last executing test programs: 4.472926921s ago: executing program 3 (id=3439): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, 0x0, 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f00000000c0)=ANY=[], &(0x7f00000005c0)='GPL\x00'}, 0x90) 4.024698109s ago: executing program 3 (id=3450): openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x41, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000380)='9p_protocol_dump\x00', r3}, 0x10) mount$9p_fd(0x20000000, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 2.233295926s ago: executing program 2 (id=3476): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) write$binfmt_script(r2, 0x0, 0xfffffe5d) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="3c00000010008506000000ff0100000000000000", @ANYRES32=r3, @ANYBLOB="01ff00e1c2ed00001c0012000c000100626f6e64"], 0x3c}}, 0x0) getsockname$packet(r2, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0x14) r5 = socket(0x10, 0x80002, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r6, @ANYRES32=r4], 0x28}}, 0x0) 2.199672708s ago: executing program 2 (id=3477): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x14, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x80}, {0x5, 0x3, 0x2}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}]}, 0x38}}, 0x0) 2.18681008s ago: executing program 2 (id=3478): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x14, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5, 0x3, 0x80}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}]}, 0x38}}, 0x0) 2.163313932s ago: executing program 2 (id=3480): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200800, &(0x7f0000000100)={[{@nodiscard}, {}, {@auto_da_alloc_val}, {@noblock_validity}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@norecovery}, {@acl}, {@debug}]}, 0x5, 0x57a, &(0x7f0000000a00)="$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") setxattr$trusted_overlay_upper(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x1015, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000280), 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt(r1, 0xfffffff8, 0x7ff00000, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r4, &(0x7f00000003c0)={&(0x7f0000000180)={0x2, 0x0, @local}, 0x10, 0x0}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0xb4}}, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7654}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='cdg\x00', 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) 2.085009688s ago: executing program 2 (id=3483): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000010000008500000086000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) semget$private(0x0, 0x6, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$MPTCP_PM_CMD_REMOVE(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x7c, 0x0, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x3c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xf8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xa8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x17}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x14, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x676}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4080}, 0x1) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0xffffffffffffffd8}}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c}, {0x4}}]}]}, 0x6c}}, 0x0) semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0x0, 0x1000}], 0x1, 0x0) semctl$GETZCNT(0x0, 0x0, 0x10, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r6 = inotify_init1(0x80800) ioctl$AUTOFS_IOC_EXPIRE(r0, 0x810c9365, &(0x7f00000003c0)={{0xfffff76e, 0xb0d9}, 0x100, './file0\x00'}) fcntl$setown(r6, 0x8, 0xffffffffffffffff) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = epoll_create1(0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r8, &(0x7f00000001c0)) r9 = syz_open_procfs(0x0, &(0x7f0000000140)='fdinfo/4\x00') read$char_usb(r9, &(0x7f0000000000)=""/178, 0xb2) 2.039850231s ago: executing program 2 (id=3486): sendmsg$NL80211_CMD_NOTIFY_RADAR(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000340)=ANY=[], 0xfdef) socket(0x10, 0x3, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000)={'#! ', './file0'}, 0xb) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = socket(0xa, 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000000)={0x0, {0x2, 0x4e24, @multicast2}, {0x2, 0x0, @remote}, {0x2, 0x0, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fffffd, 0x1, 0x47}) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000580)='./file1\x00', 0x40, &(0x7f0000000340), 0x1, 0x55b, &(0x7f0000000940)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2002, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305839, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x401}) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r3) socket(0x840000000002, 0x3, 0xff) socket$inet6_sctp(0xa, 0x5, 0x84) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0xa, 0x0, 0x0, 0x7fc00100}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f0000000480)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r4, 0xc0182101, &(0x7f0000000180)={r5}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x19, 0x5, &(0x7f0000000280)=ANY=[@ANYRESOCT=r0], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x49}, 0x90) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f0000002880)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r4, 0x40182103, &(0x7f0000000080)={r6, 0x3, r4, 0x5}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x1, 0x9, 0x43d, 0x35, 0xffffffffffffffff, 0xfffeffff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xffffffff, 0x5, 0x5}, 0x48) 1.399062844s ago: executing program 1 (id=3501): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB], &(0x7f00000000c0)='GPL\x00'}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0x12, 0x4, 0x8, 0xb}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)={@map=r2, r1, 0x7}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r2, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r0}, 0x20) sendmmsg$inet6(r0, &(0x7f0000000b00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000ac0)="b0", 0x18000}], 0x11}}], 0x2, 0x0) 1.185922912s ago: executing program 1 (id=3503): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0)) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xffffffffffffffff, 0x5, &(0x7f0000000000)=0x1) getgroups(0xffffff95, 0x0) 1.109374598s ago: executing program 1 (id=3504): syz_io_uring_setup(0x10d, &(0x7f0000001040), &(0x7f0000000000), &(0x7f00000010c0)) openat$vsock(0xffffffffffffff9c, &(0x7f0000000d00), 0x109001, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000340), 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) 990.657758ms ago: executing program 3 (id=3451): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f0000000300)={[{@grpquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x84}}, {@resuid}, {@max_batch_time={'max_batch_time', 0x3d, 0xf5}}, {@lazytime}, {@jqfmt_vfsold}, {@usrquota}, {@data_err_abort}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r0 = socket$inet6(0xa, 0x6, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x80080400) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000002}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_aout(r2, &(0x7f00000002c0)=ANY=[], 0xc1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000005, 0x13, r2, 0x0) getsockopt$inet_int(r1, 0x10d, 0xf, 0x0, &(0x7f0000000040)) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='Des=2']) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="ffff00000000000000000000000000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r3}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r6, 0x10e, 0xc, &(0x7f0000000040)=0x8, 0x4) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000900)={0x1c, 0x52, 0x1, 0x0, 0x0, {0x2, 0x3}, [@typed={0x8, 0x1, 0x0, 0x0, @binary="feffffff"}]}, 0x1c}}, 0x0) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYRES16=r4, @ANYRES16=r7, @ANYBLOB="010000000000000000001a00000004000180"], 0x18}, 0x1, 0x0, 0x0, 0x20008004}, 0x0) unshare(0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000600), r5) sendmsg$IPVS_CMD_GET_CONFIG(r5, &(0x7f0000000700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x64, r8, 0x200, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x20, 0x28}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0xc}]}, @IPVS_CMD_ATTR_DAEMON={0x38, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'nr0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xc}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x48081d9679c1bcad}, 0x20044000) socket$inet_udp(0x2, 0x2, 0x0) chdir(&(0x7f0000000140)='./file0\x00') syz_read_part_table(0x5bc, &(0x7f0000000000)="$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") 943.419132ms ago: executing program 3 (id=3513): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB], &(0x7f00000000c0)='GPL\x00'}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0x12, 0x4, 0x8, 0xb}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)={@map=r2, r1, 0x7}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r2, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r0}, 0x20) sendmmsg$inet6(r0, &(0x7f0000000b00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000ac0)="b0", 0x18000}], 0x11}}], 0x2, 0x0) 896.877376ms ago: executing program 3 (id=3518): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f00000004c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x8, [@restrict={0x9, 0x0, 0x0, 0xb, 0x4}, @ptr={0xf, 0x0, 0x0, 0x2, 0x1}, @int={0x9, 0x0, 0x0, 0x1, 0x0, 0x11, 0x0, 0xf, 0x2}]}, {0x0, [0x2e, 0x0, 0x61, 0x61, 0x5f, 0x51]}}, &(0x7f0000000540)=""/242, 0x48, 0xf2, 0x1, 0x2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x586bdac98c3edea1, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x0, 0x800}, 0x10}, 0x90) setsockopt$packet_buf(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) bind$packet(0xffffffffffffffff, 0x0, 0x0) r1 = socket$key(0xf, 0x3, 0x2) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000000)={0x42}, 0x10) bind$tipc(r2, 0x0, 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r3, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10, 0x0}, 0x0) sendmsg$key(r1, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="0203000910000000000000000000000005000600000000000a00000000000000000000000000000000000000000000000000000000000000020001000000000000000702000000ff05000500000000000a00000000000000ff0100000000000000000000000000010000000000000000020008"], 0x80}}, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, 0x0) bind$inet6(r6, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) splice(r8, 0x0, r7, &(0x7f0000000740), 0x4, 0x0) sendto$inet6(r6, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) r9 = socket$packet(0x11, 0x2, 0x300) accept4$packet(r4, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14, 0x800) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000480)={0x8002, 0x6}, 0x4) ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f0000000280)={'batadv_slave_1\x00', &(0x7f00000001c0)=@ethtool_flash={0x33, 0x2, './file0\x00'}}) setsockopt$packet_fanout_data(r9, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x30, 0x0, 0x0, 0x7ffd}, {0x6}]}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(0xffffffffffffffff, 0x8010671f, &(0x7f0000000380)={&(0x7f00000002c0)=""/130, 0x82}) sendto$inet6(r6, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) splice(r6, 0x0, r4, 0x0, 0x406f408, 0x0) 638.581517ms ago: executing program 4 (id=3526): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, 0x0, 0x0) 624.244528ms ago: executing program 4 (id=3527): r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040), 0xc00, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='ext4_drop_inode\x00', r0}, 0x10) socket$kcm(0x29, 0x5, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/key-users\x00', 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r1 = socket(0x28, 0x5, 0x0) r2 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r2, 0x0) connect$vsock_stream(r1, &(0x7f0000000080), 0x10) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ftruncate(0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000600), 0x20000, 0x0) set_mempolicy(0x4003, &(0x7f00000001c0)=0x8000000100000003, 0xe1) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='environ\x00') preadv(r3, &(0x7f0000000840)=[{&(0x7f0000003440)=""/4086, 0xff6}], 0x1, 0x68, 0x0) r4 = syz_io_uring_setup(0x27f3, &(0x7f0000000340)={0x0, 0x0, 0x10100}, &(0x7f0000000140), &(0x7f0000000100)=0x0) syz_io_uring_setup(0x1868, &(0x7f00000003c0), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r6, r5, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r4, 0x184c, 0x0, 0x0, 0x0, 0x0) 610.852509ms ago: executing program 4 (id=3529): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0)) getgroups(0xffffff95, 0x0) 555.030704ms ago: executing program 4 (id=3530): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8}]}, 0x1c}}, 0x0) (fail_nth: 4) 365.972679ms ago: executing program 4 (id=3532): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) eventfd2(0xff, 0x0) 262.519698ms ago: executing program 1 (id=3535): syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x200, &(0x7f0000000080)=ANY=[], 0x1, 0x522, &(0x7f0000000fc0)="$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") perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xfffffe94, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r2 = dup3(r0, r1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r2) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00'}) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB, @ANYBLOB, @ANYRES16, @ANYRES32=r4], 0x44}}, 0x0) creat(&(0x7f00000000c0)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x0) open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f0000000180), 0x3, 0x5eb, &(0x7f0000000c00)="$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") r5 = open(&(0x7f0000000080)='./bus\x00', 0x40002, 0x0) fallocate(r5, 0x3, 0xd3, 0x4010000bffe) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newlink={0x8c, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x50, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x40, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_INGRESS_QOS={0x4, 0x3}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x0, 0x2}}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xa54, 0x18}}, @IFLA_VLAN_INGRESS_QOS={0x10, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc}]}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_MASTER={0x8, 0xa, r8}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_BROADCAST={0xa, 0x2, @multicast}]}, 0x8c}, 0x1, 0xba01}, 0x0) r9 = creat(&(0x7f0000000280)='./file0\x00', 0x0) mmap(&(0x7f0000ff2000/0xb000)=nil, 0xb000, 0x1, 0x50, r9, 0x911d0000) r10 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x2, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000002000000000000000002000018120000", @ANYRES32=r10, @ANYBLOB="0000000000000000b70300000000000085000000ad000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000002c0)={r11, 0xffffffffffffffff, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)=[0x0], 0x0, 0x0, 0x500, 0x1}}, 0x3c) open(0x0, 0x0, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x116) 198.861983ms ago: executing program 4 (id=3536): syz_io_uring_setup(0xd3f, &(0x7f0000000480), &(0x7f0000000080)=0x0, &(0x7f00000002c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r0, r1, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0xe, 0x0, 0x0, 0x1, 0x0}) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000001880), 0x0, 0x0) stat(&(0x7f0000000040)='./file2\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000580)='./file1\x00', 0x0, &(0x7f0000000280)={[{@init_itable_val={'init_itable', 0x3d, 0x7}}, {@nombcache}], [{@dont_hash}, {@uid_eq={'uid', 0x3d, r3}}, {@euid_eq={'euid', 0x3d, r3}}]}, 0x1, 0x59a, &(0x7f00000005c0)="$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") perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x66, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x1e) setfsuid(0xee01) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[@ANYBLOB="00e789da34e04a1ffbc2dc5c07001a000100000000897b2a1d84f5c7ffff00000000000067e77dc70b90bbb45efd97899a16f2df4fa2a8f069d9b047389f672eb3080000000000000065890d2d0d1b8d3d62f6d77b0283e166e2ca4c35483d3f00d6bf7da9299e6e81c96daf520300a16cab12d75a852b3e4470420877efbe1f000000000000007e15f9b683e63cfff7c638bca835b33bc18c4ed0351cd285197b0241569048b5b416ba1c57217be5a338392f831637ee8c25bb2183634a33b18c4b459f9aea5ab222d7060000000000665106000000a803d1b56126efec0225a5433883b0d17cb21dbfd886caf2624e7f00da0ef9893ef57c79a182dceca9c46a9f8b001e53b29c0c698ed30d8942e94ac057bde74e42021d895c22b6400000002b2c604ed73249e80f08bfdcebee7a07856a3a23e0907f3dc0eb52c40f6b21c14832dd9845ee8d8733b52c8422295fde5626cd43fb43fb3acf9b2e840713cba86d43a570ee3589b7e9000000000000000000000000000000dc85131317c56465978d957d000000000000000000000000000000000000000000000000000000000000000000301171e8e3a2d0c842c20fd293c073b93f7662fad1f4ae3e1fe359aa29a4b8965229fa06b0fb2e23d2644cfbdbd6929aa42151ea48334743ad0c378641e74d55d6cd7b098599190100000055ec9c0c26b71588d6fc97e3098fb0e778be446659cf665e7f848d85de70c3c426a539a9a0e92e7bbf77528053dcb3b791b8e3faae507a3b721b670b06b78bb09e82ecc85a4bbc596d8ce02a2cbede5573f8bdc84d61c5634fffa50e74ec0f2da4f3d82c2d2b5a20ec152df14481c3bb59a23e014d07fc070d87f58118f468bf80283e0ce7efda7906f9c53319aef22e01a9ba5649fc10fb5b8132dcf42c47a4b79efb9f720ebd2dcc1634f870cee6201bc0ad9e17c4633a17de505bed8fded3053cb455636132bdae3239b9c8b437256ac21a49c4f03b268c47e9becbaff440728429f9e0b0222485188b745b3c871d01d27eb4e5e00bcd79b95601098e044345a8aaa12fda56277aef89192b9af038ab8808a2adf0c3a15ec863e5f352c7967607cede40848eae2704701b7af0a0b30e9e5b76f45500000000000000", @ANYRESDEC=r2], 0xfb, 0x11e0, &(0x7f00000036c0)="$eJzs3MGLG1UcB/Bf19rW1N2sWqstiA+96GVo9uBFL0G2IA0obSO0gjB1JxoyJiETFiJi9eTVv0M8ehPEm1724t/gbS8eK4gjJmq7JR6KsFPK53PJD977wu9lYOAN8+bwja8+Hg2qbJDPY+PEidiYRqQ7KVJsxD8+j1df//GnF67duHml2+vtXk3pcvd657WU0taL37/36Tcv/TA/++63W9+djoPt9w9/3fnl4PzBhcM/rn80rNKwSuPJPOXp1mQyz2+VRdobVqMspXfKIq+KNBxXxezI+KCcTKeLlI/3NlvTWVFVKR8v0qhYpPkkzWeLlH+YD8cpy7K02Qr+j/7Xd+q6jqjrx+NU1HVdPxGtOBtPxmZsRTu246l4Op6Jc/FsnI/n4vm4sJzVdN8AAAAAAAAAAAAAAAAAAADwaHH+HwAAAAAAAAAAAAAAAAAAAJp37cbNK91eb/dqSmciyi/3+/v91e9qvDuIYZRRxKVox++xPP2/sqovv9XbvZSWtuOL8vbf+dv7/ceO5jvLzwmszXdW+XQ0fzpa9+Z3oh3n1ud31ubPxCsv35PPoh0/fxCTKGMv/srezX/WSenNt3v35S8u5wEAAMCjIEv/Wrt/z7L/Gl/lH+D5wH3765Nx8WSzayeiWnwyysuymCke+uJUs238Vtd183+C4piKpu9MHIe7F73pTgAAAAAAAAAAAHgQx/E6YdNrBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4kx04FgAAAAAQ5m+dRscGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAVwEAAP//zI7XaA==") r4 = open(&(0x7f0000000040)='./file2\x00', 0x181042, 0x0) r5 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7020000f3ffffb0150000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r7) r8 = socket$kcm(0x10, 0x5, 0x0) sendmsg$kcm(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="d8000000180081054e81f782db4cb904021d0800fe00fe05e8fe55a10a0015000600142603600e1208000f007f370301a8001600a40003400f000100035c0461c1d67f6f94007134cf6edb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090014d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00350db798262f3d40fad95667e006dcdf63951f215c3f8b6ad2cba0e2375ee535e3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendto$l2tp(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x0) r10 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x20000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r10, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a05020000000000000000010000000900030073797a320000000014000480080002400000004008000140000000000900010073797a300000000050000000060a01040000000000000000010000001400048010000180090001006d6173710000000008000b40000000000900010073797a30"], 0xc4}}, 0x0) write$P9_RREADDIR(r4, &(0x7f0000000500), 0xbf) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r11, &(0x7f0000000180), 0x40001) socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(0xffffffffffffffff, 0x84, 0x81, &(0x7f00000002c0)="1a00000019000000", 0x8) sendfile(r4, r4, &(0x7f0000000240), 0x7f06) 170.518096ms ago: executing program 0 (id=3538): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, 0x0, 0x0) 114.33343ms ago: executing program 0 (id=3539): getgroups(0xffffff95, 0x0) 114.01503ms ago: executing program 0 (id=3540): getgroups(0xffffff95, 0x0) 113.86736ms ago: executing program 0 (id=3541): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="180200"/13], &(0x7f00000000c0)='GPL\x00'}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0x12, 0x4, 0x8, 0xb}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)={@map=r2, r1, 0x7}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r2, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r0}, 0x20) sendmmsg$inet6(r0, &(0x7f0000000b00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000ac0)="b0", 0x18000}], 0x11}}], 0x2, 0x0) 113.11976ms ago: executing program 1 (id=3542): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="18000f00250001fff00000000000000001"], 0x18}], 0x1}, 0x0) 76.544843ms ago: executing program 1 (id=3543): perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000f3ffffb0150000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r1) getcwd(&(0x7f0000000f80)=""/4096, 0x1000) 76.244873ms ago: executing program 0 (id=3545): openat$vsock(0xffffffffffffff9c, &(0x7f0000000d00), 0x109001, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000340), 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) 6.796399ms ago: executing program 0 (id=3546): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000a40)={[{@stripe={'stripe', 0x3d, 0x3}}, {@noauto_da_alloc}, {@jqfmt_vfsold}, {@data_err_ignore}, {@noauto_da_alloc}, {@delalloc}, {@resuid}, {@oldalloc}, {@jqfmt_vfsv1}]}, 0xfc, 0x550, &(0x7f0000000340)="$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") syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f0000000300)={[{@grpquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x84}}, {@resuid}, {@max_batch_time={'max_batch_time', 0x3d, 0xf5}}, {@lazytime}, {@jqfmt_vfsold}, {@usrquota}, {@data_err_abort}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$eJzs3c9vFFUcAPDvbH/QUrSFGBUP0sQYSJSWFjDEeICrIQ3+iBcvVloQKdDQGi2aUBK8mBgvxph48iD+F0rkyklPHrx4MiREDUcT18x2pnTb2ZYubacyn0+y9M17O7w33X773r6+NxtAZQ2m/9Qi9kbEdBLRn8wvlnVGVji48Lx7f39yOn0kUa+/8WcSSZaXPz/JvvZlJ/dExM8/JbGnY2W9M3NXzo9PTU1ezo6HZy9MD8/MXTl47sL42cmzkxdHXxo9dvTI0WMjh9q6rqsFeSevv/9h/2djb3/3zT/JyPe/jSVxPF7Nnrj0OjbKYAw2vifJyqK+YxtdWUk6sp+TpS9x0llig1iX/PXrioinoj864v6L1x+fvlZq44BNVU8i6kBFJeIfKiofB+Tv7Ze/D66VMioBtsLdEwsTACvjv3NhbjB6GnMDO+8lsXRaJ4mI9mbmmu2KiNu3xq6fuTV2PTZpHg4oNn8tIp4uiv+kEf8D0RMDjfivNcV/Oi44lX1N819vs/7lU8XiH7bOQvz3rBr/0SL+31kS/++2Wf/g/eR7vU3x39vuJQEAAAAAAEBl3TwRES8W/f2/trj+JwrW//RFxPENqH9w2fHKv//X7mxANUCBuyciXilc/1vLV/8OdGSpxxrrAbqSM+emJg9FxOMRcSC6dqTHI6vUcfDzPV+3KhvM1v/lj7T+29lawKwddzp3NJ8zMT47/rDXDUTcvRbxTOH632Sx/08K+v/098H0A9ax5/kbp1qVrR3/wGapfxuxv7D/v3/XimT1+3MMN8YDw/moYKVnP/7ih1b1txv/bjEBDy/t/3euHv8DydL79cysv47Dc531VmXtjv+7kzcbt5zpzvI+Gp+dvTwS0Z2c7Ehzm/JH199meBTl8ZDHSxr/B55bff6vaPzfGxHzy/7v5K/mPcW5J//t+71Ve4z/oTxp/E+sq/9ff2L0xsCPrep/sP7/SKOvP5DlmP+DBV/lYdrdnF8Qjp1FRVvdXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4FNQiYlcktaHFdK02NBTRFxFPxM7a1KWZ2RfOXPrg4kRa1vj8/1r+Sb/9C8dJ/vn/A0uOR5cdH46I3RHxZUdv43jo9KWpibIvHgAAAAAAAAAAAAAAAAAAALaJvhb7/1N/dJTdOmDTdZbdAKA0BfH/SxntALae/h+qS/xDdYl/qC7xD9Ul/qG6xD9Ul/iH6hL/AAAAAADwSNm97+avSUTMv9zbeKS6s7KuUlsGbLZa2Q0ASuMWP1Bdlv5AdXmPDyRrlPe0PGmtM1czffohTgYAAAAAAAAAAACAytm/1/5/qCr7/6G67P+H6sr3/+8ruR3A1vMeH4g1dvIX7v9f8ywAAAAAAAAAAAAAYCPNzF05Pz41NXlZ4q3t0YytTNTr9avpT8F2ac//PJEvhd8u7VmWyPf6PdhZ5f1OAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmv0XAAD//xYSJMU=") r0 = socket$inet6(0xa, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x80080400) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000002}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_aout(r2, &(0x7f00000002c0)=ANY=[], 0xc1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000005, 0x13, r2, 0x0) getsockopt$inet_int(r1, 0x10d, 0xf, 0x0, &(0x7f0000000040)) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='Des=2']) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="ffff00000000000000000000000000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r3}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r6, 0x10e, 0xc, &(0x7f0000000040)=0x8, 0x4) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000900)={0x1c, 0x52, 0x1, 0x0, 0x0, {0x2, 0x3}, [@typed={0x8, 0x1, 0x0, 0x0, @binary="feffffff"}]}, 0x1c}}, 0x0) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYRES16=r4, @ANYRES16=r7, @ANYBLOB="010000000000000000001a00000004000180"], 0x18}, 0x1, 0x0, 0x0, 0x20008004}, 0x0) unshare(0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000600), r5) sendmsg$IPVS_CMD_GET_CONFIG(r5, &(0x7f0000000700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x64, r8, 0x200, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x20, 0x28}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0xc}]}, @IPVS_CMD_ATTR_DAEMON={0x38, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'nr0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xc}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x48081d9679c1bcad}, 0x20044000) socket$inet_udp(0x2, 0x2, 0x0) chdir(&(0x7f0000000140)='./file0\x00') syz_read_part_table(0x5bc, &(0x7f0000000000)="$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") 0s ago: executing program 3 (id=3547): r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x4) sendmsg$nl_route(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="180000005600080028bd7000fcdbdf2507000000", @ANYRES32=r1, @ANYBLOB="8afb0ebedf"], 0x18}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) kernel console output (not intermixed with test programs): . Quota mode: none. [ 145.081032][T10881] ext4 filesystem being mounted at /95/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 145.091525][T10879] 9p: Unknown Cache mode or invalid value f [ 145.118577][ T9304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.137412][ T9771] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.143034][T10888] loop3: detected capacity change from 0 to 2048 [ 145.184751][T10888] loop3: p1 < > p3 [ 145.188982][T10888] loop3: p3 size 134217728 extends beyond EOD, truncated [ 145.200466][T10888] __nla_validate_parse: 5 callbacks suppressed [ 145.200479][T10888] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2780'. [ 145.216174][T10888] netlink: 'syz.3.2780': attribute type 8 has an invalid length. [ 145.237925][T10901] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2786'. [ 145.247097][T10901] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2786'. [ 145.262015][ T29] audit: type=1400 audit(1722358698.355:839): avc: denied { read } for pid=10900 comm="syz.3.2786" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 145.346987][T10904] loop3: detected capacity change from 0 to 4096 [ 145.355471][T10904] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 145.384264][ T9304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.414063][T10909] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2789'. [ 145.467206][T10911] loop3: detected capacity change from 0 to 1024 [ 145.484403][T10911] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 145.496460][T10911] ext4 filesystem being mounted at /101/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 145.516669][ T9304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.531987][T10915] netlink: 184 bytes leftover after parsing attributes in process `syz.4.2791'. [ 145.552692][T10919] netlink: 184 bytes leftover after parsing attributes in process `syz.3.2792'. [ 145.580384][T10923] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2793'. [ 145.604150][T10925] FAULT_INJECTION: forcing a failure. [ 145.604150][T10925] name failslab, interval 1, probability 0, space 0, times 0 [ 145.616839][T10925] CPU: 0 UID: 0 PID: 10925 Comm: syz.0.2794 Not tainted 6.11.0-rc1-syzkaller-00043-g94ede2a3e913 #0 [ 145.627587][T10925] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 145.637624][T10925] Call Trace: [ 145.640883][T10925] [ 145.643866][T10925] dump_stack_lvl+0xf2/0x150 [ 145.648446][T10925] dump_stack+0x15/0x20 [ 145.652587][T10925] should_fail_ex+0x229/0x230 [ 145.657248][T10925] ? __alloc_skb+0x10b/0x310 [ 145.661832][T10925] should_failslab+0x8f/0xb0 [ 145.666479][T10925] kmem_cache_alloc_node_noprof+0x51/0x2b0 [ 145.672326][T10925] __alloc_skb+0x10b/0x310 [ 145.676788][T10925] netlink_alloc_large_skb+0xad/0xe0 [ 145.682166][T10925] netlink_sendmsg+0x3b4/0x6e0 [ 145.686960][T10925] ? __pfx_netlink_sendmsg+0x10/0x10 [ 145.692223][T10925] __sock_sendmsg+0x140/0x180 [ 145.697067][T10925] ____sys_sendmsg+0x312/0x410 [ 145.701936][T10925] __sys_sendmsg+0x1e9/0x280 [ 145.706629][T10925] __x64_sys_sendmsg+0x46/0x50 [ 145.711432][T10925] x64_sys_call+0x26f8/0x2e00 [ 145.716118][T10925] do_syscall_64+0xc9/0x1c0 [ 145.720625][T10925] ? clear_bhb_loop+0x55/0xb0 [ 145.725286][T10925] ? clear_bhb_loop+0x55/0xb0 [ 145.729993][T10925] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.735938][T10925] RIP: 0033:0x7fb2330773b9 [ 145.740400][T10925] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 145.760100][T10925] RSP: 002b:00007fb231cf7048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 145.768489][T10925] RAX: ffffffffffffffda RBX: 00007fb233205f80 RCX: 00007fb2330773b9 [ 145.776443][T10925] RDX: 0000000000000000 RSI: 0000000020000200 RDI: 0000000000000004 [ 145.784395][T10925] RBP: 00007fb231cf70a0 R08: 0000000000000000 R09: 0000000000000000 [ 145.792344][T10925] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 145.800293][T10925] R13: 000000000000004d R14: 00007fb233205f80 R15: 00007ffc25cd56a8 [ 145.808246][T10925] [ 145.842633][T10929] loop0: detected capacity change from 0 to 2048 [ 145.873650][T10929] loop0: p1 < > p3 [ 145.877763][T10929] loop0: p3 size 134217728 extends beyond EOD, truncated [ 145.888206][T10929] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2796'. [ 145.897525][T10929] netlink: 'syz.0.2796': attribute type 8 has an invalid length. [ 145.919837][T10931] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2797'. [ 145.929044][T10931] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2797'. [ 146.008319][T10937] loop2: detected capacity change from 0 to 2048 [ 146.025730][T10937] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 146.039463][T10937] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 146.058753][T10937] EXT4-fs error (device loop2): ext4_find_dest_de:2067: inode #2: block 16: comm syz.2.2800: bad entry in directory: inode out of bounds - offset=44, inode=185, rec_len=16, size=2048 fake=0 [ 146.064669][T10944] loop1: detected capacity change from 0 to 1024 [ 146.096182][T10944] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 146.108196][T10944] ext4 filesystem being mounted at /63/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 146.125403][ T9771] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.160337][T10093] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.168929][T10953] loop1: detected capacity change from 0 to 2048 [ 146.176486][T10953] EXT4-fs (loop1): stripe (1025) is not aligned with cluster size (16), stripe is disabled [ 146.196780][T10953] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 146.308324][ T9771] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.328569][T10962] loop1: detected capacity change from 0 to 512 [ 146.334997][T10962] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 146.385641][T10968] FAULT_INJECTION: forcing a failure. [ 146.385641][T10968] name failslab, interval 1, probability 0, space 0, times 0 [ 146.398326][T10968] CPU: 0 UID: 0 PID: 10968 Comm: syz.3.2809 Not tainted 6.11.0-rc1-syzkaller-00043-g94ede2a3e913 #0 [ 146.409095][T10968] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 146.419180][T10968] Call Trace: [ 146.422502][T10968] [ 146.425410][T10968] dump_stack_lvl+0xf2/0x150 [ 146.430021][T10968] dump_stack+0x15/0x20 [ 146.434167][T10968] should_fail_ex+0x229/0x230 [ 146.438844][T10968] ? io_alloc_page_table+0x3b/0x100 [ 146.444034][T10968] should_failslab+0x8f/0xb0 [ 146.448651][T10968] __kmalloc_noprof+0xa5/0x370 [ 146.453401][T10968] io_alloc_page_table+0x3b/0x100 [ 146.458418][T10968] ? __kmalloc_cache_noprof+0x10b/0x2a0 [ 146.463954][T10968] io_rsrc_data_alloc+0x7c/0x1a0 [ 146.468919][T10968] io_sqe_buffers_register+0xdf/0x420 [ 146.474367][T10968] ? __fget_files+0x1da/0x210 [ 146.479122][T10968] __se_sys_io_uring_register+0x96a/0x1070 [ 146.484917][T10968] __x64_sys_io_uring_register+0x55/0x70 [ 146.490531][T10968] x64_sys_call+0xb9d/0x2e00 [ 146.495158][T10968] do_syscall_64+0xc9/0x1c0 [ 146.499649][T10968] ? clear_bhb_loop+0x55/0xb0 [ 146.504388][T10968] ? clear_bhb_loop+0x55/0xb0 [ 146.509096][T10968] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.514977][T10968] RIP: 0033:0x7eff878f73b9 [ 146.519385][T10968] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 146.539007][T10968] RSP: 002b:00007eff86577048 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 146.547403][T10968] RAX: ffffffffffffffda RBX: 00007eff87a85f80 RCX: 00007eff878f73b9 [ 146.555428][T10968] RDX: 00000000200002c0 RSI: 0000000000000000 RDI: 0000000000000003 [ 146.563380][T10968] RBP: 00007eff865770a0 R08: 0000000000000000 R09: 0000000000000000 [ 146.571419][T10968] R10: 100000000000011a R11: 0000000000000246 R12: 0000000000000001 [ 146.579382][T10968] R13: 000000000000000b R14: 00007eff87a85f80 R15: 00007ffdd611a4c8 [ 146.587365][T10968] [ 146.655801][T10972] FAULT_INJECTION: forcing a failure. [ 146.655801][T10972] name failslab, interval 1, probability 0, space 0, times 0 [ 146.668478][T10972] CPU: 1 UID: 0 PID: 10972 Comm: syz.1.2811 Not tainted 6.11.0-rc1-syzkaller-00043-g94ede2a3e913 #0 [ 146.679347][T10972] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 146.689496][T10972] Call Trace: [ 146.692769][T10972] [ 146.695768][T10972] dump_stack_lvl+0xf2/0x150 [ 146.700438][T10972] dump_stack+0x15/0x20 [ 146.704598][T10972] should_fail_ex+0x229/0x230 [ 146.709295][T10972] ? skb_clone+0x154/0x1f0 [ 146.713723][T10972] should_failslab+0x8f/0xb0 [ 146.717835][T10976] loop3: detected capacity change from 0 to 1024 [ 146.718317][T10972] kmem_cache_alloc_noprof+0x4c/0x290 [ 146.730045][T10972] skb_clone+0x154/0x1f0 [ 146.734360][T10972] __netlink_deliver_tap+0x2bd/0x4c0 [ 146.739733][T10972] netlink_unicast+0x641/0x670 [ 146.744489][T10972] netlink_sendmsg+0x5cc/0x6e0 [ 146.749345][T10972] ? __pfx_netlink_sendmsg+0x10/0x10 [ 146.754657][T10972] __sock_sendmsg+0x140/0x180 [ 146.759392][T10972] ____sys_sendmsg+0x312/0x410 [ 146.764195][T10972] __sys_sendmsg+0x1e9/0x280 [ 146.768778][T10972] __x64_sys_sendmsg+0x46/0x50 [ 146.773599][T10972] x64_sys_call+0x26f8/0x2e00 [ 146.774615][T10976] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 146.778307][T10972] do_syscall_64+0xc9/0x1c0 [ 146.778340][T10972] ? clear_bhb_loop+0x55/0xb0 [ 146.790568][T10976] ext4 filesystem being mounted at /106/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 146.794758][T10972] ? clear_bhb_loop+0x55/0xb0 [ 146.794786][T10972] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.820362][T10972] RIP: 0033:0x7fbcb1c873b9 [ 146.824754][T10972] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 146.844429][T10972] RSP: 002b:00007fbcb0907048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 146.852868][T10972] RAX: ffffffffffffffda RBX: 00007fbcb1e15f80 RCX: 00007fbcb1c873b9 [ 146.860896][T10972] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000004 [ 146.868864][T10972] RBP: 00007fbcb09070a0 R08: 0000000000000000 R09: 0000000000000000 [ 146.876865][T10972] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 146.884929][T10972] R13: 000000000000004d R14: 00007fbcb1e15f80 R15: 00007ffe35a2ac58 [ 146.893316][T10972] [ 146.898966][T10972] netlink: 'syz.1.2811': attribute type 11 has an invalid length. [ 146.899796][ T9304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.980200][T10990] loop0: detected capacity change from 0 to 2048 [ 147.008584][T10994] FAULT_INJECTION: forcing a failure. [ 147.008584][T10994] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 147.021737][T10994] CPU: 0 UID: 0 PID: 10994 Comm: syz.3.2821 Not tainted 6.11.0-rc1-syzkaller-00043-g94ede2a3e913 #0 [ 147.032537][T10994] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 147.042604][T10994] Call Trace: [ 147.045888][T10994] [ 147.046163][ C1] eth0: bad gso: type: 1, size: 1408 [ 147.048838][T10994] dump_stack_lvl+0xf2/0x150 [ 147.058766][T10994] dump_stack+0x15/0x20 [ 147.062944][T10994] should_fail_ex+0x229/0x230 [ 147.067675][T10994] should_fail+0xb/0x10 [ 147.071826][T10994] should_fail_usercopy+0x1a/0x20 [ 147.076881][T10994] _copy_from_user+0x1e/0xd0 [ 147.081471][T10994] vt_ioctl+0x9b1/0x1810 [ 147.085785][T10994] tty_ioctl+0x821/0xbe0 [ 147.090070][T10994] ? __pfx_tty_ioctl+0x10/0x10 [ 147.094864][T10994] __se_sys_ioctl+0xd3/0x150 [ 147.099484][T10994] __x64_sys_ioctl+0x43/0x50 [ 147.104216][T10994] x64_sys_call+0x1688/0x2e00 [ 147.108919][T10994] do_syscall_64+0xc9/0x1c0 [ 147.113425][T10994] ? clear_bhb_loop+0x55/0xb0 [ 147.118173][T10994] ? clear_bhb_loop+0x55/0xb0 [ 