-g1dd28064d416 #0 [ 207.146080][T13199] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 207.156156][T13199] Call Trace: [ 207.159452][T13199] [ 207.162446][T13199] dump_stack_lvl+0xf2/0x150 [ 207.167122][T13199] dump_stack+0x15/0x20 [ 207.171311][T13199] should_fail_ex+0x229/0x230 [ 207.176199][T13199] should_fail+0xb/0x10 [ 207.180381][T13199] should_fail_usercopy+0x1a/0x20 [ 207.185444][T13199] _copy_from_user+0x1e/0xd0 [ 207.190242][T13199] copy_msghdr_from_user+0x54/0x2a0 [ 207.195480][T13199] __sys_sendmsg+0x17d/0x280 [ 207.200100][T13199] __x64_sys_sendmsg+0x46/0x50 [ 207.204914][T13199] x64_sys_call+0xb25/0x2d70 [ 207.209522][T13199] do_syscall_64+0xc9/0x1c0 [ 207.214083][T13199] ? clear_bhb_loop+0x55/0xb0 [ 207.218827][T13199] ? clear_bhb_loop+0x55/0xb0 [ 207.223562][T13199] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.229553][T13199] RIP: 0033:0x7f2da2148bd9 [ 207.233975][T13199] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 207.253606][T13199] RSP: 002b:00007f2da13ca048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 207.262057][T13199] RAX: ffffffffffffffda RBX: 00007f2da22d6f60 RCX: 00007f2da2148bd9 [ 207.270123][T13199] RDX: 0000000000000000 RSI: 00000000200009c0 RDI: 0000000000000003 [ 207.278142][T13199] RBP: 00007f2da13ca0a0 R08: 0000000000000000 R09: 0000000000000000 [ 207.286123][T13199] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 207.294105][T13199] R13: 000000000000000b R14: 00007f2da22d6f60 R15: 00007ffde608bca8 [ 207.302092][T13199] [ 207.338340][T13181] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 207.519855][T13227] EXT4-fs warning (device sda1): ext4_resize_fs:2018: can't read last block, resize aborted [ 207.595909][T13235] loop0: detected capacity change from 0 to 512 [ 207.609074][T13235] EXT4-fs error (device loop0): ext4_clear_blocks:883: inode #13: comm syz.0.3131: attempt to clear invalid blocks 1 len 1 [ 207.623431][T13235] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.3131: bg 0: block 343: padding at end of block bitmap is not set [ 207.640636][T13235] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 207.648313][T13241] loop3: detected capacity change from 0 to 2048 [ 207.651991][T13235] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.3131: invalid indirect mapped block 1819239214 (level 0) [ 207.671605][T13235] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.3131: invalid indirect mapped block 1819239214 (level 1) [ 207.686376][T13243] ALSA: seq fatal error: cannot create timer (-22) [ 207.688665][T13235] EXT4-fs (loop0): 1 truncate cleaned up [ 207.699003][ T29] audit: type=1400 audit(1720267419.117:1622): avc: denied { ioctl } for pid=13230 comm="syz.2.3130" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=53216 ioctlcmd=0x943d scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 207.700328][T13235] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 207.737951][T13241] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 207.888800][ T29] audit: type=1326 audit(1720267419.317:1623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13268 comm="syz.1.3145" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0e62c13bd9 code=0x0 [ 207.979375][T13282] loop4: detected capacity change from 0 to 2048 [ 208.010301][T13289] FAULT_INJECTION: forcing a failure. [ 208.010301][T13289] name failslab, interval 1, probability 0, space 0, times 0 [ 208.023617][T13289] CPU: 1 PID: 13289 Comm: syz.2.3152 Not tainted 6.10.0-rc6-syzkaller-00212-g1dd28064d416 #0 [ 208.033799][T13289] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 208.043940][T13289] Call Trace: [ 208.047249][T13289] [ 208.050236][T13289] dump_stack_lvl+0xf2/0x150 [ 208.054856][T13289] dump_stack+0x15/0x20 [ 208.059054][T13289] should_fail_ex+0x229/0x230 [ 208.063827][T13289] ? __alloc_skb+0x10b/0x300 [ 208.068442][T13289] __should_failslab+0x92/0xa0 [ 208.073235][T13289] should_failslab+0x9/0x20 [ 208.077766][T13289] kmem_cache_alloc_node_noprof+0x51/0x2b0 [ 208.083702][T13289] __alloc_skb+0x10b/0x300 [ 208.088134][T13289] tcp_stream_alloc_skb+0x2f/0x1e0 [ 208.093310][T13289] tcp_sendmsg_locked+0x977/0x2640 [ 208.098440][T13289] ? mntput+0x49/0x70 [ 208.102447][T13289] ? avc_has_perm_noaudit+0x1cc/0x210 [ 208.107843][T13289] ? __pfx_tcp_sendmsg+0x10/0x10 [ 208.112795][T13289] tcp_sendmsg+0x30/0x50 [ 208.117076][T13289] inet_sendmsg+0x77/0xd0 [ 208.121486][T13289] __sock_sendmsg+0x102/0x180 [ 208.126189][T13289] __sys_sendto+0x1e5/0x260 [ 208.131113][T13289] __x64_sys_sendto+0x78/0x90 [ 208.135800][T13289] x64_sys_call+0x16d7/0x2d70 [ 208.140496][T13289] do_syscall_64+0xc9/0x1c0 [ 208.145031][T13289] ? clear_bhb_loop+0x55/0xb0 [ 208.149726][T13289] ? clear_bhb_loop+0x55/0xb0 [ 208.154493][T13289] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.160554][T13289] RIP: 0033:0x7feeb350abd9 [ 208.165021][T13289] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 208.184646][T13289] RSP: 002b:00007feeb278c048 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 208.193099][T13289] RAX: ffffffffffffffda RBX: 00007feeb3698f60 RCX: 00007feeb350abd9 [ 208.201081][T13289] RDX: 00000000000020c8 RSI: 00000000200012c0 RDI: 0000000000000003 [ 208.209060][T13289] RBP: 00007feeb278c0a0 R08: 0000000000000000 R09: 0000000000000027 [ 208.217044][T13289] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000001 [ 208.225046][T13289] R13: 000000000000000b R14: 00007feeb3698f60 R15: 00007ffc052b5828 [ 208.233035][T13289] [ 208.298379][T13292] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13292 comm=syz.3.3151 [ 208.317467][T13292] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3151'. [ 208.329846][ T3159] kernel write not supported for file /vcsa1 (pid: 3159 comm: kworker/1:3) [ 208.340896][T13294] sch_tbf: burst 0 is lower than device lo mtu (11337746) ! [ 208.379153][T13296] loop2: detected capacity change from 0 to 2048 [ 208.397240][T13294] smc: ib device syz2 ibport 2 applied user defined pnetid S [ 208.909323][T13323] loop3: detected capacity change from 0 to 2048 [ 209.064404][T13331] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=9472 sclass=netlink_route_socket pid=13331 comm=syz.3.3166 [ 209.083173][T13331] vlan2: entered promiscuous mode [ 209.088290][T13331] vlan1: entered promiscuous mode [ 209.097832][T13331] vlan1: left promiscuous mode [ 209.201090][T13336] loop3: detected capacity change from 0 to 2048 [ 209.208397][T13336] EXT4-fs (loop3): cluster size (2048) smaller than block size (4096) [ 209.324184][T13340] loop4: detected capacity change from 0 to 512 [ 209.511490][T13308] syz.2.3158 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 209.519650][T13352] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13352 comm=syz.4.3172 [ 209.522752][T13308] CPU: 1 PID: 13308 Comm: syz.2.3158 Not tainted 6.10.0-rc6-syzkaller-00212-g1dd28064d416 #0 [ 209.535921][T13352] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3172'. [ 209.545037][T13308] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 209.545058][T13308] Call Trace: [ 209.545068][T13308] [ 209.545082][T13308] dump_stack_lvl+0xf2/0x150 [ 209.545125][T13308] dump_stack+0x15/0x20 [ 209.571517][ T3162] kernel write not supported for file /vcsa1 (pid: 3162 comm: kworker/0:5) [ 209.575306][T13308] dump_header+0x83/0x2d0 [ 209.575378][T13308] oom_kill_process+0x33e/0x4c0 [ 209.575404][T13308] out_of_memory+0x9af/0xbe0 [ 209.575431][T13308] mem_cgroup_out_of_memory+0x13e/0x190 [ 209.607710][T13308] try_charge_memcg+0x745/0xcd0 [ 209.612621][T13308] ? _raw_spin_unlock+0x26/0x50 [ 209.617530][T13308] ? radix_tree_lookup+0xf9/0x150 [ 209.622594][T13308] mem_cgroup_swapin_charge_folio+0x107/0x1a0 [ 209.628761][T13308] __read_swap_cache_async+0x2b9/0x520 [ 209.634342][T13308] swap_cluster_readahead+0x380/0x3f0 [ 209.639779][T13308] swapin_readahead+0xe2/0x7a0 [ 209.644564][T13308] ? __filemap_get_folio+0x420/0x5b0 [ 209.649865][T13308] ? swap_cache_get_folio+0x6e/0x210 [ 209.655328][T13308] do_swap_page+0x3bc/0x1840 [ 209.659977][T13308] ? cgroup_rstat_updated+0x99/0x550 [ 209.665281][T13308] ? __rcu_read_lock+0x36/0x50 [ 209.670087][T13308] handle_mm_fault+0x809/0x2a80 [ 209.674985][T13308] ? mas_walk+0x204/0x320 [ 209.679380][T13308] exc_page_fault+0x3b9/0x650 [ 209.684086][T13308] asm_exc_page_fault+0x26/0x30 [ 209.688951][T13308] RIP: 0033:0x7feeb33ea168 [ 209.693449][T13308] Code: 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 84 00 00 00 00 00 41 b8 01 00 00 00 41 89 db 89 de 8d 7b 04 89 d8 89 c1 81 e1 ff 1f 00 00 <49> 8b 14 cf 48 39 f2 0f 84 5f ff ff ff 48 85 d2 0f 84 d2 01 00 00 [ 209.713181][T13308] RSP: 002b:00007ffc052b5840 EFLAGS: 00010202 [ 209.719284][T13308] RAX: 000000008406481a RBX: ffffffff8406481a RCX: 000000000000081a [ 209.727259][T13308] RDX: 00007feeb2d941e0 RSI: 000000008406481a RDI: 000000008406481e [ 209.735321][T13308] RBP: 00007feeb41ca720 R08: 0000000000000001 R09: 00007feeb2d94000 [ 209.743387][T13308] R10: 0000000000000008 R11: 000000008406481a R12: ffffffff840640f6 [ 209.751362][T13308] R13: 00007feeb3698ff8 R14: 000000000000003c R15: 00007feeb3685000 [ 