last executing test programs: 2.767915514s ago: executing program 0 (id=595): perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xb9, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0xecf86c37d53049cc) socket$inet6_sctp(0xa, 0x0, 0x84) shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) r0 = socket$inet(0x2, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'ipvlan0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_ERRQUEUE(r1, 0x6b, 0x4, &(0x7f0000000040)=0x1, 0x4) r2 = syz_open_dev$usbfs(&(0x7f0000003400), 0x5, 0x440) ioctl$USBDEVFS_DISCSIGNAL(r2, 0x8010550e, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed0006, &(0x7f0000000140)={[{@i_version}, {@resgid={'resgid', 0x3d, 0xee00}}, {@bh}, {@noload}, {@data_err_ignore}, {@noacl}]}, 0x7e, 0x444, &(0x7f0000000980)="$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") r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r3, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_SENDSEQ(r3, 0x111, 0x3, 0x1, 0x4) r4 = add_key$fscrypt_provisioning(&(0x7f00000000c0), &(0x7f0000000200)={'syz', 0x1}, &(0x7f0000000240)={0x0, 0x0, @a}, 0x48, 0xffffffffffffffff) r5 = getuid() r6 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r6, &(0x7f0000000240)={0xa, 0x0, 0x0, @dev, 0x80}, 0x1c) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000d80)={&(0x7f0000000a00), 0xc, &(0x7f0000000d40)={&(0x7f0000000a40)=ANY=[@ANYRES32=r5, @ANYBLOB="14000800000068f7a712b9407b77770287b170cb63ab42"], 0x2d4}, 0x1, 0x0, 0x0, 0x4}, 0x0) r7 = getegid() keyctl$chown(0x4, r4, r5, r7) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r8 = fcntl$getown(0xffffffffffffffff, 0x9) syz_pidfd_open(r8, 0x0) 2.56841516s ago: executing program 0 (id=597): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000040)=[@in6={0xa, 0x4e22, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8}], 0x1c) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100), 0x1, 0x500, &(0x7f0000000500)="$eJzs3U9sI1cZAPBvJn/sTdMmhR4AFbqUwoJWayfeNqp6oZwqhCoheuSwDYkTRbHjKHZKE/aQPXJHohInOHHmgMQBqSfuSBzgxqUckAqsQA0SByOP7V3njzfWbmzvxr+fNJo38+L53tvRvGd91s4LYGJdj4ijiJiNiPcjYqFzPuls8XZ7a/3dZ/fvrh3fv7uWRLP53j+TrL51Lno+0/Jc55r5iPjBOxE/Sk4F/VNE/eBwe7VSKe91ThUb1d1i/eDw1lZ1dbO8Wd4plVaWV5bevP1G6dL6+kr1N59ei4jf/+7Ln/zx6Fs/aTVrvlPX24/L1O76zIM4LdMR8b1hBBuDqU5/Zh/nw4/1IS5TGhGfi4hXs+d/Iaayu3nSydv07RG2DgAYhmZzIZoLvccAwFWXZjmwJC10cgHzkaaFQjuH91LMpZVavXFzo7a/s97OlS3GTLqxVSkvdXKFizGTbGxNl5ezcve4Ui6dOr4dES9GxM9y17Ljwlqtsj7OLz4AMMGeOzX//yfXnv8BgCsu/7CYG2c7AIDRyY+7AQDAyJn/AWDymP8BYPKY/wFg8pj/AWDymP8BYKJ8/913W1vzuPP+6/UPDva3ax/cWi/XtwvV/bXCWm1vt7BZq21m7+ypXnS9Sq22u/x67H9YbJTrjWL94PBOtba/07iTvdf7TnlmJL0CAB7lxVc+/ksSEUdvXcu26Hnf/4Vz9cvDbh0wTOm4GwCMzdS4GwCMzdnVvoBJIR8P9CzRe6/ndP5M4bSPBrp8at1QePrc+OIT5P+BZ5r8P0yux8v/+y4PV4H8P0yuZjOx5j8ATBg5fiC5oL739/+lZs/BYL//AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwJU0n21JWuisBT4faVooRDwfEYsxk2xsVcpLEfFCRPw5N5NrHS9HhHWDAOBZlv496az/dWPhtfnTtbO5/+ayfUT8+Bfv/fzD1UZjbzliNvnXg/ONjzrnS+NoPwBwke483Z3Huz67f3etu42yPZ9+p724aCvucWdr10zHdLbPZ7mGuX8nneO21veVqUuIf3QvIr5wXv+TLDey2Fn59HT8VuznRxo/PRE/zera+9a/xecvoS0waT5ujT9vn/f8pXE925///OezEerJdce/4zPjX/pg/JvqM/5dHzTG63/47pmTzYV23b2IL01HHHcv3jP+dOMnfeK/NmD8v778lVf71TV/GXEjzut/ciJWsVHdLdYPDm9tVVc3y5vlnVJpZXll6c3bb5SKWY662M1Un/WPt26+0C9+q/9zfeLnL+j/1wfs/6/+9/4Pv/qI+N/82vn3/6VHxG/Nid8YMP7q3G/z/epa8df79P+i+39zwPif/O1wfcA/BQBGoH5wuL1aqZT3hl1Ihx8iKyQRRyPoTruQ+/VP3xlVrCEW4ulohsLTVBj3yAQM28OHftwtAQAAAAAAAAAAAAAA+hnFfycadx8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4uv4fAAD//5iA1Hs=") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000140), 0x4) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) write$UHID_CREATE2(r2, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r2, 0x0) getsockopt$inet6_opts(r1, 0x11a, 0x3, 0x0, &(0x7f0000000000)=0x4) 2.19656108s ago: executing program 2 (id=603): perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x35}, 0x90) r0 = socket$inet_dccp(0x2, 0x6, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000500), 0xff, 0x485, &(0x7f0000001040)="$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") lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0xee01, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000800008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0) mkdir(&(0x7f0000000080)='./file1\x00', 0x0) r2 = socket$unix(0x1, 0x5, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r4) ioctl$TUNSETLINK(r1, 0x400454cd, 0x118) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @broadcast}) write$cgroup_devices(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="1b23000d"], 0xffdd) r5 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000140)='syz0\x00', 0x200002, 0x0) r6 = openat$cgroup_ro(r5, &(0x7f0000000000)='pids.current\x00', 0x275a, 0x0) write$binfmt_aout(r6, &(0x7f00000002c0)=ANY=[], 0xc1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000005, 0x13, r6, 0x0) getsockopt$inet_int(r0, 0x10d, 0xb7, 0x0, &(0x7f0000000040)) 2.033009474s ago: executing program 2 (id=605): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x27}, 0x74) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x4, &(0x7f0000000080)=ANY=[@ANYRES16, @ANYBLOB="fa29ab98365dc0010417018338b2ea09110f48aca7dcc8b65a081be3a069eb26b0bc840d08458f8e807ff9f690d38104af708675b6f1d224de1127013f28a3016ed315a7f7b2bd2b5b6da8cbd53c65fb1a9f2808d16cd142ed", @ANYRESDEC=r0], &(0x7f0000000280)='syzkaller\x00', 0x4, 0xad, &(0x7f0000000300)=""/173, 0x41000}, 0x90) socket$inet_dccp(0x2, 0x6, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r2, 0x8982, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001980)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)=[{0x0}], 0x1}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) capset(&(0x7f0000000300)={0x19980330}, &(0x7f0000000340)) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x7, 0x2172, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000000000/0x4000)=nil, 0x4000) r7 = syz_io_uring_setup(0xf3b, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x3, 0x0, 0x0, r1}, &(0x7f0000000080)=0x0, &(0x7f0000000540)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x8, 0x0, @fd_index=0x9, 0x0, 0x0}) io_uring_enter(r7, 0x47ba, 0x0, 0x0, 0x0, 0x0) timer_create(0x6, 0x0, &(0x7f0000001400)) sendmsg$ETHTOOL_MSG_PAUSE_GET(r6, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={0x0, 0x20}}, 0x0) 1.633127587s ago: executing program 3 (id=607): sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000045c0)=ANY=[@ANYRES8, @ANYRES16, @ANYBLOB="010000000000000000000c00000004000380180001801400020077673100"/42], 0x30}}, 0x0) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r1, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340), 0x44}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000a80)=@newqdisc={0x178, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x148, 0x2, [@TCA_GRED_STAB={0x104, 0x6, "1c2f65df1bc501155748f24ed345dfe27e004bc6a32566374539c892000a1fb8239cc41703d2bb8c354c79c41772902d417c6ecaedf5a1cf567bae8e8552fea450f012b09b3ea31f8343af63381a12b0ca346a7069c1c878c58d75ce9edced9cb1edf41d45a446d700c882ae752d3df00932b12b11562ff275a5d7ed0eadd2a3d5e887f61fd151616b79660b2038f17cdb1b00add084bba8c9881e3365460b72cfc5232c126f983dfa8e0ae2cbfeb15bfcd900ba50fce6b9646335e763519a7a3c71330581caf0f6c07a6552517f4135024d3ac0e9023e8df494b77fd72fdd36aa884aebd8c8b0db2b591b8a62c975bc4400"}, @TCA_GRED_PARMS={0x38, 0x5}, @TCA_GRED_LIMIT={0x4, 0x6}]}}]}, 0x178}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000001c0)={'ip6_vti0\x00', &(0x7f0000000140)={'ip6gre0\x00', 0x0, 0x2f, 0x6c, 0x40, 0x1, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8, 0xcc87a6992eff4cc0, 0x6, 0x2}}) socketpair(0x1, 0x6, 0x3ff, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$igmp6(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r4, 0x29, 0xca, &(0x7f0000000080)={0x4000, 0x1}, 0xc) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'macvlan1\x00', 0x0}) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$MRT6_ADD_MIF(r4, 0x29, 0xca, &(0x7f0000000300)={0x1, 0x1, 0x0, r6}, 0xc) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x34, r9, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_HIGH={0x8, 0x1c}]}, 0x34}}, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_SET(r7, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="ced8f3d0ebdb81af18f0d479285a83f001dc18ff", @ANYRES16=r9, @ANYBLOB="010028bd7000fddbdf25160000000500020000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4800) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)=ANY=[@ANYBLOB="2800ebff1c00070c0000000000000000070000009b6216f363ddd43f5fb6782aff17f0eb8e723c70e7f708e4af760fc073630af92b", @ANYRES32=r6, @ANYBLOB="000002000a000200aaaaaaaaaa000000"], 0x28}}, 0x0) setsockopt$MRT6_DEL_MIF(r4, 0x29, 0xca, &(0x7f0000000000)={0x0, 0x0, 0x1, r6, 0x401}, 0xc) sendmsg$nl_route(r3, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=@bridge_newneigh={0x44, 0x1c, 0x200, 0x70bd2c, 0x25dfdbfb, {0x2, 0x0, 0x0, r6, 0x10, 0x91, 0x6}, [@NDA_VNI={0x8, 0x7, 0x4}, @NDA_LLADDR={0xa, 0x2, @multicast}, @NDA_CACHEINFO={0x14, 0x3, {0x6, 0x3, 0xfffffffd, 0x80000000}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40840}, 0xd0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000002c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'batadv0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000440)={'ip6gre0\x00', &(0x7f00000003c0)={'syztnl2\x00', 0x0, 0x4, 0x3, 0x1f, 0x40, 0x2, @private2, @dev={0xfe, 0x80, '\x00', 0x41}, 0x8, 0x1, 0x4, 0x80000000}}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000580)={&(0x7f0000000900)={0x118, 0x0, 0x8, 0x70bd2b, 0x25dfdbfe, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}, @ETHTOOL_A_LINKMODES_HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}]}, @ETHTOOL_A_LINKMODES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @ETHTOOL_A_LINKMODES_HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}]}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x5}, @ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0x2}]}, 0x118}, 0x1, 0x0, 0x0, 0xc0}, 0x800) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x6, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x7a, &(0x7f0000000100)=[{}, {}], 0x10, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0xf8, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x26642c3776c1ab1a}, 0xc, &(0x7f0000000340)={&(0x7f00000007c0)=ANY=[@ANYBLOB="04010000", @ANYRES16=0x0, @ANYBLOB="000127bd7000fbdbdf250400000038000180140002007767310000000000000000000000000008000300000000000800030000000000080003000300000008000300010000003000018014000200677265300000000000000000000000000800030000000000080003000000000008000100", @ANYRES32=0x0, @ANYBLOB="7400018014000200626f6e645f736c6176655f300000000008000300000000000800030000000000140002006e72300000000000000000000000000008000300010000001400020076657468305f746f5f687372000000000800030003000000140002006e657464657673696d3000000000000014000180080003000100000008000100", @ANYRES32=r14, @ANYBLOB="43f23ac1fd7fb3e149f59af3000387b48b000a5e68242e1b5787a2f424717ca8a8935530c39fba9fe9975f10247a353bb99fc47681ebb1ac"], 0x104}}, 0x4) syz_emit_ethernet(0x7e, &(0x7f0000000400)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaa0086dd6013b47900483c00fc000000000000000000000000000000fe8000000000000000000000000000aa0004000000000000c9"], 0x0) 1.520059896s ago: executing program 0 (id=608): socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0xe2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) ioctl$EVIOCGREP(0xffffffffffffffff, 0x80084503, &(0x7f00000002c0)=""/218) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYBLOB="0000000000000000b7020000f3ffffb0150000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000002c0)="1a", 0x1) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xf, 0x32, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000003c0)={'syztnl2\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x29, 0x5, 0x9, 0x6ba, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @empty, 0x7, 0x10, 0x6, 0x2}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000480)={'syztnl0\x00', &(0x7f0000000400)={'syztnl0\x00', r4, 0x29, 0x3, 0x9, 0x70, 0x4f, @mcast1, @empty, 0x10, 0x7, 0x0, 0x4}}) 1.519484826s ago: executing program 3 (id=609): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="640000001000810500"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000004400128009000100626f6e6400000000340002800800030081000000080005000000000008000400"], 0x64}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)=ANY=[@ANYBLOB="7c010000190001000000000000000000fe880000000000000000000000000001ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000100000000000000c4000500ac1414aa000000000000000000000000000000003c00000000000000ffffffff0000000000000000000000000000000000010000000000000000000000000000e0000002000000000000000000000000000000006c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fc00000000000000000000000000000000000000040004"], 0x17c}}, 0x0) (async) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x1) (async, rerun: 32) ioctl$TCFLSH(r2, 0x8926, 0xffffffffffff7ffe) (async, rerun: 32) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000d08000640ffffff000800034000000038540000000c0a01010000000000000000070000000900020073797a31000000000900010073797a300000000028000380240000800400028004000780040001"], 0xe8}}, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r4, 0x5411, &(0x7f0000000000)) ioctl$TCSETA(r3, 0x802c542a, 0xffffffffffffffff) 1.496847408s ago: executing program 4 (id=610): r0 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x25, 0x1, 0x6, 0x0, 0x0, 0x5, 0x5050a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x12, 0x1038}, 0x10001, 0xffffffff, 0x0, 0x5, 0x6}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x1) r1 = memfd_secret(0x80000) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000003c0), 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x5, 0x2, 0xd, 0x88, r1, 0x2, '\x00', 0x0, r1, 0x1, 0x4, 0x1, 0xc}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7020000f3ffffb0150000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r3) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}, @IFLA_ADDRESS={0xa}]}, 0x40}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00'/12, @ANYRES32, @ANYBLOB="0d00ff0000000000830000000000000045"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x3, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x90) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) socketpair(0x1a, 0x1, 0xed41, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/keys\x00', 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000040)={[{@mpol={'mpol', 0x3d, {'interleave', '', @val={0x3a, [0x37, 0x2d, 0x4e, 0x3a, 0x30, 0x2f, 0x39]}}}, 0x4e}]}) io_uring_register$IORING_REGISTER_PERSONALITY(r8, 0x9, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x89f1, &(0x7f0000000080)) r9 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r9, &(0x7f0000000140)={0x2, 0x4e22, @multicast2}, 0x10) connect$inet(r9, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[@ANYBLOB="240000006a020000000008000e0004"], 0x20}}, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.kill\x00', 0x26e1, 0x0) close(r10) setsockopt$sock_timeval(r10, 0x1, 0x15, &(0x7f0000000040)={0x0, 0xea60}, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000001c0)={'vxcan1\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@deltfilter={0x24, 0x2d, 0x200, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, r11, {0xd, 0x6}, {0x1, 0x5}, {0x7, 0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x20004000}, 0x4) 1.444907882s ago: executing program 3 (id=611): r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000200)={[{@quota}, {@oldalloc}, {@barrier_val={'barrier', 0x3d, 0x3}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x7}}, {@block_validity}, {@jqfmt_vfsv1}]}, 0x3, 0x434, &(0x7f0000000940)="$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") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000080)) ioctl$EXT4_IOC_GROUP_ADD(r1, 0xc0185879, &(0x7f0000000000)={0x0, 0x200002000001, 0x400000, 0x2b, 0x0, 0x0, 0x2401}) 1.399295626s ago: executing program 4 (id=612): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x4, &(0x7f0000000000)=@framed={{}, [@alu={0x4, 0x0, 0x3, 0x0, 0x3, 0x30, 0x3}]}, &(0x7f0000000100)='syzkaller\x00'}, 0x90) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000140), r1) sendmsg$NLBL_CALIPSO_C_REMOVE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="0100000000000000000002000000080001"], 0x1c}}, 0x0) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000002c0)={0x0, 0x9, 0x30}, 0xc) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={&(0x7f00000001c0)="23ec2d82740147a2eaed269188d5cbf13013a2bc4df58d1246eab750c81042f8185620586ea388596e0d9bf006e5f6948432b8d2d6336e23871bd14bb7165d1183", &(0x7f00000000c0)=""/83, &(0x7f0000000340)="cddeb2aef5be4db56ffda8a98375d05c129eae47fac572e7f8ddafd984ab621175058de0aede789e9d8d70a616e4581627737bf018e51b491ddcff1a7235a31a0a90bb3fbbedfd45611ceb15799e2411a7d2dab6bad50e94a2771189b1fa78921b3972048c7dfe081b5170c1566cad4090ee41f88ab764c27ca1df82d3da47721ddaa87ff5efbf8307ab5fe358f5e0a9a680f2e07a7e2dce1642550050e6d7aaed9582c4cc44fd2d6ec0121078691efecb1361f699526c41b372e9169d2524b32dc1e7c8e3f235", &(0x7f0000000280)="ec772f9222dfd83325ac17f6ed9f795d5a520dddbaf377a7f9321df45a847604e23f53d1eb5455c024839f5b3e1d2a19a1bc7cee56190259", 0x8000, r3}, 0x38) 1.399170766s ago: executing program 4 (id=613): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000140), r1) sendmsg$NLBL_CALIPSO_C_REMOVE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="0100000000000000000002000000080001"], 0x1c}}, 0x0) (fail_nth: 2) 1.398888335s ago: executing program 0 (id=614): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newsa={0x154, 0x10, 0x713, 0x0, 0x0, {{@in=@loopback, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in=@remote, 0x0, 0x32}, @in=@local, {}, {}, {}, 0x0, 0x0, 0xa, 0x4}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @encap={0x1c, 0x4, {0x7, 0x0, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}]}, 0x154}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) (async) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newsa={0x154, 0x10, 0x713, 0x0, 0x0, {{@in=@loopback, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in=@remote, 0x0, 0x32}, @in=@local, {}, {}, {}, 0x0, 0x0, 0xa, 0x4}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @encap={0x1c, 0x4, {0x7, 0x0, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}]}, 0x154}}, 0x0) (async) 1.184398603s ago: executing program 0 (id=615): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000740)=ANY=[@ANYBLOB="180000000702060800000000000014008500000075000000a700000005000000"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) setreuid(0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r0}, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) poll(&(0x7f00000002c0)=[{}], 0x1, 0x83a4) 1.077158862s ago: executing program 2 (id=617): creat(0x0, 0x1de) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'nicvf0\x00', 0x3666b165f8ff1357}) mlockall(0x6) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) readv(r1, &(0x7f0000000c40)=[{&(0x7f0000000240)=""/64, 0x40}], 0x1) r2 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f00000001c0)=0x7) socket$nl_netfilter(0x10, 0x3, 0xc) setuid(r3) syz_mount_image$ext4(&(0x7f00000010c0)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x200000, &(0x7f0000000140)={[{@user_xattr}, {@nombcache}, {@dioread_lock}, {@grpquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@nodelalloc}, {@usrquota}, {@noauto_da_alloc}]}, 0xfe, 0x54d, &(0x7f0000000400)="$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") 1.073066432s ago: executing program 4 (id=618): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000100000000000000000000a28000000000a0100000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00008000020000000900010073797a3000000000090003007301000000000000000000001100010000000000"], 0x7c}}, 0x4040001) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x180, 0x111, 0x4b4, 0x8, 0xd4feffff, 0x290, 0x20a, 0x278, 0x290, 0x278, 0x3, 0x0, {[{{@ipv6={@loopback, @empty, [], [], 'ipvlan0\x00', 'team_slave_0\x00', {}, {}, 0x284}, 0x0, 0x118, 0x180, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'ftp-20000\x00'}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}, {{@ipv6={@mcast1, @empty, [], [], 'xfrm0\x00', 'pim6reg1\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_CT_DIRECTION={0x5}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x7}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) 1.046910654s ago: executing program 1 (id=619): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r0) sendmsg$NLBL_MGMT_C_ADD(r1, &(0x7f0000000480)={0x0, 0x3, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000100000006000b000a0000000c000100535e7d2721239c0008000200050000001400050009000000000000000000ffffe0000001140006"], 0x58}}, 0x0) (fail_nth: 2) 1.036364446s ago: executing program 2 (id=620): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) pivot_root(0x0, 0x0) 563.428724ms ago: executing program 1 (id=621): r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) memfd_create(&(0x7f0000000080)='-#\"\x00', 0x2) bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendto$inet6(r1, &(0x7f0000000380)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = perf_event_open(&(0x7f0000000240)={0x4, 0x80, 0x25, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7fffffff}, 0x1001, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, r0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7020000f3ffffb0150000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe64, 0x0, 0x0, 0x0}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r4) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=@newtaction={0x14}, 0x14}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000600)) prlimit64(0x0, 0xe, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@ipv4_newrule={0x24, 0x20, 0x301, 0x0, 0x0, {}, [@FRA_GENERIC_POLICY=@FRA_PRIORITY={0x8}]}, 0x24}}, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e23, @loopback}}}, &(0x7f0000000200)=0x90) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$nfs4(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="636f6e746578743d22f12222"]) 563.124834ms ago: executing program 4 (id=622): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) pivot_root(0x0, 0x0) (fail_nth: 2) 562.866544ms ago: executing program 2 (id=623): syz_open_procfs(0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$NFT_BATCH(r0, &(0x7f0000008bc0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000040f503010000000000000000000000000a14"], 0x28}}, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r1) syz_emit_ethernet(0x3e, 0x0, 0x0) 547.671045ms ago: executing program 2 (id=624): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x17, 0x4, 0x8, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRESHEX=r1, @ANYRES32, @ANYRES64=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r6 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r6, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000380)='mce_record\x00'}, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) connect$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x0, 0x0, @mcast1, 0x7}, 0x1c) dup2(0xffffffffffffffff, 0xffffffffffffffff) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000000)={0x0, 0x93, 0xa6}, 0x0, &(0x7f00000004c0)="86a753ce8a7429006d87354fea5e005953018a5a08fd8e4310f8415233a6873a5d835d332f94e5f4f325daeb6ccde4d65007114f4d6a0e27f8f573a4c5c25e18181ef842f94e5dc1df7d19946480afa0eb2938f3a291fd32a33ef0ec5f3371ccb96b1afed85a141edb2d204be6b45be85ae23139103eb78a4080d19be9cd1a5ee52e7fda26ae79882960cab3120c3808e84cc3", &(0x7f0000000580)=""/166) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x12, 0x614aa976, 0x3, 0x4faf, 0x8, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1}, 0x48) io_setup(0xfb, &(0x7f0000000140)=0x0) r9 = openat$full(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_submit(r8, 0x1, &(0x7f0000000400)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r9, 0x0}]) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000003c0)=ANY=[@ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000040)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r7, &(0x7f0000000080), 0x0}, 0x20) timer_create(0x3, 0x0, 0x0) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000180)) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 448.683843ms ago: executing program 1 (id=625): bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x0, 0x0, 0x6) (async) r1 = socket$can_bcm(0x1d, 0x2, 0x2) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYRES16=0x0, @ANYRES8=r1, @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x54, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x2, 0x7, 0x4}, 0x2e) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x15, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000100850000000100000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000002c0)='kfree\x00', r4}, 0x10) (async) r5 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r5, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="180200000200000019c10000000000008500"/28, @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000820000009500000000000000"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x0, 0xe, 0x0, &(0x7f0000000000)="e06921e8682d85ff9782762f86dd", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) r8 = perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = getpid() perf_event_open(&(0x7f0000001200)={0x2, 0x80, 0x0, 0x40, 0x81, 0x2, 0x0, 0x0, 0x4, 0x4, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_config_ext={0x21, 0x9}, 0x2, 0x0, 0x8, 0x5, 0x0, 0x9b1, 0xffe1, 0x0, 0x8001, 0x0, 0x40}, r9, 0xa, r8, 0x2) perf_event_open(&(0x7f0000000340)={0x3, 0x80, 0x3, 0x93, 0x91, 0x1, 0x0, 0xffffffffffffffff, 0x40000, 0x7, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x2, 0x4, @perf_bp={&(0x7f0000000080)}, 0x200, 0x8, 0x4, 0x0, 0x7fff, 0x2, 0x7ff, 0x0, 0x4, 0x0, 0x3}, r9, 0x10000000007, 0xffffffffffffffff, 0x8) (async) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x5, 0x3, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x5, [@var={0x3, 0x0, 0x0, 0x11, 0x3}, @typedef={0x0, 0x0, 0x0, 0x4}, @struct={0x0, 0x1, 0x0, 0x4, 0x1, 0x0, [{0x0, 0x2}]}]}, {0x0, [0x0, 0x0, 0x2e]}}, 0x0, 0x51}, 0x20) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r11 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="8500000023000000350000000000000085000000a000000095000000000000001b90b31a08f54ff40571eda5c56ad924a10c7b1e6003c9325fea577f8e56fe212b358f1d0838c8119ed74e74552ce4e6c8093375e35c8250f448a6a31260c2f9fbb70400000000000000b08b7aab5fd5d24dcff1ca14025b73c2da8f550900000000000000c340b111fcee90d6d90100000001000000babdee5b76635ce4f35f985e434196b5699ba66b9cb05e5259a1f61cafa3586a2228c4581dc29931a4ca0f4967706596014dc06b99b9c9ba49b34e516e0baed5cca7aeeb0d5dcdce0900000000000100ef363c9f5ca80b125dabc3adab1179388e76c44e7328318078af6a0a1a248a7b2ca42a05f4b033e9d8a7880a116a60bd69a463a73745e8950a8e03000000000000008c4e7c6037b670a823e59267ae980c73ba09410000000000000000000000000000000042f7ae3d341b2a8e0c1681be5db38db3bf61f7ede5efbf55df1ee21b8e21b7a4a0bbc1d6a5483477260c03bf09959a71dac6b9f67019fe6ddacf40aed79f018c9fb9e9fc69425618b0d46811cff20f7b13e3e35c670b87bae02b63ebb47ca8e16be95b2ec5bde931fd425b3944783b922733b688b96e998bf39a2213f05ef1aad563d787d58d37cf2236ee2f00decc43c496fe7b27f0d98c0754bc7c305726ef314eb082d2989f2481d71f96c2d175145cec2251d7c080c782af32edd0ae00d83cfcd3d5a7abb0175a6be378acd0bbdc5c"], &(0x7f0000000140)='GPL\x00', 0x0, 0xa0, &(0x7f0000000180)=""/153}, 0x15) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r11, 0x0, 0xe, 0x2000000, &(0x7f00000000c0)="61df712bc884fed5722780b6c2a7", 0x0, 0xa68}, 0x28) 447.191194ms ago: executing program 3 (id=626): r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000006bc0), 0x509700, 0x0) r1 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000580)={'veth1_virt_wifi\x00', 0x0}) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000000)=0x428f, 0x23) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, 0x2, 0x3, 0x3, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFQA_CFG_PARAMS={0x9, 0x2, {0x8, 0x1}}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x9}]}, 0x28}, 0x1, 0x0, 0x0, 0x804}, 0x0) bind$packet(r1, &(0x7f0000000080)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$packet(r1, &(0x7f00000000c0)="bb4200eae3e4ea5bcb80962de6bd", 0xe, 0x4, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000b80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x12040, 0x0) read$eventfd(r0, &(0x7f0000000180), 0x8) 446.982594ms ago: executing program 4 (id=627): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000001080), 0x1, 0x4e2, &(0x7f0000000b80)="$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") r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000005c0)) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x48942, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x100000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x0, 0x10001}, 0x108010, 0xfffffffffffffffe, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) lsm_set_self_attr(0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$ENABLE_STATS(0x20, &(0x7f0000000180), 0x4) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x20200) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="18010000200000000000000000000000850000006d0000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='block_plug\x00', r3}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x5, 0x8, 0x7fe2, 0x1, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000400)={{r4}, &(0x7f0000000200), &(0x7f00000001c0)='%pS \x00'}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYRESDEC, @ANYRES32=r4, @ANYRES16=r1], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='signal_generate\x00', r5}, 0x10) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000180)={@map=0x1, 0xffffffffffffffff, 0x2, 0x8000000, 0x0, @prog_id}, 0xffffff91) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) unshare(0xa020480) r6 = socket(0x10, 0x3, 0x0) write(r6, &(0x7f00000000c0)="240000005a001f001007f4f9002304000a04f51108000500020100020800038005000000", 0x24) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$EXT4_IOC_MIGRATE(r1, 0x6609) 372.97754ms ago: executing program 3 (id=628): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) recvmsg(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async, rerun: 32) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a05dd4242"], 0xfdef) (async, rerun: 32) close(r1) (rerun: 32) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000), 0xfdef) r3 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r3, &(0x7f0000000040)=[{{&(0x7f0000000440)={0xa, 0x0, 0x0, @dev}, 0x1c, 0x0, 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="12000000000000002900000004"], 0x1f8}}, {{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000880)="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", 0x1000}], 0x1, &(0x7f0000003ac0)=[@dontfrag={{0x14, 0x29, 0x3e, 0x8000}}, @hopopts={{0x28, 0x29, 0x36, {0x32, 0x1, '\x00', [@enc_lim={0x4, 0x1, 0x5}, @jumbo={0xc2, 0x4, 0x8}, @jumbo={0xc2, 0x4, 0x100}]}}}, @hopopts_2292={{0x1130, 0x29, 0x36, {0x5e, 0x222, '\x00', [@calipso={0x7, 0x10, {0x2, 0x2, 0x10, 0x6bc0, [0x10]}}, @generic={0xf9, 0xbd, "9d623af1aa259f3976d8e5e01df58fe800b9185ea455f1266f59b06deeea6d94c92effa02952e55b1b322abec9efb87c91e9b496da6d14140731b6f34ecd6acb0ede8df9be43804f84ed8f85c9ffe8cfbfda7492957b453eb50bca6f6bea87e175872572394496b82a5c1d3655934d0b6b743e11e5539210af4cf97610d14c12e1f623f4d3d3ff609cea4117e42572314b8124d8fc346246bb85a3cf94cb341fde3efa451cadfeacab92ede8b5ec0428d55ca0028fa60bfc1c54a40bcf"}, @pad1, @enc_lim={0x4, 0x1, 0xd3}, @calipso={0x7, 0x30, {0x1, 0xa, 0xc, 0x0, [0x401, 0x5, 0x7f, 0x3, 0x10000]}}, @generic={0xf, 0x1000, "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"}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @pad1]}}}, @tclass={{0x14, 0x29, 0x43, 0x1ff}}, @hoplimit={{0x14, 0x29, 0x34, 0x8f}}, @rthdr={{0x78, 0x29, 0x39, {0x87, 0xc, 0x0, 0x14, 0x0, [@private1, @remote, @remote, @ipv4={'\x00', '\xff\xff', @loopback}, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @remote]}}}, @hopopts_2292={{0x28, 0x29, 0x36, {0x2c, 0x1, '\x00', [@jumbo={0xc2, 0x4, 0x80000001}, @ra={0x5, 0x2, 0x6}]}}}], 0x1240}}], 0x2, 0x801) 241.43408ms ago: executing program 1 (id=629): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, 0x0, 0x0, 0x4}, 0x90) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x381, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x5032}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[], 0x14}}, 0x0) io_setup(0xbf, 0x0) io_submit(0x0, 0x1, &(0x7f00000001c0)=[&(0x7f00000000c0)={0x20000000, 0x0, 0x7, 0x8, 0x0, r0, &(0x7f0000000080)='\x00\x00', 0x2}]) 241.09413ms ago: executing program 3 (id=630): socket$nl_generic(0x10, 0x3, 0x10) r0 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x1}, 0x62) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000f3ffffb0150000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000040)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}, {@journal_dev={'journal_dev', 0x3d, 0x8000}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@minixdf}, {@resgid}, {@grpquota}, {@usrjquota}]}, 0x3, 0x44a, &(0x7f0000000400)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) open_by_handle_at(r3, &(0x7f0000000040)=@reiserfs_2={0x8, 0x2, {0xb}}, 0x0) 212.216063ms ago: executing program 0 (id=631): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_type(r2, &(0x7f0000000040), 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000400)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0xc03, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0xa0}}, 0x0) io_setup(0x3fe, &(0x7f0000000180)=0x0) pipe(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), 0xffffffffffffffff) r8 = socket$inet_udp(0x2, 0x2, 0x0) close(r8) socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="02"], 0x10}}, 0x0) write$binfmt_misc(r7, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r6, 0x0, r8, 0x0, 0x4ffe6, 0x0) io_submit(r5, 0x1, &(0x7f0000000300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f0000000080)=' ', 0x20000081}]) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) r9 = syz_clone(0x2011, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) getsockopt$inet6_buf(r7, 0x29, 0x2a, &(0x7f00000004c0)=""/246, &(0x7f0000000140)=0xf6) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x10001}, 0x7, 0x8004, 0x10100000, 0x7}, r9, 0x0, 0xffffffffffffffff, 0x0) r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) close_range(r10, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=ANY=[@ANYBLOB="1808110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090100000000009500000000000000b7020000000000007b9af8ff00000000b509020000000000dbaaf8fff1000000bf8200000000000007080000f8ffffffbfa400000000000007090000f0ffffffc70200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f1ff76000000bf9800000000000056080000000000008500000007000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 636.25µs ago: executing program 1 (id=632): r0 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000409780540f5342493b71aa910185758c25ed1f706d8a049af8d6239fe567138cf87f43fc411715ab7b4ba6fc44add18fda910e9c9ac4e9e699e54d3203f9146e899252b16c023a47ac34bf8e21d48347400d381301fcd617abdb7e6271bbd8df521939d91e1866014ac3dd46a737c0253c1bda9f0337cd8b499e9887c163760e353c09dcee91eaf7e80f92e86f265736b84e118fddfe"], &(0x7f0000001f80)=""/226, 0x26, 0x81, 0x2}, 0x20) 0s ago: executing program 1 (id=633): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x800000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) perf_event_open(0x0, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./file2\x00', 0x8000c2, &(0x7f0000000000), 0x1, 0x5ba, &(0x7f0000000140)="$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") kernel console output (not intermixed with test programs): yz.4.270: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 49.415721][ T4435] EXT4-fs (loop4): Remounting filesystem read-only [ 49.432241][ T3606] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.454056][ T3597] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.526691][ T4442] loop3: detected capacity change from 0 to 1764 [ 49.536524][ T4442] iso9660: Unknown parameter '0x0000000000000005' [ 49.556144][ T4442] netlink: 'syz.3.273': attribute type 13 has an invalid length. [ 49.563892][ T4442] netlink: 'syz.3.273': attribute type 58 has an invalid length. [ 49.571847][ T4442] netlink: 152 bytes leftover after parsing attributes in process `syz.3.273'. [ 49.801337][ T4449] loop3: detected capacity change from 0 to 8192 [ 49.997357][ T4458] FAULT_INJECTION: forcing a failure. [ 49.997357][ T4458] name failslab, interval 1, probability 0, space 0, times 0 [ 50.010093][ T4458] CPU: 1 UID: 0 PID: 4458 Comm: syz.3.277 Not tainted 6.11.0-rc3-syzkaller-00060-gd07b43284ab3 #0 [ 50.020695][ T4458] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 50.030761][ T4458] Call Trace: [ 50.034123][ T4458] [ 50.037128][ T4458] dump_stack_lvl+0xf2/0x150 [ 50.041818][ T4458] dump_stack+0x15/0x20 [ 50.045992][ T4458] should_fail_ex+0x229/0x230 [ 50.050710][ T4458] ? vm_area_dup+0x98/0x130 [ 50.055277][ T4458] should_failslab+0x8f/0xb0 [ 50.059950][ T4458] kmem_cache_alloc_noprof+0x4c/0x290 [ 50.065339][ T4458] vm_area_dup+0x98/0x130 [ 50.069712][ T4458] copy_mm+0x60b/0x10e0 [ 50.073937][ T4458] copy_process+0xee1/0x1fc0 [ 50.078535][ T4458] kernel_clone+0x167/0x5e0 [ 50.083135][ T4458] ? vfs_write+0x5a5/0x900 [ 50.087601][ T4458] __x64_sys_clone+0xe8/0x120 [ 50.092471][ T4458] x64_sys_call+0x2d23/0x2d60 [ 50.097268][ T4458] do_syscall_64+0xc9/0x1c0 [ 50.101810][ T4458] ? clear_bhb_loop+0x55/0xb0 [ 50.106587][ T4458] ? clear_bhb_loop+0x55/0xb0 [ 50.111358][ T4458] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.117345][ T4458] RIP: 0033:0x7f7ee75099b9 [ 50.121908][ T4458] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 50.141561][ T4458] RSP: 002b:00007f7ee6186fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 50.150050][ T4458] RAX: ffffffffffffffda RBX: 00007f7ee76a5f80 RCX: 00007f7ee75099b9 [ 50.152650][ T4460] bond0: entered promiscuous mode [ 50.158021][ T4458] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 50.158039][ T4458] RBP: 00007f7ee6187090 R08: 0000000000000000 R09: 0000000000000000 [ 50.158080][ T4458] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 50.163089][ T4460] bond_slave_0: entered promiscuous mode [ 50.171037][ T4458] R13: 0000000000000000 R14: 00007f7ee76a5f80 R15: 00007ffef4b301a8 [ 50.171058][ T4458] [ 50.204123][ T4460] bond_slave_1: entered promiscuous mode [ 50.207213][ T4464] netlink: 'syz.2.280': attribute type 9 has an invalid length. [ 50.247950][ T4469] FAULT_INJECTION: forcing a failure. [ 50.247950][ T4469] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 50.261289][ T4469] CPU: 1 UID: 0 PID: 4469 Comm: syz.2.284 Not tainted 6.11.0-rc3-syzkaller-00060-gd07b43284ab3 #0 [ 50.272142][ T4469] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 50.282193][ T4469] Call Trace: [ 50.285467][ T4469] [ 50.288388][ T4469] dump_stack_lvl+0xf2/0x150 [ 50.292989][ T4469] dump_stack+0x15/0x20 [ 50.297172][ T4469] should_fail_ex+0x229/0x230 [ 50.301911][ T4469] should_fail+0xb/0x10 [ 50.306169][ T4469] should_fail_usercopy+0x1a/0x20 [ 50.311210][ T4469] _copy_to_user+0x1e/0xa0 [ 50.315725][ T4469] simple_read_from_buffer+0xa0/0x110 [ 50.321109][ T4469] proc_fail_nth_read+0xfc/0x140 [ 50.326180][ T4469] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 50.331799][ T4469] vfs_read+0x1a2/0x6e0 [ 50.336003][ T4469] ? __rcu_read_unlock+0x4e/0x70 [ 50.340939][ T4469] ? __fget_files+0x1da/0x210 [ 50.345729][ T4469] ksys_read+0xeb/0x1b0 [ 50.350009][ T4469] __x64_sys_read+0x42/0x50 [ 50.354609][ T4469] x64_sys_call+0x27d3/0x2d60 [ 50.359317][ T4469] do_syscall_64+0xc9/0x1c0 [ 50.363881][ T4469] ? clear_bhb_loop+0x55/0xb0 [ 50.368569][ T4469] ? clear_bhb_loop+0x55/0xb0 [ 50.373314][ T4469] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.379210][ T4469] RIP: 0033:0x7f5bc50d83fc [ 50.383782][ T4469] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8d 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8d 02 00 48 [ 50.403526][ T4469] RSP: 002b:00007f5bc3d57030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 50.411944][ T4469] RAX: ffffffffffffffda RBX: 00007f5bc5275f80 RCX: 00007f5bc50d83fc [ 50.419976][ T4469] RDX: 000000000000000f RSI: 00007f5bc3d570a0 RDI: 0000000000000004 [ 50.427943][ T4469] RBP: 00007f5bc3d57090 R08: 0000000000000000 R09: 0000000000000000 [ 50.435909][ T4469] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 50.443875][ T4469] R13: 0000000000000000 R14: 00007f5bc5275f80 R15: 00007ffd79abd478 [ 50.451892][ T4469] [ 50.518240][ T4478] loop0: detected capacity change from 0 to 256 [ 50.531796][ T4478] vfat: Bad value for 'fmask' [ 50.554419][ T4472] program syz.3.283 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 50.579614][ T4478] loop0: detected capacity change from 0 to 1764 [ 50.586133][ T4480] loop2: detected capacity change from 0 to 512 [ 50.600695][ T4478] iso9660: Bad value for 'gid' [ 50.605515][ T4478] iso9660: Bad value for 'gid' [ 50.623870][ T4480] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2240: inode #15: comm syz.2.287: corrupted in-inode xattr: invalid ea_ino [ 50.642298][ T4478] 9pnet_fd: Insufficient options for proto=fd [ 50.648734][ T4480] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.287: couldn't read orphan inode 15 (err -117) [ 50.662323][ T4480] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.749560][ T4490] loop4: detected capacity change from 0 to 128 [ 50.805679][ T4459] bond0: left promiscuous mode [ 50.810557][ T4459] bond_slave_0: left promiscuous mode [ 50.816134][ T4459] bond_slave_1: left promiscuous mode [ 50.841744][ T4495] loop1: detected capacity change from 0 to 128 [ 50.870984][ T4497] netlink: 12 bytes leftover after parsing attributes in process `syz.3.292'. [ 50.902798][ T4499] loop3: detected capacity change from 0 to 512 [ 50.909761][ T4499] ext4: Unknown parameter 'noacl' [ 50.982286][ T4504] loop3: detected capacity change from 0 to 512 [ 51.002060][ T4508] loop1: detected capacity change from 0 to 512 [ 51.023620][ T4508] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 51.038514][ T4508] ext4 filesystem being mounted at /69/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 51.083966][ T3259] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 51.128334][ T4518] loop3: detected capacity change from 0 to 512 [ 51.140659][ T4518] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 51.176607][ T4518] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.299: bg 0: block 64: padding at end of block bitmap is not set [ 51.191150][ T4518] EXT4-fs error (device loop3): ext4_acquire_dquot:6848: comm syz.3.299: Failed to acquire dquot type 0 [ 51.202902][ T4518] EXT4-fs (loop3): 1 truncate cleaned up [ 51.208906][ T4518] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.233891][ T3258] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.321270][ T4534] net_ratelimit: 10 callbacks suppressed [ 51.321329][ T4534] dccp_invalid_packet: P.Data Offset(0) too small [ 51.335646][ T4534] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=512 sclass=netlink_route_socket pid=4534 comm=syz.1.305 [ 51.340436][ T4536] loop3: detected capacity change from 0 to 512 [ 51.357806][ T4536] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 51.368458][ T4536] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.306: invalid indirect mapped block 8 (level 2) [ 51.378262][ T4539] loop1: detected capacity change from 0 to 128 [ 51.389057][ T4536] EXT4-fs (loop3): Remounting filesystem read-only [ 51.397590][ T4536] EXT4-fs (loop3): 1 truncate cleaned up [ 51.403778][ T3544] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.403878][ T4536] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.425604][ T4536] SELinux: (dev loop3, type ext4) getxattr errno 5 [ 51.432453][ T4536] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.479559][ T4543] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 51.486210][ T4543] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 51.494130][ T4543] vhci_hcd vhci_hcd.0: Device attached [ 51.501616][ T4544] vhci_hcd: cannot find a urb of seqnum 0 max seqnum 0 [ 51.510162][ T3285] vhci_hcd: stop threads [ 51.514438][ T3285] vhci_hcd: release socket [ 51.518844][ T3285] vhci_hcd: disconnect device [ 51.687779][ T4560] bond1: entered allmulticast mode [ 51.693076][ T4560] 8021q: adding VLAN 0 to HW filter on device bond1 [ 51.701558][ T4560] bridge0: port 3(bond1) entered blocking state [ 51.707968][ T4560] bridge0: port 3(bond1) entered disabled state [ 51.716563][ T4560] bond1: entered promiscuous mode [ 51.721761][ T4560] bridge0: port 3(bond1) entered blocking state [ 51.728063][ T4560] bridge0: port 3(bond1) entered forwarding state [ 51.829732][ T4566] loop4: detected capacity change from 0 to 512 [ 51.846087][ T4566] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 51.859047][ T4566] ext4 filesystem being mounted at /28/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 51.888062][ T3597] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 51.940596][ T4575] loop4: detected capacity change from 0 to 1024 [ 51.957500][ T4575] loop4: detected capacity change from 0 to 256 [ 51.958303][ T4576] loop0: detected capacity change from 0 to 512 [ 51.970728][ T4576] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 51.983383][ T4576] EXT4-fs (loop0): 1 truncate cleaned up [ 51.990371][ T4576] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.070289][ T3382] bridge0: port 3(bond1) entered disabled state [ 52.081077][ T4581] loop4: detected capacity change from 0 to 128 [ 52.367921][ T4594] loop2: detected capacity change from 0 to 1024 [ 52.388538][ T4594] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.425937][ T4593] usb usb9: usbfs: process 4593 (syz.4.323) did not claim interface 0 before use [ 52.459351][ T29] kauditd_printk_skb: 74 callbacks suppressed [ 52.459403][ T29] audit: type=1326 audit(1723706247.998:912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4592 comm="syz.2.324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bc50d99b9 code=0x7ffc0000 [ 52.467618][ T4602] loop1: detected capacity change from 0 to 1024 [ 52.488862][ T29] audit: type=1326 audit(1723706247.998:913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4592 comm="syz.2.324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bc50d99b9 code=0x7ffc0000 [ 52.503524][ T4602] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 52.518494][ T29] audit: type=1326 audit(1723706247.998:914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4592 comm="syz.2.324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f5bc50d99b9 code=0x7ffc0000 [ 52.529320][ T4602] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (38281!=20869) [ 52.529910][ T4602] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 52.552697][ T29] audit: type=1326 audit(1723706247.998:915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4592 comm="syz.2.324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bc50d99b9 code=0x7ffc0000 [ 52.562236][ T4602] EXT4-fs (loop1): external journal device major/minor numbers have changed [ 52.572292][ T29] audit: type=1326 audit(1723706247.998:916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4592 comm="syz.2.324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5bc50d99b9 code=0x7ffc0000 [ 52.595528][ T4602] EXT4-fs (loop1): filesystem has both journal inode and journal device! [ 52.604120][ T29] audit: type=1326 audit(1723706247.998:917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4592 comm="syz.2.324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bc50d99b9 code=0x7ffc0000 [ 52.604142][ T29] audit: type=1326 audit(1723706247.998:918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4592 comm="syz.2.324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bc50d99b9 code=0x7ffc0000 [ 52.604210][ T29] audit: type=1326 audit(1723706247.998:919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4592 comm="syz.2.324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f5bc50d99b9 code=0x7ffc0000 [ 52.604237][ T29] audit: type=1326 audit(1723706247.998:920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4592 comm="syz.2.324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bc50d99b9 code=0x7ffc0000 [ 52.728743][ T29] audit: type=1326 audit(1723706247.998:921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4592 comm="syz.2.324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bc50d99b9 code=0x7ffc0000 [ 52.770751][ T4602] netlink: 'syz.1.326': attribute type 10 has an invalid length. [ 52.781258][ T4602] netlink: 'syz.1.326': attribute type 10 has an invalid length. [ 52.809317][ T4606] loop1: detected capacity change from 0 to 512 [ 52.817466][ T4606] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 52.836555][ T4606] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.328: bg 0: block 64: padding at end of block bitmap is not set [ 52.850978][ T4606] EXT4-fs error (device loop1): ext4_acquire_dquot:6848: comm syz.1.328: Failed to acquire dquot type 0 [ 52.865340][ T4606] EXT4-fs (loop1): 1 truncate cleaned up [ 52.875492][ T4606] EXT4-fs error (device loop1): ext4_acquire_dquot:6848: comm syz.1.328: Failed to acquire dquot type 1 [ 52.951365][ T4619] loop1: detected capacity change from 0 to 128 [ 53.058466][ T4635] netlink: 52 bytes leftover after parsing attributes in process `syz.0.338'. [ 53.067500][ T4635] netlink: 52 bytes leftover after parsing attributes in process `syz.0.338'. [ 53.077809][ T4635] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 53.149405][ T4642] loop1: detected capacity change from 0 to 512 [ 53.161832][ T4642] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2240: inode #15: comm syz.1.340: corrupted in-inode xattr: invalid ea_ino [ 53.170168][ T4641] loop0: detected capacity change from 0 to 512 [ 53.183264][ T4642] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.340: couldn't read orphan inode 15 (err -117) [ 53.188588][ T4641] ext4 filesystem being mounted at /45/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 53.236706][ T4647] loop3: detected capacity change from 0 to 2048 [ 53.274896][ T4647] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 53.281341][ T4655] loop2: detected capacity change from 0 to 2048 [ 53.291343][ T4647] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2 with error 28 [ 53.308410][ T4647] EXT4-fs (loop3): This should not happen!! Data will be lost [ 53.308410][ T4647] [ 53.318097][ T4647] EXT4-fs (loop3): Total free blocks count 0 [ 53.324082][ T4647] EXT4-fs (loop3): Free/Dirty block details [ 53.324096][ T4647] EXT4-fs (loop3): free_blocks=2415919104 [ 53.324111][ T4647] EXT4-fs (loop3): dirty_blocks=16 [ 53.340911][ T4647] EXT4-fs (loop3): Block reservation details [ 53.346931][ T4647] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 53.358149][ T4655] netlink: 'syz.2.343': attribute type 2 has an invalid length. [ 53.410465][ T4668] loop3: detected capacity change from 0 to 164 [ 53.427867][ T4668] rock: corrupted directory entry. extent=28, offset=0, size=16777216 [ 53.467585][ T4675] loop2: detected capacity change from 0 to 128 [ 53.605847][ T3258] rock: corrupted directory entry. extent=28, offset=0, size=16777216 [ 53.633375][ T3258] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 53.640911][ T3258] rock: corrupted directory entry. extent=28, offset=0, size=16777216 [ 53.647306][ T4677] loop1: detected capacity change from 0 to 32768 [ 53.655981][ T3258] rock: corrupted directory entry. extent=28, offset=0, size=16777216 [ 53.666987][ T3258] rock: corrupted directory entry. extent=28, offset=0, size=16777216 [ 53.677010][ T3258] iso9660: Corrupted directory entry in block 3 of inode 1856 [ 53.684980][ T4677] loop1: p1 p3 < > [ 53.687069][ T3258] VFS: Lookup of '' in iso9660 loop3 would have caused loop [ 53.696378][ T3258] VFS: Lookup of '' in iso9660 loop3 would have caused loop [ 53.707127][ T2960] loop1: p1 p3 < > [ 53.733697][ T4677] SELinux: Context system_u:object_r:ssh_keygen_exec_t:s0 is not valid (left unmapped). [ 53.817494][ T4689] usb usb9: usbfs: process 4689 (syz.2.354) did not claim interface 0 before use [ 53.820519][ T4691] FAULT_INJECTION: forcing a failure. [ 53.820519][ T4691] name failslab, interval 1, probability 0, space 0, times 0 [ 53.839415][ T4691] CPU: 1 UID: 0 PID: 4691 Comm: syz.1.356 Not tainted 6.11.0-rc3-syzkaller-00060-gd07b43284ab3 #0 [ 53.850132][ T4691] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 53.860184][ T4691] Call Trace: [ 53.863448][ T4691] [ 53.866430][ T4691] dump_stack_lvl+0xf2/0x150 [ 53.871057][ T4691] dump_stack+0x15/0x20 [ 53.875227][ T4691] should_fail_ex+0x229/0x230 [ 53.879928][ T4691] ? __get_vm_area_node+0xf7/0x1b0 [ 53.885033][ T4691] should_failslab+0x8f/0xb0 [ 53.889632][ T4691] __kmalloc_cache_node_noprof+0x50/0x2b0 [ 53.895389][ T4691] __get_vm_area_node+0xf7/0x1b0 [ 53.900324][ T4691] __vmalloc_node_range_noprof+0x2eb/0xef0 [ 53.906149][ T4691] ? bpf_prog_alloc_no_stats+0x49/0x290 [ 53.911785][ T4691] ? __rcu_read_unlock+0x4e/0x70 [ 53.916849][ T4691] ? bpf_prog_alloc_no_stats+0x49/0x290 [ 53.922521][ T4691] __vmalloc_noprof+0x5e/0x70 [ 53.927254][ T4691] ? bpf_prog_alloc_no_stats+0x49/0x290 [ 53.933388][ T4691] bpf_prog_alloc_no_stats+0x49/0x290 [ 53.938833][ T4691] ? bpf_prog_alloc+0x28/0x150 [ 53.943606][ T4691] bpf_prog_alloc+0x3a/0x150 [ 53.948279][ T4691] bpf_prog_load+0x4d1/0x1060 [ 53.953030][ T4691] __sys_bpf+0x463/0x7a0 [ 53.957301][ T4691] __x64_sys_bpf+0x43/0x50 [ 53.961792][ T4691] x64_sys_call+0x2625/0x2d60 [ 53.966475][ T4691] do_syscall_64+0xc9/0x1c0 [ 53.971057][ T4691] ? clear_bhb_loop+0x55/0xb0 [ 53.975820][ T4691] ? clear_bhb_loop+0x55/0xb0 [ 53.980558][ T4691] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.986466][ T4691] RIP: 0033:0x7fcb0bce99b9 [ 53.990917][ T4691] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 54.010520][ T4691] RSP: 002b:00007fcb0a967038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 54.018935][ T4691] RAX: ffffffffffffffda RBX: 00007fcb0be85f80 RCX: 00007fcb0bce99b9 [ 54.026918][ T4691] RDX: 0000000000000090 RSI: 0000000020000540 RDI: 0000000000000005 [ 54.034988][ T4691] RBP: 00007fcb0a967090 R08: 0000000000000000 R09: 0000000000000000 [ 54.043060][ T4691] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 54.051047][ T4691] R13: 0000000000000001 R14: 00007fcb0be85f80 R15: 00007ffcfc6f3708 [ 54.059092][ T4691] [ 54.062686][ T4691] syz.1.356: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=syz1,mems_allowed=0 [ 54.079079][ T4691] CPU: 1 UID: 0 PID: 4691 Comm: syz.1.356 Not tainted 6.11.0-rc3-syzkaller-00060-gd07b43284ab3 #0 [ 54.089695][ T4691] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 54.099748][ T4691] Call Trace: [ 54.103022][ T4691] [ 54.105949][ T4691] dump_stack_lvl+0xf2/0x150 [ 54.110565][ T4691] dump_stack+0x15/0x20 [ 54.114774][ T4691] warn_alloc+0x145/0x1b0 [ 54.119133][ T4691] ? __kmalloc_cache_node_noprof+0x50/0x2b0 [ 54.125052][ T4691] __vmalloc_node_range_noprof+0x310/0xef0 [ 54.130864][ T4691] ? __rcu_read_unlock+0x4e/0x70 [ 54.135960][ T4691] ? bpf_prog_alloc_no_stats+0x49/0x290 [ 54.141536][ T4691] __vmalloc_noprof+0x5e/0x70 [ 54.146223][ T4691] ? bpf_prog_alloc_no_stats+0x49/0x290 [ 54.151787][ T4691] bpf_prog_alloc_no_stats+0x49/0x290 [ 54.157173][ T4691] ? bpf_prog_alloc+0x28/0x150 [ 54.161972][ T4691] bpf_prog_alloc+0x3a/0x150 [ 54.166604][ T4691] bpf_prog_load+0x4d1/0x1060 [ 54.171375][ T4691] __sys_bpf+0x463/0x7a0 [ 54.175624][ T4691] __x64_sys_bpf+0x43/0x50 [ 54.180072][ T4691] x64_sys_call+0x2625/0x2d60 [ 54.184751][ T4691] do_syscall_64+0xc9/0x1c0 [ 54.189328][ T4691] ? clear_bhb_loop+0x55/0xb0 [ 54.194016][ T4691] ? clear_bhb_loop+0x55/0xb0 [ 54.198694][ T4691] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 54.204596][ T4691] RIP: 0033:0x7fcb0bce99b9 [ 54.209008][ T4691] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 54.228623][ T4691] RSP: 002b:00007fcb0a967038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 54.237091][ T4691] RAX: ffffffffffffffda RBX: 00007fcb0be85f80 RCX: 00007fcb0bce99b9 [ 54.245148][ T4691] RDX: 0000000000000090 RSI: 0000000020000540 RDI: 0000000000000005 [ 54.253111][ T4691] RBP: 00007fcb0a967090 R08: 0000000000000000 R09: 0000000000000000 [ 54.261095][ T4691] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 54.269069][ T4691] R13: 0000000000000001 R14: 00007fcb0be85f80 R15: 00007ffcfc6f3708 [ 54.277056][ T4691] [ 54.280151][ T4691] Mem-Info: [ 54.283257][ T4691] active_anon:3631 inactive_anon:70 isolated_anon:0 [ 54.283257][ T4691] active_file:13569 inactive_file:3089 isolated_file:0 [ 54.283257][ T4691] unevictable:0 dirty:199 writeback:2 [ 54.283257][ T4691] slab_reclaimable:2577 slab_unreclaimable:14190 [ 54.283257][ T4691] mapped:20858 shmem:349 pagetables:663 [ 54.283257][ T4691] sec_pagetables:0 bounce:0 [ 54.283257][ T4691] kernel_misc_reclaimable:0 [ 54.283257][ T4691] free:1905508 free_pcp:7891 free_cma:0 [ 54.328186][ T4691] Node 0 active_anon:14524kB inactive_anon:280kB active_file:54276kB inactive_file:12240kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:83432kB dirty:796kB writeback:8kB shmem:1396kB writeback_tmp:0kB kernel_stack:2832kB pagetables:2652kB sec_pagetables:0kB all_unreclaimable? no [ 54.356051][ T4691] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 54.382952][ T4691] lowmem_reserve[]: 0 2866 7844 0 [ 54.388079][ T4691] Node 0 DMA32 free:2950408kB boost:0kB min:4136kB low:7068kB high:10000kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2953940kB mlocked:0kB bounce:0kB free_pcp:3532kB local_pcp:0kB free_cma:0kB [ 54.416635][ T4691] lowmem_reserve[]: 0 0 4978 0 [ 54.421463][ T4691] Node 0 Normal free:4656264kB boost:0kB min:7184kB low:12280kB high:17376kB reserved_highatomic:0KB active_anon:14408kB inactive_anon:280kB active_file:54276kB inactive_file:12240kB unevictable:0kB writepending:804kB present:5242880kB managed:5098208kB mlocked:0kB bounce:0kB free_pcp:28092kB local_pcp:21788kB free_cma:0kB [ 54.448091][ T4694] loop4: detected capacity change from 0 to 512 [ 54.451873][ T4691] lowmem_reserve[]: 0 0 0 0 [ 54.462795][ T4691] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 54.475562][ T4691] Node 0 DMA32: 4*4kB (M) 3*8kB (M) 2*16kB (M) 4*32kB (M) 3*64kB (M) 3*128kB (M) 4*256kB (M) 3*512kB (M) 2*1024kB (M) 2*2048kB (M) 718*4096kB (M) = 2950408kB [ 54.476028][ T4694] ext4 filesystem being mounted at /35/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 54.491652][ T4691] Node 0 Normal: 260*4kB (UM) 124*8kB (UE) 29*16kB (U) 19*32kB (U) 6*64kB (UE) 13*128kB (UM) 40*256kB (UM) 44*512kB (UM) 38*1024kB (UME) 14*2048kB (M) 1111*4096kB (UM) = 4656160kB [ 54.520166][ T4691] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 54.529483][ T4691] 17110 total pagecache pages [ 54.534150][ T4691] 54 pages in swap cache [ 54.538466][ T4691] Free swap = 124188kB [ 54.542609][ T4691] Total swap = 124996kB [ 54.546846][ T4691] 2097051 pages RAM [ 54.550674][ T4691] 0 pages HighMem/MovableOnly [ 54.555372][ T4691] 80174 pages reserved [ 54.574885][ T4699] netlink: 8 bytes leftover after parsing attributes in process `syz.0.357'. [ 54.583703][ T4699] netlink: 44 bytes leftover after parsing attributes in process `syz.0.357'. [ 54.594980][ T4699] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 54.603753][ T4701] IPv6: NLM_F_CREATE should be specified when creating new route [ 54.612418][ T4701] netlink: 1 bytes leftover after parsing attributes in process `syz.1.359'. [ 54.676437][ T4716] loop1: detected capacity change from 0 to 128 [ 54.719793][ T4719] loop2: detected capacity change from 0 to 1024 [ 54.728063][ T4719] EXT4-fs: Ignoring removed nomblk_io_submit option [ 54.743081][ T4719] EXT4-fs (loop2): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 54.759936][ T3382] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.824265][ T4719] loop2: detected capacity change from 1024 to 0 [ 54.834085][ T3382] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.846368][ T4719] syz.2.365: attempt to access beyond end of device [ 54.846368][ T4719] loop2: rw=12288, sector=6, nr_sectors = 2 limit=0 [ 54.894298][ T4719] EXT4-fs error (device loop2): ext4_wait_block_bitmap:584: comm syz.2.365: Cannot read block bitmap - block_group = 0, block_bitmap = 3 [ 54.912104][ T4719] syz.2.365: attempt to access beyond end of device [ 54.912104][ T4719] loop2: rw=145409, sector=2, nr_sectors = 2 limit=0 [ 54.925405][ T4719] Buffer I/O error on dev loop2, logical block 1, lost sync page write [ 54.933985][ T4719] EXT4-fs (loop2): I/O error while writing superblock [ 54.934287][ T4731] syz.2.365: attempt to access beyond end of device [ 54.934287][ T4731] loop2: rw=12288, sector=32, nr_sectors = 2 limit=0 [ 54.940852][ T4719] EXT4-fs (loop2): Remounting filesystem read-only [ 54.972268][ T3382] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.018188][ T3544] syz-executor: attempt to access beyond end of device [ 55.018188][ T3544] loop2: rw=12288, sector=32, nr_sectors = 2 limit=0 [ 55.036707][ T3382] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.072228][ T4721] kmmpd-loop2: attempt to access beyond end of device [ 55.072228][ T4721] loop2: rw=14337, sector=128, nr_sectors = 2 limit=0 [ 55.085735][ T4721] Buffer I/O error on dev loop2, logical block 64, lost sync page write [ 55.128592][ T4725] chnl_net:caif_netlink_parms(): no params data found [ 55.195842][ T4725] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.202949][ T4725] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.211200][ T4725] bridge_slave_0: entered allmulticast mode [ 55.218031][ T4725] bridge_slave_0: entered promiscuous mode [ 55.225798][ T3382] bridge_slave_1: left allmulticast mode [ 55.231451][ T3382] bridge_slave_1: left promiscuous mode [ 55.237214][ T3382] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.275723][ T3382] bridge_slave_0: left allmulticast mode [ 55.281399][ T3382] bridge_slave_0: left promiscuous mode [ 55.287093][ T3382] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.511114][ T3382] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 55.565204][ T3382] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 55.629427][ T3382] bond0 (unregistering): Released all slaves [ 55.672710][ T4725] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.679885][ T4725] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.687139][ T4725] bridge_slave_1: entered allmulticast mode [ 55.693710][ T4725] bridge_slave_1: entered promiscuous mode [ 55.717670][ T4752] loop0: detected capacity change from 0 to 512 [ 55.728571][ T4725] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.737961][ T4752] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 55.745335][ T4725] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.747023][ T4752] EXT4-fs (loop0): couldn't mount as ext2 due to feature incompatibilities [ 55.816413][ T3382] hsr_slave_0: left promiscuous mode [ 55.825503][ T3382] hsr_slave_1: left promiscuous mode [ 55.831575][ T3382] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 55.839037][ T3382] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 55.852837][ T3382] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 55.860360][ T3382] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 55.877407][ T3382] veth1_macvtap: left promiscuous mode [ 55.882917][ T3382] veth0_macvtap: left promiscuous mode [ 55.888574][ T3382] veth1_vlan: left promiscuous mode [ 55.893942][ T3382] veth0_vlan: left promiscuous mode [ 55.984013][ T3382] team0 (unregistering): Port device team_slave_1 removed [ 55.993954][ T3382] team0 (unregistering): Port device team_slave_0 removed [ 56.035031][ T4725] team0: Port device team_slave_0 added [ 56.041908][ T4725] team0: Port device team_slave_1 added [ 56.066267][ T4725] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.073225][ T4725] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.099789][ T4725] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.115586][ T4725] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.122824][ T4725] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.148876][ T4725] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.197778][ T4786] loop0: detected capacity change from 0 to 128 [ 56.220190][ T4786] vfat: Unknown parameter 'ÿÿÿÿ' [ 56.283925][ T4786] loop0: detected capacity change from 0 to 512 [ 56.304279][ T4786] EXT4-fs (loop0): couldn't mount as ext3 due to feature incompatibilities [ 56.306073][ T4725] hsr_slave_0: entered promiscuous mode [ 56.354355][ T4725] hsr_slave_1: entered promiscuous mode [ 56.378510][ T4725] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 56.406055][ T4725] Cannot create hsr debugfs directory [ 56.517704][ T4747] chnl_net:caif_netlink_parms(): no params data found [ 56.716988][ T3382] IPVS: stop unused estimator thread 0... [ 56.920895][ T4823] netlink: 20 bytes leftover after parsing attributes in process `syz.0.383'. [ 56.934859][ T4823] ieee802154 phy0 wpan0: encryption failed: -22 [ 56.941774][ T4747] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.948956][ T4747] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.957735][ T4747] bridge_slave_0: entered allmulticast mode [ 56.964239][ T4747] bridge_slave_0: entered promiscuous mode [ 56.971384][ T4747] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.978455][ T4747] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.985688][ T4747] bridge_slave_1: entered allmulticast mode [ 56.992122][ T4747] bridge_slave_1: entered promiscuous mode [ 57.005715][ T4823] netlink: 72 bytes leftover after parsing attributes in process `syz.0.383'. [ 57.014637][ T4823] netlink: 72 bytes leftover after parsing attributes in process `syz.0.383'. [ 57.055569][ T4747] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.067360][ T4747] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.097757][ T3382] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.154963][ T3382] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.167798][ T4747] team0: Port device team_slave_0 added [ 57.189469][ T4747] team0: Port device team_slave_1 added [ 57.207521][ T3382] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.231809][ T4834] loop4: detected capacity change from 0 to 2048 [ 57.241550][ T4836] loop1: detected capacity change from 0 to 512 [ 57.248814][ T4747] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.255785][ T4747] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.281849][ T4747] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.307783][ T3382] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.319912][ T4836] ext4 filesystem being mounted at /95/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 57.332113][ T4747] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.339075][ T4747] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.365067][ T4747] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.412041][ T4725] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 57.453737][ T4852] loop1: detected capacity change from 0 to 1024 [ 57.461243][ T4725] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 57.482933][ T4855] netlink: 12 bytes leftover after parsing attributes in process `syz.0.394'. [ 57.484941][ T4852] ext4 filesystem being mounted at /96/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 57.492375][ T4725] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 57.509165][ T4855] netlink: 24 bytes leftover after parsing attributes in process `syz.0.394'. [ 57.528713][ T4747] hsr_slave_0: entered promiscuous mode [ 57.548321][ T4747] hsr_slave_1: entered promiscuous mode [ 57.549393][ T4859] loop4: detected capacity change from 0 to 4096 [ 57.567366][ T4747] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 57.576925][ T4747] Cannot create hsr debugfs directory [ 57.577482][ T4859] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities [ 57.582469][ T4725] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 57.600550][ T4866] FAULT_INJECTION: forcing a failure. [ 57.600550][ T4866] name failslab, interval 1, probability 0, space 0, times 0 [ 57.613478][ T4866] CPU: 1 UID: 0 PID: 4866 Comm: syz.1.392 Not tainted 6.11.0-rc3-syzkaller-00060-gd07b43284ab3 #0 [ 57.624232][ T4866] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 57.634363][ T4866] Call Trace: [ 57.637650][ T4866] [ 57.640658][ T4866] dump_stack_lvl+0xf2/0x150 [ 57.645276][ T4866] dump_stack+0x15/0x20 [ 57.649478][ T4866] should_fail_ex+0x229/0x230 [ 57.654293][ T4866] ? sock_kmalloc+0x83/0xc0 [ 57.658810][ T4866] should_failslab+0x8f/0xb0 [ 57.663459][ T4866] __kmalloc_noprof+0xa5/0x370 [ 57.668351][ T4866] sock_kmalloc+0x83/0xc0 [ 57.672755][ T4866] ____sys_sendmsg+0x127/0x410 [ 57.677529][ T4866] __sys_sendmmsg+0x269/0x500 [ 57.682295][ T4866] __x64_sys_sendmmsg+0x57/0x70 [ 57.687153][ T4866] x64_sys_call+0xa49/0x2d60 [ 57.691756][ T4866] do_syscall_64+0xc9/0x1c0 [ 57.696264][ T4866] ? clear_bhb_loop+0x55/0xb0 [ 57.700970][ T4866] ? clear_bhb_loop+0x55/0xb0 [ 57.705716][ T4866] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 57.711708][ T4866] RIP: 0033:0x7fcb0bce99b9 [ 57.716177][ T4866] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 57.735849][ T4866] RSP: 002b:00007fcb0a946038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 57.744254][ T4866] RAX: ffffffffffffffda RBX: 00007fcb0be86058 RCX: 00007fcb0bce99b9 [ 57.752293][ T4866] RDX: 0000000000000004 RSI: 0000000020005580 RDI: 0000000000000005 [ 57.760261][ T4866] RBP: 00007fcb0a946090 R08: 0000000000000000 R09: 0000000000000000 [ 57.768493][ T4866] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000001 [ 57.776496][ T4866] R13: 0000000000000001 R14: 00007fcb0be86058 R15: 00007ffcfc6f3708 [ 57.784527][ T4866] [ 57.796027][ T3382] bridge_slave_1: left allmulticast mode [ 57.801805][ T3382] bridge_slave_1: left promiscuous mode [ 57.807534][ T3382] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.823845][ T3382] bridge_slave_0: left allmulticast mode [ 57.829656][ T3382] bridge_slave_0: left promiscuous mode [ 57.835362][ T3382] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.946713][ T3382] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 57.956993][ T3382] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 57.967335][ T3382] bond0 (unregistering): Released all slaves [ 57.999276][ T29] kauditd_printk_skb: 74 callbacks suppressed [ 57.999288][ T29] audit: type=1400 audit(1723706253.538:992): avc: denied { create } for pid=4899 comm="syz.4.397" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 58.025774][ T29] audit: type=1400 audit(1723706253.548:993): avc: denied { setopt } for pid=4899 comm="syz.4.397" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 58.046081][ T29] audit: type=1400 audit(1723706253.568:994): avc: denied { connect } for pid=4899 comm="syz.4.397" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 58.108909][ T3382] hsr_slave_0: left promiscuous mode [ 58.117042][ T3382] hsr_slave_1: left promiscuous mode [ 58.123648][ T3382] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 58.131155][ T3382] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 58.139876][ T3382] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 58.147483][ T3382] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 58.156292][ T4911] ip6t_srh: unknown srh match flags 4001 [ 58.172029][ T3382] veth1_macvtap: left promiscuous mode [ 58.177551][ T3382] veth0_macvtap: left promiscuous mode [ 58.183097][ T3382] veth1_vlan: left promiscuous mode [ 58.188371][ T3382] veth0_vlan: left promiscuous mode [ 58.202977][ T29] audit: type=1326 audit(1723706253.738:995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4917 comm="syz.0.401" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f32a73499b9 code=0x0 [ 58.281331][ T4851] dccp_close: ABORT with 32 bytes unread [ 58.315571][ T4929] netlink: 76 bytes leftover after parsing attributes in process `syz.1.403'. [ 58.325143][ T29] audit: type=1400 audit(1723706253.868:996): avc: denied { connect } for pid=4927 comm="syz.4.402" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 58.366668][ T3382] team0 (unregistering): Port device team_slave_1 removed [ 58.375550][ T29] audit: type=1400 audit(1723706253.918:997): avc: denied { ioctl } for pid=4940 comm="syz.4.405" path="socket:[10042]" dev="sockfs" ino=10042 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 58.401112][ T3382] team0 (unregistering): Port device team_slave_0 removed [ 58.469496][ T4939] team0: entered promiscuous mode [ 58.474583][ T4939] team_slave_0: entered promiscuous mode [ 58.480287][ T4939] team_slave_1: entered promiscuous mode [ 58.487638][ T4939] team0: left promiscuous mode [ 58.492459][ T4939] team_slave_0: left promiscuous mode [ 58.497988][ T4939] team_slave_1: left promiscuous mode [ 58.527884][ T4725] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.551695][ T4725] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.579460][ T4937] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.586636][ T4937] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.613154][ T4937] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.620256][ T4937] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.658128][ T4725] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 58.668689][ T4725] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 58.785379][ T4725] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.867621][ T4747] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 58.881445][ T4747] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 58.894928][ T4747] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 58.911853][ T4747] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 58.931894][ T4998] loop1: detected capacity change from 0 to 256 [ 58.968127][ T4725] veth0_vlan: entered promiscuous mode [ 58.968847][ T4998] FAT-fs (loop1): Directory bread(block 64) failed [ 58.988368][ T4998] FAT-fs (loop1): Directory bread(block 65) failed [ 58.999914][ T4998] FAT-fs (loop1): Directory bread(block 66) failed [ 59.013503][ T4998] FAT-fs (loop1): Directory bread(block 67) failed [ 59.021623][ T4747] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.033740][ T4998] FAT-fs (loop1): Directory bread(block 68) failed [ 59.053482][ T4725] veth1_vlan: entered promiscuous mode [ 59.069907][ T4998] FAT-fs (loop1): Directory bread(block 69) failed [ 59.074464][ T4747] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.088701][ T4998] FAT-fs (loop1): Directory bread(block 70) failed [ 59.102614][ T4998] FAT-fs (loop1): Directory bread(block 71) failed [ 59.107292][ T3382] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.116193][ T3382] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.117844][ T4998] FAT-fs (loop1): Directory bread(block 72) failed [ 59.138729][ T3382] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.145812][ T3382] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.151185][ T4998] FAT-fs (loop1): Directory bread(block 73) failed [ 59.187026][ T4725] veth0_macvtap: entered promiscuous mode [ 59.218839][ T4725] veth1_macvtap: entered promiscuous mode [ 59.237467][ T4998] netlink: 'syz.1.411': attribute type 10 has an invalid length. [ 59.245460][ T4998] netlink: 40 bytes leftover after parsing attributes in process `syz.1.411'. [ 59.264352][ T4998] batman_adv: batadv0: Interface deactivated: dummy0 [ 59.271099][ T4998] batman_adv: batadv0: Removing interface: dummy0 [ 59.278792][ T4998] bridge0: port 3(dummy0) entered blocking state [ 59.285265][ T4998] bridge0: port 3(dummy0) entered disabled state [ 59.293256][ T4998] dummy0: entered allmulticast mode [ 59.299605][ T4998] dummy0: entered promiscuous mode [ 59.305348][ T4998] bridge0: port 3(dummy0) entered blocking state [ 59.311849][ T4998] bridge0: port 3(dummy0) entered forwarding state [ 59.347172][ T4725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.357738][ T4725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.367587][ T4725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.378049][ T4725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.387890][ T4725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.398492][ T4725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.409567][ T29] audit: type=1400 audit(1723706254.948:998): avc: denied { map } for pid=5023 comm="syz.0.413" path="socket:[10573]" dev="sockfs" ino=10573 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 59.412335][ T4725] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.432765][ T29] audit: type=1400 audit(1723706254.948:999): avc: denied { read } for pid=5023 comm="syz.0.413" path="socket:[10573]" dev="sockfs" ino=10573 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 59.444109][ T4725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.473631][ T4725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.483476][ T4725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.493953][ T4725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.503849][ T4725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.514274][ T4725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.526639][ T4725] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.536631][ T5024] 9p: Unknown access argument 꿽: -22 [ 59.547075][ T4725] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.556000][ T4725] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.564998][ T4725] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.573683][ T4725] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.596746][ T4747] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.628992][ T29] audit: type=1400 audit(1723706255.168:1000): avc: denied { mounton } for pid=4725 comm="syz-executor" path="/root/syzkaller.YU40DU/syz-tmp" dev="sda1" ino=1957 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 59.660341][ T29] audit: type=1400 audit(1723706255.168:1001): avc: denied { mount } for pid=4725 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 59.700382][ T5050] loop0: detected capacity change from 0 to 256 [ 59.713783][ T5052] loop3: detected capacity change from 0 to 512 [ 59.730573][ T5052] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 59.735928][ T4747] veth0_vlan: entered promiscuous mode [ 59.761125][ T4747] veth1_vlan: entered promiscuous mode [ 59.770483][ T5052] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.367: bg 0: block 64: padding at end of block bitmap is not set [ 59.775098][ T4747] veth0_macvtap: entered promiscuous mode [ 59.791986][ T4747] veth1_macvtap: entered promiscuous mode [ 59.802050][ T4747] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.812888][ T4747] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.822803][ T4747] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.833264][ T4747] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.839889][ T5052] EXT4-fs error (device loop3): ext4_acquire_dquot:6848: comm syz.3.367: Failed to acquire dquot type 0 [ 59.843136][ T4747] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.864774][ T4747] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.874616][ T4747] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.885076][ T4747] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.898864][ T4747] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.900252][ T5052] EXT4-fs (loop3): 1 truncate cleaned up [ 59.925369][ T4747] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.935859][ T4747] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.945686][ T4747] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.956198][ T4747] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.966100][ T4747] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.976540][ T4747] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.986386][ T4747] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.996826][ T4747] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.008342][ T4747] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.018464][ T4747] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.027202][ T4747] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.035923][ T4747] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.044641][ T4747] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.078664][ T5075] loop1: detected capacity change from 0 to 128 [ 60.171474][ T5086] loop1: detected capacity change from 0 to 512 [ 60.190603][ T5081] loop3: detected capacity change from 0 to 1024 [ 60.210455][ T5086] ext4 filesystem being mounted at /105/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 60.252813][ T5095] loop0: detected capacity change from 0 to 512 [ 60.263897][ T5087] usb usb9: usbfs: process 5087 (syz.2.372) did not claim interface 0 before use [ 60.293707][ T5098] loop3: detected capacity change from 0 to 512 [ 60.308591][ T5095] ext4 filesystem being mounted at /74/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 60.311577][ T5098] EXT4-fs (loop3): can't mount with commit=127, fs mounted w/o journal [ 60.339259][ T4937] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.417676][ T5109] netlink: 5 bytes leftover after parsing attributes in process `syz.0.433'. [ 60.418077][ T4937] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.440240][ T5109] capability: warning: `syz.0.433' uses 32-bit capabilities (legacy support in use) [ 60.452004][ T5098] loop3: detected capacity change from 0 to 8192 [ 60.507568][ T4937] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.529298][ T5121] loop0: detected capacity change from 0 to 512 [ 60.539578][ T5123] netlink: 84 bytes leftover after parsing attributes in process `syz.1.437'. [ 60.566745][ T5121] EXT4-fs (loop0): unsupported inode size: 0 [ 60.567916][ T4937] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.572753][ T5121] EXT4-fs (loop0): blocksize: 1024 [ 60.673631][ T4937] bridge_slave_1: left allmulticast mode [ 60.679339][ T4937] bridge_slave_1: left promiscuous mode [ 60.685017][ T4937] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.693041][ T4937] bridge_slave_0: left allmulticast mode [ 60.698719][ T4937] bridge_slave_0: left promiscuous mode [ 60.704364][ T4937] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.784960][ T5130] usb usb8: usbfs: process 5130 (syz.1.438) did not claim interface 0 before use [ 60.827230][ T4937] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 60.838629][ T4937] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 60.849870][ T4937] bond0 (unregistering): Released all slaves [ 60.949369][ T5110] chnl_net:caif_netlink_parms(): no params data found [ 60.976418][ T4937] hsr_slave_0: left promiscuous mode [ 60.995599][ T4937] hsr_slave_1: left promiscuous mode [ 61.008743][ T4937] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 61.016182][ T4937] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 61.023814][ T4937] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 61.031271][ T4937] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 61.043005][ T4937] veth1_macvtap: left promiscuous mode [ 61.048519][ T4937] veth0_macvtap: left promiscuous mode [ 61.054034][ T4937] veth1_vlan: left promiscuous mode [ 61.059384][ T4937] veth0_vlan: left promiscuous mode [ 61.155819][ T4937] team0 (unregistering): Port device team_slave_1 removed [ 61.169212][ T4937] team0 (unregistering): Port device team_slave_0 removed [ 61.243542][ T5167] loop1: detected capacity change from 0 to 512 [ 61.261664][ T5110] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.268953][ T5110] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.276400][ T5110] bridge_slave_0: entered allmulticast mode [ 61.276464][ T5167] ext4 filesystem being mounted at /115/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 61.282857][ T5110] bridge_slave_0: entered promiscuous mode [ 61.300464][ T5110] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.307636][ T5110] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.314862][ T5110] bridge_slave_1: entered allmulticast mode [ 61.321319][ T5110] bridge_slave_1: entered promiscuous mode [ 61.342045][ T5110] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.378808][ T5173] netlink: 84 bytes leftover after parsing attributes in process `syz.2.447'. [ 61.388606][ T5110] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.442254][ T5110] team0: Port device team_slave_0 added [ 61.470571][ T5110] team0: Port device team_slave_1 added [ 61.532216][ T5110] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.539334][ T5110] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.565334][ T5110] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.569291][ T5199] loop2: detected capacity change from 0 to 2048 [ 61.577933][ T5191] loop1: detected capacity change from 0 to 8192 [ 61.598033][ T5110] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.605128][ T5110] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.631093][ T5110] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.665888][ T5110] hsr_slave_0: entered promiscuous mode [ 61.672164][ T5110] hsr_slave_1: entered promiscuous mode [ 61.678481][ T5110] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 61.692809][ T5110] Cannot create hsr debugfs directory [ 61.737006][ T5206] loop1: detected capacity change from 0 to 512 [ 61.768837][ T5206] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 61.817804][ T5206] EXT4-fs (loop1): orphan cleanup on readonly fs [ 61.838429][ T5206] EXT4-fs warning (device loop1): ext4_enable_quotas:7066: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 61.861622][ T5206] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 61.895727][ T5206] EXT4-fs (loop1): 1 truncate cleaned up [ 61.980740][ T5242] FAULT_INJECTION: forcing a failure. [ 61.980740][ T5242] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 61.993845][ T5242] CPU: 0 UID: 0 PID: 5242 Comm: syz.1.457 Not tainted 6.11.0-rc3-syzkaller-00060-gd07b43284ab3 #0 [ 62.004485][ T5242] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 62.014537][ T5242] Call Trace: [ 62.017848][ T5242] [ 62.020768][ T5242] dump_stack_lvl+0xf2/0x150 [ 62.025513][ T5242] dump_stack+0x15/0x20 [ 62.029675][ T5242] should_fail_ex+0x229/0x230 [ 62.034387][ T5242] should_fail+0xb/0x10 [ 62.038611][ T5242] should_fail_usercopy+0x1a/0x20 [ 62.043744][ T5242] _copy_from_iter+0xd3/0xb00 [ 62.048434][ T5242] ? alloc_pages_noprof+0xe1/0x100 [ 62.053577][ T5242] ? __virt_addr_valid+0x1ed/0x250 [ 62.058681][ T5242] ? __check_object_size+0x35b/0x510 [ 62.064068][ T5242] tcp_sendmsg_locked+0x13d1/0x2640 [ 62.069274][ T5242] ? __pfx_tcp_sendmsg+0x10/0x10 [ 62.074208][ T5242] tcp_sendmsg+0x30/0x50 [ 62.078490][ T5242] inet_sendmsg+0x77/0xd0 [ 62.082815][ T5242] __sock_sendmsg+0x102/0x180 [ 62.087522][ T5242] __sys_sendto+0x1e5/0x260 [ 62.092091][ T5242] __x64_sys_sendto+0x78/0x90 [ 62.096771][ T5242] x64_sys_call+0x2959/0x2d60 [ 62.101455][ T5242] do_syscall_64+0xc9/0x1c0 [ 62.105997][ T5242] ? clear_bhb_loop+0x55/0xb0 [ 62.110734][ T5242] ? clear_bhb_loop+0x55/0xb0 [ 62.115412][ T5242] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 62.121421][ T5242] RIP: 0033:0x7fcb0bce99b9 [ 62.125923][ T5242] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 62.145531][ T5242] RSP: 002b:00007fcb0a967038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 62.153937][ T5242] RAX: ffffffffffffffda RBX: 00007fcb0be85f80 RCX: 00007fcb0bce99b9 [ 62.161915][ T5242] RDX: 000000000000009d RSI: 0000000020000700 RDI: 0000000000000003 [ 62.169884][ T5242] RBP: 00007fcb0a967090 R08: 0000000000000000 R09: 0000000000000000 [ 62.177849][ T5242] R10: 0000000000040040 R11: 0000000000000246 R12: 0000000000000001 [ 62.185811][ T5242] R13: 0000000000000000 R14: 00007fcb0be85f80 R15: 00007ffcfc6f3708 [ 62.193799][ T5242] [ 62.210619][ T5244] usb usb9: usbfs: process 5244 (syz.2.456) did not claim interface 0 before use [ 62.280468][ T5255] loop1: detected capacity change from 0 to 512 [ 62.289597][ T5110] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 62.306524][ T5110] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 62.320408][ T5110] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 62.323943][ T5257] netlink: 84 bytes leftover after parsing attributes in process `syz.3.459'. [ 62.339731][ T5255] ext4 filesystem being mounted at /120/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 62.359634][ T5110] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 62.415585][ T5110] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.437411][ T5255] EXT4-fs error (device loop1): ext4_do_update_inode:5154: inode #21: comm syz.1.460: corrupted inode contents [ 62.451612][ T5110] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.460145][ T5273] netlink: 24 bytes leftover after parsing attributes in process `syz.3.462'. [ 62.460802][ T5255] EXT4-fs error (device loop1): ext4_dirty_inode:6014: inode #21: comm syz.1.460: mark_inode_dirty error [ 62.484401][ T3382] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.491513][ T3382] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.502244][ T5255] EXT4-fs error (device loop1): ext4_do_update_inode:5154: inode #21: comm syz.1.460: corrupted inode contents [ 62.515765][ T5255] EXT4-fs error (device loop1): ext4_xattr_delete_inode:3007: inode #21: comm syz.1.460: mark_inode_dirty error [ 62.534066][ T4934] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.541167][ T4934] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.550813][ T5255] EXT4-fs error (device loop1): ext4_xattr_delete_inode:3010: inode #21: comm syz.1.460: mark inode dirty (error -117) [ 62.581302][ T5282] loop0: detected capacity change from 0 to 512 [ 62.608791][ T5282] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.463: bg 0: block 35: padding at end of block bitmap is not set [ 62.624767][ T5282] EXT4-fs (loop0): Remounting filesystem read-only [ 62.631366][ T5282] EXT4-fs (loop0): 1 truncate cleaned up [ 62.638296][ T5282] SELinux: (dev loop0, type ext4) getxattr errno 5 [ 62.677136][ T5255] EXT4-fs warning (device loop1): ext4_evict_inode:271: xattr delete (err -117) [ 62.744532][ T5110] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.824214][ T5315] loop2: detected capacity change from 0 to 128 [ 62.956000][ T5110] veth0_vlan: entered promiscuous mode [ 62.968861][ T5110] veth1_vlan: entered promiscuous mode [ 63.002740][ T5110] veth0_macvtap: entered promiscuous mode [ 63.025258][ T5110] veth1_macvtap: entered promiscuous mode [ 63.060094][ T5110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.070573][ T5110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.080393][ T5110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.090895][ T5110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.100706][ T5110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.111245][ T5110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.120189][ T5329] Process accounting resumed [ 63.121041][ T5110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.136153][ T5110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.150107][ T5110] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.167745][ T5110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.178301][ T5110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.188228][ T5110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.198663][ T5110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.208493][ T5110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.218998][ T5110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.228857][ T5110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.235320][ T29] kauditd_printk_skb: 29 callbacks suppressed [ 63.235334][ T29] audit: type=1400 audit(1723706258.768:1028): avc: denied { ioctl } for pid=5328 comm="syz.0.468" path="/dev/ppp" dev="devtmpfs" ino=116 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 63.239339][ T5110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.282684][ T5110] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.291966][ T5110] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.300693][ T5110] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.309389][ T5110] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.318087][ T5110] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.332573][ T29] audit: type=1400 audit(1723706258.868:1029): avc: denied { execute } for pid=5356 comm="syz.3.470" path=2F6D656D66643A59FFFF202864656C6574656429 dev="hugetlbfs" ino=11054 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 63.399577][ T5360] loop2: detected capacity change from 0 to 1024 [ 63.411614][ T5364] €Â: renamed from vlan1 (while UP) [ 63.412179][ T5360] EXT4-fs: Ignoring removed orlov option [ 63.441185][ T5360] EXT4-fs (loop2): stripe (7) is not aligned with cluster size (16), stripe is disabled [ 63.467066][ T5373] (unnamed net_device) (uninitialized): Unable to set up delay as MII monitoring is disabled [ 63.471228][ T5360] EXT4-fs warning (device loop2): ext4_enable_quotas:7066: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 63.507454][ T5360] EXT4-fs (loop2): mount failed [ 63.523937][ T5377] netlink: 'syz.0.477': attribute type 24 has an invalid length. [ 63.536659][ T29] audit: type=1326 audit(1723706259.078:1030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5375 comm="syz.3.475" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f24b55799b9 code=0x0 [ 63.559910][ T5377] netlink: 16 bytes leftover after parsing attributes in process `syz.0.477'. [ 63.679203][ T5381] loop1: detected capacity change from 0 to 8192 [ 63.704123][ T5381] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 63.737023][ T29] audit: type=1400 audit(1723706259.278:1031): avc: denied { setopt } for pid=5380 comm="syz.1.478" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 63.746872][ T5394] loop4: detected capacity change from 0 to 512 [ 63.773683][ T5381] netlink: 40 bytes leftover after parsing attributes in process `syz.1.478'. [ 63.783434][ T5394] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 63.809876][ T5394] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.483: bg 0: block 64: padding at end of block bitmap is not set [ 63.846466][ T5394] Quota error (device loop4): write_blk: dquota write failed [ 63.853962][ T5394] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 63.866172][ T5394] EXT4-fs error (device loop4): ext4_acquire_dquot:6848: comm syz.4.483: Failed to acquire dquot type 0 [ 63.881670][ T5394] EXT4-fs (loop4): 1 truncate cleaned up [ 63.895149][ T5398] FAULT_INJECTION: forcing a failure. [ 63.895149][ T5398] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 63.908289][ T5398] CPU: 0 UID: 0 PID: 5398 Comm: syz.1.484 Not tainted 6.11.0-rc3-syzkaller-00060-gd07b43284ab3 #0 [ 63.918885][ T5398] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 63.928949][ T5398] Call Trace: [ 63.932298][ T5398] [ 63.935227][ T5398] dump_stack_lvl+0xf2/0x150 [ 63.939959][ T5398] dump_stack+0x15/0x20 [ 63.944120][ T5398] should_fail_ex+0x229/0x230 [ 63.948811][ T5398] should_fail+0xb/0x10 [ 63.953000][ T5398] should_fail_usercopy+0x1a/0x20 [ 63.958116][ T5398] _copy_from_iter+0xd3/0xb00 [ 63.962946][ T5398] ? rep_movs_alternative+0x4a/0x70 [ 63.968152][ T5398] ? _copy_from_iter+0x161/0xb00 [ 63.973168][ T5398] copy_page_from_iter+0x14f/0x280 [ 63.978281][ T5398] skb_copy_datagram_from_iter+0x203/0x440 [ 63.984092][ T5398] tun_get_user+0xb90/0x24b0 [ 63.988682][ T5398] ? avc_has_perm+0xd4/0x160 [ 63.993273][ T5398] ? ref_tracker_alloc+0x1f5/0x2f0 [ 63.998438][ T5398] ? selinux_file_permission+0x32c/0x360 [ 64.004154][ T5398] tun_chr_write_iter+0x18e/0x240 [ 64.009257][ T5398] vfs_write+0x78f/0x900 [ 64.013612][ T5398] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 64.019153][ T5398] ksys_write+0xeb/0x1b0 [ 64.023477][ T5398] __x64_sys_write+0x42/0x50 [ 64.028115][ T5398] x64_sys_call+0x27dd/0x2d60 [ 64.032874][ T5398] do_syscall_64+0xc9/0x1c0 [ 64.037454][ T5398] ? clear_bhb_loop+0x55/0xb0 [ 64.042139][ T5398] ? clear_bhb_loop+0x55/0xb0 [ 64.046820][ T5398] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 64.052831][ T5398] RIP: 0033:0x7fcb0bce99b9 [ 64.057307][ T5398] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 64.076972][ T5398] RSP: 002b:00007fcb0a967038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 64.085386][ T5398] RAX: ffffffffffffffda RBX: 00007fcb0be85f80 RCX: 00007fcb0bce99b9 [ 64.093353][ T5398] RDX: 000000000000fdef RSI: 0000000020000200 RDI: 00000000000000c8 [ 64.101324][ T5398] RBP: 00007fcb0a967090 R08: 0000000000000000 R09: 0000000000000000 [ 64.109288][ T5398] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 64.117333][ T5398] R13: 0000000000000000 R14: 00007fcb0be85f80 R15: 00007ffcfc6f3708 [ 64.125311][ T5398] [ 64.182147][ T5405] loop4: detected capacity change from 0 to 2048 [ 64.195937][ T5402] loop0: detected capacity change from 0 to 512 [ 64.224532][ T5405] loop4: p2 < > [ 64.230738][ T29] audit: type=1400 audit(1723706259.768:1032): avc: denied { append } for pid=5404 comm="syz.4.487" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 64.259066][ T29] audit: type=1400 audit(1723706259.798:1033): avc: denied { getopt } for pid=5406 comm="syz.1.488" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 64.301780][ T29] audit: type=1400 audit(1723706259.838:1034): avc: denied { unmount } for pid=5110 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 64.383825][ T5418] loop3: detected capacity change from 0 to 128 [ 64.392634][ T5418] ext4 filesystem being mounted at /12/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 64.422486][ T5422] FAULT_INJECTION: forcing a failure. [ 64.422486][ T5422] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 64.435633][ T5422] CPU: 1 UID: 0 PID: 5422 Comm: syz.3.493 Not tainted 6.11.0-rc3-syzkaller-00060-gd07b43284ab3 #0 [ 64.446323][ T5422] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 64.456386][ T5422] Call Trace: [ 64.459656][ T5422] [ 64.462643][ T5422] dump_stack_lvl+0xf2/0x150 [ 64.467245][ T5422] dump_stack+0x15/0x20 [ 64.471454][ T5422] should_fail_ex+0x229/0x230 [ 64.476140][ T5422] should_fail+0xb/0x10 [ 64.480436][ T5422] should_fail_usercopy+0x1a/0x20 [ 64.485472][ T5422] strncpy_from_user+0x25/0x270 [ 64.490395][ T5422] ? kmem_cache_alloc_noprof+0x10c/0x290 [ 64.496044][ T5422] getname_flags+0xb0/0x3b0 [ 64.500554][ T5422] user_path_create+0x26/0x110 [ 64.505371][ T5422] bpf_obj_pin_user+0xc9/0x260 [ 64.510192][ T5422] bpf_obj_pin+0xd8/0xf0 [ 64.514435][ T5422] __sys_bpf+0x5ad/0x7a0 [ 64.518680][ T5422] __x64_sys_bpf+0x43/0x50 [ 64.523212][ T5422] x64_sys_call+0x2625/0x2d60 [ 64.527907][ T5422] do_syscall_64+0xc9/0x1c0 [ 64.532462][ T5422] ? clear_bhb_loop+0x55/0xb0 [ 64.537258][ T5422] ? clear_bhb_loop+0x55/0xb0 [ 64.542007][ T5422] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 64.547961][ T5422] RIP: 0033:0x7f24b55799b9 [ 64.552377][ T5422] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 64.572033][ T5422] RSP: 002b:00007f24b41f7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 64.580442][ T5422] RAX: ffffffffffffffda RBX: 00007f24b5715f80 RCX: 00007f24b55799b9 [ 64.588413][ T5422] RDX: 0000000000000018 RSI: 0000000020000380 RDI: 0000000000000006 [ 64.596396][ T5422] RBP: 00007f24b41f7090 R08: 0000000000000000 R09: 0000000000000000 [ 64.604361][ T5422] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 64.612326][ T5422] R13: 0000000000000000 R14: 00007f24b5715f80 R15: 00007ffe5eff21d8 [ 64.620404][ T5422] [ 64.630374][ T29] audit: type=1400 audit(1723706260.168:1035): avc: denied { create } for pid=5424 comm="syz.2.494" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 64.665919][ T5425] netlink: 'syz.2.494': attribute type 11 has an invalid length. [ 64.673706][ T5425] netlink: 132 bytes leftover after parsing attributes in process `syz.2.494'. [ 64.689316][ T5425] netlink: 132 bytes leftover after parsing attributes in process `syz.2.494'. [ 64.751052][ T5441] loop2: detected capacity change from 0 to 128 [ 64.757822][ T5441] vfat: Unknown parameter 'syzkaller' [ 64.830201][ T5442] loop2: detected capacity change from 0 to 256 [ 64.839067][ T5442] vfat: Bad value for 'fmask' [ 64.846212][ T5444] IPVS: sync thread started: state = MASTER, mcast_ifn = vcan0, syncid = 0, id = 0 [ 64.868519][ T5442] loop2: detected capacity change from 0 to 512 [ 64.878022][ T5442] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 64.895734][ T5442] EXT4-fs (loop2): 1 orphan inode deleted [ 64.901508][ T5442] EXT4-fs (loop2): 1 truncate cleaned up [ 64.907922][ T5447] netlink: 12 bytes leftover after parsing attributes in process `syz.3.500'. [ 64.916152][ T5442] EXT4-fs error (device loop2): ext4_lookup:1811: inode #15: comm syz.2.498: iget: bad extra_isize 46 (inode size 256) [ 64.917344][ T5447] FAULT_INJECTION: forcing a failure. [ 64.917344][ T5447] name failslab, interval 1, probability 0, space 0, times 0 [ 64.930423][ T5442] EXT4-fs (loop2): Remounting filesystem read-only [ 64.942033][ T5447] CPU: 1 UID: 0 PID: 5447 Comm: syz.3.500 Not tainted 6.11.0-rc3-syzkaller-00060-gd07b43284ab3 #0 [ 64.958982][ T5447] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 64.969054][ T5447] Call Trace: [ 64.972326][ T5447] [ 64.975249][ T5447] dump_stack_lvl+0xf2/0x150 [ 64.979930][ T5447] dump_stack+0x15/0x20 [ 64.984152][ T5447] should_fail_ex+0x229/0x230 [ 64.988888][ T5447] ? __kernfs_new_node+0x6a/0x380 [ 64.993988][ T5447] should_failslab+0x8f/0xb0 [ 64.998583][ T5447] kmem_cache_alloc_noprof+0x4c/0x290 [ 65.004042][ T5447] __kernfs_new_node+0x6a/0x380 [ 65.008919][ T5447] ? rb_insert_color+0x6a/0x290 [ 65.013776][ T5447] ? up_write+0x30/0xf0 [ 65.018016][ T5447] ? kernfs_activate+0x256/0x270 [ 65.022961][ T5447] kernfs_new_node+0xc8/0x140 [ 65.027671][ T5447] __kernfs_create_file+0x49/0x180 [ 65.032800][ T5447] ? __pfx_dev_attr_store+0x10/0x10 [ 65.038024][ T5447] sysfs_add_file_mode_ns+0x136/0x1c0 [ 65.043473][ T5447] internal_create_group+0x464/0x9b0 [ 65.048778][ T5447] sysfs_create_groups+0x3c/0xe0 [ 65.053760][ T5447] device_add_attrs+0x69/0x400 [ 65.058563][ T5447] ? kobject_put+0x107/0x180 [ 65.063223][ T5447] device_add+0x38d/0x790 [ 65.067591][ T5447] netdev_register_kobject+0x100/0x230 [ 65.073161][ T5447] register_netdevice+0x910/0xe30 [ 65.078183][ T5447] geneve_configure+0x4e9/0x640 [ 65.083080][ T5447] geneve_newlink+0x84/0xe0 [ 65.087587][ T5447] ? __pfx_geneve_newlink+0x10/0x10 [ 65.092798][ T5447] rtnl_newlink+0xeff/0x1690 [ 65.097417][ T5447] ? security_capable+0x64/0x80 [ 65.102291][ T5447] ? ns_capable+0x7d/0xb0 [ 65.106635][ T5447] ? __pfx_rtnl_newlink+0x10/0x10 [ 65.111728][ T5447] rtnetlink_rcv_msg+0x6aa/0x710 [ 65.116707][ T5447] ? ref_tracker_free+0x3a5/0x410 [ 65.121756][ T5447] ? __dev_queue_xmit+0x161/0x1fe0 [ 65.127104][ T5447] netlink_rcv_skb+0x12c/0x230 [ 65.131874][ T5447] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 65.137377][ T5447] rtnetlink_rcv+0x1c/0x30 [ 65.141802][ T5447] netlink_unicast+0x593/0x670 [ 65.146589][ T5447] netlink_sendmsg+0x5cc/0x6e0 [ 65.151381][ T5447] ? __pfx_netlink_sendmsg+0x10/0x10 [ 65.156765][ T5447] __sock_sendmsg+0x140/0x180 [ 65.161459][ T5447] ____sys_sendmsg+0x312/0x410 [ 65.166325][ T5447] __sys_sendmsg+0x1e9/0x280 [ 65.170934][ T5447] __x64_sys_sendmsg+0x46/0x50 [ 65.175766][ T5447] x64_sys_call+0x2689/0x2d60 [ 65.180503][ T5447] do_syscall_64+0xc9/0x1c0 [ 65.185010][ T5447] ? clear_bhb_loop+0x55/0xb0 [ 65.189750][ T5447] ? clear_bhb_loop+0x55/0xb0 [ 65.194489][ T5447] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 65.200458][ T5447] RIP: 0033:0x7f24b55799b9 [ 65.204892][ T5447] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 65.224875][ T5447] RSP: 002b:00007f24b41f7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 65.233353][ T5447] RAX: ffffffffffffffda RBX: 00007f24b5715f80 RCX: 00007f24b55799b9 [ 65.241363][ T5447] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000004 [ 65.249430][ T5447] RBP: 00007f24b41f7090 R08: 0000000000000000 R09: 0000000000000000 [ 65.257398][ T5447] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 65.265399][ T5447] R13: 0000000000000000 R14: 00007f24b5715f80 R15: 00007ffe5eff21d8 [ 65.273392][ T5447] [ 65.385039][ T5466] team_slave_0: entered promiscuous mode [ 65.390863][ T5466] team_slave_1: entered promiscuous mode [ 65.415196][ T5466] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5466 comm=syz.0.507 [ 65.441008][ T5465] team_slave_0: left promiscuous mode [ 65.446430][ T5465] team_slave_1: left promiscuous mode [ 65.455922][ C1] hrtimer: interrupt took 28760 ns [ 65.503849][ T5477] netlink: 4 bytes leftover after parsing attributes in process `syz.4.512'. [ 65.516011][ T5477] loop4: detected capacity change from 0 to 256 [ 65.545140][ T5477] program syz.4.512 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 65.566229][ T5481] netlink: 4 bytes leftover after parsing attributes in process `syz.0.510'. [ 65.576676][ T5481] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 65.576676][ T5481] The task syz.0.510 (5481) triggered the difference, watch for misbehavior. [ 65.606959][ T4747] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=11 [ 65.616945][ T4747] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=11 [ 65.627382][ T4747] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=11 [ 65.636513][ T4747] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=11 [ 65.646092][ T4747] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=11 [ 65.655167][ T4747] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=11 [ 65.664901][ T4747] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=11 [ 65.709410][ T5480] netlink: 112 bytes leftover after parsing attributes in process `syz.1.511'. [ 65.808623][ T5485] loop4: detected capacity change from 0 to 512 [ 65.822375][ T5485] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 65.857469][ T5485] EXT4-fs (loop4): 1 truncate cleaned up [ 65.887372][ T5485] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 65.928957][ T4936] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.970466][ T5489] loop4: detected capacity change from 0 to 2048 [ 65.998125][ T4936] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.058790][ T4936] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.103258][ T5489] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 66.119322][ T5489] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 31 with max blocks 33 with error 28 [ 66.131724][ T5489] EXT4-fs (loop4): This should not happen!! Data will be lost [ 66.131724][ T5489] [ 66.141396][ T5489] EXT4-fs (loop4): Total free blocks count 0 [ 66.147436][ T5489] EXT4-fs (loop4): Free/Dirty block details [ 66.153357][ T5489] EXT4-fs (loop4): free_blocks=2415919104 [ 66.159101][ T5489] EXT4-fs (loop4): dirty_blocks=48 [ 66.164251][ T5489] EXT4-fs (loop4): Block reservation details [ 66.170233][ T5489] EXT4-fs (loop4): i_reserved_data_blocks=3 [ 66.182284][ T4936] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.321386][ T4936] bridge_slave_1: left allmulticast mode [ 66.327168][ T4936] bridge_slave_1: left promiscuous mode [ 66.332947][ T4936] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.362962][ T4936] bridge_slave_0: left allmulticast mode [ 66.368784][ T4936] bridge_slave_0: left promiscuous mode [ 66.374507][ T4936] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.460457][ T5506] loop4: detected capacity change from 0 to 1024 [ 66.517556][ T5506] EXT4-fs mount: 50 callbacks suppressed [ 66.517585][ T5506] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 66.531115][ T5514] loop1: detected capacity change from 0 to 1024 [ 66.545188][ T4936] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 66.555902][ T4936] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 66.556389][ T5514] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 66.578994][ T4936] bond0 (unregistering): Released all slaves [ 66.580715][ T5514] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 66.604281][ T5514] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 49152 with max blocks 1 with error 28 [ 66.616947][ T5514] EXT4-fs (loop1): This should not happen!! Data will be lost [ 66.616947][ T5514] [ 66.626640][ T5514] EXT4-fs (loop1): Total free blocks count 0 [ 66.632636][ T5514] EXT4-fs (loop1): Free/Dirty block details [ 66.638599][ T5514] EXT4-fs (loop1): free_blocks=68451041280 [ 66.644447][ T5514] EXT4-fs (loop1): dirty_blocks=16 [ 66.649564][ T5514] EXT4-fs (loop1): Block reservation details [ 66.655585][ T5514] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 66.667813][ T5514] netlink: 8 bytes leftover after parsing attributes in process `syz.1.524'. [ 66.688997][ T5110] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.704969][ T3259] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.719053][ T4936] hsr_slave_0: left promiscuous mode [ 66.725266][ T4936] hsr_slave_1: left promiscuous mode [ 66.745035][ T4936] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 66.752443][ T4936] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 66.768990][ T4936] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 66.776647][ T4936] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 66.796123][ T4936] veth1_macvtap: left promiscuous mode [ 66.801703][ T4936] veth0_macvtap: left promiscuous mode [ 66.807409][ T4936] veth1_vlan: left promiscuous mode [ 66.812655][ T4936] veth0_vlan: left promiscuous mode [ 66.880746][ T5540] unsupported nla_type 10272 [ 66.971405][ T4936] team0 (unregistering): Port device team_slave_1 removed [ 66.984425][ T4936] team0 (unregistering): Port device team_slave_0 removed [ 67.037612][ T5490] chnl_net:caif_netlink_parms(): no params data found [ 67.060616][ T5554] loop4: detected capacity change from 0 to 128 [ 67.101094][ T5558] loop4: detected capacity change from 0 to 512 [ 67.111774][ T5558] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 67.132688][ T5558] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.537: bg 0: block 64: padding at end of block bitmap is not set [ 67.147489][ T5558] EXT4-fs error (device loop4): ext4_acquire_dquot:6848: comm syz.4.537: Failed to acquire dquot type 0 [ 67.150698][ T5490] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.165941][ T5490] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.170310][ T5568] loop3: detected capacity change from 0 to 1024 [ 67.173629][ T5490] bridge_slave_0: entered allmulticast mode [ 67.180219][ T5558] EXT4-fs (loop4): 1 truncate cleaned up [ 67.185954][ T5490] bridge_slave_0: entered promiscuous mode [ 67.198168][ T5490] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.205254][ T5490] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.205898][ T5568] EXT4-fs (loop3): Can't support bigalloc feature without extents feature [ 67.205898][ T5568] [ 67.212359][ T5490] bridge_slave_1: entered allmulticast mode [ 67.222984][ T5568] EXT4-fs (loop3): couldn't mount as ext2 due to feature incompatibilities [ 67.229445][ T5490] bridge_slave_1: entered promiscuous mode [ 67.240365][ T5558] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.276020][ T5490] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.286162][ T5110] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.286906][ T5490] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.321125][ T5490] team0: Port device team_slave_0 added [ 67.327810][ T5490] team0: Port device team_slave_1 added [ 67.343389][ T5490] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.350427][ T5490] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.376347][ T5490] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.387698][ T5490] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.394694][ T5490] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.420753][ T5490] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.466037][ T5490] hsr_slave_0: entered promiscuous mode [ 67.472114][ T5490] hsr_slave_1: entered promiscuous mode [ 67.478138][ T5490] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 67.485927][ T5490] Cannot create hsr debugfs directory [ 67.617608][ T5583] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 67.654122][ T5591] loop3: detected capacity change from 0 to 1024 [ 67.680709][ T5597] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=5597 comm=syz.1.548 [ 67.697121][ T5591] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.698922][ T5597] loop1: detected capacity change from 0 to 512 [ 67.728026][ T5597] EXT4-fs: inline encryption not supported [ 67.734086][ T5597] EXT4-fs: Ignoring removed orlov option [ 67.753731][ T4725] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.773004][ T5490] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 67.790929][ T5597] EXT4-fs error (device loop1): ext4_map_blocks:609: inode #2: block 3: comm syz.1.548: lblock 0 mapped to illegal pblock 3 (length 1) [ 67.805973][ T5607] loop4: detected capacity change from 0 to 2048 [ 67.810997][ T5490] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 67.827809][ T5597] EXT4-fs (loop1): Remounting filesystem read-only [ 67.831118][ T5611] FAULT_INJECTION: forcing a failure. [ 67.831118][ T5611] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 67.834383][ T5597] EXT4-fs warning (device loop1): dx_probe:823: inode #2: lblock 0: comm syz.1.548: error -117 reading directory block [ 67.847493][ T5611] CPU: 1 UID: 0 PID: 5611 Comm: syz.0.551 Not tainted 6.11.0-rc3-syzkaller-00060-gd07b43284ab3 #0 [ 67.847525][ T5611] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 67.847541][ T5611] Call Trace: [ 67.847549][ T5611] [ 67.847557][ T5611] dump_stack_lvl+0xf2/0x150 [ 67.861183][ T5597] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 67.870735][ T5611] dump_stack+0x15/0x20 [ 67.870780][ T5611] should_fail_ex+0x229/0x230 [ 67.881679][ T5597] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.884167][ T5611] should_fail+0xb/0x10 [ 67.884200][ T5611] should_fail_usercopy+0x1a/0x20 [ 67.884336][ T5611] copy_page_from_iter_atomic+0x22a/0xda0 [ 67.884369][ T5611] ? shmem_write_begin+0xa0/0x1c0 [ 67.884436][ T5611] ? shmem_write_begin+0x10c/0x1c0 [ 67.884541][ T5611] generic_perform_write+0x323/0x580 [ 67.888335][ T5597] SELinux: (dev loop1, type ext4) getxattr errno 5 [ 67.892051][ T5611] shmem_file_write_iter+0xc8/0xf0 [ 67.892087][ T5611] vfs_write+0x78f/0x900 [ 67.900635][ T5597] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.904343][ T5611] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 67.904384][ T5611] ksys_write+0xeb/0x1b0 [ 67.987058][ T5611] __x64_sys_write+0x42/0x50 [ 67.991666][ T5611] x64_sys_call+0x27dd/0x2d60 [ 67.996497][ T5611] do_syscall_64+0xc9/0x1c0 [ 68.001040][ T5611] ? clear_bhb_loop+0x55/0xb0 [ 68.005794][ T5611] ? clear_bhb_loop+0x55/0xb0 [ 68.010510][ T5611] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.016407][ T5611] RIP: 0033:0x7f32a734849f [ 68.020875][ T5611] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8c 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 1c 8d 02 00 48 [ 68.040477][ T5611] RSP: 002b:00007f32a5fc6df0 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 68.048883][ T5611] RAX: ffffffffffffffda RBX: 0000000000040000 RCX: 00007f32a734849f [ 68.056853][ T5611] RDX: 0000000000040000 RSI: 00007f329dba7000 RDI: 0000000000000004 [ 68.064893][ T5611] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000444 [ 68.072856][ T5611] R10: 0000000020000402 R11: 0000000000000293 R12: 0000000000000004 [ 68.080915][ T5611] R13: 00007f32a5fc6ef0 R14: 00007f32a5fc6eb0 R15: 00007f329dba7000 [ 68.088887][ T5611] [ 68.095595][ T5611] loop0: detected capacity change from 0 to 512 [ 68.107829][ T5607] hub 8-0:1.0: USB hub found [ 68.114704][ T5490] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 68.130927][ T5607] hub 8-0:1.0: 8 ports detected [ 68.135928][ T5611] EXT4-fs (loop0): can't mount with journal_async_commit, fs mounted w/o journal [ 68.164250][ T5490] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 68.209602][ T5619] netlink: 12 bytes leftover after parsing attributes in process `syz.1.552'. [ 68.268431][ T5637] loop1: detected capacity change from 0 to 1024 [ 68.280198][ T5637] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.321672][ T29] kauditd_printk_skb: 61 callbacks suppressed [ 68.321683][ T29] audit: type=1400 audit(1723706263.858:1095): avc: denied { link } for pid=5635 comm="syz.1.556" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop1" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 68.372294][ T5637] netlink: 'syz.1.556': attribute type 3 has an invalid length. [ 68.382769][ T29] audit: type=1400 audit(1723706263.908:1096): avc: denied { rename } for pid=5635 comm="syz.1.556" name="file0" dev="loop1" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 68.415655][ T5652] syz_tun: entered promiscuous mode [ 68.416612][ T3259] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.420988][ T5652] vlan1: entered promiscuous mode [ 68.437073][ T5652] syz_tun: left promiscuous mode [ 68.456372][ T29] audit: type=1400 audit(1723706263.998:1097): avc: denied { write } for pid=5653 comm="syz.1.560" name="route" dev="proc" ino=4026532411 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 68.701148][ T5660] FAULT_INJECTION: forcing a failure. [ 68.701148][ T5660] name failslab, interval 1, probability 0, space 0, times 0 [ 68.714055][ T5660] CPU: 1 UID: 0 PID: 5660 Comm: syz.3.561 Not tainted 6.11.0-rc3-syzkaller-00060-gd07b43284ab3 #0 [ 68.724661][ T5660] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 68.734715][ T5660] Call Trace: [ 68.738110][ T5660] [ 68.741109][ T5660] dump_stack_lvl+0xf2/0x150 [ 68.745843][ T5660] dump_stack+0x15/0x20 [ 68.750048][ T5660] should_fail_ex+0x229/0x230 [ 68.754751][ T5660] ? __list_lru_init+0x72/0x2e0 [ 68.759606][ T5660] should_failslab+0x8f/0xb0 [ 68.764330][ T5660] __kmalloc_noprof+0xa5/0x370 [ 68.769122][ T5660] __list_lru_init+0x72/0x2e0 [ 68.773879][ T5660] alloc_super+0x50e/0x5b0 [ 68.778303][ T5660] ? __pfx_set_anon_super_fc+0x10/0x10 [ 68.783772][ T5660] sget_fc+0x259/0x670 [ 68.787883][ T5660] ? __pfx_set_anon_super_fc+0x10/0x10 [ 68.793487][ T5660] ? __pfx_mqueue_fill_super+0x10/0x10 [ 68.798984][ T5660] get_tree_nodev+0x28/0xf0 [ 68.803557][ T5660] mqueue_get_tree+0x6b/0x90 [ 68.808163][ T5660] vfs_get_tree+0x56/0x1d0 [ 68.812601][ T5660] fc_mount+0x16/0x70 [ 68.816617][ T5660] mq_init_ns+0x24c/0x2f0 [ 68.820978][ T5660] copy_ipcs+0x218/0x3a0 [ 68.825226][ T5660] create_new_namespaces+0x135/0x430 [ 68.830529][ T5660] unshare_nsproxy_namespaces+0xe6/0x120 [ 68.836189][ T5660] ksys_unshare+0x3da/0x720 [ 68.840772][ T5660] ? ksys_write+0x178/0x1b0 [ 68.845373][ T5660] __x64_sys_unshare+0x1f/0x30 [ 68.850145][ T5660] x64_sys_call+0x2c8d/0x2d60 [ 68.854840][ T5660] do_syscall_64+0xc9/0x1c0 [ 68.859349][ T5660] ? clear_bhb_loop+0x55/0xb0 [ 68.864036][ T5660] ? clear_bhb_loop+0x55/0xb0 [ 68.868791][ T5660] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.874838][ T5660] RIP: 0033:0x7f24b55799b9 [ 68.879325][ T5660] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 68.898946][ T5660] RSP: 002b:00007f24b3eb4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 68.907536][ T5660] RAX: ffffffffffffffda RBX: 00007f24b5716130 RCX: 00007f24b55799b9 [ 68.915531][ T5660] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000002c040000 [ 68.923524][ T5660] RBP: 00007f24b3eb4090 R08: 0000000000000000 R09: 0000000000000000 [ 68.931508][ T5660] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 68.939491][ T5660] R13: 0000000000000000 R14: 00007f24b5716130 R15: 00007ffe5eff21d8 [ 68.947520][ T5660] [ 68.986846][ T5666] loop1: detected capacity change from 0 to 1024 [ 68.994125][ T5666] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 69.003124][ T5666] EXT4-fs (loop1): stripe (51435) is not aligned with cluster size (16), stripe is disabled [ 69.014846][ T5666] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.030102][ T29] audit: type=1400 audit(1723706264.568:1098): avc: denied { getattr } for pid=5665 comm="syz.1.564" name="/" dev="pidfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 69.032130][ T5666] tmpfs: Unknown parameter 'ÿ' [ 69.093833][ T5666] netlink: 44 bytes leftover after parsing attributes in process `syz.1.564'. [ 69.102783][ T5666] netlink: 13 bytes leftover after parsing attributes in process `syz.1.564'. [ 69.120574][ T5490] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.134597][ T5490] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.147564][ T4936] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.154662][ T4936] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.168395][ T5673] netlink: 12 bytes leftover after parsing attributes in process `syz.0.566'. [ 69.178799][ T3259] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.201896][ T4936] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.209178][ T4936] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.220620][ T5679] FAULT_INJECTION: forcing a failure. [ 69.220620][ T5679] name failslab, interval 1, probability 0, space 0, times 0 [ 69.233264][ T5679] CPU: 1 UID: 0 PID: 5679 Comm: syz.1.567 Not tainted 6.11.0-rc3-syzkaller-00060-gd07b43284ab3 #0 [ 69.244038][ T5679] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 69.247358][ T5681] loop0: detected capacity change from 0 to 512 [ 69.254116][ T5679] Call Trace: [ 69.254125][ T5679] [ 69.254133][ T5679] dump_stack_lvl+0xf2/0x150 [ 69.271177][ T5679] dump_stack+0x15/0x20 [ 69.275339][ T5679] should_fail_ex+0x229/0x230 [ 69.280028][ T5679] ? genl_family_rcv_msg_attrs_parse+0x75/0x1a0 [ 69.286276][ T5679] should_failslab+0x8f/0xb0 [ 69.290933][ T5679] __kmalloc_noprof+0xa5/0x370 [ 69.295695][ T5679] genl_family_rcv_msg_attrs_parse+0x75/0x1a0 [ 69.301848][ T5679] ? ns_capable+0x7d/0xb0 [ 69.306180][ T5679] genl_rcv_msg+0x470/0x6c0 [ 69.310686][ T5679] ? __pfx_devlink_nl_pre_doit+0x10/0x10 [ 69.316324][ T5679] ? __pfx_devlink_nl_trap_policer_set_doit+0x10/0x10 [ 69.323164][ T5679] ? __pfx_devlink_nl_post_doit+0x10/0x10 [ 69.328907][ T5679] ? ref_tracker_free+0x3a5/0x410 [ 69.333981][ T5679] ? __dev_queue_xmit+0x161/0x1fe0 [ 69.339143][ T5679] netlink_rcv_skb+0x12c/0x230 [ 69.343904][ T5679] ? __pfx_genl_rcv_msg+0x10/0x10 [ 69.349002][ T5679] genl_rcv+0x28/0x40 [ 69.353042][ T5679] netlink_unicast+0x593/0x670 [ 69.357824][ T5679] netlink_sendmsg+0x5cc/0x6e0 [ 69.362599][ T5679] ? __pfx_netlink_sendmsg+0x10/0x10 [ 69.367934][ T5679] __sock_sendmsg+0x140/0x180 [ 69.372622][ T5679] ____sys_sendmsg+0x312/0x410 [ 69.377395][ T5679] __sys_sendmsg+0x1e9/0x280 [ 69.382023][ T5679] __x64_sys_sendmsg+0x46/0x50 [ 69.386808][ T5679] x64_sys_call+0x2689/0x2d60 [ 69.391499][ T5679] do_syscall_64+0xc9/0x1c0 [ 69.396078][ T5679] ? clear_bhb_loop+0x55/0xb0 [ 69.400843][ T5679] ? clear_bhb_loop+0x55/0xb0 [ 69.405536][ T5679] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.411479][ T5679] RIP: 0033:0x7fcb0bce99b9 [ 69.415918][ T5679] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 69.435591][ T5679] RSP: 002b:00007fcb0a967038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 69.444154][ T5679] RAX: ffffffffffffffda RBX: 00007fcb0be85f80 RCX: 00007fcb0bce99b9 [ 69.452120][ T5679] RDX: 0000000020000000 RSI: 00000000200000c0 RDI: 0000000000000003 [ 69.460084][ T5679] RBP: 00007fcb0a967090 R08: 0000000000000000 R09: 0000000000000000 [ 69.468219][ T5679] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 69.476251][ T5679] R13: 0000000000000000 R14: 00007fcb0be85f80 R15: 00007ffcfc6f3708 [ 69.484225][ T5679] [ 69.505119][ T5490] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 69.515732][ T5490] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 69.577857][ T5681] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.588340][ T5490] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.590602][ T5681] ext4 filesystem being mounted at /99/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 69.598484][ T29] audit: type=1400 audit(1723706265.138:1099): avc: denied { ioctl } for pid=5676 comm="syz.4.569" path="/dev/usbmon6" dev="devtmpfs" ino=136 ioctlcmd=0x9203 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 69.659696][ T5681] EXT4-fs error (device loop0): ext4_do_update_inode:5154: inode #21: comm syz.0.570: corrupted inode contents [ 69.671795][ T5681] EXT4-fs error (device loop0): ext4_dirty_inode:6014: inode #21: comm syz.0.570: mark_inode_dirty error [ 69.684767][ T5681] EXT4-fs error (device loop0): ext4_do_update_inode:5154: inode #21: comm syz.0.570: corrupted inode contents [ 69.689426][ T5490] veth0_vlan: entered promiscuous mode [ 69.702281][ T5681] EXT4-fs error (device loop0): ext4_xattr_delete_inode:3007: inode #21: comm syz.0.570: mark_inode_dirty error [ 69.707138][ T5490] veth1_vlan: entered promiscuous mode [ 69.720111][ T5681] EXT4-fs error (device loop0): ext4_xattr_delete_inode:3010: inode #21: comm syz.0.570: mark inode dirty (error -117) [ 69.734734][ T5703] netlink: 72 bytes leftover after parsing attributes in process `syz.1.573'. [ 69.737733][ T5681] EXT4-fs warning (device loop0): ext4_evict_inode:271: xattr delete (err -117) [ 69.743811][ T5703] netlink: 12 bytes leftover after parsing attributes in process `syz.1.573'. [ 69.756971][ T5490] veth0_macvtap: entered promiscuous mode [ 69.776972][ T5490] veth1_macvtap: entered promiscuous mode [ 69.791171][ T5490] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.801673][ T5490] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.811546][ T5490] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.822082][ T5490] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.832033][ T5490] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.842540][ T5490] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.852407][ T5490] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.862894][ T5490] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.875614][ T5490] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.876264][ T3606] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.884086][ T5490] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.902337][ T5490] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.912208][ T5490] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.922633][ T5490] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.932491][ T5490] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.943006][ T5490] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.952816][ T5490] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.963370][ T5490] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.974139][ T5490] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.994567][ T5490] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.003330][ T5490] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.012047][ T5490] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.020822][ T5490] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.028562][ T5717] loop0: detected capacity change from 0 to 128 [ 70.070071][ T5717] syz.0.578: attempt to access beyond end of device [ 70.070071][ T5717] loop0: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 70.104906][ T5717] syz.0.578: attempt to access beyond end of device [ 70.104906][ T5717] loop0: rw=524288, sector=145, nr_sectors = 224 limit=128 [ 70.120062][ T5717] syz.0.578: attempt to access beyond end of device [ 70.120062][ T5717] loop0: rw=0, sector=145, nr_sectors = 8 limit=128 [ 70.133386][ T5717] syz.0.578: attempt to access beyond end of device [ 70.133386][ T5717] loop0: rw=0, sector=145, nr_sectors = 8 limit=128 [ 70.146657][ T5717] syz.0.578: attempt to access beyond end of device [ 70.146657][ T5717] loop0: rw=0, sector=145, nr_sectors = 8 limit=128 [ 70.159867][ T5717] syz.0.578: attempt to access beyond end of device [ 70.159867][ T5717] loop0: rw=0, sector=145, nr_sectors = 8 limit=128 [ 70.174955][ T5716] syz.0.578: attempt to access beyond end of device [ 70.174955][ T5716] loop0: rw=0, sector=185, nr_sectors = 8 limit=128 [ 70.188067][ T5716] syz.0.578: attempt to access beyond end of device [ 70.188067][ T5716] loop0: rw=0, sector=185, nr_sectors = 8 limit=128 [ 70.201388][ T5716] syz.0.578: attempt to access beyond end of device [ 70.201388][ T5716] loop0: rw=0, sector=185, nr_sectors = 8 limit=128 [ 70.217176][ T5717] syz.0.578: attempt to access beyond end of device [ 70.217176][ T5717] loop0: rw=0, sector=185, nr_sectors = 8 limit=128 [ 70.233748][ T5717] Driver unsupported XDP return value 0 on prog (id 134) dev N/A, expect packet loss! [ 70.243759][ T5723] usb usb9: usbfs: process 5723 (syz.2.518) did not claim interface 0 before use [ 70.300262][ T5729] FAULT_INJECTION: forcing a failure. [ 70.300262][ T5729] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 70.313349][ T5729] CPU: 1 UID: 0 PID: 5729 Comm: syz.0.580 Not tainted 6.11.0-rc3-syzkaller-00060-gd07b43284ab3 #0 [ 70.323941][ T5729] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 70.333994][ T5729] Call Trace: [ 70.337284][ T5729] [ 70.340220][ T5729] dump_stack_lvl+0xf2/0x150 [ 70.344926][ T5729] dump_stack+0x15/0x20 [ 70.349171][ T5729] should_fail_ex+0x229/0x230 [ 70.353858][ T5729] should_fail+0xb/0x10 [ 70.358020][ T5729] should_fail_usercopy+0x1a/0x20 [ 70.363162][ T5729] copy_page_from_iter_atomic+0x22a/0xda0 [ 70.368898][ T5729] ? shmem_write_begin+0xa0/0x1c0 [ 70.374034][ T5729] ? shmem_write_begin+0x10c/0x1c0 [ 70.379181][ T5729] generic_perform_write+0x323/0x580 [ 70.384495][ T5729] shmem_file_write_iter+0xc8/0xf0 [ 70.389696][ T5729] vfs_write+0x78f/0x900 [ 70.393962][ T5729] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 70.399842][ T5729] ksys_write+0xeb/0x1b0 [ 70.404143][ T5729] __x64_sys_write+0x42/0x50 [ 70.408794][ T5729] x64_sys_call+0x27dd/0x2d60 [ 70.413485][ T5729] do_syscall_64+0xc9/0x1c0 [ 70.418078][ T5729] ? clear_bhb_loop+0x55/0xb0 [ 70.422813][ T5729] ? clear_bhb_loop+0x55/0xb0 [ 70.427567][ T5729] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 70.433489][ T5729] RIP: 0033:0x7f32a734849f [ 70.437903][ T5729] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8c 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 1c 8d 02 00 48 [ 70.457567][ T5729] RSP: 002b:00007f32a5fc6df0 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 70.466026][ T5729] RAX: ffffffffffffffda RBX: 000000000005f800 RCX: 00007f32a734849f [ 70.473998][ T5729] RDX: 000000000005f800 RSI: 00007f329dba7000 RDI: 0000000000000004 [ 70.481984][ T5729] RBP: 0000000000000000 R08: 0000000000000000 R09: 00000000000007df [ 70.489995][ T5729] R10: 00000000000007d0 R11: 0000000000000293 R12: 0000000000000004 [ 70.498008][ T5729] R13: 00007f32a5fc6ef0 R14: 00007f32a5fc6eb0 R15: 00007f329dba7000 [ 70.506000][ T5729] [ 70.513848][ T5729] loop0: detected capacity change from 0 to 764 [ 70.521408][ T5729] rock: directory entry would overflow storage [ 70.527652][ T5729] rock: sig=0x4654, size=5, remaining=4 [ 70.579741][ T5739] loop0: detected capacity change from 0 to 512 [ 70.611346][ T5739] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.628135][ T5739] ext4 filesystem being mounted at /104/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 70.640453][ T5732] loop3: detected capacity change from 0 to 128 [ 70.650737][ T5739] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.583: bg 0: block 145: padding at end of block bitmap is not set [ 70.696188][ T5739] EXT4-fs (loop0): Remounting filesystem read-only [ 70.712008][ T4850] udevd[4850]: inotify_add_watch(7, /dev/loop11, 10) failed: No such file or directory [ 70.731394][ T3606] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.742648][ T242] Quota error (device loop0): dquot_write_dquot: Can't write quota structure (error -5). Quota may get out of sync! [ 70.756144][ T242] Quota error (device loop0): dquot_write_dquot: Can't write quota structure (error -5). Quota may get out of sync! [ 70.824909][ T5757] loop0: detected capacity change from 0 to 512 [ 70.832790][ T5757] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 70.871564][ T5757] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.588: bg 0: block 64: padding at end of block bitmap is not set [ 70.887154][ T5757] Quota error (device loop0): write_blk: dquota write failed [ 70.895045][ T5757] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 70.906440][ T5757] EXT4-fs error (device loop0): ext4_acquire_dquot:6848: comm syz.0.588: Failed to acquire dquot type 0 [ 70.935540][ T5757] EXT4-fs (loop0): 1 truncate cleaned up [ 70.941686][ T5757] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.004311][ T3606] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.126351][ T5775] loop4: detected capacity change from 0 to 128 [ 71.145763][ T5775] ramfs: Bad value for 'defcontext' [ 71.154631][ T29] audit: type=1400 audit(1723706266.688:1100): avc: denied { remount } for pid=5760 comm="syz.4.589" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 71.181894][ T5778] loop2: detected capacity change from 0 to 128 [ 71.216374][ T5778] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 71.245520][ T5778] ext4 filesystem being mounted at /2/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 71.492965][ T5793] netlink: 8 bytes leftover after parsing attributes in process `syz.1.596'. [ 71.511032][ T5787] loop0: detected capacity change from 0 to 512 [ 71.517628][ T5787] EXT4-fs: Ignoring removed i_version option [ 71.518558][ T5793] loop1: detected capacity change from 0 to 128 [ 71.523892][ T5787] EXT4-fs: Ignoring removed bh option [ 71.540842][ T5787] ext4: Unknown parameter 'noacl' [ 71.556276][ T5793] FAT-fs (loop1): bogus number of reserved sectors [ 71.562841][ T5793] FAT-fs (loop1): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 71.572208][ T5793] FAT-fs (loop1): Can't find a valid FAT filesystem [ 71.600506][ T5793] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5793 comm=syz.1.596 [ 71.613249][ T5793] netlink: 'syz.1.596': attribute type 1 has an invalid length. [ 71.640517][ T5793] 8021q: adding VLAN 0 to HW filter on device bond1 [ 71.666306][ T5797] loop0: detected capacity change from 0 to 512 [ 71.682184][ T5798] vlan2: entered promiscuous mode [ 71.687258][ T5798] bond1: entered promiscuous mode [ 71.692381][ T5798] vlan2: entered allmulticast mode [ 71.697526][ T5798] bond1: entered allmulticast mode [ 71.712119][ T5760] rtc_cmos 00:00: Alarms can be up to one day in the future [ 71.728028][ T5797] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 71.743622][ T5798] bond1: left allmulticast mode [ 71.748555][ T5798] bond1: left promiscuous mode [ 71.753670][ T5797] ext4 filesystem being mounted at /111/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 71.808239][ T5805] loop3: detected capacity change from 0 to 512 [ 71.825828][ T5805] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.838705][ T5805] ext4 filesystem being mounted at /36/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 71.886973][ T5805] EXT4-fs error (device loop3): ext4_do_update_inode:5154: inode #21: comm syz.3.599: corrupted inode contents [ 71.898970][ T5805] EXT4-fs error (device loop3): ext4_dirty_inode:6014: inode #21: comm syz.3.599: mark_inode_dirty error [ 71.911801][ T5805] EXT4-fs error (device loop3): ext4_do_update_inode:5154: inode #21: comm syz.3.599: corrupted inode contents [ 71.925616][ T5805] EXT4-fs error (device loop3): ext4_xattr_delete_inode:3007: inode #21: comm syz.3.599: mark_inode_dirty error [ 71.939021][ T5805] EXT4-fs error (device loop3): ext4_xattr_delete_inode:3010: inode #21: comm syz.3.599: mark inode dirty (error -117) [ 71.952745][ T5805] EXT4-fs warning (device loop3): ext4_evict_inode:271: xattr delete (err -117) [ 71.963140][ T5490] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 71.990958][ T5816] loop2: detected capacity change from 0 to 512 [ 71.998018][ T5817] usb usb9: usbfs: process 5817 (syz.1.601) did not claim interface 0 before use [ 72.010952][ T5816] EXT4-fs error (device loop2): ext4_orphan_get:1391: inode #15: comm syz.2.603: casefold flag without casefold feature [ 72.013910][ T4725] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.037742][ T5816] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.603: couldn't read orphan inode 15 (err -117) [ 72.050311][ T5816] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.083818][ T5490] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.153646][ T5829] loop4: detected capacity change from 0 to 512 [ 72.168891][ T5829] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.181985][ T5827] usb usb8: usbfs: process 5827 (syz.3.604) did not claim interface 0 before use [ 72.192488][ T5829] ext4 filesystem being mounted at /31/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 72.242787][ T5829] EXT4-fs error (device loop4): ext4_do_update_inode:5154: inode #21: comm syz.4.606: corrupted inode contents [ 72.255912][ T5829] EXT4-fs error (device loop4): ext4_dirty_inode:6014: inode #21: comm syz.4.606: mark_inode_dirty error [ 72.267644][ T5829] EXT4-fs error (device loop4): ext4_do_update_inode:5154: inode #21: comm syz.4.606: corrupted inode contents [ 72.300060][ T5829] EXT4-fs error (device loop4): ext4_xattr_delete_inode:3007: inode #21: comm syz.4.606: mark_inode_dirty error [ 72.541855][ T3335] rtc_cmos 00:00: Alarms can be up to one day in the future [ 72.542048][ T5837] pim6reg: entered allmulticast mode [ 72.549525][ T3335] rtc_cmos 00:00: Alarms can be up to one day in the future [ 72.562236][ T3335] rtc_cmos 00:00: Alarms can be up to one day in the future [ 72.568490][ T5829] EXT4-fs error (device loop4): ext4_xattr_delete_inode:3010: inode #21: comm syz.4.606: mark inode dirty (error -117) [ 72.569801][ T3335] rtc_cmos 00:00: Alarms can be up to one day in the future [ 72.588017][ T5829] EXT4-fs warning (device loop4): ext4_evict_inode:271: xattr delete (err -117) [ 72.589262][ T3335] rtc rtc0: __rtc_set_alarm: err=-22 [ 72.606731][ T5837] macvlan1: entered allmulticast mode [ 72.608462][ T3606] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 72.612167][ T5837] veth1_vlan: entered allmulticast mode [ 72.630429][ T5841] netlink: 24 bytes leftover after parsing attributes in process `syz.3.609'. [ 72.676274][ T5110] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.708093][ T5853] tmpfs: Bad value for 'mpol' [ 72.743717][ T5858] loop3: detected capacity change from 0 to 512 [ 72.747160][ T5860] FAULT_INJECTION: forcing a failure. [ 72.747160][ T5860] name failslab, interval 1, probability 0, space 0, times 0 [ 72.762696][ T5860] CPU: 1 UID: 0 PID: 5860 Comm: syz.4.613 Not tainted 6.11.0-rc3-syzkaller-00060-gd07b43284ab3 #0 [ 72.773400][ T5860] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 72.783469][ T5860] Call Trace: [ 72.786755][ T5860] [ 72.789692][ T5860] dump_stack_lvl+0xf2/0x150 [ 72.794421][ T5860] dump_stack+0x15/0x20 [ 72.798624][ T5860] should_fail_ex+0x229/0x230 [ 72.803434][ T5860] ? __alloc_skb+0x10b/0x310 [ 72.808033][ T5860] should_failslab+0x8f/0xb0 [ 72.812642][ T5860] kmem_cache_alloc_node_noprof+0x51/0x2b0 [ 72.818564][ T5860] __alloc_skb+0x10b/0x310 [ 72.822986][ T5860] netlink_alloc_large_skb+0xad/0xe0 [ 72.828347][ T5860] netlink_sendmsg+0x3b4/0x6e0 [ 72.833116][ T5860] ? __pfx_netlink_sendmsg+0x10/0x10 [ 72.838423][ T5860] __sock_sendmsg+0x140/0x180 [ 72.843111][ T5860] ____sys_sendmsg+0x312/0x410 [ 72.847932][ T5860] __sys_sendmsg+0x1e9/0x280 [ 72.852545][ T5860] __x64_sys_sendmsg+0x46/0x50 [ 72.857449][ T5860] x64_sys_call+0x2689/0x2d60 [ 72.862138][ T5860] do_syscall_64+0xc9/0x1c0 [ 72.866658][ T5860] ? clear_bhb_loop+0x55/0xb0 [ 72.871352][ T5860] ? clear_bhb_loop+0x55/0xb0 [ 72.876059][ T5860] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 72.882015][ T5860] RIP: 0033:0x7f10368799b9 [ 72.886444][ T5860] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 72.906095][ T5860] RSP: 002b:00007f10354f1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 72.914546][ T5860] RAX: ffffffffffffffda RBX: 00007f1036a15f80 RCX: 00007f10368799b9 [ 72.922513][ T5860] RDX: 0000000000000000 RSI: 0000000020000180 RDI: 0000000000000004 [ 72.930538][ T5860] RBP: 00007f10354f1090 R08: 0000000000000000 R09: 0000000000000000 [ 72.938505][ T5860] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 72.946477][ T5860] R13: 0000000000000000 R14: 00007f1036a15f80 R15: 00007ffc5ef1f4d8 [ 72.954457][ T5860] [ 72.959492][ T5858] EXT4-fs: Ignoring removed oldalloc option [ 72.995675][ T5858] EXT4-fs: Invalid want_extra_isize 7 [ 73.137587][ T5886] No such timeout policy "syz0" [ 73.144640][ T5884] FAULT_INJECTION: forcing a failure. [ 73.144640][ T5884] name failslab, interval 1, probability 0, space 0, times 0 [ 73.157349][ T5884] CPU: 0 UID: 0 PID: 5884 Comm: syz.1.619 Not tainted 6.11.0-rc3-syzkaller-00060-gd07b43284ab3 #0 [ 73.168045][ T5884] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 73.178195][ T5884] Call Trace: [ 73.181489][ T5884] [ 73.184503][ T5884] dump_stack_lvl+0xf2/0x150 [ 73.189114][ T5884] dump_stack+0x15/0x20 [ 73.193301][ T5884] should_fail_ex+0x229/0x230 [ 73.198061][ T5884] ? __alloc_skb+0x10b/0x310 [ 73.202663][ T5884] should_failslab+0x8f/0xb0 [ 73.207348][ T5884] kmem_cache_alloc_node_noprof+0x51/0x2b0 [ 73.213171][ T5884] __alloc_skb+0x10b/0x310 [ 73.217664][ T5884] netlink_alloc_large_skb+0xad/0xe0 [ 73.223008][ T5884] netlink_sendmsg+0x3b4/0x6e0 [ 73.227780][ T5884] ? __pfx_netlink_sendmsg+0x10/0x10 [ 73.233114][ T5884] __sock_sendmsg+0x140/0x180 [ 73.237807][ T5884] ____sys_sendmsg+0x312/0x410 [ 73.242699][ T5884] __sys_sendmsg+0x1e9/0x280 [ 73.247321][ T5884] __x64_sys_sendmsg+0x46/0x50 [ 73.252096][ T5884] x64_sys_call+0x2689/0x2d60 [ 73.256823][ T5884] do_syscall_64+0xc9/0x1c0 [ 73.261382][ T5884] ? clear_bhb_loop+0x55/0xb0 [ 73.266179][ T5884] ? clear_bhb_loop+0x55/0xb0 [ 73.270861][ T5884] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 73.276763][ T5884] RIP: 0033:0x7fcb0bce99b9 [ 73.281189][ T5884] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 73.300841][ T5884] RSP: 002b:00007fcb0a967038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 73.309252][ T5884] RAX: ffffffffffffffda RBX: 00007fcb0be85f80 RCX: 00007fcb0bce99b9 [ 73.317221][ T5884] RDX: 0000000000000000 RSI: 0000000020000480 RDI: 0000000000000005 [ 73.325236][ T5884] RBP: 00007fcb0a967090 R08: 0000000000000000 R09: 0000000000000000 [ 73.333269][ T5884] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 73.341235][ T5884] R13: 0000000000000000 R14: 00007fcb0be85f80 R15: 00007ffcfc6f3708 [ 73.349311][ T5884] [ 73.393380][ T5895] FAULT_INJECTION: forcing a failure. [ 73.393380][ T5895] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 73.406628][ T5895] CPU: 0 UID: 0 PID: 5895 Comm: syz.4.622 Not tainted 6.11.0-rc3-syzkaller-00060-gd07b43284ab3 #0 [ 73.417275][ T5895] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 73.427346][ T5895] Call Trace: [ 73.430721][ T5895] [ 73.433647][ T5895] dump_stack_lvl+0xf2/0x150 [ 73.438265][ T5895] dump_stack+0x15/0x20 [ 73.442526][ T5895] should_fail_ex+0x229/0x230 [ 73.447300][ T5895] should_fail+0xb/0x10 [ 73.451481][ T5895] should_fail_usercopy+0x1a/0x20 [ 73.456599][ T5895] strncpy_from_user+0x25/0x270 [ 73.461472][ T5895] ? kmem_cache_alloc_noprof+0x10c/0x290 [ 73.467171][ T5895] getname_flags+0xb0/0x3b0 [ 73.471746][ T5895] user_path_at+0x26/0x110 [ 73.476255][ T5895] __se_sys_pivot_root+0xca/0x1090 [ 73.481414][ T5895] ? vfs_write+0x5a5/0x900 [ 73.485893][ T5895] ? __fget_files+0x1da/0x210 [ 73.490750][ T5895] __x64_sys_pivot_root+0x31/0x40 [ 73.495939][ T5895] x64_sys_call+0x270b/0x2d60 [ 73.500641][ T5895] do_syscall_64+0xc9/0x1c0 [ 73.505150][ T5895] ? clear_bhb_loop+0x55/0xb0 [ 73.509905][ T5895] ? clear_bhb_loop+0x55/0xb0 [ 73.514585][ T5895] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 73.520545][ T5895] RIP: 0033:0x7f10368799b9 [ 73.524957][ T5895] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 73.544628][ T5895] RSP: 002b:00007f10354f1038 EFLAGS: 00000246 ORIG_RAX: 000000000000009b [ 73.553081][ T5895] RAX: ffffffffffffffda RBX: 00007f1036a15f80 RCX: 00007f10368799b9 [ 73.561128][ T5895] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 73.569149][ T5895] RBP: 00007f10354f1090 R08: 0000000000000000 R09: 0000000000000000 [ 73.577123][ T5895] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 73.585094][ T5895] R13: 0000000000000000 R14: 00007f1036a15f80 R15: 00007ffc5ef1f4d8 [ 73.593081][ T5895] [ 73.651226][ T5897] SELinux: security_context_str_to_sid (ñÿÿ) failed with errno=-22 [ 73.737783][ T5913] loop4: detected capacity change from 0 to 512 [ 73.757809][ T5913] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.824815][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 73.824831][ T29] audit: type=1400 audit(1723706269.358:1110): avc: denied { bind } for pid=5901 comm="syz.2.624" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 73.865287][ T5913] ext4 filesystem being mounted at /37/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 74.025370][ T5937] EXT4-fs error (device loop4): ext4_do_update_inode:5154: inode #20: comm syz.4.627: corrupted inode contents [ 74.038427][ T5937] EXT4-fs error (device loop4): ext4_dirty_inode:6014: inode #20: comm syz.4.627: mark_inode_dirty error [ 74.076931][ T5939] loop3: detected capacity change from 0 to 512 [ 74.109371][ T5937] EXT4-fs error (device loop4): ext4_do_update_inode:5154: inode #20: comm syz.4.627: corrupted inode contents [ 74.121621][ T5937] EXT4-fs error (device loop4): ext4_xattr_delete_inode:3007: inode #20: comm syz.4.627: mark_inode_dirty error [ 74.129631][ T2960] udevd[2960]: worker [3249] terminated by signal 32 (Unknown signal 32) [ 74.144946][ T5937] EXT4-fs error (device loop4): ext4_xattr_delete_inode:3010: inode #20: comm syz.4.627: mark inode dirty (error -117) [ 74.144982][ T2960] udevd[2960]: worker [3249] failed while handling '/devices/virtual/block/loop3' [ 74.145071][ T5937] ================================================================== [ 74.145111][ T5937] BUG: KCSAN: data-race in data_push_tail / vsnprintf [ 74.145161][ T5937] [ 74.145168][ T5937] write to 0xffffffff88b51208 of 1 bytes by task 2960 on cpu 1: [ 74.145188][ T5937] vsnprintf+0xdd8/0xe30 [ 74.145218][ T5937] vscnprintf+0x42/0x90 [ 74.145247][ T5937] printk_sprint+0x30/0x2d0 [ 74.145270][ T5937] vprintk_store+0x570/0x810 [ 74.145291][ T5937] vprintk_emit+0x10c/0x5e0 [ 74.145315][ T5937] devkmsg_emit+0x82/0xb0 [ 74.145338][ T5937] devkmsg_write+0x248/0x2a0 [ 74.145361][ T5937] do_iter_readv_writev+0x3b0/0x470 [ 74.145383][ T5937] vfs_writev+0x2e0/0x880 [ 74.145410][ T5937] do_writev+0xf8/0x220 [ 74.145437][ T5937] __x64_sys_writev+0x45/0x50 [ 74.145452][ T5937] x64_sys_call+0x1f18/0x2d60 [ 74.145474][ T5937] do_syscall_64+0xc9/0x1c0 [ 74.145499][ T5937] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.145531][ T5937] [ 74.145538][ T5937] read to 0xffffffff88b51208 of 8 bytes by task 5937 on cpu 0: [ 74.145552][ T5937] data_push_tail+0x102/0x430 [ 74.145577][ T5937] data_alloc+0xbe/0x2c0 [ 74.145600][ T5937] prb_reserve+0x85e/0xb60 [ 74.145631][ T5937] vprintk_store+0x53f/0x810 [ 74.145657][ T5937] vprintk_emit+0x10c/0x5e0 [ 74.145677][ T5937] vprintk_default+0x26/0x30 [ 74.145695][ T5937] vprintk+0x75/0x80 [ 74.145717][ T5937] _printk+0x7a/0xa0 [ 74.145735][ T5937] __ext4_error_inode+0x2da/0x400 [ 74.145761][ T5937] ext4_xattr_delete_inode+0x756/0x790 [ 74.145779][ T5937] ext4_evict_inode+0xa82/0xdd0 [ 74.145796][ T5937] evict+0x2d7/0x570 [ 74.145822][ T5937] iput+0x432/0x5c0 [ 74.145842][ T5937] ext4_ext_migrate+0x8e3/0x9a0 [ 74.145873][ T5937] ext4_ioctl+0x104b/0x2de0 [ 74.145916][ T5937] __se_sys_ioctl+0xd3/0x150 [ 74.145940][ T5937] __x64_sys_ioctl+0x43/0x50 [ 74.145967][ T5937] x64_sys_call+0x15cc/0x2d60 [ 74.145989][ T5937] do_syscall_64+0xc9/0x1c0 [ 74.146016][ T5937] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.146043][ T5937] [ 74.146048][ T5937] value changed: 0x00000000ffffe31f -> 0x00000000ffffe300 [ 74.146058][ T5937] [ 74.146062][ T5937] Reported by Kernel Concurrency Sanitizer on: [ 74.146071][ T5937] CPU: 0 UID: 0 PID: 5937 Comm: syz.4.627 Not tainted 6.11.0-rc3-syzkaller-00060-gd07b43284ab3 #0 [ 74.146100][ T5937] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 74.146115][ T5937] ================================================================== [ 74.157476][ T5946] loop1: detected capacity change from 0 to 512 [ 74.185265][ T5939] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2240: inode #15: comm syz.3.630: corrupted in-inode xattr: invalid ea_ino [ 74.205834][ T2960] udevd[2960]: worker [4850] terminated by signal 32 (Unknown signal 32) [ 74.211446][ T5937] EXT4-fs warning (device loop4): ext4_evict_inode:271: xattr delete (err -117) [ 74.215145][ T2960] udevd[2960]: worker [4850] failed while handling '/devices/virtual/block/loop1' [ 74.248434][ T5939] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.630: couldn't read orphan inode 15 (err -117) [ 74.251771][ T5946] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 74.275316][ T5939] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.276491][ T5946] EXT4-fs (loop1): Couldn't mount because of unsupported optional features (800) [ 74.516294][ T5110] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.550678][ T4725] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.