last executing test programs: 11.455182109s ago: executing program 4 (id=1633): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x804000, &(0x7f0000000200), 0x3, 0x4a0, &(0x7f0000000540)="$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") rename(&(0x7f00000002c0)='./file2\x00', 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x0, 0x0) 11.298970581s ago: executing program 4 (id=1637): r0 = socket$key(0xf, 0x3, 0x2) unshare(0x2000400) syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000180)='./bus\x00', 0x400000, &(0x7f0000000500)=ANY=[@ANYBLOB="666c7573682c6e6f646f74732c646973636172642c646d61736b3d30303030303030303030303030303030303030303030322c646d61736b3d30303030303030303030303030303030303030303137372c646f74732c6e6f646f74732c71756965742c646f74732c0023c3cb4d2e3cbf18508098ee0de2af38db67d42d1bc4ab714d52f019082433fc9ca2d7174b2c4e5531c9f4c7a4d53914e100"/167], 0x1, 0x140, &(0x7f0000000000)="$eJzs27Fq21AUBuDj2m3ddvFcOgi6dDJtn6CluFAqaEnwkEwJOFnsYIgXJZMfJS8YCJ683ZAo2Imxhwy2IPq+RT/8CO4dpMMV6OjT2XAwnpyO/8+i3WhE60dkMW9EJ15FM0rTAABeknlKcZNSSm+n8e4qUkpVrwgA2DbzHwDqx/wHgPox/wGgfvYPDv/+zPPeXpa1I66nRb/ol9ey//0n733N7nWWd82Kot9c9N/KPnvav473D/33tf2b+PK57O+6X//ylf5DDLa/fQAAAKiFbraw9nzf7W7qy/To+8DK+b0VH1s72wYA8AyTi8vh8Wh0ci4IgrAIVb+ZgG1bPvRVrwQAAAAAAAAAAAAAANhkF78TVb1HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAWHUbAAD//0DvUik=") r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001980)={0x1, 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000001400)='syzkaller\x00'}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={r1, 0x108, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffcd, 0xffffffffffffff2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$key(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x2, 0x7, 0x3, 0x3, 0x5, 0x0, 0x70bd29, 0x25dfdbfd, [@sadb_address={0x3, 0x5, 0xff, 0xe0, 0x0, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x38}}}]}, 0xfdef}}, 0x8000) 11.161008442s ago: executing program 4 (id=1638): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) sendmsg$sock(0xffffffffffffffff, 0x0, 0x40881) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000001d80)='/sys/power/pm_trace', 0xc02, 0xbc) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, 0x0, 0x0) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, 0x0, 0x0) setsockopt$sock_int(r3, 0x1, 0x8, 0x0, 0x0) r4 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) fstat(r2, &(0x7f0000000100)) socket$packet(0x11, 0x2, 0x300) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendto$packet(r5, &(0x7f0000000040)="10008100", 0x4, 0x0, &(0x7f0000000200)={0x11, 0x8100, r6, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x14) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NL80211_CMD_SET_STATION(r4, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[], 0xc4}, 0x1, 0x0, 0x0, 0x4000000}, 0x20004040) sendmsg$NFT_BATCH(r7, 0x0, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x13) ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, 0x0) setns(r1, 0x24020000) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x10420, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_clone(0xd5ba2180, 0x0, 0x0, 0x0, 0x0, 0x0) 10.542240992s ago: executing program 4 (id=1648): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBSENT(r0, 0x4b48, &(0x7f0000000000)={0xf, "e3ee97779ec9dd940540fcf7685352f1cbf3721f60d7df92580c2a0ce49fb6631163460b60668422b42e968b0686f7b41ed0a9713ac49db3586b8a7c5b51dc17f1ea24444c701427aa473b3a97be7473721c704a974ccf8fe862c8ecceb1ed62103df112ca689469af289bbb0a993d12e313b30726259c026a41eb4a8545b988fe97a78b9810a328f641a5dee02d82992027475402626506b784eaa287cdb3db50b45fadfde329308393a903c7cef0e5a278386be14a20fed25b028054061d01798ede6c487de72035241f5cc50a0ca8ff3c27b7ea1c9ebab3935b9cdf5d1b81fb34717c995819d33b24bda9d2687ddc8078e1cac07c4e6a53dc1d2bb87da9cef64d360debcdb73da177f9478f5dc88eac707a9409cf1a537ecd66b8b2fcf23f5a221b5fb55140951cec3b61df8039e0082e342f3e494e6b5c8d06f5b13a8ecd27e0dbee6be3a43e3f7eab1eb467e05683d676efe756cffd979329857e59d608b7844bfe04435d5c7e28836d7dcf8781f2cc39acb06d9029d1a6382c81532b3da95e275c0c445615cc3f476acf293bc3e208deed73fa2b736691e534660dfb391bac2d7ca6e0027f5476145fe53da132e8d56f708b0e23306c4a8b5886c9bcb7ac522c05982a89c7f06862fc18783fc8cd3ab1c256b3ebebb1c59bf2fd44992ffc7c09abcafcc87ba69a027708d97dedd34634183669ada63f749bec334ec232"}) ioperm(0x80000004, 0x0, 0xde) ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f0000000580)={0x1, 0x5, 0xf, 0x5}) 10.480640937s ago: executing program 4 (id=1650): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10, &(0x7f0000000140), 0xfe, 0x269, &(0x7f0000001280)="$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") setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f00000002c0)={0x3, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x2c}, {0x6}]}, 0x10) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[], 0xc1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000005, 0x13, 0xffffffffffffffff, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_MMAP_OFFSETS(r0, 0x11b, 0x7, 0x0, &(0x7f0000000000)) 10.309483621s ago: executing program 4 (id=1654): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) creat(&(0x7f0000000300)='./bus\x00', 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file8\x00', 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sysvipc/msg\x00', 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) 2.73662248s ago: executing program 3 (id=1750): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000340)="480000001400190d09034beafd0d36020a841a000000230f00000003a2bc5603ca00000f7f89004e00200000000101ff00c00e03000200000000000000000300005839c900910000", 0x48}], 0x1) r2 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r2, &(0x7f0000000600)={&(0x7f0000000000)={0x2, 0x0, @private}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="96bc1480bb58", 0x6}], 0x2, &(0x7f0000000100)=ANY=[], 0x18}, 0x0) perf_event_open(&(0x7f0000000080)={0x7, 0x80, 0x37, 0x1, 0x2, 0x0, 0x0, 0x1, 0x10, 0x6, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x5, 0x0, @perf_config_ext={0xbd5, 0x6}, 0x0, 0x4, 0xe, 0x8, 0x9, 0x8001, 0x401, 0x0, 0x3, 0x0, 0x4}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xd, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000f8ffffff000000009800000014490000ffffffff0700000022000000"], &(0x7f0000000140)='syzkaller\x00', 0xd33, 0xc6, &(0x7f0000000180)=""/198, 0x41100, 0x89, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x5, 0x5}, 0x8, 0x10, &(0x7f00000002c0)={0x5, 0x2, 0x2, 0x6}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000300)=[0x1], &(0x7f0000000340), 0x10, 0x4}, 0x90) perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0x7, 0x1, 0x7, 0x1, 0x0, 0x6, 0x401, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x4, @perf_config_ext={0x6, 0x3}, 0x320, 0x4, 0x2000000, 0x8, 0x1f, 0x6, 0x0, 0x0, 0x1, 0x0, 0x5}, 0x0, 0x1, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000440)={0x0}, &(0x7f0000000480)=0xc) capset(&(0x7f00000004c0)={0x20080522, r3}, &(0x7f0000000500)={0x3, 0x3, 0x4, 0xfffffff7, 0x6, 0x8}) 1.918544066s ago: executing program 0 (id=1768): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$netlink(r0, 0x10e, 0xa, 0xfffffffffffffffe, &(0x7f0000000040)=0xff13) 1.918404826s ago: executing program 0 (id=1769): r0 = socket$igmp(0x2, 0x3, 0x2) r1 = syz_io_uring_setup(0x4169, &(0x7f0000001380)={0x0, 0x4999, 0x10100, 0x0, 0x2}, &(0x7f0000000480), &(0x7f0000000000)=0x0) syz_io_uring_setup(0xa91, &(0x7f0000000280)={0x0, 0x0, 0xc40, 0x3}, &(0x7f0000000340)=0x0, &(0x7f00000005c0)) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x6000, @fd=r0, 0x26, 0x0, 0x0, 0x2, 0x1, {0x1}}) io_uring_enter(r1, 0x48e9, 0x30, 0x0, 0x0, 0x0) 1.918226657s ago: executing program 0 (id=1770): pipe(&(0x7f0000000500)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000180), 0xfea7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendfile(r3, r2, 0x0, 0x100000002) 1.917878856s ago: executing program 0 (id=1771): stat(&(0x7f0000000040)='./file1\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000580)='./file1\x00', 0x0, &(0x7f0000000280)={[{@init_itable_val={'init_itable', 0x3d, 0x7}}, {@nombcache}], [{@dont_hash}, {@uid_eq={'uid', 0x3d, r0}}, {@euid_eq={'euid', 0x3d, r0}}]}, 0x1, 0x59a, &(0x7f00000005c0)="$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") perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x66, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x1e) setfsuid(0xee01) sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000ec0)=ANY=[@ANYRES64=0x0, @ANYRESOCT=r0, @ANYBLOB="be89bcc2b7b52a3201a6aa17d191580b3a6919668be4c25ee5c9ea60f5ab40e7fa786872217d4af800970558215ab5369623a1c1b8d4f242f2ac0bc4c60760310da0f2dae6a48d2d82a49f4158e366c0d0a2e4ef7e7f58bb994a640690809073f66a5cb6f0321e816dae2c8a16bfd7b1828591b7939ec4ebc8d4f603e693aa6c4459bb9502d421e98cfaada84140db09d4003d08972155902c777a1b69bda122569317f90000000000000000acb84030fdb9f411f4fde2b79fc8e3360e0510a2335e4889c9b658b1c2ce0ae24fbc6fc0821abe6526fd6222d95b6684746d553c3b7ad9df90b4557f994dfef00ea39dbf73a49882"], 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x81a5c5ac3d23689b) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) syz_open_pts(0xffffffffffffffff, 0x105b01) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[@ANYBLOB="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", @ANYRESDEC=0x0], 0xfb, 0x11e0, &(0x7f00000036c0)="$eJzs3MGLG1UcB/Bf19rW1N2sWqstiA+96GVo9uBFL0G2IA0obSO0gjB1JxoyJiETFiJi9eTVv0M8ehPEm1724t/gbS8eK4gjJmq7JR6KsFPK53PJD977wu9lYOAN8+bwja8+Hg2qbJDPY+PEidiYRqQ7KVJsxD8+j1df//GnF67duHml2+vtXk3pcvd657WU0taL37/36Tcv/TA/++63W9+djoPt9w9/3fnl4PzBhcM/rn80rNKwSuPJPOXp1mQyz2+VRdobVqMspXfKIq+KNBxXxezI+KCcTKeLlI/3NlvTWVFVKR8v0qhYpPkkzWeLlH+YD8cpy7K02Qr+j/7Xd+q6jqjrx+NU1HVdPxGtOBtPxmZsRTu246l4Op6Jc/FsnI/n4vm4sJzVdN8AAAAAAAAAAAAAAAAAAADwaHH+HwAAAAAAAAAAAAAAAAAAAJp37cbNK91eb/dqSmciyi/3+/v91e9qvDuIYZRRxKVox++xPP2/sqovv9XbvZSWtuOL8vbf+dv7/ceO5jvLzwmszXdW+XQ0fzpa9+Z3oh3n1ud31ubPxCsv35PPoh0/fxCTKGMv/srezX/WSenNt3v35S8u5wEAAMCjIEv/Wrt/z7L/Gl/lH+D5wH3765Nx8WSzayeiWnwyysuymCke+uJUs238Vtd183+C4piKpu9MHIe7F73pTgAAAAAAAAAAAHgQx/E6YdNrBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4kx04FgAAAAAQ5m+dRscGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAVwEAAP//zI7XaA==") r1 = open(&(0x7f0000000040)='./file2\x00', 0x181042, 0x0) write$P9_RREADDIR(r1, &(0x7f0000000500), 0xbf) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r3, &(0x7f0000000180), 0x40001) socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(0xffffffffffffffff, 0x84, 0x81, &(0x7f00000002c0)="1a00000019000000", 0x8) sendfile(r1, r1, &(0x7f0000000240)=0xffffffffffffffff, 0x7f06) socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x1e) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r7, @ANYBLOB="090300000000008000001d0000000c0001800800030004000000"], 0x20}}, 0x0) socket(0x400000000010, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file2\x00', &(0x7f0000000340), 0x10000, &(0x7f0000000400)=ANY=[@ANYBLOB="7436616e02d90000ffff66646e6f3d", @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r5, @ANYBLOB=',version=9p2000,debug=0x0000000000000006,defcontext=sysadm_u,\x00']) 1.825476583s ago: executing program 0 (id=1773): r0 = creat(0x0, 0x0) ftruncate(0xffffffffffffffff, 0x7) io_setup(0x4, &(0x7f0000000500)=0x0) io_submit(r1, 0x2, &(0x7f0000000380)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0xfffc, r0, &(0x7f00000001c0)="7f", 0x1, 0x100000000001}, &(0x7f0000000180)={0x0, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, r0}]) 1.75319382s ago: executing program 0 (id=1777): timer_create(0x0, &(0x7f0000000440)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) syz_open_procfs$pagemap(0x0, &(0x7f0000000040)) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) 1.653706438s ago: executing program 3 (id=1780): mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x9, 0x3032, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000001500)='./file1\x00', 0x0, &(0x7f0000001080), 0x1, 0x4fe, &(0x7f0000002e00)="$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") mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, 0x0, 0x0, 0x63d014, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_aout(r0, &(0x7f00000002c0)=ANY=[], 0xc1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000005, 0x13, r0, 0x0) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x30400, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r1, 0x10d, 0x11, 0x0, &(0x7f00000000c0)) 1.537522637s ago: executing program 3 (id=1781): pipe(&(0x7f0000000500)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000180), 0xfea7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendfile(r3, r2, 0x0, 0x100000002) 1.325078304s ago: executing program 3 (id=1783): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) ioprio_set$pid(0x1, 0x0, 0x0) r0 = open(&(0x7f00000005c0)='./bus\x00', 0x145842, 0x0) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x100000}], 0x2, 0x0, 0x0, 0xb) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x9, 0x0) 1.24941128s ago: executing program 3 (id=1785): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000023896) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000840)=0x1b) r3 = dup(r2) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e22, @private=0xa010100}}, 0xfffffff9, 0x3, 0xa98c, 0xc62, 0x2, 0x2, 0x80}, &(0x7f0000000080)=0x9c) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000100)={r4, 0xf8ff}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = socket$tipc(0x1e, 0x5, 0x0) fcntl$F_SET_RW_HINT(r5, 0x40c, &(0x7f0000000040)=0x4) bind$tipc(r6, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$tipc(r6, &(0x7f00000005c0)={&(0x7f0000000000), 0x10, &(0x7f0000000480)=[{&(0x7f0000000180)="f7", 0x101d0}], 0x1}, 0x0) ioctl$HIDIOCGPHYS(r3, 0x80404812, &(0x7f0000000000)) r7 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r7, &(0x7f0000000300)={0x2, 0x0, @broadcast}, 0x10) 1.227772732s ago: executing program 1 (id=1786): pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0x9, 0x1000000000000000) 1.153046908s ago: executing program 1 (id=1788): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = openat2$dir(0xffffffffffffff9c, &(0x7f0000002300)='./cgroup\x00', &(0x7f0000002340)={0x0, 0x0, 0x1}, 0x18) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000f7850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000740)=ANY=[@ANYRES16=r2, @ANYRES16=r1, @ANYRESDEC=r1], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='workqueue_activate_work\x00', r4}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1b, 0x0, 0x0, 0x8004}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000088500000082"], 0x0, 0x6, 0xfffffce9, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='workqueue_queue_work\x00', r6}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f00000005c0)='workqueue_activate_work\x00', r3}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) r7 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) read(r7, &(0x7f0000000040)=""/148, 0xffffff96) syz_mount_image$iso9660(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0xfff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r8 = socket$inet6_sctp(0xa, 0x801, 0x84) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r8, &(0x7f0000000140)) setsockopt$inet_group_source_req(r9, 0x0, 0x2c, &(0x7f0000000080)={0x1c00, {{0x2, 0x4e22, @local}}, {{0x2, 0x4e22, @empty}}}, 0x108) r10 = socket(0x10, 0x803, 0x0) finit_module(r9, &(0x7f00000001c0)='vfat\x00', 0x3) sendmsg$nl_route(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYRES64=r9, @ANYRES64=r8, @ANYBLOB="e9000080000000003c0012800c0001006d6163766c616e002c0002801c0005800a000400aaaaaaaaaabb000004"], 0x5c}}, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x10, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 1.073584064s ago: executing program 1 (id=1789): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f00000000c0), 0x1) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x40000, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f0000000500)="a4", 0x34000, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) 1.00963208s ago: executing program 1 (id=1791): r0 = semget$private(0x0, 0x6, 0x0) r1 = msgget(0x2, 0x40) msgsnd(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="000000000000000049f9c390001e6bee9c5f6b057afb5511b64f7e51f8f1926881a88e6f040c2eb12d3d26d62d7b028f4b54eac83f12c82c2bdd2d86d83600a279de1aa7b6641432dda3687682795b158537e392ac8bb7dff2c824186b97b8ae9460f7fafe4bc6376311337165"], 0x77, 0x800) semtimedop(r0, &(0x7f0000000340)=[{0x0, 0x1}], 0x1, 0x0) semtimedop(r0, &(0x7f0000000000)=[{0x0, 0x7}, {}, {0x1, 0x1, 0x2800}], 0x3, 0x0) semop(r0, &(0x7f0000000000), 0x0) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000300)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x800001, 0x10012, r2, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)={0x64, r6, 0x601, 0x0, 0x0, {}, [{{0x8, 0x1, r4}, {0x48, 0x2, 0x0, 0x1, [{0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}]}}]}, 0x64}}, 0x4010) openat$vcs(0xffffffffffffff9c, &(0x7f0000000200), 0x88000, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x4, 0xe0ed, 0xffff, 0x15, r2, 0x771c, '\x00', r4, 0xffffffffffffffff, 0x3, 0x4, 0x4, 0xf}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0xf, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r7}, 0x10) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x12}, 0x48) r9 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r8, &(0x7f0000000380), &(0x7f0000000040)=@udp=r9}, 0x20) recvmsg(r9, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) semtimedop(r0, 0x0, 0xffffffe1, &(0x7f0000000080)) mincore(&(0x7f0000f0c000/0x3000)=nil, 0x3000, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x70) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RGETLOCK(r10, &(0x7f0000000040)=ANY=[], 0xffffff6a) 998.70293ms ago: executing program 3 (id=1792): sendmsg$IPSET_CMD_GET_BYNAME(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x0, 0x84) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000080)={0x0, 0xbe, "0ef6b2c400668ab76c180a1abe8899321fe4307232a8aca30ca7bbf0c39a984ead9fa6ac290ab53e1513f368d66b98b9d805508cd3faa604167a2d509277d1cca04600ef503ef6026e2e38b34c255590665f94c813d6055d20e4cf7b5480f0615e3d8d12064a168d4163fc1ee9535d26ec0efe1a883f0f13fc0409f71a103a5788cbb5905379fc3edfeb343370cf4fdc4a3d353f44895249b3225ffbeb1971ad41ec6c5447744fe8e86ab4958c6949ca21289d00dc4f92582bbc21f9a61e"}, &(0x7f0000000180)=0xc6) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f00000001c0)={r1, @in6={{0xa, 0x4e21, 0x935, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7f}}}, &(0x7f0000000280)=0x84) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[], 0xc1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x13, r2, 0x0) socket$xdp(0x2c, 0x3, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x12, 0x2, 0x8, 0x2}, 0x48) r3 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r2, &(0x7f0000000000), &(0x7f0000000340)=@udp6=r3}, 0x20) r4 = syz_io_uring_setup(0x40002e36, &(0x7f00000006c0)={0x0, 0x8d89, 0x4, 0x1, 0xf3, 0x0, r2}, &(0x7f0000000500)=0x0, &(0x7f0000000400)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x7, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/4, 0x4}], 0x1}) io_uring_enter(r4, 0x3bc5, 0x3, 0x0, 0x0, 0x0) shutdown(r3, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x200009, &(0x7f0000000540)={[{@data_writeback}, {@data_err_ignore}, {@minixdf}, {@errors_remount}, {@data_writeback}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x8}}, {@usrjquota}, {@delalloc}, {@nodelalloc}, {@dax_inode}, {@test_dummy_encryption}]}, 0xee, 0x46e, &(0x7f0000000c40)="$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") socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x100007) r7 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r7, 0x1, &(0x7f00000003c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 317.580505ms ago: executing program 2 (id=1799): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000070080000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000780)='mm_page_free\x00', r0}, 0x10) r1 = io_uring_setup(0x1694, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x64}) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0xc00, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) 270.490799ms ago: executing program 2 (id=1801): pipe(&(0x7f0000000500)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000180), 0xfea7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) socket$rxrpc(0x21, 0x2, 0xa) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, 0x0}, 0x0) sendfile(r3, r2, 0x0, 0x100000002) 239.542131ms ago: executing program 2 (id=1802): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f00000000c0), 0x1) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x40000, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f0000000500)="a4", 0x34000, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) 142.345459ms ago: executing program 2 (id=1803): r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x80044940, &(0x7f0000001b00)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000300)='.