209.759351][T13308] ? __netlink_lookup+0x1e6/0x290 [ 209.764469][T13308] ? netlink_seq_show+0x6a/0x200 [ 209.769459][T13308] [ 209.773524][T13308] memory: usage 307200kB, limit 307200kB, failcnt 420 [ 209.780307][T13308] memory+swap: usage 307432kB, limit 9007199254740988kB, failcnt 0 [ 209.788244][T13308] kmem: usage 307172kB, limit 9007199254740988kB, failcnt 0 [ 209.795675][T13308] Memory cgroup stats for /syz2: [ 209.795863][T13308] cache 8192 [ 209.804003][T13308] rss 20480 [ 209.807117][T13308] shmem 0 [ 209.810137][T13308] mapped_file 8192 [ 209.813883][T13308] dirty 4096 [ 209.817082][T13308] writeback 0 [ 209.820439][T13308] workingset_refault_anon 152 [ 209.825289][T13308] workingset_refault_file 299 [ 209.829968][T13308] swap 237568 [ 209.833289][T13308] swapcached 20480 [ 209.837123][T13308] pgpgin 147039 [ 209.840610][T13308] pgpgout 147032 [ 209.844188][T13308] pgfault 168569 [ 209.847742][T13308] pgmajfault 112 [ 209.851294][T13308] inactive_anon 0 [ 209.854988][T13308] active_anon 0 [ 209.858568][T13308] inactive_file 0 [ 209.862195][T13308] active_file 0 [ 209.865682][T13308] unevictable 0 [ 209.869150][T13308] hierarchical_memory_limit 314572800 [ 209.874540][T13308] hierarchical_memsw_limit 9223372036854771712 [ 209.880706][T13308] total_cache 8192 [ 209.884463][T13308] total_rss 20480 [ 209.888112][T13308] total_shmem 0 [ 209.891563][T13308] total_mapped_file 8192 [ 209.895857][T13308] total_dirty 4096 [ 209.899628][T13308] total_writeback 0 [ 209.903467][T13308] total_workingset_refault_anon 152 [ 209.908681][T13308] total_workingset_refault_file 299 [ 209.913962][T13308] total_swap 237568 [ 209.917823][T13308] total_swapcached 20480 [ 209.922056][T13308] total_pgpgin 147039 [ 209.926052][T13308] total_pgpgout 147032 [ 209.930248][T13308] total_pgfault 168569 [ 209.934417][T13308] total_pgmajfault 112 [ 209.938490][T13308] total_inactive_anon 0 [ 209.942659][T13308] total_active_anon 0 [ 209.946654][T13308] total_inactive_file 0 [ 209.950815][T13308] total_active_file 0 [ 209.954807][T13308] total_unevictable 0 [ 209.958965][T13308] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.3158,pid=13308,uid=0 [ 209.974029][T13308] Memory cgroup out of memory: Killed process 13308 (syz.2.3158) total-vm:82932kB, anon-rss:452kB, file-rss:9904kB, shmem-rss:0kB, UID:0 pgtables:96kB oom_score_adj:1000 [ 209.992673][ T3159] net_ratelimit: 40 callbacks suppressed [ 209.992691][ T3159] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 210.069405][T13354] loop3: detected capacity change from 0 to 2048 [ 210.093699][T13354] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 210.143654][ T3159] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 210.214717][T13316] Cannot find add_set index 0 as target [ 210.251065][ T29] audit: type=1400 audit(1720267421.677:1624): avc: denied { name_bind } for pid=13362 comm="syz.1.3178" src=768 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hi_reserved_port_t tclass=sctp_socket permissive=1 [ 210.293101][ T29] audit: type=1400 audit(1720267421.707:1625): avc: denied { lock } for pid=13366 comm="syz.2.3177" path="socket:[55509]" dev="sockfs" ino=55509 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 210.317822][ T29] audit: type=1400 audit(1720267421.707:1626): avc: denied { connect } for pid=13366 comm="syz.2.3177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 210.338793][T13374] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3182'. [ 210.362211][T13378] loop3: detected capacity change from 0 to 1764 [ 210.385942][T13378] syzkaller1: entered promiscuous mode [ 210.391552][T13378] syzkaller1: entered allmulticast mode [ 210.413709][T13378] dccp_invalid_packet: P.type (CLOSE) not Data || [Data]Ack, while P.X == 0 [ 210.497269][ T3171] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 210.520938][T13394] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 210.529334][T13394] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 210.530087][ T29] audit: type=1400 audit(1720267421.967:1627): avc: denied { append } for pid=13396 comm="syz.2.3191" name="sg0" dev="devtmpfs" ino=111 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 210.564517][T13394] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 210.573447][T13394] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 210.602471][T13403] loop0: detected capacity change from 0 to 512 [ 210.611282][T13403] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2234: inode #15: comm syz.0.3193: corrupted in-inode xattr: invalid ea_ino [ 210.627022][T13403] EXT4-fs error (device loop0): ext4_orphan_get:1399: comm syz.0.3193: couldn't read orphan inode 15 (err -117) [ 210.637473][T13405] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13405 comm=syz.1.3189 [ 210.652269][T13397] FAULT_INJECTION: forcing a failure. [ 210.652269][T13397] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 210.665436][T13397] CPU: 1 PID: 13397 Comm: syz.2.3191 Not tainted 6.10.0-rc6-syzkaller-00212-g1dd28064d416 #0 [ 210.675732][T13397] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 210.685901][T13397] Call Trace: [ 210.689188][T13397] [ 210.692135][T13397] dump_stack_lvl+0xf2/0x150 [ 210.696748][T13397] dump_stack+0x15/0x20 [ 210.700934][T13397] should_fail_ex+0x229/0x230 [ 210.705771][T13397] should_fail+0xb/0x10 [ 210.710012][T13397] should_fail_usercopy+0x1a/0x20 [ 210.715071][T13397] fpu__restore_sig+0x11a/0xaf0 [ 210.720031][T13397] ? copy_fpstate_to_sigframe+0x61d/0x720 [ 210.725780][T13397] restore_sigcontext+0x1b5/0x220 [ 210.730909][T13397] __do_sys_rt_sigreturn+0xc5/0x150 [ 210.736128][T13397] x64_sys_call+0x28f3/0x2d70 [ 210.740827][T13397] do_syscall_64+0xc9/0x1c0 [ 210.745395][T13397] ? clear_bhb_loop+0x55/0xb0 [ 210.750162][T13397] ? clear_bhb_loop+0x55/0xb0 [ 210.754911][T13397] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.760816][T13397] RIP: 0033:0x7feeb350960e [ 210.765262][T13397] Code: 24 30 48 89 44 24 20 75 93 44 89 54 24 0c e8 79 8d 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 <0f> 05 48 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 cc 8d 02 00 [ 210.784963][T13397] RSP: 002b:00007feeb278bb80 EFLAGS: 00000293 [ 210.791092][T13397] RAX: 0000000000000101 RBX: 0000000000000000 RCX: 00007feeb3509610 [ 210.799072][T13397] RDX: 0000000000000000 RSI: 00007feeb278bc20 RDI: 00000000ffffff9c [ 210.803165][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 210.807099][T13397] RBP: 00007feeb278bc20 R08: 0000000000000000 R09: 002367732f766564 [ 210.823277][T13397] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 210.823294][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 210.839495][T13397] R13: 000000000000000b R14: 00007feeb3698f60 R15: 00007ffc052b5828 [ 210.847491][T13397] [ 210.852010][T13405] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3189'. [ 210.868037][ T24] kernel write not supported for file /vcsa1 (pid: 24 comm: kworker/1:0) [ 210.917449][T13421] loop3: detected capacity change from 0 to 512 [ 210.925601][T13421] EXT4-fs (loop3): unsupported inode size: 0 [ 210.931770][T13421] EXT4-fs (loop3): blocksize: 2048 [ 211.014575][T13434] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3203'. [ 211.056156][T13438] FAULT_INJECTION: forcing a failure. [ 211.056156][T13438] name failslab, interval 1, probability 0, space 0, times 0 [ 211.065072][T13440] x_tables: unsorted entry at hook 2 [ 211.068979][T13438] CPU: 0 PID: 13438 Comm: syz.0.3204 Not tainted 6.10.0-rc6-syzkaller-00212-g1dd28064d416 #0 [ 211.084301][T13438] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 211.094478][T13438] Call Trace: [ 211.097773][T13438] [ 211.100772][T13438] dump_stack_lvl+0xf2/0x150 [ 211.105393][T13438] dump_stack+0x15/0x20 [ 211.109661][T13438] should_fail_ex+0x229/0x230 [ 211.114403][T13438] ? __get_vm_area_node+0xf7/0x1b0 [ 211.119554][T13438] __should_failslab+0x92/0xa0 [ 211.124367][T13438] should_failslab+0x9/0x20 [ 211.128976][T13438] kmalloc_node_trace_noprof+0x50/0x2b0 [ 211.134586][T13438] __get_vm_area_node+0xf7/0x1b0 [ 211.139550][T13438] __vmalloc_node_range_noprof+0x2eb/0xef0 [ 211.145390][T13438] ? bpf_prog_alloc_no_stats+0x49/0x290 [ 211.151010][T13438] ? mntput+0x49/0x70 [ 211.155056][T13438] ? path_openat+0x1a6f/0x1fa0 [ 211.159855][T13438] ? _parse_integer_limit+0x167/0x180 [ 211.165254][T13438] ? _parse_integer+0x27/0x30 [ 211.169944][T13438] ? bpf_prog_alloc_no_stats+0x49/0x290 [ 211.175656][T13438] __vmalloc_noprof+0x5e/0x70 [ 211.180385][T13438] ? bpf_prog_alloc_no_stats+0x49/0x290 [ 211.185955][T13438] bpf_prog_alloc_no_stats+0x49/0x290 [ 211.191385][T13438] ? bpf_prog_alloc+0x28/0x150 [ 211.196186][T13438] bpf_prog_alloc+0x3a/0x150 [ 211.200879][T13438] bpf_prog_create_from_user+0x73/0x240 [ 211.206528][T13438] ? copy_bpf_fprog_from_user+0x237/0x240 [ 211.212373][T13438] fanout_set_data+0x1d7/0x330 [ 211.217313][T13438] packet_setsockopt+0x6e7/0xfd0 [ 211.222331][T13438] ? __pfx_packet_setsockopt+0x10/0x10 [ 211.227878][T13438] __sys_setsockopt+0x1d8/0x250 [ 211.232754][T13438] __x64_sys_setsockopt+0x66/0x80 [ 211.237847][T13438] x64_sys_call+0x1183/0x2d70 [ 211.243055][T13438] do_syscall_64+0xc9/0x1c0 [ 211.247655][T13438] ? clear_bhb_loop+0x55/0xb0 [ 211.252416][T13438] ? clear_bhb_loop+0x55/0xb0 [ 211.257116][T13438] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.263128][T13438] RIP: 0033:0x7f33083f9bd9 [ 211.267635][T13438] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 211.287264][T13438] RSP: 002b:00007f330767b048 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 211.295698][T13438] RAX: ffffffffffffffda RBX: 00007f3308587f60 RCX: 00007f33083f9bd9 [ 211.303856][T13438] RDX: 0000000000000016 RSI: 0000000000000107 RDI: 0000000000000003 [ 211.311837][T13438] RBP: 00007f330767b0a0 R08: 0000000000000010 R09: 0000000000000000 [ 211.319824][T13438] R10: 00000000200002c0 R11: 0000000000000246 R12: 0000000000000001 [ 211.327999][T13438] R13: 000000000000000b R14: 00007f3308587f60 R15: 00007ffe3d1c8ac8 [ 211.336022][T13438] [ 211.339606][T13438] syz.0.3204: vmalloc error: size 4096, vm_struct allocation failed, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=syz0,mems_allowed=0 [ 211.355797][T13438] CPU: 0 PID: 13438 Comm: syz.0.3204 Not tainted 6.10.0-rc6-syzkaller-00212-g1dd28064d416 #0 [ 211.366069][T13438] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 211.376168][T13438] Call Trace: [ 211.379479][T13438] [ 211.382418][T13438] dump_stack_lvl+0xf2/0x150 [ 211.387047][T13438] dump_stack+0x15/0x20 [ 211.391326][T13438] warn_alloc+0x145/0x1b0 [ 211.395739][T13438] __vmalloc_node_range_noprof+0x310/0xef0 [ 211.401633][T13438] ? mntput+0x49/0x70 [ 211.405646][T13438] ? path_openat+0x1a6f/0x1fa0 [ 211.410429][T13438] ? _parse_integer_limit+0x167/0x180 [ 211.415863][T13438] ? _parse_integer+0x27/0x30 [ 211.420646][T13438] ? bpf_prog_alloc_no_stats+0x49/0x290 [ 211.426235][T13438] __vmalloc_noprof+0x5e/0x70 [ 211.432259][T13438] ? bpf_prog_alloc_no_stats+0x49/0x290 [ 211.437866][T13438] bpf_prog_alloc_no_stats+0x49/0x290 [ 211.443261][T13438] ? bpf_prog_alloc+0x28/0x150 [ 211.448166][T13438] bpf_prog_alloc+0x3a/0x150 [ 211.452777][T13438] bpf_prog_create_from_user+0x73/0x240 [ 211.458435][T13438] ? copy_bpf_fprog_from_user+0x237/0x240 [ 211.464272][T13438] fanout_set_data+0x1d7/0x330 [ 211.469097][T13438] packet_setsockopt+0x6e7/0xfd0 [ 211.474141][T13438] ? __pfx_packet_setsockopt+0x10/0x10 [ 211.480152][T13438] __sys_setsockopt+0x1d8/0x250 [ 211.485112][T13438] __x64_sys_setsockopt+0x66/0x80 [ 211.490301][T13438] x64_sys_call+0x1183/0x2d70 [ 211.494997][T13438] do_syscall_64+0xc9/0x1c0 [ 211.499525][T13438] ? clear_bhb_loop+0x55/0xb0 [ 211.504227][T13438] ? clear_bhb_loop+0x55/0xb0 [ 211.508947][T13438] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.514931][T13438] RIP: 0033:0x7f33083f9bd9 [ 211.519379][T13438] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 211.539216][T13438] RSP: 002b:00007f330767b048 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 211.547832][T13438] RAX: ffffffffffffffda RBX: 00007f3308587f60 RCX: 00007f33083f9bd9 [ 211.555913][T13438] RDX: 0000000000000016 RSI: 0000000000000107 RDI: 0000000000000003 [ 211.564047][T13438] RBP: 00007f330767b0a0 R08: 0000000000000010 R09: 0000000000000000 [ 211.572114][T13438] R10: 00000000200002c0 R11: 0000000000000246 R12: 0000000000000001 [ 211.580100][T13438] R13: 000000000000000b R14: 00007f3308587f60 R15: 00007ffe3d1c8ac8 [ 211.588161][T13438] [ 211.592129][T13438] Mem-Info: [ 211.595360][T13438] active_anon:135 inactive_anon:5716 isolated_anon:0 [ 211.595360][T13438] active_file:3842 inactive_file:8800 isolated_file:0 [ 211.595360][T13438] unevictable:0 dirty:74 writeback:0 [ 211.595360][T13438] slab_reclaimable:2932 slab_unreclaimable:22424 [ 211.595360][T13438] mapped:13679 shmem:2636 pagetables:581 [ 211.595360][T13438] sec_pagetables:0 bounce:0 [ 211.595360][T13438] kernel_misc_reclaimable:0 [ 211.595360][T13438] free:1841369 free_pcp:62095 free_cma:0 [ 211.641355][T13438] Node 0 active_anon:516kB inactive_anon:22904kB active_file:15360kB inactive_file:35256kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:54716kB dirty:336kB writeback:0kB shmem:10588kB writeback_tmp:0kB kernel_stack:3888kB pagetables:2332kB sec_pagetables:0kB all_unreclaimable? no [ 211.669839][T13438] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 211.696793][T13438] lowmem_reserve[]: 0 2874 7852 0 [ 211.702057][T13438] Node 0 DMA32 free:2957056kB boost:0kB min:4144kB low:7084kB high:10024kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2960692kB mlocked:0kB bounce:0kB free_pcp:3636kB local_pcp:96kB free_cma:0kB [ 211.730953][T13438] lowmem_reserve[]: 0 0 4978 0 [ 211.736231][T13438] Node 0 Normal free:4401112kB boost:0kB min:7180kB low:12276kB high:17372kB reserved_highatomic:0KB active_anon:516kB inactive_anon:22904kB active_file:15360kB inactive_file:35256kB unevictable:0kB writepending:336kB present:5242880kB managed:5098208kB mlocked:0kB bounce:0kB free_pcp:236536kB local_pcp:74756kB free_cma:0kB [ 211.772777][T13438] lowmem_reserve[]: 0 0 0 0 [ 211.777338][T13438] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 211.790164][T13438] Node 0 DMA32: 2*4kB (M) 1*8kB (M) 3*16kB (M) 4*32kB (M) 3*64kB (M) 3*128kB (M) 2*256kB (M) 3*512kB (M) 3*1024kB (M) 1*2048kB (M) 720*4096kB (M) = 2957056kB [ 211.806319][T13438] Node 0 Normal: 181*4kB (UM) 656*8kB (UME) 414*16kB (UME) 379*32kB (UME) 318*64kB (UME) 132*128kB (UME) 70*256kB (UM) 34*512kB (UME) 29*1024kB (UME) 17*2048kB (UME) 1035*4096kB (UM) = 4401172kB [ 211.825792][T13438] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 211.835433][T13438] 15560 total pagecache pages [ 211.840143][T13438] 260 pages in swap cache [ 211.844663][T13438] Free swap = 64600kB [ 211.848756][T13438] Total swap = 124996kB [ 211.853170][T13438] 2097051 pages RAM [ 211.856991][T13438] 0 pages HighMem/MovableOnly [ 211.861744][T13438] 78486 pages reserved [ 211.894581][T13457] loop4: detected capacity change from 0 to 512 [ 211.916076][T13462] usb usb1: usbfs: process 13462 (syz.0.3208) did not claim interface 0 before use [ 211.928084][T13457] ext4 filesystem being mounted at /126/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 211.929262][T13462] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3208'. [ 211.951290][T13462] netlink: 'syz.0.3208': attribute type 10 has an invalid length. [ 211.980476][T13462] 8021q: adding VLAN 0 to HW filter on device team0 [ 211.995292][T13462] bond0: (slave team0): Enslaving as an active interface with an up link [ 212.041217][T13471] loop2: detected capacity change from 0 to 4096 [ 212.058029][ T29] audit: type=1400 audit(1720267423.487:1628): avc: denied { write } for pid=13476 comm="syz.4.3211" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 212.081842][T13477] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3214'. [ 212.084945][T13481] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3215'. [ 212.199371][T13478] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 212.224499][T13498] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3221'. [ 212.267184][ T29] audit: type=1400 audit(1720267423.697:1629): avc: denied { watch watch_reads } for pid=13502 comm="syz.2.3223" path="/32/file0/bus" dev="sysfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 212.301808][T13513] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3224'. [ 212.315566][T13513] netlink: 'syz.0.3224': attribute type 10 has an invalid length. [ 212.327738][T13503] loop2: detected capacity change from 0 to 2048 [ 212.344213][T13503] EXT4-fs error (device loop2): ext4_orphan_get:1420: comm syz.2.3223: bad orphan inode 8192 [ 212.359019][T13503] EXT4-fs: Remounting file system with no journal so ignoring journalled data option [ 212.369225][T13503] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: none. [ 212.455393][T13533] FAULT_INJECTION: forcing a failure. [ 212.455393][T13533] name failslab, interval 1, probability 0, space 0, times 0 [ 212.468125][T13533] CPU: 1 PID: 13533 Comm: syz.2.3229 Not tainted 6.10.0-rc6-syzkaller-00212-g1dd28064d416 #0 [ 212.478908][T13533] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 212.489095][T13533] Call Trace: [ 212.492649][T13533] [ 212.495674][T13533] dump_stack_lvl+0xf2/0x150 [ 212.500306][T13533] dump_stack+0x15/0x20 [ 212.504493][T13533] should_fail_ex+0x229/0x230 [ 212.509211][T13533] ? __alloc_skb+0x10b/0x300 [ 212.513822][T13533] __should_failslab+0x92/0xa0 [ 212.518648][T13533] should_failslab+0x9/0x20 [ 212.523181][T13533] kmem_cache_alloc_node_noprof+0x51/0x2b0 [ 212.529092][T13533] __alloc_skb+0x10b/0x300 [ 212.533615][T13533] alloc_skb_with_frags+0x7f/0x400 [ 212.538778][T13533] ? selinux_file_open+0x34c/0x3b0 [ 212.538811][T13533] sock_alloc_send_pskb+0x435/0x4f0 [ 212.549185][T13533] unix_dgram_sendmsg+0x472/0xfe0 [ 212.554281][T13533] ? selinux_socket_sendmsg+0x182/0x1b0 [ 212.554379][T13533] unix_seqpacket_sendmsg+0xd0/0x110 [ 212.554457][T13533] ? __pfx_unix_seqpacket_sendmsg+0x10/0x10 [ 212.554491][T13533] __sock_sendmsg+0x140/0x180 [ 212.554578][T13533] sock_write_iter+0x164/0x1b0 [ 212.580807][T13533] vfs_write+0x78f/0x900 [ 212.580844][T13533] ? __pfx_sock_write_iter+0x10/0x10 [ 212.590378][T13533] ksys_write+0xeb/0x1b0 [ 212.590416][T13533] __x64_sys_write+0x42/0x50 [ 212.599474][T13533] x64_sys_call+0x27ef/0x2d70 [ 212.604284][T13533] do_syscall_64+0xc9/0x1c0 [ 212.604366][T13533] ? clear_bhb_loop+0x55/0xb0 [ 212.604397][T13533] ? clear_bhb_loop+0x55/0xb0 [ 212.604501][T13533] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.604531][T13533] RIP: 0033:0x7feeb350abd9 [ 212.604550][T13533] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 212.604571][T13533] RSP: 002b:00007feeb278c048 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 212.604591][T13533] RAX: ffffffffffffffda RBX: 00007feeb3698f60 RCX: 00007feeb350abd9 [ 212.604605][T13533] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 212.604642][T13533] RBP: 00007feeb278c0a0 R08: 0000000000000000 R09: 0000000000000000 [ 212.604655][T13533] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 212.604668][T13533] R13: 000000000000000b R14: 00007feeb3698f60 R15: 00007ffc052b5828 [ 212.604686][T13533] [ 212.918929][ T11] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.961340][ T11] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.036922][ T11] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.099236][ T11] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.164559][T13542] chnl_net:caif_netlink_parms(): no params data found [ 213.220004][T13563] loop1: detected capacity change from 0 to 2048 [ 213.221525][ T11] bridge_slave_1: left allmulticast mode [ 213.232099][ T11] bridge_slave_1: left promiscuous mode [ 213.238002][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 213.249066][T13563] EXT4-fs error (device loop1): ext4_orphan_get:1420: comm syz.1.3239: bad orphan inode 8192 [ 213.260136][ T11] bridge_slave_0: left allmulticast mode [ 213.265987][ T11] bridge_slave_0: left promiscuous mode [ 213.271885][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.282232][T13563] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: none. [ 213.390613][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 213.409035][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 213.428659][ T11] bond0 (unregistering): Released all slaves [ 213.513630][T13542] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.520930][T13542] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.549200][T13542] bridge_slave_0: entered allmulticast mode [ 213.559075][T13542] bridge_slave_0: entered promiscuous mode [ 213.572466][T13542] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.579742][T13542] bridge0: port 2(bridge_slave_1) entered disabled state [ 213.587281][T13542] bridge_slave_1: entered allmulticast mode [ 213.602044][T13542] bridge_slave_1: entered promiscuous mode [ 213.626242][ T11] hsr_slave_0: left promiscuous mode [ 213.637387][ T11] hsr_slave_1: left promiscuous mode [ 213.650145][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 213.657690][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 213.675855][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 213.683411][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 213.691561][T13599] loop0: detected capacity change from 0 to 8192 [ 213.698693][ T11] veth1_macvtap: left promiscuous mode [ 213.704371][ T11] veth0_macvtap: left promiscuous mode [ 213.709895][ T11] veth1_vlan: left promiscuous mode [ 213.715264][ T11] veth0_vlan: left promiscuous mode [ 213.759155][T13599] loop0: p1 p2 p3 [ 213.778092][T13599] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3247'. [ 213.800131][T13599] FAULT_INJECTION: forcing a failure. [ 213.800131][T13599] name failslab, interval 1, probability 0, space 0, times 0 [ 213.812991][T13599] CPU: 1 PID: 13599 Comm: syz.0.3247 Not tainted 6.10.0-rc6-syzkaller-00212-g1dd28064d416 #0 [ 213.823179][T13599] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 213.833357][T13599] Call Trace: [ 213.836660][T13599] [ 213.839613][T13599] dump_stack_lvl+0xf2/0x150 [ 213.844248][T13599] dump_stack+0x15/0x20 [ 213.844280][T13627] loop4: detected capacity change from 0 to 1024 [ 213.848422][T13599] should_fail_ex+0x229/0x230 [ 213.858007][T13627] ext4: Bad value for 'init_itable' [ 213.859544][T13599] ? nft_trans_alloc+0x23/0xa0 [ 213.869568][T13599] __should_failslab+0x92/0xa0 [ 213.874344][T13599] should_failslab+0x9/0x20 [ 213.878887][T13599] __kmalloc_noprof+0xa5/0x370 [ 213.883672][T13599] nft_trans_alloc+0x23/0xa0 [ 213.888332][T13599] nf_tables_newtable+0xcb3/0xec0 [ 213.893404][T13599] nfnetlink_rcv+0xb1d/0x15b0 [ 213.898135][T13599] netlink_unicast+0x58d/0x660 [ 213.902941][T13599] netlink_sendmsg+0x5ca/0x6e0 [ 213.907810][T13599] ? __pfx_netlink_sendmsg+0x10/0x10 [ 213.913149][T13599] __sock_sendmsg+0x140/0x180 [ 213.917883][T13599] ____sys_sendmsg+0x312/0x410 [ 213.922712][T13599] __sys_sendmsg+0x1e9/0x280 [ 213.927340][T13599] __x64_sys_sendmsg+0x46/0x50 [ 213.932123][T13599] x64_sys_call+0xb25/0x2d70 [ 213.936735][T13599] do_syscall_64+0xc9/0x1c0 [ 213.941316][T13599] ? clear_bhb_loop+0x55/0xb0 [ 213.946010][T13599] ? clear_bhb_loop+0x55/0xb0 [ 213.950867][T13599] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.956767][T13599] RIP: 0033:0x7f33083f9bd9 [ 213.961212][T13599] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 213.980889][T13599] RSP: 002b:00007f330767b048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 213.989589][T13599] RAX: ffffffffffffffda RBX: 00007f3308587f60 RCX: 00007f33083f9bd9 [ 213.997685][T13599] RDX: 0000000000000000 RSI: 0000000020000940 RDI: 0000000000000006 [ 214.005766][T13599] RBP: 00007f330767b0a0 R08: 0000000000000000 R09: 0000000000000000 [ 214.013777][T13599] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 214.021825][T13599] R13: 000000000000000b R14: 00007f3308587f60 R15: 00007ffe3d1c8ac8 [ 214.029798][T13599] [ 214.071168][T13628] 9pnet_fd: Insufficient options for proto=fd [ 214.101354][ T11] team0 (unregistering): Port device team_slave_1 removed [ 214.114045][ T11] team0 (unregistering): Port device team_slave_0 removed [ 214.161583][T13542] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 214.171429][T13633] tipc: Enabling of bearer rejected, failed to enable media [ 214.185916][T13542] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 214.217599][T13643] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=13643 comm=syz.4.3264 [ 214.217791][T13542] team0: Port device team_slave_0 added [ 214.230513][T13643] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=2569 sclass=netlink_tcpdiag_socket pid=13643 comm=syz.4.3264 [ 214.250197][T13643] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=17 sclass=netlink_tcpdiag_socket pid=13643 comm=syz.4.3264 [ 214.270588][T13542] team0: Port device team_slave_1 added [ 214.312152][T13542] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 214.319288][T13542] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 214.345802][T13542] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 214.375542][T13653] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3267'. [ 214.389041][T13653] erspan0: entered promiscuous mode [ 214.394561][T13653] macvtap1: entered promiscuous mode [ 214.400089][T13653] macvtap1: entered allmulticast mode [ 214.405715][T13653] erspan0: entered allmulticast mode [ 214.416281][T13542] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 214.423320][T13542] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 214.444430][T13657] loop0: detected capacity change from 0 to 512 [ 214.449527][T13542] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 214.477889][T13657] EXT4-fs: Ignoring removed i_version option [ 214.484050][T13657] EXT4-fs: Ignoring removed nobh option [ 214.490306][T13657] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 214.506228][T13657] EXT4-fs (loop0): 1 truncate cleaned up [ 214.513538][T13660] netlink: 'syz.1.3270': attribute type 4 has an invalid length. [ 214.530018][T13542] hsr_slave_0: entered promiscuous mode [ 214.543350][T13542] hsr_slave_1: entered promiscuous mode [ 214.564143][T13664] loop1: detected capacity change from 0 to 512 [ 214.611116][T13664] EXT4-fs warning (device loop1): ext4_multi_mount_protect:398: Unable to create kmmpd thread for loop1. [ 214.699644][T13675] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1547 sclass=netlink_route_socket pid=13675 comm=syz.3.3274 [ 214.721152][T13675] netlink: 'syz.3.3274': attribute type 9 has an invalid length. [ 214.745910][T13675] bond0: entered promiscuous mode [ 214.751083][T13675] bond_slave_0: entered promiscuous mode [ 214.757101][T13675] bond_slave_1: entered promiscuous mode [ 214.763844][T13675] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 214.774994][T13675] bond0: left promiscuous mode [ 214.779812][T13675] bond_slave_0: left promiscuous mode [ 214.786085][T13675] bond_slave_1: left promiscuous mode [ 214.819766][ T29] audit: type=1400 audit(1720267426.247:1630): avc: denied { mount } for pid=13682 comm="syz.1.3277" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 214.860230][ T29] audit: type=1326 audit(1720267426.277:1631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13655 comm="syz.0.3269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33083f9bd9 