last executing test programs: 10.490191224s ago: executing program 1 (id=3461): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) listen(r0, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f0000000500)={'IDLETIMER\x00'}, &(0x7f0000000540)=0x1e) r1 = socket$inet_smc(0x2b, 0x1, 0x0) sendto$inet(r1, 0x0, 0x0, 0x20000000, 0x0, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000100)=0x8) bind$inet(r1, &(0x7f0000000140)={0x2, 0x4e22, @multicast2}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x19, &(0x7f00000000c0)=0x7, 0x4) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r1, &(0x7f0000000040)='u', 0xa792a, 0x801, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0xffffffffffffffff, 0x7, 0x10}, 0xc) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r3, &(0x7f00000002c0)={&(0x7f0000000080)=@nameseq={0x1e, 0x2, 0x0, {0x41}}, 0x10, 0x0}, 0x0) close(r3) mlockall(0x5) mremap(&(0x7f0000728000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000320000/0x2000)=nil) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaade9ea3f675c186dd600837f200140600fe8000000000000000000000000000bbff02000000000000000000000000000100004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="ffff00e0ffffffffff"], 0x0) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000240), 0x8) sendmsg$key(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="021301000a00000028bd7000fbdbdf250800120000000400a26b6e00ff01000006002b0004030000ff070000000000000a010102000000000000990000000000e000000100"/80], 0x50}}, 0x40000c0) r5 = io_uring_setup(0x7b, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0xfffffffd}) io_uring_register$IORING_UNREGISTER_PERSONALITY(r5, 0x1c, 0x0, 0x0) connect$tipc(0xffffffffffffffff, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x0, 0x0, 0x5}}, 0x10) setsockopt$TIPC_CONN_TIMEOUT(0xffffffffffffffff, 0x10f, 0x8a, &(0x7f0000000180), 0x4) 9.618697855s ago: executing program 1 (id=3477): timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) futex(&(0x7f0000000000)=0x2, 0x0, 0x2, &(0x7f0000000100)={0x77359400}, 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xfffffff7fffffdfc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000500)={{}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) ioctl$sock_inet_SIOCGARP(r1, 0x8954, 0x0) 8.714974099s ago: executing program 1 (id=3486): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) close_range(r0, 0xffffffffffffffff, 0x0) 8.69717545s ago: executing program 1 (id=3487): r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10}, 0x24) sendmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000000000000100100000a"], 0x14}}], 0x2, 0x0) 8.547565333s ago: executing program 1 (id=3489): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = memfd_create(&(0x7f00000009c0)='\x01\xfd\xae.+\xa6\x8c\xb6?2\x199\x94S,|x?Ue[\xbd\xe1!\x033\xbc\'#\xff\x17\x9b%\xf3[d \x97\xf5G\x97A\xc2\xd8\xf0Uq\xe6+\xa5l\x94\v\xb6\a\x17\\\xfb\x04!\xe4\xc4\xb1\xa2\x1c\xffC;\x94Q\r\xb6}\x9c\xecC\v\xcf\xeb\xe4\x9aR\xe5,\x82\x03\x00\x19\x8d\xe8\xc6\xb9\xe4\xb4\x99\x8a\x19P\xb8\x8cx\b\x99\x04R\x05\xaf\xa2\xea5\f\xcc\x1a\x9b\x00Uf\xa5\xf7\x80Tgiz\nX\b\x91\xfd0\x8e\xb6\xa3\v#\xa1\xdf\xb4\xc0\xe6\xb4\xef\xa8i\xd8\xa2\xd2(\x98\x9bA\x8f\x13\xeb\xf4b/\xef!\x8f\xf6]-\xe9k\xb62\x89gEv\x13\xf4\xc7\xb2\xf5\\\x17\x90\xb5\xa6\xa8\xb8o\x0f\xe2 \xe7\x9c$\xd7\xf2@\xf7cdv[\t\x00\x8d\xf3\xcc1\r$\x1e\xff\xf0P\xb2\x97\xb8\xbc\xeb\x91\x87\x8bu\xbf\xd4\'\xff\x1f\f\x016\x9dQ\xeeT\xe8\bY\x00\xb2\x06\xa6\xbel\x9b.o\xbe\x80\x9dx\xd5O\xd6h\\I\xc9\x8d\a\x1d\xc9\x0f\x82\xdbs\xc7\x83L\x9e\xa2\xd1\xb3\xac\x8d\xd8\xb4\xb4\xea\x90Q\xd8\xc7\xeb%\x8bOp\x1ab\x96\xcf\xbb\x15\xcf\xfcN\xed\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00s\xaf\xa2\x14]p+\x96\x1ei|n\xda\xee\\\xae\x96*\x82*\xb8j\xda\xaa\x14\x1f\x1d\xf8\xf8\xae\xfcH\xc4\xb3j\xe8\xcfO\xef\x0e\xafe\xb5*\x89\x18\xb2w\x96\b\x1by\xeaT\xdd\xb3g6\xbc\x85\xb2Y\xccv\x06\x00\x00\x00\xc5e\x90\xc51\x9f\v_# \b\xa5\xbcP,|\xe9\xd6s\x1f\x1f\xbe\xd3\x80\xb1\xa8 \xce|df\x903\v\x02\xea.\x03X\xb5\xe4,8\xb7\xadEI\xdcA\xa7\xcc\xd7\xf9n\x1b\x95\xf8\x11Z\xe6:\x03\xce\xfe\x02\x8ctdy~_oC\x9e\xef\xf0\xa2K\xe9;\x8e:\x01\x03C\x92\xeb\x16\x1c\xbf\xbe\xef\xccUxhg\xffY\xe6\x83\xa6z\xff\x01\x9d o_{!O\xaajU\x84 \xe9\xb59r\x9cw\x18Z\xd3\xcd\x0e\xba\\\xdb\xf0\xe1\x86\t\xaf\vi\xdc\xbf?\xf5\n\xbd^\x05\xc0\xceuC}\xa8\xc7\xad\x86\xd7\x15&\xb9]1\x05J\x96\xf0\x84\xc1\f\xa6p\x96\xb8\x02\x13pA\x19\tf\x12\x88\xc8\x9c\xc9Cn\xd4\xa47V\'+\xcc\xbf\r\xa9\x10\x1d\xcf\xebKlb\xe5:\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00G\xdf\xbb\xc0_\x99F\xf4n]\x14\xbc\xcd\xd3\x9f\x9fe\xc5\xe6\xe8Mb\xc6\x82\x82\xcc\xcaXe\xe1\xa2\xaa\x02\x86\xb8\x18\xe2C\xeb\xa9\x17&\x01&\'w\xa1t0\x80\xf0\x93\x80\x9f\x9b\xe0\x9f\xea\xb9\x9eD]#V\xda\x92\xca\xc6\xfa.\xd6\xe31\xfe\xe8\x02\xebX\xbd\nz\x01O\xd3r\xa2\xa9u\x93', 0x6) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0xe, 0x12, r0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000680), 0xe, 0x80801) ioctl$USBDEVFS_CONNECTINFO(r1, 0x8004551a, &(0x7f0000001980)) 8.274569345s ago: executing program 1 (id=3497): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000500), 0x28002) write$sndseq(r0, 0x0, 0x0) r1 = dup(r0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) 2.250061677s ago: executing program 2 (id=3586): perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x9) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file1\x00', 0x1008002, &(0x7f0000000840), 0x1, 0x5e0, &(0x7f0000001200)="$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") r2 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r2, 0x0, &(0x7f0000000080)='ro\x00', 0x0, 0x0) r3 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1a, 0x0, 0x78, 0x8000, 0x0, 0xffffffffffffffff, 0x35, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7020000f3ffffb0150000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x66, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="b022fd84099290ab8ebe39cfc17f80bc2926131e9437a1dea9ca1756900531c14b67f7a9edd0d80c7c73649053153a8d8db6d3c0d3b3fa951f57d14071b61a27d968a0ae7bd580d2d9fd9034451c3ecffae80b234e72fb11e3a60c1208bd5262c5009e3e45582ed4203850292ed682fc5e26f5c2af47718ee5b4f2ed68f0b21b813ec22c4c61d3f22f5a01ebea6c484d8ef4ca90180b4587e0bee2f782fef574aa1e0ebc5d9e42452910d03c12feff7848f72ac5430476b9dc2457a09efdc6f181c408abe7b30cccd2c8fb85389e1cacd4f4b29a3d4a55941bf1bb416203732d6712d5a89470876ae6daec66f3fe1b39982c2781b115e20af7ce0a0c7c77db1073adc6e11597bd9f540f90f60b92dc84a5c764379c0b9426ff4f547182502633aa754dcfc63e46c7cef8e3a0c29bf5184ac150e90d884c59cba3dae7c531fb114534292629d8532c0f67ee37f2c349ea8f28199aff2aa335df5db411287a73adfbfff212cf7b6d277a361c55af160d98b5c3db84da37d80e07269c33f60f111ec3c09d8843e1f5499e71de9b48882b9415d45b20393888ec49f307d535580947b5a5b40b465382aa4a579f317d91792f8ed70e9401863bc0a21d7e15f828ae8f13c673a30cba6f10f89c8a018cc8bbe7072ffe1c5d4ef11f0f82cf967faef8608f8b289245f87607917b0c2578dbbe5186ac78b8cd9a5aff567aebe8a73dd547fdc503885a2df4953f3497688b7b1ede6a2e529b25ecc246a7bcb00077059d7e0100aa20cb4d1dbac6eec0a9f803601c799eddb9b271f0530842291167abffb982fe47a496e884ee3c17850f970cb3ac3342b832b8b984e2eb4836afb7727f7310a347add2a1094cfff7b44516593bbf15f3a9e0e2a788e99bdec6706ae9a39b4f8983ae38d4cdf866d9670de91036ea86646f195ec4b4ce462ea624b8875825262a301f9235496b935506109287bbcf4754e3fa637428a2e39a80cd07ffafd756839abddc721421754fcae705ab432fcdd6f3c004dfad9e6bfa87746dd41649dcd2bf1728a3d6d2ddf27a52957422a27f9e478530873d9f1861b71f2378540648b171bcbd44533723ae1a89e56e2f570c0571eb3c66fac65e3abad003a828f2d21cc990e57b80dd3762fe1204eb320591d6a93f9052b80494b2f52ad89d6374cf33040e2484c3384946450bb65835d65bebb4a91c0f82e598e5aa7ff9ba79f27bbd46240287721d2759fa24cec97658d8f17b3f424293f7253b74dae4b966c8089c546936953d8ce63463c26f1e296f56e17e7f890b6001ed5d9f739036842e989b40c02d3fe5227b1fb08a98f1b1f0c336346698e70171e74e40c5304a356b29c947672f8a0535b7ce3a66b276d09ca3d9fff030e41598649a310875f5b5801c471182c1f617c907f06b5f36a1f9294b0f4a95d0fc98682b1e38f2f94fb08f20c5e5c7afaa9fbbd84734a98dd9b33188f6b79334b09ca8e2de56457242f904b114a2c313b193fe421d7fa97da5ab77f363e83b4698bf903022d13826ded79a905f07f97dc0fc4cc290b969ee37075a4a80a0d86d0696eeea2048ebd1a97f8319b3342e515ae5c9e25ee933d926ae0f31af55aeb07da6508756ac9549ba8bbc0095a17cb647df12f926e595a531d7208ef75cfd6239f65a0584121c75e00f7c77990b90e6350b1a84eba4430979bb726ab02050573af29156bed8e243527593dc0c6de41d0b6775818a96ee97d153826a217e8d7e88c6c44baa781a495afeba3882a06f5b1a87b1e8ee1edf404ac3ade6f5af1f6cd22c01506b5f84befb55c86f79b56e4d5754be8f564f57852f991c2275cbf55937666e022c2b2f0d020156152377859b345f74fe66791421e5571a7900df89c9bef5c3cb19113fae5d524ae2edea5ca91baf096c02e1e860c9b5a97882da598ef1e39fcb61d83f997675a772ac37c0fbe65a9d379b9204a915fdb6a7c7cdbd14c0893cd5e8cfd56f4021756d6c6a25b258a69922a41f3c7bc43b69f46293b381a27ae5a3cfcf2526f8eadcb540ec87d6009d6a2939882140f9a447c5be4328a0681aa3002f6a9dfd836b362fb1d423d7c9571aeb50e2a6acb9ab4e85574baf27b1028db0f6647aa7fe995c1fbf8ab422bb15acf9ae6de73972c9549cb601297bbb1c740e8761af16c4785c4827b5dc5e52f4a82000f6f87670ec19fea4e04e564fc83c0ccf1b7fa2bb9ac3e56addfa7f5f6d1d3d3c92dea5de9fa42f1414a769b0cdc40e306fee0ad66573628b83a07fe087fcb3377848e1a7869e592c83bb594284da28a4f5db381059d56e5d4989042dadbbe6000b66184ca8fe9d293f6c70988f3d7b8ee00546a21aaeca498ae06fa7becc5a55914c7a1ab714d955a8b0bd72e8d6bbf4dd451b525fcbc9fb5c10747dee3c755d39be5c2d52345c56185a8d6cee878b72255acabf7dbefafaed94838532fd01ea6244c4ac929de6846084a07d19de7098e62b613775abe326d402f707c4fbb3968b0aac7f1f27537cbdecee19151b310bcbe2c848ef41eea747e85f87d5a160b2cb6b28d137e30c69770c1651e44a66f8e3394bec03c8256b89fd59bec449c6a2bdb351f53d05e463f75b834624b8c7b557dc38a398d726d0846fc2f062b5b32d10af38ce844c6811aaef73ace1d86813bc37433670f6180f9bd112ae00133077fc7a0bd12d7b4b3a53a3c16a9cb0e8112f18691aa3bd2215afdaa1d00c8ea4f4a302ea9ebc94afaad2549f646a8ae66b953fa9cd649a02c4b152cc6c7b55d99ddc3d0fd1fcd84da355eb02581dba9e4d9dd235d2d4c4e094161440e70926221d76ce70c8762485c8b801550cc208e5d1bfd184e622ff0950a912dd47163c838fd562f09ca1690e76da55a471ec67cb83bbb103975bd4683f0393ec8b843f55ba2c0bdc6c90b50031cfe751792bd5d0cb50c8ee93086794e18c4ed66d6bd09b499f8ff2f63a8920701ab0af5b4b75402b1d65b1eb515dc46e181a1699f21e67349c904f02f8358e28faff2ade65703d14dc2774b02acc731eee0941675502d95e0c32a7304f6e9af85ef220daea0de24cf79e35a59412e62835d3032f88d9ed7befd4f708bfd2d236bd188b6f951bbe13e3add84f111e20324a523426611ec15fb376e7306cbec6867f0b945047a4facf78154e68a66a36972d5a18af1403baa9b4b51fddd072ee1f0087add02485b40323bd708b76406e10a927a913d91c5d771d3aeb3cfafb54b1016785c61ed13060d5f1b550676a656b874fd392ae61c5044218df55cbb72b819990ffdb130fb17a14f7cb5a2a8aafedc6526d83762dbf320f15758030eeecf5652dccf04cdc68827400c768a21daff47212b87357ff0bcb36cae4d113a5d9815b07332cb42329321664d93e43e6dcd6115987007fc623088004f8ac943736eb2a045a25b1bbfbbc97571eabf875d924f6b7b0e524b1afa0ff499473aa7976de83b91928e84f8e445728778fe0e5a356a57f09ed254848cec31b7c5c9c7a2fca21befe15ffc9317e96f7ad582684ce625791b99563781bf64983e77be4f1a5893beec4b560fc15e9c21dd0c29bf2879dfaa257ba5ec97957050d5b2c1f25eb4064488c139dbf88f3b7c70850d6fdbf0603cdd4011bf76e0d9ee5c2b128b50dba5689a8f04d4caf62d777eab31aab4b4195da780901352d284885bf417eb05367ee1b5f2f8c5cfe7f0394fb977f3a3f96084375e22ccf6c3ee4659d68d2b1948a4a1783a4db2282c67d39613fa67be4dd144793b76c09dd563ef3d169f34318acbd62d3b2d64f9173d16e9801132918c3390172c6f64d049b4c894d593419e5f4d5a513fc5a64ddcd05b034e6d16fe88ff89a520c464f842ad5a62a6fc46f0e9d56d05d6f5e625d25f537cca62910981dd463255318d8273db13d27fdc6c17c2c54776ba3a246c413957f297b8ecb1adb5c3f1d4d8e4d7705bdb9268f956d2845b68511edd51cdc5d05de5d6d4b3f573592986fed325f1f3c6a9ef7740f9d843e11981d1ca515c7e722ec4d691c5e4d3a146e39bcf407f66418f754bb2508cb4cc843aa9d8eb63850e5b9103682ecc1fc8f972f394be9d31cb9efd0f693d4ec41fe8d0993b45d2f422f9ab604d3371c1bda1daa3206a027c4de5c8f2cf6d1fc7e6d1423a6c71e84f24e0a4dfbf4a331deff2ae649df9681a08846efc9f0001e7ef106f1bfa25ee2799b13f1f076e30e58078d186afb65301497e982478babf143972cc7072f70829b8faee46e56a1451ff7ddd0dd35816bfa29eee361de60fbc3222e89d70f1495be94d0e82072a0e572e3055c905552e6c45d2af3d4f505a99d947667059c1c92ce2d3549077539c4cec4c07337361eeb9f78813bf9e77b0a79f391ae6eb663deb53317f61ef8ddffdbd0ca2d8095c10c106b0968325bc1e88829d92399b809f1b881e9b9f0aeada5c5ee20fd0866070e3d5d41e62f5b6d2d25441babcdf9d3dc8ae3c140a6f352daf00ed38e248b236acd27f24bdebae0f272a5820ef77fb603fe3cc910a9d842129259e61d25dcf546cd770e4cccab470b20fa5f5972a6dd15853483de6e032f9726c166e81e8e0f9db4df397cc4a10b6e58708a31f48d7d2bae4ef92828c37088068b2ae433110dc7c08e6017d8b26e4e0382ca8fa62dc6f53c4cc2f0f78af72335c494f57f2414afe247e2291c395895bb18f701b6f4331feb759110c543dd94a238e782ad552047677558a50e7683d71a9e222fd19a9343e1d64528640a8099dedd19e4c747dda18ff25b15bddf750a54533b6ecfc75ad4a2909485f7fd759d45c74727b2e7300eae71a8784f5dd7f25b4b000ed3254264131cbbae316fb3a3bfbeb309dd2d18104629db354f447791eb882bf0333a520b8dba745b673d071b07e1de3e02fe751a1cf5908435b1a38edbd60483abdb15452c868844ceb96c449ab72999a55c79f9ce7405797142ef7095b4caf99d7bbe51cd4e963e4ffbbd2648761abd3894b5420a0add261ff9c0eff61aafd1ac5195ff15cadb5b0c7ce34d4d2d68146f3dae677e833b8be0f8a876153bb65398def38e4bf539d3a00047b19c483062fc1c2547b7d4f7d99b7035212ccfffeeb21ed7bbd6165ac7fbafbca3cef86fff655305706dd0baa607c50543bb0d66f0f4dbdd9c365fdb7b875dc5e7ee59afccc321ad1e31cc84687afda71231bb2e4dc3ce79ff3ce4bbafed8821a5b71bbf3844f110e2dd9557b596ac792d97506d22c0410bce435e20fa2e2d435361b5b6ac85f44763769723a7b629258f45e10578f70bef2e9c05af8032e357697dfcd30de9b3e953a36d6cb7a03ce69288b663f692793904dd8fb4ab6dc31ddf7f6942ef84c1e68c78bf9974f830ee2fccca84113cee98b47ed41a87fe610c5348dc38d4ada19862772317a70754870347ad87dbbb4c52349b0261aa8e108fcf387b24d4e2a77ba76e8472fd74ab6fa021277a24ef7a48d395b0fd1f9c0cf83bac56b433ffbfe5984a362e337969febf259988162c2b4842bd2fc0b230fee93a085003e615088abfe41889f7b5e0f380ffe55b66c1f7419993c3dd4aac5891494a183ddca2e415e1749489c925715f3c44d94b90d2d735f2b923bdbbbf1646580ab135356a9ee29bc19e73ded9a33798a69d248574e0c9e9f40a1c1ba52bc66a578d08b75f271a9e9f447efede09d6b3b57e0aa6322c18fd6f5e1c9d2753e0a6513cc04124ab89802eb9c504f0e5550868ab597629d7cc7447ed1b01b2ff4cf511aa098710b208b5aa0f595039a2f0e7294c5fe3b0c3e6c40000000000000000000000000000000002588beb10115f4b22f4ac997c86c49201ee9dceb2142ae61555bbbc4ef8cdd468a8ffbe6cbfc8877dd87292c70e10669bc99d8d5710f7719cc2cffc86cd529b6da2511d07aef4a1d9533ab58a76f80ad7fe91a17397d3c83481", @ANYBLOB="fe2ecf20a9a17bd2ed7e803f830375c150a1f848f604c2c1f932d2b7163be4b2b9a5bd521d185cfbee555b27608594beba6325923aaf5db74cff01000053db92c6c5fcbba0abd975fc76bea49b00513afc856ed89d3fadeda307ca587354322803b0983cc65725ae7f45fb95e7cdb28c6b886959b7dde2c87c73f6008cf6eed7861f24b7423704b95f3d05b92d3d7ff9d392833ecd02443320b60131a350360fcc1d659e2a03cb469caf0498bacae0735a161345b3d71a55f14ef636b6f832c7a6071fce83904dfd871b6d8e03648dbaa3a039eb5673792cae80335732030f9aeabaf3bb3cc4ca5fe75271d69b2e78beb2b81fc3cf3a18a7ae93a3cdbe6599b99408275e2b4b4477c6fcf4806134e839e13533ec000000000000006a1c000000000000000000000000000000000000000000000000000069c3288311b7414705e975eb3f1b77a120", @ANYRES64], 0x8, 0x2eb, &(0x7f00000004c0)="$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") r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0x0) fdatasync(r6) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ftruncate(r6, 0x81ff) r7 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r7, &(0x7f0000008dc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socket$kcm(0x2, 0x0, 0x73) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x16, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r8, 0x0, 0x10, 0x38, &(0x7f00000006c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000700)=""/8, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r5) fsconfig$FSCONFIG_CMD_RECONFIGURE(r2, 0x7, 0x0, 0x0, 0x0) ioctl$TCSETS2(r1, 0x402c542b, &(0x7f0000000100)={0x6, 0x80, 0x3, 0x3, 0xd5, "f6d35224169e73656c4132960fbeec74adc795", 0x7, 0x7}) setsockopt$inet_int(r0, 0x0, 0x3, &(0x7f0000000000)=0x6, 0x4) sendto$inet(r0, &(0x7f0000000040)='\f\x00', 0xffeb, 0x0, &(0x7f0000000340), 0x10) 1.774174205s ago: executing program 4 (id=3606): r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @remote}, 0x10) getsockopt$inet_int(r1, 0x10d, 0xb9, &(0x7f0000000000), &(0x7f0000000080)=0x4) 1.71347121s ago: executing program 4 (id=3607): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = socket(0x2, 0x80805, 0x0) ppoll(&(0x7f00000008c0)=[{r0}, {r1}], 0x2, 0x0, 0x0, 0x0) 1.713282941s ago: executing program 4 (id=3608): socket$inet_sctp(0x2, 0x400000000001, 0x84) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x2d) syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, 0x0, &(0x7f0000000380)) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x1200010, &(0x7f0000000100), 0x1, 0x500, &(0x7f0000000500)="$eJzs3U9sI1cZAPBvJn/sTdMmhR4AFbqUwoJWayfeNqp6oZwqhCoheuSwDYkTRbHjKHZKE/aQPXJHohInOHHmgMQBqSfuSBzgxqUckAqsQA0SByOP7V3njzfWbmzvxr+fNJo38+L53tvRvGd91s4LYGJdj4ijiJiNiPcjYqFzPuls8XZ7a/3dZ/fvrh3fv7uWRLP53j+TrL51Lno+0/Jc55r5iPjBOxE/Sk4F/VNE/eBwe7VSKe91ThUb1d1i/eDw1lZ1dbO8Wd4plVaWV5bevP1G6dL6+kr1N59ei4jf/+7Ln/zx6Fs/aTVrvlPX24/L1O76zIM4LdMR8b1hBBuDqU5/Zh/nw4/1IS5TGhGfi4hXs+d/Iaayu3nSydv07RG2DgAYhmZzIZoLvccAwFWXZjmwJC10cgHzkaaFQjuH91LMpZVavXFzo7a/s97OlS3GTLqxVSkvdXKFizGTbGxNl5ezcve4Ui6dOr4dES9GxM9y17Ljwlqtsj7OLz4AMMGeOzX//yfXnv8BgCsu/7CYG2c7AIDRyY+7AQDAyJn/AWDymP8BYPKY/wFg8pj/AWDymP8BYKJ8/913W1vzuPP+6/UPDva3ax/cWi/XtwvV/bXCWm1vt7BZq21m7+ypXnS9Sq22u/x67H9YbJTrjWL94PBOtba/07iTvdf7TnlmJL0CAB7lxVc+/ksSEUdvXcu26Hnf/4Vz9cvDbh0wTOm4GwCMzdS4GwCMzdnVvoBJIR8P9CzRe6/ndP5M4bSPBrp8at1QePrc+OIT5P+BZ5r8P0yux8v/+y4PV4H8P0yuZjOx5j8ATBg5fiC5oL739/+lZs/BYL//AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwJU0n21JWuisBT4faVooRDwfEYsxk2xsVcpLEfFCRPw5N5NrHS9HhHWDAOBZlv496az/dWPhtfnTtbO5/+ayfUT8+Bfv/fzD1UZjbzliNvnXg/ONjzrnS+NoPwBwke483Z3Huz67f3etu42yPZ9+p724aCvucWdr10zHdLbPZ7mGuX8nneO21veVqUuIf3QvIr5wXv+TLDey2Fn59HT8VuznRxo/PRE/zera+9a/xecvoS0waT5ujT9vn/f8pXE925///OezEerJdce/4zPjX/pg/JvqM/5dHzTG63/47pmTzYV23b2IL01HHHcv3jP+dOMnfeK/NmD8v778lVf71TV/GXEjzut/ciJWsVHdLdYPDm9tVVc3y5vlnVJpZXll6c3bb5SKWY662M1Un/WPt26+0C9+q/9zfeLnL+j/1wfs/6/+9/4Pv/qI+N/82vn3/6VHxG/Nid8YMP7q3G/z/epa8df79P+i+39zwPif/O1wfcA/BQBGoH5wuL1aqZT3hl1Ihx8iKyQRRyPoTruQ+/VP3xlVrCEW4ulohsLTVBj3yAQM28OHftwtAQAAAAAAAAAAAAAA+hnFfycadx8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4uv4fAAD//5iA1Hs=") unshare(0x400) pselect6(0x40, &(0x7f0000000040), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) 1.36016605s ago: executing program 2 (id=3609): connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) shutdown(0xffffffffffffffff, 0x1) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000140), &(0x7f00000001c0)=0x4) 1.337594721s ago: executing program 2 (id=3610): ioperm(0x0, 0x1d, 0x1) ftruncate(0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100), 0x1, 0x500, &(0x7f0000000500)="$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") utime(&(0x7f0000001f00)='./file0\x00', 0x0) (fail_nth: 4) 963.758172ms ago: executing program 2 (id=3611): unshare(0x68040200) shutdown(0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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", @ANYRES16, @ANYBLOB="8b3700000000000000000500000010001d800c00008005000600fd000000"], 0x24}}, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) getsockopt$ARPT_SO_GET_ENTRIES(r1, 0x0, 0x61, &(0x7f0000000000)=ANY=[@ANYBLOB='filter'], &(0x7f0000000100)=0x28) 912.505906ms ago: executing program 3 (id=3614): r0 = eventfd2(0x0, 0x0) r1 = syz_io_uring_setup(0x5169, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x2292, 0x0, &(0x7f0000000400)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r1, 0xb15, 0x0, 0x0, 0x0, 0x0) write$eventfd(r0, &(0x7f0000000000)=0xfffffffffffffffe, 0x8) 859.115051ms ago: executing program 4 (id=3615): socket$inet6(0xa, 0x3, 0x6) syz_open_dev$vcsa(&(0x7f0000000040), 0x4, 0x406080) syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f00000006c0)='.