147.122859][T10994] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.128747][T10994] RIP: 0033:0x7eff878f73b9 [ 147.133146][T10994] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 147.152862][T10994] RSP: 002b:00007eff86577048 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 147.161267][T10994] RAX: ffffffffffffffda RBX: 00007eff87a85f80 RCX: 00007eff878f73b9 [ 147.169260][T10994] RDX: 0000000020000740 RSI: 0000000000004b72 RDI: 0000000000000003 [ 147.177220][T10994] RBP: 00007eff865770a0 R08: 0000000000000000 R09: 0000000000000000 [ 147.185209][T10994] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 147.193239][T10994] R13: 000000000000000b R14: 00007eff87a85f80 R15: 00007ffdd611a4c8 [ 147.201208][T10994] [ 147.232313][T10995] netlink: 'syz.0.2819': attribute type 8 has an invalid length. [ 147.233592][T10990] loop0: p1 < > p3 [ 147.253928][T10990] loop0: p3 size 134217728 extends beyond EOD, truncated [ 147.318778][T11009] loop1: detected capacity change from 0 to 512 [ 147.333502][T11009] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 147.342521][T11007] loop4: detected capacity change from 0 to 1024 [ 147.342605][T11011] loop0: detected capacity change from 0 to 2048 [ 147.357267][T11011] EXT4-fs (loop0): stripe (1025) is not aligned with cluster size (16), stripe is disabled [ 147.376310][T11011] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 147.383942][T11007] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 147.403390][T11007] ext4 filesystem being mounted at /575/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 147.440737][ T3265] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.532759][T11030] loop3: detected capacity change from 0 to 512 [ 147.549612][T11030] EXT4-fs (loop3): orphan cleanup on readonly fs [ 147.563503][T11030] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.2831: bg 0: block 248: padding at end of block bitmap is not set [ 147.580738][T11030] Quota error (device loop3): write_blk: dquota write failed [ 147.588166][T11030] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 147.598125][T11030] EXT4-fs error (device loop3): ext4_acquire_dquot:6848: comm syz.3.2831: Failed to acquire dquot type 1 [ 147.610724][T11030] EXT4-fs (loop3): 1 truncate cleaned up [ 147.610982][ T3269] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.720628][T11043] loop1: detected capacity change from 0 to 2048 [ 147.763545][T11043] loop1: p1 < > p3 [ 147.767769][T11043] loop1: p3 size 134217728 extends beyond EOD, truncated [ 147.778938][T11043] netlink: 'syz.1.2837': attribute type 8 has an invalid length. [ 147.821753][T11049] loop1: detected capacity change from 0 to 512 [ 147.829402][T11049] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e846c028, mo2=0002] [ 147.837435][T11049] System zones: 1-12 [ 147.841543][T11049] EXT4-fs error (device loop1): dx_probe:823: inode #2: comm syz.1.2840: Attempting to read directory block (0) that is past i_size (256) [ 147.855921][T11049] EXT4-fs (loop1): Remounting filesystem read-only [ 147.862421][T11049] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 147.871061][T11049] SELinux: (dev loop1, type ext4) getxattr errno 5 [ 147.925231][T11058] loop1: detected capacity change from 0 to 136 [ 148.078299][T11073] loop1: detected capacity change from 0 to 2048 [ 148.123628][T11073] loop1: p1 < > p3 [ 148.127887][T11073] loop1: p3 size 134217728 extends beyond EOD, truncated [ 148.140918][T11073] netlink: 'syz.1.2849': attribute type 8 has an invalid length. [ 148.176707][T11083] loop2: detected capacity change from 0 to 136 [ 148.262331][ C1] eth0: bad gso: type: 1, size: 1408 [ 148.283188][ C1] eth0: bad gso: type: 1, size: 1408 [ 148.334807][T11098] loop2: detected capacity change from 0 to 2048 [ 148.373556][T11098] loop2: p1 < > p3 [ 148.380578][T11098] loop2: p3 size 134217728 extends beyond EOD, truncated [ 148.394968][T11098] netlink: 'syz.2.2863': attribute type 8 has an invalid length. [ 148.399310][T11114] loop4: detected capacity change from 0 to 2048 [ 148.410003][T11114] EXT4-fs (loop4): stripe (1025) is not aligned with cluster size (16), stripe is disabled [ 148.526182][T11124] loop1: detected capacity change from 0 to 1024 [ 148.536710][T11124] EXT4-fs: Ignoring removed oldalloc option [ 148.543077][T11124] EXT4-fs (loop1): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 148.582694][T11131] loop4: detected capacity change from 0 to 4096 [ 148.634912][T11134] loop0: detected capacity change from 0 to 512 [ 148.642301][T11134] EXT4-fs (loop0): orphan cleanup on readonly fs [ 148.658786][T11141] FAULT_INJECTION: forcing a failure. [ 148.658786][T11141] name failslab, interval 1, probability 0, space 0, times 0 [ 148.659571][T11134] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.2870: bg 0: block 248: padding at end of block bitmap is not set [ 148.671423][T11141] CPU: 1 UID: 0 PID: 11141 Comm: syz.1.2876 Not tainted 6.11.0-rc1-syzkaller-00043-g94ede2a3e913 #0 [ 148.687551][T11134] Quota error (device loop0): write_blk: dquota write failed [ 148.696360][T11141] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 148.703740][T11134] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 148.713744][T11141] Call Trace: [ 148.713752][T11141] [ 148.713759][T11141] dump_stack_lvl+0xf2/0x150 [ 148.723639][T11134] EXT4-fs error (device loop0): ext4_acquire_dquot:6848: comm syz.0.2870: Failed to acquire dquot type 1 [ 148.726883][T11141] dump_stack+0x15/0x20 [ 148.730261][T11134] EXT4-fs (loop0): 1 truncate cleaned up [ 148.734344][T11141] should_fail_ex+0x229/0x230 [ 148.734454][T11141] ? __alloc_skb+0x10b/0x310 [ 148.734473][T11141] should_failslab+0x8f/0xb0 [ 148.734508][T11141] kmem_cache_alloc_node_noprof+0x51/0x2b0 [ 148.734539][T11141] __alloc_skb+0x10b/0x310 [ 148.734558][T11141] netlink_alloc_large_skb+0xad/0xe0 [ 148.734587][T11141] netlink_sendmsg+0x3b4/0x6e0 [ 148.789746][T11141] ? __pfx_netlink_sendmsg+0x10/0x10 [ 148.795063][T11141] __sock_sendmsg+0x140/0x180 [ 148.799796][T11141] sock_write_iter+0x164/0x1b0 [ 148.804648][T11141] do_iter_readv_writev+0x3b0/0x470 [ 148.809882][T11141] vfs_writev+0x2e0/0x880 [ 148.814205][T11141] do_writev+0xf8/0x220 [ 148.818348][T11141] __x64_sys_writev+0x45/0x50 [ 148.823014][T11141] x64_sys_call+0x1d63/0x2e00 [ 148.827756][T11141] do_syscall_64+0xc9/0x1c0 [ 148.832251][T11141] ? clear_bhb_loop+0x55/0xb0 [ 148.836920][T11141] ? clear_bhb_loop+0x55/0xb0 [ 148.841585][T11141] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.847470][T11141] RIP: 0033:0x7fbcb1c873b9 [ 148.851875][T11141] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 148.871521][T11141] RSP: 002b:00007fbcb0907048 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 148.879986][T11141] RAX: ffffffffffffffda RBX: 00007fbcb1e15f80 RCX: 00007fbcb1c873b9 [ 148.887941][T11141] RDX: 0000000000000001 RSI: 0000000020000180 RDI: 0000000000000003 [ 148.895896][T11141] RBP: 00007fbcb09070a0 R08: 0000000000000000 R09: 0000000000000000 [ 148.903852][T11141] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 148.911810][T11141] R13: 000000000000004d R14: 00007fbcb1e15f80 R15: 00007ffe35a2ac58 [ 148.919771][T11141] [ 148.947909][T11147] loop1: detected capacity change from 0 to 512 [ 148.954555][T11147] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 148.969477][T11151] loop2: detected capacity change from 0 to 512 [ 148.976388][T11151] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 148.989768][T11151] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e12c, mo2=0002] [ 149.000662][T11151] EXT4-fs (loop2): orphan cleanup on readonly fs [ 149.008012][T11151] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.2881: bg 0: block 361: padding at end of block bitmap is not set [ 149.014052][T11156] loop1: detected capacity change from 0 to 2048 [ 149.024731][T11151] EXT4-fs (loop2): Remounting filesystem read-only [ 149.035920][T11156] EXT4-fs (loop1): stripe (1025) is not aligned with cluster size (16), stripe is disabled [ 149.038432][T11151] EXT4-fs (loop2): 1 truncate cleaned up [ 149.052004][T11151] SELinux: (dev loop2, type ext4) getxattr errno 5 [ 149.222577][T11161] loop2: detected capacity change from 0 to 1024 [ 149.239371][T11168] loop3: detected capacity change from 0 to 1024 [ 149.256108][T11161] ext4 filesystem being mounted at /66/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 149.276009][ T29] audit: type=1326 audit(1722358702.375:840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11172 comm="syz.1.2887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcb1c873b9 code=0x7ffc0000 [ 149.299563][ T29] audit: type=1326 audit(1722358702.375:841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11172 comm="syz.1.2887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcb1c873b9 code=0x7ffc0000 [ 149.327072][ T29] audit: type=1326 audit(1722358702.375:842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11172 comm="syz.1.2887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=77 compat=0 ip=0x7fbcb1c873b9 code=0x7ffc0000 [ 149.361895][T11173] loop1: detected capacity change from 0 to 1024 [ 149.362751][T11175] loop3: detected capacity change from 0 to 1024 [ 149.375923][T11175] EXT4-fs: Ignoring removed oldalloc option [ 149.380009][T11173] ext4 filesystem being mounted at /98/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 149.383588][T11175] EXT4-fs (loop3): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 149.402839][ T29] kauditd_printk_skb: 33 callbacks suppressed [ 149.402851][ T29] audit: type=1326 audit(1722358702.495:876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11172 comm="syz.1.2887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fbcb1c85d50 code=0x7ffc0000 [ 149.409071][T11179] loop0: detected capacity change from 0 to 1024 [ 149.436322][ T29] audit: type=1326 audit(1722358702.495:877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11172 comm="syz.1.2887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7fbcb1c86137 code=0x7ffc0000 [ 149.446948][T11179] EXT4-fs: Ignoring removed oldalloc option [ 149.462096][ T29] audit: type=1326 audit(1722358702.495:878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11172 comm="syz.1.2887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fbcb1c85d50 code=0x7ffc0000 [ 149.470056][T11179] EXT4-fs (loop0): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 149.491329][ T29] audit: type=1326 audit(1722358702.495:879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11172 comm="syz.1.2887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcb1c873b9 code=0x7ffc0000 [ 149.524447][ T29] audit: type=1326 audit(1722358702.495:880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11172 comm="syz.1.2887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcb1c873b9 code=0x7ffc0000 [ 149.547933][ T29] audit: type=1326 audit(1722358702.495:881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11172 comm="syz.1.2887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fbcb1c873b9 code=0x7ffc0000 [ 149.574329][ T29] audit: type=1326 audit(1722358702.535:882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11172 comm="syz.1.2887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcb1c873b9 code=0x7ffc0000 [ 149.597789][ T29] audit: type=1326 audit(1722358702.535:883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11172 comm="syz.1.2887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fbcb1c873b9 code=0x7ffc0000 [ 149.625445][ T29] audit: type=1326 audit(1722358702.675:884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11172 comm="syz.1.2887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcb1c873b9 code=0x7ffc0000 [ 149.648939][ T29] audit: type=1326 audit(1722358702.675:885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11172 comm="syz.1.2887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcb1c873b9 code=0x7ffc0000 [ 149.677725][T11189] loop0: detected capacity change from 0 to 512 [ 149.712575][T11189] ext4 filesystem being mounted at /670/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 149.718149][T11199] loop1: detected capacity change from 0 to 1024 [ 149.729807][T11199] EXT4-fs: Ignoring removed oldalloc option [ 149.739228][T11199] EXT4-fs (loop1): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 149.788448][T11207] bond4: entered promiscuous mode [ 149.849889][T11217] loop4: detected capacity change from 0 to 4096 [ 149.878313][T11220] loop1: detected capacity change from 0 to 1024 [ 149.887988][T11220] EXT4-fs: Ignoring removed oldalloc option [ 149.895571][T11220] EXT4-fs (loop1): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 149.910376][T11221] loop0: detected capacity change from 0 to 512 [ 149.922223][T11221] EXT4-fs (loop0): orphan cleanup on readonly fs [ 149.929053][T11221] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.2899: bg 0: block 248: padding at end of block bitmap is not set [ 149.937509][T11225] loop4: detected capacity change from 0 to 136 [ 149.946533][T11221] EXT4-fs error (device loop0): ext4_acquire_dquot:6848: comm syz.0.2899: Failed to acquire dquot type 1 [ 149.970000][T11221] EXT4-fs (loop0): 1 truncate cleaned up [ 150.008999][T11237] loop4: detected capacity change from 0 to 1024 [ 150.015381][T11238] loop1: detected capacity change from 0 to 1024 [ 150.022098][T11237] EXT4-fs: Ignoring removed oldalloc option [ 150.028524][T11237] EXT4-fs (loop4): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 150.032371][T11238] ext4 filesystem being mounted at /104/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 150.600817][T11252] __nla_validate_parse: 19 callbacks suppressed [ 150.600827][T11252] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2911'. [ 150.616422][T11252] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2911'. [ 150.662040][T11254] loop0: detected capacity change from 0 to 4096 [ 150.723856][T11262] loop0: detected capacity change from 0 to 1024 [ 150.730565][T11262] EXT4-fs: Ignoring removed oldalloc option [ 150.738413][T11262] EXT4-fs (loop0): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 150.813720][T11271] loop0: detected capacity change from 0 to 136 [ 150.846864][T11279] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2921'. [ 150.857306][T11279] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2921'. [ 150.970421][T11286] loop0: detected capacity change from 0 to 2048 [ 150.998356][T11287] loop4: detected capacity change from 0 to 512 [ 151.003577][T11286] loop0: p1 < > p3 [ 151.009068][T11286] loop0: p3 size 134217728 extends beyond EOD, truncated [ 151.009193][T11287] EXT4-fs (loop4): orphan cleanup on readonly fs [ 151.024799][T11287] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.2922: bg 0: block 248: padding at end of block bitmap is not set [ 151.039986][T11287] EXT4-fs error (device loop4): ext4_acquire_dquot:6848: comm syz.4.2922: Failed to acquire dquot type 1 [ 151.040277][T11287] EXT4-fs (loop4): 1 truncate cleaned up [ 151.058205][T11286] netlink: 'syz.0.2923': attribute type 8 has an invalid length. [ 151.080766][T11290] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2924'. [ 151.089893][T11290] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2924'. [ 151.185330][T11292] loop0: detected capacity change from 0 to 4096 [ 151.222066][T11295] loop0: detected capacity change from 0 to 1024 [ 151.228832][T11295] EXT4-fs: Ignoring removed oldalloc option [ 151.235183][T11295] EXT4-fs (loop0): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 151.310765][T11303] loop0: detected capacity change from 0 to 4096 [ 151.362179][T11308] loop0: detected capacity change from 0 to 136 [ 151.392020][T11312] netlink: 184 bytes leftover after parsing attributes in process `syz.0.2932'. [ 151.689362][T11319] loop3: detected capacity change from 0 to 2048 [ 151.753643][T11319] loop3: p1 < > p3 [ 151.757903][T11319] loop3: p3 size 134217728 extends beyond EOD, truncated [ 151.769596][T11319] netlink: 'syz.3.2934': attribute type 8 has an invalid length. [ 151.807885][T11323] loop3: detected capacity change from 0 to 4096 [ 151.934634][T11336] loop3: detected capacity change from 0 to 4096 [ 152.196962][T11348] loop2: detected capacity change from 0 to 512 [ 152.205141][T11348] EXT4-fs (loop2): orphan cleanup on readonly fs [ 152.212013][T11348] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.2945: bg 0: block 248: padding at end of block bitmap is not set [ 152.228342][T11348] EXT4-fs error (device loop2): ext4_acquire_dquot:6848: comm syz.2.2945: Failed to acquire dquot type 1 [ 152.240111][T11348] EXT4-fs (loop2): 1 truncate cleaned up [ 152.274074][T11353] loop4: detected capacity change from 0 to 4096 [ 152.327566][T11365] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2952'. [ 152.338309][T11367] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2953'. [ 152.348157][T11367] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2953'. [ 152.867709][T11413] loop3: detected capacity change from 0 to 136 [ 153.035437][T11440] loop1: detected capacity change from 0 to 2048 [ 153.042451][T11438] FAULT_INJECTION: forcing a failure. [ 153.042451][T11438] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 153.055589][T11438] CPU: 0 UID: 0 PID: 11438 Comm: syz.0.2985 Not tainted 6.11.0-rc1-syzkaller-00043-g94ede2a3e913 #0 [ 153.066379][T11438] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 153.076435][T11438] Call Trace: [ 153.079699][T11438] [ 153.082615][T11438] dump_stack_lvl+0xf2/0x150 [ 153.087263][T11438] dump_stack+0x15/0x20 [ 153.091411][T11438] should_fail_ex+0x229/0x230 [ 153.096134][T11438] should_fail+0xb/0x10 [ 153.100317][T11438] should_fail_usercopy+0x1a/0x20 [ 153.105344][T11438] _copy_from_iter+0xd3/0xb00 [ 153.110014][T11438] ? kmalloc_reserve+0x16e/0x190 [ 153.114940][T11438] ? __build_skb_around+0x196/0x1f0 [ 153.120132][T11438] ? __alloc_skb+0x21f/0x310 [ 153.124710][T11438] ? __virt_addr_valid+0x1ed/0x250 [ 153.129848][T11438] ? __check_object_size+0x35b/0x510 [ 153.135154][T11438] netlink_sendmsg+0x460/0x6e0 [ 153.139910][T11438] ? __pfx_netlink_sendmsg+0x10/0x10 [ 153.145183][T11438] __sock_sendmsg+0x140/0x180 [ 153.149881][T11438] ____sys_sendmsg+0x312/0x410 [ 153.154635][T11438] __sys_sendmsg+0x1e9/0x280 [ 153.159265][T11438] __x64_sys_sendmsg+0x46/0x50 [ 153.164042][T11438] x64_sys_call+0x26f8/0x2e00 [ 153.168762][T11438] do_syscall_64+0xc9/0x1c0 [ 153.173302][T11438] ? clear_bhb_loop+0x55/0xb0 [ 153.177977][T11438] ? clear_bhb_loop+0x55/0xb0 [ 153.182642][T11438] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.188600][T11438] RIP: 0033:0x7fb2330773b9 [ 153.193044][T11438] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 153.212649][T11438] RSP: 002b:00007fb231cf7048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 