code=0x7ffc0000 [ 214.883804][ T29] audit: type=1326 audit(1720267426.277:1632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13655 comm="syz.0.3269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33083f9bd9 code=0x7ffc0000 [ 214.907546][ T29] audit: type=1326 audit(1720267426.277:1633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13655 comm="syz.0.3269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=35 compat=0 ip=0x7f33083f9bd9 code=0x7ffc0000 [ 214.988916][T13695] program syz.3.3281 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 214.999223][T13690] net_ratelimit: 239 callbacks suppressed [ 214.999241][T13690] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 215.013480][T13690] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 215.031389][T13690] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 215.040205][T13690] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 215.050735][T13697] tipc: Started in network mode [ 215.053242][T13690] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 215.055683][T13697] tipc: Node identity aaaaaaaaaa41, cluster identity 4711 [ 215.071465][T13697] tipc: Enabled bearer , priority 10 [ 215.080652][T13686] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 215.106547][ T3162] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 215.111091][T13542] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 215.132578][T13542] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 215.142522][T13542] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 215.154205][T13542] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 215.238492][T13711] batadv0: entered promiscuous mode [ 215.249332][T13711] batadv0: left promiscuous mode [ 215.324302][T13542] 8021q: adding VLAN 0 to HW filter on device bond0 [ 215.346035][ T3979] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 215.358751][T13542] 8021q: adding VLAN 0 to HW filter on device team0 [ 215.370155][ T3979] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.377311][ T3979] bridge0: port 1(bridge_slave_0) entered forwarding state [ 215.397367][ T3979] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.404572][ T3979] bridge0: port 2(bridge_slave_1) entered forwarding state [ 215.426544][T13542] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 215.437117][T13542] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 215.514564][T13542] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 215.546418][T13742] FAULT_INJECTION: forcing a failure. [ 215.546418][T13742] name failslab, interval 1, probability 0, space 0, times 0 [ 215.559122][T13742] CPU: 0 PID: 13742 Comm: syz.1.3300 Not tainted 6.10.0-rc6-syzkaller-00212-g1dd28064d416 #0 [ 215.569384][T13742] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 215.579492][T13742] Call Trace: [ 215.582788][T13742] [ 215.585733][T13742] dump_stack_lvl+0xf2/0x150 [ 215.590345][T13742] dump_stack+0x15/0x20 [ 215.594576][T13742] should_fail_ex+0x229/0x230 [ 215.599291][T13742] ? tcf_pedit_init+0x41d/0x8e0 [ 215.604192][T13742] __should_failslab+0x92/0xa0 [ 215.609148][T13742] should_failslab+0x9/0x20 [ 215.613712][T13742] kmalloc_trace_noprof+0x4b/0x2a0 [ 215.618917][T13742] tcf_pedit_init+0x41d/0x8e0 [ 215.623670][T13742] tcf_action_init_1+0x339/0x490 [ 215.628616][T13742] tcf_action_init+0x1a0/0x530 [ 215.633410][T13742] tc_ctl_action+0x292/0x840 [ 215.638061][T13742] ? __pfx_tc_ctl_action+0x10/0x10 [ 215.643182][T13742] rtnetlink_rcv_msg+0x85e/0x910 [ 215.648201][T13742] ? memcg_list_lru_alloc+0xd2/0x740 [ 215.653606][T13742] ? mod_objcg_state+0x2e2/0x4e0 [ 215.658633][T13742] ? xas_load+0x3ae/0x3d0 [ 215.662981][T13742] ? skb_release_data+0x583/0x5a0 [ 215.668046][T13742] ? kmem_cache_free+0xd8/0x280 [ 215.673134][T13742] ? nlmon_xmit+0x51/0x60 [ 215.677498][T13742] ? __kfree_skb+0x102/0x150 [ 215.682164][T13742] ? consume_skb+0x57/0x180 [ 215.686734][T13742] ? nlmon_xmit+0x51/0x60 [ 215.691090][T13742] ? dev_hard_start_xmit+0x3c1/0x3f0 [ 215.696430][T13742] ? __dev_queue_xmit+0xb21/0x1e50 [ 215.701601][T13742] ? ref_tracker_free+0x3a5/0x410 [ 215.706648][T13742] netlink_rcv_skb+0x12c/0x230 [ 215.711431][T13742] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 215.717081][T13742] rtnetlink_rcv+0x1c/0x30 [ 215.721513][T13742] netlink_unicast+0x58d/0x660 [ 215.726296][T13742] netlink_sendmsg+0x5ca/0x6e0 [ 215.731166][T13742] ? __pfx_netlink_sendmsg+0x10/0x10 [ 215.736713][T13742] __sock_sendmsg+0x140/0x180 [ 215.741436][T13742] ____sys_sendmsg+0x312/0x410 [ 215.746223][T13742] __sys_sendmsg+0x1e9/0x280 [ 215.750978][T13742] __x64_sys_sendmsg+0x46/0x50 [ 215.755781][T13742] x64_sys_call+0xb25/0x2d70 [ 215.760419][T13742] do_syscall_64+0xc9/0x1c0 [ 215.764994][T13742] ? clear_bhb_loop+0x55/0xb0 [ 215.769683][T13742] ? clear_bhb_loop+0x55/0xb0 [ 215.774403][T13742] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.780379][T13742] RIP: 0033:0x7f0e62c13bd9 [ 215.784798][T13742] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 215.804627][T13742] RSP: 002b:00007f0e61e95048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 215.813083][T13742] RAX: ffffffffffffffda RBX: 00007f0e62da1f60 RCX: 00007f0e62c13bd9 [ 215.821062][T13742] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000005 [ 215.829039][T13742] RBP: 00007f0e61e950a0 R08: 0000000000000000 R09: 0000000000000000 [ 215.837028][T13742] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 215.845081][T13742] R13: 000000000000000b R14: 00007f0e62da1f60 R15: 00007ffcc91cab18 [ 215.853153][T13742] [ 215.858021][T13744] FAULT_INJECTION: forcing a failure. [ 215.858021][T13744] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 215.871151][T13744] CPU: 1 PID: 13744 Comm: syz.3.3299 Not tainted 6.10.0-rc6-syzkaller-00212-g1dd28064d416 #0 [ 215.881446][T13744] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 215.891522][T13744] Call Trace: [ 215.894804][T13744] [ 215.897737][T13744] dump_stack_lvl+0xf2/0x150 [ 215.902359][T13744] dump_stack+0x15/0x20 [ 215.906545][T13744] should_fail_ex+0x229/0x230 [ 215.911328][T13744] should_fail+0xb/0x10 [ 215.915502][T13744] should_fail_usercopy+0x1a/0x20 [ 215.920663][T13744] _copy_from_iter+0xd3/0xb00 [ 215.925407][T13744] ? __alloc_skb+0x1ad/0x300 [ 215.930002][T13744] ? kmalloc_reserve+0x16e/0x190 [ 215.934990][T13744] ? __build_skb_around+0x196/0x1f0 [ 215.940272][T13744] ? __virt_addr_valid+0x1dd/0x240 [ 215.945470][T13744] ? __check_object_size+0x35b/0x510 [ 215.950763][T13744] tipc_msg_build+0x2db/0x820 [ 215.955464][T13744] __tipc_sendstream+0x672/0xb20 [ 215.960448][T13744] ? __pfx_woken_wake_function+0x10/0x10 [ 215.966127][T13744] ? __pfx_tipc_sendstream+0x10/0x10 [ 215.971507][T13744] tipc_sendstream+0x3e/0x60 [ 215.976126][T13744] __sock_sendmsg+0x140/0x180 [ 215.980825][T13744] ____sys_sendmsg+0x312/0x410 [ 215.985647][T13744] __sys_sendmsg+0x1e9/0x280 [ 215.990282][T13744] __x64_sys_sendmsg+0x46/0x50 [ 215.995123][T13744] x64_sys_call+0xb25/0x2d70 [ 215.999740][T13744] do_syscall_64+0xc9/0x1c0 [ 216.004288][T13744] ? clear_bhb_loop+0x55/0xb0 [ 216.009026][T13744] ? clear_bhb_loop+0x55/0xb0 [ 216.013825][T13744] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.019785][T13744] RIP: 0033:0x7f19a6926bd9 [ 216.024210][T13744] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 216.043882][T13744] RSP: 002b:00007f19a5b87048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 216.052353][T13744] RAX: ffffffffffffffda RBX: 00007f19a6ab5038 RCX: 00007f19a6926bd9 [ 216.060333][T13744] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000005 [ 216.068352][T13744] RBP: 00007f19a5b870a0 R08: 0000000000000000 R09: 0000000000000000 [ 216.076333][T13744] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 216.084396][T13744] R13: 000000000000006e R14: 00007f19a6ab5038 R15: 00007ffd1510e258 [ 216.092383][T13744] [ 216.097826][ T8511] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 216.106549][ T8511] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 216.133144][ T3162] tipc: Node number set to 15444650 [ 216.161016][T13542] veth0_vlan: entered promiscuous mode [ 216.182656][T13542] veth1_vlan: entered promiscuous mode [ 216.206857][T13542] veth0_macvtap: entered promiscuous mode [ 216.218992][T13542] veth1_macvtap: entered promiscuous mode [ 216.231628][T13542] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 216.242158][T13542] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.252072][T13542] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 216.262524][T13542] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.272417][T13542] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 216.283233][T13542] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.293418][T13542] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 216.303903][T13542] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.313867][T13542] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 216.324315][T13542] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.334404][T13542] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 