\x00', 0x0) symlinkat(&(0x7f00000012c0)='./file0/file0\x00', r0, &(0x7f00000000c0)='./file1\x00') symlinkat(&(0x7f0000000140)='./file1\x00', 0xffffffffffffffff, &(0x7f0000000340)='./file0\x00') rmdir(&(0x7f00000002c0)='./file0/file0\x00') 858.82221ms ago: executing program 3 (id=3616): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x0, 0x0, 0xffffffff}, 0x1c) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'erspan0\x00', 0x0}) sendto$packet(0xffffffffffffffff, &(0x7f0000000180)="0b031404feff640f020047540ff6a13bb1000e00080081004803", 0x10f6c, 0x0, &(0x7f0000000140)={0x11, 0x0, r2}, 0x14) 845.036691ms ago: executing program 4 (id=3617): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)='./file0/../file0/../file0\x00', 0x0, 0x201000, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') ppoll(&(0x7f00000000c0)=[{r0}, {r0}], 0x2, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='devpts\x00', 0x0, 0x0) (fail_nth: 9) 829.526893ms ago: executing program 3 (id=3618): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = socket(0x2, 0x80805, 0x0) ppoll(&(0x7f00000008c0)=[{r0}, {r1}], 0x2, 0x0, 0x0, 0x0) 819.444174ms ago: executing program 3 (id=3619): socket$inet_sctp(0x2, 0x400000000001, 0x84) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_rdma(0x10, 0x3, 0x14) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0x0, r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)={@ifindex, 0xffffffffffffffff, 0x0, 0x0, 0x4, @prog_fd}, 0x20) 790.845396ms ago: executing program 3 (id=3621): socket$inet_sctp(0x2, 0x400000000001, 0x84) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) io_uring_setup(0x3050, &(0x7f0000000000)) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_rdma(0x10, 0x3, 0x14) socket(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)={@ifindex, 0xffffffffffffffff, 0x0, 0x0, 0x4, @prog_fd}, 0x20) 790.490736ms ago: executing program 3 (id=3623): setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x14, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) socket(0x0, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, 0x0, 0x0) connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000380)={0x1}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r2, 0x26, &(0x7f0000000380)={0x0, 0x0, 0x103ff}) 567.775714ms ago: executing program 2 (id=3624): r0 = socket$inet6(0xa, 0x6, 0x0) listen(r0, 0x80080400) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @remote}, 0x10) getsockopt$inet_int(r1, 0x10d, 0xb9, &(0x7f0000000000), &(0x7f0000000080)=0x4) 566.629734ms ago: executing program 2 (id=3625): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000800, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @link_local, @void, {@ipv4={0x8035, @tcp={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0xa, 0x0, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "42c59c23cba5509acc1fcb978db9c707"}]}}}}}}}, 0x0) 435.085425ms ago: executing program 0 (id=3629): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000200)='mm_page_free\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000040850000008600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b7"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r3, 0x27, 0x0, 0x120, 0x0, 0x0, 0x900, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xf}, 0x50) 434.852795ms ago: executing program 0 (id=3630): socket$inet6(0xa, 0x3, 0x6) syz_open_dev$vcsa(&(0x7f0000000040), 0x4, 0x406080) syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f00000006c0)='.\x00', 0x0) symlinkat(&(0x7f00000012c0)='./file0/file0\x00', r0, &(0x7f00000000c0)='./file1\x00') symlinkat(&(0x7f0000000140)='./file1\x00', 0xffffffffffffffff, &(0x7f0000000340)='./file0\x00') rmdir(&(0x7f00000002c0)='./file0/file0\x00') 429.946435ms ago: executing program 0 (id=3631): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYRES32=r0], 0x4c}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xa, 0x2, 0x2, 0x7}, 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000a1000000000000003b810000850000006d000000c50000000500000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000010000000000000009500000000000000"], &(0x7f0000000340)='GPL\x00'}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000000c0)="a0", 0x0}, 0x31) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) r4 = getpgrp(0xffffffffffffffff) syz_pidfd_open(r4, 0x0) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x8, &(0x7f0000000280), 0x1, 0x78a, &(0x7f0000000840)="$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") 353.326952ms ago: executing program 0 (id=3632): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = socket(0x2, 0x80805, 0x0) ppoll(&(0x7f00000008c0)=[{r0}, {r1}], 0x2, 0x0, 0x0, 0x0) 342.866822ms ago: executing program 0 (id=3633): r0 = socket$inet6_sctp(0xa, 0x0, 0x84) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000140), &(0x7f00000001c0)=0x4) 274.493558ms ago: executing program 0 (id=3634): r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r0, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) r1 = socket(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xe, 0xc, &(0x7f0000002240)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES16=r0, @ANYRES8=0x0], &(0x7f0000000180)='syzkaller\x00', 0xd2000, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x90) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'veth0_macvtap\x00', 0x0}) sendmsg$TIPC_NL_NET_GET(r1, &(0x7f0000002200)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000021c0)={&(0x7f0000001d80)=ANY=[@ANYBLOB="20040000", @ANYRES16=0x0, @ANYBLOB="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"], 0x420}}, 0x4) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004000)=@deltfilter={0x2004, 0x2d, 0x200, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0xf, 0xe}, {0xa, 0xfff2}, {0xb, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0xb08, 0x2, [@TCA_ROUTE4_ACT={0x158, 0x6, [@m_ct={0x154, 0x2, 0x0, 0x0, {{0x7}, {0x44, 0x2, 0x0, 0x1, [@TCA_CT_MARK={0x8, 0x5, 0x1}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @loopback}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @remote}, @TCA_CT_PARMS={0x18, 0x1, {0x101, 0x432, 0x20000000, 0xa5, 0xfffffff7}}, @TCA_CT_MARK_MASK={0x8, 0x6, 0x7246}, @TCA_CT_MARK_MASK={0x8, 0x6, 0x7e4}]}, {0xec, 0x6, "cc77cdf7730700dfc6f6a12f36b3ff717a43fefdb063024fb981cea512e5cf766c3f304097ff76cbd3a06fcfe640ff9a122db8c247702ae546dc7f575c0e6aa9f18541c10a5d9c017792c54ae4afc01a748624ac1234d37e247a11a7be666d7eaaae46d284454226d864ba859cd896e16e58b928d02ed967f1f44801f078dca21beda876de144495acb9daccea188a6ae59c3635a78ce2e410bd88903ecf588f555d3a72ac7abaa514fe984b36383389aa43435a6b08a817d89bcd4879dea046fa5c27644f9262057b7d49b29095fc8bbe945da829a518843c32811e39e4b1d7e364009c5115c1b6"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}, @TCA_ROUTE4_ACT={0x17c, 0x6, [@m_ct={0xb0, 0xe, 0x0, 0x0, {{0x7}, {0x7c, 0x2, 0x0, 0x1, [@TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e20}, @TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @mcast2}, @TCA_CT_LABELS_MASK={0x14, 0x8, "a4baa03b73688e7e9fe77d8aa867ae48"}, @TCA_CT_MARK_MASK={0x8, 0x6, 0x6}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @empty}, @TCA_CT_MARK_MASK={0x8, 0x6, 0x9}, @TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @private0}, @TCA_CT_LABELS={0x14, 0x7, "f3f9155d907e7d9375222913c7d5712b"}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e24}]}, {0xe, 0x6, "e9f16bd6f942187a9fca"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x5, 0x1}}}}, @m_sample={0xc8, 0x0, 0x0, 0x0, {{0xb}, {0x64, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x5, 0x2, 0x5, 0x5}}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x3e, 0xfffffff4, 0x1, 0x6, 0x6}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x6}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x2, 0x7, 0x7, 0x6, 0x5a}}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x4}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x6}]}, {0x3b, 0x6, "9b600bd3bf2e6c70b334d33bd3125b9cf6c09f44bc7508af607729be336d8b82f3bb13f4c73feb08baca9e3d08f90acd13832b570a5209"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}, @TCA_ROUTE4_IIF={0x8, 0x4, r4}, @TCA_ROUTE4_POLICE={0x820, 0x5, [@TCA_POLICE_RATE={0x404, 0x2, [0x1, 0xfffff657, 0x3, 0xd, 0xfffffffe, 0x7fff, 0x1ff, 0x75, 0x9, 0x5d321e, 0x3ff, 0x5, 0x87f, 0x5edc, 0x4, 0x4, 0x2, 0x80, 0xd608, 0x3, 0x1, 0x7ea, 0xd25, 0x400, 0xff, 0x10000, 0x7, 0x2, 0x1, 0x4, 0x400, 0x2, 0x10, 0x6, 0x0, 0x4, 0x1000, 0xdf1b, 0x9, 0x1, 0x0, 0x3, 0x9, 0x601d, 0x3, 0x2b, 0x6, 0xe, 0x1, 0x9, 0x3, 0xd136, 0x7, 0x5, 0x3, 0x5, 0x5f84, 0x5, 0x10000, 0x4, 0x10, 0x81, 0x6, 0xfffffffa, 0x30eb, 0x0, 0x6, 0xfffff38d, 0xf, 0xb1ad, 0x30000000, 0x6, 0x5, 0x8, 0xfffffff7, 0x2, 0x6cb8, 0x400, 0x3, 0x90f5, 0x8001, 0x4, 0x9, 0xd, 0x6, 0x75b, 0xf06, 0x26ed, 0x8e0, 0x4, 0x6, 0xfffffff9, 0xffff, 0xff, 0xba, 0x6, 0x7, 0x4d, 0x401, 0x4, 0xa3b, 0x7fffffff, 0x200, 0x6, 0xf1, 0xb, 0x5, 0x9, 0x7, 0x7fffffff, 0x1, 0xc08, 0x7fff, 0x0, 0x3, 0x6, 0x81, 0x62d274d5, 0x5, 0x1, 0x8, 0x1, 0x4, 0x0, 0x10000, 0x9, 0x2b73, 0x0, 0xd, 0x7, 0x7, 0x8be6, 0x2, 0x4, 0x5, 0xff, 0xffffffff, 0xccf, 0xb, 0x2, 0x0, 0x6cea, 0x0, 0x6, 0x16a5bbdf, 0x8, 0x3, 0x34, 0x5a, 0x2, 0xf2, 0x1, 0x2, 0x5, 0x7, 0x3ff, 0x4, 0x8001, 0x4, 0x4, 0x9, 0x6, 0x6, 0x0, 0xa8, 0xfffffff8, 0x10000, 0xb, 0x1b5, 0x48, 0x7, 0x7, 0xb47b, 0x6, 0x0, 0x3, 0x7, 0x8, 0x0, 0xfff, 0x10, 0x9, 0x0, 0xd, 0xd7bd, 0x7138, 0x1, 0x30f, 0x66, 0x2, 0x1, 0x1, 0x5, 0x8, 0x9, 0x7, 0x92, 0x1, 0x3, 0x2, 0xffffff80, 0x67, 0x0, 0x8a, 0x8, 0x100, 0x8, 0x529, 0x3, 0x2, 0x1, 0x64e777c7, 0x6, 0x80000001, 0x4, 0xe1, 0x5, 0x80000001, 0x55c4, 0x60, 0x7, 0xde7a, 0x8, 0x9, 0x8, 0xfffffff4, 0x1, 0x3c5, 0x4, 0x8e40, 0x281008ed, 0x8, 0x756, 0x6, 0x400, 0x1000, 0x1ff, 0x70, 0x6, 0x2, 0x3, 0x435, 0x200, 0x3, 0x9, 0xffffffff, 0x4, 0x3ff, 0x1, 0x7, 0x7, 0xfffff800, 0x3, 0x8, 0x3, 0x9]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x3}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1, 0x5, 0x7, 0x800, 0x7, 0xfffffffd, 0x3, 0x1, 0x6, 0x1, 0x40, 0x9527, 0x7ff, 0x6e85, 0x1, 0x3, 0x2da2, 0xfffffffe, 0x2, 0x3, 0xcd0c, 0xaab, 0x0, 0x80000001, 0x1, 0x4, 0xf4b, 0x6, 0xffffffff, 0x99, 0x7, 0x8724, 0x8, 0x7ff, 0x5, 0x80, 0x2, 0x0, 0x4, 0x8, 0x7ff, 0xead, 0x7418, 0x2780, 0x4, 0x1, 0x4, 0x4504, 0x6, 0x4, 0x0, 0x3, 0x9, 0x9, 0x7, 0x4b, 0xd, 0x9, 0x1, 0x0, 0x6, 0x2, 0x9, 0x0, 0x3, 0x7ff, 0x1, 0x77, 0x7, 0x7, 0x400, 0xd, 0x2, 0x5, 0x2, 0x2, 0x1, 0xf, 0x6, 0x1, 0x37c82e11, 0x6, 0x3, 0x1, 0x7, 0x8, 0x20e, 0x0, 0x9, 0xdf76, 0x5, 0x2, 0x3, 0x4, 0x4f2, 0xa, 0x401, 0xe5db, 0x12a652da, 0x0, 0x60a, 0x3, 0xfffffff8, 0x8000, 0x5465a0d, 0x8, 0x1, 0x3, 0x1c04, 0x8, 0x7fffffff, 0x2, 0xdf, 0x1ff, 0xa, 0x4, 0x1, 0x9, 0x2, 0x90, 0x4, 0x10, 0x3, 0x7f, 0x2, 0x5, 0x8, 0x810, 0x6, 0x4, 0x8, 0x4, 0x5, 0x1, 0x4, 0x9, 0x1, 0xfffd, 0x7fff, 0xfffff38f, 0x4, 0xa, 0x3109, 0x401, 0xe, 0x3, 0x2, 0x5, 0x7f, 0x6d, 0x7ff, 0x3, 0x4a5, 0x9, 0xfffffffa, 0x9, 0xf, 0x8, 0x3, 0x1, 0x3, 0x6, 0x7f, 0x2, 0x10001, 0x1, 0x0, 0x8, 0x1, 0x1ff, 0x7, 0x0, 0xe, 0x8, 0x1, 0x2, 0x3a9, 0xff, 0x42, 0x1809, 0x1, 0x5, 0xff, 0x9, 0x9, 0xffffffff, 0x8, 0xf7, 0x1ff, 0x63e, 0x3, 0x0, 0x6, 0x7, 0x5, 0x30, 0x6, 0x0, 0x8000, 0x1, 0x0, 0xfffffff9, 0x8, 0x8001, 0x2, 0xdd, 0x1, 0x8000, 0x5, 0x6, 0x0, 0x9, 0x0, 0x3e5, 0x1ff, 0xb, 0x9, 0x1, 0xf, 0x1, 0x5, 0x84ce, 0x0, 0x0, 0x220efd59, 0x8001, 0x4ad52eef, 0x6617, 0xfffffffd, 0xedcb, 0x7, 0xfff, 0x40, 0x5, 0x7, 0x2, 0xfed5, 0x1ff, 0x7, 0x0, 0x5, 0x7, 0x0, 0xe, 0xe, 0x0, 0x4, 0xb, 0x5, 0x0, 0x3f, 0x8, 0x6, 0x3, 0x6, 0xf]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x8}]}, @TCA_ROUTE4_CLASSID={0x8, 0x1, {0xd, 0x4}}]}}, @filter_kind_options=@f_bpf={{0x8}, {0x1474, 0x2, [@TCA_BPF_POLICE={0x1470, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x7, 0x2, 0x401, 0x1, 0xf9, 0x94, 0x9, 0x6, 0x3, 0x9, 0xfffffff8, 0x400, 0xbdfd, 0x8, 0x65, 0xc502, 0x6, 0xdc, 0x6, 0xfffffc00, 0x9, 0x6, 0x1, 0x5, 0x0, 0x7, 0x7, 0x800, 0x3, 0x6, 0x401, 0x6, 0x4320, 0x0, 0x1ff, 0xe5a, 0x1, 0xc14e, 0xe, 0x1, 0x200, 0x7f, 0xffff, 0x2f, 0x5, 0x1, 0x10000, 0x0, 0x3ff, 0x9, 0x7, 0x0, 0x6, 0x9, 0x4, 0xfffffff5, 0x6, 0x5c8d4cbe, 0x9701, 0x8, 0x0, 0x5, 0x6, 0x3, 0xffffffff, 0x7f1, 0x81, 0x0, 0x6, 0x100, 0x1ff, 0x2, 0x3, 0x5, 0x3, 0x4, 0xff, 0xd50, 0x2, 0x7fffffff, 0xf36, 0x401, 0x9, 0x9, 0x2, 0xec6, 0x5f, 0x200, 0xcda5, 0x4, 0x4, 0x8, 0x80, 0x6, 0x1000, 0x4, 0x0, 0x1, 0x6, 0x3, 0x7, 0x5, 0x6, 0x401, 0x9, 0x1, 0x2, 0x8, 0x8, 0x8, 0x6fc57f4f, 0xb, 0x807c, 0x0, 0x0, 0x2, 0x902, 0x800, 0x1d, 0x0, 0xc078, 0x101, 0x1ff, 0x3, 0xe95f, 0x9, 0x200, 0x16de, 0x7, 0x8, 0x40, 0x6b, 0xa, 0x7, 0x3, 0xfffffffe, 0x85da, 0xf6d3, 0x8, 0x75c, 0x2e3, 0xfff, 0xf, 0x6, 0x1, 0x5, 0xc0000000, 0x80000001, 0xffff, 0x100, 0x3, 0x8, 0x1, 0x9, 0x1, 0xfffffffd, 0x4, 0x5, 0xffff, 0xd7e, 0xffffffff, 0x1, 0x4, 0x4, 0x6, 0x9f5, 0x9, 0xa, 0x9, 0x10001, 0x2, 0xfff, 0x2, 0x7, 0xb, 0x57, 0x7, 0x1000, 0x3, 0x8, 0x6, 0x0, 0x7fff, 0xb87a, 0x101, 0x4, 0xfff, 0x5, 0x5, 0x6, 0xce2d, 0x6, 0x0, 0x62e, 0x4, 0x6, 0x3, 0x2d, 0x8001, 0xff, 0x0, 0x1, 0x9, 0x1, 0x6, 0x101, 0x100, 0xc3, 0x3422, 0x9, 0x6, 0x3, 0x6, 0x800, 0x81, 0x5, 0x2bda, 0x434, 0x6, 0x6, 0x5, 0x4, 0x6e, 0x4, 0x0, 0x3, 0x3, 0x5, 0x0, 0x5, 0x7f, 0x8, 0x15, 0x3, 0x4, 0x1, 0x7fff, 0x7f, 0x8, 0x6, 0x80, 0x1, 0x7, 0x5, 0x1, 0x9, 0x9, 0x200000, 0x7f, 0x1ff, 0x8, 0x5, 0x6, 0x2, 0x1]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x3, 0x5, 0x400, 0x7, 0x43, 0x8, 0x4, 0xfffff4b2, 0x7, 0x9, 0x1, 0x800, 0x8, 0x8000, 0x0, 0x1, 0x6, 0x9, 0x2, 0xd, 0x0, 0xfff, 0x2, 0x3, 0x5, 0x0, 0x8001, 0x0, 0x6, 0x8, 0x0, 0x0, 0x366, 0x1, 0x1, 0x0, 0x7, 0x0, 0x6, 0x7, 0x7fffffff, 0x4, 0xfffffff9, 0xf5, 0x7, 0x9, 0x6, 0x8001, 0x5, 0x9e7, 0x6, 0x1c0, 0xc, 0xd38a685, 0xbeec, 0xe, 0x6, 0x4, 0xc, 0x76, 0x41ea, 0x2, 0x2, 0x9, 0x3, 0x4, 0x0, 0xfffff8ec, 0x3, 0x0, 0x7f, 0xfffffffa, 0xb51, 0x6, 0x4, 0x7, 0xc, 0x6, 0x6, 0x0, 0xfffffff7, 0x32b, 0x3, 0x2, 0x0, 0xffffffff, 0xffe, 0x100, 0x81, 0x6, 0x9, 0xfff, 0x5, 0x1c, 0x7, 0x200, 0xfa06, 0x0, 0x6e, 0x39d, 0x8, 0x7, 0x93d, 0x6, 0x1, 0x8c08, 0xfffffffd, 0x8, 0x6, 0x8, 0x9, 0xb2, 0x2, 0x7dfd9a11, 0x2, 0x5, 0xffff, 0xa, 0x5, 0x5, 0xc62f, 0x89, 0x10000, 0x70000000, 0x5, 0x0, 0x7, 0x7, 0x9, 0x8, 0x80, 0xfff, 0x4, 0x3, 0x88b6, 0x2000000, 0x0, 0x4, 0x0, 0x1, 0x3b, 0x8, 0x80000001, 0x1, 0x101, 0x800, 0x0, 0x7, 0x80000001, 0x8, 0x1, 0x83a, 0x8, 0x55, 0xffffffff, 0x6, 0x1, 0x8, 0xa12, 0x4, 0x6, 0xfff, 0x40, 0xffffff18, 0x1, 0x8001, 0x9, 0x0, 0x10, 0xb, 0x7fffffff, 0x4, 0x100, 0x0, 0xffffffff, 0x5, 0x6, 0x1, 0x6, 0x9, 0x8, 0x40, 0x3, 0x1, 0xe, 0xbcd, 0xfb3b, 0x1000, 0x2, 0xdf3, 0x0, 0xfffffff9, 0xe, 0x20000000, 0x700000, 0x5, 0x1, 0x800, 0xfffffffb, 0x10000, 0x3, 0x100, 0x6, 0x5, 0x2, 0x7, 0xbb73, 0x4, 0x401, 0x8e, 0x4, 0x1, 0xfffffffe, 0x37af, 0x10000, 0x7f, 0x7c, 0x4, 0xfffffffb, 0x7, 0x7, 0xfffffff7, 0x1, 0x0, 0x5, 0xd86, 0x7, 0xffffffff, 0x0, 0x3, 0x2, 0x4, 0x6, 0x39798ecc, 0xe911, 0x8001, 0x4, 0xfcf, 0x2f, 0x7, 0x9, 0xfffffffe, 0x5, 0x0, 0xffffffff, 0x7, 0x0, 0x5, 0x6, 0x1ff, 0x0, 0xaa6, 0x0, 0x6, 0x80000000, 0x3]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x702}, @TCA_POLICE_RATE={0x404, 0x2, [0x1, 0x7, 0x1, 0x4, 0x7, 0x1, 0x6, 0x27, 0xf, 0xffffff81, 0x1, 0x1, 0x5c, 0x6, 0x7fff, 0x200, 0x6, 0x3, 0x830f, 0x1ff, 0x757, 0x1, 0xfffffff7, 0x401, 0xd, 0x0, 0x1000, 0xfffffff9, 0x8, 0x5, 0x7, 0x6c72, 0x7, 0x3ff, 0xfff, 0x7, 0x4, 0x7, 0x0, 0x9, 0x9, 0x100, 0x2, 0xfff, 0x8, 0x10, 0x8746, 0x0, 0x1, 0x9, 0x9, 0x6, 0x2, 0x6f, 0xf4bc, 0x7, 0x0, 0xc746, 0x5, 0xe6de, 0x4, 0x4, 0x3, 0x200, 0x5, 0x8, 0xfffffffe, 0x4, 0x5, 0x7, 0x81, 0x8001, 0xfffffe01, 0x1, 0xbe4, 0x8, 0x7, 0x3, 0x7, 0x1, 0x8, 0x8, 0x9, 0x6, 0x81, 0x0, 0x7, 0x9, 0x81, 0x7, 0x0, 0x1, 0x16c, 0x10000, 0x1, 0x68, 0x7, 0xffff, 0x6, 0x3, 0x8, 0x3, 0x5, 0xffff, 0x3, 0xe0, 0xe0, 0x6c9, 0xfffffffe, 0xb861, 0x6, 0x5, 0xffff, 0x4, 0xba8e, 0x1, 0x7, 0x81, 0x4c, 0x7, 0xd9f, 0x4, 0x6, 0x5cdf, 0x200, 0x8, 0x6, 0x6, 0x8, 0x8, 0xff, 0x3, 0x3, 0x1, 0x2, 0x9b, 0xc0b, 0x4ff2, 0x3, 0xffff, 0x3, 0x6, 0x8, 0x0, 0x0, 0xfffffffb, 0x7, 0x4, 0xfffffff9, 0x61, 0x7f, 0x850, 0x3, 0x318, 0x9, 0x7, 0x4, 0x8, 0xa, 0xfffffffe, 0x1, 0xff, 0x100, 0x4, 0xf57, 0x1, 0x9, 0x0, 0xab, 0xffffff6a, 0x5, 0xa80, 0x80000000, 0x8, 0x5, 0xcfb, 0x4, 0x7f, 0x0, 0x9, 0x1, 0xffffee0b, 0x9, 0x100, 0x4, 0x6, 0xe, 0x8, 0x4, 0xff, 0x2, 0x8, 0x1ff, 0x82a8, 0xffffffff, 0x0, 0x3, 0xc, 0x8, 0x800, 0x6b, 0x7, 0x26, 0x4, 0x0, 0x2, 0x9, 0x42ec, 0x3, 0x6, 0x5, 0x9, 0xf, 0x9, 0x80000000, 0xe, 0x3846, 0x2, 0xffffffff, 0x6, 0x7fffffff, 0xaf, 0x9, 0x800, 0xffff, 0x0, 0x401, 0x1, 0x9, 0x4, 0x8, 0x6, 0x6, 0x2, 0x7, 0x3, 0x7, 0x9, 0x7, 0x2, 0x1, 0xa, 0x6, 0x10001, 0xd2, 0x2, 0x7, 0x4b, 0x7, 0x6, 0x2e2, 0x3b, 0x5, 0x10, 0x80, 0xfffffff9]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x7, 0x1, 0x0, 0x9, 0x8, {0xf, 0x2, 0x3ff, 0xfffb, 0x4, 0x5}, {0xff, 0x0, 0x6, 0x9, 0x5, 0x1f}, 0x2, 0x100, 0x150}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x6, 0x400, 0x9, 0x9, 0x4, 0x3, 0x2, 0x4, 0xd, 0x7f, 0x0, 0xfffffc01, 0x3, 0xd, 0x1, 0x9, 0x9, 0x2000000, 0x0, 0x6, 0x1, 0x800, 0x4, 0x101, 0x7, 0x3, 0x1ff, 0x10, 0x8, 0x3, 0x1, 0x4, 0x9, 0x8001, 0xaed, 0x80000001, 0x5, 0x2, 0x80000001, 0x6, 0x504, 0x3, 0x71, 0x6, 0x7a59efd8, 0x7, 0x6, 0x4, 0x800, 0x80000001, 0x0, 0x0, 0xd28, 0x6, 0xffff, 0x2, 0x1, 0xc, 0x2, 0xc, 0xab39, 0xeb50, 0x100, 0xffffffff, 0x40, 0x0, 0x1, 0x9, 0x5, 0x6, 0x0, 0x9, 0x1, 0x8001, 0x0, 0xfffffff7, 0xffff0001, 0x4, 0xff, 0x4, 0xc3d9, 0x2, 0x56, 0x70e, 0x5, 0x33, 0x7, 0x4, 0x7, 0x63a, 0x9, 0x4, 0x6, 0x3c, 0x5, 0x8000, 0x9, 0x7, 0x80000001, 0x9, 0x7, 0xd, 0x6, 0x7, 0x2, 0x913, 0x8, 0x4414, 0x0, 0x4, 0x7fffffff, 0x2e35, 0xe, 0xb, 0x800, 0x1, 0x101, 0x400, 0x1, 0x5a84, 0x6, 0x5, 0x1ff, 0x1, 0x9ee3, 0x8fddd182, 0x400, 0x1, 0x9, 0x0, 0x3, 0x7, 0x101, 0x1, 0x5, 0xbaf75a4e, 0x40, 0x7, 0x4, 0x3, 0x54, 0x10, 0x2, 0x9fb, 0x7, 0x2, 0x4, 0x2, 0x9, 0x8, 0xf0, 0x9, 0xffffffff, 0xff, 0xe7f8, 0x13c48ee4, 0x51, 0x4, 0x1, 0x3, 0x4, 0x6, 0x2, 0xff, 0x4, 0x3, 0xfffffffc, 0x7ff, 0x7f, 0x5, 0x3, 0x1, 0xa, 0x10000, 0xd1d, 0x5, 0x8, 0x1, 0xe3, 0x1000, 0x4, 0xc, 0x53, 0xe, 0x80, 0x100, 0x5, 0x8000000, 0x0, 0x0, 0x2, 0x2, 0x7, 0xa7f, 0xfffffff9, 0xffffffff, 0x401, 0xa, 0x10, 0x82, 0x0, 0x4, 0xfff, 0x2, 0x7f, 0x6, 0x3, 0x3, 0x4, 0x9, 0x1, 0x9, 0x0, 0x2, 0x9, 0x1, 0x6, 0x4, 0x5, 0x10, 0x3, 0xbbd3, 0xe639, 0x7, 0x80000001, 0x7, 0x0, 0x5, 0x3, 0x0, 0x3, 0x7, 0x6, 0x9000000, 0xaeaf, 0xb4, 0x0, 0x0, 0x6, 0x0, 0xbcb, 0x7a, 0x8, 0x9, 0x3, 0x6, 0xc382, 0xa, 0xc24, 0x6, 0x41c, 0x9, 0x4f1f, 0x1, 0x0, 0x5]}, @TCA_POLICE_RESULT={0x8, 0x5, 0xde}, @TCA_POLICE_RATE={0x404, 0x2, [0x100, 0x80000001, 0x6, 0x5, 0x3, 0xfffffeff, 0x4, 0x7fffffff, 0x5, 0x4, 0x0, 0x2da, 0xa, 0x80, 0x3, 0x4, 0x9, 0xfffff000, 0x8, 0x8, 0x8, 0x2, 0xd, 0xb, 0xa, 0x1, 0x5, 0x7, 0x9, 0x81, 0x8001, 0x3, 0x7ff, 0x11c4, 0x5, 0x40, 0x4, 0x8, 0x68, 0x6, 0x6, 0x8, 0x10, 0x9, 0x3, 0x8598a340, 0x3, 0xa, 0xffff, 0x4, 0x200, 0xfffffff9, 0x7, 0x3, 0x4, 0x1, 0x8, 0x6, 0x5a5, 0x10001, 0x2, 0x6, 0xfb, 0x6, 0x7, 0x5, 0x2, 0x1, 0x7fff, 0x9, 0x6, 0x113, 0x1, 0x8, 0xfffffffb, 0x8, 0x4, 0x0, 0x8001, 0x9, 0x81, 0xe76, 0x5, 0x80000001, 0x9, 0x7fffffff, 0x101, 0xe7, 0x3, 0x2, 0x3, 0x9, 0x3, 0x6, 0x2, 0x3, 0xc73, 0x1, 0xffff, 0x3, 0x3, 0x1, 0x0, 0x9, 0x9, 0x86, 0x0, 0x4, 0x2, 0x9, 0x9, 0x3, 0x5, 0x7, 0xfffffff8, 0x8000, 0x5, 0xfffffffe, 0x80, 0x0, 0xc6, 0x2, 0x1c5, 0xfffffffe, 0x6, 0x4, 0x4, 0x0, 0x1, 0x4, 0x4, 0xf, 0x0, 0x8, 0x3, 0x2, 0x6, 0x6, 0x4, 0x4, 0xfff, 0x8, 0x6, 0x3, 0x9, 0x6, 0x13ec81bb, 0x3, 0x80000000, 0x100, 0x5, 0xffff, 0x8, 0xfffff800, 0x817, 0x10, 0x5, 0x780, 0x293e887f, 0x4c, 0x4, 0x3, 0x5, 0x5, 0x1c1, 0x9, 0x3, 0xd, 0x0, 0x7, 0xd4f, 0x0, 0x9, 0x7, 0x9, 0xb, 0x200, 0xf, 0x9, 0x735165cb, 0x92, 0x8, 0x9, 0x2, 0x7, 0x1000, 0x2, 0x7, 0x6, 0x0, 0xffffff5f, 0x1e0, 0x0, 0xf08, 0x80000001, 0x9, 0x9, 0x8, 0x7, 0x2, 0xb, 0x6, 0x7fff, 0xfffff6a1, 0xfffffa91, 0xa, 0x4, 0x8, 0x8, 0xffffd8e0, 0xfffffffa, 0x2c, 0x4f, 0x5, 0x3d8, 0x5f, 0x2, 0xe83, 0x9, 0x4, 0x9, 0x7, 0x1, 0x6, 0x5, 0x6, 0x3, 0x0, 0xfff, 0x4, 0x0, 0x1, 0x1, 0xa5d, 0x4, 0x1ff, 0x3, 0x8, 0xfffff0fb, 0x1, 0x5, 0xff, 0x2, 0x49b2, 0x200, 0x40, 0x2, 0xfffff800, 0xfffffff7, 0x200, 0xe, 0xfffffffa, 0x3, 0xfffffff9, 0x9, 0x6]}, @TCA_POLICE_RESULT={0x8, 0x5, 0xffff}]}]}}, @TCA_RATE={0x6, 0x5, {0x5, 0x6}}, @TCA_RATE={0x6, 0x5, {0x5, 0x1}}, @TCA_RATE={0x6, 0x5, {0x2, 0x10}}, @TCA_RATE={0x6, 0x5, {0x5, 0x20}}, @TCA_CHAIN={0x8, 0xb, 0x1}, @filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_FD={0x8, 0x6, r2}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_FLAGS={0x8, 0x8, 0x1}]}}]}, 0x2004}, 0x1, 0x0, 0x0, 0x48800}, 0x4) fgetxattr(r0, &(0x7f0000000140)=@known='trusted.overlay.nlink\x00', &(0x7f0000000180)=""/49, 0x31) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0x1, 0x58, &(0x7f0000000000)={0x0, 0x0}}, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r7 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000380)=@o_path={&(0x7f0000000340)='./file0\x00', 0x0, 0x4008}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r7, 0x0, 0x0, 0x32, &(0x7f0000000500), &(0x7f0000000500)=""/50, 0x80000000, 0x0, 0xa9, 0x0, &(0x7f0000000400)="21d0bcf963eaefaf1ae76144c2cd0f38a6fc5a7865487fdf84fded7036b0229b58a6a6943786f6325373b2fda86f3e69516cc43a21fe3d1a4b39aff2b5814726f6a5d0cf7f6b630e38aaf6653732310e2629bcb6a0e352cbc149616bbd324ddc6dc4634ecce246101dab2d7a332a010f9c36d154530691407e28878c873a5f854c611e392d947898d1d7accd530413f2bcb7c6ba4e0af649edb1607ad385cc869211daada443ee1ced", 0x0, 0x1, 0x0, 0x2}, 0x50) ioctl$PERF_EVENT_IOC_PERIOD(r6, 0x4030582a, &(0x7f0000000040)) openat$cgroup_ro(r6, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000002340)=ANY=[@ANYBLOB="1801000021000000000800003b8100008500000070000000850000005000000095f4c7a000000100b3787880ca3d4ed9bc91012aa203073a19e74adf814dd5bf54a7ef64ccd885c2e6a7eecd06a66101f3fadbda1caff8852eebe9ccabe356ecc7c5f57a1bfe3964abb57f6af11ee6bc6fdefc762ff04293ca32b96e19"], &(0x7f0000001d40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x81, 0x0, 0x80ffff, 0x0, 0x8a00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000540), 0x1}, 0x0, 0x7fffffffffffffff, 0x0, 0x1, 0x0, 0x7ff, 0x3, 0x0, 0x3, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='signal_generate\x00'}, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r8) sendmsg$nl_generic(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[], 0x20}}, 0x0) recvmmsg(r8, &(0x7f0000001c40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000001bc0)=[{&(0x7f0000000940)=""/40, 0x28}, {&(0x7f0000000980)=""/134, 0x86}, {&(0x7f0000000a40)=""/155, 0x9b}, {&(0x7f0000000b00)=""/110, 0x6e}, {&(0x7f0000000b80)=""/4096, 0x1000}, {&(0x7f0000001b80)=""/40, 0x28}], 0x6}}, {{&(0x7f0000000640)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, 0x80, &(0x7f0000000840)=[{&(0x7f00000006c0)=""/49, 0x31}, {&(0x7f0000000700)=""/113, 0x71}, {&(0x7f0000000780)=""/55, 0x37}, {&(0x7f00000007c0)=""/114, 0x72}], 0x4, &(0x7f0000000880)=""/112, 0x70}, 0x10}], 0x4, 0x0, 0x0) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc0000000000000000000000000000007f000001000000000000000000000000000000000000000002"], 0xb8}}, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={r5, 0x9, 0x8}, 0xc) socketpair(0x6, 0x0, 0x4, &(0x7f0000000400)) 0s ago: executing program 4 (id=3635): syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') (async) syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') syz_mount_image$ext4(&(0x7f0000001140)='ext2\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$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") r0 = open(&(0x7f00000000c0)='./file1\x00', 0x24c67c, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r0, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x2c, &(0x7f0000000280)=[@in={0x2, 0x4e22, @rand_addr=0x64010101}, @in6={0xa, 0x4e23, 0xffffffbe, @mcast2, 0x840}]}, &(0x7f0000000fc0)=0x10) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x23, &(0x7f0000000000), 0x4) sendmsg$inet(0xffffffffffffffff, 0x0, 0x40c4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x21002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}, 0x0, 0x800, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x21002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}, 0x0, 0x800, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$ITER_CREATE(0xb, 0x0, 0x0) (async) bpf$ITER_CREATE(0xb, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x3, 0x4, 0x8, 0x2}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r2}, &(0x7f00000002c0), &(0x7f0000000300)=r2}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a40)={r3, 0xfca804a0, 0x0, 0x0, 0x0, 0x0, 0x5ee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9}, 0x50) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x25, &(0x7f0000000740)={0x0, @in={{0x2, 0x4e22, @rand_addr=0x64010101}}}, 0x90) (async) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x25, &(0x7f0000000740)={0x0, @in={{0x2, 0x4e22, @rand_addr=0x64010101}}}, 0x90) fallocate(r0, 0x0, 0x0, 0x1001f0) (async) fallocate(r0, 0x0, 0x0, 0x1001f0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x12}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002f00000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) (async) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002f00000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r4, r5, 0x5}, 0x10) (async) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r4, r5, 0x5}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000440)={@map=r4, 0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r6 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) fallocate(r6, 0x3, 0x1800, 0x10000) kernel console output (not intermixed with test programs): c addresses unique to avoid problems! [ 258.696236][T14725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 258.706958][T14725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.716839][T14725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 258.727344][T14725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.737200][T14725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 258.747688][T14725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.757594][T14725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 258.759706][T14920] loop0: detected capacity change from 0 to 1024 [ 258.768056][T14725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.768080][T14725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 258.768104][T14725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.804899][T14725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 258.815445][T14725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.825317][T14725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 258.835799][T14725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.851046][T14725] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 258.858760][T14920] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 258.876429][T13713] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 258.891072][T14923] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14923 comm=syz.2.3174 [ 258.908836][T14925] FAULT_INJECTION: forcing a failure. [ 258.908836][T14925] name failslab, interval 1, probability 0, space 0, times 0 [ 258.921702][T14925] CPU: 1 PID: 14925 Comm: syz.3.3173 Not tainted 6.10.0-syzkaller-09061-g4305ca0087dd #0 [ 258.931547][T14925] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 258.941664][T14925] Call Trace: [ 258.944948][T14925] [ 258.947949][T14925] dump_stack_lvl+0xf2/0x150 [ 258.952570][T14925] dump_stack+0x15/0x20 [ 258.956730][T14925] should_fail_ex+0x229/0x230 [ 258.961467][T14925] ? nf_ct_tmpl_alloc+0x63/0x120 [ 258.966659][T14925] __should_failslab+0x92/0xa0 [ 258.971440][T14925] should_failslab+0x9/0x20 [ 258.976047][T14925] __kmalloc_cache_noprof+0x4b/0x2a0 [ 258.981349][T14925] nf_ct_tmpl_alloc+0x63/0x120 [ 258.986331][T14925] xt_ct_tg_check+0x170/0x790 [ 258.991020][T14925] xt_ct_tg_check_v2+0x49/0x60 [ 258.995816][T14925] xt_check_target+0x266/0x480 [ 259.000649][T14925] ? try_module_get+0xae/0x1a0 [ 259.005516][T14925] ? xt_find_target+0x1bd/0x1e0 [ 259.010475][T14925] ? xt_find_target+0x19e/0x1e0 [ 259.015376][T14925] translate_table+0xc1e/0xf70 [ 259.020154][T14925] do_ipt_set_ctl+0x7bd/0x8b0 [ 259.024871][T14925] ? tcp_release_cb+0xfe/0x380 [ 259.029706][T14925] nf_setsockopt+0x195/0x1b0 [ 259.034333][T14925] ip_setsockopt+0xea/0x100 [ 259.038857][T14925] tcp_setsockopt+0x93/0xb0 [ 259.043512][T14925] sock_common_setsockopt+0x64/0x80 [ 259.048728][T14925] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 259.054629][T14925] __sys_setsockopt+0x1d8/0x250 [ 259.059549][T14925] __x64_sys_setsockopt+0x66/0x80 [ 259.064594][T14925] x64_sys_call+0x2a0e/0x2e00 [ 259.069308][T14925] do_syscall_64+0xc9/0x1c0 [ 259.073955][T14925] ? clear_bhb_loop+0x55/0xb0 [ 259.078635][T14925] ? clear_bhb_loop+0x55/0xb0 [ 259.083314][T14925] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 259.089270][T14925] RIP: 0033:0x7f9d28ae5b59 [ 259.093683][T14925] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 259.113392][T14925] RSP: 002b:00007f9d27d67048 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 259.121808][T14925] RAX: ffffffffffffffda RBX: 00007f9d28c75f60 RCX: 00007f9d28ae5b59 [ 259.129849][T14925] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000004 [ 259.137839][T14925] RBP: 00007f9d27d670a0 R08: 00000000000002a0 R09: 0000000000000000 [ 259.145814][T14925] R10: 0000000020000040 R11: 0000000000000246 R12: 0000000000000001 [ 259.153931][T14925] R13: 000000000000000b R14: 00007f9d28c75f60 R15: 00007ffc628abe38 [ 259.161938][T14925] [ 259.172585][T14725] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.181578][T14725] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.190308][T14725] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.199167][T14725] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.332648][T14930] loop2: detected capacity change from 0 to 512 [ 259.365171][T14930] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 259.380097][T14930] ext4 filesystem being mounted at /83/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 259.402253][T13701] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 259.482627][T14944] netlink: 44306 bytes leftover after parsing attributes in process `syz.2.3179'. [ 259.531908][T14956] loop2: detected capacity change from 0 to 512 [ 259.541483][T14956] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 259.563820][T14956] EXT4-fs error (device loop2): ext4_ext_check_inode:520: inode #15: comm syz.2.3182: pblk 0 bad header/extent: invalid eh_entries - magic f30a, entries 24833, max 4(4), depth 0(0) [ 259.592369][T14956] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.3182: couldn't read orphan inode 15 (err -117) [ 259.615738][T14956] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 259.628093][T14956] ext2 filesystem being mounted at /85/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 259.641823][T14956] EXT4-fs error (device loop2): ext4_add_entry:2435: inode #2: comm syz.2.3182: Directory hole found for htree leaf block 0 [ 259.646007][T14963] Cannot find add_set index 0 as target [ 259.667785][T14960] loop1: detected capacity change from 0 to 1024 [ 259.677879][T14960] EXT4-fs error (device loop1): ext4_ext_check_inode:520: inode #4: comm syz.1.3183: pblk 98 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 259.710137][T14505] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 259.727939][T14960] EXT4-fs (loop1): Remounting filesystem read-only [ 259.734504][T14960] EXT4-fs warning (device loop1): ext4_enable_quotas:7066: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 259.756402][T14956] EXT4-fs error (device loop2): ext4_add_entry:2435: inode #2: comm syz.2.3182: Directory hole found for htree leaf block 0 [ 259.769625][T14960] EXT4-fs (loop1): mount failed [ 259.793974][T14969] loop0: detected capacity change from 0 to 764 [ 259.809897][T14969] iso9660: Unknown parameter 'ÿÿÿÿÿÿÿÿÿÿÿÿ00000000000000000000000ÿÿÿÿ' [ 259.832237][T13701] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 259.872062][T14972] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14972 comm=syz.2.3185 [ 259.956067][T14979] loop1: detected capacity change from 0 to 2048 [ 259.967062][T14979] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 260.003494][T14725] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 260.057328][T14989] loop1: detected capacity change from 0 to 512 [ 260.067244][T14989] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 260.080063][T14989] ext4 filesystem being mounted at /6/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 260.116658][ T29] audit: type=1400 audit(1721420792.893:12846): avc: denied { getopt } for pid=14987 comm="syz.2.3192" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 260.140315][T14725] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 260.174664][T14994] ip6gretap0 speed is unknown, defaulting to 1000 [ 260.320954][T15001] loop3: detected capacity change from 0 to 1024 [ 260.332018][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 260.353323][T15001] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 260.391887][T15001] 9p: Unknown Cache mode or invalid value fs¹ [ 260.421854][T13713] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 260.672318][T15008] loop3: detected capacity change from 0 to 512 [ 260.800867][T15008] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 260.809177][T15008] EXT4-fs (loop3): 1 truncate cleaned up [ 260.815425][T15008] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 260.843281][T15008] hub 9-0:1.0: USB hub found [ 260.848394][T15008] hub 9-0:1.0: 8 ports detected [ 260.862499][T15008] EXT4-fs error (device loop3): ext4_add_entry:2435: inode #2: comm syz.3.3197: Directory hole found for htree leaf block 0 [ 260.880062][T15008] EXT4-fs error (device loop3): ext4_add_entry:2435: inode #2: comm syz.3.3197: Directory hole found for htree leaf block 0 [ 260.981524][T15013] loop0: detected capacity change from 0 to 2048 [ 261.018755][T15013] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 261.121475][T14505] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 261.196707][T15021] loop1: detected capacity change from 0 to 512 [ 261.199335][T15025] loop2: detected capacity change from 0 to 128 [ 261.223407][T15025] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 261.236934][T15025] ext4 filesystem being mounted at /92/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 261.237961][T15021] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 261.263061][T15021] ext4 filesystem being mounted at /10/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 261.292492][T13701] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 261.322353][T14725] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 261.354574][T13713] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 261.383437][T15037] loop1: detected capacity change from 0 to 1024 [ 261.400363][T15035] loop2: detected capacity change from 0 to 512 [ 261.402835][T15041] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15041 comm=syz.0.3209 [ 261.422998][T15035] EXT4-fs error (device loop2): ext4_orphan_get:1391: inode #15: comm syz.2.3206: iget: bad extended attribute block 1 [ 261.436360][T15035] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.3206: couldn't read orphan inode 15 (err -117) [ 261.452977][T15037] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 261.481147][T15035] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 261.501029][T15037] 9p: Unknown Cache mode or invalid value fs¹ [ 261.540657][T15056] loop3: detected capacity change from 0 to 512 [ 261.548638][T14725] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 261.562050][T15056] EXT4-fs: journaled quota format not specified [ 261.600263][T15056] loop3: detected capacity change from 0 to 4096 [ 261.611417][T15056] ext4: Unknown parameter 'noacl' [ 261.616680][T13034] nci: nci_ntf_packet: unknown ntf opcode 0x903 [ 261.650278][T15068] loop3: detected capacity change from 0 to 128 [ 261.657356][T15068] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (39871!=39978) [ 261.667979][T15068] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: none. [ 261.683264][T15068] EXT4-fs warning (device loop3): ext4_dirblock_csum_verify:406: inode #2: comm syz.3.3213: No space for directory leaf checksum. Please run e2fsck -D. [ 261.698651][T15068] EXT4-fs error (device loop3): __ext4_find_entry:1652: inode #2: comm syz.3.3213: checksumming directory block 0 [ 261.714893][T15068] EXT4-fs warning (device loop3): ext4_dirblock_csum_verify:406: inode #2: comm syz.3.3213: No space for directory leaf checksum. Please run e2fsck -D. [ 261.730267][T15068] EXT4-fs error (device loop3): __ext4_find_entry:1652: inode #2: comm syz.3.3213: checksumming directory block 0 [ 261.746377][T15068] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3213'. [ 261.809873][T15073] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3213'. [ 261.824004][T15073] xt_hashlimit: invalid rate [ 262.217051][T13713] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 262.240154][T13701] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 262.266732][T15079] FAULT_INJECTION: forcing a failure. [ 262.266732][T15079] name failslab, interval 1, probability 0, space 0, times 0 [ 262.279574][T15079] CPU: 1 PID: 15079 Comm: syz.3.3216 Not tainted 6.10.0-syzkaller-09061-g4305ca0087dd #0 [ 262.289461][T15079] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 262.299600][T15079] Call Trace: [ 262.302911][T15079] [ 262.305845][T15079] dump_stack_lvl+0xf2/0x150 [ 262.310533][T15079] dump_stack+0x15/0x20 [ 262.314698][T15079] should_fail_ex+0x229/0x230 [ 262.319457][T15079] ? mas_alloc_nodes+0x1d3/0x4a0 [ 262.324477][T15079] __should_failslab+0x92/0xa0 [ 262.329282][T15079] should_failslab+0x9/0x20 [ 262.333811][T15079] kmem_cache_alloc_noprof+0x4c/0x290 [ 262.339216][T15079] mas_alloc_nodes+0x1d3/0x4a0 [ 262.344031][T15079] mas_preallocate+0x773/0xc30 [ 262.348847][T15079] mmap_region+0xf05/0x1620 [ 262.353431][T15079] ? security_mmap_addr+0x4c/0x70 [ 262.358491][T15079] ? __get_unmapped_area+0x2d1/0x300 [ 262.363846][T15079] do_mmap+0x6f9/0xb10 [ 262.367922][T15079] ? security_mmap_file+0x128/0x150 [ 262.373206][T15079] vm_mmap_pgoff+0x133/0x290 [ 262.377875][T15079] ksys_mmap_pgoff+0xd0/0x340 [ 262.382624][T15079] ? fpregs_assert_state_consistent+0x83/0xa0 [ 262.388809][T15079] x64_sys_call+0x1940/0x2e00 [ 262.393584][T15079] do_syscall_64+0xc9/0x1c0 [ 262.398094][T15079] ? clear_bhb_loop+0x55/0xb0 [ 262.402775][T15079] ? clear_bhb_loop+0x55/0xb0 [ 262.407532][T15079] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 262.413449][T15079] RIP: 0033:0x7f9d28ae5b93 [ 262.417949][T15079] Code: f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 41 89 ca 41 f7 c1 ff 0f 00 00 75 14 b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 25 c3 0f 1f 40 00 48 c7 c0 a8 ff ff ff 64 c7 [ 262.437666][T15079] RSP: 002b:00007f9d27d66e28 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 262.446090][T15079] RAX: ffffffffffffffda RBX: 000000000000045b RCX: 00007f9d28ae5b93 [ 262.454067][T15079] RDX: 0000000000000003 RSI: 0000000008400000 RDI: 0000000000000000 [ 262.462044][T15079] RBP: 0000000020001902 R08: 00000000ffffffff R09: 0000000000000000 [ 262.470018][T15079] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000000000005 [ 262.478081][T15079] R13: 00007f9d27d66f00 R14: 00007f9d27d66ec0 R15: 00000000200003c0 [ 262.486102][T15079] [ 262.503581][T15083] loop1: detected capacity change from 0 to 512 [ 262.518880][T15083] EXT4-fs error (device loop1): ext4_orphan_get:1391: inode #15: comm syz.1.3219: iget: bad extended attribute block 1 [ 262.540933][T15089] loop2: detected capacity change from 0 to 128 [ 262.551678][T15083] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.3219: couldn't read orphan inode 15 (err -117) [ 262.565211][T15089] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 262.583628][T15083] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 262.600134][T15089] ext4 filesystem being mounted at /94/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 262.680364][T13701] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 262.705601][T13030] nci: nci_ntf_packet: unknown ntf opcode 0x903 [ 262.725942][ T29] audit: type=1400 audit(1721420795.493:12847): avc: denied { write } for pid=15103 comm="syz.2.3224" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 262.728267][T15102] loop3: detected capacity change from 0 to 1024 [ 262.752947][T15104] FAULT_INJECTION: forcing a failure. [ 262.752947][T15104] name failslab, interval 1, probability 0, space 0, times 0 [ 262.765654][T15104] CPU: 0 PID: 15104 Comm: syz.2.3224 Not tainted 6.10.0-syzkaller-09061-g4305ca0087dd #0 [ 262.775529][T15104] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 262.785648][T15104] Call Trace: [ 262.788942][T15104] [ 262.791921][T15104] dump_stack_lvl+0xf2/0x150 [ 262.796557][T15104] dump_stack+0x15/0x20 [ 262.800740][T15104] should_fail_ex+0x229/0x230 [ 262.805447][T15104] ? __pfx_rxrpc_io_thread+0x10/0x10 [ 262.810761][T15104] ? __kthread_create_on_node+0x78/0x230 [ 262.816423][T15104] __should_failslab+0x92/0xa0 [ 262.821222][T15104] should_failslab+0x9/0x20 [ 262.825806][T15104] __kmalloc_cache_noprof+0x4b/0x2a0 [ 262.831110][T15104] __kthread_create_on_node+0x78/0x230 [ 262.836735][T15104] ? __pfx_rxrpc_io_thread+0x10/0x10 [ 262.842048][T15104] kthread_create_on_node+0x8a/0xc0 [ 262.847268][T15104] ? __rcu_read_unlock+0x4e/0x70 [ 262.852221][T15104] ? __pfx_ip6_datagram_release_cb+0x10/0x10 [ 262.858231][T15104] ? _raw_spin_unlock_bh+0x36/0x40 [ 262.863392][T15104] ? release_sock+0x117/0x150 [ 262.868154][T15104] rxrpc_lookup_local+0x977/0xca0 [ 262.873238][T15104] ? __pfx_rxrpc_encap_rcv+0x10/0x10 [ 262.878584][T15104] ? __pfx_rxrpc_encap_err_rcv+0x10/0x10 [ 262.884283][T15104] rxrpc_sendmsg+0x344/0x520 [ 262.888900][T15104] ? __pfx_rxrpc_sendmsg+0x10/0x10 [ 262.894140][T15104] __sock_sendmsg+0x140/0x180 [ 262.898834][T15104] ____sys_sendmsg+0x312/0x410 [ 262.903640][T15104] __sys_sendmsg+0x1e9/0x280 [ 262.908275][T15104] __x64_sys_sendmsg+0x46/0x50 [ 262.913096][T15104] x64_sys_call+0x26f8/0x2e00 [ 262.917827][T15104] do_syscall_64+0xc9/0x1c0 [ 262.922338][T15104] ? clear_bhb_loop+0x55/0xb0 [ 262.927026][T15104] ? clear_bhb_loop+0x55/0xb0 [ 262.931706][T15104] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 262.937658][T15104] RIP: 0033:0x7fb83fa85b59 [ 262.942089][T15104] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 262.961768][T15104] RSP: 002b:00007fb83ed07048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 262.970256][T15104] RAX: ffffffffffffffda RBX: 00007fb83fc15f60 RCX: 00007fb83fa85b59 [ 262.978246][T15104] RDX: 0000000000000000 RSI: 0000000020000180 RDI: 0000000000000005 [ 262.986250][T15104] RBP: 00007fb83ed070a0 R08: 0000000000000000 R09: 0000000000000000 [ 262.994294][T15104] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 263.002316][T15104] R13: 000000000000000b R14: 00007fb83fc15f60 R15: 00007ffd2405ff08 [ 263.010303][T15104] [ 263.017375][T15102] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 263.183937][T15111] ip6gretap0 speed is unknown, defaulting to 1000 [ 263.211061][T14725] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 263.213179][T15113] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 263.238983][T15112] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 263.251036][T15113] loop2: detected capacity change from 0 to 1024 [ 263.283997][T15113] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 263.287360][T15115] FAULT_INJECTION: forcing a failure. [ 263.287360][T15115] name failslab, interval 1, probability 0, space 0, times 0 [ 263.309103][T15115] CPU: 1 PID: 15115 Comm: syz.1.3227 Not tainted 6.10.0-syzkaller-09061-g4305ca0087dd #0 [ 263.316018][T15113] EXT4-fs error (device loop2): ext4_xattr_ibody_list:797: inode #2: comm syz.2.3226: corrupted in-inode xattr: bad e_name length [ 263.318907][T15115] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 263.318926][T15115] Call Trace: [ 263.345813][T15115] [ 263.348761][T15115] dump_stack_lvl+0xf2/0x150 [ 263.353545][T15115] dump_stack+0x15/0x20 [ 263.357809][T15115] should_fail_ex+0x229/0x230 [ 263.362529][T15115] ? skb_clone+0x154/0x1f0 [ 263.367004][T15115] __should_failslab+0x92/0xa0 [ 263.371821][T15115] should_failslab+0x9/0x20 [ 263.376406][T15115] kmem_cache_alloc_noprof+0x4c/0x290 [ 263.381821][T15115] skb_clone+0x154/0x1f0 [ 263.386094][T15115] dev_queue_xmit_nit+0x149/0x620 [ 263.391198][T15115] dev_hard_start_xmit+0xcc/0x3f0 [ 263.396254][T15115] ? validate_xmit_skb+0x658/0x8d0 [ 263.401446][T15115] __dev_queue_xmit+0xfd4/0x1fe0 [ 263.406480][T15115] ? __dev_queue_xmit+0x161/0x1fe0 [ 263.411626][T15115] ? should_fail_ex+0xd7/0x230 [ 263.416545][T15115] ? __skb_clone+0x2d0/0x2f0 [ 263.421173][T15115] __netlink_deliver_tap+0x39f/0x4c0 [ 263.426636][T15115] netlink_unicast+0x641/0x670 [ 263.431439][T15115] netlink_sendmsg+0x5cc/0x6e0 [ 263.436282][T15115] ? __pfx_netlink_sendmsg+0x10/0x10 [ 263.441675][T15115] __sock_sendmsg+0x140/0x180 [ 263.446402][T15115] ____sys_sendmsg+0x312/0x410 [ 263.451206][T15115] __sys_sendmsg+0x1e9/0x280 [ 263.455845][T15115] __x64_sys_sendmsg+0x46/0x50 [ 263.460649][T15115] x64_sys_call+0x26f8/0x2e00 [ 263.465363][T15115] do_syscall_64+0xc9/0x1c0 [ 263.469959][T15115] ? clear_bhb_loop+0x55/0xb0 [ 263.474715][T15115] ? clear_bhb_loop+0x55/0xb0 [ 263.479475][T15115] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.485517][T15115] RIP: 0033:0x7f7a21645b59 [ 263.490003][T15115] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 263.509681][T15115] RSP: 002b:00007f7a208c7048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 263.518112][T15115] RAX: ffffffffffffffda RBX: 00007f7a217d5f60 RCX: 00007f7a21645b59 [ 263.526111][T15115] RDX: 0000000000000000 RSI: 0000000020000540 RDI: 0000000000000003 [ 263.534097][T15115] RBP: 00007f7a208c70a0 R08: 0000000000000000 R09: 0000000000000000 [ 263.542098][T15115] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 263.550125][T15115] R13: 000000000000000b R14: 00007f7a217d5f60 R15: 00007fff89b17f08 [ 263.558190][T15115] [ 263.574404][T15118] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15118 comm=syz.0.3228 [ 263.594603][T13701] EXT4-fs error (device loop2): ext4_expand_extra_isize_ea:2792: inode #2: comm syz-executor: corrupted in-inode xattr: bad e_name length [ 263.646633][T13713] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 263.648417][T13701] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2240: inode #15: comm syz-executor: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 263.754334][T13701] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2240: inode #15: comm syz-executor: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 263.801716][T15125] loop3: detected capacity change from 0 to 512 [ 263.810161][T15125] EXT4-fs: Ignoring removed oldalloc option [ 264.067303][T15125] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 264.091686][T15125] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.3231: invalid indirect mapped block 2683928664 (level 1) [ 264.122210][T15125] EXT4-fs (loop3): 1 truncate cleaned up [ 264.125808][T15130] loop1: detected capacity change from 0 to 1024 [ 264.128430][T15125] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 264.159206][T15125] Process accounting resumed [ 264.164183][T15125] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.3231: Invalid block bitmap block 3 in block_group 0 [ 264.179335][T15130] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 264.195075][T15125] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.3231: Invalid block bitmap block 3 in block_group 0 [ 264.235343][T15130] 9p: Unknown Cache mode or invalid value fs¹ [ 264.235478][T15125] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.3231: Invalid block bitmap block 3 in block_group 0 [ 264.259981][T13701] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 264.279517][T15125] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.3231: invalid indirect mapped block 2683928664 (level 1) [ 264.305954][T13030] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.312937][T14725] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 264.363586][T15136] loop3: detected capacity change from 0 to 1024 [ 264.392750][T13030] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.400458][T15136] EXT4-fs: Ignoring removed nomblk_io_submit option [ 264.413754][T15136] EXT4-fs (loop3): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 264.451607][T15146] loop0: detected capacity change from 0 to 512 [ 264.459972][T15146] EXT4-fs error (device loop0): ext4_orphan_get:1391: inode #15: comm syz.0.3237: iget: bad extended attribute block 1 [ 264.476111][T15136] loop3: detected capacity change from 1024 to 0 [ 264.478102][T15146] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.3237: couldn't read orphan inode 15 (err -117) [ 264.499778][T13030] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.542628][T15139] ip6gretap0 speed is unknown, defaulting to 1000 [ 264.552918][T13030] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.569778][T13027] nci: nci_ntf_packet: unknown ntf opcode 0x903 [ 264.591882][T15137] ip6gretap0 speed is unknown, defaulting to 1000 [ 264.596163][T15170] netlink: 'syz.3.3236': attribute type 21 has an invalid length. [ 264.606259][T15170] netlink: 128 bytes leftover after parsing attributes in process `syz.3.3236'. [ 264.619561][T15170] netlink: 3 bytes leftover after parsing attributes in process `syz.3.3236'. [ 264.691463][T13030] bridge_slave_1: left allmulticast mode [ 264.697187][T13030] bridge_slave_1: left promiscuous mode [ 264.702912][T13030] bridge0: port 2(bridge_slave_1) entered disabled state [ 264.710912][T13030] bridge_slave_0: left allmulticast mode [ 264.716640][T13030] bridge_slave_0: left promiscuous mode [ 264.722385][T13030] bridge0: port 1(bridge_slave_0) entered disabled state [ 264.809503][T13030] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 264.820017][T13030] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 264.830961][T13030] bond0 (unregistering): Released all slaves [ 264.878300][T15139] chnl_net:caif_netlink_parms(): no params data found [ 264.892120][T15137] chnl_net:caif_netlink_parms(): no params data found [ 264.945043][T13030] hsr_slave_0: left promiscuous mode [ 264.950890][T13030] hsr_slave_1: left promiscuous mode [ 264.956832][T13030] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 264.964377][T13030] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 264.972879][T13030] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 264.980348][T13030] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 264.990897][T13030] veth1_macvtap: left promiscuous mode [ 264.996389][T13030] veth0_macvtap: left promiscuous mode [ 265.001906][T13030] veth1_vlan: left promiscuous mode [ 265.007234][T13030] veth0_vlan: left promiscuous mode [ 265.093852][T13030] team0 (unregistering): Port device team_slave_1 removed [ 265.105117][T13030] team0 (unregistering): Port device team_slave_0 removed [ 265.161106][T15139] bridge0: port 1(bridge_slave_0) entered blocking state [ 265.168375][T15139] bridge0: port 1(bridge_slave_0) entered disabled state [ 265.180685][T15139] bridge_slave_0: entered allmulticast mode [ 265.187809][T15139] bridge_slave_0: entered promiscuous mode [ 265.200188][T15139] bridge0: port 2(bridge_slave_1) entered blocking state [ 265.207375][T15139] bridge0: port 2(bridge_slave_1) entered disabled state [ 265.214657][T15139] bridge_slave_1: entered allmulticast mode [ 265.222260][T15139] bridge_slave_1: entered promiscuous mode [ 265.228569][T15137] bridge0: port 1(bridge_slave_0) entered blocking state [ 265.235813][T15137] bridge0: port 1(bridge_slave_0) entered disabled state [ 265.243611][T15137] bridge_slave_0: entered allmulticast mode [ 265.250483][T15137] bridge_slave_0: entered promiscuous mode [ 265.265446][T15137] bridge0: port 2(bridge_slave_1) entered blocking state [ 265.272948][T15137] bridge0: port 2(bridge_slave_1) entered disabled state [ 265.275169][T13713] syz-executor: attempt to access beyond end of device [ 265.275169][T13713] loop3: rw=12288, sector=32, nr_sectors = 2 limit=0 [ 265.288845][T15137] bridge_slave_1: entered allmulticast mode [ 265.310709][T13713] syz-executor: attempt to access beyond end of device [ 265.310709][T13713] loop3: rw=524288, sector=12, nr_sectors = 2 limit=0 [ 265.311464][T15137] bridge_slave_1: entered promiscuous mode [ 265.325590][T13713] syz-executor: attempt to access beyond end of device [ 265.325590][T13713] loop3: rw=524288, sector=14, nr_sectors = 2 limit=0 [ 265.344234][T13713] syz-executor: attempt to access beyond end of device [ 265.344234][T13713] loop3: rw=524288, sector=16, nr_sectors = 2 limit=0 [ 265.358967][T13713] syz-executor: attempt to access beyond end of device [ 265.358967][T13713] loop3: rw=524288, sector=18, nr_sectors = 2 limit=0 [ 265.372681][T13713] syz-executor: attempt to access beyond end of device [ 265.372681][T13713] loop3: rw=524288, sector=20, nr_sectors = 2 limit=0 [ 265.386575][T13713] syz-executor: attempt to access beyond end of device [ 265.386575][T13713] loop3: rw=524288, sector=22, nr_sectors = 2 limit=0 [ 265.389413][T15139] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 265.400341][T13713] syz-executor: attempt to access beyond end of device [ 265.400341][T13713] loop3: rw=524288, sector=24, nr_sectors = 2 limit=0 [ 265.423255][T13713] syz-executor: attempt to access beyond end of device [ 265.423255][T13713] loop3: rw=524288, sector=26, nr_sectors = 2 limit=0 [ 265.432146][T15189] loop0: detected capacity change from 0 to 1024 [ 265.442190][T13713] syz-executor: attempt to access beyond end of device [ 265.442190][T13713] loop3: rw=12288, sector=10, nr_sectors = 2 limit=0 [ 265.456917][T13713] EXT4-fs error (device loop3): ext4_get_inode_loc:4574: inode #2: block 5: comm syz-executor: unable to read itable block [ 265.469986][T13713] Buffer I/O error on dev loop3, logical block 1, lost sync page write [ 265.481421][T15137] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 265.492392][T15139] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 265.505076][T15137] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 265.513899][T13713] EXT4-fs (loop3): I/O error while writing superblock [ 265.521002][T13713] EXT4-fs (loop3): Remounting filesystem read-only [ 265.532248][T15147] Buffer I/O error on dev loop3, logical block 64, lost sync page write [ 265.559006][T15139] team0: Port device team_slave_0 added [ 265.569132][T15139] team0: Port device team_slave_1 added [ 265.585942][T15137] team0: Port device team_slave_0 added [ 265.592813][T15137] team0: Port device team_slave_1 added [ 265.604616][T15139] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 265.611657][T15139] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 265.637688][T15139] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 265.655313][T15139] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 265.662433][T15139] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 265.688438][T15139] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 265.709184][T15191] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 265.725924][T15137] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 265.732905][T15137] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 265.758976][T15137] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 265.770756][T15137] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 265.777824][T15137] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 265.803980][T15137] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 265.822770][T15139] hsr_slave_0: entered promiscuous mode [ 265.829071][T15139] hsr_slave_1: entered promiscuous mode [ 265.835120][T15139] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 265.842693][T15139] Cannot create hsr debugfs directory [ 265.904163][T15137] hsr_slave_0: entered promiscuous mode [ 265.910845][T15137] hsr_slave_1: entered promiscuous mode [ 265.919877][T15137] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 265.927603][T15137] Cannot create hsr debugfs directory [ 266.026652][T13030] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.054165][T15196] ip6gretap0 speed is unknown, defaulting to 1000 [ 266.081067][T13030] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.134499][T15210] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15210 comm=syz.1.3245 [ 266.153718][T15196] chnl_net:caif_netlink_parms(): no params data found [ 266.168555][T13030] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.211716][T15196] bridge0: port 1(bridge_slave_0) entered blocking state [ 266.218923][T15196] bridge0: port 1(bridge_slave_0) entered disabled state [ 266.227856][T15196] bridge_slave_0: entered allmulticast mode [ 266.234465][T15196] bridge_slave_0: entered promiscuous mode [ 266.245385][T13030] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.254104][T15218] loop0: detected capacity change from 0 to 512 [ 266.262196][T15196] bridge0: port 2(bridge_slave_1) entered blocking state [ 266.262229][T15218] EXT4-fs: Ignoring removed i_version option [ 266.269332][T15196] bridge0: port 2(bridge_slave_1) entered disabled state [ 266.282783][T15196] bridge_slave_1: entered allmulticast mode [ 266.289783][T15196] bridge_slave_1: entered promiscuous mode [ 266.308437][T15218] EXT4-fs error (device loop0): ext4_ext_check_inode:520: inode #4: comm syz.0.3246: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 266.329659][T15218] EXT4-fs error (device loop0): ext4_quota_enable:7025: comm syz.0.3246: Bad quota inode: 4, type: 1 [ 266.334097][T15196] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 266.341626][T15218] EXT4-fs warning (device loop0): ext4_enable_quotas:7066: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 266.364602][T15218] EXT4-fs (loop0): mount failed [ 266.373347][T13030] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.386534][T15196] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 266.411772][T15196] team0: Port device team_slave_0 added [ 266.422192][T13030] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.437458][T15196] team0: Port device team_slave_1 added [ 266.448192][T15227] 9p: Unknown Cache mode or invalid value fs¹ [ 266.463798][T13030] bond0: (slave netdevsim1): Releasing backup interface [ 266.472961][T13030] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.488801][T15196] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 266.495813][T15196] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 266.510584][T15231] loop0: detected capacity change from 0 to 512 [ 266.522002][T15196] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 266.528627][T15231] EXT4-fs: Ignoring removed oldalloc option [ 266.544893][T15196] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 266.546965][T15231] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 266.552729][T15196] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 266.569009][T15231] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.3250: invalid indirect mapped block 2683928664 (level 1) [ 266.586272][T15196] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 266.611461][T15231] EXT4-fs (loop0): 1 truncate cleaned up [ 266.620726][T15196] hsr_slave_0: entered promiscuous mode [ 266.627300][T15196] hsr_slave_1: entered promiscuous mode [ 266.633373][T15196] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 266.641215][T15196] Cannot create hsr debugfs directory [ 266.649436][T15231] Process accounting resumed [ 266.649888][T13030] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.654385][T15231] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.3250: Invalid block bitmap block 3 in block_group 0 [ 266.678931][T15231] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.3250: Invalid block bitmap block 3 in block_group 0 [ 266.692981][T15231] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.3250: Invalid block bitmap block 3 in block_group 0 [ 266.707545][T14787] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm ext4lazyinit: Invalid block bitmap block 3 in block_group 0 [ 266.707625][T15231] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.3250: invalid indirect mapped block 2683928664 (level 1) [ 266.789677][T13030] bridge_slave_1: left allmulticast mode [ 266.795349][T13030] bridge_slave_1: left promiscuous mode [ 266.801118][T13030] bridge0: port 2(bridge_slave_1) entered disabled state [ 266.809179][T13030] bridge_slave_0: left allmulticast mode [ 266.814871][T13030] bridge_slave_0: left promiscuous mode [ 266.820594][T13030] bridge0: port 1(bridge_slave_0) entered disabled state [ 266.831559][T13030] bridge_slave_1: left allmulticast mode [ 266.837274][T13030] bridge_slave_1: left promiscuous mode [ 266.842915][T13030] bridge0: port 2(bridge_slave_1) entered disabled state [ 266.851292][T13030] bridge_slave_0: left allmulticast mode [ 266.857097][T13030] bridge_slave_0: left promiscuous mode [ 266.862752][T13030] bridge0: port 1(bridge_slave_0) entered disabled state [ 266.975692][T13030] dvmrp0 (unregistering): left allmulticast mode [ 267.001530][T15240] loop1: detected capacity change from 0 to 1024 [ 267.078405][T13030] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 267.089275][T13030] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 267.100317][T13030] bond0 (unregistering): Released all slaves [ 267.110868][T13030] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 267.122206][T13030] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 267.137085][T13030] bond0 (unregistering): Released all slaves [ 267.151342][T15243] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 267.301997][T13030] hsr_slave_0: left promiscuous mode [ 267.308006][T13030] hsr_slave_1: left promiscuous mode [ 267.313958][T13030] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 267.321559][T13030] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 267.329228][T13030] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 267.336699][T13030] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 267.347490][T13030] hsr_slave_0: left promiscuous mode [ 267.353347][T13030] hsr_slave_1: left promiscuous mode [ 267.359242][T13030] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 267.366819][T13030] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 267.374654][T13030] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 267.382181][T13030] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 267.395149][T13030] veth1_macvtap: left promiscuous mode [ 267.400698][T13030] veth0_macvtap: left promiscuous mode [ 267.406351][T13030] veth1_vlan: left promiscuous mode [ 267.411609][T13030] veth0_vlan: left promiscuous mode [ 267.417770][T13030] veth1_macvtap: left allmulticast mode [ 267.423408][T13030] veth1_macvtap: left promiscuous mode [ 267.428961][T13030] veth0_macvtap: left promiscuous mode [ 267.434572][T13030] veth1_vlan: left promiscuous mode [ 267.439817][T13030] veth0_vlan: left promiscuous mode [ 267.578269][T13030] team0 (unregistering): Port device team_slave_1 removed [ 267.588891][T13030] team0 (unregistering): Port device team_slave_0 removed [ 267.697018][T13030] team0 (unregistering): Port device team_slave_1 removed [ 267.708650][T13030] team0 (unregistering): Port device team_slave_0 removed [ 267.778962][T15139] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 267.790937][T15139] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 267.799691][T15139] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 267.809228][T15139] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 267.854083][T15139] 8021q: adding VLAN 0 to HW filter on device bond0 [ 267.868791][T15139] 8021q: adding VLAN 0 to HW filter on device team0 [ 267.879142][ T3160] bridge0: port 1(bridge_slave_0) entered blocking state [ 267.886377][ T3160] bridge0: port 1(bridge_slave_0) entered forwarding state [ 267.913858][T15255] ip6gretap0 speed is unknown, defaulting to 1000 [ 267.923382][T15258] loop1: detected capacity change from 0 to 128 [ 267.928350][ T3160] bridge0: port 2(bridge_slave_1) entered blocking state [ 267.935342][T15258] ext4 filesystem being mounted at /26/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 267.936729][ T3160] bridge0: port 2(bridge_slave_1) entered forwarding state [ 268.011665][T15262] loop1: detected capacity change from 0 to 512 [ 268.027591][T15262] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 268.048862][T15262] EXT4-fs (loop1): invalid journal inode [ 268.058984][ T29] audit: type=1400 audit(1721420800.833:12848): avc: denied { mount } for pid=15261 comm="syz.1.3259" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 268.114705][T15262] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3259'. [ 268.133771][T15139] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 268.205360][T15196] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 268.215945][ T29] audit: type=1400 audit(1721420800.993:12849): avc: denied { unmount } for pid=14725 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 268.248636][T15196] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 268.266019][T15196] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 268.277585][T15196] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 268.296758][T15139] veth0_vlan: entered promiscuous mode [ 268.317821][T15137] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 268.340757][T15139] veth1_vlan: entered promiscuous mode [ 268.359168][T15137] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 268.387630][T15137] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 268.402827][T15139] veth0_macvtap: entered promiscuous mode [ 268.413261][T15196] 8021q: adding VLAN 0 to HW filter on device bond0 [ 268.420952][T15137] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 268.437682][T15139] veth1_macvtap: entered promiscuous mode [ 268.489798][T15196] 8021q: adding VLAN 0 to HW filter on device team0 [ 268.506579][T15139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 268.517173][T15139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.527077][T15139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 268.537611][T15139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.547506][T15139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 268.558035][T15139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.567909][T15139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 268.578401][T15139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.588221][T15139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 268.598644][T15139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.608632][T15139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 268.619415][T15139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.629355][T15139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 268.639778][T15139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.649607][T15139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 268.660110][T15139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.670005][T15139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 268.680440][T15139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.690308][T15139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 268.700827][T15139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.710682][T15139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 268.721099][T15139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.730958][T15139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 268.741422][T15139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.752704][T15139] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 268.779157][ T4770] bridge0: port 1(bridge_slave_0) entered blocking state [ 268.786299][ T4770] bridge0: port 1(bridge_slave_0) entered forwarding state [ 268.807914][T15284] loop1: detected capacity change from 0 to 1024 [ 268.811796][T15139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 268.824797][T15139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.834705][T15139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 268.845163][T15139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.854993][T15139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 268.865553][T15139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.875395][T15139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 268.885890][T15139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.895805][T15139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 268.906302][T15139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.916209][T15139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 268.926686][T15139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.936580][T15139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 268.947009][T15139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.956844][T15139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 268.967315][T15139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.977214][T15139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 268.987653][T15139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.997533][T15139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 269.007961][T15139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.017801][T15139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 269.028238][T15139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.038101][T15139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 269.048545][T15139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.058418][T15139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 269.068868][T15139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.080954][T15139] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 269.098165][ T4770] bridge0: port 2(bridge_slave_1) entered blocking state [ 269.105243][ T4770] bridge0: port 2(bridge_slave_1) entered forwarding state [ 269.143973][T15290] loop0: detected capacity change from 0 to 512 [ 269.161736][T15196] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 269.172166][T15196] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 269.186285][T15139] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.195051][T15139] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.203887][T15139] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.211192][T15295] loop0: detected capacity change from 0 to 1764 [ 269.212788][T15139] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.222869][T15295] iso9660: Unknown parameter 'ÿÿ18446744073709551615' [ 269.315567][T15137] 8021q: adding VLAN 0 to HW filter on device bond0 [ 269.323614][T15303] FAULT_INJECTION: forcing a failure. [ 269.323614][T15303] name failslab, interval 1, probability 0, space 0, times 0 [ 269.336369][T15303] CPU: 0 PID: 15303 Comm: syz.0.3267 Not tainted 6.10.0-syzkaller-09061-g4305ca0087dd #0 [ 269.346190][T15303] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 269.356288][T15303] Call Trace: [ 269.359609][T15303] [ 269.362380][T15137] 8021q: adding VLAN 0 to HW filter on device team0 [ 269.362542][T15303] dump_stack_lvl+0xf2/0x150 [ 269.373783][T15303] dump_stack+0x15/0x20 [ 269.377969][T15303] should_fail_ex+0x229/0x230 [ 269.380118][ T3170] bridge0: port 1(bridge_slave_0) entered blocking state [ 269.382794][T15303] ? skb_clone+0x154/0x1f0 [ 269.389888][ T3170] bridge0: port 1(bridge_slave_0) entered forwarding state [ 269.394202][T15303] __should_failslab+0x92/0xa0 [ 269.406197][T15303] should_failslab+0x9/0x20 [ 269.410770][T15303] kmem_cache_alloc_noprof+0x4c/0x290 [ 269.416201][T15303] skb_clone+0x154/0x1f0 [ 269.420510][T15303] __netlink_deliver_tap+0x2bd/0x4c0 [ 269.421746][ T3170] bridge0: port 2(bridge_slave_1) entered blocking state [ 269.425817][T15303] netlink_unicast+0x641/0x670 [ 269.425854][T15303] netlink_sendmsg+0x5cc/0x6e0 [ 269.432883][ T3170] bridge0: port 2(bridge_slave_1) entered forwarding state [ 269.437607][T15303] ? __pfx_netlink_sendmsg+0x10/0x10 [ 269.437637][T15303] __sock_sendmsg+0x140/0x180 [ 269.459640][T15303] ____sys_sendmsg+0x312/0x410 [ 269.464449][T15303] __sys_sendmsg+0x1e9/0x280 [ 269.469125][T15303] __x64_sys_sendmsg+0x46/0x50 [ 269.473933][T15303] x64_sys_call+0x26f8/0x2e00 [ 269.478736][T15303] do_syscall_64+0xc9/0x1c0 [ 269.483260][T15303] ? clear_bhb_loop+0x55/0xb0 [ 269.487970][T15303] ? clear_bhb_loop+0x55/0xb0 [ 269.492768][T15303] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 269.498709][T15303] RIP: 0033:0x7f8d897a5b59 [ 269.503199][T15303] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 269.522854][T15303] RSP: 002b:00007f8d88a27048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 269.531406][T15303] RAX: ffffffffffffffda RBX: 00007f8d89935f60 RCX: 00007f8d897a5b59 [ 269.539379][T15303] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 269.547398][T15303] RBP: 00007f8d88a270a0 R08: 0000000000000000 R09: 0000000000000000 [ 269.555423][T15303] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 269.563399][T15303] R13: 000000000000000b R14: 00007f8d89935f60 R15: 00007ffc2fda9de8 [ 269.571379][T15303] [ 269.591536][T15286] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 269.635442][T15196] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 269.653927][T15313] loop0: detected capacity change from 0 to 2048 [ 269.670322][T15137] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 269.687275][T15313] loop0: p2 < > [ 269.699120][ T29] audit: type=1400 audit(1721420802.473:12850): avc: denied { append } for pid=15308 comm="syz.0.3268" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 269.831389][T15196] veth0_vlan: entered promiscuous mode [ 269.855124][T15196] veth1_vlan: entered promiscuous mode [ 269.884280][T15196] veth0_macvtap: entered promiscuous mode [ 269.899375][T15196] veth1_macvtap: entered promiscuous mode [ 269.917906][T15196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 269.928557][T15196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.938420][T15196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 269.948881][T15196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.958738][T15196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 269.969257][T15196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.979169][T15196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 269.989679][T15196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.999555][T15196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 270.010030][T15196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.019976][T15196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 270.030438][T15196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.040297][T15196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 270.050753][T15196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.060644][T15196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 270.071103][T15196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.081007][T15196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 270.091509][T15196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.101347][T15196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 270.111827][T15196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.121678][T15196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 270.132123][T15196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.142005][T15196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 270.152442][T15196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.162264][T15196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 270.172746][T15196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.224554][T15196] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 270.233244][T15196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 270.243931][T15196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.253862][T15196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 270.264340][T15196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.274220][T15196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 270.284706][T15196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.294657][T15196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 270.305177][T15196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.315059][T15196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 270.325697][T15196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.335755][T15196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 270.346222][T15196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.356086][T15196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 270.366561][T15196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.376840][T15196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 270.387470][T15196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.397333][T15196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 270.407786][T15196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.417694][T15196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 270.428329][T15196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.438199][T15196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 270.448647][T15196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.458570][T15196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 270.469049][T15196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.478895][T15196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 270.489352][T15196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.499213][T15196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 270.509644][T15196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.645079][T15196] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 270.678670][T15196] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.687442][T15196] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.696340][T15196] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.705190][T15196] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.756546][T15361] loop0: detected capacity change from 0 to 512 [ 270.767503][T15361] EXT4-fs: Ignoring removed oldalloc option [ 270.772534][T15356] IPVS: set_ctl: invalid protocol: 43 172.20.20.51:20001 [ 270.789809][T15361] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 270.798017][T15361] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.3279: invalid indirect mapped block 2683928664 (level 1) [ 270.821270][T15361] EXT4-fs (loop0): 1 truncate cleaned up [ 270.852965][T15137] veth0_vlan: entered promiscuous mode [ 270.871637][T15137] veth1_vlan: entered promiscuous mode [ 270.897979][T15137] veth0_macvtap: entered promiscuous mode [ 270.913951][T15361] Process accounting resumed [ 270.917093][T15137] veth1_macvtap: entered promiscuous mode [ 270.924651][T15361] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.3279: Invalid block bitmap block 3 in block_group 0 [ 270.938652][T15137] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 270.949133][T15137] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.959061][T15137] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 270.969686][T15137] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.979621][T15137] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 270.986995][T15361] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.3279: Invalid block bitmap block 3 in block_group 0 [ 270.990115][T15137] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.990136][T15137] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 271.024188][T15137] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.034170][T15137] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 271.044782][T15137] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.048978][T15361] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.3279: Invalid block bitmap block 3 in block_group 0 [ 271.054623][T15137] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 271.078471][T15137] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.082582][T15385] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15385 comm=syz.2.3283 [ 271.088366][T15137] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 271.088386][T15137] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.088403][T15137] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 271.088418][T15137] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.088435][T15137] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 271.119202][T15361] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.3279: invalid indirect mapped block 2683928664 (level 1) [ 271.121305][T15137] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.176117][T15137] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 271.186597][T15137] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.196517][T15137] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 271.206985][T15137] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.216851][T15137] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 271.227298][T15137] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.237140][T15137] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 271.247601][T15137] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.257569][T15137] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 271.268034][T15137] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.280545][T15137] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 271.295475][T15379] netlink: 44378 bytes leftover after parsing attributes in process `syz.3.3243'. [ 271.313396][T15137] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 271.323937][T15137] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.333867][T15137] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 271.344479][T15137] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.354485][T15137] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 271.365060][T15137] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.374991][T15137] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 271.385460][T15137] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.395314][T15137] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 271.405876][T15137] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.415727][T15137] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 271.426252][T15137] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.436102][T15137] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 271.446599][T15137] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.456438][T15137] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 271.466916][T15137] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.476780][T15137] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 271.487249][T15137] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.497122][T15137] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 271.507663][T15137] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.517620][T15137] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 271.528077][T15137] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.538022][T15137] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 271.548467][T15137] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.558424][T15137] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 271.568869][T15137] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.578797][T15137] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 271.589412][T15137] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.599283][T15137] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 271.609883][T15137] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.623034][T15137] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 271.632256][T15137] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.641087][T15137] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.649891][T15137] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.659052][T15137] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.702914][T15397] loop1: detected capacity change from 0 to 256 [ 271.718957][T15397] FAT-fs (loop1): Directory bread(block 64) failed [ 271.727959][T15397] FAT-fs (loop1): Directory bread(block 65) failed [ 271.741204][T15397] FAT-fs (loop1): Directory bread(block 66) failed [ 271.749782][T15397] FAT-fs (loop1): Directory bread(block 67) failed [ 271.758082][T15397] FAT-fs (loop1): Directory bread(block 68) failed [ 271.764699][T15397] FAT-fs (loop1): Directory bread(block 69) failed [ 271.773090][T15397] FAT-fs (loop1): Directory bread(block 70) failed [ 271.786834][T15397] FAT-fs (loop1): Directory bread(block 71) failed [ 271.793556][T15397] FAT-fs (loop1): Directory bread(block 72) failed [ 271.800258][T15397] FAT-fs (loop1): Directory bread(block 73) failed [ 272.155451][T15416] loop2: detected capacity change from 0 to 1024 [ 272.176155][T15416] EXT4-fs: Ignoring removed nomblk_io_submit option [ 272.226962][T15428] loop4: detected capacity change from 0 to 512 [ 272.251528][T15428] EXT4-fs: Ignoring removed oldalloc option [ 272.277248][T15428] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 272.288542][T15430] netlink: 44378 bytes leftover after parsing attributes in process `syz.3.3294'. [ 272.311913][T15428] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.3293: invalid indirect mapped block 2683928664 (level 1) [ 272.327447][T15428] EXT4-fs (loop4): 1 truncate cleaned up [ 272.339471][T15428] Process accounting resumed [ 272.344312][T15428] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.3293: Invalid block bitmap block 3 in block_group 0 [ 272.365754][T15428] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.3293: Invalid block bitmap block 3 in block_group 0 [ 272.397567][T15428] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.3293: Invalid block bitmap block 3 in block_group 0 [ 272.426230][T15428] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.3293: invalid indirect mapped block 2683928664 (level 1) [ 272.489599][T15452] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15452 comm=syz.3.3300 [ 272.563073][T15457] Cannot find add_set index 0 as target [ 273.730973][T15476] netlink: 184 bytes leftover after parsing attributes in process `syz.1.3306'. [ 273.821168][T15482] netlink: 44378 bytes leftover after parsing attributes in process `syz.3.3307'. [ 273.843322][T15488] loop0: detected capacity change from 0 to 512 [ 273.866303][T15489] Cannot find add_set index 0 as target [ 274.010951][T15502] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15502 comm=syz.3.3314 [ 274.582074][ T29] audit: type=1326 audit(1721420807.353:12851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15515 comm="syz.1.3318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a21645b59 code=0x7ffc0000 [ 274.606474][T15516] FAULT_INJECTION: forcing a failure. [ 274.606474][T15516] name failslab, interval 1, probability 0, space 0, times 0 [ 274.619751][T15516] CPU: 0 PID: 15516 Comm: syz.1.3318 Not tainted 6.10.0-syzkaller-09061-g4305ca0087dd #0 [ 274.629691][T15516] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 274.635121][ T29] audit: type=1326 audit(1721420807.383:12852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15515 comm="syz.1.3318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a21645b59 code=0x7ffc0000 [ 274.639752][T15516] Call Trace: [ 274.639767][T15516] [ 274.639777][T15516] dump_stack_lvl+0xf2/0x150 [ 274.663403][ T29] audit: type=1326 audit(1721420807.383:12853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15515 comm="syz.1.3318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7a21645b59 code=0x7ffc0000 [ 274.666660][T15516] dump_stack+0x15/0x20 [ 274.666685][T15516] should_fail_ex+0x229/0x230 [ 274.669622][ T29] audit: type=1326 audit(1721420807.383:12854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15515 comm="syz.1.3318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a21645b59 code=0x7ffc0000 [ 274.674218][T15516] ? audit_log_d_path+0x96/0x250 [ 274.697998][ T29] audit: type=1326 audit(1721420807.383:12855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15515 comm="syz.1.3318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7a21644590 code=0x7ffc0000 [ 274.701861][T15516] __should_failslab+0x92/0xa0 [ 274.706568][ T29] audit: type=1326 audit(1721420807.383:12856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15515 comm="syz.1.3318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f7a216446df code=0x7ffc0000 [ 274.730050][T15516] should_failslab+0x9/0x20 [ 274.730082][T15516] __kmalloc_cache_noprof+0x4b/0x2a0 [ 274.735007][ T29] audit: type=1326 audit(1721420807.383:12857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15515 comm="syz.1.3318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=213 compat=0 ip=0x7f7a21645b59 code=0x7ffc0000 [ 274.758572][T15516] audit_log_d_path+0x96/0x250 [ 274.758603][T15516] ? get_file_rcu+0xf4/0x110 [ 274.758629][T15516] ? __rcu_read_unlock+0x4e/0x70 [ 274.834621][T15516] audit_log_d_path_exe+0x45/0x80 [ 274.839683][T15516] audit_log_task+0x155/0x180 [ 274.844458][T15516] audit_seccomp+0x68/0x130 [ 274.848981][T15516] __seccomp_filter+0x6fa/0x1180 [ 274.854002][T15516] ? errseq_sample+0x2f/0x40 [ 274.858607][T15516] ? file_init_path+0x281/0x2b0 [ 274.863532][T15516] __secure_computing+0x9f/0x1c0 [ 274.868591][T15516] syscall_trace_enter+0xd1/0x1f0 [ 274.873682][T15516] ? do_epoll_create+0x284/0x2d0 [ 274.878711][T15516] ? fpregs_assert_state_consistent+0x83/0xa0 [ 274.884811][T15516] do_syscall_64+0xaa/0x1c0 [ 274.889377][T15516] ? clear_bhb_loop+0x55/0xb0 [ 274.894185][T15516] ? clear_bhb_loop+0x55/0xb0 [ 274.898868][T15516] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.904783][T15516] RIP: 0033:0x7f7a2164463c [ 274.909204][T15516] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8c 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 1f 8d 02 00 48 [ 274.928821][T15516] RSP: 002b:00007f7a208c7040 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 274.937270][T15516] RAX: ffffffffffffffda RBX: 00007f7a217d5f60 RCX: 00007f7a2164463c [ 274.945378][T15516] RDX: 000000000000000f RSI: 00007f7a208c70b0 RDI: 0000000000000004 [ 274.953369][T15516] RBP: 00007f7a208c70a0 R08: 0000000000000000 R09: 0000000000000000 [ 274.961446][T15516] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 274.969424][T15516] R13: 000000000000000b R14: 00007f7a217d5f60 R15: 00007fff89b17f08 [ 274.977472][T15516] [ 275.001841][ T29] audit: type=1326 audit(1721420807.383:12858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15515 comm="syz.1.3318" exe="" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f7a2164463c code=0x7ffc0000 [ 275.004980][T15517] Cannot find add_set index 0 as target [ 275.024884][ T29] audit: type=1326 audit(1721420807.773:12859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15515 comm="syz.1.3318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f7a216446df code=0x7ffc0000 [ 275.024920][ T29] audit: type=1326 audit(1721420807.773:12860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15515 comm="syz.1.3318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f7a2164488a code=0x7ffc0000 [ 275.037220][T15522] netlink: 'syz.0.3319': attribute type 2 has an invalid length. [ 275.085395][T15522] netlink: 'syz.0.3319': attribute type 8 has an invalid length. [ 275.093286][T15522] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3319'. [ 275.160093][T15525] loop4: detected capacity change from 0 to 512 [ 275.289355][T15525] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 275.298006][T15525] EXT4-fs (loop4): 1 truncate cleaned up [ 275.310060][T15525] hub 9-0:1.0: USB hub found [ 275.314783][T15525] hub 9-0:1.0: 8 ports detected [ 275.522865][T15550] loop4: detected capacity change from 0 to 128 [ 275.544659][T15552] loop3: detected capacity change from 0 to 512 [ 275.558277][T15560] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15560 comm=syz.0.3332 [ 275.584651][T15552] EXT4-fs: Ignoring removed mblk_io_submit option [ 275.591271][T15552] EXT4-fs: Ignoring removed i_version option [ 275.602292][T15552] EXT4-fs error (device loop3): __ext4_iget:4985: inode #11: block 1: comm syz.3.3330: invalid block [ 275.605297][T15550] bio_check_eod: 2 callbacks suppressed [ 275.605312][T15550] syz.4.3328: attempt to access beyond end of device [ 275.605312][T15550] loop4: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 275.613385][T15552] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.3330: couldn't read orphan inode 11 (err -117) [ 275.629613][T15550] syz.4.3328: attempt to access beyond end of device [ 275.629613][T15550] loop4: rw=0, sector=177, nr_sectors = 1 limit=128 [ 275.635743][T15552] EXT4-fs error (device loop3): ext4_add_entry:2435: inode #2: comm syz.3.3330: Directory hole found for htree leaf block 0 [ 275.645539][T15549] syz.4.3328: attempt to access beyond end of device [ 275.645539][T15549] loop4: rw=0, sector=177, nr_sectors = 1 limit=128 [ 275.676644][T15552] EXT4-fs error (device loop3): ext4_add_entry:2435: inode #2: comm syz.3.3330: Directory hole found for htree leaf block 0 [ 275.683832][T15549] Buffer I/O error on dev loop4, logical block 177, async page read [ 275.705270][T15549] syz.4.3328: attempt to access beyond end of device [ 275.705270][T15549] loop4: rw=0, sector=178, nr_sectors = 1 limit=128 [ 275.718782][T15549] Buffer I/O error on dev loop4, logical block 178, async page read [ 275.727871][T15549] syz.4.3328: attempt to access beyond end of device [ 275.727871][T15549] loop4: rw=0, sector=179, nr_sectors = 1 limit=128 [ 275.741216][T15549] Buffer I/O error on dev loop4, logical block 179, async page read [ 275.746811][T15569] loop2: detected capacity change from 0 to 1024 [ 275.749655][T15549] syz.4.3328: attempt to access beyond end of device [ 275.749655][T15549] loop4: rw=0, sector=180, nr_sectors = 1 limit=128 [ 275.761399][T15569] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 275.768801][T15549] Buffer I/O error on dev loop4, logical block 180, async page read [ 275.769282][T15549] syz.4.3328: attempt to access beyond end of device [ 275.769282][T15549] loop4: rw=0, sector=181, nr_sectors = 1 limit=128 [ 275.799438][T15549] Buffer I/O error on dev loop4, logical block 181, async page read [ 275.807944][T15549] syz.4.3328: attempt to access beyond end of device [ 275.807944][T15549] loop4: rw=0, sector=182, nr_sectors = 1 limit=128 [ 275.821433][T15549] Buffer I/O error on dev loop4, logical block 182, async page read [ 275.830031][T15549] syz.4.3328: attempt to access beyond end of device [ 275.830031][T15549] loop4: rw=0, sector=183, nr_sectors = 1 limit=128 [ 275.843223][T15549] Buffer I/O error on dev loop4, logical block 183, async page read [ 275.854311][T15549] syz.4.3328: attempt to access beyond end of device [ 275.854311][T15549] loop4: rw=0, sector=184, nr_sectors = 1 limit=128 [ 275.867524][T15549] Buffer I/O error on dev loop4, logical block 184, async page read [ 275.876041][T15549] Buffer I/O error on dev loop4, logical block 177, async page read [ 275.884331][T15549] Buffer I/O error on dev loop4, logical block 178, async page read [ 276.184972][T15586] loop3: detected capacity change from 0 to 512 [ 276.205767][T15586] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 276.215122][T15586] EXT4-fs (loop3): 1 truncate cleaned up [ 276.437176][T15589] loop4: detected capacity change from 0 to 512 [ 276.449074][T15583] hub 9-0:1.0: USB hub found [ 276.454124][T15583] hub 9-0:1.0: 8 ports detected [ 276.478787][T15589] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 276.487697][T15589] EXT4-fs (loop4): 1 truncate cleaned up [ 276.727484][T15600] loop1: detected capacity change from 0 to 4096 [ 276.739486][T15600] EXT4-fs error (device loop1): ext4_quota_enable:7022: comm syz.1.3346: inode #255: comm syz.1.3346: iget: illegal inode # [ 276.753265][T15600] EXT4-fs error (device loop1): ext4_quota_enable:7025: comm syz.1.3346: Bad quota inode: 255, type: 2 [ 276.764653][T15600] EXT4-fs warning (device loop1): ext4_enable_quotas:7066: Failed to enable quota tracking (type=2, err=-117, ino=255). Please run e2fsck to fix. [ 276.780788][T15600] EXT4-fs (loop1): mount failed [ 276.987273][T15624] Cannot find add_set index 0 as target [ 276.999914][T15627] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15627 comm=syz.4.3353 [ 277.729206][T15638] loop1: detected capacity change from 0 to 128 [ 277.905210][T15656] loop4: detected capacity change from 0 to 512 [ 277.913284][T15656] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #15: comm syz.4.3364: iget: bad extended attribute block 1 [ 277.929921][T15656] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.3364: couldn't read orphan inode 15 (err -117) [ 277.982715][T15661] loop3: detected capacity change from 0 to 512 [ 278.017123][T15661] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 278.025578][T15661] EXT4-fs (loop3): 1 truncate cleaned up [ 278.039554][T15661] hub 9-0:1.0: USB hub found [ 278.044389][T15661] hub 9-0:1.0: 8 ports detected [ 278.057824][T15661] EXT4-fs error (device loop3): ext4_add_entry:2435: inode #2: comm syz.3.3359: Directory hole found for htree leaf block 0 [ 278.110241][T15663] EXT4-fs error (device loop3): ext4_add_entry:2435: inode #2: comm syz.3.3359: Directory hole found for htree leaf block 0 [ 278.328731][T15673] loop4: detected capacity change from 0 to 128 [ 278.351214][T15673] ip6gretap0 speed is unknown, defaulting to 1000 [ 278.502177][T15679] loop4: detected capacity change from 0 to 512 [ 278.509069][T15679] EXT4-fs: Ignoring removed oldalloc option [ 278.517564][T15679] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 278.529245][T15679] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.3370: invalid indirect mapped block 2683928664 (level 1) [ 278.548746][T15679] EXT4-fs (loop4): 1 truncate cleaned up [ 278.558796][T15679] Process accounting resumed [ 278.563778][T15679] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.3370: Invalid block bitmap block 3 in block_group 0 [ 278.582375][T15679] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.3370: Invalid block bitmap block 3 in block_group 0 [ 278.607101][T15679] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.3370: Invalid block bitmap block 3 in block_group 0 [ 278.623373][T15682] loop1: detected capacity change from 0 to 512 [ 278.630173][T15682] EXT4-fs: Ignoring removed oldalloc option [ 278.672864][T15682] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 278.686507][T15682] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.3371: invalid indirect mapped block 2683928664 (level 1) [ 278.717762][T15682] EXT4-fs (loop1): 1 truncate cleaned up [ 278.724763][T15679] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.3370: invalid indirect mapped block 2683928664 (level 1) [ 278.763327][T15682] Process accounting resumed [ 278.768835][T15686] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15686 comm=syz.3.3372 [ 278.792787][T15682] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.3371: Invalid block bitmap block 3 in block_group 0 [ 278.815444][T15682] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.3371: Invalid block bitmap block 3 in block_group 0 [ 278.865570][T15682] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.3371: Invalid block bitmap block 3 in block_group 0 [ 278.884939][T15694] loop0: detected capacity change from 0 to 512 [ 278.893787][T15682] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.3371: invalid indirect mapped block 2683928664 (level 1) [ 278.920911][T15694] ext4 filesystem being mounted at /65/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 278.959630][T15694] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3377'. [ 278.966920][T15700] loop4: detected capacity change from 0 to 2048 [ 278.989320][T10068] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.011514][T15700] EXT4-fs error (device loop4): ext4_ext_check_inode:520: inode #2: comm syz.4.3376: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 279.039102][T15700] EXT4-fs (loop4): get root inode failed [ 279.044790][T15700] EXT4-fs (loop4): mount failed [ 279.061972][T10068] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.101419][T10068] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.125515][T15693] ip6gretap0 speed is unknown, defaulting to 1000 [ 279.156004][T10068] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.242948][T15693] chnl_net:caif_netlink_parms(): no params data found [ 279.253204][T10068] bridge_slave_1: left allmulticast mode [ 279.259036][T10068] bridge_slave_1: left promiscuous mode [ 279.264696][T10068] bridge0: port 2(bridge_slave_1) entered disabled state [ 279.272974][T10068] bridge_slave_0: left allmulticast mode [ 279.278731][T10068] bridge_slave_0: left promiscuous mode [ 279.284512][T10068] bridge0: port 1(bridge_slave_0) entered disabled state [ 279.313808][T15727] syz.1.3385[15727] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 279.313869][T15727] syz.1.3385[15727] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 279.519594][T10068] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 279.542450][T10068] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 279.719342][T10068] bond0 (unregistering): Released all slaves [ 279.997519][T15693] bridge0: port 1(bridge_slave_0) entered blocking state [ 280.004721][T15693] bridge0: port 1(bridge_slave_0) entered disabled state [ 280.012088][T15693] bridge_slave_0: entered allmulticast mode [ 280.019143][T15693] bridge_slave_0: entered promiscuous mode [ 280.032590][T10068] hsr_slave_0: left promiscuous mode [ 280.040400][T10068] hsr_slave_1: left promiscuous mode [ 280.054839][T10068] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 280.062484][T10068] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 280.080484][ T29] kauditd_printk_skb: 10 callbacks suppressed [ 280.080524][ T29] audit: type=1326 audit(1721420812.843:12871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15750 comm="syz.3.3392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7dc085b59 code=0x7ffc0000 [ 280.110373][ T29] audit: type=1326 audit(1721420812.853:12872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15750 comm="syz.3.3392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7dc085b59 code=0x7ffc0000 [ 280.133940][ T29] audit: type=1326 audit(1721420812.853:12873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15750 comm="syz.3.3392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=274 compat=0 ip=0x7ff7dc085b59 code=0x7ffc0000 [ 280.157541][ T29] audit: type=1326 audit(1721420812.853:12874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15750 comm="syz.3.3392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7dc085b59 code=0x7ffc0000 [ 280.220797][T10068] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 280.228563][T10068] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 280.266054][T10068] veth1_macvtap: left promiscuous mode [ 280.271598][T10068] veth0_macvtap: left promiscuous mode [ 280.277281][T10068] veth1_vlan: left promiscuous mode [ 280.282652][T10068] veth0_vlan: left promiscuous mode [ 280.325234][T15763] loop0: detected capacity change from 0 to 2048 [ 280.344565][ T29] audit: type=1326 audit(1721420813.113:12875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15764 comm="syz.3.3399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7dc085b59 code=0x7ffc0000 [ 280.368329][ T29] audit: type=1326 audit(1721420813.113:12876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15764 comm="syz.3.3399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=282 compat=0 ip=0x7ff7dc085b59 code=0x7ffc0000 [ 280.392164][ T29] audit: type=1326 audit(1721420813.113:12877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15764 comm="syz.3.3399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7dc085b59 code=0x7ffc0000 [ 280.421812][T15763] EXT4-fs error (device loop0): __ext4_fill_super:5435: inode #2: comm syz.0.3398: casefold flag without casefold feature [ 280.440209][T15763] EXT4-fs (loop0): get root inode failed [ 280.446036][T15763] EXT4-fs (loop0): mount failed [ 280.505442][ T29] audit: type=1400 audit(1721420813.263:12878): avc: denied { bind } for pid=15762 comm="syz.0.3398" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 280.654835][T10068] team0 (unregistering): Port device team_slave_1 removed [ 280.668030][T10068] team0 (unregistering): Port device team_slave_0 removed [ 280.842610][T15693] bridge0: port 2(bridge_slave_1) entered blocking state [ 280.849790][T15693] bridge0: port 2(bridge_slave_1) entered disabled state [ 280.861526][T15693] bridge_slave_1: entered allmulticast mode [ 280.894790][T15693] bridge_slave_1: entered promiscuous mode [ 280.906709][T15785] loop4: detected capacity change from 0 to 128 [ 281.032405][T15693] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 281.122336][T15693] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 281.252228][T15693] team0: Port device team_slave_0 added [ 281.267454][T15693] team0: Port device team_slave_1 added [ 281.290448][T15693] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 281.297470][T15693] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 281.323501][T15693] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 281.336084][T15693] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 281.343051][T15693] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 281.369137][T15693] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 281.481564][ T29] audit: type=1326 audit(1721420814.173:12879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15791 comm="syz.3.3407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7dc085b59 code=0x7ffc0000 [ 281.505501][ T29] audit: type=1326 audit(1721420814.173:12880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15791 comm="syz.3.3407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7dc085b59 code=0x7ffc0000 [ 281.693472][T15693] hsr_slave_0: entered promiscuous mode [ 281.699892][T15693] hsr_slave_1: entered promiscuous mode [ 281.716432][T15693] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 281.724102][T15693] Cannot create hsr debugfs directory [ 281.775481][T15802] loop4: detected capacity change from 0 to 2048 [ 281.791466][T15802] EXT4-fs error (device loop4): __ext4_fill_super:5435: inode #2: comm syz.4.3412: casefold flag without casefold feature [ 281.815793][T15802] EXT4-fs (loop4): get root inode failed [ 281.821480][T15802] EXT4-fs (loop4): mount failed [ 282.075103][T15693] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 282.090780][T15693] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 282.104786][T15693] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 282.175146][T15818] loop1: detected capacity change from 0 to 128 [ 282.201330][T15693] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 282.333317][T15823] loop4: detected capacity change from 0 to 256 [ 282.460032][T15823] FAT-fs (loop4): IO charset cp1250 not found [ 282.473523][T15693] 8021q: adding VLAN 0 to HW filter on device bond0 [ 282.489214][T15693] 8021q: adding VLAN 0 to HW filter on device team0 [ 282.500120][ T3160] bridge0: port 1(bridge_slave_0) entered blocking state [ 282.507241][ T3160] bridge0: port 1(bridge_slave_0) entered forwarding state [ 283.011049][T15693] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 283.021581][T15693] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 283.439403][T15693] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 283.795603][ C0] sched: RT throttling activated [ 283.815380][ T3160] bridge0: port 2(bridge_slave_1) entered blocking state [ 283.822591][ T3160] bridge0: port 2(bridge_slave_1) entered forwarding state [ 284.128466][T15850] loop0: detected capacity change from 0 to 512 [ 284.168714][T15850] EXT4-fs mount: 39 callbacks suppressed [ 284.168749][T15850] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 284.187052][T15850] ext4 filesystem being mounted at /73/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 284.373024][T14505] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 284.526254][T15693] veth0_vlan: entered promiscuous mode [ 284.537325][T15693] veth1_vlan: entered promiscuous mode [ 284.553499][T15693] veth0_macvtap: entered promiscuous mode [ 284.568879][T15693] veth1_macvtap: entered promiscuous mode [ 284.581706][T15693] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 284.592289][T15693] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 284.602206][T15693] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 284.612725][T15693] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 284.622668][T15693] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 284.633202][T15693] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 284.643159][T15693] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 284.653760][T15693] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 284.663631][T15693] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 284.674093][T15693] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 284.684002][T15693] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 284.694466][T15693] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 284.704370][T15693] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 284.714907][T15693] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 284.724822][T15693] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 284.735398][T15693] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 284.745282][T15693] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 284.755843][T15693] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 284.765848][T15693] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 284.776338][T15693] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 284.786305][T15693] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 284.796850][T15693] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 284.806716][T15693] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 284.817167][T15693] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 284.827094][T15693] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 284.837545][T15693] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 284.847399][T15693] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 284.857848][T15693] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 284.871502][T15693] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 284.878927][T15898] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3441'. [ 284.895318][T15693] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 284.905856][T15693] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 284.915788][T15693] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 284.926247][T15693] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 284.936155][T15693] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 284.946627][T15693] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 284.956479][T15693] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 284.966952][T15693] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 284.976816][T15693] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 284.987268][T15693] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 284.997167][T15693] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 285.007652][T15693] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 285.017486][T15693] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 285.027936][T15693] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 285.037854][T15693] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 285.048393][T15693] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 285.058230][T15693] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 285.068793][T15693] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 285.078643][T15693] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 285.089233][T15693] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 285.104728][T15693] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 285.116442][T15693] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 285.126320][T15693] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 285.136762][T15693] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 285.146600][T15693] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 285.157119][T15693] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 285.166963][T15693] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 285.177506][T15693] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 285.187349][T15693] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 285.197786][T15693] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 285.214572][T15693] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 285.247870][T15693] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.256813][T15693] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.265520][T15693] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.274344][T15693] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.391034][T15943] netlink: 'syz.4.3458': attribute type 1 has an invalid length. [ 285.405277][T15943] bond1: entered promiscuous mode [ 285.420722][T15943] lo: entered promiscuous mode [ 285.448384][ C0] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 285.454848][T15943] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 285.485531][T15953] Cannot find add_set index 0 as target [ 285.490358][T15943] bond1: (slave lo): making interface the new active one [ 285.502466][T15943] bond1: (slave lo): Enslaving as an active interface with an up link [ 285.583763][T15963] netlink: 'syz.4.3463': attribute type 1 has an invalid length. [ 285.612534][T15963] bond2: entered promiscuous mode [ 285.636251][T15963] bond1: (slave lo): Releasing active interface [ 285.643497][T15963] bond1: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 285.658452][T15963] bond2: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 285.675164][T15963] bond2: (slave lo): making interface the new active one [ 285.683510][T15963] bond2: (slave lo): Enslaving as an active interface with an up link [ 285.779286][ C0] TCP: request_sock_TCP: Possible SYN flooding on port [::]:2. Sending cookies. [ 287.161157][T16022] netlink: 'syz.1.3486': attribute type 4 has an invalid length. [ 287.232156][T16025] loop4: detected capacity change from 0 to 512 [ 287.281284][ T29] kauditd_printk_skb: 7 callbacks suppressed [ 287.281301][ T29] audit: type=1400 audit(1721420820.033:12888): avc: denied { connect } for pid=16026 comm="syz.1.3487" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 287.367318][T16025] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 287.380013][T16025] ext4 filesystem being mounted at /43/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 287.639067][T16054] loop3: detected capacity change from 0 to 128 [ 287.647339][T16054] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 287.660484][T16054] ext4 filesystem being mounted at /62/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 287.723623][T15196] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 287.761439][T16056] loop2: detected capacity change from 0 to 1764 [ 287.920941][T15137] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 288.005235][T16063] syzkaller0: entered promiscuous mode [ 288.011015][T16063] syzkaller0: entered allmulticast mode [ 288.063287][T16066] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3501'. [ 288.571580][T16108] syzkaller0: entered promiscuous mode [ 288.577280][T16108] syzkaller0: entered allmulticast mode [ 288.817717][ C1] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 288.893311][T16121] loop3: detected capacity change from 0 to 2048 [ 288.913397][T16121] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 289.493090][ T29] audit: type=1400 audit(1721420822.263:12889): avc: denied { audit_write } for pid=16129 comm="syz.4.3524" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 289.514708][ T29] audit: type=1107 audit(1721420822.263:12890): pid=16129 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 289.562430][T16132] loop4: detected capacity change from 0 to 256 [ 289.667190][T16136] loop0: detected capacity change from 0 to 1764 [ 290.105942][T16138] syz.4.3525[16138] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 290.106167][T16138] syz.4.3525[16138] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 290.533676][T15196] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 290.788679][T16148] bond0: entered promiscuous mode [ 290.793798][T16148] bond_slave_0: entered promiscuous mode [ 290.799653][T16148] bond_slave_1: entered promiscuous mode [ 290.819820][T16156] af_packet: tpacket_rcv: packet too big, clamped from 69460 to 3952. macoff=96 [ 291.012010][T16163] ip6gretap0 speed is unknown, defaulting to 1000 [ 292.043368][T16174] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3540'. [ 292.053908][T16175] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3539'. [ 292.063855][T16175] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3539'. [ 292.202311][T16193] loop4: detected capacity change from 0 to 512 [ 292.209119][T16193] EXT4-fs: Ignoring removed oldalloc option [ 292.219522][T16193] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 292.227948][T16193] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.3549: invalid indirect mapped block 2683928664 (level 1) [ 292.245404][T16193] EXT4-fs (loop4): 1 truncate cleaned up [ 292.251708][T16193] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 292.274043][T16193] Process accounting resumed [ 292.280772][T16193] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.3549: Invalid block bitmap block 3 in block_group 0 [ 292.298202][T16193] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.3549: Invalid block bitmap block 3 in block_group 0 [ 292.312339][T16193] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.3549: Invalid block bitmap block 3 in block_group 0 [ 292.328671][T16193] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.3549: invalid indirect mapped block 2683928664 (level 1) [ 292.350714][T15137] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 292.531412][T16207] loop4: detected capacity change from 0 to 512 [ 292.573614][T16207] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 292.597533][T16207] EXT4-fs (loop4): invalid journal inode [ 292.604987][T16207] EXT4-fs (loop4): can't get journal size [ 292.632700][T16207] EXT4-fs (loop4): 1 truncate cleaned up [ 292.642336][T16207] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 292.804858][T16227] loop0: detected capacity change from 0 to 512 [ 292.811781][T16227] EXT4-fs: Ignoring removed oldalloc option [ 292.819181][T16227] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 292.827403][T16227] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.3562: invalid indirect mapped block 2683928664 (level 1) [ 292.841695][T16227] EXT4-fs (loop0): 1 truncate cleaned up [ 292.847860][T16227] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 292.848517][T15137] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 292.871323][T16227] Process accounting resumed [ 292.877655][T16227] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.3562: Invalid block bitmap block 3 in block_group 0 [ 292.891749][T16227] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.3562: Invalid block bitmap block 3 in block_group 0 [ 292.905707][T16227] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.3562: Invalid block bitmap block 3 in block_group 0 [ 292.920754][T16227] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.3562: invalid indirect mapped block 2683928664 (level 1) [ 292.953387][T14505] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 292.988734][T16239] ip6gretap0 speed is unknown, defaulting to 1000 [ 293.134404][T16257] loop4: detected capacity change from 0 to 512 [ 293.148546][T16257] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 293.164274][T16257] ext4 filesystem being mounted at /68/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 293.278926][T16255] netlink: 'syz.3.3573': attribute type 1 has an invalid length. [ 293.300423][T16264] team0: entered promiscuous mode [ 293.305568][T16264] team_slave_0: entered promiscuous mode [ 293.311423][T16264] team_slave_1: entered promiscuous mode [ 293.318879][ T29] audit: type=1400 audit(1721420826.093:12891): avc: denied { write } for pid=16263 comm="syz.3.3576" name="file0" dev="tmpfs" ino=489 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 293.341864][T16263] team0: left promiscuous mode [ 293.342434][ T29] audit: type=1400 audit(1721420826.093:12892): avc: denied { open } for pid=16263 comm="syz.3.3576" path="/90/file0" dev="tmpfs" ino=489 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 293.346686][T16263] team_slave_0: left promiscuous mode [ 293.346807][T16263] team_slave_1: left promiscuous mode [ 293.369543][ T29] audit: type=1400 audit(1721420826.093:12893): avc: denied { ioctl } for pid=16263 comm="syz.3.3576" path="/90/file0" dev="tmpfs" ino=489 ioctlcmd=0x1270 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 293.553647][T16284] FAULT_INJECTION: forcing a failure. [ 293.553647][T16284] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 293.567083][T16284] CPU: 0 PID: 16284 Comm: syz.3.3585 Not tainted 6.10.0-syzkaller-09061-g4305ca0087dd #0 [ 293.576911][T16284] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 293.587026][T16284] Call Trace: [ 293.590318][T16284] [ 293.593248][T16284] dump_stack_lvl+0xf2/0x150 [ 293.597880][T16284] dump_stack+0x15/0x20 [ 293.602165][T16284] should_fail_ex+0x229/0x230 [ 293.606907][T16284] __should_fail_alloc_page+0xfd/0x110 [ 293.612398][T16284] __alloc_pages_noprof+0x109/0x360 [ 293.617653][T16284] alloc_pages_mpol_noprof+0xb1/0x1e0 [ 293.623113][T16284] vma_alloc_folio_noprof+0x176/0x2d0 [ 293.628498][T16284] handle_mm_fault+0xddb/0x2ac0 [ 293.633373][T16284] exc_page_fault+0x3b9/0x650 [ 293.638079][T16284] asm_exc_page_fault+0x26/0x30 [ 293.643004][T16284] RIP: 0033:0x7ff7dbf4b503 [ 293.647415][T16284] Code: 1f 84 00 00 00 00 00 3d 00 01 00 00 75 29 45 31 f6 48 83 c4 18 44 89 f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 40 00 49 8b 0f <44> 88 34 01 49 83 47 10 01 eb 92 66 90 8d 90 ff fe ff ff 83 fa 1c [ 293.667051][T16284] RSP: 002b:00007ff7db3064b0 EFLAGS: 00010206 [ 293.673138][T16284] RAX: 0000000000007000 RBX: 00007ff7db306550 RCX: 00007ff7d2ee7000 [ 293.681146][T16284] RDX: 00007ff7db3066f0 RSI: 0000000000000001 RDI: 00007ff7db3065f0 [ 293.689155][T16284] RBP: 0000000000000079 R08: 0000000000000008 R09: 000000000000009e [ 293.697157][T16284] R10: 00000000000000c4 R11: 00007ff7db306550 R12: 0000000000000001 [ 293.705138][T16284] R13: 00007ff7dc105fa0 R14: 0000000000000003 R15: 00007ff7db3065f0 [ 293.713139][T16284] [ 293.716398][T16284] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 293.727342][T16284] loop3: detected capacity change from 0 to 512 [ 293.736722][T16286] loop2: detected capacity change from 0 to 1024 [ 293.745522][T16286] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 293.771559][T16289] sctp: [Deprecated]: syz.3.3587 (pid 16289) Use of int in max_burst socket option. [ 293.771559][T16289] Use struct sctp_assoc_value instead [ 293.932319][T16311] loop3: detected capacity change from 0 to 2048 [ 293.951365][T16313] ip6gretap0 speed is unknown, defaulting to 1000 [ 293.966630][T15137] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 293.989607][T16311] EXT4-fs error (device loop3): ext4_ext_check_inode:520: inode #2: comm syz.3.3596: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 294.012981][T16311] EXT4-fs (loop3): get root inode failed [ 294.018796][T16311] EXT4-fs (loop3): mount failed [ 294.173683][T16340] loop4: detected capacity change from 0 to 512 [ 294.187361][T16340] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 294.201594][T16340] ext4 filesystem being mounted at /74/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 294.263935][T16343] loop3: detected capacity change from 0 to 512 [ 294.294987][T16343] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 294.307473][T16343] EXT4-fs (loop3): 1 truncate cleaned up [ 294.313942][T16343] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 294.339242][T16343] hub 9-0:1.0: USB hub found [ 294.344376][T16343] hub 9-0:1.0: 8 ports detected [ 294.358040][T16343] EXT4-fs error (device loop3): ext4_add_entry:2435: inode #2: comm syz.3.3600: Directory hole found for htree leaf block 0 [ 294.379555][T16343] EXT4-fs error (device loop3): ext4_add_entry:2435: inode #2: comm syz.3.3600: Directory hole found for htree leaf block 0 [ 294.553840][T15693] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 294.582443][T16348] loop2: detected capacity change from 0 to 512 [ 294.597494][T16348] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 294.610073][T16348] ext4 filesystem being mounted at /12/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 294.621349][T16348] FAULT_INJECTION: forcing a failure. [ 294.621349][T16348] name failslab, interval 1, probability 0, space 0, times 0 [ 294.634167][T16348] CPU: 0 PID: 16348 Comm: syz.2.3610 Not tainted 6.10.0-syzkaller-09061-g4305ca0087dd #0 [ 294.643966][T16348] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 294.654016][T16348] Call Trace: [ 294.657431][T16348] [ 294.660383][T16348] dump_stack_lvl+0xf2/0x150 [ 294.664985][T16348] dump_stack+0x15/0x20 [ 294.669210][T16348] should_fail_ex+0x229/0x230 [ 294.673939][T16348] ? ext4_find_extent+0x216/0x860 [ 294.679042][T16348] __should_failslab+0x92/0xa0 [ 294.683862][T16348] should_failslab+0x9/0x20 [ 294.688368][T16348] __kmalloc_noprof+0xa5/0x370 [ 294.693132][T16348] ext4_find_extent+0x216/0x860 [ 294.698007][T16348] ? vsnprintf+0xdd8/0xe30 [ 294.702534][T16348] ext4_ext_map_blocks+0x114/0x33b0 [ 294.707807][T16348] ? xas_load+0x3ae/0x3d0 [ 294.712223][T16348] ? xas_load+0x3ae/0x3d0 [ 294.716554][T16348] ? __rcu_read_unlock+0x4e/0x70 [ 294.721569][T16348] ? ext4_es_lookup_extent+0x35b/0x520 [ 294.727055][T16348] ext4_map_blocks+0x2b1/0xf50 [ 294.731830][T16348] ext4_getblk+0x112/0x500 [ 294.736364][T16348] ext4_bread_batch+0x5b/0x360 [ 294.741166][T16348] __ext4_find_entry+0x9d3/0x10a0 [ 294.746248][T16348] ? d_alloc_parallel+0xbfe/0xc80 [ 294.751351][T16348] ? selinux_inode_permission+0x337/0x400 [ 294.757171][T16348] ext4_lookup+0xba/0x390 [ 294.761525][T16348] __lookup_slow+0x184/0x250 [ 294.766122][T16348] lookup_slow+0x3c/0x60 [ 294.770406][T16348] walk_component+0x1f5/0x230 [ 294.775092][T16348] ? path_lookupat+0xfd/0x2b0 [ 294.779807][T16348] path_lookupat+0x10a/0x2b0 [ 294.784441][T16348] filename_lookup+0x127/0x300 [ 294.789226][T16348] user_path_at+0x3c/0x110 [ 294.793661][T16348] __se_sys_utime+0xc6/0x1c0 [ 294.798254][T16348] ? native_tss_update_io_bitmap+0x17b/0x200 [ 294.804351][T16348] __x64_sys_utime+0x31/0x40 [ 294.808971][T16348] x64_sys_call+0x2b6c/0x2e00 [ 294.813707][T16348] do_syscall_64+0xc9/0x1c0 [ 294.818220][T16348] ? clear_bhb_loop+0x55/0xb0 [ 294.823004][T16348] ? clear_bhb_loop+0x55/0xb0 [ 294.827772][T16348] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 294.833687][T16348] RIP: 0033:0x7fbb0c075b59 [ 294.838159][T16348] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 294.857925][T16348] RSP: 002b:00007fbb0b2f7048 EFLAGS: 00000246 ORIG_RAX: 0000000000000084 [ 294.866355][T16348] RAX: ffffffffffffffda RBX: 00007fbb0c205f60 RCX: 00007fbb0c075b59 [ 294.874319][T16348] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020001f00 [ 294.882359][T16348] RBP: 00007fbb0b2f70a0 R08: 0000000000000000 R09: 0000000000000000 [ 294.890348][T16348] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 294.898337][T16348] R13: 000000000000000b R14: 00007fbb0c205f60 R15: 00007ffc859a9b88 [ 294.906389][T16348] [ 294.921346][T15693] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 294.951663][T15196] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 294.964938][T16353] ip6gretap0 speed is unknown, defaulting to 1000 [ 294.986901][T16354] loop0: detected capacity change from 0 to 2048 [ 295.017150][T15137] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 295.026357][T16354] EXT4-fs error (device loop0): ext4_ext_check_inode:520: inode #2: comm syz.0.3612: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 295.060594][T16354] EXT4-fs (loop0): get root inode failed [ 295.066326][T16354] EXT4-fs (loop0): mount failed [ 295.126249][T16378] FAULT_INJECTION: forcing a failure. [ 295.126249][T16378] name failslab, interval 1, probability 0, space 0, times 0 [ 295.138990][T16378] CPU: 0 PID: 16378 Comm: syz.4.3617 Not tainted 6.10.0-syzkaller-09061-g4305ca0087dd #0 [ 295.148817][T16378] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 295.158887][T16378] Call Trace: [ 295.161271][T16377] loop0: detected capacity change from 0 to 128 [ 295.162153][T16378] [ 295.171358][T16378] dump_stack_lvl+0xf2/0x150 [ 295.175989][T16378] dump_stack+0x15/0x20 [ 295.180186][T16378] should_fail_ex+0x229/0x230 [ 295.184891][T16378] ? shrinker_alloc+0x3b/0x5f0 [ 295.189710][T16378] __should_failslab+0x92/0xa0 [ 295.194512][T16378] should_failslab+0x9/0x20 [ 295.199100][T16378] __kmalloc_cache_noprof+0x4b/0x2a0 [ 295.204446][T16378] shrinker_alloc+0x3b/0x5f0 [ 295.209037][T16378] ? rcu_sync_init+0x32/0x40 [ 295.213635][T16378] alloc_super+0x451/0x5b0 [ 295.218072][T16378] ? __pfx_devpts_mount+0x10/0x10 [ 295.223117][T16378] sget+0x174/0x460 [ 295.226981][T16378] ? __pfx_set_anon_super+0x10/0x10 [ 295.232221][T16378] ? __pfx_devpts_mount+0x10/0x10 [ 295.237373][T16378] ? __pfx_devpts_fill_super+0x10/0x10 [ 295.242853][T16378] mount_nodev+0x30/0xd0 [ 295.247119][T16378] devpts_mount+0x29/0x40 [ 295.251467][T16378] legacy_get_tree+0x77/0xd0 [ 295.256101][T16378] vfs_get_tree+0x56/0x1d0 [ 295.260526][T16378] do_new_mount+0x227/0x690 [ 295.265033][T16378] path_mount+0x49b/0xb30 [ 295.269387][T16378] __se_sys_mount+0x27c/0x2d0 [ 295.274124][T16378] ? fput+0x13b/0x180 [ 295.278140][T16378] __x64_sys_mount+0x67/0x80 [ 295.282758][T16378] x64_sys_call+0xd11/0x2e00 [ 295.287374][T16378] do_syscall_64+0xc9/0x1c0 [ 295.291876][T16378] ? clear_bhb_loop+0x55/0xb0 [ 295.296568][T16378] ? clear_bhb_loop+0x55/0xb0 [ 295.301312][T16378] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 295.307256][T16378] RIP: 0033:0x7fdd97215b59 [ 295.311670][T16378] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 295.331381][T16378] RSP: 002b:00007fdd96476048 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 295.339822][T16378] RAX: ffffffffffffffda RBX: 00007fdd973a6038 RCX: 00007fdd97215b59 [ 295.347851][T16378] RDX: 0000000020000100 RSI: 0000000020000040 RDI: 0000000000000000 [ 295.355846][T16378] RBP: 00007fdd964760a0 R08: 0000000000000000 R09: 0000000000000000 [ 295.363837][T16378] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 295.371889][T16378] R13: 000000000000006e R14: 00007fdd973a6038 R15: 00007fff5a428818 [ 295.380132][T16378] [ 295.499537][T16398] loop0: detected capacity change from 0 to 2048 [ 295.519479][T16398] EXT4-fs error (device loop0): ext4_ext_check_inode:520: inode #2: comm syz.0.3631: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 295.540833][T16398] EXT4-fs (loop0): get root inode failed [ 295.546516][T16398] EXT4-fs (loop0): mount failed [ 295.602558][T16408] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16408 comm=syz.0.3634 [ 295.919918][T16412] ================================================================== [ 295.928032][T16412] BUG: KCSAN: data-race in __dentry_kill / lookup_fast [ 295.934907][T16412] [ 295.937227][T16412] read-write to 0xffff888106a72240 of 4 bytes by task 16413 on cpu 1: [ 295.945385][T16412] __dentry_kill+0x22e/0x4c0 [ 295.950005][T16412] dput+0x5c/0xd0 [ 295.953666][T16412] terminate_walk+0xfb/0x280 [ 295.958364][T16412] path_openat+0x1979/0x1f10 [ 295.962966][T16412] do_filp_open+0xf7/0x200 [ 295.967388][T16412] do_sys_openat2+0xab/0x120 [ 295.972085][T16412] __x64_sys_openat+0xf3/0x120 [ 295.976873][T16412] x64_sys_call+0x1ac/0x2e00 [ 295.981481][T16412] do_syscall_64+0xc9/0x1c0 [ 295.986010][T16412] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 295.991921][T16412] [ 295.994239][T16412] read to 0xffff888106a72240 of 4 bytes by task 16412 on cpu 0: [ 296.001868][T16412] lookup_fast+0xd9/0x2a0 [ 296.006299][T16412] path_openat+0x466/0x1f10 [ 296.010891][T16412] do_filp_open+0xf7/0x200 [ 296.015317][T16412] do_sys_openat2+0xab/0x120 [ 296.019920][T16412] __x64_sys_openat+0xf3/0x120 [ 296.024722][T16412] x64_sys_call+0x1ac/0x2e00 [ 296.029318][T16412] do_syscall_64+0xc9/0x1c0 [ 296.033847][T16412] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 296.039760][T16412] [ 296.042117][T16412] value changed: 0x0040000c -> 0x0000800c [ 296.047830][T16412] [ 296.050149][T16412] Reported by Kernel Concurrency Sanitizer on: [ 296.056293][T16412] CPU: 0 PID: 16412 Comm: syz.4.3635 Not tainted 6.10.0-syzkaller-09061-g4305ca0087dd #0 [ 296.066099][T16412] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 296.076246][T16412] ================================================================== [ 296.108701][T16413] loop4: detected capacity change from 0 to 2048 [ 296.115796][T16413] EXT4-fs (loop4): couldn't mount as ext2 due to feature incompatibilities