153.221138][T11438] RAX: ffffffffffffffda RBX: 00007fb233205f80 RCX: 00007fb2330773b9 [ 153.229098][T11438] RDX: 0000000000000000 RSI: 000000002000c2c0 RDI: 0000000000000003 [ 153.237073][T11438] RBP: 00007fb231cf70a0 R08: 0000000000000000 R09: 0000000000000000 [ 153.245206][T11438] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 153.253221][T11438] R13: 000000000000004d R14: 00007fb233205f80 R15: 00007ffc25cd56a8 [ 153.261187][T11438] [ 153.287423][T11450] netlink: 'syz.1.2987': attribute type 8 has an invalid length. [ 153.305980][T11440] loop1: p1 < > p3 [ 153.320266][T11440] loop1: p3 size 134217728 extends beyond EOD, truncated [ 153.343162][T11445] loop2: detected capacity change from 0 to 512 [ 153.374098][T11445] EXT4-fs (loop2): orphan cleanup on readonly fs [ 153.391369][T11445] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.2989: bg 0: block 248: padding at end of block bitmap is not set [ 153.406900][T11468] loop3: detected capacity change from 0 to 1024 [ 153.415217][T11468] EXT4-fs: Ignoring removed oldalloc option [ 153.421811][T11468] EXT4-fs (loop3): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 153.423526][T11445] EXT4-fs error (device loop2): ext4_acquire_dquot:6848: comm syz.2.2989: Failed to acquire dquot type 1 [ 153.445316][T11445] EXT4-fs (loop2): 1 truncate cleaned up [ 153.499411][T11471] loop0: detected capacity change from 0 to 1024 [ 153.517705][T11471] ext4 filesystem being mounted at /718/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 153.541608][T11477] loop3: detected capacity change from 0 to 4096 [ 153.610843][T11492] loop0: detected capacity change from 0 to 1024 [ 153.645644][ C1] eth0: bad gso: type: 1, size: 1408 [ 153.698809][T11508] bond1: entered promiscuous mode [ 153.828258][T11522] loop3: detected capacity change from 0 to 1024 [ 153.847819][T11541] loop0: detected capacity change from 0 to 1024 [ 153.851313][T11522] ext4 filesystem being mounted at /155/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 153.867736][T11541] ext4 filesystem being mounted at /724/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 153.896769][T11549] loop1: detected capacity change from 0 to 1024 [ 153.905722][T11549] EXT4-fs: Ignoring removed oldalloc option [ 153.912047][T11549] EXT4-fs (loop1): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 153.964535][T11557] bond2: entered promiscuous mode [ 154.074843][T11568] loop1: detected capacity change from 0 to 4096 [ 154.282117][T11580] loop1: detected capacity change from 0 to 512 [ 154.289928][T11580] EXT4-fs (loop1): orphan cleanup on readonly fs [ 154.296709][T11580] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.3041: bg 0: block 248: padding at end of block bitmap is not set [ 154.311320][T11580] EXT4-fs error (device loop1): ext4_acquire_dquot:6848: comm syz.1.3041: Failed to acquire dquot type 1 [ 154.323137][T11580] EXT4-fs (loop1): 1 truncate cleaned up [ 154.594200][T11587] bond4: entered promiscuous mode [ 154.805778][T11610] loop4: detected capacity change from 0 to 764 [ 154.812601][T11610] rock: directory entry would overflow storage [ 154.818889][T11610] rock: sig=0x4654, size=5, remaining=4 [ 155.058680][T11623] loop1: detected capacity change from 0 to 4096 [ 155.131120][T11630] loop1: detected capacity change from 0 to 1024 [ 155.138273][T11630] EXT4-fs: Ignoring removed oldalloc option [ 155.144669][T11630] EXT4-fs (loop1): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 155.625913][T11640] FAULT_INJECTION: forcing a failure. [ 155.625913][T11640] name failslab, interval 1, probability 0, space 0, times 0 [ 155.638674][T11640] CPU: 1 UID: 0 PID: 11640 Comm: syz.2.3065 Not tainted 6.11.0-rc1-syzkaller-00043-g94ede2a3e913 #0 [ 155.649501][T11640] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 155.659548][T11640] Call Trace: [ 155.662811][T11640] [ 155.665898][T11640] dump_stack_lvl+0xf2/0x150 [ 155.670481][T11640] dump_stack+0x15/0x20 [ 155.674693][T11640] should_fail_ex+0x229/0x230 [ 155.679354][T11640] ? __alloc_skb+0x10b/0x310 [ 155.683923][T11640] should_failslab+0x8f/0xb0 [ 155.688497][T11640] kmem_cache_alloc_node_noprof+0x51/0x2b0 [ 155.694348][T11640] __alloc_skb+0x10b/0x310 [ 155.698752][T11640] netlink_alloc_large_skb+0xad/0xe0 [ 155.704030][T11640] netlink_sendmsg+0x3b4/0x6e0 [ 155.708788][T11640] ? __pfx_netlink_sendmsg+0x10/0x10 [ 155.714142][T11640] __sock_sendmsg+0x140/0x180 [ 155.718865][T11640] ____sys_sendmsg+0x312/0x410 [ 155.723689][T11640] __sys_sendmsg+0x1e9/0x280 [ 155.728329][T11640] __x64_sys_sendmsg+0x46/0x50 [ 155.733092][T11640] x64_sys_call+0x26f8/0x2e00 [ 155.737800][T11640] do_syscall_64+0xc9/0x1c0 [ 155.742292][T11640] ? clear_bhb_loop+0x55/0xb0 [ 155.747007][T11640] ? clear_bhb_loop+0x55/0xb0 [ 155.751723][T11640] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.757743][T11640] RIP: 0033:0x7f924e7973b9 [ 155.762141][T11640] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 155.781802][T11640] RSP: 002b:00007f924d417048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 155.790273][T11640] RAX: ffffffffffffffda RBX: 00007f924e925f80 RCX: 00007f924e7973b9 [ 155.798278][T11640] RDX: 0000000000000000 RSI: 0000000020000180 RDI: 0000000000000003 [ 155.806256][T11640] RBP: 00007f924d4170a0 R08: 0000000000000000 R09: 0000000000000000 [ 155.814206][T11640] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 155.822156][T11640] R13: 000000000000000b R14: 00007f924e925f80 R15: 00007ffe3bd4a268 [ 155.830156][T11640] [ 155.845185][ C1] eth0: bad gso: type: 1, size: 1408 [ 155.858026][T11642] loop4: detected capacity change from 0 to 4096 [ 155.939686][T11652] loop2: detected capacity change from 0 to 512 [ 155.948993][T11652] EXT4-fs (loop2): orphan cleanup on readonly fs [ 155.950554][T11654] loop4: detected capacity change from 0 to 4096 [ 155.956324][T11652] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.3067: bg 0: block 248: padding at end of block bitmap is not set [ 155.976338][T11652] __quota_error: 341 callbacks suppressed [ 155.976349][T11652] Quota error (device loop2): write_blk: dquota write failed [ 155.989470][T11652] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 155.999389][T11652] EXT4-fs error (device loop2): ext4_acquire_dquot:6848: comm syz.2.3067: Failed to acquire dquot type 1 [ 156.012802][T11652] EXT4-fs (loop2): 1 truncate cleaned up [ 156.037635][ T29] audit: type=1400 audit(1722358709.135:1217): avc: denied { getopt } for pid=11657 comm="syz.1.3071" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 156.068907][T11663] loop1: detected capacity change from 0 to 1024 [ 156.075911][T11663] EXT4-fs: Ignoring removed oldalloc option [ 156.078026][T11665] __nla_validate_parse: 29 callbacks suppressed [ 156.078104][T11665] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3072'. [ 156.082167][T11663] EXT4-fs (loop1): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 156.134076][T11671] loop4: detected capacity change from 0 to 1024 [ 156.140763][T11671] EXT4-fs: Ignoring removed oldalloc option [ 156.147293][T11671] EXT4-fs (loop4): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 156.151338][T11673] loop1: detected capacity change from 0 to 512 [ 156.164272][T11673] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 156.175011][T11673] ext4 filesystem being mounted at /144/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 156.186518][ T29] audit: type=1400 audit(1722358709.285:1218): avc: denied { link } for pid=11672 comm="syz.1.3076" name="file0" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 156.218171][T11681] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3077'. [ 156.227790][T11681] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3077'. [ 156.334634][T11689] loop1: detected capacity change from 0 to 1024 [ 156.357069][T11689] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=8843c118, mo2=0002] [ 156.364532][T11691] loop4: detected capacity change from 0 to 4096 [ 156.417048][T11698] batman_adv: batadv0: Adding interface: dummy0 [ 156.423373][T11698] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 156.450501][T11698] batman_adv: batadv0: Interface activated: dummy0 [ 156.460558][T11698] batadv0: mtu less than device minimum [ 156.466731][T11698] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 156.477438][T11698] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 156.488215][T11698] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 156.498876][T11698] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 156.509501][T11698] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 156.520066][T11698] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 156.530635][T11698] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 156.571932][T11702] loop4: detected capacity change from 0 to 1024 [ 156.578569][T11702] EXT4-fs: Ignoring removed oldalloc option [ 156.584971][T11702] EXT4-fs (loop4): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 156.627099][T11706] loop4: detected capacity change from 0 to 1024 [ 156.633822][T11706] EXT4-fs: Ignoring removed oldalloc option [ 156.640146][T11706] EXT4-fs (loop4): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 156.706424][ T29] audit: type=1400 audit(1722358709.805:1219): avc: denied { setattr } for pid=11713 comm="syz.2.3089" name="" dev="pipefs" ino=29742 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 156.749410][T11722] FAULT_INJECTION: forcing a failure. [ 156.749410][T11722] name failslab, interval 1, probability 0, space 0, times 0 [ 156.762159][T11722] CPU: 1 UID: 0 PID: 11722 Comm: syz.3.3092 Not tainted 6.11.0-rc1-syzkaller-00043-g94ede2a3e913 #0 [ 156.772927][T11722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 156.772941][T11722] Call Trace: [ 156.772948][T11722] [ 156.772958][T11722] dump_stack_lvl+0xf2/0x150 [ 156.773060][T11722] dump_stack+0x15/0x20 [ 156.773145][T11722] should_fail_ex+0x229/0x230 [ 156.773223][T11722] ? __alloc_skb+0x10b/0x310 [ 156.773241][T11722] should_failslab+0x8f/0xb0 [ 156.773271][T11722] kmem_cache_alloc_node_noprof+0x51/0x2b0 [ 156.773304][T11722] __alloc_skb+0x10b/0x310 [ 156.773385][T11722] netlink_alloc_large_skb+0xad/0xe0 [ 156.773414][T11722] netlink_sendmsg+0x3b4/0x6e0 [ 156.773506][T11722] ? __pfx_netlink_sendmsg+0x10/0x10 [ 156.773526][T11722] __sock_sendmsg+0x140/0x180 [ 156.773596][T11722] ____sys_sendmsg+0x312/0x410 [ 156.773623][T11722] __sys_sendmsg+0x1e9/0x280 [ 156.773709][T11722] __x64_sys_sendmsg+0x46/0x50 [ 156.773733][T11722] x64_sys_call+0x26f8/0x2e00 [ 156.773755][T11722] do_syscall_64+0xc9/0x1c0 [ 156.773782][T11722] ? clear_bhb_loop+0x55/0xb0 [ 156.773806][T11722] ? clear_bhb_loop+0x55/0xb0 [ 156.773909][T11722] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.773932][T11722] RIP: 0033:0x7eff878f73b9 [ 156.773947][T11722] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 156.774029][T11722] RSP: 002b:00007eff86577048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 156.774047][T11722] RAX: ffffffffffffffda RBX: 00007eff87a85f80 RCX: 00007eff878f73b9 [ 156.774060][T11722] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000003 [ 156.774074][T11722] RBP: 00007eff865770a0 R08: 0000000000000000 R09: 0000000000000000 [ 156.774087][T11722] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 156.774131][T11722] R13: 000000000000000b R14: 00007eff87a85f80 R15: 00007ffdd611a4c8 [ 156.774145][T11722] [ 156.774848][T11726] loop2: detected capacity change from 0 to 2048 [ 156.871075][T11743] loop3: detected capacity change from 0 to 1024 [ 156.881248][T11744] loop0: detected capacity change from 0 to 1024 [ 156.891427][T11725] loop4: detected capacity change from 0 to 2048 [ 156.898956][T11743] EXT4-fs: Ignoring removed oldalloc option [ 156.903666][T11744] EXT4-fs: Ignoring removed oldalloc option [ 156.925770][T11743] EXT4-fs (loop3): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 156.942730][T10093] EXT4-fs error (device loop2): ext4_ext_check_inode:520: inode #16: comm syz-executor: pblk 0 bad header/extent: too large eh_max - magic f30a, entries 1, max 255(4), depth 0(0) [ 156.947803][T11744] EXT4-fs (loop0): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 156.956876][T10093] EXT4-fs error (device loop2): ext4_ext_check_inode:520: inode #16: comm syz-executor: pblk 0 bad header/extent: too large eh_max - magic f30a, entries 1, max 255(4), depth 0(0) [ 157.083905][T11725] loop4: p1 < > p3 [ 157.088226][T11725] loop4: p3 size 134217728 extends beyond EOD, truncated [ 157.101645][T11725] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3094'. [ 157.110992][T11725] netlink: 'syz.4.3094': attribute type 8 has an invalid length. [ 157.113187][T11755] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3101'. [ 157.196983][T11767] FAULT_INJECTION: forcing a failure. [ 157.196983][T11767] name failslab, interval 1, probability 0, space 0, times 0 [ 157.209780][T11767] CPU: 1 UID: 0 PID: 11767 Comm: syz.1.3107 Not tainted 6.11.0-rc1-syzkaller-00043-g94ede2a3e913 #0 [ 157.220657][T11767] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 157.230799][T11767] Call Trace: [ 157.234065][T11767] [ 157.236984][T11767] dump_stack_lvl+0xf2/0x150 [ 157.241583][T11767] dump_stack+0x15/0x20 [ 157.245827][T11767] should_fail_ex+0x229/0x230 [ 157.250528][T11767] ? ip_options_get+0x51/0x330 [ 157.255285][T11767] should_failslab+0x8f/0xb0 [ 157.259871][T11767] __kmalloc_noprof+0xa5/0x370 [ 157.264631][T11767] ip_options_get+0x51/0x330 [ 157.269240][T11767] ? mod_objcg_state+0x2ea/0x4f0 [ 157.274173][T11767] ip_cmsg_send+0x3f1/0x5e0 [ 157.278665][T11767] udp_sendmsg+0x7e7/0x12f0 [ 157.283232][T11767] ? udp_lib_get_port+0xd19/0xdc0 [ 157.288250][T11767] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 157.293858][T11767] ? __rcu_read_unlock+0x4e/0x70 [ 157.298929][T11767] ? ip4_datagram_release_cb+0x3f9/0x430 [ 157.304554][T11767] ? __pfx_udp_sendmsg+0x10/0x10 [ 157.309575][T11767] inet_sendmsg+0xaf/0xd0 [ 157.313894][T11767] __sock_sendmsg+0x102/0x180 [ 157.318637][T11767] ____sys_sendmsg+0x312/0x410 [ 157.323395][T11767] __sys_sendmsg+0x1e9/0x280 [ 157.328018][T11767] __x64_sys_sendmsg+0x46/0x50 [ 157.332828][T11767] x64_sys_call+0x26f8/0x2e00 [ 157.337548][T11767] do_syscall_64+0xc9/0x1c0 [ 157.342107][T11767] ? clear_bhb_loop+0x55/0xb0 [ 157.346776][T11767] ? clear_bhb_loop+0x55/0xb0 [ 157.351442][T11767] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.357336][T11767] RIP: 0033:0x7fbcb1c873b9 [ 157.361762][T11767] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 157.381387][T11767] RSP: 002b:00007fbcb0907048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 157.389816][T11767] RAX: ffffffffffffffda RBX: 00007fbcb1e15f80 RCX: 00007fbcb1c873b9 [ 157.397775][T11767] RDX: 0000000000000000 RSI: 0000000020007940 RDI: 0000000000000003 [ 157.405867][T11767] RBP: 00007fbcb09070a0 R08: 0000000000000000 R09: 0000000000000000 [ 157.413826][T11767] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 157.421853][T11767] R13: 000000000000004d R14: 00007fbcb1e15f80 R15: 00007ffe35a2ac58 [ 157.429893][T11767] [ 157.440120][ T29] audit: type=1326 audit(1722358710.535:1220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11769 comm="syz.4.3109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9982a73b9 code=0x7ffc0000 [ 157.457194][T11770] loop4: detected capacity change from 0 to 1024 [ 157.463810][ T29] audit: type=1326 audit(1722358710.545:1221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11769 comm="syz.4.3109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=77 compat=0 ip=0x7fd9982a73b9 code=0x7ffc0000 [ 157.493328][ T29] audit: type=1326 audit(1722358710.545:1222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11769 comm="syz.4.3109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9982a73b9 code=0x7ffc0000 [ 157.516903][ T29] audit: type=1326 audit(1722358710.545:1223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11769 comm="syz.4.3109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fd9982a73b9 code=0x7ffc0000 [ 157.531715][T11770] ext4 filesystem being mounted at /638/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 157.540378][ T29] audit: type=1326 audit(1722358710.545:1224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11769 comm="syz.4.3109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9982a73b9 code=0x7ffc0000 [ 157.592960][T11781] loop0: detected capacity change from 0 to 2048 [ 157.608535][ T6500] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.635428][T11781] loop0: p1 < > p3 [ 157.639795][T11781] loop0: p3 size 134217728 extends beyond EOD, truncated [ 157.650587][T11781] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3113'. [ 157.660306][T11781] netlink: 'syz.0.3113': attribute type 8 has an invalid length. [ 157.697395][ T6500] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.736547][T11796] loop1: detected capacity change from 0 to 4096 [ 157.747342][ T6500] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.764868][T11803] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3121'. [ 157.777300][T11803] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3121'. [ 157.815126][ T6500] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.936821][T11820] loop3: detected capacity change from 0 to 512 [ 157.947649][ T6500] bridge_slave_1: left allmulticast mode [ 157.949948][T11820] EXT4-fs (loop3): orphan cleanup on readonly fs [ 157.953321][ T6500] bridge_slave_1: left promiscuous mode [ 157.953398][ T6500] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.960417][T11820] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.3124: bg 0: block 248: padding at end of block bitmap is not set [ 157.987142][T11820] EXT4-fs error (device loop3): ext4_acquire_dquot:6848: comm syz.3.3124: Failed to acquire dquot type 1 [ 157.998988][ T6500] bridge_slave_0: left allmulticast mode [ 158.003121][T11820] EXT4-fs (loop3): 1 truncate cleaned up [ 158.004644][ T6500] bridge_slave_0: left promiscuous mode [ 158.015963][ T6500] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.040399][T11827] loop1: detected capacity change from 0 to 512 [ 158.106005][ T6500] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 158.116309][ T6500] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 158.126595][ T6500] bond0 (unregistering): Released all slaves [ 158.135456][T11790] chnl_net:caif_netlink_parms(): no params data found [ 158.137049][T11834] loop1: detected capacity change from 0 to 1024 [ 158.154757][T11834] ext4 filesystem being mounted at /160/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 158.183006][T11790] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.190159][T11790] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.197424][T11790] bridge_slave_0: entered allmulticast mode [ 158.203859][T11790] bridge_slave_0: entered promiscuous mode [ 158.212011][ T6500] hsr_slave_0: left promiscuous mode [ 158.217653][ T6500] hsr_slave_1: left promiscuous mode [ 158.223581][ T6500] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 158.230953][ T6500] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 158.238635][ T6500] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 158.246051][ T6500] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 158.255964][ T6500] veth1_macvtap: left promiscuous mode [ 158.261431][ T6500] veth0_macvtap: left promiscuous mode [ 158.266944][ T6500] veth1_vlan: left promiscuous mode [ 158.272205][ T6500] veth0_vlan: left promiscuous mode [ 158.342523][ T6500] team0 (unregistering): Port device team_slave_1 removed [ 158.352406][ T6500] team0 (unregistering): Port device team_slave_0 removed [ 158.387366][T11790] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.394549][T11790] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.402137][T11790] bridge_slave_1: entered allmulticast mode [ 158.408463][T11790] bridge_slave_1: entered promiscuous mode [ 158.425023][T11790] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 158.435362][T11790] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 158.453074][T11790] team0: Port device team_slave_0 added [ 158.459391][T11790] team0: Port device team_slave_1 added [ 158.472962][T11790] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 158.479932][T11790] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 158.505844][T11790] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 158.517126][T11790] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 158.524109][T11790] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 158.550014][T11790] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 158.573562][T11790] hsr_slave_0: entered promiscuous mode [ 158.579515][T11790] hsr_slave_1: entered promiscuous mode [ 158.585456][T11790] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 158.593010][T11790] Cannot create hsr debugfs directory [ 158.763422][T11852] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3135'. [ 158.772925][T11852] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3135'. [ 158.868407][T11858] batman_adv: batadv0: Adding interface: dummy0 [ 158.874670][T11858] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 158.900107][T11858] batman_adv: batadv0: Interface activated: dummy0 [ 158.913027][T11858] net_ratelimit: 12 callbacks suppressed [ 158.913040][T11858] batadv0: mtu less than device minimum [ 158.924728][T11858] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 158.935350][T11858] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 158.946140][T11858] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 158.956926][T11858] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 158.967519][T11858] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 158.978078][T11858] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 158.988789][T11858] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 158.999445][T11858] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 159.010132][T11858] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 159.049782][T11790] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 159.060829][T11790] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 159.082831][T11790] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 159.091818][T11790] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 159.108264][T11790] bridge0: port 2(bridge_slave_1) entered blocking state [ 159.115403][T11790] bridge0: port 2(bridge_slave_1) entered forwarding state [ 159.122655][T11790] bridge0: port 1(bridge_slave_0) entered blocking state [ 159.129747][T11790] bridge0: port 1(bridge_slave_0) entered forwarding state [ 159.155379][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.165182][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.173707][T11867] loop0: detected capacity change from 0 to 512 [ 159.181311][T11867] EXT4-fs (loop0): orphan cleanup on readonly fs [ 159.188655][T11867] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.3140: bg 0: block 248: padding at end of block bitmap is not set [ 159.203508][T11867] EXT4-fs error (device loop0): ext4_acquire_dquot:6848: comm syz.0.3140: Failed to acquire dquot type 1 [ 159.215477][T11867] EXT4-fs (loop0): 1 truncate cleaned up [ 159.219502][T11790] 8021q: adding VLAN 0 to HW filter on device bond0 [ 159.234503][T11790] 8021q: adding VLAN 0 to HW filter on device team0 [ 159.244233][ T3341] bridge0: port 1(bridge_slave_0) entered blocking state [ 159.251353][ T3341] bridge0: port 1(bridge_slave_0) entered forwarding state [ 159.265456][ T24] bridge0: port 2(bridge_slave_1) entered blocking state [ 159.272517][ T24] bridge0: port 2(bridge_slave_1) entered forwarding state [ 159.294212][T11790] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 159.304715][T11790] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 159.345640][T11880] loop3: detected capacity change from 0 to 1024 [ 159.355946][T11880] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=8843c118, mo2=0002] [ 159.366606][T11790] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 159.427669][T11790] veth0_vlan: entered promiscuous mode [ 159.436270][T11790] veth1_vlan: entered promiscuous mode [ 159.451016][T11790] veth0_macvtap: entered promiscuous mode [ 159.458347][T11790] veth1_macvtap: entered promiscuous mode [ 159.469152][T11790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 159.479692][T11790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.489526][T11790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 159.499978][T11790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.509914][T11790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 159.520329][T11790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.530138][T11790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 159.540587][T11790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.550393][T11790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 159.560861][T11790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.570691][T11790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 159.581097][T11790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.590909][T11790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 159.601315][T11790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.612007][T11790] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 159.623449][T11790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 159.633999][T11790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.643848][T11790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 159.654366][T11790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.664254][T11790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 159.674676][T11790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.684560][T11790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 159.694969][T11790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.704777][T11790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 159.715309][T11790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.725123][T11790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 159.735528][T11790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.745355][T11790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 159.755767][T11790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.766476][T11790] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 159.776465][T11790] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.785297][T11790] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.794079][T11790] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.802798][T11790] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.896466][T11897] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 160.164867][T11914] loop0: detected capacity change from 0 to 4096 [ 160.316168][T11932] loop3: detected capacity change from 0 to 512 [ 160.325294][T11932] EXT4-fs (loop3): orphan cleanup on readonly fs [ 160.332309][T11932] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.3161: bg 0: block 248: padding at end of block bitmap is not set [ 160.348573][T11932] EXT4-fs error (device loop3): ext4_acquire_dquot:6848: comm syz.3.3161: Failed to acquire dquot type 1 [ 160.361437][T11932] EXT4-fs (loop3): 1 truncate cleaned up [ 160.390254][T11941] loop0: detected capacity change from 0 to 2048 [ 160.423962][T11945] loop4: detected capacity change from 0 to 4096 [ 160.446528][T11941] loop0: p1 < > p3 [ 160.451005][T11941] loop0: p3 size 134217728 extends beyond EOD, truncated [ 160.463033][T11941] netlink: 'syz.0.3167': attribute type 8 has an invalid length. [ 160.482714][T11950] loop4: detected capacity change from 0 to 512 [ 160.513786][T11956] loop0: detected capacity change from 0 to 1024 [ 160.520507][T11956] EXT4-fs: Ignoring removed nomblk_io_submit option [ 160.527421][T11956] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 160.651350][T11973] loop0: detected capacity change from 0 to 1024 [ 160.664282][T11973] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=8843c118, mo2=0002] [ 160.705576][T11977] FAULT_INJECTION: forcing a failure. [ 160.705576][T11977] name failslab, interval 1, probability 0, space 0, times 0 [ 160.718364][T11977] CPU: 1 UID: 0 PID: 11977 Comm: syz.0.3182 Not tainted 6.11.0-rc1-syzkaller-00043-g94ede2a3e913 #0 [ 160.729261][T11977] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 160.739292][T11977] Call Trace: [ 160.742555][T11977] [ 160.745506][T11977] dump_stack_lvl+0xf2/0x150 [ 160.750147][T11977] dump_stack+0x15/0x20 [ 160.754286][T11977] should_fail_ex+0x229/0x230 [ 160.758946][T11977] ? io_alloc_page_table+0x90/0x100 [ 160.764291][T11977] should_failslab+0x8f/0xb0 [ 160.768875][T11977] __kmalloc_noprof+0xa5/0x370 [ 160.773631][T11977] io_alloc_page_table+0x90/0x100 [ 160.778792][T11977] io_rsrc_data_alloc+0x7c/0x1a0 [ 160.783713][T11977] io_sqe_buffers_register+0xdf/0x420 [ 160.789073][T11977] ? __fget_files+0x1da/0x210 [ 160.793741][T11977] __se_sys_io_uring_register+0x96a/0x1070 [ 160.799544][T11977] __x64_sys_io_uring_register+0x55/0x70 [ 160.805180][T11977] x64_sys_call+0xb9d/0x2e00 [ 160.809837][T11977] do_syscall_64+0xc9/0x1c0 [ 160.814348][T11977] ? clear_bhb_loop+0x55/0xb0 [ 160.819081][T11977] ? clear_bhb_loop+0x55/0xb0 [ 160.823781][T11977] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.829677][T11977] RIP: 0033:0x7fb2330773b9 [ 160.834085][T11977] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 160.853703][T11977] RSP: 002b:00007fb231cf7048 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 160.862149][T11977] RAX: ffffffffffffffda RBX: 00007fb233205f80 RCX: 00007fb2330773b9 [ 160.870122][T11977] RDX: 00000000200002c0 RSI: 0000000000000000 RDI: 0000000000000003 [ 160.878105][T11977] RBP: 00007fb231cf70a0 R08: 0000000000000000 R09: 0000000000000000 [ 160.886198][T11977] R10: 100000000000011a R11: 0000000000000246 R12: 0000000000000001 [ 160.894169][T11977] R13: 000000000000004d R14: 00007fb233205f80 R15: 00007ffc25cd56a8 [ 160.902143][T11977] [ 161.154979][T12019] __nla_validate_parse: 13 callbacks suppressed [ 161.155062][T12019] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3199'. [ 161.172181][T12019] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3199'. [ 161.459587][T12041] loop4: detected capacity change from 0 to 512 [ 161.468742][T12041] EXT4-fs (loop4): orphan cleanup on readonly fs [ 161.477793][T12041] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.3205: bg 0: block 248: padding at end of block bitmap is not set [ 161.492794][T12041] __quota_error: 136 callbacks suppressed [ 161.492853][T12041] Quota error (device loop4): write_blk: dquota write failed [ 161.506022][T12041] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 161.515929][T12041] EXT4-fs error (device loop4): ext4_acquire_dquot:6848: comm syz.4.3205: Failed to acquire dquot type 1 [ 161.530257][T12041] EXT4-fs (loop4): 1 truncate cleaned up [ 161.623384][T12037] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3206'. [ 161.632397][T12040] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3207'. [ 161.641684][T12044] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3206'. [ 161.655431][ T29] audit: type=1326 audit(1722358714.755:1355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12046 comm="syz.3.3208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff878f73b9 code=0x7ffc0000 [ 161.679011][ T29] audit: type=1326 audit(1722358714.755:1356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12046 comm="syz.3.3208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=77 compat=0 ip=0x7eff878f73b9 code=0x7ffc0000 [ 161.702485][ T29] audit: type=1326 audit(1722358714.755:1357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12046 comm="syz.3.3208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff878f73b9 code=0x7ffc0000 [ 161.726255][ T29] audit: type=1326 audit(1722358714.755:1358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12046 comm="syz.3.3208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff878f73b9 code=0x7ffc0000 [ 161.751265][ T29] audit: type=1326 audit(1722358714.755:1359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12046 comm="syz.3.3208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7eff878f73b9 code=0x7ffc0000 [ 161.774772][ T29] audit: type=1326 audit(1722358714.755:1360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12046 comm="syz.3.3208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff878f73b9 code=0x7ffc0000 [ 161.798335][ T29] audit: type=1326 audit(1722358714.755:1361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12046 comm="syz.3.3208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7eff878f73b9 code=0x7ffc0000 [ 161.821651][ T29] audit: type=1326 audit(1722358714.755:1362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12046 comm="syz.3.3208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff878f73b9 code=0x7ffc0000 [ 161.846799][T12047] loop3: detected capacity change from 0 to 1024 [ 161.858837][T12054] syz.2.3211[12054] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 161.858950][T12054] syz.2.3211[12054] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 161.866111][T12053] syz.2.3211[12053] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 161.882189][T12053] syz.2.3211[12053] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 161.895261][T12047] ext4 filesystem being mounted at /181/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 162.009774][T12076] loop2: detected capacity change from 0 to 256 [ 162.224168][T12096] netlink: 'syz.4.3227': attribute type 1 has an invalid length. [ 162.231923][T12096] netlink: 'syz.4.3227': attribute type 2 has an invalid length. [ 162.248415][T12098] netlink: 'syz.1.3228': attribute type 1 has an invalid length. [ 162.256221][T12098] netlink: 'syz.1.3228': attribute type 2 has an invalid length. [ 162.273873][T12098] FAULT_INJECTION: forcing a failure. [ 162.273873][T12098] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 162.286970][T12098] CPU: 1 UID: 0 PID: 12098 Comm: syz.1.3228 Not tainted 6.11.0-rc1-syzkaller-00043-g94ede2a3e913 #0 [ 162.297715][T12098] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 162.307782][T12098] Call Trace: [ 162.311039][T12098] [ 162.313972][T12098] dump_stack_lvl+0xf2/0x150 [ 162.318549][T12098] dump_stack+0x15/0x20 [ 162.322686][T12098] should_fail_ex+0x229/0x230 [ 162.327411][T12098] should_fail+0xb/0x10 [ 162.331554][T12098] should_fail_usercopy+0x1a/0x20 [ 162.336582][T12098] _copy_from_user+0x1e/0xd0 [ 162.341155][T12098] autofs_dev_ioctl+0xd6/0x630 [ 162.345907][T12098] ? __pfx_autofs_dev_ioctl+0x10/0x10 [ 162.351290][T12098] __se_sys_ioctl+0xd3/0x150 [ 162.355898][T12098] __x64_sys_ioctl+0x43/0x50 [ 162.360472][T12098] x64_sys_call+0x1688/0x2e00 [ 162.365206][T12098] do_syscall_64+0xc9/0x1c0 [ 162.369881][T12098] ? clear_bhb_loop+0x55/0xb0 [ 162.374540][T12098] ? clear_bhb_loop+0x55/0xb0 [ 162.379199][T12098] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.385312][T12098] RIP: 0033:0x7fbcb1c873b9 [ 162.389712][T12098] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 162.409297][T12098] RSP: 002b:00007fbcb0907048 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 162.417735][T12098] RAX: ffffffffffffffda RBX: 00007fbcb1e15f80 RCX: 00007fbcb1c873b9 [ 162.425696][T12098] RDX: 0000000020000080 RSI: 00000000c0189375 RDI: 0000000000000007 [ 162.433712][T12098] RBP: 00007fbcb09070a0 R08: 0000000000000000 R09: 0000000000000000 [ 162.441669][T12098] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 162.449630][T12098] R13: 000000000000004d R14: 00007fbcb1e15f80 R15: 00007ffe35a2ac58 [ 162.457656][T12098] [ 162.694100][T12128] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3240'. [ 162.706102][T12128] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3240'. [ 162.732782][T12130] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3241'. [ 162.748729][T12126] loop2: detected capacity change from 0 to 764 [ 162.757731][T12126] Symlink component flag not implemented [ 162.763826][T12126] Symlink component flag not implemented (129) [ 162.823608][T12139] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3246'. [ 162.849234][T12145] loop0: detected capacity change from 0 to 4096 [ 162.944133][T12160] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3255'. [ 163.075430][T12184] loop0: detected capacity change from 0 to 128 [ 163.264344][T12194] loop4: detected capacity change from 0 to 128 [ 163.345661][T12194] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 163.373846][T12194] FAT-fs (loop4): FAT read failed (blocknr 128) [ 163.482023][T12197] bond3: entered promiscuous mode [ 163.641542][T12216] loop1: detected capacity change from 0 to 4096 [ 163.815813][T12227] bond5: entered promiscuous mode [ 163.974464][T12242] FAULT_INJECTION: forcing a failure. [ 163.974464][T12242] name failslab, interval 1, probability 0, space 0, times 0 [ 163.987103][T12242] CPU: 0 UID: 0 PID: 12242 Comm: syz.2.3288 Not tainted 6.11.0-rc1-syzkaller-00043-g94ede2a3e913 #0 [ 163.997981][T12242] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 164.008030][T12242] Call Trace: [ 164.011373][T12242] [ 164.014295][T12242] dump_stack_lvl+0xf2/0x150 [ 164.018889][T12242] dump_stack+0x15/0x20 [ 164.023104][T12242] should_fail_ex+0x229/0x230 [ 164.027769][T12242] ? tun_device_event+0x40b/0x9e0 [ 164.032812][T12242] should_failslab+0x8f/0xb0 [ 164.037398][T12242] __kmalloc_noprof+0xa5/0x370 [ 164.042191][T12242] tun_device_event+0x40b/0x9e0 [ 