\x00', 0x1a4243c, &(0x7f0000007980)=ANY=[@ANYRES16=r3, @ANYRESHEX=r2, @ANYBLOB="12a4095a2aac12f0bfcb206d982e44066381388d27f14002d8d7431d3947f6399c7ff9f5193fc0398653e5a67bbb319f02bf4ac6f6ccd5acbfe1350cc3a6d2d48cf6c089ddf67171ffb3b15988e7b394c5daf3e12ca05e4dbdad7edd45f10cbc296a53a530d4c2d203ee650d5fff3a9b5aae78794fe84327e508172cdd72eeff5af4d6db9379bef20dde8e64b91d31a84ce8a7598bb78cc85108874811fc650f0520a5", @ANYRESDEC=r3, @ANYRESHEX, @ANYRES16=r1, @ANYRESDEC=0x0, @ANYBLOB="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", @ANYRES8, @ANYRES16], 0x0, 0x0, &(0x7f0000000300)) 103.513142ms ago: executing program 2 (id=1804): creat(&(0x7f0000000040)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) (async) r0 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_inet_sctp_SIOCINQ(r0, 0x541b, &(0x7f0000002080)) r1 = open(&(0x7f0000000040)='./bus\x00', 0x60142, 0x0) (async) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0xc901, &(0x7f00000000c0)={[{@mblk_io_submit}, {@init_itable}]}, 0x1, 0x4dc, &(0x7f0000000540)="$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") (async, rerun: 64) r2 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) (rerun: 64) r3 = socket$pppl2tp(0x18, 0x1, 0x1) (async, rerun: 32) r4 = socket$inet6_udp(0xa, 0x2, 0x0) (rerun: 32) connect$pppl2tp(r3, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x0, @multicast2}, 0x2}}, 0x2e) (async) r5 = socket$pppl2tp(0x18, 0x1, 0x1) (async) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000)=0x100000001, 0x0) connect$pppl2tp(r5, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @multicast2}, 0x2, 0xfffffffd}}, 0x2e) (async) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r5, 0x111, 0x4, 0x20000000, 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000008c0)={r6, 0x0, 0x14, 0x0, &(0x7f00000006c0)="f6f4e9a1d78ad62ceef1884366a578bb3fb7dbfc", 0x0, 0x0, 0x0, 0x9, 0x0, &(0x7f0000000c00)="49723b3ab53a13274c", 0x0}, 0x4c) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r2, 0x0) (async) bind$rds(0xffffffffffffffff, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000100)={0xa, &(0x7f00000001c0)=[{0x6, 0x1, 0xb2, 0x2}, {0xfffc, 0x5, 0x6, 0x1}, {0xfffe, 0x5, 0xde, 0x67}, {0x3, 0x7f, 0x80, 0x2}, {0x4, 0x0, 0x1, 0x7}, {0x8, 0x7, 0x8b, 0x10000}, {0x20, 0x6, 0x4, 0xa}, {0x3, 0x1, 0x4}, {0x101, 0xd, 0x80, 0x6}, {0x1, 0x40, 0x5, 0x3}]}) (async, rerun: 32) fallocate(r1, 0x10, 0x0, 0x2000) (rerun: 32) 41.481737ms ago: executing program 1 (id=1805): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) 39.742977ms ago: executing program 1 (id=1806): r0 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) r1 = fcntl$dupfd(r0, 0x406, r0) r2 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff3}}}, 0x24}}, 0x0) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='nodots,allow_utime=000000000034,usefree,check=strict,dots,\x00'/70], 0x1, 0x1e9, &(0x7f00000002c0)="$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") openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x440, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000009700)=@newtfilter={0x40, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x1c}}, [@filter_kind_options=@f_u32={{0x8}, {0x14, 0x2, [@TCA_U32_FLAGS={0x8, 0xb, 0x2}, @TCA_U32_HASH={0x8, 0x2, 0x62}]}}]}, 0x40}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000240)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 0s ago: executing program 2 (id=1807): r0 = socket(0x10, 0x2, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000900)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}}, 0x0, 0x26}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0xf, &(0x7f0000000180)=@ringbuf, &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r2, 0x8, 0x0, 0x0, 0x14, &(0x7f0000000600)={0x4}, 0x10}, 0xa5) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0xe, 0x4, 0x8, 0x4f63}, 0x48) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x10, &(0x7f0000000580)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}, {}, {0x85, 0x0, 0x0, 0x6a}}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r4, 0x0, 0x10, 0x10, &(0x7f00000006c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000700)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) shutdown(r1, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000005c0)={0x0, 0x1c, &(0x7f0000000280)=[@in6={0xa, 0x0, 0x0, @remote, 0x6}]}, &(0x7f0000000200)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r5, 0x84, 0x7c, &(0x7f0000000340)={r6, @in={{0x2, 0x0, @loopback}}}, &(0x7f0000000d00)=0x84) socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@newqdisc={0xe8, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x80000000, 0x7f, 0xf, 0x10000, 0x3, 0x8000, 0x6, 0x7fff, 0x5}}}}, @qdisc_kind_options=@q_netem={{0xa}, {0x84, 0x2, {{0x0, 0xff13, 0x0, 0x1000000, 0xfffffffb}, [@TCA_NETEM_RATE={0x14}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x8, 0x0, 0x0, 0x3, 0xbfa9}}, @TCA_NETEM_CORRUPT={0xc, 0x4, {0x0, 0x8001}}, @TCA_NETEM_JITTER64={0xc, 0xb, 0x7ffffffe}, @TCA_NETEM_CORR={0x10, 0x1, {0x0, 0x8}}]}}}]}, 0xe8}, 0x1, 0x0, 0x0, 0x8885}, 0x0) kernel console output (not intermixed with test programs): 2][ T29] audit: type=1400 audit(1723615350.859:2771): avc: denied { setopt } for pid=8652 comm="syz.3.1453" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 121.341316][ T8679] loop3: detected capacity change from 0 to 128 [ 121.355211][ T8679] EXT4-fs (loop3): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 121.568451][ T8684] loop1: detected capacity change from 0 to 512 [ 121.607745][ T8684] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 121.626498][ T8684] ext4 filesystem being mounted at /293/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 121.668051][ T29] audit: type=1326 audit(1723615351.709:2772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8683 comm="syz.1.1464" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa7ccbd99f9 code=0x0 [ 122.040582][ T8703] 9pnet: Could not find request transport: fd(rfdno=0x0000000000000006 [ 122.170006][ T8709] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1473'. [ 122.178972][ T8709] netlink: 'syz.3.1473': attribute type 7 has an invalid length. [ 122.227084][ T8709] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 122.235974][ T8709] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 122.236008][ T8709] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 122.236099][ T8709] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 122.303246][ T8709] vxlan0: entered promiscuous mode [ 122.399394][ T3777] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.526726][ T8713] hub 8-0:1.0: USB hub found [ 122.542901][ T8713] hub 8-0:1.0: 8 ports detected [ 122.654355][ T8716] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 123.221855][ T8719] FAULT_INJECTION: forcing a failure. [ 123.221855][ T8719] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 123.235050][ T8719] CPU: 1 UID: 0 PID: 8719 Comm: syz.3.1476 Not tainted 6.11.0-rc3-syzkaller-00013-g6b0f8db921ab #0 [ 123.245738][ T8719] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 123.255807][ T8719] Call Trace: [ 123.259094][ T8719] [ 123.262033][ T8719] dump_stack_lvl+0xf2/0x150 [ 123.266636][ T8719] dump_stack+0x15/0x20 [ 123.270810][ T8719] should_fail_ex+0x229/0x230 [ 123.275499][ T8719] should_fail+0xb/0x10 [ 123.279718][ T8719] should_fail_usercopy+0x1a/0x20 [ 123.284769][ T8719] _copy_to_user+0x1e/0xa0 [ 123.289200][ T8719] simple_read_from_buffer+0xa0/0x110 [ 123.294623][ T8719] proc_fail_nth_read+0xfc/0x140 [ 123.299621][ T8719] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 123.305226][ T8719] vfs_read+0x1a2/0x6e0 [ 123.309469][ T8719] ? __rcu_read_unlock+0x4e/0x70 [ 123.314410][ T8719] ? __fget_files+0x1da/0x210 [ 123.319106][ T8719] ksys_read+0xeb/0x1b0 [ 123.323321][ T8719] __x64_sys_read+0x42/0x50 [ 123.327910][ T8719] x64_sys_call+0x27d3/0x2d60 [ 123.332590][ T8719] do_syscall_64+0xc9/0x1c0 [ 123.337173][ T8719] ? clear_bhb_loop+0x55/0xb0 [ 123.341859][ T8719] ? clear_bhb_loop+0x55/0xb0 [ 123.346557][ T8719] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.352467][ T8719] RIP: 0033:0x7fc84137843c [ 123.356879][ T8719] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8d 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8d 02 00 48 [ 123.376517][ T8719] RSP: 002b:00007fc83fff7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 123.384945][ T8719] RAX: ffffffffffffffda RBX: 00007fc841515f80 RCX: 00007fc84137843c [ 123.392981][ T8719] RDX: 000000000000000f RSI: 00007fc83fff70a0 RDI: 0000000000000004 [ 123.401124][ T8719] RBP: 00007fc83fff7090 R08: 0000000000000000 R09: 0000000000000000 [ 123.409088][ T8719] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 123.417113][ T8719] R13: 0000000000000000 R14: 00007fc841515f80 R15: 00007ffe51769f88 [ 123.425205][ T8719] [ 123.486608][ T8725] loop1: detected capacity change from 0 to 512 [ 123.515165][ T8725] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 123.532761][ T8725] EXT4-fs (loop1): 1 orphan inode deleted [ 123.538566][ T8725] EXT4-fs (loop1): 1 truncate cleaned up [ 123.554716][ T8725] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 123.592797][ T8730] loop3: detected capacity change from 0 to 512 [ 123.640361][ T8730] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 123.675289][ T3777] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.685892][ T8730] ext4 filesystem being mounted at /87/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 123.723790][ T7842] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.735609][ T8734] loop1: detected capacity change from 0 to 512 [ 123.771357][ T8736] loop3: detected capacity change from 0 to 256 [ 123.784558][ T8736] vfat: Bad value for 'dmask' [ 123.786946][ T8734] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 123.800654][ T8736] netlink: 44 bytes leftover after parsing attributes in process `½“©'. [ 123.816749][ T8734] ext4 filesystem being mounted at /297/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 123.833033][ T8734] futex_wake_op: syz.1.1480 tries to shift op by 32; fix this program [ 123.844905][ T29] audit: type=1400 audit(1723615353.889:2773): avc: denied { rename } for pid=8733 comm="syz.1.1480" name="file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 124.267643][ T8751] loop3: detected capacity change from 0 to 128 [ 124.302539][ T8753] loop2: detected capacity change from 0 to 512 [ 124.350625][ T29] audit: type=1326 audit(1723615354.379:2774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8750 comm="syz.3.1484" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc8413799f9 code=0x0 [ 124.354616][ T8753] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 124.420417][ T8753] EXT4-fs (loop2): 1 orphan inode deleted [ 124.426310][ T8753] EXT4-fs (loop2): 1 truncate cleaned up [ 124.447476][ T8753] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 124.507787][ T8757] loop4: detected capacity change from 0 to 512 [ 124.532683][ T8020] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.544213][ T8757] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 124.558108][ T8757] ext4 filesystem being mounted at /235/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 124.612087][ T3777] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.651716][ T8757] EXT4-fs error (device loop4): ext4_add_entry:2435: inode #2: comm syz.4.1486: Directory hole found for htree leaf block 0 [ 124.696345][ T8767] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 124.718007][ T4580] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.757740][ T8771] loop1: detected capacity change from 0 to 512 [ 124.958398][ T8771] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 124.985635][ T8771] ext4 filesystem being mounted at /300/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 125.068267][ T3777] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.296112][ T8792] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1495'. [ 125.352101][ T8794] loop1: detected capacity change from 0 to 512 [ 125.388032][ T8794] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 125.414514][ T8794] ext4 filesystem being mounted at /303/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 125.499662][ T29] audit: type=1400 audit(1723615355.539:2775): avc: denied { accept } for pid=8793 comm="iou-wrk-8794" lport=39419 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 125.532965][ T8806] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1499'. [ 125.559902][ T3777] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.640332][ T8812] loop2: detected capacity change from 0 to 512 [ 125.660448][ T8814] loop1: detected capacity change from 0 to 128 [ 125.680193][ T8814] EXT4-fs (loop1): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 125.705308][ T8812] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 125.743471][ T8812] ext4 filesystem being mounted at /30/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 125.776360][ T8818] loop1: detected capacity change from 0 to 512 [ 125.802075][ T8020] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.818702][ T8818] EXT4-fs (loop1): filesystem is read-only [ 125.929947][ T8818] loop1: detected capacity change from 0 to 512 [ 125.936852][ T8818] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 125.952399][ T8818] EXT4-fs error (device loop1): ext4_ext_check_inode:520: inode #15: comm syz.1.1504: pblk 0 bad header/extent: invalid eh_entries - magic f30a, entries 24833, max 4(4), depth 0(0) [ 125.986603][ T8818] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.1504: couldn't read orphan inode 15 (err -117) [ 125.999210][ T8818] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 126.011453][ T8818] ext2 filesystem being mounted at /306/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 126.023250][ T8818] mmap: syz.1.1504 (8818): VmData 17281024 exceed data ulimit 3626. Update limits or use boot option ignore_rlimit_data. [ 126.073649][ T3777] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.114928][ T8824] loop1: detected capacity change from 0 to 512 [ 126.145923][ T8824] netlink: 44306 bytes leftover after parsing attributes in process `syz.1.1506'. [ 126.242323][ T8835] loop1: detected capacity change from 0 to 128 [ 126.289389][ T8845] loop1: detected capacity change from 0 to 512 [ 126.336156][ T8850] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1 sclass=netlink_route_socket pid=8850 comm=syz.2.1516 [ 126.336578][ T8845] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 126.385471][ T8845] ext4 filesystem being mounted at /310/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 126.419768][ T3777] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.948127][ T8887] loop2: detected capacity change from 0 to 512 [ 127.348623][ T8904] FAULT_INJECTION: forcing a failure. [ 127.348623][ T8904] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 127.361945][ T8904] CPU: 0 UID: 0 PID: 8904 Comm: syz.4.1535 Not tainted 6.11.0-rc3-syzkaller-00013-g6b0f8db921ab #0 [ 127.372627][ T8904] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 127.382680][ T8904] Call Trace: [ 127.385952][ T8904] [ 127.388887][ T8904] dump_stack_lvl+0xf2/0x150 [ 127.393497][ T8904] dump_stack+0x15/0x20 [ 127.397664][ T8904] should_fail_ex+0x229/0x230 [ 127.402396][ T8904] should_fail_alloc_page+0xfd/0x110 [ 127.407750][ T8904] __alloc_pages_noprof+0x109/0x360 [ 127.412967][ T8904] alloc_pages_mpol_noprof+0xb1/0x1e0 [ 127.418347][ T8904] vma_alloc_folio_noprof+0x1a0/0x2f0 [ 127.423729][ T8904] handle_mm_fault+0xd6d/0x2940 [ 127.428593][ T8904] ? follow_page_pte+0x35f/0xc40 [ 127.433575][ T8904] __get_user_pages+0x499/0x10d0 [ 127.438574][ T8904] __gup_longterm_locked+0x2c9/0x10b0 [ 127.443986][ T8904] gup_fast_fallback+0x1cbc/0x2480 [ 127.449227][ T8904] pin_user_pages_fast+0x5f/0x90 [ 127.454181][ T8904] io_pin_pages+0x7e/0x130 [ 127.458591][ T8904] io_sqe_buffer_register+0xa1/0xe80 [ 127.463998][ T8904] ? __kmalloc_noprof+0x203/0x370 [ 127.469024][ T8904] ? should_failslab+0x8f/0xb0 [ 127.473855][ T8904] io_sqe_buffers_register+0x313/0x420 [ 127.479372][ T8904] __se_sys_io_uring_register+0x96a/0x1070 [ 127.485185][ T8904] __x64_sys_io_uring_register+0x55/0x70 [ 127.490834][ T8904] x64_sys_call+0x202/0x2d60 [ 127.495429][ T8904] do_syscall_64+0xc9/0x1c0 [ 127.499997][ T8904] ? clear_bhb_loop+0x55/0xb0 [ 127.504683][ T8904] ? clear_bhb_loop+0x55/0xb0 [ 127.509385][ T8904] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.515290][ T8904] RIP: 0033:0x7ff4687d99f9 [ 127.519702][ T8904] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 127.539373][ T8904] RSP: 002b:00007ff467457038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 127.547830][ T8904] RAX: ffffffffffffffda RBX: 00007ff468975f80 RCX: 00007ff4687d99f9 [ 127.555851][ T8904] RDX: 00000000200002c0 RSI: 0000000000000000 RDI: 0000000000000006 [ 127.563820][ T8904] RBP: 00007ff467457090 R08: 0000000000000000 R09: 0000000000000000 [ 127.571831][ T8904] R10: 100000000000011a R11: 0000000000000246 R12: 0000000000000001 [ 127.579804][ T8904] R13: 0000000000000000 R14: 00007ff468975f80 R15: 00007ffc1504b4d8 [ 127.587797][ T8904] [ 127.598855][ T8906] loop1: detected capacity change from 0 to 512 [ 127.629097][ T8906] EXT4-fs error (device loop1): ext4_orphan_get:1391: inode #15: comm syz.1.1536: casefold flag without casefold feature [ 127.641921][ T8906] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.1536: couldn't read orphan inode 15 (err -117) [ 127.647822][ T8908] loop4: detected capacity change from 0 to 2048 [ 127.664823][ T8906] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 127.686057][ T29] audit: type=1400 audit(1723615357.729:2776): avc: denied { mounton } for pid=8905 comm="syz.1.1536" path="/315/file0/file0" dev="loop1" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 127.706156][ T8908] EXT4-fs: Ignoring removed nomblk_io_submit option [ 127.714325][ T8906] 9pnet: p9_errstr2errno: server reported unknown error ™^Pœ£—¯ [ 127.715562][ T8908] ext4: Unknown parameter 'nomblk_io_submitbarrier' [ 127.804405][ T8906] loop1: detected capacity change from 512 to 0 [ 127.810794][ T8912] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(10) [ 127.817435][ T8912] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 127.825032][ T8912] vhci_hcd vhci_hcd.0: Device attached [ 127.835830][ T8916] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 127.855228][ T8918] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2 sclass=netlink_route_socket pid=8918 comm=syz.4.1539 [ 127.876239][ T8906] vhci_hcd vhci_hcd.0: pdev(1) rhport(2) sockfd(12) [ 127.882860][ T8906] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 127.890528][ T8906] vhci_hcd vhci_hcd.0: Device attached [ 127.926664][ T8906] vhci_hcd vhci_hcd.0: pdev(1) rhport(3) sockfd(16) [ 127.933325][ T8906] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 127.940732][ T8906] vhci_hcd vhci_hcd.0: Device attached [ 127.977940][ T8926] loop4: detected capacity change from 0 to 512 [ 127.997720][ T8912] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 128.027038][ T8926] netlink: 44306 bytes leftover after parsing attributes in process `syz.4.1541'. [ 128.036468][ T3440] vhci_hcd: vhci_device speed not set [ 128.057250][ T8906] vhci_hcd vhci_hcd.0: pdev(1) rhport(5) sockfd(20) [ 128.063876][ T8906] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 128.071610][ T8906] vhci_hcd vhci_hcd.0: Device attached [ 128.102575][ T8922] vhci_hcd: connection closed [ 128.102750][ T3351] vhci_hcd: stop threads [ 128.111814][ T3351] vhci_hcd: release socket [ 128.114485][ T8927] vhci_hcd: connection closed [ 128.116235][ T3351] vhci_hcd: disconnect device [ 128.125688][ T3440] usb 3-1: new full-speed USB device number 2 using vhci_hcd [ 128.135228][ T8919] vhci_hcd: connection closed [ 128.135484][ T8913] vhci_hcd: connection reset by peer [ 128.144497][ T3351] vhci_hcd: stop threads [ 128.149866][ T3351] vhci_hcd: release socket [ 128.154278][ T3351] vhci_hcd: disconnect device [ 128.161364][ T3351] vhci_hcd: stop threads [ 128.165698][ T3351] vhci_hcd: release socket [ 128.170107][ T3351] vhci_hcd: disconnect device [ 128.176919][ T3351] vhci_hcd: stop threads [ 128.181228][ T3351] vhci_hcd: release socket [ 128.185690][ T3351] vhci_hcd: disconnect device [ 128.378954][ T8941] loop3: detected capacity change from 0 to 512 [ 128.385828][ T8941] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 128.397281][ T8941] EXT4-fs (loop3): 1 orphan inode deleted [ 128.403030][ T8941] EXT4-fs (loop3): 1 truncate cleaned up [ 128.409130][ T8941] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 128.434358][ T7842] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.457295][ T8944] loop3: detected capacity change from 0 to 1024 [ 128.465749][ T8944] EXT4-fs: quotafile must be on filesystem root [ 128.478196][ T8944] loop3: detected capacity change from 0 to 512 [ 128.486113][ T8944] EXT4-fs: Ignoring removed oldalloc option [ 128.493332][ T8944] EXT4-fs error (device loop3): ext4_xattr_inode_iget:436: comm syz.3.1548: Parent and EA inode have the same ino 15 [ 128.506843][ T8944] EXT4-fs (loop3): Remounting filesystem read-only [ 128.513384][ T8944] EXT4-fs warning (device loop3): ext4_evict_inode:271: xattr delete (err -5) [ 128.522359][ T8944] EXT4-fs (loop3): 1 orphan inode deleted [ 128.528646][ T8944] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 128.540732][ T8944] SELinux: (dev loop3, type ext4) getxattr errno 5 [ 128.547965][ T8944] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.563860][ T8944] netlink: 'syz.3.1548': attribute type 4 has an invalid length. [ 128.590616][ T8944] netlink: 'syz.3.1548': attribute type 4 has an invalid length. [ 128.606514][ T8944] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1548'. [ 128.648322][ T3777] bio_check_eod: 11 callbacks suppressed [ 128.648412][ T3777] syz-executor: attempt to access beyond end of device [ 128.648412][ T3777] loop1: rw=12288, sector=72, nr_sectors = 2 limit=0 [ 128.671087][ T3777] EXT4-fs warning (device loop1): htree_dirblock_to_tree:1083: inode #2: lblock 0: comm syz-executor: error -5 reading directory block [ 128.714472][ T3351] kworker/u8:7: attempt to access beyond end of device [ 128.714472][ T3351] loop1: rw=524288, sector=12, nr_sectors = 2 limit=0 [ 128.728305][ T3351] kworker/u8:7: attempt to access beyond end of device [ 128.728305][ T3351] loop1: rw=524288, sector=14, nr_sectors = 2 limit=0 [ 128.754499][ T3351] kworker/u8:7: attempt to access beyond end of device [ 128.754499][ T3351] loop1: rw=524288, sector=16, nr_sectors = 2 limit=0 [ 128.773069][ T3351] kworker/u8:7: attempt to access beyond end of device [ 128.773069][ T3351] loop1: rw=524288, sector=18, nr_sectors = 2 limit=0 [ 128.788901][ T3351] kworker/u8:7: attempt to access beyond end of device [ 128.788901][ T3351] loop1: rw=524288, sector=20, nr_sectors = 2 limit=0 [ 128.802739][ T3351] kworker/u8:7: attempt to access beyond end of device [ 128.802739][ T3351] loop1: rw=524288, sector=22, nr_sectors = 2 limit=0 [ 128.816439][ T3351] kworker/u8:7: attempt to access beyond end of device [ 128.816439][ T3351] loop1: rw=524288, sector=24, nr_sectors = 2 limit=0 [ 128.830313][ T8951] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1552'. [ 128.839310][ T3351] kworker/u8:7: attempt to access beyond end of device [ 128.839310][ T3351] loop1: rw=524288, sector=26, nr_sectors = 2 limit=0 [ 128.853705][ T3351] kworker/u8:7: attempt to access beyond end of device [ 128.853705][ T3351] loop1: rw=12288, sector=10, nr_sectors = 2 limit=0 [ 128.869462][ T3351] EXT4-fs error (device loop1): __ext4_get_inode_loc_noinmem:4559: inode #2: block 5: comm kworker/u8:7: unable to read itable block [ 128.883259][ T3351] Buffer I/O error on dev loop1, logical block 1, lost sync page write [ 128.891578][ T3351] EXT4-fs (loop1): I/O error while writing superblock [ 128.898841][ T6883] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.914701][ T6883] Buffer I/O error on dev loop1, logical block 1, lost sync page write [ 128.933110][ T6883] EXT4-fs (loop1): I/O error while writing superblock [ 129.012661][ T3351] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.067787][ T3351] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.158762][ T3351] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.212717][ T3351] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.238122][ T8954] chnl_net:caif_netlink_parms(): no params data found [ 129.271949][ T8954] bridge0: port 1(bridge_slave_0) entered blocking state [ 129.279259][ T8954] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.286670][ T8954] bridge_slave_0: entered allmulticast mode [ 129.293191][ T8954] bridge_slave_0: entered promiscuous mode [ 129.300371][ T8954] bridge0: port 2(bridge_slave_1) entered blocking state [ 129.307479][ T8954] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.315727][ T8954] bridge_slave_1: entered allmulticast mode [ 129.322450][ T8954] bridge_slave_1: entered promiscuous mode [ 129.351620][ T8954] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 129.361211][ T3351] bridge_slave_1: left allmulticast mode [ 129.366924][ T3351] bridge_slave_1: left promiscuous mode [ 129.372742][ T3351] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.380718][ T3351] bridge_slave_0: left allmulticast mode [ 129.386446][ T3351] bridge_slave_0: left promiscuous mode [ 129.392145][ T3351] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.445864][ T3351] dvmrp8 (unregistering): left allmulticast mode [ 129.506725][ T3351] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 129.517835][ T3351] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 129.528928][ T3351] bond0 (unregistering): Released all slaves [ 129.538104][ T8954] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 129.561560][ T8954] team0: Port device team_slave_0 added [ 129.568368][ T8954] team0: Port device team_slave_1 added [ 129.585845][ T8954] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 129.592822][ T8954] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 129.618801][ T8954] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 129.629610][ T8984] loop3: detected capacity change from 0 to 128 [ 129.630207][ T8954] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 129.642814][ T8954] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 129.668814][ T8954] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 129.679804][ T8984] EXT4-fs (loop3): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 129.693076][ T3351] hsr_slave_0: left promiscuous mode [ 129.698989][ T3351] hsr_slave_1: left promiscuous mode [ 129.705133][ T3351] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 129.712616][ T3351] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 129.720840][ T3351] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 129.728276][ T3351] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 129.737090][ T3351] veth1_vlan: left promiscuous mode [ 129.742307][ T3351] veth0_vlan: left promiscuous mode [ 129.817593][ T29] audit: type=1326 audit(1723615359.859:2777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8985 comm="syz.3.1559" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc8413799f9 code=0x0 [ 129.843281][ T3351] team0 (unregistering): Port device team_slave_1 removed [ 129.855280][ T3351] team0 (unregistering): Port device team_slave_0 removed [ 129.871264][ T8989] loop3: detected capacity change from 0 to 164 [ 129.902641][ T8954] hsr_slave_0: entered promiscuous mode [ 129.908797][ T8954] hsr_slave_1: entered promiscuous mode [ 129.915713][ T8954] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 129.923287][ T8954] Cannot create hsr debugfs directory [ 130.028650][ T8974] chnl_net:caif_netlink_parms(): no params data found [ 130.090217][ T8974] bridge0: port 1(bridge_slave_0) entered blocking state [ 130.097328][ T8974] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.117139][ T8974] bridge_slave_0: entered allmulticast mode [ 130.123745][ T8974] bridge_slave_0: entered promiscuous mode [ 130.137400][ T8974] bridge0: port 2(bridge_slave_1) entered blocking state [ 130.145193][ T8974] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.156126][ T8974] bridge_slave_1: entered allmulticast mode [ 130.170616][ T8974] bridge_slave_1: entered promiscuous mode [ 130.195487][ T8974] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 130.210331][ T8974] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 130.262468][ T8974] team0: Port device team_slave_0 added [ 130.278748][ T9009] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 130.280838][ T8974] team0: Port device team_slave_1 added [ 130.322135][ T8974] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 130.329147][ T8974] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 130.355253][ T8974] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 130.368910][ T8974] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 130.376042][ T8974] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 130.402109][ T8974] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 130.442721][ T8954] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 130.453922][ T8974] hsr_slave_0: entered promiscuous mode [ 130.460240][ T8974] hsr_slave_1: entered promiscuous mode [ 130.466706][ T8974] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 130.474264][ T8974] Cannot create hsr debugfs directory [ 130.480239][ T8954] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 130.489323][ T8954] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 130.505531][ T8954] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 130.596648][ T9015] loop3: detected capacity change from 0 to 128 [ 130.607996][ T29] audit: type=1326 audit(1723615360.649:2778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9014 comm="syz.3.1567" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc8413799f9 code=0x0 [ 130.632606][ T8974] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.648979][ T8954] 8021q: adding VLAN 0 to HW filter on device bond0 [ 130.671159][ T8954] 8021q: adding VLAN 0 to HW filter on device team0 [ 130.681833][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 130.688937][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 130.701242][ T3277] bridge0: port 2(bridge_slave_1) entered blocking state [ 130.708351][ T3277] bridge0: port 2(bridge_slave_1) entered forwarding state [ 130.722650][ T8974] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.779766][ T8974] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.797064][ T8954] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 130.828701][ T8974] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.863818][ T8954] veth0_vlan: entered promiscuous mode [ 130.872544][ T8954] veth1_vlan: entered promiscuous mode [ 130.886202][ T8954] veth0_macvtap: entered promiscuous mode [ 130.897076][ T8954] veth1_macvtap: entered promiscuous mode [ 130.917791][ T8954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 130.928424][ T8954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.938306][ T8954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 130.948758][ T8954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.958580][ T8954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 130.969015][ T8954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.978854][ T8954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 130.989295][ T8954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.999110][ T8954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 131.009566][ T8954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.020653][ T8954] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 131.028114][ T8974] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 131.039002][ T8974] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 131.049003][ T8954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 131.059474][ T8954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.069348][ T8954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 131.079968][ T8954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.089993][ T8954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 131.100488][ T8954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.110554][ T8954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 131.121066][ T8954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.130968][ T8954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 131.141385][ T8954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.153753][ T8954] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 131.165337][ T8974] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 131.174170][ T8974] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 131.180383][ T29] audit: type=1400 audit(1723615361.209:2779): avc: denied { override_creds } for pid=9027 comm="syz.4.1568" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 131.203890][ T8954] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.212638][ T8954] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.221444][ T8954] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.230244][ T8954] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.305126][ T9041] loop4: detected capacity change from 0 to 512 [ 131.310726][ T8974] 8021q: adding VLAN 0 to HW filter on device bond0 [ 131.315861][ T9041] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 131.336826][ T8974] 8021q: adding VLAN 0 to HW filter on device team0 [ 131.341870][ T9041] EXT4-fs (loop4): 1 truncate cleaned up [ 131.351395][ T3277] bridge0: port 1(bridge_slave_0) entered blocking state [ 131.354577][ T9041] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 131.358458][ T3277] bridge0: port 1(bridge_slave_0) entered forwarding state [ 131.382645][ T3277] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.389782][ T3277] bridge0: port 2(bridge_slave_1) entered forwarding state [ 131.398378][ T4580] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.502927][ T9059] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 131.539283][ T8974] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 131.625389][ T8974] veth0_vlan: entered promiscuous mode [ 131.634968][ T8974] veth1_vlan: entered promiscuous mode [ 131.654132][ T8974] veth0_macvtap: entered promiscuous mode [ 131.665041][ T8974] veth1_macvtap: entered promiscuous mode [ 131.679651][ T8974] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 131.690159][ T8974] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.700108][ T8974] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 131.710590][ T8974] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.720504][ T8974] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 131.731023][ T8974] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.741255][ T8974] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 131.752087][ T8974] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.761940][ T8974] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 131.772414][ T8974] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.782258][ T8974] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 131.792866][ T8974] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.805808][ T8974] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 131.810021][ T9078] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16) [ 131.814429][ T8974] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 131.821533][ T9078] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 131.831514][ T8974] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.849816][ T8974] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 131.860255][ T8974] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.870212][ T8974] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 131.880740][ T8974] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.890628][ T8974] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 131.901111][ T8974] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.910963][ T8974] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 131.921444][ T8974] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.931317][ T8974] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 131.941875][ T8974] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.957227][ T8974] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 131.984073][ T8974] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.993002][ T8974] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.001757][ T8974] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.010644][ T8974] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.122603][ T9084] loop0: detected capacity change from 0 to 512 [ 132.144429][ T9084] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 132.174464][ T9084] ext4 filesystem being mounted at /5/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 132.194424][ T29] audit: type=1400 audit(1723615362.229:2780): avc: denied { setattr } for pid=9083 comm="syz.0.1581" name="RAWv6" dev="sockfs" ino=27709 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 132.217837][ T29] audit: type=1400 audit(1723615362.239:2781): avc: denied { create } for pid=9083 comm="syz.0.1581" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 132.241047][ T8954] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.275761][ T3351] bond0 (unregistering): Released all slaves [ 132.378855][ T3351] IPVS: stopping backup sync thread 8073 ... [ 132.398866][ T3351] hsr_slave_0: left promiscuous mode [ 132.416733][ T9102] loop3: detected capacity change from 0 to 128 [ 132.423822][ T3351] hsr_slave_1: left promiscuous mode [ 132.447163][ T3351] veth1_macvtap: left promiscuous mode [ 132.452673][ T3351] veth0_macvtap: left promiscuous mode [ 132.458293][ T3351] veth1_vlan: left promiscuous mode [ 132.463542][ T3351] veth0_vlan: left promiscuous mode [ 132.472567][ T29] audit: type=1326 audit(1723615362.509:2782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9101 comm="syz.3.1586" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc8413799f9 code=0x0 [ 132.538631][ T9092] FAULT_INJECTION: forcing a failure. [ 132.538631][ T9092] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 132.551779][ T9092] CPU: 1 UID: 0 PID: 9092 Comm: syz.4.1583 Not tainted 6.11.0-rc3-syzkaller-00013-g6b0f8db921ab #0 [ 132.562468][ T9092] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 132.572533][ T9092] Call Trace: [ 132.575814][ T9092] [ 132.578740][ T9092] dump_stack_lvl+0xf2/0x150 [ 132.583396][ T9092] dump_stack+0x15/0x20 [ 132.587607][ T9092] should_fail_ex+0x229/0x230 [ 132.592300][ T9092] should_fail+0xb/0x10 [ 132.596505][ T9092] should_fail_usercopy+0x1a/0x20 [ 132.601620][ T9092] _copy_to_user+0x1e/0xa0 [ 132.606116][ T9092] simple_read_from_buffer+0xa0/0x110 [ 132.611497][ T9092] proc_fail_nth_read+0xfc/0x140 [ 132.616443][ T9092] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 132.622066][ T9092] vfs_read+0x1a2/0x6e0 [ 132.626258][ T9092] ? __rcu_read_unlock+0x4e/0x70 [ 132.631270][ T9092] ? __fget_files+0x1da/0x210 [ 132.635968][ T9092] ksys_read+0xeb/0x1b0 [ 132.640238][ T9092] __x64_sys_read+0x42/0x50 [ 132.644759][ T9092] x64_sys_call+0x27d3/0x2d60 [ 132.649441][ T9092] do_syscall_64+0xc9/0x1c0 [ 132.654082][ T9092] ? clear_bhb_loop+0x55/0xb0 [ 132.658789][ T9092] ? clear_bhb_loop+0x55/0xb0 [ 132.663574][ T9092] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.669482][ T9092] RIP: 0033:0x7ff4687d843c [ 132.673944][ T9092] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8d 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8d 02 00 48 [ 132.693593][ T9092] RSP: 002b:00007ff467457030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 132.702024][ T9092] RAX: ffffffffffffffda RBX: 00007ff468975f80 RCX: 00007ff4687d843c [ 132.710021][ T9092] RDX: 000000000000000f RSI: 00007ff4674570a0 RDI: 0000000000000004 [ 132.718070][ T9092] RBP: 00007ff467457090 R08: 0000000000000000 R09: 0000000000000000 [ 132.726029][ T9092] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 132.733987][ T9092] R13: 0000000000000000 R14: 00007ff468975f80 R15: 00007ffc1504b4d8 [ 132.741978][ T9092] [ 132.883813][ T9107] FAULT_INJECTION: forcing a failure. [ 132.883813][ T9107] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 132.897222][ T9107] CPU: 0 UID: 0 PID: 9107 Comm: syz.4.1588 Not tainted 6.11.0-rc3-syzkaller-00013-g6b0f8db921ab #0 [ 132.907905][ T9107] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 132.917957][ T9107] Call Trace: [ 132.921235][ T9107] [ 132.924194][ T9107] dump_stack_lvl+0xf2/0x150 [ 132.928800][ T9107] dump_stack+0x15/0x20 [ 132.932968][ T9107] should_fail_ex+0x229/0x230 [ 132.937727][ T9107] should_fail_alloc_page+0xfd/0x110 [ 132.943037][ T9107] __alloc_pages_noprof+0x109/0x360 [ 132.948271][ T9107] alloc_pages_mpol_noprof+0xb1/0x1e0 [ 132.953720][ T9107] vma_alloc_folio_noprof+0x1a0/0x2f0 [ 132.959107][ T9107] handle_mm_fault+0xd6d/0x2940 [ 132.963963][ T9107] ? follow_page_pte+0x35f/0xc40 [ 132.968988][ T9107] __get_user_pages+0x499/0x10d0 [ 132.973948][ T9107] __gup_longterm_locked+0x2c9/0x10b0 [ 132.979337][ T9107] gup_fast_fallback+0x1cbc/0x2480 [ 132.984498][ T9107] pin_user_pages_fast+0x5f/0x90 [ 132.989590][ T9107] io_pin_pages+0x7e/0x130 [ 132.994008][ T9107] io_sqe_buffer_register+0xa1/0xe80 [ 132.999293][ T9107] ? __kmalloc_noprof+0x203/0x370 [ 133.004322][ T9107] ? should_failslab+0x8f/0xb0 [ 133.009102][ T9107] io_sqe_buffers_register+0x313/0x420 [ 133.014643][ T9107] __se_sys_io_uring_register+0x96a/0x1070 [ 133.020446][ T9107] __x64_sys_io_uring_register+0x55/0x70 [ 133.026102][ T9107] x64_sys_call+0x202/0x2d60 [ 133.030733][ T9107] do_syscall_64+0xc9/0x1c0 [ 133.035232][ T9107] ? clear_bhb_loop+0x55/0xb0 [ 133.039980][ T9107] ? clear_bhb_loop+0x55/0xb0 [ 133.044780][ T9107] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.050666][ T9107] RIP: 0033:0x7ff4687d99f9 [ 133.055070][ T9107] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 133.074708][ T9107] RSP: 002b:00007ff467457038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 133.083118][ T9107] RAX: ffffffffffffffda RBX: 00007ff468975f80 RCX: 00007ff4687d99f9 [ 133.091118][ T9107] RDX: 00000000200002c0 RSI: 0000000000000000 RDI: 0000000000000006 [ 133.099089][ T9107] RBP: 00007ff467457090 R08: 0000000000000000 R09: 0000000000000000 [ 133.107054][ T9107] R10: 100000000000011a R11: 0000000000000246 R12: 0000000000000002 [ 133.115015][ T9107] R13: 0000000000000000 R14: 00007ff468975f80 R15: 00007ffc1504b4d8 [ 133.123092][ T9107] [ 133.185430][ T3440] usb 3-1: enqueue for inactive port 0 [ 133.196989][ T3440] usb 3-1: enqueue for inactive port 0 [ 133.214159][ T9119] loop4: detected capacity change from 0 to 512 [ 133.233507][ T9119] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 133.258190][ T9124] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1593'. [ 133.268298][ T9119] EXT4-fs (loop4): 1 orphan inode deleted [ 133.274033][ T9119] EXT4-fs (loop4): 1 truncate cleaned up [ 133.301098][ T3440] vhci_hcd: vhci_device speed not set [ 133.312913][ T9119] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 133.396079][ T4580] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.405318][ T9132] loop3: detected capacity change from 0 to 128 [ 133.411984][ T9132] EXT4-fs (loop3): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 133.435983][ T9130] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 133.457754][ T9134] FAULT_INJECTION: forcing a failure. [ 133.457754][ T9134] name failslab, interval 1, probability 0, space 0, times 0 [ 133.470442][ T9134] CPU: 1 UID: 0 PID: 9134 Comm: syz.4.1596 Not tainted 6.11.0-rc3-syzkaller-00013-g6b0f8db921ab #0 [ 133.481125][ T9134] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 133.491240][ T9134] Call Trace: [ 133.494508][ T9134] [ 133.497429][ T9134] dump_stack_lvl+0xf2/0x150 [ 133.502054][ T9134] dump_stack+0x15/0x20 [ 133.506312][ T9134] should_fail_ex+0x229/0x230 [ 133.510989][ T9134] ? __build_skb+0x30/0x70 [ 133.515406][ T9134] should_failslab+0x8f/0xb0 [ 133.519991][ T9134] kmem_cache_alloc_noprof+0x4c/0x290 [ 133.525422][ T9134] __build_skb+0x30/0x70 [ 133.529651][ T9134] netlink_alloc_large_skb+0x65/0xe0 [ 133.535030][ T9134] netlink_sendmsg+0x3b4/0x6e0 [ 133.539865][ T9134] ? __pfx_netlink_sendmsg+0x10/0x10 [ 133.545142][ T9134] __sock_sendmsg+0x140/0x180 [ 133.549881][ T9134] __sys_sendto+0x1e5/0x260 [ 133.554377][ T9134] __x64_sys_sendto+0x78/0x90 [ 133.559117][ T9134] x64_sys_call+0x2959/0x2d60 [ 133.563838][ T9134] do_syscall_64+0xc9/0x1c0 [ 133.568338][ T9134] ? clear_bhb_loop+0x55/0xb0 [ 133.573121][ T9134] ? clear_bhb_loop+0x55/0xb0 [ 133.577824][ T9134] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.583712][ T9134] RIP: 0033:0x7ff4687d99f9 [ 133.588179][ T9134] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 133.607850][ T9134] RSP: 002b:00007ff467457038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 133.616252][ T9134] RAX: ffffffffffffffda RBX: 00007ff468975f80 RCX: 00007ff4687d99f9 [ 133.624284][ T9134] RDX: 0000000000010a63 RSI: 0000000020000000 RDI: 0000000000000003 [ 133.632283][ T9134] RBP: 00007ff467457090 R08: 0000000000000000 R09: 4b6ae4f95a5de35b [ 133.640241][ T9134] R10: 0000000000000800 R11: 0000000000000246 R12: 0000000000000001 [ 133.648197][ T9134] R13: 0000000000000000 R14: 00007ff468975f80 R15: 00007ffc1504b4d8 [ 133.656232][ T9134] [ 133.776875][ T9152] loop4: detected capacity change from 0 to 128 [ 133.797980][ T29] audit: type=1326 audit(1723615363.839:2783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9151 comm="syz.4.1603" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff4687d99f9 code=0x0 [ 133.867412][ T29] audit: type=1400 audit(1723615363.909:2784): avc: denied { read write } for pid=9156 comm="syz.1.1605" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 133.892184][ T29] audit: type=1400 audit(1723615363.909:2785): avc: denied { open } for pid=9156 comm="syz.1.1605" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 134.012809][ T9165] loop1: detected capacity change from 0 to 128 [ 134.019617][ T9165] EXT4-fs (loop1): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 134.054167][ T9170] loop1: detected capacity change from 0 to 128 [ 134.061713][ T9170] FAT-fs (loop1): Directory bread(block 159) failed [ 134.068475][ T9170] FAT-fs (loop1): Directory bread(block 160) failed [ 134.075241][ T9170] FAT-fs (loop1): Directory bread(block 161) failed [ 134.081952][ T9170] FAT-fs (loop1): Directory bread(block 162) failed [ 134.088721][ T9170] FAT-fs (loop1): Directory bread(block 163) failed [ 134.095426][ T9170] FAT-fs (loop1): Directory bread(block 164) failed [ 134.102068][ T9170] FAT-fs (loop1): Directory bread(block 165) failed [ 134.109352][ T9170] FAT-fs (loop1): Directory bread(block 166) failed [ 134.118238][ T9170] FAT-fs (loop1): Directory bread(block 159) failed [ 134.124858][ T9170] FAT-fs (loop1): Directory bread(block 160) failed [ 134.135177][ T9170] can0: slcan on ptm0. [ 134.194450][ T9170] can0 (unregistered): slcan off ptm0. [ 134.466915][ T9200] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1619'. [ 134.479797][ T9199] infiniband syz1: set down [ 134.484376][ T9199] infiniband syz1: added ipvlan1 [ 134.502923][ T9200] loop0: detected capacity change from 0 to 512 [ 134.527395][ T9200] EXT4-fs: Ignoring removed mblk_io_submit option [ 134.534437][ T9199] RDS/IB: syz1: added [ 134.538487][ T9199] smc: adding ib device syz1 with port count 1 [ 134.549851][ T9199] smc: ib device syz1 port 1 has pnetid [ 134.562241][ T9200] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 134.584743][ T9200] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b042c118, mo2=0002] [ 134.640218][ T9200] System zones: 1-12 [ 134.681307][ T9200] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2240: inode #15: comm syz.0.1619: corrupted in-inode xattr: e_value size too large [ 134.707845][ T9205] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 134.796944][ T29] audit: type=1400 audit(1723615364.839:2786): avc: denied { write } for pid=9206 comm="syz.3.1621" laddr=::ffff:127.0.0.1 lport=20003 faddr=::ffff:127.0.0.1 fport=56360 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 134.822965][ T9200] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.1619: couldn't read orphan inode 15 (err -117) [ 134.856194][ T9200] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 134.904064][ T29] audit: type=1326 audit(1723615364.939:2787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9198 comm="syz.0.1619" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff1d49599f9 code=0x0 [ 135.357805][ T8954] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.428630][ T9219] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1624'. [ 135.437799][ T9219] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1624'. [ 135.451572][ T3434] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 135.461641][ T3434] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz0] on syz0 [ 135.528721][ T9226] FAULT_INJECTION: forcing a failure. [ 135.528721][ T9226] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 135.541814][ T9226] CPU: 1 UID: 0 PID: 9226 Comm: syz.4.1627 Not tainted 6.11.0-rc3-syzkaller-00013-g6b0f8db921ab #0 [ 135.552539][ T9226] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 135.562603][ T9226] Call Trace: [ 135.565876][ T9226] [ 135.568886][ T9226] dump_stack_lvl+0xf2/0x150 [ 135.573494][ T9226] dump_stack+0x15/0x20 [ 135.577745][ T9226] should_fail_ex+0x229/0x230 [ 135.582467][ T9226] should_fail+0xb/0x10 [ 135.586673][ T9226] should_fail_usercopy+0x1a/0x20 [ 135.591789][ T9226] _copy_from_user+0x1e/0xd0 [ 135.596385][ T9226] copy_msghdr_from_user+0x54/0x2a0 [ 135.601595][ T9226] __sys_sendmsg+0x17d/0x280 [ 135.606235][ T9226] __x64_sys_sendmsg+0x46/0x50 [ 135.611013][ T9226] x64_sys_call+0x2689/0x2d60 [ 135.615696][ T9226] do_syscall_64+0xc9/0x1c0 [ 135.620225][ T9226] ? clear_bhb_loop+0x55/0xb0 [ 135.624899][ T9226] ? clear_bhb_loop+0x55/0xb0 [ 135.629677][ T9226] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.635610][ T9226] RIP: 0033:0x7ff4687d99f9 [ 135.640023][ T9226] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 135.646298][ T9228] FAULT_INJECTION: forcing a failure. [ 135.646298][ T9228] name failslab, interval 1, probability 0, space 0, times 0 [ 135.659666][ T9226] RSP: 002b:00007ff467457038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 135.659687][ T9226] RAX: ffffffffffffffda RBX: 00007ff468975f80 RCX: 00007ff4687d99f9 [ 135.659699][ T9226] RDX: 0000000000000000 RSI: 0000000020000180 RDI: 0000000000000003 [ 135.696594][ T9226] RBP: 00007ff467457090 R08: 0000000000000000 R09: 0000000000000000 [ 135.704559][ T9226] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 135.712528][ T9226] R13: 0000000000000000 R14: 00007ff468975f80 R15: 00007ffc1504b4d8 [ 135.720488][ T9226] [ 135.723490][ T9228] CPU: 0 UID: 0 PID: 9228 Comm: syz.0.1628 Not tainted 6.11.0-rc3-syzkaller-00013-g6b0f8db921ab #0 [ 135.725650][ T9206] dccp_close: ABORT with 32 bytes unread [ 135.734148][ T9228] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 135.734162][ T9228] Call Trace: [ 135.734168][ T9228] [ 135.756096][ T9228] dump_stack_lvl+0xf2/0x150 [ 135.760792][ T9228] dump_stack+0x15/0x20 [ 135.764980][ T9228] should_fail_ex+0x229/0x230 [ 135.769671][ T9228] ? sctp_get_port_local+0x410/0xa90 [ 135.775049][ T9228] should_failslab+0x8f/0xb0 [ 135.779665][ T9228] kmem_cache_alloc_noprof+0x4c/0x290 [ 135.785094][ T9228] sctp_get_port_local+0x410/0xa90 [ 135.790273][ T9228] sctp_do_bind+0x3a1/0x4c0 [ 135.794770][ T9228] sctp_connect_new_asoc+0x15b/0x3b0 [ 135.800136][ T9228] sctp_sendmsg+0xf05/0x1920 [ 135.804737][ T9228] ? __pfx_sctp_sendmsg+0x10/0x10 [ 135.809754][ T9228] inet_sendmsg+0xc5/0xd0 [ 135.814072][ T9228] __sock_sendmsg+0x102/0x180 [ 135.818849][ T9228] ____sys_sendmsg+0x312/0x410 [ 135.823603][ T9228] __sys_sendmmsg+0x269/0x500 [ 135.828355][ T9228] __x64_sys_sendmmsg+0x57/0x70 [ 135.833272][ T9228] x64_sys_call+0xa49/0x2d60 [ 135.837852][ T9228] do_syscall_64+0xc9/0x1c0 [ 135.842422][ T9228] ? clear_bhb_loop+0x55/0xb0 [ 135.847129][ T9228] ? clear_bhb_loop+0x55/0xb0 [ 135.851798][ T9228] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.857684][ T9228] RIP: 0033:0x7ff1d49599f9 [ 135.862107][ T9228] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 135.881789][ T9228] RSP: 002b:00007ff1d35d7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 135.890210][ T9228] RAX: ffffffffffffffda RBX: 00007ff1d4af5f80 RCX: 00007ff1d49599f9 [ 135.898168][ T9228] RDX: 0000000000000002 RSI: 0000000020000e40 RDI: 0000000000000003 [ 135.906124][ T9228] RBP: 00007ff1d35d7090 R08: 0000000000000000 R09: 0000000000000000 [ 135.914151][ T9228] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 135.922117][ T9228] R13: 0000000000000000 R14: 00007ff1d4af5f80 R15: 00007ffc224e7c98 [ 135.930077][ T9228] [ 135.960120][ T9232] loop4: detected capacity change from 0 to 128 [ 135.961378][ T9234] FAULT_INJECTION: forcing a failure. [ 135.961378][ T9234] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 135.979828][ T9234] CPU: 1 UID: 0 PID: 9234 Comm: syz.3.1631 Not tainted 6.11.0-rc3-syzkaller-00013-g6b0f8db921ab #0 [ 135.990542][ T9234] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 136.000595][ T9234] Call Trace: [ 136.004029][ T9234] [ 136.006952][ T9234] dump_stack_lvl+0xf2/0x150 [ 136.011619][ T9234] dump_stack+0x15/0x20 [ 136.015836][ T9234] should_fail_ex+0x229/0x230 [ 136.020528][ T9234] should_fail+0xb/0x10 [ 136.024692][ T9234] should_fail_usercopy+0x1a/0x20 [ 136.029884][ T9234] _copy_from_iter+0xd3/0xb00 [ 136.034587][ T9234] ? __build_skb+0x30/0x70 [ 136.039149][ T9234] ? should_failslab+0x8f/0xb0 [ 136.044037][ T9234] ? kmem_cache_alloc_noprof+0x10c/0x290 [ 136.049717][ T9234] ? __build_skb_around+0x196/0x1f0 [ 136.055028][ T9234] ? __virt_addr_valid+0x1ed/0x250 [ 136.060142][ T9234] ? __check_object_size+0x35b/0x510 [ 136.065515][ T9234] netlink_sendmsg+0x460/0x6e0 [ 136.070287][ T9234] ? __pfx_netlink_sendmsg+0x10/0x10 [ 136.075584][ T9234] __sock_sendmsg+0x140/0x180 [ 136.080277][ T9234] __sys_sendto+0x1e5/0x260 [ 136.084786][ T9234] __x64_sys_sendto+0x78/0x90 [ 136.089534][ T9234] x64_sys_call+0x2959/0x2d60 [ 136.094288][ T9234] do_syscall_64+0xc9/0x1c0 [ 136.098862][ T9234] ? clear_bhb_loop+0x55/0xb0 [ 136.103549][ T9234] ? clear_bhb_loop+0x55/0xb0 [ 136.108233][ T9234] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.114206][ T9234] RIP: 0033:0x7fc8413799f9 [ 136.118610][ T9234] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 136.138206][ T9234] RSP: 002b:00007fc83fff7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 136.146610][ T9234] RAX: ffffffffffffffda RBX: 00007fc841515f80 RCX: 00007fc8413799f9 [ 136.154577][ T9234] RDX: 0000000000010a63 RSI: 0000000020000000 RDI: 0000000000000003 [ 136.162534][ T9234] RBP: 00007fc83fff7090 R08: 0000000000000000 R09: 4b6ae4f95a5de35b [ 136.170495][ T9234] R10: 0000000000000800 R11: 0000000000000246 R12: 0000000000000001 [ 136.178453][ T9234] R13: 0000000000000000 R14: 00007fc841515f80 R15: 00007ffe51769f88 [ 136.186435][ T9234] [ 136.191509][ T9244] sit0: entered allmulticast mode [ 136.215986][ T9246] loop4: detected capacity change from 0 to 512 [ 136.243541][ T9246] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 136.276915][ T9243] sit0: entered promiscuous mode [ 136.301511][ T9246] ext4 filesystem being mounted at /285/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 136.334905][ T9244] Illegal XDP return value 4290795840 on prog (id 323) dev N/A, expect packet loss! [ 136.352000][ C1] hrtimer: interrupt took 58038 ns [ 136.369068][ T4580] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.428071][ T9253] loop4: detected capacity change from 0 to 128 [ 136.496831][ T9257] loop3: detected capacity change from 0 to 128 [ 136.516641][ T9257] EXT4-fs (loop3): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 136.561630][ T9259] loop3: detected capacity change from 0 to 512 [ 136.581015][ T9259] EXT4-fs (loop3): inodes count not valid: 0 vs 32 [ 136.799118][ T9267] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1643'. [ 136.947268][ T9270] loop0: detected capacity change from 0 to 128 [ 137.174955][ T9291] loop4: detected capacity change from 0 to 128 [ 137.198904][ T9291] EXT4-fs (loop4): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 137.425194][ T9273] chnl_net:caif_netlink_parms(): no params data found [ 137.490696][ T9273] bridge0: port 1(bridge_slave_0) entered blocking state [ 137.498081][ T9273] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.524806][ T9273] bridge_slave_0: entered allmulticast mode [ 137.531804][ T9273] bridge_slave_0: entered promiscuous mode [ 137.540760][ T9273] bridge0: port 2(bridge_slave_1) entered blocking state [ 137.547888][ T9273] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.555519][ T9273] bridge_slave_1: entered allmulticast mode [ 137.562120][ T9273] bridge_slave_1: entered promiscuous mode [ 137.583792][ T9273] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 137.595608][ T9273] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 137.617195][ T9273] team0: Port device team_slave_0 added [ 137.623831][ T9273] team0: Port device team_slave_1 added [ 137.641451][ T9273] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 137.648499][ T9273] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 137.675002][ T9273] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 137.687693][ T9273] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 137.694700][ T9273] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 137.720694][ T9273] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 137.750869][ T9273] hsr_slave_0: entered promiscuous mode [ 137.761048][ T9273] hsr_slave_1: entered promiscuous mode [ 137.849760][ T9273] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.888146][ T9313] loop1: detected capacity change from 0 to 512 [ 137.895672][ T9313] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 137.912639][ T9313] EXT4-fs (loop1): 1 orphan inode deleted [ 137.918620][ T9313] EXT4-fs (loop1): 1 truncate cleaned up [ 137.927057][ T9273] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.931294][ T9313] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 137.977808][ T9273] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.000737][ T8974] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.032403][ T9317] loop3: detected capacity change from 0 to 128 [ 138.042432][ T9317] EXT4-fs (loop3): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 138.072639][ T9273] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.089035][ T9321] loop1: detected capacity change from 0 to 256 [ 138.096537][ T9321] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 138.118078][ T9317] Invalid option length (1044727) for dns_resolver key [ 138.141527][ T9321] 9pnet_fd: Insufficient options for proto=fd [ 138.141816][ T29] audit: type=1400 audit(1723615368.179:2788): avc: denied { mounton } for pid=9320 comm="syz.1.1658" path="/11/file0/file0" dev="loop1" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1 [ 138.197497][ T9273] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 138.206760][ T9273] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 138.218858][ T9323] netlink: 'syz.0.1659': attribute type 29 has an invalid length. [ 138.233582][ T9332] loop1: detected capacity change from 0 to 512 [ 138.243821][ T9273] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 138.252566][ T9323] netlink: 'syz.0.1659': attribute type 29 has an invalid length. [ 138.260821][ T9332] EXT4-fs (loop1): couldn't mount as ext2 due to feature incompatibilities [ 138.273143][ T9273] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 138.297017][ T9273] bridge0: port 2(bridge_slave_1) entered blocking state [ 138.297946][ T9332] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1662'. [ 138.304194][ T9273] bridge0: port 2(bridge_slave_1) entered forwarding state [ 138.320413][ T9273] bridge0: port 1(bridge_slave_0) entered blocking state [ 138.324151][ T9332] loop1: detected capacity change from 0 to 512 [ 138.327553][ T9273] bridge0: port 1(bridge_slave_0) entered forwarding state [ 138.343732][ T9332] EXT4-fs (loop1): orphan cleanup on readonly fs [ 138.350971][ T9332] EXT4-fs warning (device loop1): ext4_enable_quotas:7066: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 138.368942][ T9332] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 138.385008][ T9273] 8021q: adding VLAN 0 to HW filter on device bond0 [ 138.392000][ T9332] EXT4-fs error (device loop1): ext4_ext_check_inode:520: inode #13: comm syz.1.1662: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 138.404818][ T9273] 8021q: adding VLAN 0 to HW filter on device team0 [ 138.411744][ T9332] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.1662: couldn't read orphan inode 13 (err -117) [ 138.428909][ T5596] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.429025][ T9332] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 138.448758][ T5596] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.467908][ T5584] bridge0: port 1(bridge_slave_0) entered blocking state [ 138.475121][ T5584] bridge0: port 1(bridge_slave_0) entered forwarding state [ 138.483117][ T8974] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.483712][ T5584] bridge0: port 2(bridge_slave_1) entered blocking state [ 138.499252][ T5584] bridge0: port 2(bridge_slave_1) entered forwarding state [ 138.522135][ T9345] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1666'. [ 138.526353][ T9273] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 138.583962][ T9273] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 138.603231][ T29] audit: type=1400 audit(1723615368.639:2789): avc: denied { execute } for pid=9348 comm="syz.1.1667" path="/14/cpuacct.usage_percpu_user" dev="tmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 138.643500][ T29] audit: type=1400 audit(1723615368.679:2790): avc: denied { sys_module } for pid=9273 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 138.664933][ T29] audit: type=1400 audit(1723615368.679:2791): avc: denied { module_request } for pid=9273 comm="syz-executor" kmod="virt_wifi0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 138.686872][ T29] audit: type=1400 audit(1723615368.679:2792): avc: denied { read write } for pid=8974 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 138.711212][ T29] audit: type=1400 audit(1723615368.679:2793): avc: denied { open } for pid=8974 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 138.735349][ T29] audit: type=1400 audit(1723615368.679:2794): avc: denied { ioctl } for pid=8974 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=101 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 138.802263][ T9273] veth0_vlan: entered promiscuous mode [ 138.812811][ T9273] veth1_vlan: entered promiscuous mode [ 138.828171][ T29] audit: type=1400 audit(1723615368.869:2795): avc: denied { create } for pid=9361 comm="syz.1.1669" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 138.831583][ T9273] veth0_macvtap: entered promiscuous mode [ 138.857287][ T29] audit: type=1400 audit(1723615368.899:2796): avc: denied { create } for pid=9361 comm="syz.1.1669" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 138.870588][ T9273] veth1_macvtap: entered promiscuous mode [ 138.888296][ T9273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 138.898757][ T9273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.908689][ T9273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 138.919249][ T9273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.929041][ T9273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 138.939445][ T9273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.949277][ T9273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 138.959684][ T9273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.969636][ T9273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 138.980164][ T9273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.989995][ T9273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 139.000550][ T9273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.010818][ T9273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 139.021275][ T9273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.032135][ T9273] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 139.043376][ T9273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 139.053844][ T9273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.063662][ T9273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 139.074106][ T9273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.083922][ T9273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 139.094396][ T9273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.104254][ T9273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 139.114904][ T9273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.124770][ T9273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 139.132683][ T9366] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=123 sclass=netlink_route_socket pid=9366 comm=syz.3.1671 [ 139.135192][ T9273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.135212][ T9273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 139.135226][ T9273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.135240][ T9273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 139.188515][ T9273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.200537][ T9273] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 139.209228][ T9273] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.218195][ T9273] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.218241][ T9273] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.218272][ T9273] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.258925][ T9371] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1673'. [ 139.286037][ T9373] loop1: detected capacity change from 0 to 512 [ 139.316358][ T9376] loop2: detected capacity change from 0 to 1024 [ 139.316766][ T9373] netlink: 44306 bytes leftover after parsing attributes in process `syz.1.1674'. [ 139.327103][ T9376] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 139.387328][ T9392] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1678'. [ 139.387909][ T9273] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.470154][ T9398] loop0: detected capacity change from 0 to 512 [ 139.477538][ T9398] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 139.490153][ T9398] EXT4-fs (loop0): 1 truncate cleaned up [ 139.496895][ T9398] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 139.510938][ T9398] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.587652][ T9409] loop1: detected capacity change from 0 to 128 [ 139.597025][ T9409] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 139.610810][ T9409] ext4 filesystem being mounted at /25/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 139.676776][ T8974] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 139.863514][ T9432] loop2: detected capacity change from 0 to 512 [ 139.883352][ T9432] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 139.903384][ T9432] ext4 filesystem being mounted at /4/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 139.914928][ T29] kauditd_printk_skb: 70 callbacks suppressed [ 139.915018][ T29] audit: type=1400 audit(1723615369.959:2867): avc: denied { create } for pid=9437 comm="syz.0.1696" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 139.941048][ T29] audit: type=1400 audit(1723615369.959:2868): avc: denied { write } for pid=9431 comm="syz.2.1694" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 139.963016][ T29] audit: type=1400 audit(1723615369.959:2869): avc: denied { remove_name } for pid=9431 comm="syz.2.1694" name="file2" dev="loop2" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 139.985915][ T29] audit: type=1400 audit(1723615369.959:2870): avc: denied { rename } for pid=9431 comm="syz.2.1694" name="file2" dev="loop2" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 140.008242][ T29] audit: type=1400 audit(1723615369.959:2871): avc: denied { add_name } for pid=9431 comm="syz.2.1694" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 140.030084][ T29] audit: type=1400 audit(1723615369.979:2872): avc: denied { write } for pid=9437 comm="syz.0.1696" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 140.038209][ T9440] FAULT_INJECTION: forcing a failure. [ 140.038209][ T9440] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 140.049394][ T29] audit: type=1400 audit(1723615369.999:2873): avc: denied { unmount } for pid=9273 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 140.062467][ T9440] CPU: 0 UID: 0 PID: 9440 Comm: syz.3.1698 Not tainted 6.11.0-rc3-syzkaller-00013-g6b0f8db921ab #0 [ 140.082125][ T29] audit: type=1400 audit(1723615370.059:2874): avc: denied { read } for pid=9439 comm="syz.3.1698" dev="nsfs" ino=4026532557 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 140.092734][ T9440] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 140.113836][ T29] audit: type=1400 audit(1723615370.059:2875): avc: denied { open } for pid=9439 comm="syz.3.1698" path="net:[4026532557]" dev="nsfs" ino=4026532557 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 140.123844][ T9440] Call Trace: [ 140.123853][ T9440] [ 140.123861][ T9440] dump_stack_lvl+0xf2/0x150 [ 140.147003][ T29] audit: type=1400 audit(1723615370.059:2876): avc: denied { create } for pid=9439 comm="syz.3.1698" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 140.150248][ T9440] dump_stack+0x15/0x20 [ 140.181634][ T9440] should_fail_ex+0x229/0x230 [ 140.186344][ T9440] should_fail+0xb/0x10 [ 140.190495][ T9440] should_fail_usercopy+0x1a/0x20 [ 140.195572][ T9440] _copy_from_user+0x1e/0xd0 [ 140.200169][ T9440] ____sys_sendmsg+0x1a4/0x410 [ 140.204988][ T9440] __sys_sendmsg+0x1e9/0x280 [ 140.209609][ T9440] __x64_sys_sendmsg+0x46/0x50 [ 140.214380][ T9440] x64_sys_call+0x2689/0x2d60 [ 140.219389][ T9440] do_syscall_64+0xc9/0x1c0 [ 140.223914][ T9440] ? clear_bhb_loop+0x55/0xb0 [ 140.228598][ T9440] ? clear_bhb_loop+0x55/0xb0 [ 140.233280][ T9440] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.239178][ T9440] RIP: 0033:0x7fc8413799f9 [ 140.243598][ T9440] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 140.263276][ T9440] RSP: 002b:00007fc83fff7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 140.271689][ T9440] RAX: ffffffffffffffda RBX: 00007fc841515f80 RCX: 00007fc8413799f9 [ 140.279671][ T9440] RDX: 0000000000000000 RSI: 0000000020000180 RDI: 0000000000000006 [ 140.287640][ T9440] RBP: 00007fc83fff7090 R08: 0000000000000000 R09: 0000000000000000 [ 140.295607][ T9440] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 140.303722][ T9440] R13: 0000000000000000 R14: 00007fc841515f80 R15: 00007ffe51769f88 [ 140.311703][ T9440] [ 140.334364][ T9443] FAULT_INJECTION: forcing a failure. [ 140.334364][ T9443] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 140.347538][ T9443] CPU: 0 UID: 0 PID: 9443 Comm: syz.0.1699 Not tainted 6.11.0-rc3-syzkaller-00013-g6b0f8db921ab #0 [ 140.358212][ T9443] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 140.368273][ T9443] Call Trace: [ 140.371549][ T9443] [ 140.374476][ T9443] dump_stack_lvl+0xf2/0x150 [ 140.379112][ T9443] dump_stack+0x15/0x20 [ 140.383275][ T9443] should_fail_ex+0x229/0x230 [ 140.387956][ T9443] should_fail+0xb/0x10 [ 140.392154][ T9443] should_fail_usercopy+0x1a/0x20 [ 140.397196][ T9443] _copy_to_user+0x1e/0xa0 [ 140.401621][ T9443] simple_read_from_buffer+0xa0/0x110 [ 140.407002][ T9443] proc_fail_nth_read+0xfc/0x140 [ 140.411967][ T9443] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 140.413264][ T9273] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.417506][ T9443] vfs_read+0x1a2/0x6e0 [ 140.430597][ T9443] ? __rcu_read_unlock+0x4e/0x70 [ 140.435546][ T9443] ? __fget_files+0x1da/0x210 [ 140.440336][ T9443] ksys_read+0xeb/0x1b0 [ 140.444497][ T9443] __x64_sys_read+0x42/0x50 [ 140.449069][ T9443] x64_sys_call+0x27d3/0x2d60 [ 140.453813][ T9443] do_syscall_64+0xc9/0x1c0 [ 140.458332][ T9443] ? clear_bhb_loop+0x55/0xb0 [ 140.463102][ T9443] ? clear_bhb_loop+0x55/0xb0 [ 140.467792][ T9443] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.473764][ T9443] RIP: 0033:0x7ff1d495843c [ 140.478195][ T9443] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8d 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8d 02 00 48 [ 140.497801][ T9443] RSP: 002b:00007ff1d35d7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 140.506218][ T9443] RAX: ffffffffffffffda RBX: 00007ff1d4af5f80 RCX: 00007ff1d495843c [ 140.514262][ T9443] RDX: 000000000000000f RSI: 00007ff1d35d70a0 RDI: 0000000000000004 [ 140.522235][ T9443] RBP: 00007ff1d35d7090 R08: 0000000000000000 R09: 0000000000000000 [ 140.530203][ T9443] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 140.538175][ T9443] R13: 0000000000000000 R14: 00007ff1d4af5f80 R15: 00007ffc224e7c98 [ 140.546152][ T9443] [ 140.581885][ T9449] netlink: 'syz.2.1697': attribute type 5 has an invalid length. [ 140.595997][ T9449] netlink: 'syz.2.1697': attribute type 21 has an invalid length. [ 140.632563][ T9458] FAULT_INJECTION: forcing a failure. [ 140.632563][ T9458] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 140.645839][ T9458] CPU: 0 UID: 0 PID: 9458 Comm: syz.2.1705 Not tainted 6.11.0-rc3-syzkaller-00013-g6b0f8db921ab #0 [ 140.656602][ T9458] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 140.666648][ T9458] Call Trace: [ 140.669912][ T9458] [ 140.672833][ T9458] dump_stack_lvl+0xf2/0x150 [ 140.677424][ T9458] dump_stack+0x15/0x20 [ 140.681658][ T9458] should_fail_ex+0x229/0x230 [ 140.686331][ T9458] should_fail_alloc_page+0xfd/0x110 [ 140.691765][ T9458] __alloc_pages_noprof+0x109/0x360 [ 140.697055][ T9458] alloc_pages_mpol_noprof+0xb1/0x1e0 [ 140.702418][ T9458] vma_alloc_folio_noprof+0x1a0/0x2f0 [ 140.707895][ T9458] handle_mm_fault+0xd6d/0x2940 [ 140.712745][ T9458] ? follow_page_pte+0x35f/0xc40 [ 140.717683][ T9458] __get_user_pages+0x499/0x10d0 [ 140.722634][ T9458] __gup_longterm_locked+0x2c9/0x10b0 [ 140.728010][ T9458] gup_fast_fallback+0x1cbc/0x2480 [ 140.733198][ T9458] pin_user_pages_fast+0x5f/0x90 [ 140.738203][ T9458] io_pin_pages+0x7e/0x130 [ 140.742609][ T9458] io_sqe_buffer_register+0xa1/0xe80 [ 140.747886][ T9458] ? __kmalloc_noprof+0x203/0x370 [ 140.752907][ T9458] ? should_failslab+0x8f/0xb0 [ 140.757720][ T9458] io_sqe_buffers_register+0x313/0x420 [ 140.763173][ T9458] __se_sys_io_uring_register+0x96a/0x1070 [ 140.768972][ T9458] __x64_sys_io_uring_register+0x55/0x70 [ 140.774594][ T9458] x64_sys_call+0x202/0x2d60 [ 140.779291][ T9458] do_syscall_64+0xc9/0x1c0 [ 140.783864][ T9458] ? clear_bhb_loop+0x55/0xb0 [ 140.788534][ T9458] ? clear_bhb_loop+0x55/0xb0 [ 140.793306][ T9458] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.799757][ T9458] RIP: 0033:0x7fd6406199f9 [ 140.804162][ T9458] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 140.823761][ T9458] RSP: 002b:00007fd63f291038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 140.832313][ T9458] RAX: ffffffffffffffda RBX: 00007fd6407b5f80 RCX: 00007fd6406199f9 [ 140.840274][ T9458] RDX: 00000000200002c0 RSI: 0000000000000000 RDI: 0000000000000006 [ 140.848271][ T9458] RBP: 00007fd63f291090 R08: 0000000000000000 R09: 0000000000000000 [ 140.856352][ T9458] R10: 100000000000011a R11: 0000000000000246 R12: 0000000000000002 [ 140.864378][ T9458] R13: 0000000000000000 R14: 00007fd6407b5f80 R15: 00007fff0b4980b8 [ 140.872341][ T9458] [ 140.959359][ T9460] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 140.968357][ T9460] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 141.300248][ T9467] SELinux: Context system_u:object_r:var_lib_t:s0 is not valid (left unmapped). [ 141.384771][ T9474] loop1: detected capacity change from 0 to 8192 [ 141.430273][ T9474] loop1: p2 p4 < p5 p6 p7 p8 p9 p10 p11 p12 p13 p14 p15 p16 p17 p18 p19 p20 p21 p22 p23 p24 p25 p26 p27 p28 p29 p30 p31 p32 p33 p34 p35 p36 p37 p38 p39 p40 p41 p42 p43 p44 p45 p46 p47 p48 p49 p50 p51 p52 p53 p54 p55 p56 p57 p58 p59 p60 p61 p62 p63 p64 p65 p66 p67 p68 p69 p70 p71 p72 p73 p74 p75 p76 p77 p78 p79 p80 p81 p82 p83 p84 p85 p86 p87 p88 p89 p90 p91 p92 p93 p94 p95 p96 p97 p98 p99 p100 p101 p102 p103 p104 p105 p106 p107 p108 p109 p110 p111 p112 p113 p114 p115 p116 p117 p118 p119 p120 p121 p122 p123 p124 p125 p126 p127 p128 p129 p130 p131 p132 p133 p134 p135 p136 p137 p138 p139 p140 p141 p142 p143 p144 p145 p146 p147 p148 p149 p150 p151 p152 p153 p154 p155 p156 p157 p158 p159 p160 p161 p162 p163 p164 p165 p166 p167 p168 p169 p170 p171 p172 p173 p174 p175 p176 p177 p178 p179 p180 p181 p182 p183 p184 p185 p186 p187 p188 p189 p190 p191 p192 p193 p194 p195 p196 p197 p198 p199 p200 p201 p202 p203 p204 p205 p206 p207 p208 p209 p210 p211 p212 p213 p214 p215 p216 p217 p218 p219 p220 p221 p222 p223 p224 p225 [ 141.430424][ T9474] loop1: p2 size 65536 extends beyond EOD, truncated [ 141.531606][ T9474] loop1: p5 size 65536 extends beyond EOD, truncated [ 141.538753][ T9474] loop1: p6 size 65536 extends beyond EOD, truncated [ 141.546247][ T9474] loop1: p7 size 65536 extends beyond EOD, truncated [ 141.553407][ T9474] loop1: p8 size 65536 extends beyond EOD, truncated [ 141.560496][ T9474] loop1: p9 size 65536 extends beyond EOD, truncated [ 141.567773][ T9474] loop1: p10 size 65536 extends beyond EOD, truncated [ 141.575357][ T9474] loop1: p11 size 65536 extends beyond EOD, truncated [ 141.582739][ T9474] loop1: p12 size 65536 extends beyond EOD, truncated [ 141.590162][ T9474] loop1: p13 size 65536 extends beyond EOD, truncated [ 141.597358][ T9474] loop1: p14 size 65536 extends beyond EOD, truncated [ 141.604761][ T9474] loop1: p15 size 65536 extends beyond EOD, truncated [ 141.612276][ T9474] loop1: p16 size 65536 extends beyond EOD, truncated [ 141.621198][ T9474] loop1: p17 size 65536 extends beyond EOD, truncated [ 141.628687][ T9474] loop1: p18 size 65536 extends beyond EOD, truncated [ 141.637418][ T9474] loop1: p19 size 65536 extends beyond EOD, truncated [ 141.644951][ T9474] loop1: p20 size 65536 extends beyond EOD, truncated [ 141.652192][ T9474] loop1: p21 size 65536 extends beyond EOD, truncated [ 141.659567][ T9474] loop1: p22 size 65536 extends beyond EOD, truncated [ 141.666890][ T9474] loop1: p23 size 65536 extends beyond EOD, truncated [ 141.674311][ T9474] loop1: p24 size 65536 extends beyond EOD, truncated [ 141.681481][ T9474] loop1: p25 size 65536 extends beyond EOD, truncated [ 141.688694][ T9474] loop1: p26 size 65536 extends beyond EOD, truncated [ 141.696006][ T9474] loop1: p27 size 65536 extends beyond EOD, truncated [ 141.703362][ T9474] loop1: p28 size 65536 extends beyond EOD, truncated [ 141.710579][ T9474] loop1: p29 size 65536 extends beyond EOD, truncated [ 141.717771][ T9474] loop1: p30 size 65536 extends beyond EOD, truncated [ 141.724923][ T9474] loop1: p31 size 65536 extends beyond EOD, truncated [ 141.732309][ T9474] loop1: p32 size 65536 extends beyond EOD, truncated [ 141.740339][ T9474] loop1: p33 size 65536 extends beyond EOD, truncated [ 141.747722][ T9474] loop1: p34 size 65536 extends beyond EOD, truncated [ 141.756426][ T9474] loop1: p35 size 65536 extends beyond EOD, truncated [ 141.763763][ T9474] loop1: p36 size 65536 extends beyond EOD, truncated [ 141.771107][ T9474] loop1: p37 size 65536 extends beyond EOD, truncated [ 141.778467][ T9474] loop1: p38 size 65536 extends beyond EOD, truncated [ 141.785916][ T9474] loop1: p39 size 65536 extends beyond EOD, truncated [ 141.793047][ T9474] loop1: p40 size 65536 extends beyond EOD, truncated [ 141.801062][ T9474] loop1: p41 size 65536 extends beyond EOD, truncated [ 141.808331][ T9474] loop1: p42 size 65536 extends beyond EOD, truncated [ 141.815541][ T9474] loop1: p43 size 65536 extends beyond EOD, truncated [ 141.822711][ T9474] loop1: p44 size 65536 extends beyond EOD, truncated [ 141.830240][ T9474] loop1: p45 size 65536 extends beyond EOD, truncated [ 141.837653][ T9474] loop1: p46 size 65536 extends beyond EOD, truncated [ 141.845111][ T9474] loop1: p47 size 65536 extends beyond EOD, truncated [ 141.852564][ T9474] loop1: p48 size 65536 extends beyond EOD, truncated [ 141.860037][ T9474] loop1: p49 size 65536 extends beyond EOD, truncated [ 141.867356][ T9474] loop1: p50 size 65536 extends beyond EOD, truncated [ 141.875176][ T9474] loop1: p51 size 65536 extends beyond EOD, truncated [ 141.882615][ T9474] loop1: p52 size 65536 extends beyond EOD, truncated [ 141.890953][ T9474] loop1: p53 size 65536 extends beyond EOD, truncated [ 141.900250][ T9474] loop1: p54 size 65536 extends beyond EOD, truncated [ 141.908114][ T9474] loop1: p55 size 65536 extends beyond EOD, truncated [ 141.908995][ T9481] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1711'. [ 141.915763][ T9474] loop1: p56 size 65536 extends beyond EOD, truncated [ 141.931562][ T9474] loop1: p57 size 65536 extends beyond EOD, truncated [ 141.939004][ T9474] loop1: p58 size 65536 extends beyond EOD, truncated [ 141.946332][ T9474] loop1: p59 size 65536 extends beyond EOD, truncated [ 141.953728][ T9474] loop1: p60 size 65536 extends beyond EOD, truncated [ 141.961075][ T9474] loop1: p61 size 65536 extends beyond EOD, truncated [ 141.968503][ T9474] loop1: p62 size 65536 extends beyond EOD, truncated [ 141.976376][ T9474] loop1: p63 size 65536 extends beyond EOD, truncated [ 141.983893][ T9474] loop1: p64 size 65536 extends beyond EOD, truncated [ 141.997509][ T9474] loop1: p65 size 65536 extends beyond EOD, truncated [ 142.005191][ T9474] loop1: p66 size 65536 extends beyond EOD, truncated [ 142.012547][ T9474] loop1: p67 size 65536 extends beyond EOD, truncated [ 142.019912][ T9474] loop1: p68 size 65536 extends beyond EOD, truncated [ 142.027519][ T9474] loop1: p69 size 65536 extends beyond EOD, truncated [ 142.034887][ T9474] loop1: p70 size 65536 extends beyond EOD, truncated [ 142.042360][ T9474] loop1: p71 size 65536 extends beyond EOD, truncated [ 142.043302][ T9488] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 142.049833][ T9474] loop1: p72 size 65536 extends beyond EOD, truncated [ 142.064065][ T9474] loop1: p73 size 65536 extends beyond EOD, truncated [ 142.071529][ T9474] loop1: p74 size 65536 extends beyond EOD, truncated [ 142.079174][ T9474] loop1: p75 size 65536 extends beyond EOD, truncated [ 142.086529][ T9474] loop1: p76 size 65536 extends beyond EOD, truncated [ 142.093826][ T9474] loop1: p77 size 65536 extends beyond EOD, truncated [ 142.101386][ T9474] loop1: p78 size 65536 extends beyond EOD, truncated [ 142.108942][ T9474] loop1: p79 size 65536 extends beyond EOD, truncated [ 142.116448][ T9474] loop1: p80 size 65536 extends beyond EOD, truncated [ 142.124013][ T9474] loop1: p81 size 65536 extends beyond EOD, truncated [ 142.131650][ T9474] loop1: p82 size 65536 extends beyond EOD, truncated [ 142.139389][ T9474] loop1: p83 size 65536 extends beyond EOD, truncated [ 142.147112][ T9474] loop1: p84 size 65536 extends beyond EOD, truncated [ 142.154775][ T9474] loop1: p85 size 65536 extends beyond EOD, truncated [ 142.157612][ T9469] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 142.163400][ T9474] loop1: p86 size 65536 extends beyond EOD, truncated [ 142.178015][ T9474] loop1: p87 size 65536 extends beyond EOD, truncated [ 142.186619][ T9474] loop1: p88 size 65536 extends beyond EOD, truncated [ 142.194445][ T9474] loop1: p89 size 65536 extends beyond EOD, truncated [ 142.201820][ T9474] loop1: p90 size 65536 extends beyond EOD, truncated [ 142.212123][ T9474] loop1: p91 size 65536 extends beyond EOD, truncated [ 142.220130][ T9474] loop1: p92 size 65536 extends beyond EOD, truncated [ 142.228074][ T9474] loop1: p93 size 65536 extends beyond EOD, truncated [ 142.235993][ T9474] loop1: p94 size 65536 extends beyond EOD, truncated [ 142.243540][ T9474] loop1: p95 size 65536 extends beyond EOD, truncated [ 142.250863][ T9474] loop1: p96 size 65536 extends beyond EOD, truncated [ 142.258754][ T9474] loop1: p97 size 65536 extends beyond EOD, truncated [ 142.266286][ T9474] loop1: p98 size 65536 extends beyond EOD, truncated [ 142.272778][ T9491] loop0: detected capacity change from 0 to 256 [ 142.273804][ T9474] loop1: p99 size 65536 extends beyond EOD, truncated [ 142.286946][ T9474] loop1: p100 size 65536 extends beyond EOD, truncated [ 142.294365][ T9474] loop1: p101 size 65536 extends beyond EOD, truncated [ 142.302560][ T9474] loop1: p102 size 65536 extends beyond EOD, truncated [ 142.310156][ T9474] loop1: p103 size 65536 extends beyond EOD, truncated [ 142.317809][ T9474] loop1: p104 size 65536 extends beyond EOD, truncated [ 142.324468][ T9493] FAULT_INJECTION: forcing a failure. [ 142.324468][ T9493] name failslab, interval 1, probability 0, space 0, times 0 [ 142.325324][ T9474] loop1: p105 size 65536 extends beyond EOD, [ 142.337257][ T9493] CPU: 1 UID: 0 PID: 9493 Comm: syz.0.1714 Not tainted 6.11.0-rc3-syzkaller-00013-g6b0f8db921ab #0 [ 142.337282][ T9493] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 142.337294][ T9493] Call Trace: [ 142.337302][ T9493] [ 142.337310][ T9493] dump_stack_lvl+0xf2/0x150 [ 142.343337][ T9474] truncated [ 142.344194][ T9474] loop1: p106 size 65536 extends beyond EOD, [ 142.353975][ T9493] dump_stack+0x15/0x20 [ 142.364107][ T9474] truncated [ 142.367355][ T9493] should_fail_ex+0x229/0x230 [ 142.367385][ T9493] ? sctp_get_port_local+0x410/0xa90 [ 142.371234][ T9474] loop1: p107 size 65536 extends beyond EOD, [ 142.374855][ T9493] should_failslab+0x8f/0xb0 [ 142.374887][ T9493] kmem_cache_alloc_noprof+0x4c/0x290 [ 142.374911][ T9493] sctp_get_port_local+0x410/0xa90 [ 142.374974][ T9493] sctp_do_bind+0x3a1/0x4c0 [ 142.375003][ T9493] sctp_connect_new_asoc+0x15b/0x3b0 [ 142.375032][ T9493] sctp_sendmsg+0xf05/0x1920 [ 142.375094][ T9493] ? __pfx_sctp_sendmsg+0x10/0x10 [ 142.375121][ T9493] inet_sendmsg+0xc5/0xd0 [ 142.375145][ T9493] __sock_sendmsg+0x102/0x180 [ 142.375194][ T9493] ____sys_sendmsg+0x312/0x410 [ 142.375221][ T9493] __sys_sendmmsg+0x269/0x500 [ 142.375255][ T9493] __x64_sys_sendmmsg+0x57/0x70 [ 142.378329][ T9474] truncated [ 142.384404][ T9493] x64_sys_call+0xa49/0x2d60 [ 142.384566][ T9493] do_syscall_64+0xc9/0x1c0 [ 142.389412][ T9474] loop1: p108 size 65536 extends beyond EOD, [ 142.391771][ T9493] ? clear_bhb_loop+0x55/0xb0 [ 142.396481][ T9474] truncated [ 142.401679][ T9493] ? clear_bhb_loop+0x55/0xb0 [ 142.408649][ T9474] loop1: p109 size 65536 extends beyond EOD, [ 142.412280][ T9493] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.417662][ T9474] truncated [ 142.422707][ T9493] RIP: 0033:0x7ff1d49599f9 [ 142.427876][ T9474] loop1: p110 size 65536 extends beyond EOD, [ 142.432442][ T9493] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 142.437046][ T9474] truncated [ 142.442004][ T9493] RSP: 002b:00007ff1d35d7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 142.442025][ T9493] RAX: ffffffffffffffda RBX: 00007ff1d4af5f80 RCX: 00007ff1d49599f9 [ 142.447096][ T9474] loop1: p111 size 65536 extends beyond EOD, [ 142.450995][ T9493] RDX: 0000000000000002 RSI: 0000000020000e40 RDI: 0000000000000003 [ 142.455839][ T9474] truncated [ 142.460386][ T9493] RBP: 00007ff1d35d7090 R08: 0000000000000000 R09: 0000000000000000 [ 142.585746][ T9493] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 142.593706][ T9493] R13: 0000000000000000 R14: 00007ff1d4af5f80 R15: 00007ffc224e7c98 [ 142.601684][ T9493] [ 142.613295][ T9474] loop1: p112 size 65536 extends beyond EOD, truncated [ 142.621645][ T9474] loop1: p113 size 65536 extends beyond EOD, truncated [ 142.632257][ T9474] loop1: p114 size 65536 extends beyond EOD, truncated [ 142.639643][ T9474] loop1: p115 size 65536 extends beyond EOD, truncated [ 142.649037][ T9474] loop1: p116 size 65536 extends beyond EOD, truncated [ 142.657080][ T9474] loop1: p117 size 65536 extends beyond EOD, truncated [ 142.666619][ T9474] loop1: p118 size 65536 extends beyond EOD, truncated [ 142.674540][ T9474] loop1: p119 size 65536 extends beyond EOD, truncated [ 142.682443][ T9474] loop1: p120 size 65536 extends beyond EOD, truncated [ 142.690377][ T9474] loop1: p121 size 65536 extends beyond EOD, truncated [ 142.698087][ T9474] loop1: p122 size 65536 extends beyond EOD, truncated [ 142.705817][ T9474] loop1: p123 size 65536 extends beyond EOD, truncated [ 142.713238][ T9474] loop1: p124 size 65536 extends beyond EOD, truncated [ 142.720678][ T9474] loop1: p125 size 65536 extends beyond EOD, truncated [ 142.728320][ T9474] loop1: p126 size 65536 extends beyond EOD, truncated [ 142.735774][ T9474] loop1: p127 size 65536 extends beyond EOD, truncated [ 142.743039][ T9474] loop1: p128 size 65536 extends beyond EOD, truncated [ 142.750481][ T9474] loop1: p129 size 65536 extends beyond EOD, truncated [ 142.758135][ T9474] loop1: p130 size 65536 extends beyond EOD, truncated [ 142.765558][ T9474] loop1: p131 size 65536 extends beyond EOD, truncated [ 142.772848][ T9474] loop1: p132 size 65536 extends beyond EOD, truncated [ 142.780198][ T9474] loop1: p133 size 65536 extends beyond EOD, truncated [ 142.788291][ T9474] loop1: p134 size 65536 extends beyond EOD, truncated [ 142.795863][ T9474] loop1: p135 size 65536 extends beyond EOD, truncated [ 142.803312][ T9474] loop1: p136 size 65536 extends beyond EOD, truncated [ 142.810725][ T9474] loop1: p137 size 65536 extends beyond EOD, truncated [ 142.818270][ T9474] loop1: p138 size 65536 extends beyond EOD, truncated [ 142.826838][ T9474] loop1: p139 size 65536 extends beyond EOD, truncated [ 142.834253][ T9474] loop1: p140 size 65536 extends beyond EOD, truncated [ 142.841960][ T9474] loop1: p141 size 65536 extends beyond EOD, truncated [ 142.849514][ T9474] loop1: p142 size 65536 extends beyond EOD, truncated [ 142.861914][ T9474] loop1: p143 size 65536 extends beyond EOD, truncated [ 142.869505][ T9474] loop1: p144 size 65536 extends beyond EOD, truncated [ 142.877197][ T9474] loop1: p145 size 65536 extends beyond EOD, truncated [ 142.884582][ T9474] loop1: p146 size 65536 extends beyond EOD, truncated [ 142.892065][ T9474] loop1: p147 size 65536 extends beyond EOD, truncated [ 142.899452][ T9474] loop1: p148 size 65536 extends beyond EOD, truncated [ 142.907120][ T9474] loop1: p149 size 65536 extends beyond EOD, truncated [ 142.914582][ T9474] loop1: p150 size 65536 extends beyond EOD, truncated [ 142.922031][ T9474] loop1: p151 size 65536 extends beyond EOD, truncated [ 142.929676][ T9474] loop1: p152 size 65536 extends beyond EOD, truncated [ 142.938254][ T9474] loop1: p153 size 65536 extends beyond EOD, truncated [ 142.947317][ T9474] loop1: p154 size 65536 extends beyond EOD, truncated [ 142.955398][ T9474] loop1: p155 size 65536 extends beyond EOD, truncated [ 142.963775][ T9474] loop1: p156 size 65536 extends beyond EOD, truncated [ 142.976506][ T9474] loop1: p157 size 65536 extends beyond EOD, truncated [ 142.986613][ T9474] loop1: p158 size 65536 extends beyond EOD, truncated [ 142.994286][ T9474] loop1: p159 size 65536 extends beyond EOD, truncated [ 143.001638][ T9474] loop1: p160 size 65536 extends beyond EOD, truncated [ 143.009011][ T9474] loop1: p161 size 65536 extends beyond EOD, truncated [ 143.017147][ T9474] loop1: p162 size 65536 extends beyond EOD, truncated [ 143.024570][ T9474] loop1: p163 size 65536 extends beyond EOD, truncated [ 143.032001][ T9474] loop1: p164 size 65536 extends beyond EOD, truncated [ 143.039586][ T9474] loop1: p165 size 65536 extends beyond EOD, truncated [ 143.048178][ T9474] loop1: p166 size 65536 extends beyond EOD, truncated [ 143.056655][ T9474] loop1: p167 size 65536 extends beyond EOD, truncated [ 143.067955][ T9474] loop1: p168 size 65536 extends beyond EOD, truncated [ 143.075922][ T9474] loop1: p169 size 65536 extends beyond EOD, truncated [ 143.083878][ T9474] loop1: p170 size 65536 extends beyond EOD, truncated [ 143.097430][ T9474] loop1: p171 size 65536 extends beyond EOD, truncated [ 143.112213][ T9474] loop1: p172 size 65536 extends beyond EOD, truncated [ 143.121437][ T9474] loop1: p173 size 65536 extends beyond EOD, truncated [ 143.134040][ T9474] loop1: p174 size 65536 extends beyond EOD, truncated [ 143.142327][ T9474] loop1: p175 size 65536 extends beyond EOD, truncated [ 143.152185][ T9474] loop1: p176 size 65536 extends beyond EOD, truncated [ 143.162567][ T9474] loop1: p177 size 65536 extends beyond EOD, truncated [ 143.172238][ T9474] loop1: p178 size 65536 extends beyond EOD, truncated [ 143.183946][ T9474] loop1: p179 size 65536 extends beyond EOD, truncated [ 143.192580][ T9474] loop1: p180 size 65536 extends beyond EOD, truncated [ 143.204647][ T9474] loop1: p181 size 65536 extends beyond EOD, truncated [ 143.213243][ T9474] loop1: p182 size 65536 extends beyond EOD, truncated [ 143.223807][ T9474] loop1: p183 size 65536 extends beyond EOD, truncated [ 143.232098][ T9474] loop1: p184 size 65536 extends beyond EOD, truncated [ 143.241097][ T9474] loop1: p185 size 65536 extends beyond EOD, truncated [ 143.249142][ T9474] loop1: p186 size 65536 extends beyond EOD, truncated [ 143.256941][ T9474] loop1: p187 size 65536 extends beyond EOD, truncated [ 143.265841][ T9474] loop1: p188 size 65536 extends beyond EOD, truncated [ 143.273774][ T9474] loop1: p189 size 65536 extends beyond EOD, truncated [ 143.281126][ T9474] loop1: p190 size 65536 extends beyond EOD, truncated [ 143.288583][ T9474] loop1: p191 size 65536 extends beyond EOD, truncated [ 143.296005][ T9474] loop1: p192 size 65536 extends beyond EOD, truncated [ 143.303375][ T9474] loop1: p193 size 65536 extends beyond EOD, truncated [ 143.310848][ T9474] loop1: p194 size 65536 extends beyond EOD, truncated [ 143.318165][ T9474] loop1: p195 size 65536 extends beyond EOD, truncated [ 143.325530][ T9474] loop1: p196 size 65536 extends beyond EOD, truncated [ 143.332910][ T9474] loop1: p197 size 65536 extends beyond EOD, truncated [ 143.340361][ T9474] loop1: p198 size 65536 extends beyond EOD, truncated [ 143.347658][ T9474] loop1: p199 size 65536 extends beyond EOD, truncated [ 143.360826][ T9474] loop1: p200 size 65536 extends beyond EOD, truncated [ 143.369034][ T9474] loop1: p201 size 65536 extends beyond EOD, truncated [ 143.383776][ T9474] loop1: p202 size 65536 extends beyond EOD, truncated [ 143.391197][ T9474] loop1: p203 size 65536 extends beyond EOD, truncated [ 143.402084][ T9474] loop1: p204 size 65536 extends beyond EOD, truncated [ 143.409605][ T9474] loop1: p205 size 65536 extends beyond EOD, truncated [ 143.423179][ T9474] loop1: p206 size 65536 extends beyond EOD, truncated [ 143.432226][ T9518] loop0: detected capacity change from 0 to 1764 [ 143.439129][ T9474] loop1: p207 size 65536 extends beyond EOD, truncated [ 143.446669][ T9474] loop1: p208 size 65536 extends beyond EOD, truncated [ 143.454555][ T9518] isofs_fill_super: get root inode failed [ 143.462904][ T9474] loop1: p209 size 65536 extends beyond EOD, truncated [ 143.471181][ T9474] loop1: p210 size 65536 extends beyond EOD, truncated [ 143.479404][ T9474] loop1: p211 size 65536 extends beyond EOD, truncated [ 143.488476][ T9474] loop1: p212 size 65536 extends beyond EOD, truncated [ 143.496376][ T9474] loop1: p213 size 65536 extends beyond EOD, truncated [ 143.503321][ T9518] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 143.512938][ T9474] loop1: p214 size 65536 extends beyond EOD, truncated [ 143.526848][ T9474] loop1: p215 size 65536 extends beyond EOD, truncated [ 143.534408][ T9474] loop1: p216 size 65536 extends beyond EOD, truncated [ 143.543718][ T9474] loop1: p217 size 65536 extends beyond EOD, truncated [ 143.552970][ T9474] loop1: p218 size 65536 extends beyond EOD, truncated [ 143.560414][ T9474] loop1: p219 size 65536 extends beyond EOD, truncated [ 143.575673][ T9474] loop1: p220 size 65536 extends beyond EOD, truncated [ 143.576386][ T9520] loop0: detected capacity change from 0 to 164 [ 143.583260][ T9474] loop1: p221 size 65536 extends beyond EOD, truncated [ 143.599234][ T9474] loop1: p222 size 65536 extends beyond EOD, truncated [ 143.606640][ T9474] loop1: p223 size 65536 extends beyond EOD, truncated [ 143.614019][ T9474] loop1: p224 size 65536 extends beyond EOD, truncated [ 143.632620][ T9520] Unable to read rock-ridge attributes [ 143.653478][ T9474] loop1: p225 size 65536 extends beyond EOD, truncated [ 143.684599][ T9474] loop1: p226 size 65536 extends beyond EOD, truncated [ 143.700151][ T9474] loop1: p227 size 65536 extends beyond EOD, truncated [ 143.720322][ T9474] loop1: p228 size 65536 extends beyond EOD, truncated [ 143.732314][ T9525] Unable to read rock-ridge attributes [ 143.734998][ T9474] loop1: p229 size 65536 extends beyond EOD, truncated [ 143.747254][ T9474] loop1: p230 size 65536 extends beyond EOD, truncated [ 143.754682][ T9525] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 143.756793][ T9474] loop1: p231 size 65536 extends beyond EOD, truncated [ 143.770640][ T9474] loop1: p232 size 65536 extends beyond EOD, truncated [ 143.778622][ T9474] loop1: p233 size 65536 extends beyond EOD, truncated [ 143.786859][ T9474] loop1: p234 size 65536 extends beyond EOD, truncated [ 143.794165][ T9474] loop1: p235 size 65536 extends beyond EOD, truncated [ 143.801637][ T9474] loop1: p236 size 65536 extends beyond EOD, truncated [ 143.809270][ T9474] loop1: p237 size 65536 extends beyond EOD, truncated [ 143.818090][ T9474] loop1: p238 size 65536 extends beyond EOD, truncated [ 143.831986][ T9474] loop1: p239 size 65536 extends beyond EOD, truncated [ 143.840708][ T9474] loop1: p240 size 65536 extends beyond EOD, truncated [ 143.841049][ T9527] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1728'. [ 143.848316][ T9474] loop1: p241 size 65536 extends beyond EOD, truncated [ 143.864116][ T9474] loop1: p242 size 65536 extends beyond EOD, truncated [ 143.871578][ T9474] loop1: p243 size 65536 extends beyond EOD, truncated [ 143.878974][ T9474] loop1: p244 size 65536 extends beyond EOD, truncated [ 143.893798][ T9474] loop1: p245 size 65536 extends beyond EOD, truncated [ 143.901340][ T9474] loop1: p246 size 65536 extends beyond EOD, truncated [ 143.914996][ T9529] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1729'. [ 143.925623][ T9474] loop1: p247 size 65536 extends beyond EOD, truncated [ 143.932926][ T9474] loop1: p248 size 65536 extends beyond EOD, truncated [ 143.940881][ T9474] loop1: p249 size 65536 extends beyond EOD, truncated [ 143.948320][ T9474] loop1: p250 size 65536 extends beyond EOD, truncated [ 143.955787][ T9474] loop1: p251 size 65536 extends beyond EOD, truncated [ 143.968725][ T9474] loop1: p252 size 65536 extends beyond EOD, truncated [ 143.982462][ T9474] loop1: p253 size 65536 extends beyond EOD, truncated [ 143.994814][ T9474] loop1: p254 size 65536 extends beyond EOD, truncated [ 144.009871][ T9474] loop1: p255 size 65536 extends beyond EOD, truncated [ 144.088094][ T9537] loop2: detected capacity change from 0 to 256 [ 144.099633][ T9537] FAT-fs (loop2): Directory bread(block 64) failed [ 144.106406][ T9537] FAT-fs (loop2): Directory bread(block 65) failed [ 144.112977][ T9537] FAT-fs (loop2): Directory bread(block 66) failed [ 144.119730][ T9537] FAT-fs (loop2): Directory bread(block 67) failed [ 144.126443][ T9537] FAT-fs (loop2): Directory bread(block 68) failed [ 144.132986][ T9537] FAT-fs (loop2): Directory bread(block 69) failed [ 144.140033][ T9537] FAT-fs (loop2): Directory bread(block 70) failed [ 144.152794][ T9537] FAT-fs (loop2): Directory bread(block 71) failed [ 144.159413][ T9537] FAT-fs (loop2): Directory bread(block 72) failed [ 144.164805][ T9545] FAULT_INJECTION: forcing a failure. [ 144.164805][ T9545] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 144.167346][ T9537] FAT-fs (loop2): Directory bread(block 73) failed [ 144.178952][ T9545] CPU: 1 UID: 0 PID: 9545 Comm: syz.1.1736 Not tainted 6.11.0-rc3-syzkaller-00013-g6b0f8db921ab #0 [ 144.196124][ T9545] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 144.206190][ T9545] Call Trace: [ 144.209600][ T9545] [ 144.212531][ T9545] dump_stack_lvl+0xf2/0x150 [ 144.217137][ T9545] dump_stack+0x15/0x20 [ 144.221372][ T9545] should_fail_ex+0x229/0x230 [ 144.226070][ T9545] should_fail+0xb/0x10 [ 144.227841][ T9552] loop3: detected capacity change from 0 to 512 [ 144.230258][ T9545] should_fail_usercopy+0x1a/0x20 [ 144.241508][ T9545] _copy_from_iter+0xd3/0xb00 [ 144.246279][ T9545] ? kmalloc_reserve+0x16e/0x190 [ 144.251342][ T9545] ? __build_skb_around+0x196/0x1f0 [ 144.256528][ T9545] ? __alloc_skb+0x21f/0x310 [ 144.261143][ T9545] ? __virt_addr_valid+0x1ed/0x250 [ 144.266274][ T9545] ? __check_object_size+0x35b/0x510 [ 144.271564][ T9545] netlink_sendmsg+0x460/0x6e0 [ 144.276329][ T9545] ? __pfx_netlink_sendmsg+0x10/0x10 [ 144.281610][ T9545] __sock_sendmsg+0x140/0x180 [ 144.286344][ T9545] ____sys_sendmsg+0x312/0x410 [ 144.291180][ T9545] __sys_sendmsg+0x1e9/0x280 [ 144.295814][ T9545] __x64_sys_sendmsg+0x46/0x50 [ 144.300571][ T9545] x64_sys_call+0x2689/0x2d60 [ 144.305247][ T9545] do_syscall_64+0xc9/0x1c0 [ 144.309839][ T9545] ? clear_bhb_loop+0x55/0xb0 [ 144.314511][ T9545] ? clear_bhb_loop+0x55/0xb0 [ 144.319222][ T9545] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.325295][ T9545] RIP: 0033:0x7f09680a99f9 [ 144.329696][ T9545] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 144.349326][ T9545] RSP: 002b:00007f0966d27038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 144.357857][ T9545] RAX: ffffffffffffffda RBX: 00007f0968245f80 RCX: 00007f09680a99f9 [ 144.365820][ T9545] RDX: 0000000000000000 RSI: 0000000020000180 RDI: 0000000000000003 [ 144.373789][ T9545] RBP: 00007f0966d27090 R08: 0000000000000000 R09: 0000000000000000 [ 144.381750][ T9545] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 144.389708][ T9545] R13: 0000000000000000 R14: 00007f0968245f80 R15: 00007ffeac7f8258 [ 144.397724][ T9545] [ 144.409127][ T9552] EXT4-fs (loop3): filesystem is read-only [ 144.496175][ T9563] netlink: 112 bytes leftover after parsing attributes in process `syz.2.1739'. [ 144.509912][ T9559] netlink: 112 bytes leftover after parsing attributes in process `syz.2.1739'. [ 144.522499][ T9552] loop3: detected capacity change from 0 to 512 [ 144.529385][ T9552] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 144.539639][ T9552] EXT4-fs error (device loop3): ext4_ext_check_inode:520: inode #15: comm syz.3.1738: pblk 0 bad header/extent: invalid eh_entries - magic f30a, entries 24833, max 4(4), depth 0(0) [ 144.557902][ T9552] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.1738: couldn't read orphan inode 15 (err -117) [ 144.570420][ T9552] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 144.582848][ T9552] ext2 filesystem being mounted at /138/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 144.634633][ T7842] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.671037][ T9574] loop0: detected capacity change from 0 to 2048 [ 144.677950][ T9574] EXT4-fs: Ignoring removed bh option [ 144.683447][ T9574] EXT4-fs: Ignoring removed nomblk_io_submit option [ 144.690281][ T9574] EXT4-fs: Ignoring removed nobh option [ 144.709087][ T9577] loop3: detected capacity change from 0 to 512 [ 144.716401][ T9577] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (3832!=33349) [ 144.717567][ T9574] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 144.740988][ T9577] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e01c, mo2=0002] [ 144.749124][ T9577] System zones: 1-12 [ 144.753042][ T9574] EXT4-fs error (device loop0): __ext4_remount:6491: comm syz.0.1747: Abort forced by user [ 144.763430][ T9577] EXT4-fs (loop3): orphan cleanup on readonly fs [ 144.770029][ T9577] EXT4-fs error (device loop3): ext4_read_inode_bitmap:168: comm syz.3.1748: Inode bitmap for bg 0 marked uninitialized [ 144.783103][ T9574] EXT4-fs (loop0): Remounting filesystem read-only [ 144.790987][ T9577] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 144.805071][ T9574] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=12 [ 144.813933][ T9574] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=12 [ 144.829073][ T9577] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: none. [ 144.840134][ T9577] netlink: 'syz.3.1748': attribute type 4 has an invalid length. [ 144.858703][ T8954] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.893591][ T7842] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.917867][ T9586] FAULT_INJECTION: forcing a failure. [ 144.917867][ T9586] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 144.930970][ T9586] CPU: 0 UID: 0 PID: 9586 Comm: syz.0.1751 Not tainted 6.11.0-rc3-syzkaller-00013-g6b0f8db921ab #0 [ 144.941653][ T9586] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 144.951704][ T9586] Call Trace: [ 144.954976][ T9586] [ 144.957944][ T9586] dump_stack_lvl+0xf2/0x150 [ 144.962543][ T9586] dump_stack+0x15/0x20 [ 144.966738][ T9586] should_fail_ex+0x229/0x230 [ 144.971525][ T9586] should_fail+0xb/0x10 [ 144.975767][ T9586] should_fail_usercopy+0x1a/0x20 [ 144.980853][ T9586] _copy_from_user+0x1e/0xd0 [ 144.985514][ T9586] copy_msghdr_from_user+0x54/0x2a0 [ 144.990755][ T9586] __sys_sendmsg+0x17d/0x280 [ 144.995359][ T9586] __x64_sys_sendmsg+0x46/0x50 [ 145.000200][ T9586] x64_sys_call+0x2689/0x2d60 [ 145.004886][ T9586] do_syscall_64+0xc9/0x1c0 [ 145.009396][ T9586] ? clear_bhb_loop+0x55/0xb0 [ 145.014158][ T9586] ? clear_bhb_loop+0x55/0xb0 [ 145.018849][ T9586] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.024753][ T9586] RIP: 0033:0x7ff1d49599f9 [ 145.029230][ T9586] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 145.048844][ T9586] RSP: 002b:00007ff1d35d7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 145.057301][ T9586] RAX: ffffffffffffffda RBX: 00007ff1d4af5f80 RCX: 00007ff1d49599f9 [ 145.065305][ T9586] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000003 [ 145.073286][ T9586] RBP: 00007ff1d35d7090 R08: 0000000000000000 R09: 0000000000000000 [ 145.081259][ T9586] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 145.089247][ T9586] R13: 0000000000000000 R14: 00007ff1d4af5f80 R15: 00007ffc224e7c98 [ 145.097223][ T9586] [ 145.110042][ T29] kauditd_printk_skb: 153 callbacks suppressed [ 145.110088][ T29] audit: type=1400 audit(1723615375.149:3030): avc: denied { bind } for pid=9587 comm="syz.3.1750" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 145.135775][ T29] audit: type=1400 audit(1723615375.149:3031): avc: denied { name_bind } for pid=9587 comm="syz.3.1750" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 145.157620][ T29] audit: type=1400 audit(1723615375.149:3032): avc: denied { node_bind } for pid=9587 comm="syz.3.1750" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 145.181279][ T29] audit: type=1400 audit(1723615375.149:3033): avc: denied { write } for pid=9587 comm="syz.3.1750" lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 145.201759][ T29] audit: type=1400 audit(1723615375.149:3034): avc: denied { connect } for pid=9587 comm="syz.3.1750" lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 145.222468][ T29] audit: type=1400 audit(1723615375.149:3035): avc: denied { name_connect } for pid=9587 comm="syz.3.1750" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 145.244586][ T29] audit: type=1400 audit(1723615375.229:3036): avc: denied { create } for pid=9587 comm="syz.3.1750" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 145.265144][ T29] audit: type=1400 audit(1723615375.229:3037): avc: denied { write } for pid=9587 comm="syz.3.1750" path="socket:[29591]" dev="sockfs" ino=29591 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 145.289422][ T29] audit: type=1400 audit(1723615375.229:3038): avc: denied { nlmsg_read } for pid=9587 comm="syz.3.1750" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 145.310576][ T29] audit: type=1400 audit(1723615375.229:3039): avc: denied { create } for pid=9587 comm="syz.3.1750" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 145.356596][ T9602] FAULT_INJECTION: forcing a failure. [ 145.356596][ T9602] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 145.369724][ T9602] CPU: 1 UID: 0 PID: 9602 Comm: syz.0.1757 Not tainted 6.11.0-rc3-syzkaller-00013-g6b0f8db921ab #0 [ 145.380409][ T9602] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 145.390461][ T9602] Call Trace: [ 145.393805][ T9602] [ 145.393813][ T9602] dump_stack_lvl+0xf2/0x150 [ 145.401333][ T9602] dump_stack+0x15/0x20 [ 145.405493][ T9602] should_fail_ex+0x229/0x230 [ 145.410176][ T9602] should_fail+0xb/0x10 [ 145.414330][ T9602] should_fail_usercopy+0x1a/0x20 [ 145.419355][ T9602] _copy_from_user+0x1e/0xd0 [ 145.423947][ T9602] copy_msghdr_from_user+0x54/0x2a0 [ 145.429146][ T9602] __sys_sendmmsg+0x22a/0x500 [ 145.433847][ T9602] __x64_sys_sendmmsg+0x57/0x70 [ 145.438689][ T9602] x64_sys_call+0xa49/0x2d60 [ 145.443268][ T9602] do_syscall_64+0xc9/0x1c0 [ 145.447792][ T9602] ? clear_bhb_loop+0x55/0xb0 [ 145.452575][ T9602] ? clear_bhb_loop+0x55/0xb0 [ 145.457284][ T9602] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.463167][ T9602] RIP: 0033:0x7ff1d49599f9 [ 145.467568][ T9602] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 145.487161][ T9602] RSP: 002b:00007ff1d35d7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 145.495596][ T9602] RAX: ffffffffffffffda RBX: 00007ff1d4af5f80 RCX: 00007ff1d49599f9 [ 145.503553][ T9602] RDX: 0000000000000002 RSI: 0000000020000e40 RDI: 0000000000000003 [ 145.511513][ T9602] RBP: 00007ff1d35d7090 R08: 0000000000000000 R09: 0000000000000000 [ 145.519470][ T9602] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 145.527543][ T9602] R13: 0000000000000000 R14: 00007ff1d4af5f80 R15: 00007ffc224e7c98 [ 145.535504][ T9602] [ 145.586899][ T9615] loop2: detected capacity change from 0 to 128 [ 145.596297][ T9613] netlink: 44306 bytes leftover after parsing attributes in process `syz.1.1762'. [ 145.735870][ T9634] loop0: detected capacity change from 0 to 1024 [ 145.742532][ T9634] ext4: Unknown parameter 'dont_hash' [ 145.775566][ T9634] loop0: detected capacity change from 0 to 8192 [ 145.801330][ T9638] netlink: 'syz.1.1772': attribute type 1 has an invalid length. [ 145.839029][ T9644] loop1: detected capacity change from 0 to 128 [ 145.866393][ T9646] loop1: detected capacity change from 0 to 128 [ 145.873184][ T9646] EXT4-fs (loop1): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 145.914707][ T9652] loop1: detected capacity change from 0 to 128 [ 145.921930][ T9652] EXT4-fs (loop1): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 145.969155][ T9655] loop3: detected capacity change from 0 to 512 [ 145.997707][ T9655] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 146.016125][ T9655] ext4 filesystem being mounted at /142/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 146.068836][ T7842] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.094696][ T9662] loop1: detected capacity change from 0 to 128 [ 146.106660][ T9662] EXT4-fs (loop1): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 146.118733][ T9662] FAULT_INJECTION: forcing a failure. [ 146.118733][ T9662] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 146.131879][ T9662] CPU: 0 UID: 0 PID: 9662 Comm: syz.1.1782 Not tainted 6.11.0-rc3-syzkaller-00013-g6b0f8db921ab #0 [ 146.142607][ T9662] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 146.152668][ T9662] Call Trace: [ 146.155947][ T9662] [ 146.158914][ T9662] dump_stack_lvl+0xf2/0x150 [ 146.163553][ T9662] dump_stack+0x15/0x20 [ 146.167714][ T9662] should_fail_ex+0x229/0x230 [ 146.172396][ T9662] should_fail+0xb/0x10 [ 146.176563][ T9662] should_fail_usercopy+0x1a/0x20 [ 146.181603][ T9662] _copy_to_user+0x1e/0xa0 [ 146.186106][ T9662] xsk_getsockopt+0x61f/0x680 [ 146.190792][ T9662] ? selinux_socket_getsockopt+0x182/0x1b0 [ 146.196603][ T9662] do_sock_getsockopt+0x121/0x1a0 [ 146.201654][ T9662] ? __pfx_xsk_getsockopt+0x10/0x10 [ 146.206862][ T9662] __sys_getsockopt+0x19a/0x210 [ 146.211715][ T9662] __x64_sys_getsockopt+0x66/0x80 [ 146.216824][ T9662] x64_sys_call+0x11cd/0x2d60 [ 146.221553][ T9662] do_syscall_64+0xc9/0x1c0 [ 146.226144][ T9662] ? clear_bhb_loop+0x55/0xb0 [ 146.230921][ T9662] ? clear_bhb_loop+0x55/0xb0 [ 146.235636][ T9662] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.241572][ T9662] RIP: 0033:0x7f09680a99f9 [ 146.245985][ T9662] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 146.265598][ T9662] RSP: 002b:00007f0966d27038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 146.274015][ T9662] RAX: ffffffffffffffda RBX: 00007f0968245f80 RCX: 00007f09680a99f9 [ 146.282055][ T9662] RDX: 0000000000000007 RSI: 000000000000011b RDI: 0000000000000004 [ 146.290027][ T9662] RBP: 00007f0966d27090 R08: 0000000020000000 R09: 0000000000000000 [ 146.298075][ T9662] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 146.306047][ T9662] R13: 0000000000000000 R14: 00007f0968245f80 R15: 00007ffeac7f8258 [ 146.314017][ T9662] [ 146.546350][ T9686] FAULT_INJECTION: forcing a failure. [ 146.546350][ T9686] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 146.559473][ T9686] CPU: 0 UID: 0 PID: 9686 Comm: syz.2.1790 Not tainted 6.11.0-rc3-syzkaller-00013-g6b0f8db921ab #0 [ 146.570152][ T9686] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 146.580219][ T9686] Call Trace: [ 146.583498][ T9686] [ 146.586423][ T9686] dump_stack_lvl+0xf2/0x150 [ 146.591108][ T9686] dump_stack+0x15/0x20 [ 146.595274][ T9686] should_fail_ex+0x229/0x230 [ 146.599954][ T9686] should_fail+0xb/0x10 [ 146.604114][ T9686] should_fail_usercopy+0x1a/0x20 [ 146.609288][ T9686] _copy_from_user+0x1e/0xd0 [ 146.613953][ T9686] usbdev_ioctl+0x1027/0x3e10 [ 146.618645][ T9686] ? do_vfs_ioctl+0x99e/0x1560 [ 146.623478][ T9686] ? selinux_file_ioctl+0x2f7/0x380 [ 146.628685][ T9686] ? __fget_files+0x1da/0x210 [ 146.633467][ T9686] ? __pfx_usbdev_ioctl+0x10/0x10 [ 146.638497][ T9686] __se_sys_ioctl+0xd3/0x150 [ 146.643160][ T9686] __x64_sys_ioctl+0x43/0x50 [ 146.647762][ T9686] x64_sys_call+0x15cc/0x2d60 [ 146.652532][ T9686] do_syscall_64+0xc9/0x1c0 [ 146.657119][ T9686] ? clear_bhb_loop+0x55/0xb0 [ 146.661862][ T9686] ? clear_bhb_loop+0x55/0xb0 [ 146.666609][ T9686] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.672664][ T9686] RIP: 0033:0x7fd6406199f9 [ 146.677110][ T9686] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 146.696719][ T9686] RSP: 002b:00007fd63f291038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 146.705141][ T9686] RAX: ffffffffffffffda RBX: 00007fd6407b5f80 RCX: 00007fd6406199f9 [ 146.713176][ T9686] RDX: 0000000020000140 RSI: 000000008038550a RDI: 0000000000000004 [ 146.721160][ T9686] RBP: 00007fd63f291090 R08: 0000000000000000 R09: 0000000000000000 [ 146.729197][ T9686] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 146.737178][ T9686] R13: 0000000000000000 R14: 00007fd6407b5f80 R15: 00007fff0b4980b8 [ 146.745152][ T9686] [ 146.847489][ T9702] loop2: detected capacity change from 0 to 512 [ 146.858742][ T9702] EXT4-fs: dax option not supported [ 146.867887][ T5596] bridge_slave_1: left allmulticast mode [ 146.873646][ T5596] bridge_slave_1: left promiscuous mode [ 146.879420][ T5596] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.905265][ T5596] bridge_slave_0: left allmulticast mode [ 146.910933][ T5596] bridge_slave_0: left promiscuous mode [ 146.916789][ T5596] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.944023][ T9707] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1796'. [ 146.953093][ T9707] netlink: 'syz.2.1796': attribute type 2 has an invalid length. [ 147.077617][ T5596] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 147.090565][ T5596] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 147.102264][ T5596] bond0 (unregistering): Released all slaves [ 147.119126][ T9702] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 147.218566][ T9711] netlink: 'syz.2.1798': attribute type 3 has an invalid length. [ 147.243429][ T5596] hsr_slave_0: left promiscuous mode [ 147.253632][ T5596] hsr_slave_1: left promiscuous mode [ 147.270704][ T5596] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 147.278279][ T5596] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 147.297529][ T5596] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 147.305037][ T5596] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 147.326471][ T5596] veth1_macvtap: left promiscuous mode [ 147.332040][ T5596] veth0_macvtap: left promiscuous mode [ 147.337711][ T5596] veth1_vlan: left promiscuous mode [ 147.342934][ T5596] veth0_vlan: left promiscuous mode [ 147.596590][ T9725] loop2: detected capacity change from 0 to 512 [ 147.603615][ T5596] team0 (unregistering): Port device team_slave_1 removed [ 147.625026][ T9733] loop1: detected capacity change from 0 to 128 [ 147.632135][ T5596] team0 (unregistering): Port device team_slave_0 removed [ 147.715791][ T9647] ================================================================== [ 147.723909][ T9647] BUG: KCSAN: data-race in __futex_wait / hrtimer_wakeup [ 147.730954][ T9647] [ 147.733266][ T9647] read-write to 0xffffc90001327eb8 of 8 bytes by interrupt on cpu 0: [ 147.741331][ T9647] hrtimer_wakeup+0x1c/0x50 [ 147.745843][ T9647] __hrtimer_run_queues+0x20d/0x5e0 [ 147.751048][ T9647] hrtimer_interrupt+0x210/0x7b0 [ 147.755997][ T9647] __sysvec_apic_timer_interrupt+0x5c/0x1a0 [ 147.761901][ T9647] sysvec_apic_timer_interrupt+0x6e/0x80 [ 147.767544][ T9647] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 147.773533][ T9647] _raw_spin_unlock_irq+0x2f/0x50 [ 147.778565][ T9647] get_signal+0xc8e/0x1080 [ 147.782983][ T9647] arch_do_signal_or_restart+0x95/0x4b0 [ 147.788529][ T9647] syscall_exit_to_user_mode+0x59/0x130 [ 147.794080][ T9647] do_syscall_64+0xd6/0x1c0 [ 147.798591][ T9647] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.804488][ T9647] [ 147.806802][ T9647] read to 0xffffc90001327eb8 of 8 bytes by task 9647 on cpu 1: [ 147.814340][ T9647] __futex_wait+0x17f/0x290 [ 147.818840][ T9647] futex_wait_restart+0x131/0x260 [ 147.823866][ T9647] __do_sys_restart_syscall+0x35/0x40 [ 147.829242][ T9647] x64_sys_call+0x1803/0x2d60 [ 147.833928][ T9647] do_syscall_64+0xc9/0x1c0 [ 147.838434][ T9647] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.844331][ T9647] [ 147.846643][ T9647] value changed: 0xffff888116154200 -> 0x0000000000000000 [ 147.853737][ T9647] [ 147.856050][ T9647] Reported by Kernel Concurrency Sanitizer on: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 147.862199][ T9647] CPU: 1 UID: 0 PID: 9647 Comm: syz.0.1777 Not tainted 6.11.0-rc3-syzkaller-00013-g6b0f8db921ab #0 [ 147.872875][ T9647] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 147.883013][ T9647] ================================================================== [ 147.891326][ T9737] usb usb1: usbfs: process 9737 (syz.1.1806) did not claim interface 0 before use [ 148.328712][ T5596] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.428052][ T5596] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.478628][ T5596] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.557792][ T5596] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.608926][ T5596] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.638874][ T5596] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.687764][ T5596] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.727810][ T5596] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.775625][ T5596] bridge_slave_1: left allmulticast mode [ 148.781269][ T5596] bridge_slave_1: left promiscuous mode [ 148.786980][ T5596] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.795222][ T5596] bridge_slave_0: left allmulticast mode [ 148.800846][ T5596] bridge_slave_0: left promiscuous mode [ 148.806564][ T5596] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.814569][ T5596] bridge_slave_1: left allmulticast mode [ 148.820229][ T5596] bridge_slave_1: left promiscuous mode [ 148.825912][ T5596] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.833597][ T5596] bridge_slave_0: left allmulticast mode [ 148.839249][ T5596] bridge_slave_0: left promiscuous mode [ 148.844927][ T5596] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.057306][ T5596] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 149.067495][ T5596] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 149.077948][ T5596] bond0 (unregistering): Released all slaves [ 149.087097][ T5596] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 149.097571][ T5596] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 149.107618][ T5596] bond0 (unregistering): Released all slaves [ 149.260656][ T5596] hsr_slave_0: left promiscuous mode [ 149.266281][ T5596] hsr_slave_1: left promiscuous mode [ 149.272058][ T5596] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 149.279995][ T5596] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 149.287507][ T5596] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 149.295044][ T5596] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 149.304284][ T5596] hsr_slave_0: left promiscuous mode [ 149.309867][ T5596] hsr_slave_1: left promiscuous mode [ 149.315906][ T5596] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 149.323355][ T5596] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 149.330886][ T5596] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 149.338295][ T5596] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 149.348874][ T5596] veth1_macvtap: left promiscuous mode [ 149.354429][ T5596] veth0_macvtap: left promiscuous mode [ 149.359991][ T5596] veth1_vlan: left promiscuous mode [ 149.365263][ T5596] veth0_vlan: left promiscuous mode [ 149.371028][ T5596] veth1_macvtap: left promiscuous mode [ 149.376566][ T5596] veth0_macvtap: left promiscuous mode [ 149.382085][ T5596] veth1_vlan: left promiscuous mode [ 149.387322][ T5596] veth0_vlan: left promiscuous mode [ 149.517274][ T5596] team0 (unregistering): Port device team_slave_1 removed [ 149.527626][ T5596] team0 (unregistering): Port device team_slave_0 removed [ 149.592731][ T5596] team0 (unregistering): Port device team_slave_1 removed [ 149.602772][ T5596] team0 (unregistering): Port device team_slave_0 removed [ 150.189252][ T5596] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 150.199676][ T5596] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.257068][ T5596] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 150.267419][ T5596] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.336919][ T5596] bond0: (slave netdevsim1): Releasing backup interface [ 150.345680][ T5596] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 150.356013][ T5596] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.399965][ T5596] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 150.410331][ T5596] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.477990][ T5596] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.548146][ T5596] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.607916][ T5596] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.658242][ T5596] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.725376][ T5596] bridge_slave_1: left allmulticast mode [ 150.731014][ T5596] bridge_slave_1: left promiscuous mode [ 150.736720][ T5596] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.744371][ T5596] bridge_slave_0: left allmulticast mode [ 150.750051][ T5596] bridge_slave_0: left promiscuous mode [ 150.755786][ T5596] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.763804][ T5596] bridge_slave_1: left allmulticast mode [ 150.769522][ T5596] bridge_slave_1: left promiscuous mode [ 150.775237][ T5596] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.782965][ T5596] bridge_slave_0: left allmulticast mode [ 150.788690][ T5596] bridge_slave_0: left promiscuous mode [ 150.794301][ T5596] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.903075][ T5596] dvmrp8 (unregistering): left allmulticast mode [ 151.046799][ T5596] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 151.057374][ T5596] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 151.068013][ T5596] bond0 (unregistering): Released all slaves [ 151.077433][ T5596] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 151.088102][ T5596] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 151.098263][ T5596] bond0 (unregistering): Released all slaves [ 151.238939][ T5596] hsr_slave_0: left promiscuous mode [ 151.244773][ T5596] hsr_slave_1: left promiscuous mode [ 151.250652][ T5596] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 151.258119][ T5596] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 151.266237][ T5596] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 151.273680][ T5596] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 151.282634][ T5596] hsr_slave_0: left promiscuous mode [ 151.288291][ T5596] hsr_slave_1: left promiscuous mode [ 151.293992][ T5596] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 151.301379][ T5596] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 151.308881][ T5596] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 151.316376][ T5596] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 151.326405][ T5596] veth1_macvtap: left promiscuous mode [ 151.331933][ T5596] veth0_macvtap: left promiscuous mode [ 151.337537][ T5596] veth1_vlan: left promiscuous mode [ 151.342824][ T5596] veth0_vlan: left promiscuous mode [ 151.348546][ T5596] veth1_macvtap: left promiscuous mode [ 151.353994][ T5596] veth0_macvtap: left promiscuous mode [ 151.359624][ T5596] veth1_vlan: left promiscuous mode [ 151.364897][ T5596] veth0_vlan: left promiscuous mode [ 151.489991][ T5596] team0 (unregistering): Port device team_slave_1 removed [ 151.501030][ T5596] team0 (unregistering): Port device team_slave_0 removed [ 151.541304][ T5584] smc: removing ib device syz1 [ 151.579853][ T5596] team0 (unregistering): Port device team_slave_1 removed [ 151.591565][ T5596] team0 (unregistering): Port device team_slave_0 removed