216.344886][T13542] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.354719][T13542] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 216.365270][T13542] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.375129][T13542] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 216.385755][T13542] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.395611][T13542] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 216.406059][T13542] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.418862][T13542] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 216.426317][T13759] __nla_validate_parse: 4 callbacks suppressed [ 216.426331][T13759] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3303'. [ 216.446004][T13542] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 216.456708][T13542] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.466738][T13542] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 216.477614][T13542] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.487744][T13542] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 216.498217][T13542] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.508084][T13542] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 216.518545][T13542] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.527046][T13765] loop3: detected capacity change from 0 to 2048 [ 216.528608][T13542] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 216.545778][T13542] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.555829][T13542] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 216.566415][T13542] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.576276][T13542] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 216.586807][T13542] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.596678][T13542] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 216.607317][T13542] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.617227][T13542] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 216.627756][T13542] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.639826][T13542] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 216.640894][T13765] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 216.648795][T13769] loop0: detected capacity change from 0 to 128 [ 216.670951][T13542] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.679813][T13542] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.688592][T13542] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.697323][T13542] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.827656][ T29] kauditd_printk_skb: 6 callbacks suppressed [ 216.827714][ T29] audit: type=1326 audit(1720267428.257:1640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13788 comm="syz.0.3310" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f33083f9bd9 code=0x0 [ 216.839462][T13793] loop2: detected capacity change from 0 to 256 [ 216.884130][T13790] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.910911][T13799] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3314'. [ 216.938834][T13801] loop1: detected capacity change from 0 to 2048 [ 216.957370][T13790] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.980453][T13801] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 217.017325][T13790] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.070909][T13790] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.098103][T13810] netlink: 'syz.1.3321': attribute type 10 has an invalid length. [ 217.119030][T13810] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 217.146419][T13810] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 217.164717][T13790] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.170408][T13810] loop1: detected capacity change from 0 to 512 [ 217.177199][T13790] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.192509][T13810] ext4: Bad value for 'barrier' [ 217.198382][T13807] Invalid ELF header magic: != ELF [ 217.200989][T13790] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.216156][T13790] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.314759][T13826] veth0_vlan: entered allmulticast mode [ 217.336882][T13826] ªªªªªª: renamed from vlan0 [ 217.467942][T13840] loop3: detected capacity change from 0 to 2048 [ 217.498502][T13840] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 217.652607][T13849] loop3: detected capacity change from 0 to 512 [ 217.846261][T13855] netlink: 'syz.1.3332': attribute type 10 has an invalid length. [ 217.854270][T13855] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3332'. [ 217.895716][T13849] EXT4-fs error (device loop3): ext4_orphan_get:1420: comm syz.3.3333: bad orphan inode 17 [ 217.938983][T13849] ext4_test_bit(bit=16, block=4) = 1 [ 217.944384][T13849] is_bad_inode(inode)=0 [ 217.948572][T13849] NEXT_ORPHAN(inode)=0 [ 217.952859][T13849] max_ino=32 [ 217.956223][T13849] i_nlink=1 [ 218.055723][ T29] audit: type=1400 audit(1720267429.487:1641): avc: denied { map } for pid=13863 comm="syz.0.3338" path="/dev/sg0" dev="devtmpfs" ino=111 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 218.079749][ T29] audit: type=1400 audit(1720267429.487:1642): avc: denied { execute } for pid=13863 comm="syz.0.3338" path="/dev/sg0" dev="devtmpfs" ino=111 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 218.184029][T13874] loop3: detected capacity change from 0 to 2048 [ 218.199457][T13874] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 218.284446][T13886] tap0: tun_chr_ioctl cmd 1075599392 [ 218.297023][T13889] veth0_vlan: entered allmulticast mode [ 218.356817][T13889] ªªªªªª: renamed from vlan0 [ 218.384791][T13899] loop0: detected capacity change from 0 to 256 [ 218.475951][T13904] loop1: detected capacity change from 0 to 2048 [ 218.537895][T13904] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 218.575262][T13929] loop0: detected capacity change from 0 to 2048 [ 218.608304][T13936] loop3: detected capacity change from 0 to 512 [ 218.628732][T13938] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=13938 comm=syz.4.3366 [ 218.646500][ T29] audit: type=1400 audit(1720267430.077:1643): avc: denied { read } for pid=13937 comm="syz.4.3366" path="socket:[57224]" dev="sockfs" ino=57224 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 218.676365][T13941] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3367'. [ 218.691167][T11601] EXT4-fs unmount: 35 callbacks suppressed [ 218.691186][T11601] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 218.706730][ T29] audit: type=1400 audit(1720267430.137:1644): avc: denied { setopt } for pid=13937 comm="syz.4.3366" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 218.736016][T13946] loop1: detected capacity change from 0 to 1024 [ 218.766314][T13946] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 218.828796][T13959] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3373'. [ 218.839419][T12231] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 218.854556][T13963] loop3: detected capacity change from 0 to 2048 [ 218.865250][T13963] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 218.882747][T13963] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 218.912382][T13974] wireguard0: entered promiscuous mode [ 218.917944][T13974] wireguard0: entered allmulticast mode [ 218.937672][T12184] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 218.970756][T13978] xt_CT: No such helper "pptp" [ 218.989566][T13978] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3378'. [ 219.028503][T13983] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3380'. [ 219.087761][T13986] program syz.2.3381 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 219.101389][T13972] Invalid ELF header magic: != ELF [ 219.218506][T14000] netlink: 'syz.2.3387': attribute type 10 has an invalid length. [ 219.226564][T14000] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3387'. [ 219.272875][T14009] loop2: detected capacity change from 0 to 1024 [ 219.280274][ T29] audit: type=1400 audit(1720267430.697:1645): avc: denied { write } for pid=13997 comm="syz.3.3386" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 219.308532][T14012] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3391'. [ 219.321450][T14009] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 219.452781][T14028] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3392'. [ 219.979045][T14036] wireguard0: entered promiscuous mode [ 219.984775][T14036] wireguard0: entered allmulticast mode [ 220.179045][T13542] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 220.212083][T14052] FAULT_INJECTION: forcing a failure. [ 220.212083][T14052] name failslab, interval 1, probability 0, space 0, times 0 [ 220.225140][T14052] CPU: 1 PID: 14052 Comm: syz.3.3401 Not tainted 6.10.0-rc6-syzkaller-00212-g1dd28064d416 #0 [ 220.235322][T14052] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 220.245557][T14052] Call Trace: [ 220.248853][T14052] [ 220.251792][T14052] dump_stack_lvl+0xf2/0x150 [ 220.256593][T14052] dump_stack+0x15/0x20 [ 220.260823][T14052] should_fail_ex+0x229/0x230 [ 220.265588][T14052] ? __kernfs_new_node+0x6a/0x380 [ 