164.047047][T12242] ? inetdev_event+0x456/0xb10 [ 164.051843][T12242] ? macvtap_device_event+0x70/0x320 [ 164.057180][T12242] ? team_device_event+0xf3/0x600 [ 164.062260][T12242] ? __pfx_tun_device_event+0x10/0x10 [ 164.067637][T12242] raw_notifier_call_chain+0x6f/0x1d0 [ 164.073027][T12242] call_netdevice_notifiers_info+0xae/0x100 [ 164.078913][T12242] dev_change_tx_queue_len+0xbb/0x170 [ 164.084271][T12242] dev_ifsioc+0x63e/0xa10 [ 164.088635][T12242] dev_ioctl+0x7fa/0xab0 [ 164.092861][T12242] sock_do_ioctl+0x11c/0x260 [ 164.097479][T12242] sock_ioctl+0x470/0x640 [ 164.101791][T12242] ? __pfx_sock_ioctl+0x10/0x10 [ 164.106770][T12242] __se_sys_ioctl+0xd3/0x150 [ 164.111419][T12242] __x64_sys_ioctl+0x43/0x50 [ 164.116015][T12242] x64_sys_call+0x1688/0x2e00 [ 164.120772][T12242] do_syscall_64+0xc9/0x1c0 [ 164.125267][T12242] ? clear_bhb_loop+0x55/0xb0 [ 164.129927][T12242] ? clear_bhb_loop+0x55/0xb0 [ 164.134662][T12242] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.140581][T12242] RIP: 0033:0x7f944b8d73b9 [ 164.145035][T12242] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 164.164625][T12242] RSP: 002b:00007f944a557048 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 164.173016][T12242] RAX: ffffffffffffffda RBX: 00007f944ba65f80 RCX: 00007f944b8d73b9 [ 164.181059][T12242] RDX: 0000000020002280 RSI: 0000000000008943 RDI: 0000000000000006 [ 164.189015][T12242] RBP: 00007f944a5570a0 R08: 0000000000000000 R09: 0000000000000000 [ 164.197028][T12242] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 164.204986][T12242] R13: 000000000000000b R14: 00007f944ba65f80 R15: 00007ffe8063cac8 [ 164.212943][T12242] [ 164.216375][T12242] syzkaller0: refused to change device tx_queue_len [ 164.357484][T12269] loop4: detected capacity change from 0 to 4096 [ 164.376028][T12271] loop0: detected capacity change from 0 to 4096 [ 164.448345][ C1] net_ratelimit: 10 callbacks suppressed [ 164.448362][ C1] eth0: bad gso: type: 1, size: 1408 [ 164.486674][ C1] eth0: bad gso: type: 1, size: 1408 [ 164.534204][T12296] loop4: detected capacity change from 0 to 4096 [ 164.540245][T12299] loop1: detected capacity change from 0 to 2048 [ 164.547489][T12299] EXT4-fs (loop1): stripe (1025) is not aligned with cluster size (16), stripe is disabled [ 164.571430][ C1] eth0: bad gso: type: 1, size: 1408 [ 164.637976][T12310] loop0: detected capacity change from 0 to 512 [ 164.686506][T12310] ext4 filesystem being mounted at /800/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 164.862877][T12337] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 164.905420][T12343] loop3: detected capacity change from 0 to 2048 [ 164.912275][T12343] EXT4-fs (loop3): stripe (1025) is not aligned with cluster size (16), stripe is disabled [ 165.079390][T12354] loop3: detected capacity change from 0 to 4096 [ 165.190259][T12363] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 165.361138][T12375] loop1: detected capacity change from 0 to 2048 [ 165.368380][T12375] EXT4-fs (loop1): stripe (1025) is not aligned with cluster size (16), stripe is disabled [ 165.533546][T12380] bond6: entered promiscuous mode [ 165.542066][T12380] 8021q: adding VLAN 0 to HW filter on device bond6 [ 165.574614][T12380] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 165.592600][T12383] loop1: detected capacity change from 0 to 4096 [ 165.594327][T12380] batadv1: entered promiscuous mode [ 165.608817][T12380] bond6: (slave batadv1): Enslaving as an active interface with an up link [ 165.649929][T12390] loop4: detected capacity change from 0 to 512 [ 165.672158][T12390] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 165.691349][T12390] EXT4-fs (loop4): invalid journal inode [ 165.727084][T12390] EXT4-fs (loop4): can't get journal size [ 165.748415][T12390] EXT4-fs (loop4): 1 truncate cleaned up [ 165.762239][T12390] No source specified [ 165.811499][T12406] FAULT_INJECTION: forcing a failure. [ 165.811499][T12406] name failslab, interval 1, probability 0, space 0, times 0 [ 165.824290][T12406] CPU: 1 UID: 0 PID: 12406 Comm: syz.4.3353 Not tainted 6.11.0-rc1-syzkaller-00043-g94ede2a3e913 #0 [ 165.835124][T12406] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 165.845199][T12406] Call Trace: [ 165.848477][T12406] [ 165.851400][T12406] dump_stack_lvl+0xf2/0x150 [ 165.856073][T12406] dump_stack+0x15/0x20 [ 165.860268][T12406] should_fail_ex+0x229/0x230 [ 165.865089][T12406] ? skb_clone+0x154/0x1f0 [ 165.869514][T12406] should_failslab+0x8f/0xb0 [ 165.874110][T12406] kmem_cache_alloc_noprof+0x4c/0x290 [ 165.879475][T12406] skb_clone+0x154/0x1f0 [ 165.883716][T12406] __netlink_deliver_tap+0x2bd/0x4c0 [ 165.889061][T12406] netlink_unicast+0x641/0x670 [ 165.893907][T12406] netlink_sendmsg+0x5cc/0x6e0 [ 165.898660][T12406] ? __pfx_netlink_sendmsg+0x10/0x10 [ 165.903985][T12406] __sock_sendmsg+0x140/0x180 [ 165.908738][T12406] ____sys_sendmsg+0x312/0x410 [ 165.913500][T12406] __sys_sendmsg+0x1e9/0x280 [ 165.918122][T12406] __x64_sys_sendmsg+0x46/0x50 [ 165.922935][T12406] x64_sys_call+0x26f8/0x2e00 [ 165.927602][T12406] do_syscall_64+0xc9/0x1c0 [ 165.932153][T12406] ? clear_bhb_loop+0x55/0xb0 [ 165.936885][T12406] ? clear_bhb_loop+0x55/0xb0 [ 165.941552][T12406] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.947482][T12406] RIP: 0033:0x7fd9982a73b9 [ 165.951887][T12406] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 165.971547][T12406] RSP: 002b:00007fd996f27048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 165.979947][T12406] RAX: ffffffffffffffda RBX: 00007fd998435f80 RCX: 00007fd9982a73b9 [ 165.987912][T12406] RDX: 0000000000000000 RSI: 000000002000c2c0 RDI: 0000000000000003 [ 165.995911][T12406] RBP: 00007fd996f270a0 R08: 0000000000000000 R09: 0000000000000000 [ 166.003866][T12406] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 166.011835][T12406] R13: 000000000000000b R14: 00007fd998435f80 R15: 00007fff6e1b8098 [ 166.019813][T12406] [ 166.045693][T12410] loop1: detected capacity change from 0 to 2048 [ 166.052948][T12410] EXT4-fs (loop1): stripe (1025) is not aligned with cluster size (16), stripe is disabled [ 166.215251][T12430] __nla_validate_parse: 20 callbacks suppressed [ 166.215267][T12430] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3361'. [ 166.232930][T12427] FAULT_INJECTION: forcing a failure. [ 166.232930][T12427] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 166.246049][T12427] CPU: 0 UID: 0 PID: 12427 Comm: syz.0.3360 Not tainted 6.11.0-rc1-syzkaller-00043-g94ede2a3e913 #0 [ 166.256898][T12427] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 166.266937][T12427] Call Trace: [ 166.270200][T12427] [ 166.273189][T12427] dump_stack_lvl+0xf2/0x150 [ 166.277777][T12427] dump_stack+0x15/0x20 [ 166.281922][T12427] should_fail_ex+0x229/0x230 [ 166.286592][T12427] should_fail+0xb/0x10 [ 166.290790][T12427] should_fail_usercopy+0x1a/0x20 [ 166.295812][T12427] _copy_from_user+0x1e/0xd0 [ 166.300490][T12427] copy_msghdr_from_user+0x54/0x2a0 [ 166.305701][T12427] __sys_sendmsg+0x17d/0x280 [ 166.310370][T12427] __x64_sys_sendmsg+0x46/0x50 [ 166.315126][T12427] x64_sys_call+0x26f8/0x2e00 [ 166.319818][T12427] do_syscall_64+0xc9/0x1c0 [ 166.324314][T12427] ? clear_bhb_loop+0x55/0xb0 [ 166.328981][T12427] ? clear_bhb_loop+0x55/0xb0 [ 166.333728][T12427] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.339632][T12427] RIP: 0033:0x7fb2330773b9 [ 166.344034][T12427] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 166.363640][T12427] RSP: 002b:00007fb231cf7048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 166.372040][T12427] RAX: ffffffffffffffda RBX: 00007fb233205f80 RCX: 00007fb2330773b9 [ 166.379997][T12427] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 166.387988][T12427] RBP: 00007fb231cf70a0 R08: 0000000000000000 R09: 0000000000000000 [ 166.395963][T12427] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 166.403922][T12427] R13: 000000000000004d R14: 00007fb233205f80 R15: 00007ffc25cd56a8 [ 166.411924][T12427] [ 166.485813][T12410] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3354'. [ 166.704500][T12449] loop4: detected capacity change from 0 to 2048 [ 166.763692][T12449] loop4: p1 < > p3 [ 166.768080][T12449] loop4: p3 size 134217728 extends beyond EOD, truncated [ 166.807622][T12449] netlink: 'syz.4.3370': attribute type 8 has an invalid length. [ 166.864434][T12461] loop1: detected capacity change from 0 to 2048 [ 166.889455][T12461] tap0: tun_chr_ioctl cmd 2147767506 [ 166.905812][T12472] FAULT_INJECTION: forcing a failure. [ 166.905812][T12472] name failslab, interval 1, probability 0, space 0, times 0 [ 166.918478][T12472] CPU: 1 UID: 0 PID: 12472 Comm: syz.0.3379 Not tainted 6.11.0-rc1-syzkaller-00043-g94ede2a3e913 #0 [ 166.929370][T12472] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 166.939466][T12472] Call Trace: [ 166.942740][T12472] [ 166.945699][T12472] dump_stack_lvl+0xf2/0x150 [ 166.950298][T12472] dump_stack+0x15/0x20 [ 166.954460][T12472] should_fail_ex+0x229/0x230 [ 166.959144][T12472] ? getname_flags+0x81/0x3b0 [ 166.963949][T12472] should_failslab+0x8f/0xb0 [ 166.968556][T12472] kmem_cache_alloc_noprof+0x4c/0x290 [ 166.974019][T12472] getname_flags+0x81/0x3b0 [ 166.978594][T12472] user_path_at+0x26/0x110 [ 166.983023][T12472] __se_sys_chroot+0x4c/0x180 [ 166.987839][T12472] __x64_sys_chroot+0x1f/0x30 [ 166.992510][T12472] x64_sys_call+0x2bd0/0x2e00 [ 166.997256][T12472] do_syscall_64+0xc9/0x1c0 [ 167.001772][T12472] ? clear_bhb_loop+0x55/0xb0 [ 167.006494][T12472] ? clear_bhb_loop+0x55/0xb0 [ 167.011254][T12472] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.017155][T12472] RIP: 0033:0x7fb2330773b9 [ 167.021567][T12472] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 167.041172][T12472] RSP: 002b:00007fb231cf7048 EFLAGS: 00000246 ORIG_RAX: 00000000000000a1 [ 167.049655][T12472] RAX: ffffffffffffffda RBX: 00007fb233205f80 RCX: 00007fb2330773b9 [ 167.057639][T12472] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000300 [ 167.065691][T12472] RBP: 00007fb231cf70a0 R08: 0000000000000000 R09: 0000000000000000 [ 167.073717][T12472] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 167.081702][T12472] R13: 000000000000004d R14: 00007fb233205f80 R15: 00007ffc25cd56a8 [ 167.089677][T12472] [ 167.163852][T12480] FAULT_INJECTION: forcing a failure. [ 167.163852][T12480] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 167.176957][T12480] CPU: 0 UID: 0 PID: 12480 Comm: syz.3.3383 Not tainted 6.11.0-rc1-syzkaller-00043-g94ede2a3e913 #0 [ 167.187763][T12480] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 167.197832][T12480] Call Trace: [ 167.201108][T12480] [ 167.204035][T12480] dump_stack_lvl+0xf2/0x150 [ 167.208781][T12480] dump_stack+0x15/0x20 [ 167.213025][T12480] should_fail_ex+0x229/0x230 [ 167.217713][T12480] should_fail+0xb/0x10 [ 167.221893][T12480] should_fail_usercopy+0x1a/0x20 [ 167.226969][T12480] _copy_from_iter+0xd3/0xb00 [ 167.231705][T12480] ? kmalloc_reserve+0x16e/0x190 [ 167.236668][T12480] ? __build_skb_around+0x196/0x1f0 [ 167.241966][T12480] ? __virt_addr_valid+0x1ed/0x250 [ 167.247081][T12480] ? __check_object_size+0x35b/0x510 [ 167.252464][T12480] pfkey_sendmsg+0x16c/0x970 [ 167.257094][T12480] ? avc_has_perm+0xd4/0x160 [ 167.261682][T12480] ? selinux_socket_sendmsg+0x182/0x1b0 [ 167.267324][T12480] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 167.272508][T12480] __sock_sendmsg+0x140/0x180 [ 167.277198][T12480] ____sys_sendmsg+0x312/0x410 [ 167.281968][T12480] __sys_sendmsg+0x1e9/0x280 [ 167.286562][T12480] __x64_sys_sendmsg+0x46/0x50 [ 167.291331][T12480] x64_sys_call+0x26f8/0x2e00 [ 167.296040][T12480] do_syscall_64+0xc9/0x1c0 [ 167.300610][T12480] ? clear_bhb_loop+0x55/0xb0 [ 167.305298][T12480] ? clear_bhb_loop+0x55/0xb0 [ 167.309982][T12480] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.316049][T12480] RIP: 0033:0x7eff878f73b9 [ 167.320512][T12480] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 167.340195][T12480] RSP: 002b:00007eff86577048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 167.348653][T12480] RAX: ffffffffffffffda RBX: 00007eff87a85f80 RCX: 00007eff878f73b9 [ 167.356625][T12480] RDX: 0000000000000000 RSI: 0000000020000180 RDI: 0000000000000003 [ 167.364669][T12480] RBP: 00007eff865770a0 R08: 0000000000000000 R09: 0000000000000000 [ 167.372641][T12480] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 167.380609][T12480] R13: 000000000000000b R14: 00007eff87a85f80 R15: 00007ffdd611a4c8 [ 167.388579][T12480] [ 167.418289][T12484] loop0: detected capacity change from 0 to 2048 [ 167.475490][T12484] loop0: p1 < > p3 [ 167.480486][T12484] loop0: p3 size 134217728 extends beyond EOD, truncated [ 167.492872][T12484] netlink: 'syz.0.3385': attribute type 8 has an invalid length. [ 167.553252][ T29] kauditd_printk_skb: 72 callbacks suppressed [ 167.553264][ T29] audit: type=1326 audit(1722358720.645:1435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12501 comm="syz.1.3394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcb1c873b9 code=0x7ffc0000 [ 167.582911][ T29] audit: type=1326 audit(1722358720.645:1436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12501 comm="syz.1.3394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcb1c873b9 code=0x7ffc0000 [ 167.596287][T12503] loop1: detected capacity change from 0 to 512 [ 167.606444][ T29] audit: type=1326 audit(1722358720.645:1437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12501 comm="syz.1.3394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=121 compat=0 ip=0x7fbcb1c873b9 code=0x7ffc0000 [ 167.636194][ T29] audit: type=1326 audit(1722358720.645:1438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12501 comm="syz.1.3394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcb1c873b9 code=0x7ffc0000 [ 167.660106][ T29] audit: type=1326 audit(1722358720.645:1439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12501 comm="syz.1.3394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7fbcb1c873b9 code=0x7ffc0000 [ 167.683707][ T29] audit: type=1326 audit(1722358720.645:1440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12501 comm="syz.1.3394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcb1c873b9 code=0x7ffc0000 [ 167.707241][ T29] audit: type=1326 audit(1722358720.645:1441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12501 comm="syz.1.3394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=424 compat=0 ip=0x7fbcb1c873b9 code=0x7ffc0000 [ 167.730782][ T29] audit: type=1326 audit(1722358720.645:1442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12501 comm="syz.1.3394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcb1c873b9 code=0x7ffc0000 [ 167.754231][ T29] audit: type=1326 audit(1722358720.645:1443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12501 comm="syz.1.3394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fbcb1c873b9 code=0x7ffc0000 [ 167.758878][T12503] EXT4-fs error (device loop1): ext4_get_branch:178: inode #11: block 4294967295: comm syz.1.3394: invalid block [ 167.777668][ T29] audit: type=1326 audit(1722358720.645:1444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12501 comm="syz.1.3394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fbcb1c873f3 code=0x7ffc0000 [ 167.816450][T12503] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.3394: invalid indirect mapped block 4294967295 (level 1) [ 167.844726][T12503] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.3394: invalid indirect mapped block 4294967295 (level 1) [ 167.861063][T12503] EXT4-fs (loop1): 2 truncates cleaned up [ 167.888522][T12503] EXT4-fs error (device loop1): ext4_get_parent:1858: inode #11: comm syz.1.3394: bad parent inode number: 3 [ 167.908145][T12503] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3394'. [ 167.949425][T12519] loop1: detected capacity change from 0 to 512 [ 167.957954][T12519] FAT-fs (loop1): bogus number of FAT sectors [ 167.964098][T12519] FAT-fs (loop1): Can't find a valid FAT filesystem [ 168.025825][T12535] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3407'. [ 168.056395][T12540] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3410'. [ 168.064792][T12538] loop2: detected capacity change from 0 to 2048 [ 168.065583][T12540] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3410'. [ 168.083338][T12538] EXT4-fs (loop2): stripe (1025) is not aligned with cluster size (16), stripe is disabled [ 168.141444][T12545] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3411'. [ 168.196570][T12553] block device autoloading is deprecated and will be removed. [ 168.209666][T12538] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3408'. [ 168.260572][T12557] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3414'. [ 168.269634][T12557] netlink: 'syz.4.3414': attribute type 25 has an invalid length. [ 168.280030][T12557] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 168.288762][T12557] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 168.297579][T12557] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 168.306323][T12557] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 168.322323][T12563] loop4: detected capacity change from 0 to 1024 [ 168.438676][T12581] loop4: detected capacity change from 0 to 2048 [ 168.453341][T12581] EXT4-fs (loop4): stripe (1025) is not aligned with cluster size (16), stripe is disabled [ 168.550251][T12599] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3433'. [ 168.608795][T12601] loop3: detected capacity change from 0 to 8192 [ 168.684849][T12601] loop3: detected capacity change from 0 to 512 [ 168.693809][ T3265] EXT4-fs unmount: 167 callbacks suppressed [ 168.693823][ T3265] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.709275][T12601] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 168.721055][T12601] EXT4-fs (loop3): 1 orphan inode deleted [ 168.726855][T12601] EXT4-fs (loop3): 1 truncate cleaned up [ 168.733278][T12601] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 168.749560][T12601] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 168.757195][T12610] loop4: detected capacity change from 0 to 1024 [ 168.763926][T12601] EXT4-fs (loop3): Remounting filesystem read-only [ 168.772274][T12610] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 168.788758][T12610] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 168.837022][ T3265] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.874591][T12619] FAULT_INJECTION: forcing a failure. [ 168.874591][T12619] name failslab, interval 1, probability 0, space 0, times 0 [ 168.887255][T12619] CPU: 1 UID: 0 PID: 12619 Comm: syz.1.3441 Not tainted 6.11.0-rc1-syzkaller-00043-g94ede2a3e913 #0 [ 168.898011][T12619] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 168.908048][T12619] Call Trace: [ 168.911310][T12619] [ 168.914251][T12619] dump_stack_lvl+0xf2/0x150 [ 168.918836][T12619] dump_stack+0x15/0x20 [ 168.923020][T12619] should_fail_ex+0x229/0x230 [ 168.927691][T12619] ? skb_clone+0x154/0x1f0 [ 168.932145][T12619] should_failslab+0x8f/0xb0 [ 168.936738][T12619] kmem_cache_alloc_noprof+0x4c/0x290 [ 168.942115][T12619] skb_clone+0x154/0x1f0 [ 168.946355][T12619] __netlink_deliver_tap+0x2bd/0x4c0 [ 168.951669][T12619] netlink_unicast+0x641/0x670 [ 168.956493][T12619] netlink_sendmsg+0x5cc/0x6e0 [ 168.961304][T12619] ? __pfx_netlink_sendmsg+0x10/0x10 [ 168.966610][T12619] __sock_sendmsg+0x140/0x180 [ 168.971287][T12619] ____sys_sendmsg+0x312/0x410 [ 168.976064][T12619] __sys_sendmsg+0x1e9/0x280 [ 168.980685][T12619] __x64_sys_sendmsg+0x46/0x50 [ 168.985436][T12619] x64_sys_call+0x26f8/0x2e00 [ 168.990102][T12619] do_syscall_64+0xc9/0x1c0 [ 168.994656][T12619] ? clear_bhb_loop+0x55/0xb0 [ 168.999372][T12619] ? clear_bhb_loop+0x55/0xb0 [ 169.004102][T12619] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.009986][T12619] RIP: 0033:0x7fbcb1c873b9 [ 169.014393][T12619] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 169.034033][T12619] RSP: 002b:00007fbcb0907048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 169.042513][T12619] RAX: ffffffffffffffda RBX: 00007fbcb1e15f80 RCX: 00007fbcb1c873b9 [ 169.050467][T12619] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000005 [ 169.058427][T12619] RBP: 00007fbcb09070a0 R08: 0000000000000000 R09: 0000000000000000 [ 169.066420][T12619] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 169.074376][T12619] R13: 000000000000004d R14: 00007fbcb1e15f80 R15: 00007ffe35a2ac58 [ 169.082381][T12619] [ 169.091115][T12619] netlink: 'syz.1.3441': attribute type 1 has an invalid length. [ 169.093342][T12621] loop0: detected capacity change from 0 to 128 [ 169.098965][T12619] netlink: 'syz.1.3441': attribute type 2 has an invalid length. [ 169.203959][ T9304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.213462][ T9304] Trying to write to read-only block-device loop3 [ 169.224184][ T6498] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.285740][T12655] loop1: detected capacity change from 0 to 1024 [ 169.298812][ T6498] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.329910][T12655] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=8843c118, mo2=0002] [ 169.343992][T12655] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 169.356470][ C1] eth0: bad gso: type: 1, size: 1408 [ 169.365825][ T6498] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.408047][ T6498] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.476586][ T6498] bridge_slave_1: left allmulticast mode [ 169.482296][ T6498] bridge_slave_1: left promiscuous mode [ 169.488017][ T6498] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.495823][ T6498] bridge_slave_0: left allmulticast mode [ 169.501485][ T6498] bridge_slave_0: left promiscuous mode [ 169.507331][ T6498] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.585596][ T6498] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 169.596348][ T6498] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 169.606633][ T6498] bond0 (unregistering): Released all slaves [ 169.655830][T12670] chnl_net:caif_netlink_parms(): no params data found [ 169.687349][T12670] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.694571][T12670] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.701909][T12670] bridge_slave_0: entered allmulticast mode [ 169.708449][T12670] bridge_slave_0: entered promiscuous mode [ 169.715251][T12670] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.722335][T12670] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.729581][T12670] bridge_slave_1: entered allmulticast mode [ 169.735740][ T6498] IPVS: stopping backup sync thread 10851 ... [ 169.736032][T12670] bridge_slave_1: entered promiscuous mode [ 169.757685][ T6498] hsr_slave_0: left promiscuous mode [ 169.763019][ C1] eth0: bad gso: type: 1, size: 1408 [ 169.769402][ C1] eth0: bad gso: type: 1, size: 1408 [ 169.772273][T12705] FAULT_INJECTION: forcing a failure. [ 169.772273][T12705] name failslab, interval 1, probability 0, space 0, times 0 [ 169.774930][ C1] eth0: bad gso: type: 1, size: 1408 [ 169.787291][T12705] CPU: 0 UID: 0 PID: 12705 Comm: syz.2.3466 Not tainted 6.11.0-rc1-syzkaller-00043-g94ede2a3e913 #0 [ 169.803319][T12705] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 169.813436][T12705] Call Trace: [ 169.816719][T12705] [ 169.819628][T12705] dump_stack_lvl+0xf2/0x150 [ 169.824299][T12705] dump_stack+0x15/0x20 [ 169.828542][T12705] should_fail_ex+0x229/0x230 [ 169.833216][T12705] ? __get_vm_area_node+0xf7/0x1b0 [ 169.838389][T12705] should_failslab+0x8f/0xb0 [ 169.842965][T12705] __kmalloc_cache_node_noprof+0x50/0x2b0 [ 169.848715][T12705] __get_vm_area_node+0xf7/0x1b0 [ 169.853637][T12705] __vmalloc_node_range_noprof+0x2eb/0xef0 [ 169.859438][T12705] ? do_replace+0x1ee/0x2d0 [ 169.864000][T12705] ? avc_has_perm_noaudit+0x1cc/0x210 [ 169.869447][T12705] ? do_replace+0x1ee/0x2d0 [ 169.873990][T12705] __vmalloc_noprof+0x5e/0x70 [ 169.878746][T12705] ? do_replace+0x1ee/0x2d0 [ 169.883234][T12705] do_replace+0x1ee/0x2d0 [ 169.887561][T12705] do_ebt_set_ctl+0x1bd/0xb80 [ 169.892243][T12705] ? path_openat+0x19bc/0x1f10 [ 169.897038][T12705] ? _parse_integer_limit+0x167/0x180 [ 169.902405][T12705] ? _parse_integer+0x27/0x30 [ 169.907067][T12705] ? _raw_spin_unlock_bh+0x36/0x40 [ 169.912218][T12705] ? lock_sock_nested+0x10f/0x140 [ 169.917227][T12705] ? __rcu_read_unlock+0x4e/0x70 [ 169.922142][T12705] ? _raw_spin_unlock_bh+0x36/0x40 [ 169.927314][T12705] ? release_sock+0x117/0x150 [ 169.931967][T12705] ? nf_setsockopt+0xa7/0x1b0 [ 169.936655][T12705] nf_setsockopt+0x195/0x1b0 [ 169.941365][T12705] ip_setsockopt+0xea/0x100 [ 169.945918][T12705] dccp_setsockopt+0xe1/0xc40 [ 169.950582][T12705] sock_common_setsockopt+0x64/0x80 [ 169.955808][T12705] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 169.961758][T12705] __sys_setsockopt+0x1d8/0x250 [ 169.966616][T12705] __x64_sys_setsockopt+0x66/0x80 [ 169.971673][T12705] x64_sys_call+0x2a0e/0x2e00 [ 169.976329][T12705] do_syscall_64+0xc9/0x1c0 [ 169.980814][T12705] ? clear_bhb_loop+0x55/0xb0 [ 169.985510][T12705] ? clear_bhb_loop+0x55/0xb0 [ 169.990169][T12705] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.996130][T12705] RIP: 0033:0x7f944b8d73b9 [ 170.000521][T12705] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 170.020108][T12705] RSP: 002b:00007f944a557048 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 170.028548][T12705] RAX: ffffffffffffffda RBX: 00007f944ba65f80 RCX: 00007f944b8d73b9 [ 170.036616][T12705] RDX: 0000000000000080 RSI: 0000000000000000 RDI: 0000000000000003 [ 170.044567][T12705] RBP: 00007f944a5570a0 R08: 0000000000000108 R09: 0000000000000000 [ 170.052625][T12705] R10: 0000000020000340 R11: 0000000000000246 R12: 0000000000000001 [ 170.060585][T12705] R13: 000000000000000b R14: 00007f944ba65f80 R15: 00007ffe8063cac8 [ 170.068543][T12705] [ 170.071729][T12705] syz.2.3466: vmalloc error: size 144, vm_struct allocation failed, mode:0x400cc0(GFP_KERNEL_ACCOUNT), nodemask=(null),cpuset=syz2,mems_allowed=0 [ 170.086591][T12705] CPU: 0 UID: 0 PID: 12705 Comm: syz.2.3466 Not tainted 6.11.0-rc1-syzkaller-00043-g94ede2a3e913 #0 [ 170.097331][T12705] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 170.107479][T12705] Call Trace: [ 170.110748][T12705] [ 170.113672][T12705] dump_stack_lvl+0xf2/0x150 [ 170.118263][T12705] dump_stack+0x15/0x20 [ 170.122434][T12705] warn_alloc+0x145/0x1b0 [ 170.126760][T12705] __vmalloc_node_range_noprof+0x310/0xef0 [ 170.132617][T12705] ? avc_has_perm_noaudit+0x1cc/0x210 [ 170.137979][T12705] ? do_replace+0x1ee/0x2d0 [ 170.142479][T12705] __vmalloc_noprof+0x5e/0x70 [ 170.147164][T12705] ? do_replace+0x1ee/0x2d0 [ 170.151755][T12705] do_replace+0x1ee/0x2d0 [ 170.156077][T12705] do_ebt_set_ctl+0x1bd/0xb80 [ 170.160741][T12705] ? path_openat+0x19bc/0x1f10 [ 170.165505][T12705] ? _parse_integer_limit+0x167/0x180 [ 170.170930][T12705] ? _parse_integer+0x27/0x30 [ 170.175664][T12705] ? _raw_spin_unlock_bh+0x36/0x40 [ 170.180801][T12705] ? lock_sock_nested+0x10f/0x140 [ 170.185914][T12705] ? __rcu_read_unlock+0x4e/0x70 [ 170.190898][T12705] ? _raw_spin_unlock_bh+0x36/0x40 [ 170.196013][T12705] ? release_sock+0x117/0x150 [ 170.200779][T12705] ? nf_setsockopt+0xa7/0x1b0 [ 170.205519][T12705] nf_setsockopt+0x195/0x1b0 [ 170.210104][T12705] ip_setsockopt+0xea/0x100 [ 170.214612][T12705] dccp_setsockopt+0xe1/0xc40 [ 170.219289][T12705] sock_common_setsockopt+0x64/0x80 [ 170.224488][T12705] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 170.230379][T12705] __sys_setsockopt+0x1d8/0x250 [ 170.235288][T12705] __x64_sys_setsockopt+0x66/0x80 [ 170.240308][T12705] x64_sys_call+0x2a0e/0x2e00 [ 170.245052][T12705] do_syscall_64+0xc9/0x1c0 [ 170.249577][T12705] ? clear_bhb_loop+0x55/0xb0 [ 170.254440][T12705] ? clear_bhb_loop+0x55/0xb0 [ 170.259160][T12705] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.265052][T12705] RIP: 0033:0x7f944b8d73b9 [ 170.269507][T12705] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 170.289104][T12705] RSP: 002b:00007f944a557048 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 170.297504][T12705] RAX: ffffffffffffffda RBX: 00007f944ba65f80 RCX: 00007f944b8d73b9 [ 170.305528][T12705] RDX: 0000000000000080 RSI: 0000000000000000 RDI: 0000000000000003 [ 170.313512][T12705] RBP: 00007f944a5570a0 R08: 0000000000000108 R09: 0000000000000000 [ 170.321469][T12705] R10: 0000000020000340 R11: 0000000000000246 R12: 0000000000000001 [ 170.329449][T12705] R13: 000000000000000b R14: 00007f944ba65f80 R15: 00007ffe8063cac8 [ 170.337415][T12705] [ 170.340508][T12705] Mem-Info: [ 170.343689][T12705] active_anon:2883 inactive_anon:0 isolated_anon:0 [ 170.343689][T12705] active_file:4619 inactive_file:20385 isolated_file:0 [ 170.343689][T12705] unevictable:0 dirty:284 writeback:0 [ 170.343689][T12705] slab_reclaimable:2707 slab_unreclaimable:17798 [ 170.343689][T12705] mapped:20711 shmem:402 pagetables:626 [ 170.343689][T12705] sec_pagetables:0 bounce:0 [ 170.343689][T12705] kernel_misc_reclaimable:0 [ 170.343689][T12705] free:1885761 free_pcp:19283 free_cma:0 [ 170.351606][ T6498] hsr_slave_1: left promiscuous mode [ 170.388461][T12705] Node 0 active_anon:11416kB inactive_anon:0kB active_file:18476kB inactive_file:81540kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:82844kB dirty:1136kB writeback:0kB shmem:1608kB writeback_tmp:0kB kernel_stack:3456kB pagetables:2504kB sec_pagetables:0kB all_unreclaimable? no [ 170.421527][T12705] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 170.448450][T12705] lowmem_reserve[]: 0 2866 7844 0 [ 170.453577][T12705] Node 0 DMA32 free:2950316kB boost:0kB min:4136kB low:7068kB high:10000kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2953948kB mlocked:0kB bounce:0kB free_pcp:3632kB local_pcp:100kB free_cma:0kB [ 170.482175][T12705] lowmem_reserve[]: 0 0 4978 0 [ 170.486970][T12705] Node 0 Normal free:4577368kB boost:0kB min:7184kB low:12280kB high:17376kB reserved_highatomic:0KB active_anon:11532kB inactive_anon:0kB active_file:18476kB inactive_file:81540kB unevictable:0kB writepending:1136kB present:5242880kB managed:5098208kB mlocked:0kB bounce:0kB free_pcp:73444kB local_pcp:46568kB free_cma:0kB [ 170.517643][T12705] lowmem_reserve[]: 0 0 0 0 [ 170.522354][T12705] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 170.535053][T12705] Node 0 DMA32: 3*4kB (M) 0*8kB 2*16kB (M) 2*32kB (M) 3*64kB (M) 3*128kB (M) 4*256kB (M) 3*512kB (M) 2*1024kB (M) 2*2048kB (M) 718*4096kB (M) = 2950316kB [ 170.550664][T12705] Node 0 Normal: 92*4kB (UME) 111*8kB (UME) 43*16kB (UME) 77*32kB (UME) 52*64kB (UME) 179*128kB (ME) 179*256kB (UME) 127*512kB (UME) 72*1024kB (UME) 26*2048kB (UME) 1052*4096kB (UM) = 4577464kB [ 170.569771][T12705] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 170.579110][T12705] 25405 total pagecache pages [ 170.583782][T12705] 0 pages in swap cache [ 170.587921][T12705] Free swap = 124692kB [ 170.592056][T12705] Total swap = 124996kB [ 170.596211][T12705] 2097051 pages RAM [ 170.599998][T12705] 0 pages HighMem/MovableOnly [ 170.604737][T12705] 80172 pages reserved [ 170.609666][ T6498] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 170.617155][ T6498] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 170.625804][ T6498] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 170.633205][ T6498] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 170.641271][ T9771] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.652708][ T6498] veth1_macvtap: left promiscuous mode [ 170.658227][ T6498] veth0_macvtap: left promiscuous mode [ 170.663732][ T6498] veth1_vlan: left promiscuous mode [ 170.668954][ T6498] veth0_vlan: left promiscuous mode [ 170.709473][T12721] loop2: detected capacity change from 0 to 512 [ 170.726247][T12721] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 170.739738][T12721] ext4 filesystem being mounted at /67/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 170.771972][ T6498] team0 (unregistering): Port device team_slave_1 removed [ 170.782087][ T6498] team0 (unregistering): Port device team_slave_0 removed [ 170.822040][T12670] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 170.834116][T12670] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 170.859846][T11790] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.869528][T12670] team0: Port device team_slave_0 added [ 170.877800][T12670] team0: Port device team_slave_1 added [ 170.900647][T12670] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 170.907719][T12670] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 170.933766][T12670] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 170.945338][T12670] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 170.952305][T12670] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 170.978226][T12670] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 171.014130][T12670] hsr_slave_0: entered promiscuous mode [ 171.020709][T12670] hsr_slave_1: entered promiscuous mode [ 171.027537][T12670] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 171.035545][T12670] Cannot create hsr debugfs directory [ 171.049151][T12731] bond1: entered promiscuous mode [ 171.119853][T12741] loop2: detected capacity change from 0 to 1024 [ 171.136078][T12743] tipc: Enabling of bearer rejected, failed to enable media [ 171.146509][T12741] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=8843c118, mo2=0002] [ 171.155277][T12741] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 171.189515][T11790] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.247892][T12755] loop2: detected capacity change from 0 to 1024 [ 171.265989][T12755] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 171.278549][T12755] ext4 filesystem being mounted at /74/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 171.284572][T12763] loop0: detected capacity change from 0 to 2048 [ 171.358249][T12670] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 171.366959][T12670] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 171.376676][T12670] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 171.379045][T12769] loop0: detected capacity change from 0 to 1024 [ 171.391679][T12670] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 171.406691][T12769] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=8843c118, mo2=0002] [ 171.418735][T12769] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 171.427390][T12670] 8021q: adding VLAN 0 to HW filter on device bond0 [ 171.445900][T12670] 8021q: adding VLAN 0 to HW filter on device team0 [ 171.457401][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.464477][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 171.472269][ T3269] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.485576][T12670] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 171.495937][T12670] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 171.509906][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.516989][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 171.556216][T12779] __nla_validate_parse: 7 callbacks suppressed [ 171.556230][T12779] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3495'. [ 171.586504][T12670] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 171.626518][T12791] FAULT_INJECTION: forcing a failure. [ 171.626518][T12791] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 171.639826][T12791] CPU: 1 UID: 0 PID: 12791 Comm: syz.1.3499 Not tainted 6.11.0-rc1-syzkaller-00043-g94ede2a3e913 #0 [ 171.650590][T12791] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 171.660646][T12791] Call Trace: [ 171.663920][T12791] [ 171.666917][T12791] dump_stack_lvl+0xf2/0x150 [ 171.671582][T12791] dump_stack+0x15/0x20 [ 171.675776][T12791] should_fail_ex+0x229/0x230 [ 171.679194][T12670] veth0_vlan: entered promiscuous mode [ 171.680444][T12791] should_fail+0xb/0x10 [ 171.690078][T12791] should_fail_usercopy+0x1a/0x20 [ 171.695207][T12791] _copy_from_iter+0x249/0xb00 [ 171.696515][T12670] veth1_vlan: entered promiscuous mode [ 171.699966][T12791] ? __virt_addr_valid+0x1ed/0x250 [ 171.710577][T12791] ? __check_object_size+0x35b/0x510 [ 171.715880][T12791] kcm_sendmsg+0x889/0x15b0 [ 171.720391][T12791] ? __pfx_kcm_sendmsg+0x10/0x10 [ 171.725415][T12791] __sock_sendmsg+0x140/0x180 [ 171.730099][T12791] ____sys_sendmsg+0x312/0x410 [ 171.730232][T12670] veth0_macvtap: entered promiscuous mode [ 171.734942][T12791] __sys_sendmsg+0x1e9/0x280 [ 171.745311][T12791] __x64_sys_sendmsg+0x46/0x50 [ 171.750137][T12791] x64_sys_call+0x26f8/0x2e00 [ 171.754882][T12791] do_syscall_64+0xc9/0x1c0 [ 171.755103][T12670] veth1_macvtap: entered promiscuous mode [ 171.759378][T12791] ? clear_bhb_loop+0x55/0xb0 [ 171.769737][T12791] ? clear_bhb_loop+0x55/0xb0 [ 171.771319][T12670] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 171.774409][T12791] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.774436][T12791] RIP: 0033:0x7fbcb1c873b9 [ 171.774449][T12791] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 171.774476][T12791] RSP: 002b:00007fbcb0907048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 171.774493][T12791] RAX: ffffffffffffffda RBX: 00007fbcb1e15f80 RCX: 00007fbcb1c873b9 [ 171.784890][T12670] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.790731][T12791] RDX: 0000000000000000 RSI: 0000000020000340 RDI: 0000000000000003 [ 171.795379][T12670] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 171.814694][T12791] RBP: 00007fbcb09070a0 R08: 0000000000000000 R09: 0000000000000000 [ 171.814709][T12791] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 171.814721][T12791] R13: 000000000000004d R14: 00007fbcb1e15f80 R15: 00007ffe35a2ac58 [ 171.814736][T12791] [ 171.886887][T12670] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.896692][T12670] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 171.907182][T12670] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.917013][T12670] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 171.927444][T12670] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.937345][T12670] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 171.947937][T12670] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.957740][T12670] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 171.968159][T12670] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.977966][T12670] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 171.988367][T12670] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.002213][T12670] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 172.010988][T12670] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 172.021490][T12670] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.031319][T12670] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 172.041746][T12670] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.051650][T12670] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 172.062068][T12670] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.071872][T12670] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 172.082323][T12670] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.092177][T12670] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 172.102588][T12670] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.112423][T12670] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 172.122965][T12670] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.132795][T12670] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 172.143268][T12670] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.155764][T12670] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 172.175556][T12670] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.184375][T12670] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.193109][T12670] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.201871][T12670] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.250948][T12819] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3508'. [ 172.254326][T12817] loop4: detected capacity change from 0 to 2048 [ 172.278020][T12821] loop3: detected capacity change from 0 to 1024 [ 172.396028][T12845] loop0: detected capacity change from 0 to 512 [ 172.400897][T12848] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 172.415641][T12845] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 172.430771][T12845] ext4 filesystem being mounted at /856/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 172.430917][T12852] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3521'. [ 172.487806][T12855] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3522'. [ 172.497841][T12855] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3522'. [ 172.532627][ T3269] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.551798][T12857] loop0: detected capacity change from 0 to 1024 [ 172.558492][T12857] EXT4-fs: Ignoring removed oldalloc option [ 172.565117][T12857] EXT4-fs (loop0): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 172.584940][T12857] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 172.651406][ T3269] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.682050][T12877] FAULT_INJECTION: forcing a failure. [ 172.682050][T12877] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 172.695220][T12877] CPU: 0 UID: 0 PID: 12877 Comm: syz.4.3530 Not tainted 6.11.0-rc1-syzkaller-00043-g94ede2a3e913 #0 [ 172.706118][T12877] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 172.716162][T12877] Call Trace: [ 172.719426][T12877] [ 172.722372][T12877] dump_stack_lvl+0xf2/0x150 [ 172.726950][T12877] dump_stack+0x15/0x20 [ 172.731092][T12877] should_fail_ex+0x229/0x230 [ 172.735754][T12877] should_fail+0xb/0x10 [ 172.739895][T12877] should_fail_usercopy+0x1a/0x20 [ 172.744903][T12877] _copy_from_iter+0xd3/0xb00 [ 172.749716][T12877] ? kmalloc_reserve+0x16e/0x190 [ 172.754634][T12877] ? __build_skb_around+0x196/0x1f0 [ 172.759830][T12877] ? __virt_addr_valid+0x1ed/0x250 [ 172.764986][T12877] ? __check_object_size+0x35b/0x510 [ 172.770255][T12877] netlink_sendmsg+0x460/0x6e0 [ 172.775008][T12877] ? __pfx_netlink_sendmsg+0x10/0x10 [ 172.780290][T12877] __sock_sendmsg+0x140/0x180 [ 172.784951][T12877] ____sys_sendmsg+0x312/0x410 [ 172.789773][T12877] __sys_sendmsg+0x1e9/0x280 [ 172.794358][T12877] __x64_sys_sendmsg+0x46/0x50 [ 172.799258][T12877] x64_sys_call+0x26f8/0x2e00 [ 172.803916][T12877] do_syscall_64+0xc9/0x1c0 [ 172.808402][T12877] ? clear_bhb_loop+0x55/0xb0 [ 172.813076][T12877] ? clear_bhb_loop+0x55/0xb0 [ 172.817790][T12877] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.823695][T12877] RIP: 0033:0x7fd9982a73b9 [ 172.828099][T12877] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 172.847683][T12877] RSP: 002b:00007fd996f27048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 172.856112][T12877] RAX: ffffffffffffffda RBX: 00007fd998435f80 RCX: 00007fd9982a73b9 [ 172.864064][T12877] RDX: 0000000000000000 RSI: 0000000020000200 RDI: 0000000000000004 [ 172.872037][T12877] RBP: 00007fd996f270a0 R08: 0000000000000000 R09: 0000000000000000 [ 172.880019][T12877] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 172.887969][T12877] R13: 000000000000000b R14: 00007fd998435f80 R15: 00007fff6e1b8098 [ 172.895957][T12877] [ 172.971866][T12885] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3534'. [ 172.982719][T12885] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3534'. [ 173.025485][T12888] loop1: detected capacity change from 0 to 2048 [ 173.043908][T12890] loop4: detected capacity change from 0 to 1024 [ 173.050453][T12890] ext4: Unknown parameter 'dont_hash' [ 173.055022][T12888] bridge0: port 3(vlan2) entered blocking state [ 173.062131][T12888] bridge0: port 3(vlan2) entered disabled state [ 173.073718][T12888] vlan2: entered allmulticast mode [ 173.079597][T12888] vlan2: left allmulticast mode [ 173.103670][T12890] loop4: detected capacity change from 0 to 8192 [ 173.115225][T12890] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3536'. [ 173.125777][T12890] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3536'. [ 173.177753][ T50] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.232606][T12908] loop0: detected capacity change from 0 to 1024 [ 173.239490][T12908] EXT4-fs: Ignoring removed oldalloc option [ 173.246650][ T50] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.250549][T12908] EXT4-fs (loop0): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 173.273713][T12903] ================================================================== [ 173.281799][T12903] BUG: KCSAN: data-race in mark_buffer_dirty_inode / mark_buffer_dirty_inode [ 173.290571][T12903] [ 173.292887][T12903] write to 0xffff888100693400 of 8 bytes by task 12890 on cpu 1: [ 173.300599][T12903] mark_buffer_dirty_inode+0x18d/0x1c0 [ 173.306058][T12903] fat_mirror_bhs+0x241/0x330 [ 173.310731][T12903] fat_alloc_clusters+0x994/0xa80 [ 173.315760][T12903] fat_get_block+0x25c/0x5e0 [ 173.320359][T12903] __block_write_begin_int+0x417/0xfa0 [ 173.325825][T12903] block_write_begin+0x7b/0x170 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 173.330678][T12903] cont_write_begin+0x486/0x6b0 [ 173.335531][T12903] fat_write_begin+0x61/0xf0 [ 173.340129][T12903] generic_perform_write+0x1b4/0x580 [ 173.345424][T12903] __generic_file_write_iter+0xa1/0x120 [ 173.350981][T12903] generic_file_write_iter+0x7d/0x1d0 [ 173.351088][ T29] kauditd_printk_skb: 117 callbacks suppressed [ 173.351104][ T29] audit: type=1400 audit(1722358726.435:1562): avc: denied { write } for pid=3230 comm="syz-executor" path="pipe:[660]" dev="pipefs" ino=660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 173.356346][T12903] vfs_write+0x78f/0x900 [ 173.356373][T12903] ksys_write+0xeb/0x1b0 [ 173.356397][T12903] __x64_sys_write+0x42/0x50 [ 173.398443][T12903] x64_sys_call+0x2a40/0x2e00 [ 173.403121][T12903] do_syscall_64+0xc9/0x1c0 [ 173.403544][T12908] EXT4-fs warning (device loop0): ext4_multi_mount_protect:398: Unable to create kmmpd thread for loop0. [ 173.407618][T12903] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.424683][T12903] [ 173.426999][T12903] read to 0xffff888100693400 of 8 bytes by task 12903 on cpu 0: [ 173.434623][T12903] mark_buffer_dirty_inode+0x96/0x1c0 [ 173.439990][T12903] fat_mirror_bhs+0x241/0x330 [ 173.444655][T12903] fat_alloc_clusters+0x994/0xa80 [ 173.449668][T12903] fat_get_block+0x25c/0x5e0 [ 173.454248][T12903] __block_write_begin_int+0x417/0xfa0 [ 173.459698][T12903] block_write_begin+0x7b/0x170 [ 173.464543][T12903] cont_write_begin+0x486/0x6b0 [ 173.469384][T12903] fat_write_begin+0x61/0xf0 [ 173.473964][T12903] generic_perform_write+0x1b4/0x580 [ 173.479244][T12903] __generic_file_write_iter+0xa1/0x120 [ 173.484795][T12903] generic_file_write_iter+0x7d/0x1d0 [ 173.490174][T12903] iter_file_splice_write+0x5e6/0x970 [ 173.495546][T12903] direct_splice_actor+0x16c/0x2c0 [ 173.500653][T12903] splice_direct_to_actor+0x305/0x670 [ 173.506026][T12903] do_splice_direct+0xd7/0x150 [ 173.510777][T12903] do_sendfile+0x3ab/0x950 [ 173.515182][T12903] __x64_sys_sendfile64+0xbd/0x150 [ 173.520301][T12903] x64_sys_call+0xfc3/0x2e00 [ 173.524892][T12903] do_syscall_64+0xc9/0x1c0 [ 173.529394][T12903] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.535292][T12903] [ 173.537603][T12903] value changed: 0x0000000000000000 -> 0xffff888106b86908 [ 173.544694][T12903] [ 173.547001][T12903] Reported by Kernel Concurrency Sanitizer on: [ 173.553132][T12903] CPU: 0 UID: 0 PID: 12903 Comm: syz.4.3536 Not tainted 6.11.0-rc1-syzkaller-00043-g94ede2a3e913 #0 [ 173.563881][T12903] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 173.573921][T12903] ================================================================== [ 173.582808][ T29] audit: type=1400 audit(1722358726.675:1563): avc: denied { recv } for pid=12913 comm="kworker/u8:10" saddr=10.128.0.163 src=48692 daddr=10.128.1.221 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 173.653720][ T50] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.664574][T12755] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.726385][ T50] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.864931][ T50] bridge_slave_1: left allmulticast mode [ 173.870568][ T50] bridge_slave_1: left promiscuous mode [ 173.876270][ T50] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.884226][ T50] bridge_slave_0: left allmulticast mode [ 173.889856][ T50] bridge_slave_0: left promiscuous mode [ 173.895656][ T50] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.085591][ T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 174.095996][ T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 174.105922][ T50] bond0 (unregistering): Released all slaves [ 174.114195][ T50] bond1 (unregistering): Released all slaves [ 174.122518][ T50] bond2 (unregistering): Released all slaves [ 174.130970][ T50] bond3 (unregistering): Released all slaves [ 174.215356][ T50] hsr_slave_0: left promiscuous mode [ 174.221055][ T50] hsr_slave_1: left promiscuous mode [ 174.226868][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 174.234298][ T50] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 174.242364][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 174.249825][ T50] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 174.258793][ T50] veth1_macvtap: left promiscuous mode [ 174.264270][ T50] veth0_macvtap: left promiscuous mode [ 174.269850][ T50] veth1_vlan: left promiscuous mode [ 174.275188][ T50] veth0_vlan: left promiscuous mode [ 174.345565][ T50] team0 (unregistering): Port device team_slave_1 removed [ 174.357032][ T50] team0 (unregistering): Port device team_slave_0 removed [ 174.707444][ T50] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.747345][ T50] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.815816][ T50] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.866258][ T50] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.926944][ T50] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.976170][ T50] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.014625][ T50] team0: Port device netdevsim1 removed [ 175.021592][ T50] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.076576][ T50] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.133641][ T50] bridge_slave_1: left allmulticast mode [ 175.139286][ T50] bridge_slave_1: left promiscuous mode [ 175.145023][ T50] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.152659][ T50] bridge_slave_0: left allmulticast mode [ 175.158395][ T50] bridge_slave_0: left promiscuous mode [ 175.164031][ T50] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.172014][ T50] bridge_slave_1: left allmulticast mode [ 175.177663][ T50] bridge_slave_1: left promiscuous mode [ 175.183347][ T50] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.191044][ T50] bridge_slave_0: left allmulticast mode [ 175.196726][ T50] bridge_slave_0: left promiscuous mode [ 175.202288][ T50] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.395819][ T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 175.406032][ T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 175.416304][ T50] bond0 (unregistering): Released all slaves [ 175.424867][ T50] bond1 (unregistering): Released all slaves [ 175.433681][ T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 175.443983][ T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 175.454243][ T50] bond0 (unregistering): Released all slaves [ 175.462177][ T50] bond1 (unregistering): Released all slaves [ 175.470737][ T50] bond2 (unregistering): Released all slaves [ 175.479118][ T50] bond3 (unregistering): Released all slaves [ 175.487840][ T50] bond4 (unregistering): Released all slaves [ 175.496142][ T50] bond5 (unregistering): Released all slaves [ 175.505443][ T50] bond6 (unregistering): (slave batadv1): Releasing backup interface [ 175.514035][ T50] batadv1: left promiscuous mode [ 175.519714][ T50] bond6 (unregistering): Released all slaves [ 175.566196][ T50] tipc: Left network mode [ 175.645534][ T50] hsr_slave_0: left promiscuous mode [ 175.651399][ T50] hsr_slave_1: left promiscuous mode [ 175.657305][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 175.664759][ T50] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 175.672115][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 175.679503][ T50] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 175.688545][ T50] hsr_slave_0: left promiscuous mode [ 175.694338][ T50] hsr_slave_1: left promiscuous mode [ 175.700000][ T50] batman_adv: batadv0: Interface deactivated: dummy0 [ 175.706732][ T50] batman_adv: batadv0: Removing interface: dummy0 [ 175.713527][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 175.720907][ T50] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 175.728356][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 175.735755][ T50] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 175.745976][ T50] veth1_macvtap: left promiscuous mode [ 175.751449][ T50] veth0_macvtap: left promiscuous mode [ 175.757019][ T50] veth1_vlan: left promiscuous mode [ 175.762221][ T50] veth0_vlan: left promiscuous mode [ 175.767994][ T50] veth1_macvtap: left promiscuous mode [ 175.773482][ T50] veth0_macvtap: left promiscuous mode [ 175.779018][ T50] veth1_vlan: left promiscuous mode [ 175.784291][ T50] veth0_vlan: left promiscuous mode [ 175.891484][ T50] team0 (unregistering): Port device team_slave_1 removed [ 175.901432][ T50] team0 (unregistering): Port device team_slave_0 removed [ 175.936088][ T50] pim6reg (unregistering): left allmulticast mode [ 175.969790][ T50] team0 (unregistering): Port device team_slave_1 removed [ 175.979342][ T50] team0 (unregistering): Port device team_slave_0 removed [ 176.442909][ T50] IPVS: stop unused estimator thread 0... [ 177.419395][ T67] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.615737][ T67] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.686464][ T67] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.726067][ T67] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.783135][ T67] bridge_slave_1: left allmulticast mode [ 177.788828][ T67] bridge_slave_1: left promiscuous mode [ 177.794455][ T67] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.802184][ T67] bridge_slave_0: left allmulticast mode [ 177.807846][ T67] bridge_slave_0: left promiscuous mode [ 177.813567][ T67] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.887052][ T67] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 177.897184][ T67] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 177.907013][ T67] bond0 (unregistering): Released all slaves [ 178.005449][ T67] hsr_slave_0: left promiscuous mode [ 178.011158][ T67] hsr_slave_1: left promiscuous mode [ 178.016828][ T67] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 178.024288][ T67] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 178.031670][ T67] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 178.039111][ T67] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 178.047897][ T67] veth1_macvtap: left promiscuous mode [ 178.053431][ T67] veth0_macvtap: left promiscuous mode [ 178.058901][ T67] veth1_vlan: left promiscuous mode [ 178.064173][ T67] veth0_vlan: left promiscuous mode [ 178.134206][ T67] team0 (unregistering): Port device team_slave_1 removed [ 178.144505][ T67] team0 (unregistering): Port device team_slave_0 removed [ 178.471460][ T67] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 178.481894][ T67] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 178.491867][ T67] bond0 (unregistering): Released all slaves [ 178.575298][ T67] hsr_slave_0: left promiscuous mode [ 178.580921][ T67] hsr_slave_1: left promiscuous mode [ 178.586687][ T67] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 178.594076][ T67] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 178.601420][ T67] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 178.608849][ T67] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 178.617381][ T67] veth1_macvtap: left promiscuous mode [ 178.622827][ T67] veth0_macvtap: left promiscuous mode [ 178.628327][ T67] veth1_vlan: left promiscuous mode [ 178.633577][ T67] veth0_vlan: left promiscuous mode [ 178.700842][ T67] team0 (unregistering): Port device team_slave_1 removed [ 178.710543][ T67] team0 (unregistering): Port device team_slave_0 removed