220.270659][T14052] __should_failslab+0x92/0xa0 [ 220.275437][T14052] should_failslab+0x9/0x20 [ 220.280131][T14052] kmem_cache_alloc_noprof+0x4c/0x290 [ 220.285631][T14052] __kernfs_new_node+0x6a/0x380 [ 220.290606][T14052] ? rb_insert_color+0x263/0x290 [ 220.295582][T14052] ? up_write+0x30/0xf0 [ 220.299991][T14052] ? kernfs_activate+0x256/0x270 [ 220.305111][T14052] kernfs_new_node+0xc8/0x140 [ 220.309835][T14052] __kernfs_create_file+0x49/0x180 [ 220.315068][T14052] ? __pfx_dev_attr_store+0x10/0x10 [ 220.320392][T14052] sysfs_add_file_mode_ns+0x136/0x1c0 [ 220.325844][T14052] internal_create_group+0x464/0x9b0 [ 220.331157][T14052] sysfs_create_groups+0x3c/0xe0 [ 220.336278][T14052] device_add_attrs+0x69/0x400 [ 220.341108][T14052] ? kobject_put+0x107/0x180 [ 220.345741][T14052] device_add+0x38d/0x790 [ 220.350152][T14052] netdev_register_kobject+0x100/0x230 [ 220.355731][T14052] register_netdevice+0x8b9/0xdd0 [ 220.360830][T14052] bond_newlink+0x3b/0x90 [ 220.365243][T14052] ? __pfx_bond_newlink+0x10/0x10 [ 220.370334][T14052] rtnl_newlink+0xefd/0x1690 [ 220.375017][T14052] ? security_capable+0x64/0x80 [ 220.379879][T14052] ? ns_capable+0x7d/0xb0 [ 220.384224][T14052] ? __pfx_rtnl_newlink+0x10/0x10 [ 220.389310][T14052] rtnetlink_rcv_msg+0x85e/0x910 [ 220.394282][T14052] ? memcg_list_lru_alloc+0xd2/0x740 [ 220.399620][T14052] ? ___slab_alloc+0x2b7/0x980 [ 220.404413][T14052] ? xas_load+0x3ae/0x3d0 [ 220.408867][T14052] ? skb_release_data+0x583/0x5a0 [ 220.413920][T14052] ? kmem_cache_free+0xd8/0x280 [ 220.418786][T14052] ? nlmon_xmit+0x51/0x60 [ 220.423173][T14052] ? __kfree_skb+0x102/0x150 [ 220.427811][T14052] ? consume_skb+0x57/0x180 [ 220.432359][T14052] ? nlmon_xmit+0x51/0x60 [ 220.436711][T14052] ? dev_hard_start_xmit+0x3c1/0x3f0 [ 220.442143][T14052] ? __dev_queue_xmit+0xb21/0x1e50 [ 220.447262][T14052] ? ref_tracker_free+0x3a5/0x410 [ 220.452376][T14052] netlink_rcv_skb+0x12c/0x230 [ 220.457203][T14052] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 220.462689][T14052] rtnetlink_rcv+0x1c/0x30 [ 220.467150][T14052] netlink_unicast+0x58d/0x660 [ 220.472104][T14052] netlink_sendmsg+0x5ca/0x6e0 [ 220.476891][T14052] ? __pfx_netlink_sendmsg+0x10/0x10 [ 220.482360][T14052] __sock_sendmsg+0x140/0x180 [ 220.487115][T14052] ____sys_sendmsg+0x312/0x410 [ 220.491979][T14052] __sys_sendmsg+0x1e9/0x280 [ 220.496653][T14052] __x64_sys_sendmsg+0x46/0x50 [ 220.501425][T14052] x64_sys_call+0xb25/0x2d70 [ 220.506031][T14052] do_syscall_64+0xc9/0x1c0 [ 220.510553][T14052] ? clear_bhb_loop+0x55/0xb0 [ 220.515243][T14052] ? clear_bhb_loop+0x55/0xb0 [ 220.519988][T14052] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 220.525979][T14052] RIP: 0033:0x7f19a6926bd9 [ 220.530461][T14052] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 220.550124][T14052] RSP: 002b:00007f19a5ba8048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 220.558547][T14052] RAX: ffffffffffffffda RBX: 00007f19a6ab4f60 RCX: 00007f19a6926bd9 [ 220.566532][T14052] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000004 [ 220.574514][T14052] RBP: 00007f19a5ba80a0 R08: 0000000000000000 R09: 0000000000000000 [ 220.582578][T14052] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 220.590558][T14052] R13: 000000000000000b R14: 00007f19a6ab4f60 R15: 00007ffd1510e258 [ 220.598548][T14052] [ 220.612068][ T3162] net_ratelimit: 19 callbacks suppressed [ 220.612085][ T3162] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 220.613257][T14052] bond1 (unregistered): Released all slaves [ 220.667286][ T29] audit: type=1400 audit(1720267432.087:1646): avc: denied { ioctl } for pid=14057 comm="syz.2.3400" path="socket:[58432]" dev="sockfs" ino=58432 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 220.767637][T14064] loop3: detected capacity change from 0 to 512 [ 220.830396][T14070] loop2: detected capacity change from 0 to 512 [ 220.856753][T14076] sch_tbf: burst 0 is lower than device lo mtu (14) ! [ 220.873953][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 220.984177][T14089] loop2: detected capacity change from 0 to 2048 [ 220.987282][T14091] loop0: detected capacity change from 0 to 128 [ 220.997781][T14091] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 221.008506][T14089] EXT4-fs error (device loop2): ext4_orphan_get:1420: comm syz.2.3412: bad orphan inode 8192 [ 221.019869][T14089] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 221.032207][ T6349] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 221.042360][T14089] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: none. [ 221.059186][T13542] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 221.082925][T14099] loop0: detected capacity change from 0 to 128 [ 221.189134][T14107] FAULT_INJECTION: forcing a failure. [ 221.189134][T14107] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 221.202281][T14107] CPU: 1 PID: 14107 Comm: syz.2.3419 Not tainted 6.10.0-rc6-syzkaller-00212-g1dd28064d416 #0 [ 221.212711][T14107] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 221.222843][T14107] Call Trace: [ 221.226151][T14107] [ 221.229144][T14107] dump_stack_lvl+0xf2/0x150 [ 221.233844][T14107] dump_stack+0x15/0x20 [ 221.238016][T14107] should_fail_ex+0x229/0x230 [ 221.242751][T14107] should_fail+0xb/0x10 [ 221.246933][T14107] should_fail_usercopy+0x1a/0x20 [ 221.252109][T14107] _copy_to_user+0x1e/0xa0 [ 221.256563][T14107] simple_read_from_buffer+0xa0/0x110 [ 221.261957][T14107] proc_fail_nth_read+0xfc/0x140 [ 221.267051][T14107] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 221.272678][T14107] vfs_read+0x1a2/0x6e0 [ 221.276838][T14107] ? __rcu_read_unlock+0x4e/0x70 [ 221.281814][T14107] ? __fget_files+0x1da/0x210 [ 221.286756][T14107] ksys_read+0xeb/0x1b0 [ 221.291009][T14107] __x64_sys_read+0x42/0x50 [ 221.295605][T14107] x64_sys_call+0x27e5/0x2d70 [ 221.300340][T14107] do_syscall_64+0xc9/0x1c0 [ 221.304921][T14107] ? clear_bhb_loop+0x55/0xb0 [ 221.309605][T14107] ? clear_bhb_loop+0x55/0xb0 [ 221.314352][T14107] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.320285][T14107] RIP: 0033:0x7f033d8056bc [ 221.324785][T14107] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8c 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 1f 8d 02 00 48 [ 221.344398][T14107] RSP: 002b:00007f033ca88040 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 221.352814][T14107] RAX: ffffffffffffffda RBX: 00007f033d994f60 RCX: 00007f033d8056bc [ 221.360831][T14107] RDX: 000000000000000f RSI: 00007f033ca880b0 RDI: 0000000000000005 [ 221.368842][T14107] RBP: 00007f033ca880a0 R08: 0000000000000000 R09: 0000000000000000 [ 221.376885][T14107] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 221.384877][T14107] R13: 000000000000000b R14: 00007f033d994f60 R15: 00007ffd92497eb8 [ 221.392960][T14107] [ 221.508125][T14115] __nla_validate_parse: 7 callbacks suppressed [ 221.508233][T14115] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3422'. [ 221.725946][T14116] netlink: 'syz.0.3420': attribute type 10 has an invalid length. [ 221.733860][T14116] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3420'. [ 221.744379][T14116] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 221.770270][T10715] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 221.778592][T10771] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 221.841034][T14118] netlink: 108 bytes leftover after parsing attributes in process `syz.2.3423'. [ 221.909353][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 221.922467][T14120] loop1: detected capacity change from 0 to 2048 [ 221.929119][T14124] FAULT_INJECTION: forcing a failure. [ 221.929119][T14124] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 221.942338][T14124] CPU: 0 PID: 14124 Comm: syz.3.3426 Not tainted 6.10.0-rc6-syzkaller-00212-g1dd28064d416 #0 [ 221.945470][T14122] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=14122 comm=syz.2.3424 [ 221.952503][T14124] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 221.952522][T14124] Call Trace: [ 221.966840][T14122] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=14122 comm=syz.2.3424 [ 221.975274][T14124] [ 221.975288][T14124] dump_stack_lvl+0xf2/0x150 [ 221.975324][T14124] dump_stack+0x15/0x20 [ 221.975350][T14124] should_fail_ex+0x229/0x230 [ 222.007635][T14124] should_fail+0xb/0x10 [ 222.011833][T14124] should_fail_usercopy+0x1a/0x20 [ 222.017004][T14124] _copy_from_user+0x1e/0xd0 [ 222.021702][T14124] copy_msghdr_from_user+0x54/0x2a0 [ 222.026992][T14124] __sys_sendmsg+0x17d/0x280 [ 222.031640][T14124] __x64_sys_sendmsg+0x46/0x50 [ 222.036473][T14124] x64_sys_call+0xb25/0x2d70 [ 222.041163][T14124] do_syscall_64+0xc9/0x1c0 [ 222.045762][T14124] ? clear_bhb_loop+0x55/0xb0 [ 222.050461][T14124] ? clear_bhb_loop+0x55/0xb0 [ 222.055186][T14124] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.061189][T14124] RIP: 0033:0x7f19a6926bd9 [ 222.065610][T14124] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 222.085313][T14124] RSP: 002b:00007f19a5ba8048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 222.093882][T14124] RAX: ffffffffffffffda RBX: 00007f19a6ab4f60 RCX: 00007f19a6926bd9 [ 222.102041][T14124] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000004 [ 222.110089][T14124] RBP: 00007f19a5ba80a0 R08: 0000000000000000 R09: 0000000000000000 [ 222.118232][T14124] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 222.126265][T14124] R13: 000000000000000b R14: 00007f19a6ab4f60 R15: 00007ffd1510e258 [ 222.134257][T14124] [ 222.146511][ T8508] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 222.211299][T14120] EXT4-fs error (device loop1): ext4_orphan_get:1420: comm syz.1.3425: bad orphan inode 8192 [ 222.215956][T14131] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3428'. [ 222.231368][T14120] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 222.254331][T14131] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3428'. [ 222.264448][T14120] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: none. [ 222.287222][ T29] audit: type=1400 audit(1720267433.717:1647): avc: denied { ioctl } for pid=14132 comm="syz.3.3429" path="/dev/autofs" dev="devtmpfs" ino=91 ioctlcmd=0x9374 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 222.325862][T12231] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 222.478267][T14148] loop3: detected capacity change from 0 to 512 [ 222.524224][T14148] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters [ 222.549640][T14148] EXT4-fs (loop3): Remounting filesystem read-only [ 222.556587][T14148] EXT4-fs (loop3): 1 truncate cleaned up [ 222.563952][T14148] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 222.576898][T14148] SELinux: (dev loop3, type ext4) getxattr errno 5 [ 222.586121][T14148] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 222.641986][T14164] FAULT_INJECTION: forcing a failure. [ 222.641986][T14164] name failslab, interval 1, probability 0, space 0, times 0 [ 222.654762][T14164] CPU: 1 PID: 14164 Comm: syz.0.3440 Not tainted 6.10.0-rc6-syzkaller-00212-g1dd28064d416 #0 [ 222.664981][T14164] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 222.675177][T14164] Call Trace: [ 222.678481][T14164] [ 222.681414][T14164] dump_stack_lvl+0xf2/0x150 [ 222.686024][T14164] dump_stack+0x15/0x20 [ 222.690205][T14164] should_fail_ex+0x229/0x230 [ 222.694917][T14164] ? mqprio_init+0x479/0xc30 [ 222.699713][T14164] __should_failslab+0x92/0xa0 [ 222.704577][T14164] should_failslab+0x9/0x20 [ 222.709122][T14164] __kmalloc_noprof+0xa5/0x370 [ 222.713956][T14164] mqprio_init+0x479/0xc30 [ 222.718406][T14164] ? qdisc_alloc+0x3cb/0x440 [ 222.723108][T14164] ? __pfx_mqprio_init+0x10/0x10 [ 222.728074][T14164] qdisc_create+0x6c1/0xae0 [ 222.732589][T14164] ? __nla_parse+0x40/0x60 [ 222.737166][T14164] tc_modify_qdisc+0x65f/0x1050 [ 222.742031][T14164] ? ns_capable+0x7d/0xb0 [ 222.746381][T14164] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 222.751698][T14164] rtnetlink_rcv_msg+0x85e/0x910 [ 222.756651][T14164] ? __rcu_read_unlock+0x34/0x70 [ 222.761695][T14164] ? bpf_trace_run3+0x12b/0x1d0 [ 222.766598][T14164] ? __memcg_slab_free_hook+0xc9/0x1e0 [ 222.772180][T14164] ? xas_load+0x3ae/0x3d0 [ 222.776618][T14164] ? kmem_cache_free+0xd8/0x280 [ 222.781526][T14164] ? nlmon_xmit+0x51/0x60 [ 222.785986][T14164] ? __kfree_skb+0x102/0x150 [ 222.790589][T14164] ? consume_skb+0x57/0x180 [ 222.795183][T14164] ? nlmon_xmit+0x51/0x60 [ 222.799544][T14164] ? dev_hard_start_xmit+0x3c1/0x3f0 [ 222.804941][T14164] ? __dev_queue_xmit+0xb21/0x1e50 [ 222.810088][T14164] ? ref_tracker_free+0x3a5/0x410 [ 222.815136][T14164] netlink_rcv_skb+0x12c/0x230 [ 222.819954][T14164] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 222.825471][T14164] rtnetlink_rcv+0x1c/0x30 [ 222.829898][T14164] netlink_unicast+0x58d/0x660 [ 222.834721][T14164] netlink_sendmsg+0x5ca/0x6e0 [ 222.839516][T14164] ? __pfx_netlink_sendmsg+0x10/0x10 [ 222.844824][T14164] __sock_sendmsg+0x140/0x180 [ 222.849613][T14164] ____sys_sendmsg+0x312/0x410 [ 222.854901][T14164] __sys_sendmsg+0x1e9/0x280 [ 222.859511][T14164] __x64_sys_sendmsg+0x46/0x50 [ 222.864327][T14164] x64_sys_call+0xb25/0x2d70 [ 222.869013][T14164] do_syscall_64+0xc9/0x1c0 [ 222.873531][T14164] ? clear_bhb_loop+0x55/0xb0 [ 222.878221][T14164] ? clear_bhb_loop+0x55/0xb0 [ 222.882993][T14164] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.888901][T14164] RIP: 0033:0x7f33083f9bd9 [ 222.893320][T14164] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 222.913034][T14164] RSP: 002b:00007f330767b048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 222.921719][T14164] RAX: ffffffffffffffda RBX: 00007f3308587f60 RCX: 00007f33083f9bd9 [ 222.929868][T14164] RDX: 0000000000000000 RSI: 0000000020000200 RDI: 0000000000000005 [ 222.937868][T14164] RBP: 00007f330767b0a0 R08: 0000000000000000 R09: 0000000000000000 [ 222.945930][T14164] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 222.953993][T14164] R13: 000000000000000b R14: 00007f3308587f60 R15: 00007ffe3d1c8ac8 [ 222.961993][T14164] [ 222.968250][T10715] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 222.970138][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 222.987920][T14166] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3441'. [ 222.999907][T14166] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3441'. [ 223.030491][T14172] loop3: detected capacity change from 0 to 256 [ 223.092650][T14182] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 223.106254][T10715] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 223.156982][ T29] audit: type=1400 audit(1720267434.587:1648): avc: denied { listen } for pid=14188 comm="syz.0.3450" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 223.160725][T14197] loop2: detected capacity change from 0 to 1024 [ 223.188300][T14197] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 223.236696][T13542] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 223.263318][T14206] netlink: 1 bytes leftover after parsing attributes in process `syz.0.3455'. [ 223.291324][T14207] netlink: 1 bytes leftover after parsing attributes in process `syz.0.3455'. [ 223.305157][T14206] loop0: detected capacity change from 0 to 164 [ 223.334985][T14207] ================================================================== [ 223.343209][T14207] BUG: KCSAN: data-race in _copy_from_iter / _copy_from_iter [ 223.350638][T14207] [ 223.352962][T14207] write to 0xffff888154c14000 of 4096 bytes by task 14206 on cpu 0: [ 223.360947][T14207] _copy_from_iter+0x129/0xb00 [ 223.365734][T14207] copy_page_from_iter+0x14f/0x280 [ 223.370861][T14207] process_vm_rw+0x5d6/0x8c0 [ 223.375463][T14207] __x64_sys_process_vm_writev+0x7a/0x90 [ 223.381200][T14207] x64_sys_call+0x206/0x2d70 [ 223.385804][T14207] do_syscall_64+0xc9/0x1c0 [ 223.390325][T14207] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 223.396232][T14207] [ 223.398573][T14207] write to 0xffff888154c14000 of 4096 bytes by task 14207 on cpu 1: [ 223.406568][T14207] _copy_from_iter+0x129/0xb00 [ 223.411353][T14207] copy_page_from_iter+0x14f/0x280 [ 223.416479][T14207] process_vm_rw+0x5d6/0x8c0 [ 223.421085][T14207] __x64_sys_process_vm_writev+0x7a/0x90 [ 223.426735][T14207] x64_sys_call+0x206/0x2d70 [ 223.431342][T14207] do_syscall_64+0xc9/0x1c0 [ 223.435858][T14207] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 223.441768][T14207] [ 223.444088][T14207] Reported by Kernel Concurrency Sanitizer on: [ 223.450236][T14207] CPU: 1 PID: 14207 Comm: syz.0.3455 Not tainted 6.10.0-rc6-syzkaller-00212-g1dd28064d416 #0 [ 223.460395][T14207] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 223.470455][T14207] ================================================================== [ 223.499850][T14207] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 223.624989][T14217] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3458'. [ 223.635621][T14217] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 223.648913][T14217] netlink: 'syz.3.3458': attribute type 32 has an invalid length. [ 225.674271][ T950] net_ratelimit: 13 callbacks suppressed [ 225.674291][ T950] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 226.066628][ T950] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 226.069105][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 226.145445][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 226.305123][ T950] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 227.106540][T10771] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 227.113331][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 227.823293][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 228.145663][ T3171] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 228.153369][ T950] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 230.863822][T10771] net_ratelimit: 5 callbacks suppressed [ 230.863854][T10771] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 231.263557][ T950] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 231.265700][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 232.223375][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 232.306784][ T950] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 232.309774][T10771] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog