last executing test programs: 2.437826413s ago: executing program 0 (id=458): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000080850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x0) mknodat(r0, &(0x7f0000000000)='./file0\x00', 0x1000, 0x0) acct(&(0x7f00000000c0)='./file0\x00') (fail_nth: 3) open$dir(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) 1.53201778s ago: executing program 0 (id=476): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r0, 0x80045301, 0x0) tkill(0x0, 0x7) socket(0x40000000015, 0x5, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) r1 = syz_io_uring_setup(0xec5, &(0x7f00000008c0), &(0x7f0000000540)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd_index=0x4}) io_uring_enter(r1, 0x47fa, 0x0, 0x0, 0x0, 0x0) 1.500819152s ago: executing program 0 (id=478): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0xdb, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000002500000000000000007b1af8ff00000000bf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r3 = socket$unix(0x1, 0x2, 0x0) bind$unix(r3, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r4 = socket$unix(0x1, 0x2, 0x0) connect$unix(r4, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) writev(r4, &(0x7f0000000040)=[{&(0x7f0000000000)="d2", 0x1}], 0x1) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x23, &(0x7f0000000080)=0x6, 0x26) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f00000000c0)=0x41d9, 0x4) recvmmsg(r3, &(0x7f0000000300), 0x40000000000049e, 0x1000000000fe, 0x0) r5 = syz_genetlink_get_family_id$team(&(0x7f0000000780), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000002c0)={'sit0\x00'}) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000940)=ANY=[@ANYBLOB='\\\v\x00\x00', @ANYRES16=r5, @ANYBLOB="010025bd70000000000002000000", @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="54000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000002400040000000000000000000000fc00000000000000000000000000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="080007000000000008000100", @ANYRES32=0x0, @ANYBLOB="380102803c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000100004006c6f616462616c616e63650038000100240001006d636173745f72656a6f696e5f696e74657276616c000000000000000000000005000300030000000800040000000000400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000000000008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000000000008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r6, @ANYRES32=0x0, @ANYBLOB, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="40000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000000000008000600", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="8000028038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004000000000044000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000110004006163746976656261636b75700000000008000100", @ANYRES32=0x0, @ANYBLOB="3001028040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000000000008000600", @ANYRES32=0x0, @ANYBLOB="3c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="3c00010024000100656e61626c6564000000000000000000000000000000000000000000000000000500", @ANYRES32=0x0, @ANYBLOB="3c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000009000400686173680000000038000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004000000000008000100", @ANYRES32=r6, @ANYBLOB="7401028040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b0000000800040000000000080007000000000040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="08000700000000003800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000000000008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f636f756e74000000000000000000000000000005000300030000000800040000000000400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000000000008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="c00002804c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000001c00040000000000000000000a00000000000000000000000000000038000100240001006c625f73746174735f726566726573685f696e74657276616c00000000000000050003000300000008000400000000003800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB], 0xb5c}}, 0x0) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) r8 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRESOCT=r7, @ANYBLOB="230900000000000000000100000005000700000000000800090000000000060002000100000008000a000000000008001700", @ANYRES32=r8], 0x3c}}, 0x20044014) r9 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0) writev(r9, &(0x7f00000003c0)=[{&(0x7f0000000240)='7', 0x1}, {&(0x7f00000002c0)="3070e1", 0x3}], 0x2) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r9, 0x84, 0x74, &(0x7f0000000340)=""/107, &(0x7f0000000000)=0x6b) close(r8) r10 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000300), r0) r11 = syz_open_dev$sg(&(0x7f00000000c0), 0xe0000000000, 0x4000) ioctl$SG_GET_RESERVED_SIZE(r11, 0x2272, &(0x7f0000000180)) sendmsg$SEG6_CMD_GET_TUNSRC(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000", @ANYRES16=r10, @ANYBLOB="230500e77551d0964e271035d70ba32a0300000000000000a56a1fe214ab3ead7b971ddaeb65030717f316bd95934b56f5511ab055559014cc013a89ce8c0788528d676755e031e0338ae94a4886aa16fcb71c8d0ea385cdac"], 0x14}}, 0x0) 1.437522608s ago: executing program 1 (id=479): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_process_wait\x00', r0}, 0x10) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r1}, 0x8) close(r2) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r3 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="85000000080000004e00000000000000850000007d00000095000000000000007ab9e683b171b4b09980af6c1ebeda4ac0d3e3aa71a9ab17e14e1b0be949499ca6a5"], &(0x7f0000000140)='GPL\x00', 0x0, 0x99, &(0x7f00000004c0)=""/153}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000440)={r3, 0x0, 0x11, 0x0, &(0x7f0000000600)="61df712bc884fef053a7a9a26e9b722780", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev}, 0x1b) 1.280338721s ago: executing program 0 (id=482): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='rxrpc_rx_eproto\x00', r0}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) fcntl$setstatus(r1, 0x4, 0x42000) syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) 1.221205766s ago: executing program 0 (id=484): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x18, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b00000000001b000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000006ffffff8500000071000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8b}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000080)='cpuset.cpus\x00', 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000280)=ANY=[@ANYBLOB='N-N:'], 0x6a) prctl$PR_GET_PDEATHSIG(0x29, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x3ffffffffffffda, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301) ioctl$USBDEVFS_IOCTL(r6, 0xc0105512, &(0x7f0000000200)) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000), 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x1ac9837, 0x0) ioctl$BLKALIGNOFF(0xffffffffffffffff, 0x127a, &(0x7f0000000100)) ioctl$USBDEVFS_IOCTL(r6, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) r7 = socket(0x1e, 0x80007, 0x0) connect$tipc(r7, &(0x7f0000000000)=@id={0x1e, 0x3, 0x2, {0x4e20}}, 0x10) r8 = open_tree(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) bind$inet(r8, 0x0, 0x0) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, 0x0, 0x0) 1.172046161s ago: executing program 4 (id=485): r0 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000f3ffffb0150000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd11, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) syz_open_procfs(0x0, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNISCRNMAP(r3, 0x5600, &(0x7f0000003d40)=""/175) 1.164253831s ago: executing program 4 (id=486): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000100)={0x6, @loopback, 0x0, 0x0, 'sed\x00'}, 0x2c) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$nfc_llcp(r1, 0x6, 0x1a, 0x0, 0x2000e863) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x66, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000003200)=ANY=[@ANYBLOB="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"], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) r4 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x802) write$evdev(r4, &(0x7f0000000000), 0x100000008) ioctl$EXT4_IOC_GROUP_EXTEND(r4, 0x40044581, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600000, 0x200000, 0x0, &(0x7f0000a00000/0x600000)=nil) fsopen(&(0x7f0000000000)='tmpfs\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x88}, [@ldst={0x7}]}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x3c) socket$xdp(0x2c, 0x3, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000001400000008001c000000002018000180140002006e657464657673696d300000000000000800080000000000080009"], 0x44}}, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb0800450200000000000000019078080100fcac140000000000000006000045591816f0e6c157588fc7de1709850000000008"], 0x0) r5 = socket(0x10, 0x803, 0x0) sendto(r5, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000300), 0xc, &(0x7f0000000480)={&(0x7f0000000340)={0x14, 0x0, 0x100, 0x70bd29, 0x25dfdbfc, {{}, {@void, @void}}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x4010) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000180)={0x80000020}, 0x10) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=@mpls_getroute={0x1c, 0x1a, 0x1}, 0x1c}}, 0x0) r7 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000280), r6) sendmsg$SEG6_CMD_DUMPHMAC(r6, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000380)={0x48, r7, 0x2, 0x70bd29, 0x25dfdbfd, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x81}, @SEG6_ATTR_DST={0x14, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x9}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x6f36}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0x4004}, 0x20008800) sendmsg$SEG6_CMD_SET_TUNSRC(r5, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0x38, r7, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x3}, @SEG6_ATTR_HMACKEYID={0x0, 0x3, 0xfffff787}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x100}, @SEG6_ATTR_ALGID={0xfffffffffffffded, 0x6, 0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000881}, 0x40002) 1.121368785s ago: executing program 2 (id=487): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000b00)={0x1c, 0x19, 0x1, 0x0, 0x0, {0x1d, 0xd601, 0x9}, [@nested={0x8, 0x12, 0x0, 0x1, [@typed={0x4, 0x121, 0x0, 0x0, @binary}]}]}, 0x1c}}, 0x0) 1.082423018s ago: executing program 2 (id=488): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r0, 0x80045301, 0x0) tkill(0x0, 0x7) socket(0x40000000015, 0x5, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) r1 = syz_io_uring_setup(0xec5, &(0x7f00000008c0), &(0x7f0000000540)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd_index=0x4}) io_uring_enter(r1, 0x47fa, 0x0, 0x0, 0x0, 0x0) 1.020033943s ago: executing program 2 (id=489): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000a40), 0x6, 0x77c, &(0x7f00000002c0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000340)=@gcm_128={{}, "b579fb6acb03ed54", "911a1e5d8b918ee948ba08ac52468dd9", 'l\x00[A', "375bb71e02c67767"}, 0x28) write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="530000000700004600f592"], 0x53) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r3) statx(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x3100, 0x0, &(0x7f0000001040)) 767.086865ms ago: executing program 2 (id=491): syz_mount_image$ext4(&(0x7f0000000ac0)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x3810744, &(0x7f00000012c0)={[{@noauto_da_alloc}, {@user_xattr}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x9}}, {@data_err_abort}, {@jqfmt_vfsv0}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x8}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x400000}}, {@lazytime}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0xff, 0x451, &(0x7f0000000d00)="$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") r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000000)) 749.224907ms ago: executing program 4 (id=492): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8914, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @dev}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f00000003c0)={0x7, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x200040}]}) r3 = socket$kcm(0xa, 0x5, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={@cgroup, 0xffffffffffffffff, 0x0, 0x1, 0x0, @prog_id}, 0x20) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x8918, &(0x7f0000000000)) 747.606817ms ago: executing program 3 (id=493): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000b00)={0x198, 0x19, 0x1, 0x0, 0x0, {0x1d, 0xd601, 0x9}, [@nested={0x78, 0x12, 0x0, 0x1, [@typed={0x73, 0x121, 0x0, 0x0, @binary="c9a7befe6f6d645a1a11b81b2c4b10fb4f5fdaf9331c7510e19feecb90ee6bb49fdb1a75df432aff8f5e9ed32d3b47b296674f1fe35663c0d236fde58be879310df2b78e43728bfbeeced5a3ca6c897dc7e48022309c32bc4a24d6c2dc3cd2ebe6015638eaa66523c690812fcbaf27"}]}, @nested={0x10a, 0x6, 0x0, 0x1, [@generic="596ba1e9531921c3af1a61cacf3a2cb9bb5cd0bf73ed94c551f271fe52097b0b7e1869d38c7f699157808093c634ee54e06090b0c54a57b886cc1342a9f60da02a7aad0d609c3121b93d2514da9094da38a2a384f2d399fb589a6a6bda405f7b74a89bc4e40b5243fd22b133b33bae78126a311c5df2990e8227", @generic, @typed={0x89, 0x0, 0x0, 0x0, @binary="bb46309871fbbc8e33139068644765bf076115fcd30c6a8ca5babf1192c6af5dfc3e2bd63a3f580831d6fd4bb70650af5a71eef9006b4a391d929013ce7bbd6c46834b5a0983f7e5d2e06cfa105fac266268f8ec9952d470ab47c35e73fea25cda0381ec347d18de3ee0acda8dac7f4d5c9ab83b73cc10f1f93d5cb5e3d4ad0aa25e37d4b3"}]}]}, 0x198}}, 0x0) 732.948928ms ago: executing program 3 (id=494): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000013c0)=ANY=[@ANYBLOB="b702000026000000bfa300000000000007030000007effff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065060400010000050404000001007d60b7030000000000006a0a00fe000000008500000028000000b7000000000000009500000000000000496cf27fb6d2c643db7e2d5fb4b0936cdf827fb43a431ca711fcd0cdfa146ed3d09a6175037958e27106e225b7937f02008b5e5a076d83923dd29c034055b67dafe6c8dc525d78c07f34e4d5b3185b310efcfa89147a09000000f110026e6d2ef831ab7ea0c34f17e3ad6eecbb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b0a341a2d7cbdb9cd38bdb2ca8e050000003a14817ac61e4dd11183a13477bf7e060e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c214733a18c8b6619f28d9961b626c57c2691208173656d60a17e3c184b751c51160fbcbbdb5b1e7be6148ba532e60a0ac346dfebd31a08060000000200000000000000334d83239dd27080e71113610e10d858e8327ef01fb6c86acac12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e957bc73ddc4eabba08ab1e1ad828267d4eadd3964663e88535c133f7130856f756436303767d2e24f29e5dad9796edb697a6ea0183babc190ae2ebf8aad34732181feb215139f15ea7e8cb0bae7c34d5ac5e7c805210600000000000000c3dec04b25dfc17975238345d4f71ab158c36657b7218baa0700f781c0a99bd50499ccc421ace5e845885efb5b9964e4beba3da8223fe5308e4e65ee93e107000000f8ddebf70132a4d0175b989b8eccf707882042e716df9b57b290c661d4e85031086197bcc5cb0e221a0c34323c129102b6ff0100002e88a1940b3c02ed9c92d6f64b1282dc51bb0015982730711c599e1c72ffa11ed8be1a6830d7507005154c46bd3ca96318c570f0721fc7aa2a5836ba99fe1f86468694f22cdf550ef091a78098534f0d973059594119d06d5ea9a8d0857382ec6e2a071474cfc12346e47ad97f4ead7cf70a9d1cdac944779dc08a705414888700a30e2366c6a06b3367a389ca39059787790017b0689a173db9c24db65c1e00015c1d093dab18fd0699fe3304000000323e9c7080397bc49d70c060d57bc88fbe3bbaa058b040362ab926150363fb099408885afc2bf9a46a076b7babfcddeff8c35030669ea69f5e4be1b8e0d6697e97186f9ae97d5670dba6623279f73db9dec75070cd9ab0fda6b069ef6d2857ca3e4effcf7462710d133d541da86e0477e4a6cc999dc21c3ef408e6b178e7c9f274d7fafc8d757d33dfa35aa2000034837d365e63845f3c1092f8dde8af3904ea0f4b82649b83ed4fa0f873339c4cadecc13219ba7518aa4f7db34ead13484742067ab743c1d82a5687f2ed690000000000000000000000000000000000000000000099d4fa0000000000003f0ecdc7c82e72919c91d2039afe17e95edeeeba72205beff7771bcb293747b88486cacee403000000a2919a4bff2ed893f2c814679fa69fc7e0cf761f918725704a01c56009a9f748e5aaf30a10bd8c409b1870c1f75e26b45264e3d3f8e0048e55ae289ce2ad779ce71d4dc30cbb2cc4289d2f884d66cddc76eb7f601110ff39053c262279f4ef00fbdb8c328615a9ec84f27a9f3938ae736138b8c1ec220c1540bf3d162dc1c27fa30f0dc60b9f257db5d1c7ed2e152cb2cf06f8edb30177fead735a952ffce676a93110904d5ee2abdab2ef3ff84c4d61443f73552195c7ccfbf9f03c44432eaa3b7501d4239354da8de21eada75d3a3afb2c76ff0700007981699b6c0f0e946766f57544ff52cef0dd811bec4e3c0a30f2d7d19d26d2503a3ea376721b8eded3bc475958dd498ee2b2d6146e33fc0de1dc2e0516ac565ddb1d4ae89e6712824a85eb9ee0a3b68c9e209756623adf685dd715d68ed11e4b4d5502f5124948f8f98c615cac3666c58f785c3f758be352a71871d5c081197d37980e4f4e26b5476fb20407ff7098b7174bef66fa03a99b5c0c20b378065fac4ef9ac2d0d804b9400000060e5d3f1749f6aecf69ba83a71caa9bdddc679f1b826f54b6563a4be1fd82b73c8c2bc65f63982b951fb058fd3c7b6341c4580376b6c16bd94d2da66059de81abfa15eeeb88b6ae5882ad341032c73f1285e21fff5a1d138e061b1dc7bbda199b5fab8e0719e9cd69b47dcb52b0be6a3a73afdf328132e1d4f21065716be0c53a23940d07188b015fa341dbc92231c8b5e5717eac184f46c9f61b69f55cd2231bcf821052429a1f250e8b734be0605a15f25923d599544b319319ff0a32621019347df460a098119a6f47eb1bac47946d7a009cbc6ec74c19a93cc7c7138b28c95270116181fd5f553573c48104d2ad0e10d3663488e664401453f22f0d76d2162635365258af61ae1f46f4a7862f302d91e3f7c2781f602220522e84602a939a8d5e4137ae31ccd397404dc72e06715a6503d4d865182803ee6725da7293b23daeebefd6fce7411c9624a7e8d5ba5a13e1c32adc4f3274497c6882a72475e4280a4d9a47c003c6ed3071330c58145be813a10788a720a6b5a498ca2b42496c479a0a71e2f6f9bad8c84bc6be20281bde0b348cf2c60538a505ad4a0510eebb023e4954c9eb6cd70627f5c03d867dbf3ad5d1f1dc852064dd0efafc3df20ec8faf3d194db76127f88f284fa1b71ab964fdd2474471da76373e65e9a8bf844bdfdd348bc7d00c4c7e7afe8a1f8cde79b7a6c5aafe954b8ba37818e40c14b37c23f9f614576b689436fef2f27f8b1e756e00262e22bca49c43fd73e7e99b2fa44a8c1db99c2cf2735ad6c5fabf082e0df0f8ba7e24272165f2f5b28230c02b53d44bd84bf6770157e96bbb96b5e1f165c87e7ad68a3600b3d357fa9a7d53c281d88ebb175a4dbb82130e6870982947913110f091d21760d985afd3163f2e6880682432f9b3b97d57a9f980edfa1116a3d04d58872a07d6a7e12db673acd2f7b8988d833e71943fe2c1c65a3cf36b955c56b55bfd3ecf0af694c71a03f2996c15b1ba971de1cb9c7e6a0000000000000014783ef54c51199317413f98dca8ff3d0bda50f6c0af58dbd6c031b1a5a7512c5896514adfa17d31429c68db50a93d88199defd3b4625fea426ff9293a28a544a6a9e2a79b55daa1b3c6b14c4ec6d164e902ce4913843d65d841973468729ea12bf6d3499036dbb66718f3497855c3baa6cc07c0fa388ec9df0617c1a28ef5a595ee267a76175b8a057e6efaf4fefe46def451f2858fe71a53e77b1a44e98843bb3a40102da3703dfb9f61bdcea2fb810b32d52e2157a150a63ea6135d1cf6f864c2e68884d7245bc5d61dc5a114d10ffb22e76678bbfc1e3865d17d128306d1b81884a934cb00000000000000000098a4526e6468987dbc63bff7590eb388afaba43d811996333eef7e9f472bee293f0c40d434b8be07cbd52325296e22802493edb5c590ad208bac683a8b2d4c9d2d57ff846ae8c422e0b28546671f11d8157bb762c91f3fbcca8e21589c92446ae65d408c0637ffcc2d44d715ce003dd1e12b085e186d069a55c2e96efbe5024d61a56a36d988c0f51a973a6c238e545b28211a92000000001501aed8d72af0fcd540a9d4e293690c5e697b3a1480e46df5071bca1cfb28a57c1b3c956ec81397e81fbf870a67385fea04220423f52ad8178b9fd04bdc7e5fee4bd52db996e633792118efdb6b88023e80da74fdf723c7f0"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef9cc093fce47d85272036dc78388e3dc177e9b496", "f28359738e229a4c66810000000000d3000dd602000000005cf7ce1fc986bcdf"}) dup(r0) bind$pptp(r1, &(0x7f0000000000)={0x18, 0x2, {0x0, @private=0xa010100}}, 0x1e) 682.258272ms ago: executing program 3 (id=495): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='rxrpc_rx_eproto\x00', r0}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) fcntl$setstatus(r1, 0x4, 0x42000) syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) 681.715672ms ago: executing program 3 (id=496): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8914, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @dev}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f00000003c0)={0x7, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x200040}]}) r3 = socket$kcm(0xa, 0x5, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={@cgroup, 0xffffffffffffffff, 0x0, 0x1, 0x0, @prog_id}, 0x20) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x890b, &(0x7f0000000000)) (fail_nth: 6) 445.692692ms ago: executing program 2 (id=497): r0 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000f3ffffb0150000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd11, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) syz_open_procfs(0x0, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNISCRNMAP(r3, 0x5600, &(0x7f0000003d40)=""/175) 436.569733ms ago: executing program 4 (id=498): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @link_local}) poll(&(0x7f0000000180)=[{0xffffffffffffffff, 0x10}, {0xffffffffffffffff, 0x8015}, {}, {r0, 0x1100}, {r1, 0x1504}, {0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x400}], 0x7, 0x1) r2 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7020000f3ffffb0150000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r4) memfd_secret(0x0) unshare(0x42000000) r5 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000000)={'lo\x00', {0x2, 0x0, @remote}}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000d3132bead8455dfd0020"], 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f00000003c0)={0x7, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x200040}]}) r7 = socket$kcm(0xa, 0x5, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={@cgroup, 0xffffffffffffffff, 0x0, 0x1, 0x0, @prog_id}, 0x20) ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x890b, &(0x7f0000000000)) 421.156034ms ago: executing program 1 (id=499): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r0, 0x80045301, 0x0) tkill(0x0, 0x7) socket(0x40000000015, 0x5, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) r1 = syz_io_uring_setup(0xec5, &(0x7f00000008c0), &(0x7f0000000540)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd_index=0x4}) io_uring_enter(r1, 0x47fa, 0x0, 0x0, 0x0, 0x0) 353.74855ms ago: executing program 1 (id=500): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x10, &(0x7f00000000c0)={[{@grpjquota, 0x4a}, {@debug}, {@jqfmt_vfsold}, {@noquota}, {@bsdgroups}, {@usrjquota, 0x22}], [], 0x2c}, 0x84, 0x4c2, &(0x7f0000000980)="$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") r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0xffff}, 0x19) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000004200291b00"/20], 0x14}}, 0x0) recvmmsg(r0, &(0x7f000000bf80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) getegid() openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$PROG_LOAD(0x9c, &(0x7f0000000440)={0xe, 0x6, &(0x7f00000000c0)=ANY=[@ANYBLOB="050000000000000071194300000000008510000002000000850000000500000095000000000000009500a504000000006c0ec1084c0d7eb3105f3248024beab8ff4642b3ef414c3725c43e7da9"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x70) 329.550282ms ago: executing program 0 (id=501): connect$unix(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f0000000140)='wg0\x00', 0x4) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r2}, 0x10) fchdir(0xffffffffffffffff) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000b00)={@ifindex, 0xffffffffffffffff, 0x19, 0x38, 0x0, @prog_fd}, 0x20) syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x2000480, &(0x7f00000003c0)={[{@oldalloc}, {@debug}, {@i_version}]}, 0x1, 0x77f, &(0x7f00000007c0)="$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") r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000f00), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)={0x80, r4, 0x1, 0x0, 0x0, {}, [{@pci={{0x8, 0x8e}, {0x11}}, {0xd}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}]}, 0x80}}, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) (async) socket$inet6(0xa, 0x0, 0x0) (async) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, 0x0, 0x0) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) socket$xdp(0x2c, 0x3, 0x0) (async) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f0000000140)='wg0\x00', 0x4) (async) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r2}, 0x10) (async) fchdir(0xffffffffffffffff) (async) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000b00)={@ifindex, 0xffffffffffffffff, 0x19, 0x38, 0x0, @prog_fd}, 0x20) (async) syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x2000480, &(0x7f00000003c0)={[{@oldalloc}, {@debug}, {@i_version}]}, 0x1, 0x77f, &(0x7f00000007c0)="$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") (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000f00), 0xffffffffffffffff) (async) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)={0x80, r4, 0x1, 0x0, 0x0, {}, [{@pci={{0x8, 0x8e}, {0x11}}, {0xd}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}]}, 0x80}}, 0x0) (async) 322.320833ms ago: executing program 3 (id=502): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000a40), 0x6, 0x77c, &(0x7f00000002c0)="$eJzs3E9rVOcaAPDnHDMmxtw7uXDh3nZRBAUFcZKYja5MN90UQRC6tSGZhJCTTMhMrJMKatcF0U0L3bRdl34GsR+gW6GF7gultemidDPlTCYTnM7EMYmOf34/OJ7nPf+e93EOb+aEvCeAN9aJ/J8kYiwirkREsbU9jYijzWgk4vb2cVuPb87lSxKNxtVfk/y02GoU29dKWuvj0Twl/h8RDwsRZz/5Z95qfXN5NsvK6632RG1lbaJa3zy3NBKL5cXy6tT0xckL09MXJqefWsP/+qz11AcXj937/r377zcajbvvDJ1LYqZZd7Rq2/Pk230m6bD9f1KImY7tq/u73EsrGXQHAADoS/49/0hEDDW/pRbz+MGg+wQAAAAcrsZwo6tHoxHd9wAAAACvnqS/5/wT4RcCAAAA8Ira+TuAnbm9T50He8h+eTcixrvlH2pNuR2JQkSMbiXNOQo7ku3T4EBu34mIBzOd99/X+R22zynfbZMd7SfnSB894NU5DA/y8WemPf6MRHv8SdvjT3QZf4Z23p1wQL3Hv938R3qMf1f6zHEr3ir0zH8n4u2hbvlb9//ISDNXt/wf9pn/7v1P7/Xa1/gq4nTXnz/JE7l23w+xMtvxfoiZhaUsiRjumf/hX2ce7VX/aK/8zS70rn+tz/o/3vp9uddYkuc/c3Lvz79b/iPf7n6kaUTca63zY+935Di58sN3e9U/H9Ho+fnvUf+Xfdb/0zfDN/o8FAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJrSiBiLJC214zQtlSKOR8R/YzTNKtXa2YXKxup8vi9iPArpwlJWnoyI4nY7ydtTzXi3fb6jPR0R//nx2HbSpaxcmqtk84MuHgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgLbjETEWSVqKiDQi/iimaakUMdTHucMvoH8AAADAIRkfdAcAAACA587zPwAAALz+9vv8nxxyPwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDX2pXLl/OlsfX45lzenr9e31iuXD83X64ul1Y25kpzlfW10mKlspiVS3OVladdL6tU1qYuxsaNiVq5Wpuo1jevrVQ2VmvXllZmF8vXyoUXUhUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADPaqy5JGkpItJmnKalUsS/ImI8CsnCUlaejIh/R8SjYmE4b08NutMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcump9c3k2y8rrAoGgZ3DpkC94KyJehrp6B4MemQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGIRqfXN5NsvK69VB9wQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDBSn9OIiJfThdPjXXuPZr8WWyuI+KjL65+dmN2pLX9t/b22uf59lpt/fyL7z0AAAC8IS49y8E7z+nN9dTz6xQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPD6qdY3l2ezrLx+sOBS1DcbSY9jBl0jAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACwP38HAAD//2XXvc4=") mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000340)=@gcm_128={{}, "b579fb6acb03ed54", "911a1e5d8b918ee948ba08ac52468dd9", 'l\x00[A', "375bb71e02c67767"}, 0x28) write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="530000000700004600f592"], 0x53) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), 0xffffffffffffffff) statx(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x3100, 0x0, &(0x7f0000001040)) 282.645596ms ago: executing program 2 (id=503): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000100)={0x6, @loopback, 0x0, 0x0, 'sed\x00'}, 0x2c) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$nfc_llcp(r1, 0x6, 0x1a, 0x0, 0x2000e863) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x66, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000003200)=ANY=[@ANYBLOB="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"], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) r4 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x802) write$evdev(r4, &(0x7f0000000000), 0x100000008) ioctl$EXT4_IOC_GROUP_EXTEND(r4, 0x40044581, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600000, 0x200000, 0x0, &(0x7f0000a00000/0x600000)=nil) fsopen(&(0x7f0000000000)='tmpfs\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x88}, [@ldst={0x7}]}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x3c) socket$xdp(0x2c, 0x3, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000001400000008001c000000002018000180140002006e657464657673696d300000000000000800080000000000080009"], 0x44}}, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb0800450200000000000000019078080100fcac140000000000000006000045591816f0e6c157588fc7de1709850000000008"], 0x0) r5 = socket(0x10, 0x803, 0x0) sendto(r5, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000300), 0xc, &(0x7f0000000480)={&(0x7f0000000340)={0x14, 0x0, 0x100, 0x70bd29, 0x25dfdbfc, {{}, {@void, @void}}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x4010) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000180)={0x80000020}, 0x10) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=@mpls_getroute={0x1c, 0x1a, 0x1}, 0x1c}}, 0x0) r7 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000280), r6) sendmsg$SEG6_CMD_DUMPHMAC(r6, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000380)={0x48, r7, 0x2, 0x70bd29, 0x25dfdbfd, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x81}, @SEG6_ATTR_DST={0x14, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x9}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x6f36}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0x4004}, 0x20008800) sendmsg$SEG6_CMD_SET_TUNSRC(r5, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0x38, r7, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x3}, @SEG6_ATTR_HMACKEYID={0x0, 0x3, 0xfffff787}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x100}, @SEG6_ATTR_ALGID={0xfffffffffffffded, 0x6, 0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000881}, 0x40002) 176.261685ms ago: executing program 1 (id=504): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000b00)={0x198, 0x19, 0x1, 0x0, 0x0, {0x1d, 0xd601, 0x9}, [@nested={0x78, 0x12, 0x0, 0x1, [@typed={0x73, 0x121, 0x0, 0x0, @binary="c9a7befe6f6d645a1a11b81b2c4b10fb4f5fdaf9331c7510e19feecb90ee6bb49fdb1a75df432aff8f5e9ed32d3b47b296674f1fe35663c0d236fde58be879310df2b78e43728bfbeeced5a3ca6c897dc7e48022309c32bc4a24d6c2dc3cd2ebe6015638eaa66523c690812fcbaf27"}]}, @nested={0x10a, 0x6, 0x0, 0x1, [@generic="596ba1e9531921c3af1a61cacf3a2cb9bb5cd0bf73ed94c551f271fe52097b0b7e1869d38c7f699157808093c634ee54e06090b0c54a57b886cc1342a9f60da02a7aad0d609c3121b93d2514da9094da38a2a384f2d399fb589a6a6bda405f7b74a89bc4e40b5243fd22b133b33bae78126a311c5df2990e8227", @generic, @typed={0x89, 0x0, 0x0, 0x0, @binary="bb46309871fbbc8e33139068644765bf076115fcd30c6a8ca5babf1192c6af5dfc3e2bd63a3f580831d6fd4bb70650af5a71eef9006b4a391d929013ce7bbd6c46834b5a0983f7e5d2e06cfa105fac266268f8ec9952d470ab47c35e73fea25cda0381ec347d18de3ee0acda8dac7f4d5c9ab83b73cc10f1f93d5cb5e3d4ad0aa25e37d4b3"}]}]}, 0x198}}, 0x0) 175.839605ms ago: executing program 4 (id=505): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) 115.91414ms ago: executing program 4 (id=506): openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @local, 0x9}], 0x1c) setsockopt(r1, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000000), 0x4) recvmsg(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) sendmmsg$inet(r0, &(0x7f0000002880)=[{{0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000a00)="a2", 0x1}], 0x1}}], 0x1, 0x8041) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, 0x0, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'wg0\x00', 0x0}) sendto$packet(r2, &(0x7f0000000180)="0b03feff4f00020002004788aa96a13bb1000011000088ca1a00", 0x1fffc, 0x0, &(0x7f0000000140)={0x11, 0x0, r3}, 0x14) chdir(&(0x7f0000000140)='./bus\x00') r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) write$P9_RREADLINK(r4, &(0x7f0000000100)={0x10, 0x17, 0x1, {0x7, './file0'}}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x82) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) shutdown(r0, 0x1) recvmmsg(r0, &(0x7f0000003e40)=[{{0x0, 0x0, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0x4}], 0x1, &(0x7f00000037c0)=""/236, 0xec, 0x20}}, {{0x0, 0x0, &(0x7f0000003bc0)=[{0x0}, {&(0x7f0000003a00)=""/190, 0xbe}, {&(0x7f0000003ac0)=""/131, 0x83}, {0x0}], 0x4, &(0x7f0000003c00)=""/65, 0x41}}, {{&(0x7f0000003c80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0}}], 0x3, 0x40000121, 0x0) 100.266152ms ago: executing program 1 (id=507): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) socket$packet(0x11, 0x2, 0x300) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='rxrpc_rx_eproto\x00', r0}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) fcntl$setstatus(r1, 0x4, 0x42000) syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) 31.229738ms ago: executing program 1 (id=508): syz_mount_image$ext4(&(0x7f0000000ac0)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x3810744, &(0x7f00000012c0)={[{@noauto_da_alloc}, {@user_xattr}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x9}}, {@data_err_abort}, {@jqfmt_vfsv0}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x8}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x400000}}, {@lazytime}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0xff, 0x451, &(0x7f0000000d00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, 0x0) 0s ago: executing program 3 (id=509): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x4, 0x0, 0x0, 0xa, 0x20, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0xe, @in={0x2, 0x0, @multicast1=0xe0000009}}, @sadb_sa={0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}}, 0x0) kernel console output (not intermixed with test programs): nlmsg_type=0 sclass=netlink_route_socket pid=4268 comm=syz.1.126 [ 63.461030][ T4291] loop0: detected capacity change from 0 to 512 [ 63.464954][ T3938] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.502116][ T4291] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 63.543592][ T4291] EXT4-fs (loop0): 1 truncate cleaned up [ 63.554139][ T3929] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.562130][ T4291] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 63.576230][ T3935] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.602229][ T4309] sch_tbf: burst 4 is lower than device lo mtu (65550) ! [ 63.625444][ T3935] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.671170][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.678356][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.691002][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.698129][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.709999][ T3931] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.866014][ T3929] veth0_vlan: entered promiscuous mode [ 63.900991][ T3929] veth1_vlan: entered promiscuous mode [ 63.954951][ T4347] loop0: detected capacity change from 0 to 128 [ 63.973773][ T4347] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 63.997990][ T3929] veth0_macvtap: entered promiscuous mode [ 64.006387][ T4347] ext4 filesystem being mounted at /3/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 64.007173][ T3929] veth1_macvtap: entered promiscuous mode [ 64.059602][ T4357] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4357 comm=syz.1.129 [ 64.069162][ T3935] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.084622][ T4347] process 'syz.0.131' launched './file1' with NULL argv: empty string added [ 64.112138][ T3929] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.122675][ T3929] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.132567][ T3929] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.132819][ T4349] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4349 comm=syz.1.129 [ 64.143299][ T3929] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.180861][ T3929] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.196463][ T3938] veth0_vlan: entered promiscuous mode [ 64.222322][ T3931] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 64.234683][ T3929] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.245206][ T3929] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.255072][ T3929] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.265588][ T3929] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.278999][ T3929] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.288697][ T3929] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.297494][ T3929] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.306215][ T3929] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.315019][ T3929] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.345405][ T3938] veth1_vlan: entered promiscuous mode [ 64.362655][ T4375] loop0: detected capacity change from 0 to 512 [ 64.402312][ T3938] veth0_macvtap: entered promiscuous mode [ 64.412747][ T4375] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 64.436811][ T4375] ext4 filesystem being mounted at /4/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 64.442196][ T3935] veth0_vlan: entered promiscuous mode [ 64.480433][ T3938] veth1_macvtap: entered promiscuous mode [ 64.507415][ T3935] veth1_vlan: entered promiscuous mode [ 64.544969][ T3938] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.555512][ T3938] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.565540][ T3938] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.576084][ T3938] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.585945][ T3938] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.596474][ T3938] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.634910][ T3938] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.653649][ T3935] veth0_macvtap: entered promiscuous mode [ 64.684417][ T4407] sch_tbf: burst 4 is lower than device lo mtu (65550) ! [ 64.700490][ T3935] veth1_macvtap: entered promiscuous mode [ 64.722196][ T3938] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.732785][ T3938] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.742677][ T3938] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.753159][ T3938] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.763079][ T3938] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.774032][ T3938] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.785443][ T4413] FAULT_INJECTION: forcing a failure. [ 64.785443][ T4413] name failslab, interval 1, probability 0, space 0, times 0 [ 64.793586][ T3938] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.798301][ T4413] CPU: 1 UID: 0 PID: 4413 Comm: syz.3.138 Not tainted 6.11.0-rc5-syzkaller #0 [ 64.814287][ T4413] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 64.824506][ T4413] Call Trace: [ 64.826273][ T3938] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.827796][ T4413] [ 64.827806][ T4413] dump_stack_lvl+0xf2/0x150 [ 64.836486][ T3938] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.839399][ T4413] dump_stack+0x15/0x20 [ 64.839437][ T4413] should_fail_ex+0x229/0x230 [ 64.844005][ T3938] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.853087][ T4413] ? crypto_create_tfm_node+0x57/0x230 [ 64.857399][ T3938] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.861900][ T4413] should_failslab+0x8f/0xb0 [ 64.870645][ T29] kauditd_printk_skb: 15 callbacks suppressed [ 64.870716][ T29] audit: type=1400 audit(1724620600.174:341): avc: denied { rmdir } for pid=3931 comm="syz-executor" name="lost+found" dev="loop0" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 64.876026][ T4413] __kmalloc_node_noprof+0xa8/0x380 [ 64.902076][ T3935] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.918418][ T4413] crypto_create_tfm_node+0x57/0x230 [ 64.918519][ T4413] crypto_spawn_tfm2+0x43/0x70 [ 64.918560][ T4413] crypto_authenc_init_tfm+0x53/0x130 [ 64.918619][ T4413] ? __pfx_crypto_authenc_init_tfm+0x10/0x10 [ 64.918657][ T4413] crypto_aead_init_tfm+0x9a/0xb0 [ 64.924113][ T3935] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.924129][ T3935] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.934537][ T4413] crypto_create_tfm_node+0xe7/0x230 [ 64.939832][ T3935] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.944565][ T4413] crypto_alloc_tfm_node+0xd1/0x250 [ 64.949933][ T3935] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.955884][ T4413] crypto_alloc_aead+0x2f/0x40 [ 64.960897][ T3935] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.970759][ T4413] esp6_init_state+0x3f1/0x960 [ 64.970816][ T4413] ? xfrm_add_sa+0x1572/0x2010 [ 64.981242][ T3935] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.986495][ T4413] __xfrm_init_state+0x772/0xa90 [ 64.996308][ T3935] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.001482][ T4413] xfrm_add_sa+0x1bb5/0x2010 [ 65.016413][ T3935] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.016648][ T4413] xfrm_user_rcv_msg+0x4a3/0x5c0 [ 65.016695][ T4413] ? __kfree_skb+0x102/0x150 [ 65.016724][ T4413] ? consume_skb+0x57/0x180 [ 65.016759][ T4413] netlink_rcv_skb+0x12c/0x230 [ 65.092476][ T4413] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 65.098053][ T4413] xfrm_netlink_rcv+0x47/0x60 [ 65.102874][ T4413] netlink_unicast+0x599/0x670 [ 65.107711][ T4413] netlink_sendmsg+0x5cc/0x6e0 [ 65.112519][ T4413] ? __pfx_netlink_sendmsg+0x10/0x10 [ 65.117840][ T4413] __sock_sendmsg+0x140/0x180 [ 65.122570][ T4413] ____sys_sendmsg+0x312/0x410 [ 65.127372][ T4413] __sys_sendmsg+0x1e9/0x280 [ 65.132006][ T4413] __x64_sys_sendmsg+0x46/0x50 [ 65.136939][ T4413] x64_sys_call+0x2689/0x2d60 [ 65.141730][ T4413] do_syscall_64+0xc9/0x1c0 [ 65.146280][ T4413] ? clear_bhb_loop+0x55/0xb0 [ 65.151099][ T4413] ? clear_bhb_loop+0x55/0xb0 [ 65.155805][ T4413] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 65.161742][ T4413] RIP: 0033:0x7f3a6fcc9e79 [ 65.166180][ T4413] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 65.185814][ T4413] RSP: 002b:00007f3a6e947038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 65.194461][ T4413] RAX: ffffffffffffffda RBX: 00007f3a6fe65f80 RCX: 00007f3a6fcc9e79 [ 65.202439][ T4413] RDX: 0000000000000000 RSI: 00000000200004c0 RDI: 0000000000000006 [ 65.210471][ T4413] RBP: 00007f3a6e947090 R08: 0000000000000000 R09: 0000000000000000 [ 65.218524][ T4413] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 65.226589][ T4413] R13: 0000000000000000 R14: 00007f3a6fe65f80 R15: 00007fff49af2af8 [ 65.234697][ T4413] [ 65.239682][ T3931] EXT4-fs error (device loop0): ext4_readdir:260: inode #12: block 32: comm syz-executor: path /4/bus/file0/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 65.277752][ T3935] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.288271][ T3935] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.298158][ T3935] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.308600][ T3935] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.318479][ T3935] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.328985][ T3935] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.338814][ T3935] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.349321][ T3935] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.363297][ T3935] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.394952][ T3935] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.403788][ T3935] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.412571][ T3935] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.421345][ T3935] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.446797][ T29] audit: type=1400 audit(1724620600.814:342): avc: denied { create } for pid=4436 comm="syz.1.141" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 65.489126][ T4450] netlink: 224 bytes leftover after parsing attributes in process `syz.3.140'. [ 65.509931][ T4439] netlink: 12 bytes leftover after parsing attributes in process `syz.3.140'. [ 65.675609][ T4461] loop4: detected capacity change from 0 to 4096 [ 65.722706][ T4461] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 65.744644][ T29] audit: type=1400 audit(1724620601.114:343): avc: denied { append } for pid=4470 comm="syz.3.144" name="001" dev="devtmpfs" ino=144 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 65.893057][ T3938] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.907089][ T29] audit: type=1400 audit(1724620601.254:344): avc: denied { bind } for pid=4470 comm="syz.3.144" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 66.165707][ T4490] xt_recent: hitcount (4294967295) is larger than allowed maximum (65535) [ 66.230902][ T4511] netlink: 4 bytes leftover after parsing attributes in process `syz.2.146'. [ 66.298822][ T4519] loop2: detected capacity change from 0 to 256 [ 66.305644][ T4521] netlink: 'syz.4.149': attribute type 10 has an invalid length. [ 66.315323][ T29] audit: type=1400 audit(1724620601.684:345): avc: denied { mount } for pid=4517 comm="syz.2.148" name="/" dev="loop2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 66.338904][ T4521] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.346235][ T4521] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.376498][ T29] audit: type=1400 audit(1724620601.694:346): avc: denied { mounton } for pid=4517 comm="syz.2.148" path="/2/bus/bus" dev="loop2" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=file permissive=1 [ 66.378329][ T4521] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.405947][ T4521] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.413365][ T4521] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.420509][ T4521] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.444084][ T4521] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 66.512051][ T4527] sch_tbf: burst 4 is lower than device lo mtu (65550) ! [ 66.527217][ T29] audit: type=1400 audit(1724620601.904:347): avc: denied { execute_no_trans } for pid=4530 comm="syz.4.152" path="/5/file0" dev="tmpfs" ino=43 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 66.675452][ T4535] loop4: detected capacity change from 0 to 4096 [ 66.700814][ T4535] ext4: Unknown parameter 'subj_role' [ 66.734691][ T4535] FAULT_INJECTION: forcing a failure. [ 66.734691][ T4535] name failslab, interval 1, probability 0, space 0, times 0 [ 66.747493][ T4535] CPU: 1 UID: 0 PID: 4535 Comm: syz.4.153 Not tainted 6.11.0-rc5-syzkaller #0 [ 66.756463][ T4535] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 66.766556][ T4535] Call Trace: [ 66.769844][ T4535] [ 66.772788][ T4535] dump_stack_lvl+0xf2/0x150 [ 66.777413][ T4535] dump_stack+0x15/0x20 [ 66.781630][ T4535] should_fail_ex+0x229/0x230 [ 66.786373][ T4535] ? skb_clone+0x154/0x1f0 [ 66.791052][ T4535] should_failslab+0x8f/0xb0 [ 66.795701][ T4535] kmem_cache_alloc_noprof+0x4c/0x290 [ 66.801141][ T4535] skb_clone+0x154/0x1f0 [ 66.805515][ T4535] __netlink_deliver_tap+0x2bd/0x4c0 [ 66.810856][ T4535] netlink_unicast+0x64a/0x670 [ 66.815631][ T4535] netlink_sendmsg+0x5cc/0x6e0 [ 66.820453][ T4535] ? __pfx_netlink_sendmsg+0x10/0x10 [ 66.825782][ T4535] __sock_sendmsg+0x140/0x180 [ 66.830481][ T4535] ____sys_sendmsg+0x312/0x410 [ 66.835345][ T4535] __sys_sendmsg+0x1e9/0x280 [ 66.840021][ T4535] __x64_sys_sendmsg+0x46/0x50 [ 66.844900][ T4535] x64_sys_call+0x2689/0x2d60 [ 66.849723][ T4535] do_syscall_64+0xc9/0x1c0 [ 66.854274][ T4535] ? clear_bhb_loop+0x55/0xb0 [ 66.859004][ T4535] ? clear_bhb_loop+0x55/0xb0 [ 66.863700][ T4535] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 66.870041][ T4535] RIP: 0033:0x7f8aaab79e79 [ 66.874462][ T4535] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 66.894156][ T4535] RSP: 002b:00007f8aa97f1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 66.902647][ T4535] RAX: ffffffffffffffda RBX: 00007f8aaad15f80 RCX: 00007f8aaab79e79 [ 66.910626][ T4535] RDX: 0000000000000000 RSI: 0000000020000380 RDI: 0000000000000004 [ 66.918642][ T4535] RBP: 00007f8aa97f1090 R08: 0000000000000000 R09: 0000000000000000 [ 66.926617][ T4535] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 66.934638][ T4535] R13: 0000000000000000 R14: 00007f8aaad15f80 R15: 00007ffcf5268878 [ 66.942623][ T4535] [ 66.979206][ T29] audit: type=1326 audit(1724620602.354:348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4547 comm="syz.1.158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe781069e79 code=0x7ffc0000 [ 67.013007][ T29] audit: type=1326 audit(1724620602.354:349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4547 comm="syz.1.158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=161 compat=0 ip=0x7fe781069e79 code=0x7ffc0000 [ 67.036307][ T29] audit: type=1326 audit(1724620602.354:350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4547 comm="syz.1.158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe781069e79 code=0x7ffc0000 [ 67.137204][ T4552] netdevsim netdevsim1 netdevsim0: Unsupported IPsec algorithm [ 67.142962][ T4554] netlink: 12 bytes leftover after parsing attributes in process `syz.4.160'. [ 67.264967][ T4556] netem: incorrect gi model size [ 67.270165][ T4556] netem: change failed [ 67.337172][ T3935] FAT-fs (loop2): error, corrupted directory (invalid entries) [ 67.344796][ T3935] FAT-fs (loop2): Filesystem has been set read-only [ 67.363891][ T3935] FAT-fs (loop2): error, corrupted directory (invalid entries) [ 67.382442][ T4560] loop4: detected capacity change from 0 to 512 [ 67.400819][ T4560] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #15: comm syz.4.164: casefold flag without casefold feature [ 67.429997][ T4560] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.164: couldn't read orphan inode 15 (err -117) [ 67.444791][ T4560] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 67.460510][ T4560] sit0: Master is either lo or non-ether device [ 67.620906][ T4566] sch_tbf: burst 4 is lower than device lo mtu (65550) ! [ 67.698033][ T4570] netlink: 'syz.1.168': attribute type 10 has an invalid length. [ 67.706019][ T4570] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.713197][ T4570] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.741367][ T4570] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.748597][ T4570] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.756102][ T4570] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.763200][ T4570] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.780148][ T4570] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 67.813984][ T4572] netlink: 4 bytes leftover after parsing attributes in process `syz.1.169'. [ 67.871731][ T4574] netlink: 4 bytes leftover after parsing attributes in process `syz.1.170'. [ 67.880616][ T4574] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 67.888129][ T4574] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 67.897534][ T4574] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 67.904936][ T4574] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 68.079833][ T4578] tap0: tun_chr_ioctl cmd 2147767521 [ 68.086200][ T4578] serio: Serial port ptm0 [ 68.278738][ T3938] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.363665][ T4586] loop4: detected capacity change from 0 to 512 [ 68.373818][ T4588] netlink: 8 bytes leftover after parsing attributes in process `syz.3.175'. [ 68.387778][ T4586] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 68.404496][ T4586] EXT4-fs (loop4): 1 truncate cleaned up [ 68.412063][ T4586] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 68.592276][ T3938] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.632596][ T4600] sch_tbf: burst 4 is lower than device lo mtu (65550) ! [ 68.660689][ T4602] netlink: 8 bytes leftover after parsing attributes in process `syz.1.179'. [ 68.769574][ T4605] netlink: 12 bytes leftover after parsing attributes in process `syz.4.180'. [ 68.779628][ T4605] netlink: 'syz.4.180': attribute type 2 has an invalid length. [ 68.787429][ T4605] netlink: 'syz.4.180': attribute type 1 has an invalid length. [ 68.795078][ T4605] netlink: 132 bytes leftover after parsing attributes in process `syz.4.180'. [ 68.833602][ T4605] loop4: detected capacity change from 0 to 1024 [ 68.843162][ T4605] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 68.854858][ T4605] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.881262][ T3938] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.960794][ T4610] hub 6-0:1.0: USB hub found [ 68.965563][ T4610] FAULT_INJECTION: forcing a failure. [ 68.965563][ T4610] name failslab, interval 1, probability 0, space 0, times 0 [ 68.978323][ T4610] CPU: 0 UID: 0 PID: 4610 Comm: syz.4.182 Not tainted 6.11.0-rc5-syzkaller #0 [ 68.987183][ T4610] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 68.997250][ T4610] Call Trace: [ 69.000540][ T4610] [ 69.003473][ T4610] dump_stack_lvl+0xf2/0x150 [ 69.008174][ T4610] dump_stack+0x15/0x20 [ 69.012447][ T4610] should_fail_ex+0x229/0x230 [ 69.017154][ T4610] ? hub_probe+0x6e5/0x15c0 [ 69.021688][ T4610] should_failslab+0x8f/0xb0 [ 69.026315][ T4610] __kmalloc_cache_noprof+0x4b/0x2a0 [ 69.031655][ T4610] hub_probe+0x6e5/0x15c0 [ 69.036029][ T4610] ? read_tsc+0x9/0x20 [ 69.040109][ T4610] ? ktime_get_mono_fast_ns+0x17a/0x1a0 [ 69.045680][ T4610] ? _raw_spin_unlock_irqrestore+0x2b/0x60 [ 69.051564][ T4610] usb_probe_interface+0x460/0x6a0 [ 69.056752][ T4610] ? __pfx_usb_probe_interface+0x10/0x10 [ 69.062407][ T4610] really_probe+0x1cf/0x5d0 [ 69.066939][ T4610] __driver_probe_device+0x12d/0x200 [ 69.072255][ T4610] driver_probe_device+0x38/0x2f0 [ 69.077303][ T4610] __device_attach_driver+0x216/0x320 [ 69.082864][ T4610] ? __pfx___device_attach_driver+0x10/0x10 [ 69.088792][ T4610] bus_for_each_drv+0x1cd/0x240 [ 69.093673][ T4610] __device_attach+0x1c7/0x290 [ 69.098528][ T4610] device_attach+0x17/0x20 [ 69.102971][ T4610] proc_ioctl+0x339/0x400 [ 69.107398][ T4610] usbdev_ioctl+0x1f0d/0x3e10 [ 69.112122][ T4610] ? do_vfs_ioctl+0x99e/0x1560 [ 69.116919][ T4610] ? selinux_file_ioctl+0x2f7/0x380 [ 69.122307][ T4610] ? __fget_files+0x1da/0x210 [ 69.126999][ T4610] ? __pfx_usbdev_ioctl+0x10/0x10 [ 69.132067][ T4610] __se_sys_ioctl+0xd3/0x150 [ 69.136784][ T4610] __x64_sys_ioctl+0x43/0x50 [ 69.141420][ T4610] x64_sys_call+0x15cc/0x2d60 [ 69.146126][ T4610] do_syscall_64+0xc9/0x1c0 [ 69.150652][ T4610] ? clear_bhb_loop+0x55/0xb0 [ 69.155356][ T4610] ? clear_bhb_loop+0x55/0xb0 [ 69.160057][ T4610] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.165986][ T4610] RIP: 0033:0x7f8aaab79e79 [ 69.170403][ T4610] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 69.190029][ T4610] RSP: 002b:00007f8aa97f1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 69.198510][ T4610] RAX: ffffffffffffffda RBX: 00007f8aaad15f80 RCX: 00007f8aaab79e79 [ 69.206550][ T4610] RDX: 0000000020000040 RSI: 00000000c0105512 RDI: 0000000000000004 [ 69.214559][ T4610] RBP: 00007f8aa97f1090 R08: 0000000000000000 R09: 0000000000000000 [ 69.222550][ T4610] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 69.230534][ T4610] R13: 0000000000000000 R14: 00007f8aaad15f80 R15: 00007ffcf5268878 [ 69.238519][ T4610] [ 69.242096][ T4610] hub 6-0:1.0: config failed, out of memory (err -12) [ 69.451475][ T4624] program syz.4.187 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 69.518745][ T4627] loop4: detected capacity change from 0 to 256 [ 69.666461][ T4632] loop3: detected capacity change from 0 to 4096 [ 69.674491][ T4634] netlink: 'syz.4.191': attribute type 8 has an invalid length. [ 69.682445][ T4634] netlink: 'syz.4.191': attribute type 1 has an invalid length. [ 69.682545][ T4632] EXT4-fs: Ignoring removed nomblk_io_submit option [ 69.720516][ T4632] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.786057][ T4632] EXT4-fs error (device loop3): ext4_do_update_inode:5154: inode #15: comm syz.3.190: corrupted inode contents [ 69.808478][ T4632] EXT4-fs error (device loop3): ext4_dirty_inode:6014: inode #15: comm syz.3.190: mark_inode_dirty error [ 69.835562][ T4632] EXT4-fs error (device loop3): ext4_do_update_inode:5154: inode #15: comm syz.3.190: corrupted inode contents [ 69.869496][ T4632] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #15: comm syz.3.190: mark_inode_dirty error [ 69.897025][ T4632] EXT4-fs error (device loop3): ext4_do_update_inode:5154: inode #15: comm syz.3.190: corrupted inode contents [ 69.930277][ T4632] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #15: comm syz.3.190: mark_inode_dirty error [ 69.980898][ T4632] EXT4-fs error (device loop3): ext4_do_update_inode:5154: inode #15: comm syz.3.190: corrupted inode contents [ 69.982597][ T4644] hub 6-0:1.0: USB hub found [ 69.997823][ T29] kauditd_printk_skb: 78 callbacks suppressed [ 69.997836][ T29] audit: type=1400 audit(1724620605.354:429): avc: denied { setopt } for pid=4631 comm="syz.3.190" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 70.023775][ T29] audit: type=1400 audit(1724620605.354:430): avc: denied { read } for pid=4631 comm="syz.3.190" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 70.023951][ T4632] EXT4-fs error (device loop3): ext4_truncate:4241: inode #15: comm syz.3.190: mark_inode_dirty error [ 70.064694][ T4644] hub 6-0:1.0: 8 ports detected [ 70.116340][ T4648] loop4: detected capacity change from 0 to 512 [ 70.125482][ T4648] EXT4-fs: Ignoring removed oldalloc option [ 70.133097][ T4648] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 70.143160][ T4632] EXT4-fs error (device loop3) in ext4_setattr:5553: Corrupt filesystem [ 70.158294][ T4648] EXT4-fs (loop4): 1 truncate cleaned up [ 70.164832][ T4640] EXT4-fs error (device loop3): ext4_do_update_inode:5154: inode #15: comm syz.3.190: corrupted inode contents [ 70.177822][ T29] audit: type=1400 audit(1724620605.534:431): avc: denied { unlink } for pid=4631 comm="syz.3.190" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 70.221072][ T4648] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.284103][ T3929] EXT4-fs warning (device loop3): ext4_evict_inode:254: couldn't mark inode dirty (err -117) [ 70.298265][ T3938] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.308381][ T3929] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.452067][ T4658] loop3: detected capacity change from 0 to 1024 [ 70.497441][ T4658] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.551025][ T3368] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.594928][ T3929] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.637846][ T3368] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.712071][ T3368] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.741365][ T4673] __nla_validate_parse: 6 callbacks suppressed [ 70.741381][ T4673] netlink: 12 bytes leftover after parsing attributes in process `syz.3.202'. [ 70.783906][ T3368] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.826902][ T8] IPVS: starting estimator thread 0... [ 70.916998][ T4678] IPVS: using max 2304 ests per chain, 115200 per kthread [ 70.952000][ T4663] chnl_net:caif_netlink_parms(): no params data found [ 70.967062][ T3368] bridge_slave_1: left allmulticast mode [ 70.972816][ T3368] bridge_slave_1: left promiscuous mode [ 70.978578][ T3368] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.022314][ T3368] bridge_slave_0: left allmulticast mode [ 71.028090][ T3368] bridge_slave_0: left promiscuous mode [ 71.033758][ T3368] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.119110][ T4695] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4695 comm=syz.3.203 [ 71.197391][ T4677] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4677 comm=syz.3.203 [ 71.251561][ T3368] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 71.277892][ T4701] netlink: set zone limit has 8 unknown bytes [ 71.284444][ T3368] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 71.305354][ T3368] bond0 (unregistering): Released all slaves [ 71.328833][ T4703] loop4: detected capacity change from 0 to 512 [ 71.352609][ T4703] EXT4-fs: Ignoring removed oldalloc option [ 71.375755][ T4703] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 71.389550][ T4703] EXT4-fs (loop4): 1 truncate cleaned up [ 71.402360][ T4703] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.420923][ T29] audit: type=1400 audit(1724620606.794:432): avc: denied { accept } for pid=4708 comm="syz.3.206" lport=9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 71.421108][ T4709] cgroup: Unexpected value for 'cpuset_v2_mode' [ 71.458046][ T3368] hsr_slave_0: left promiscuous mode [ 71.463999][ T3368] hsr_slave_1: left promiscuous mode [ 71.473197][ T3368] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 71.480746][ T3368] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 71.490212][ T3938] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.499680][ T3368] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 71.507100][ T3368] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 71.523981][ T3524] IPVS: starting estimator thread 0... [ 71.529768][ T3368] veth1_macvtap: left promiscuous mode [ 71.535312][ T3368] veth0_macvtap: left promiscuous mode [ 71.540867][ T3368] veth1_vlan: left promiscuous mode [ 71.546112][ T3368] veth0_vlan: left promiscuous mode [ 71.569479][ T4712] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 71.616690][ T4713] IPVS: using max 2304 ests per chain, 115200 per kthread [ 71.678935][ T4718] loop1: detected capacity change from 0 to 764 [ 71.761163][ T3368] team0 (unregistering): Port device team_slave_1 removed [ 71.782569][ T3368] team0 (unregistering): Port device team_slave_0 removed [ 71.806958][ T4714] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4714 comm=syz.4.207 [ 71.827843][ T4714] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4714 comm=syz.4.207 [ 71.870987][ T4663] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.878210][ T4663] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.891682][ T4663] bridge_slave_0: entered allmulticast mode [ 71.904055][ T4663] bridge_slave_0: entered promiscuous mode [ 71.919279][ T4663] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.926419][ T4663] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.935929][ T4663] bridge_slave_1: entered allmulticast mode [ 71.948053][ T4663] bridge_slave_1: entered promiscuous mode [ 71.968968][ T4718] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 71.976305][ T4718] IPv6: NLM_F_CREATE should be set when creating new route [ 72.040546][ T4663] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.071498][ T4663] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.126798][ T4663] team0: Port device team_slave_0 added [ 72.138500][ T4742] sch_tbf: burst 4 is lower than device lo mtu (65550) ! [ 72.155467][ T4663] team0: Port device team_slave_1 added [ 72.202725][ T4663] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.209870][ T4663] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.236068][ T4663] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.252947][ T4746] loop1: detected capacity change from 0 to 764 [ 72.261158][ T4663] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.268132][ T4663] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.294076][ T4663] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.353033][ T4752] netlink: 12 bytes leftover after parsing attributes in process `syz.1.213'. [ 72.409301][ T4663] hsr_slave_0: entered promiscuous mode [ 72.426317][ T4663] hsr_slave_1: entered promiscuous mode [ 73.176660][ T29] audit: type=1400 audit(1724620608.544:433): avc: denied { read } for pid=4756 comm="syz.1.215" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 78.577570][ T4757] loop1: detected capacity change from 0 to 2048 [ 80.347800][ T4757] EXT4-fs: Ignoring removed mblk_io_submit option [ 80.967142][ T4757] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 81.356762][ T4764] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 234: padding at end of block bitmap is not set [ 81.436651][ T4764] EXT4-fs (loop1): Remounting filesystem read-only [ 88.349978][ T3723] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.767932][ T36] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.785249][ T4419] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.838718][ T36] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.952057][ T36] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.983062][ T4782] chnl_net:caif_netlink_parms(): no params data found [ 88.999749][ T36] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.096375][ T4663] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 89.106546][ T4785] chnl_net:caif_netlink_parms(): no params data found [ 89.129314][ T4663] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 89.139400][ T4663] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 89.165499][ T4782] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.172747][ T4782] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.180231][ T4782] bridge_slave_0: entered allmulticast mode [ 89.186791][ T4782] bridge_slave_0: entered promiscuous mode [ 89.195459][ T4782] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.202628][ T4782] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.209972][ T4782] bridge_slave_1: entered allmulticast mode [ 89.216643][ T4782] bridge_slave_1: entered promiscuous mode [ 89.223418][ T4663] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 89.245476][ T4780] chnl_net:caif_netlink_parms(): no params data found [ 89.258925][ T4774] chnl_net:caif_netlink_parms(): no params data found [ 89.332418][ T4782] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.345094][ T36] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.356843][ T29] audit: type=1400 audit(1724620624.734:434): avc: denied { unlink } for pid=2942 comm="syslogd" name="messages.0" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 89.396291][ T4782] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.405418][ T4785] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.412551][ T4785] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.419786][ T4785] bridge_slave_0: entered allmulticast mode [ 89.426233][ T4785] bridge_slave_0: entered promiscuous mode [ 89.457839][ T36] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.471204][ T4785] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.478395][ T4785] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.486128][ T4785] bridge_slave_1: entered allmulticast mode [ 89.494619][ T4785] bridge_slave_1: entered promiscuous mode [ 89.530509][ T4782] team0: Port device team_slave_0 added [ 89.540874][ T36] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.561891][ T4785] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.571483][ T4780] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.578802][ T4780] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.588466][ T4780] bridge_slave_0: entered allmulticast mode [ 89.595228][ T4780] bridge_slave_0: entered promiscuous mode [ 89.602968][ T4774] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.610081][ T4774] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.617571][ T4774] bridge_slave_0: entered allmulticast mode [ 89.624348][ T4774] bridge_slave_0: entered promiscuous mode [ 89.633021][ T4774] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.640212][ T4774] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.649928][ T4774] bridge_slave_1: entered allmulticast mode [ 89.656537][ T4774] bridge_slave_1: entered promiscuous mode [ 89.669357][ T4782] team0: Port device team_slave_1 added [ 89.678923][ T36] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.691702][ T4785] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.706347][ T4780] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.713524][ T4780] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.720827][ T4780] bridge_slave_1: entered allmulticast mode [ 89.727756][ T4780] bridge_slave_1: entered promiscuous mode [ 89.747708][ T4780] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.780142][ T4780] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.800080][ T4782] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.807175][ T4782] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.833372][ T4782] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.844806][ T4782] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.851829][ T4782] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.877846][ T4782] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.889459][ T4785] team0: Port device team_slave_0 added [ 89.920918][ T4780] team0: Port device team_slave_0 added [ 89.928924][ T4774] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.938911][ T4785] team0: Port device team_slave_1 added [ 89.945922][ T4774] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.964997][ T4782] hsr_slave_0: entered promiscuous mode [ 89.971275][ T4782] hsr_slave_1: entered promiscuous mode [ 89.977341][ T4782] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.984907][ T4782] Cannot create hsr debugfs directory [ 90.007720][ T4780] team0: Port device team_slave_1 added [ 90.052834][ T4785] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.059892][ T4785] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.086014][ T4785] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.104301][ T36] bridge_slave_1: left allmulticast mode [ 90.110054][ T36] bridge_slave_1: left promiscuous mode [ 90.115867][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.124223][ T36] bridge_slave_0: left allmulticast mode [ 90.129928][ T36] bridge_slave_0: left promiscuous mode [ 90.135555][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.143755][ T36] bridge_slave_1: left allmulticast mode [ 90.149468][ T36] bridge_slave_1: left promiscuous mode [ 90.155076][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.163041][ T36] bridge_slave_0: left allmulticast mode [ 90.168758][ T36] bridge_slave_0: left promiscuous mode [ 90.174399][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.409246][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 90.420067][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 90.430485][ T36] bond0 (unregistering): Released all slaves [ 90.440058][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 90.450591][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 90.460836][ T36] bond0 (unregistering): Released all slaves [ 90.469508][ T4780] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.476452][ T4780] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.502697][ T4780] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.515583][ T4780] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.522595][ T4780] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.548642][ T4780] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.559952][ T4785] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.567466][ T4785] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.593674][ T4785] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.612395][ T4774] team0: Port device team_slave_0 added [ 90.619316][ T4774] team0: Port device team_slave_1 added [ 90.662604][ T4663] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.674697][ T4785] hsr_slave_0: entered promiscuous mode [ 90.680977][ T4785] hsr_slave_1: entered promiscuous mode [ 90.686911][ T4785] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 90.694460][ T4785] Cannot create hsr debugfs directory [ 90.700322][ T4774] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.707339][ T4774] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.733503][ T4774] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.746409][ T36] hsr_slave_0: left promiscuous mode [ 90.752179][ T36] hsr_slave_1: left promiscuous mode [ 90.757934][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 90.765338][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 90.772849][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 90.780396][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 90.789649][ T36] hsr_slave_0: left promiscuous mode [ 90.795349][ T36] hsr_slave_1: left promiscuous mode [ 90.801267][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 90.808690][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 90.816086][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 90.823517][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 90.834526][ T36] veth1_macvtap: left promiscuous mode [ 90.840055][ T36] veth0_macvtap: left promiscuous mode [ 90.845553][ T36] veth1_vlan: left promiscuous mode [ 90.850985][ T36] veth0_vlan: left promiscuous mode [ 90.856971][ T36] veth1_macvtap: left promiscuous mode [ 90.862672][ T36] veth0_macvtap: left promiscuous mode [ 90.868261][ T36] veth1_vlan: left promiscuous mode [ 90.873557][ T36] veth0_vlan: left promiscuous mode [ 91.001471][ T36] team0 (unregistering): Port device team_slave_1 removed [ 91.013542][ T36] team0 (unregistering): Port device team_slave_0 removed [ 91.082620][ T36] team0 (unregistering): Port device team_slave_1 removed [ 91.094314][ T36] team0 (unregistering): Port device team_slave_0 removed [ 91.143810][ T4774] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.151009][ T4774] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.177051][ T4774] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.214445][ T4780] hsr_slave_0: entered promiscuous mode [ 91.220752][ T4780] hsr_slave_1: entered promiscuous mode [ 91.226858][ T4780] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 91.234415][ T4780] Cannot create hsr debugfs directory [ 91.253260][ T4774] hsr_slave_0: entered promiscuous mode [ 91.259497][ T4774] hsr_slave_1: entered promiscuous mode [ 91.265423][ T4774] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 91.273032][ T4774] Cannot create hsr debugfs directory [ 91.281438][ T4663] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.318692][ T28] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.325780][ T28] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.372825][ T3368] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.379960][ T3368] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.549165][ T4663] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.641411][ T4663] veth0_vlan: entered promiscuous mode [ 91.649702][ T4663] veth1_vlan: entered promiscuous mode [ 91.665225][ T4663] veth0_macvtap: entered promiscuous mode [ 91.674897][ T4663] veth1_macvtap: entered promiscuous mode [ 91.688302][ T4663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.698960][ T4663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.712400][ T4663] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.723777][ T4663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.734495][ T4663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.748720][ T4663] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.763321][ T4663] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.772312][ T4663] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.781055][ T4663] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.789858][ T4663] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.834223][ T36] IPVS: stop unused estimator thread 0... [ 91.839075][ T4782] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 91.858501][ T4782] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 91.894527][ T4782] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 91.906515][ T4782] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 91.990281][ T4782] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.003103][ T36] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.029178][ T4782] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.039568][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.046691][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.060665][ T3360] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.067943][ T3360] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.087823][ T36] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.116176][ T29] audit: type=1400 audit(1724620627.484:435): avc: denied { write } for pid=4998 comm="syz.2.222" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 92.137962][ T29] audit: type=1400 audit(1724620627.514:436): avc: denied { ioctl } for pid=4998 comm="syz.2.222" path="socket:[11458]" dev="sockfs" ino=11458 ioctlcmd=0x89f0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 92.196736][ T29] audit: type=1400 audit(1724620627.564:437): avc: denied { getopt } for pid=4998 comm="syz.2.222" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 92.219633][ T5011] loop2: detected capacity change from 0 to 2048 [ 92.227455][ T36] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.267341][ T5011] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 92.280832][ T4774] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.295314][ T4780] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 92.303779][ T4780] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 92.312534][ T4780] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 92.323281][ T36] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.337153][ T4780] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 92.369395][ T4774] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.376151][ T29] audit: type=1400 audit(1724620627.744:438): avc: denied { connect } for pid=4998 comm="syz.2.222" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 92.428912][ T4780] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.442708][ T4780] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.453597][ T4774] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.472247][ T3368] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.479345][ T3368] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.491375][ T4782] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.504134][ T4774] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.519789][ T3276] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.526947][ T3276] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.548227][ T4663] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.614365][ T36] bridge_slave_1: left allmulticast mode [ 92.620182][ T36] bridge_slave_1: left promiscuous mode [ 92.625912][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.638175][ T36] bridge_slave_0: left allmulticast mode [ 92.643835][ T36] bridge_slave_0: left promiscuous mode [ 92.649564][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.660251][ T36] bridge_slave_1: left allmulticast mode [ 92.665966][ T36] bridge_slave_1: left promiscuous mode [ 92.671724][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.690232][ T36] bridge_slave_0: left allmulticast mode [ 92.695985][ T36] bridge_slave_0: left promiscuous mode [ 92.701825][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.715232][ T5037] openvswitch: netlink: VXLAN extension 0 has unexpected len 2 expected 0 [ 92.865932][ T36] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 92.918011][ T36] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 92.970898][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 92.981609][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 92.993286][ T36] bond0 (unregistering): Released all slaves [ 93.003420][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 93.015333][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 93.025952][ T36] bond0 (unregistering): Released all slaves [ 93.039265][ T4780] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 93.130906][ T36] hsr_slave_0: left promiscuous mode [ 93.146423][ T36] hsr_slave_1: left promiscuous mode [ 93.157764][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 93.165201][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 93.173533][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 93.181023][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 93.192147][ T36] hsr_slave_0: left promiscuous mode [ 93.198836][ T36] hsr_slave_1: left promiscuous mode [ 93.208088][ T36] veth1_macvtap: left promiscuous mode [ 93.213647][ T36] veth0_macvtap: left promiscuous mode [ 93.219349][ T36] veth1_vlan: left promiscuous mode [ 93.224581][ T36] veth0_vlan: left promiscuous mode [ 93.230613][ T36] veth1_macvtap: left promiscuous mode [ 93.236164][ T36] veth0_macvtap: left promiscuous mode [ 93.241775][ T36] veth1_vlan: left promiscuous mode [ 93.247057][ T36] veth0_vlan: left promiscuous mode [ 93.375596][ T36] team0 (unregistering): Port device team_slave_1 removed [ 93.388214][ T36] team0 (unregistering): Port device team_slave_0 removed [ 93.456298][ T36] team0 (unregistering): Port device team_slave_1 removed [ 93.467590][ T36] team0 (unregistering): Port device team_slave_0 removed [ 93.503402][ T4774] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 93.513048][ T4774] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 93.530320][ T4774] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 93.539195][ T4774] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 93.554327][ T4782] veth0_vlan: entered promiscuous mode [ 93.573265][ T4780] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.614375][ T4782] veth1_vlan: entered promiscuous mode [ 93.667645][ T4782] veth0_macvtap: entered promiscuous mode [ 93.679172][ T4782] veth1_macvtap: entered promiscuous mode [ 93.706876][ T4774] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.733166][ T4782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.743727][ T4782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.758167][ T4782] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.778428][ T4774] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.791062][ T310] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.798249][ T310] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.810930][ T5129] loop2: detected capacity change from 0 to 256 [ 93.818981][ T5129] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 93.837524][ T3368] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.844595][ T3368] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.869283][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 93.876501][ T4782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.889969][ T4782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.904049][ T4782] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.930032][ T4782] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.938863][ T4782] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.947787][ T4782] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.956808][ T4782] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.966046][ T5135] loop2: detected capacity change from 0 to 512 [ 93.985048][ T4774] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 93.985862][ T5135] EXT4-fs error (device loop2): __ext4_iget:4985: inode #11: block 1: comm syz.2.227: invalid block [ 93.995525][ T4774] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 94.024395][ T5135] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.227: couldn't read orphan inode 11 (err -117) [ 94.028881][ T4785] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 94.044376][ T5135] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 94.062120][ T4780] veth0_vlan: entered promiscuous mode [ 94.083586][ T5135] EXT4-fs error (device loop2): ext4_add_entry:2435: inode #2: comm syz.2.227: Directory hole found for htree leaf block 0 [ 94.083622][ T4785] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 94.114768][ T4785] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 94.156417][ T4780] veth1_vlan: entered promiscuous mode [ 94.159899][ T5135] EXT4-fs error (device loop2): ext4_add_entry:2435: inode #2: comm syz.2.227: Directory hole found for htree leaf block 0 [ 94.184354][ T4785] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 94.211358][ T36] IPVS: stop unused estimator thread 0... [ 94.227917][ T4774] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.240059][ T4780] veth0_macvtap: entered promiscuous mode [ 94.246738][ T29] audit: type=1400 audit(1724620629.614:439): avc: denied { execute } for pid=5134 comm="syz.2.227" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=11878 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 94.309758][ T4663] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.322316][ T4780] veth1_macvtap: entered promiscuous mode [ 94.335505][ T4785] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.371295][ T4785] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.390232][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.397326][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.407845][ T4780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.418336][ T4780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.418781][ T29] audit: type=1400 audit(1724620629.784:440): avc: denied { read write } for pid=5159 comm="syz.2.228" name="uhid" dev="devtmpfs" ino=227 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 94.428549][ T4780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.428568][ T4780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.451765][ T4780] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.460036][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.462308][ T29] audit: type=1400 audit(1724620629.784:441): avc: denied { open } for pid=5159 comm="syz.2.228" path="/dev/uhid" dev="devtmpfs" ino=227 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 94.472250][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.511532][ T3461] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 94.524597][ T3461] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 94.532155][ T3461] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 94.533944][ T4780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.539585][ T3461] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 94.557720][ T4780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.567566][ T4780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.567761][ T3461] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 94.578079][ T4780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.586563][ T4780] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.595397][ T3461] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 94.605562][ T4780] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.609972][ T3461] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 94.618654][ T4780] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.625989][ T3461] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 94.634752][ T4780] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.642249][ T3461] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 94.650960][ T4780] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.667382][ T3461] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 94.671430][ T4785] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 94.674762][ T3461] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 94.685118][ T4785] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 94.692494][ T3461] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 94.710332][ T3461] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 94.717834][ T3461] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 94.725223][ T3461] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 94.732667][ T3461] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 94.740110][ T3461] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 94.747068][ T5167] netlink: 12 bytes leftover after parsing attributes in process `syz.0.229'. [ 94.747591][ T3461] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 94.766364][ T3461] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 94.773888][ T3461] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 94.781399][ T3461] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 94.788902][ T3461] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 94.796292][ T3461] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 94.803734][ T3461] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 94.811158][ T3461] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 94.818751][ T3461] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 94.826168][ T3461] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 94.833731][ T3461] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 94.841197][ T3461] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 94.848611][ T3461] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 94.856120][ T3461] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 94.863651][ T3461] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 94.871072][ T3461] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 94.878691][ T3461] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 94.886110][ T3461] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 94.895581][ T3461] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz0] on syz1 [ 94.950288][ T4774] veth0_vlan: entered promiscuous mode [ 94.973978][ T4774] veth1_vlan: entered promiscuous mode [ 95.014841][ T4785] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.032094][ T4774] veth0_macvtap: entered promiscuous mode [ 95.038109][ T3338] IPVS: starting estimator thread 0... [ 95.045924][ T4774] veth1_macvtap: entered promiscuous mode [ 95.071420][ T4774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.081984][ T4774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.091912][ T4774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.102499][ T4774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.112422][ T4774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.122916][ T4774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.138978][ T5182] IPVS: using max 1968 ests per chain, 98400 per kthread [ 95.164295][ T4774] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.182633][ T4774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.193136][ T4774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.203245][ T4774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.213773][ T4774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.223627][ T4774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.234271][ T4774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.249437][ T4774] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.278320][ T4774] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.287191][ T4774] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.296173][ T4774] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.304958][ T4774] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.371454][ T29] audit: type=1400 audit(1724620630.744:442): avc: denied { name_bind } for pid=5189 comm="syz.2.231" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 95.405101][ T5179] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5179 comm=syz.3.219 [ 95.417999][ T5179] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5179 comm=syz.3.219 [ 95.516915][ T5203] netlink: 4 bytes leftover after parsing attributes in process `syz.3.234'. [ 95.537844][ T5199] veth2: entered allmulticast mode [ 95.551971][ T29] audit: type=1326 audit(1724620630.924:443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5201 comm="syz.3.234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7554b89e79 code=0x7ffc0000 [ 95.575312][ T29] audit: type=1326 audit(1724620630.924:444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5201 comm="syz.3.234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7554b89e79 code=0x7ffc0000 [ 95.580838][ T4785] veth0_vlan: entered promiscuous mode [ 95.598698][ T29] audit: type=1326 audit(1724620630.924:445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5201 comm="syz.3.234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=116 compat=0 ip=0x7f7554b89e79 code=0x7ffc0000 [ 95.611826][ T4785] veth1_vlan: entered promiscuous mode [ 95.627309][ T29] audit: type=1326 audit(1724620630.924:446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5201 comm="syz.3.234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7554b89e79 code=0x7ffc0000 [ 95.640860][ T5208] dummy0: entered promiscuous mode [ 95.656445][ T29] audit: type=1326 audit(1724620630.924:447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5201 comm="syz.3.234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7554b89e79 code=0x7ffc0000 [ 95.692175][ T29] audit: type=1400 audit(1724620631.034:448): avc: denied { block_suspend } for pid=5196 comm="syz.2.232" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 95.719112][ T5206] loop2: detected capacity change from 0 to 1024 [ 95.725967][ T5206] EXT4-fs: Ignoring removed nobh option [ 95.749683][ T5214] loop3: detected capacity change from 0 to 1024 [ 95.764714][ T5208] dummy0: left promiscuous mode [ 95.770596][ T4785] veth0_macvtap: entered promiscuous mode [ 95.779327][ T5206] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 95.792954][ T5206] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.806618][ T4785] veth1_macvtap: entered promiscuous mode [ 95.830274][ T5214] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 95.861562][ T4785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.872205][ T4785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.882267][ T4785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.892835][ T4785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.902692][ T4785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.913202][ T4785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.923134][ T4785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.933633][ T4785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.948149][ T4785] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.956150][ T5222] netlink: 'syz.0.237': attribute type 29 has an invalid length. [ 95.968588][ T4785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.979136][ T4785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.989028][ T4785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.999740][ T4785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.009724][ T4785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.014900][ T5222] loop0: detected capacity change from 0 to 512 [ 96.020156][ T4785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.020171][ T4785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.020189][ T4785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.036643][ T29] audit: type=1400 audit(1724620631.384:449): avc: denied { ioctl } for pid=5221 comm="syz.0.237" path="socket:[12105]" dev="sockfs" ino=12105 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 96.055165][ T4785] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.097736][ T5225] netlink: 'syz.0.237': attribute type 29 has an invalid length. [ 96.107238][ T5227] sch_tbf: burst 4 is lower than device lo mtu (65550) ! [ 96.123974][ T4785] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.133075][ T4785] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.141973][ T4785] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.150880][ T4785] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.161058][ T4780] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.192131][ T5227] netlink: 'syz.2.239': attribute type 1 has an invalid length. [ 96.225699][ T5231] loop1: detected capacity change from 0 to 128 [ 96.232141][ T5234] bond0: option mode: unable to set because the bond device has slaves [ 96.351019][ T5235] loop0: detected capacity change from 0 to 128 [ 96.424497][ T5240] dccp_invalid_packet: invalid packet type [ 96.658973][ T5257] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 96.709562][ T5261] loop0: detected capacity change from 0 to 512 [ 96.729789][ T5261] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 96.743270][ T5261] ext4 filesystem being mounted at /8/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 96.835525][ T4782] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.886070][ T5257] netlink: 5 bytes leftover after parsing attributes in process `syz.3.245'. [ 96.895128][ T5257] 0XD: renamed from gretap0 (while UP) [ 96.904174][ T5257] 0XD: entered allmulticast mode [ 96.913501][ T5269] loop1: detected capacity change from 0 to 128 [ 96.951698][ T5269] syz.1.251: attempt to access beyond end of device [ 96.951698][ T5269] loop1: rw=0, sector=97, nr_sectors = 944 limit=128 [ 97.009742][ T5277] loop1: detected capacity change from 0 to 512 [ 97.016479][ T5277] EXT4-fs: Ignoring removed orlov option [ 97.029609][ T5277] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 97.042579][ T5277] ext4 filesystem being mounted at /5/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 97.064140][ T4774] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.094744][ T5281] loop1: detected capacity change from 0 to 2048 [ 97.101816][ T5281] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities [ 97.135408][ T5283] netlink: 16 bytes leftover after parsing attributes in process `syz.1.255'. [ 97.144428][ T5283] netlink: 16 bytes leftover after parsing attributes in process `syz.1.255'. [ 97.155984][ T5283] team0: entered promiscuous mode [ 97.161208][ T5283] team_slave_0: entered promiscuous mode [ 97.166965][ T5283] team_slave_1: entered promiscuous mode [ 97.174690][ T5283] team0: left promiscuous mode [ 97.179783][ T5283] team_slave_0: left promiscuous mode [ 97.185357][ T5283] team_slave_1: left promiscuous mode [ 97.263904][ T5291] loop1: detected capacity change from 0 to 512 [ 97.271101][ T5291] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 97.289793][ T5291] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 97.302514][ T5291] ext4 filesystem being mounted at /9/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 97.321643][ T4774] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 97.513964][ T5304] loop3: detected capacity change from 0 to 2048 [ 97.558722][ T5304] loop3: p1 < > p4 [ 97.567184][ T5307] dummy0: entered promiscuous mode [ 97.569267][ T5304] loop3: p4 size 8388608 extends beyond EOD, truncated [ 97.572964][ T5307] dummy0: left promiscuous mode [ 97.585389][ T2960] loop3: p1 < > p4 [ 97.590710][ T2960] loop3: p4 size 8388608 extends beyond EOD, truncated [ 97.650969][ T4070] udevd[4070]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 97.662925][ T8] IPVS: starting estimator thread 0... [ 97.699261][ T4070] udevd[4070]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 97.704238][ T3999] udevd[3999]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 97.766789][ T5316] IPVS: using max 2304 ests per chain, 115200 per kthread [ 97.788390][ T5321] loop3: detected capacity change from 0 to 2048 [ 97.814841][ T5322] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5322 comm=syz.2.266 [ 97.837627][ T5321] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 97.838207][ T5322] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5322 comm=syz.2.266 [ 98.060113][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 98.113084][ T4780] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.230222][ T5344] loop3: detected capacity change from 0 to 512 [ 98.239098][ T5344] EXT4-fs: Ignoring removed orlov option [ 98.260806][ T5344] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.273516][ T5344] ext4 filesystem being mounted at /12/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 98.304168][ T4780] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.390600][ T5359] netlink: 'syz.3.277': attribute type 5 has an invalid length. [ 98.612867][ T5375] dummy0: entered promiscuous mode [ 98.631118][ T5375] dummy0: left promiscuous mode [ 98.733072][ T5377] loop3: detected capacity change from 0 to 128 [ 98.743254][ T5383] loop1: detected capacity change from 0 to 128 [ 98.758219][ T5383] syz.1.287: attempt to access beyond end of device [ 98.758219][ T5383] loop1: rw=2049, sector=153, nr_sectors = 8 limit=128 [ 98.775273][ T5383] syz.1.287: attempt to access beyond end of device [ 98.775273][ T5383] loop1: rw=2049, sector=169, nr_sectors = 2 limit=128 [ 98.791408][ T5377] syz.3.286: attempt to access beyond end of device [ 98.791408][ T5377] loop3: rw=0, sector=97, nr_sectors = 944 limit=128 [ 98.818181][ T36] kworker/u8:2: attempt to access beyond end of device [ 98.818181][ T36] loop1: rw=1, sector=145, nr_sectors = 8 limit=128 [ 98.895989][ T5393] loop3: detected capacity change from 0 to 2048 [ 98.913422][ T5393] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 98.936423][ T5397] loop1: detected capacity change from 0 to 512 [ 98.961082][ T5397] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.978464][ T5393] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 98.999123][ T5397] ext4 filesystem being mounted at /20/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 99.009587][ T5393] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 99.021838][ T5393] EXT4-fs (loop3): This should not happen!! Data will be lost [ 99.021838][ T5393] [ 99.031753][ T5393] EXT4-fs (loop3): Total free blocks count 0 [ 99.038218][ T5393] EXT4-fs (loop3): Free/Dirty block details [ 99.044128][ T5393] EXT4-fs (loop3): free_blocks=2415919104 [ 99.050153][ T5393] EXT4-fs (loop3): dirty_blocks=32 [ 99.055288][ T5393] EXT4-fs (loop3): Block reservation details [ 99.061328][ T5393] EXT4-fs (loop3): i_reserved_data_blocks=2 [ 99.074258][ T4774] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.093890][ T5392] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 32 with max blocks 1 with error 28 [ 99.222206][ T5423] loop0: detected capacity change from 0 to 128 [ 99.241695][ T5425] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 99.299359][ T5418] syz.0.299: attempt to access beyond end of device [ 99.299359][ T5418] loop0: rw=0, sector=97, nr_sectors = 944 limit=128 [ 99.359425][ T5430] loop0: detected capacity change from 0 to 512 [ 99.371389][ T5428] FAULT_INJECTION: forcing a failure. [ 99.371389][ T5428] name failslab, interval 1, probability 0, space 0, times 0 [ 99.376676][ T5430] EXT4-fs: Ignoring removed orlov option [ 99.384064][ T5428] CPU: 1 UID: 0 PID: 5428 Comm: syz.4.303 Not tainted 6.11.0-rc5-syzkaller #0 [ 99.398702][ T5428] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 99.408847][ T5428] Call Trace: [ 99.412140][ T5428] [ 99.415117][ T5428] dump_stack_lvl+0xf2/0x150 [ 99.419734][ T5428] dump_stack+0x15/0x20 [ 99.423907][ T5428] should_fail_ex+0x229/0x230 [ 99.428730][ T5428] ? __alloc_skb+0x10b/0x310 [ 99.433327][ T5428] should_failslab+0x8f/0xb0 [ 99.437951][ T5428] kmem_cache_alloc_node_noprof+0x51/0x2b0 [ 99.443859][ T5428] __alloc_skb+0x10b/0x310 [ 99.448284][ T5428] netlink_alloc_large_skb+0xad/0xe0 [ 99.453749][ T5428] netlink_sendmsg+0x3b4/0x6e0 [ 99.458531][ T5428] ? __pfx_netlink_sendmsg+0x10/0x10 [ 99.463906][ T5428] __sock_sendmsg+0x140/0x180 [ 99.468670][ T5428] ____sys_sendmsg+0x312/0x410 [ 99.473450][ T5428] __sys_sendmsg+0x1e9/0x280 [ 99.478067][ T5428] __x64_sys_sendmsg+0x46/0x50 [ 99.482843][ T5428] x64_sys_call+0x2689/0x2d60 [ 99.487601][ T5428] do_syscall_64+0xc9/0x1c0 [ 99.492126][ T5428] ? clear_bhb_loop+0x55/0xb0 [ 99.496918][ T5428] ? clear_bhb_loop+0x55/0xb0 [ 99.501608][ T5428] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.507515][ T5428] RIP: 0033:0x7fa2d9989e79 [ 99.511931][ T5428] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 99.531550][ T5428] RSP: 002b:00007fa2d8601038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 99.540018][ T5428] RAX: ffffffffffffffda RBX: 00007fa2d9b25f80 RCX: 00007fa2d9989e79 [ 99.547999][ T5428] RDX: 0000000000000000 RSI: 0000000020000500 RDI: 0000000000000006 [ 99.555973][ T5428] RBP: 00007fa2d8601090 R08: 0000000000000000 R09: 0000000000000000 [ 99.564069][ T5428] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 99.572047][ T5428] R13: 0000000000000000 R14: 00007fa2d9b25f80 R15: 00007ffe3d288898 [ 99.580204][ T5428] [ 99.589091][ T29] kauditd_printk_skb: 293 callbacks suppressed [ 99.589107][ T29] audit: type=1400 audit(1724620634.964:743): avc: denied { create } for pid=5432 comm="syz.1.304" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 99.598743][ T5430] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.633028][ T5430] ext4 filesystem being mounted at /16/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 99.647556][ T29] audit: type=1326 audit(1724620635.004:744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5438 comm="syz.2.305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93aad99e79 code=0x7ffc0000 [ 99.660979][ T5433] loop1: detected capacity change from 0 to 512 [ 99.670800][ T29] audit: type=1326 audit(1724620635.004:745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5438 comm="syz.2.305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93aad99e79 code=0x7ffc0000 [ 99.693275][ T5439] loop2: detected capacity change from 0 to 2048 [ 99.701123][ T29] audit: type=1326 audit(1724620635.004:746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5438 comm="syz.2.305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f93aad99e79 code=0x7ffc0000 [ 99.730638][ T29] audit: type=1326 audit(1724620635.004:747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5438 comm="syz.2.305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f93aad99eb3 code=0x7ffc0000 [ 99.754997][ T29] audit: type=1326 audit(1724620635.024:748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5438 comm="syz.2.305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f93aad9895f code=0x7ffc0000 [ 99.778331][ T29] audit: type=1326 audit(1724620635.054:749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5438 comm="syz.2.305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f93aad99f07 code=0x7ffc0000 [ 99.778677][ T5433] ext4: Unknown parameter 'fowner' [ 99.801876][ T29] audit: type=1326 audit(1724620635.054:750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5438 comm="syz.2.305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f93aad98810 code=0x7ffc0000 [ 99.830468][ T29] audit: type=1326 audit(1724620635.054:751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5438 comm="syz.2.305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f93aad99a7b code=0x7ffc0000 [ 99.859086][ T29] audit: type=1326 audit(1724620635.124:752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5438 comm="syz.2.305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f93aad98b0a code=0x7ffc0000 [ 99.882988][ T4782] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.888080][ T5444] dummy0: entered promiscuous mode [ 99.897757][ T5439] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 99.910120][ T5439] ext4 filesystem being mounted at /21/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 99.912241][ T5444] dummy0: left promiscuous mode [ 99.929994][ T5439] 9pnet: p9_errstr2errno: server reported unknown error T]HRFl [ 99.987868][ T5452] netlink: 'syz.3.309': attribute type 8 has an invalid length. [ 99.995915][ T5452] netlink: 'syz.3.309': attribute type 1 has an invalid length. [ 100.003766][ T5452] netlink: 224 bytes leftover after parsing attributes in process `syz.3.309'. [ 100.017411][ T4663] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.026585][ T5451] devpts: called with bogus options [ 100.139814][ T5468] loop3: detected capacity change from 0 to 512 [ 100.160434][ T5468] EXT4-fs error (device loop3): __ext4_iget:4985: inode #11: block 1: comm syz.3.314: invalid block [ 100.199527][ T5469] loop1: detected capacity change from 0 to 128 [ 100.216223][ T5468] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.314: couldn't read orphan inode 11 (err -117) [ 100.237825][ T5468] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 100.283000][ T5469] syz.1.313: attempt to access beyond end of device [ 100.283000][ T5469] loop1: rw=0, sector=97, nr_sectors = 944 limit=128 [ 100.285813][ T4780] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.307954][ T5479] loop4: detected capacity change from 0 to 1024 [ 100.314738][ T5479] EXT4-fs: Ignoring removed oldalloc option [ 100.332849][ T5479] EXT4-fs (loop4): stripe (222) is not aligned with cluster size (16), stripe is disabled [ 100.360167][ T5479] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 100.378813][ T5479] netlink: 'syz.4.318': attribute type 1 has an invalid length. [ 100.390687][ T5484] loop3: detected capacity change from 0 to 512 [ 100.398614][ T5484] EXT4-fs: Ignoring removed orlov option [ 100.453290][ T5493] dummy0: entered promiscuous mode [ 100.453431][ T5498] netlink: 'syz.2.324': attribute type 8 has an invalid length. [ 100.466204][ T5498] netlink: 'syz.2.324': attribute type 1 has an invalid length. [ 100.473958][ T5498] netlink: 224 bytes leftover after parsing attributes in process `syz.2.324'. [ 100.475243][ T5493] dummy0: left promiscuous mode [ 100.488480][ T5494] loop0: detected capacity change from 0 to 2048 [ 100.491303][ T5484] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.508847][ T5484] ext4 filesystem being mounted at /29/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 100.534205][ T4780] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.561341][ T5494] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 100.574037][ T5494] ext4 filesystem being mounted at /21/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 100.594685][ T5494] 9pnet: p9_errstr2errno: server reported unknown error T]HRFl [ 100.612744][ T4785] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.648494][ T4782] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.704176][ T5512] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5512 comm=syz.3.326 [ 100.741608][ T5512] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5512 comm=syz.3.326 [ 100.782181][ T5519] loop0: detected capacity change from 0 to 512 [ 100.790130][ T5515] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5515 comm=syz.2.327 [ 100.809178][ T5519] EXT4-fs error (device loop0): __ext4_iget:4985: inode #11: block 1: comm syz.0.330: invalid block [ 100.823705][ T5519] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.330: couldn't read orphan inode 11 (err -117) [ 100.845825][ T5515] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5515 comm=syz.2.327 [ 100.859668][ T5519] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 100.884744][ T4782] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.992059][ T5531] dummy0: entered promiscuous mode [ 100.998076][ T5531] dummy0: left promiscuous mode [ 101.025177][ T5534] netlink: 'syz.2.337': attribute type 8 has an invalid length. [ 101.032922][ T5534] netlink: 'syz.2.337': attribute type 1 has an invalid length. [ 101.040834][ T5534] netlink: 224 bytes leftover after parsing attributes in process `syz.2.337'. [ 101.143871][ T5541] loop2: detected capacity change from 0 to 512 [ 101.164275][ T5541] EXT4-fs error (device loop2): ext4_get_branch:178: inode #11: block 4294967295: comm syz.2.339: invalid block [ 101.176573][ T5541] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.339: invalid indirect mapped block 4294967295 (level 1) [ 101.192546][ T5541] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.339: invalid indirect mapped block 4294967295 (level 1) [ 101.211173][ T5541] EXT4-fs (loop2): 2 truncates cleaned up [ 101.220091][ T5541] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.235352][ T5541] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.339: bg 0: block 5: invalid block bitmap [ 101.255512][ T5541] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 101.262507][ T5550] FAULT_INJECTION: forcing a failure. [ 101.262507][ T5550] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 101.278668][ T5550] CPU: 0 UID: 0 PID: 5550 Comm: syz.3.343 Not tainted 6.11.0-rc5-syzkaller #0 [ 101.287547][ T5550] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 101.297725][ T5550] Call Trace: [ 101.301021][ T5550] [ 101.304019][ T5550] dump_stack_lvl+0xf2/0x150 [ 101.307735][ T5552] loop4: detected capacity change from 0 to 512 [ 101.308658][ T5550] dump_stack+0x15/0x20 [ 101.319066][ T5550] should_fail_ex+0x229/0x230 [ 101.323958][ T5550] should_fail+0xb/0x10 [ 101.328151][ T5550] should_fail_usercopy+0x1a/0x20 [ 101.333412][ T5550] _copy_to_user+0x1e/0xa0 [ 101.337930][ T5550] simple_read_from_buffer+0xa0/0x110 [ 101.343322][ T5550] proc_fail_nth_read+0xff/0x140 [ 101.348383][ T5550] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 101.354034][ T5550] vfs_read+0x1a2/0x6e0 [ 101.358315][ T5550] ? __rcu_read_unlock+0x4e/0x70 [ 101.363325][ T5550] ? __fget_files+0x1da/0x210 [ 101.368031][ T5550] ksys_read+0xeb/0x1b0 [ 101.372230][ T5550] __x64_sys_read+0x42/0x50 [ 101.376815][ T5550] x64_sys_call+0x27d3/0x2d60 [ 101.381690][ T5550] do_syscall_64+0xc9/0x1c0 [ 101.386376][ T5550] ? clear_bhb_loop+0x55/0xb0 [ 101.391208][ T5550] ? clear_bhb_loop+0x55/0xb0 [ 101.395901][ T5550] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.401898][ T5550] RIP: 0033:0x7f7554b888bc [ 101.406317][ T5550] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 101.426032][ T5550] RSP: 002b:00007f7553807030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 101.434451][ T5550] RAX: ffffffffffffffda RBX: 00007f7554d25f80 RCX: 00007f7554b888bc [ 101.442561][ T5550] RDX: 000000000000000f RSI: 00007f75538070a0 RDI: 0000000000000003 [ 101.450631][ T5550] RBP: 00007f7553807090 R08: 0000000000000000 R09: 0000000000000000 [ 101.458604][ T5550] R10: 09cfe2206cad4610 R11: 0000000000000246 R12: 0000000000000001 [ 101.466680][ T5550] R13: 0000000000000001 R14: 00007f7554d25f80 R15: 00007ffd077fc7e8 [ 101.474659][ T5550] [ 101.482463][ T4663] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.492705][ T5552] EXT4-fs error (device loop4): __ext4_iget:4985: inode #11: block 1: comm syz.4.344: invalid block [ 101.504054][ T5552] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.344: couldn't read orphan inode 11 (err -117) [ 101.522240][ T5552] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 101.536298][ T3461] IPVS: starting estimator thread 0... [ 101.551453][ T4785] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.626784][ T5560] IPVS: using max 1920 ests per chain, 96000 per kthread [ 101.645178][ T5566] loop2: detected capacity change from 0 to 2048 [ 101.662232][ T5566] EXT4-fs: Ignoring removed mblk_io_submit option [ 101.674949][ T5569] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5569 comm=syz.1.346 [ 101.708456][ T5566] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 101.733665][ T5569] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5569 comm=syz.1.346 [ 101.898463][ T5586] loop0: detected capacity change from 0 to 512 [ 101.917823][ T5586] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 101.957406][ T5586] EXT4-fs (loop0): 1 truncate cleaned up [ 101.963568][ T5589] loop3: detected capacity change from 0 to 2048 [ 101.967858][ T5586] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 101.980280][ T5589] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 102.017543][ T5592] FAULT_INJECTION: forcing a failure. [ 102.017543][ T5592] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 102.030795][ T5592] CPU: 0 UID: 0 PID: 5592 Comm: syz.4.356 Not tainted 6.11.0-rc5-syzkaller #0 [ 102.039734][ T5592] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 102.050153][ T5592] Call Trace: [ 102.053527][ T5592] [ 102.056460][ T5592] dump_stack_lvl+0xf2/0x150 [ 102.061117][ T5592] dump_stack+0x15/0x20 [ 102.065294][ T5592] should_fail_ex+0x229/0x230 [ 102.070057][ T5592] should_fail+0xb/0x10 [ 102.074227][ T5592] should_fail_usercopy+0x1a/0x20 [ 102.079268][ T5592] _copy_from_iter+0xd3/0xb00 [ 102.083957][ T5592] ? should_failslab+0x8f/0xb0 [ 102.088743][ T5592] ? __kmalloc_node_noprof+0x180/0x380 [ 102.094217][ T5592] ? __virt_addr_valid+0x1ed/0x250 [ 102.099350][ T5592] ? __check_object_size+0x35b/0x510 [ 102.104717][ T5592] file_tty_write+0x335/0x690 [ 102.109423][ T5592] tty_write+0x28/0x30 [ 102.113503][ T5592] vfs_write+0x78f/0x900 [ 102.117819][ T5592] ? __pfx_tty_write+0x10/0x10 [ 102.122593][ T5592] ksys_write+0xeb/0x1b0 [ 102.127002][ T5592] __x64_sys_write+0x42/0x50 [ 102.131614][ T5592] x64_sys_call+0x27dd/0x2d60 [ 102.136302][ T5592] do_syscall_64+0xc9/0x1c0 [ 102.140831][ T5592] ? clear_bhb_loop+0x55/0xb0 [ 102.145594][ T5592] ? clear_bhb_loop+0x55/0xb0 [ 102.150376][ T5592] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.156530][ T5592] RIP: 0033:0x7fa2d9989e79 [ 102.160944][ T5592] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 102.180783][ T5592] RSP: 002b:00007fa2d8601038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 102.189207][ T5592] RAX: ffffffffffffffda RBX: 00007fa2d9b25f80 RCX: 00007fa2d9989e79 [ 102.197264][ T5592] RDX: 0000000000001006 RSI: 0000000020001040 RDI: 0000000000000004 [ 102.205309][ T5592] RBP: 00007fa2d8601090 R08: 0000000000000000 R09: 0000000000000000 [ 102.213281][ T5592] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 102.221327][ T5592] R13: 0000000000000000 R14: 00007fa2d9b25f80 R15: 00007ffe3d288898 [ 102.229483][ T5592] [ 102.354449][ T5598] loop4: detected capacity change from 0 to 128 [ 102.399006][ T4663] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.461353][ T5596] syz.4.358: attempt to access beyond end of device [ 102.461353][ T5596] loop4: rw=0, sector=97, nr_sectors = 944 limit=128 [ 102.546471][ T5605] loop1: detected capacity change from 0 to 2048 [ 102.574096][ T5605] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 102.587833][ T5605] ext4 filesystem being mounted at /31/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 102.614919][ T5612] cgroup: Unexpected value for 'all' [ 102.623133][ T4774] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.809196][ T5621] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5621 comm=syz.1.365 [ 102.853375][ T5621] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5621 comm=syz.1.365 [ 102.901097][ T5625] netlink: 'syz.3.369': attribute type 8 has an invalid length. [ 102.909018][ T5625] netlink: 'syz.3.369': attribute type 1 has an invalid length. [ 102.916757][ T5625] netlink: 224 bytes leftover after parsing attributes in process `syz.3.369'. [ 103.015656][ T5638] loop1: detected capacity change from 0 to 256 [ 103.079156][ T5643] x_tables: unsorted underflow at hook 2 [ 103.085049][ T5645] netlink: zone id is out of range [ 103.091787][ T5645] netlink: zone id is out of range [ 103.097192][ T5645] netlink: zone id is out of range [ 103.102449][ T5645] netlink: zone id is out of range [ 103.114485][ T5645] netlink: zone id is out of range [ 103.119674][ T5645] netlink: zone id is out of range [ 103.122367][ T5649] loop3: detected capacity change from 0 to 512 [ 103.124801][ T5645] netlink: zone id is out of range [ 103.125507][ T5645] netlink: zone id is out of range [ 103.141389][ T5645] netlink: zone id is out of range [ 103.150817][ T5649] EXT4-fs error (device loop3): __ext4_iget:4985: inode #11: block 1: comm syz.3.379: invalid block [ 103.151534][ T5645] netlink: zone id is out of range [ 103.175080][ T5649] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.379: couldn't read orphan inode 11 (err -117) [ 103.197743][ T5649] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.250111][ T4780] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.320360][ T5660] dummy0: entered promiscuous mode [ 103.337306][ T5660] dummy0: left promiscuous mode [ 103.437817][ T5668] FAULT_INJECTION: forcing a failure. [ 103.437817][ T5668] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 103.451219][ T5668] CPU: 1 UID: 0 PID: 5668 Comm: syz.2.386 Not tainted 6.11.0-rc5-syzkaller #0 [ 103.460183][ T5668] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 103.470305][ T5668] Call Trace: [ 103.473590][ T5668] [ 103.476540][ T5668] dump_stack_lvl+0xf2/0x150 [ 103.481182][ T5668] dump_stack+0x15/0x20 [ 103.485394][ T5668] should_fail_ex+0x229/0x230 [ 103.490087][ T5668] should_fail_alloc_page+0xfd/0x110 [ 103.495715][ T5668] __alloc_pages_noprof+0x109/0x360 [ 103.500973][ T5668] alloc_pages_mpol_noprof+0xb1/0x1e0 [ 103.506399][ T5668] alloc_pages_noprof+0xe1/0x100 [ 103.511391][ T5668] get_free_pages_noprof+0xc/0x30 [ 103.516433][ T5668] selinux_genfs_get_sid+0x33/0x170 [ 103.521638][ T5668] inode_doinit_with_dentry+0x63e/0x840 [ 103.527197][ T5668] selinux_d_instantiate+0x27/0x40 [ 103.532342][ T5668] security_d_instantiate+0x84/0xb0 [ 103.537627][ T5668] d_splice_alias+0x50/0x270 [ 103.542329][ T5668] proc_lookup_de+0x1c8/0x210 [ 103.547139][ T5668] proc_lookup+0x7b/0x90 [ 103.551398][ T5668] ? __pfx_proc_lookup+0x10/0x10 [ 103.556352][ T5668] path_openat+0xc5f/0x1f10 [ 103.560956][ T5668] do_filp_open+0xf7/0x200 [ 103.565543][ T5668] do_sys_openat2+0xab/0x120 [ 103.570156][ T5668] __x64_sys_openat+0xf3/0x120 [ 103.575053][ T5668] x64_sys_call+0x1025/0x2d60 [ 103.579745][ T5668] do_syscall_64+0xc9/0x1c0 [ 103.584270][ T5668] ? clear_bhb_loop+0x55/0xb0 [ 103.589025][ T5668] ? clear_bhb_loop+0x55/0xb0 [ 103.593717][ T5668] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.599662][ T5668] RIP: 0033:0x7f93aad99e79 [ 103.604097][ T5668] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 103.623715][ T5668] RSP: 002b:00007f93a9a11038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 103.632134][ T5668] RAX: ffffffffffffffda RBX: 00007f93aaf35f80 RCX: 00007f93aad99e79 [ 103.640110][ T5668] RDX: 0000000000000000 RSI: 0000000020000040 RDI: ffffffffffffff9c [ 103.648140][ T5668] RBP: 00007f93a9a11090 R08: 0000000000000000 R09: 0000000000000000 [ 103.656343][ T5668] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 103.664316][ T5668] R13: 0000000000000000 R14: 00007f93aaf35f80 R15: 00007fff52868148 [ 103.672383][ T5668] [ 103.769274][ T4782] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.817600][ T5677] loop4: detected capacity change from 0 to 512 [ 103.831104][ T5677] EXT4-fs error (device loop4): __ext4_iget:4985: inode #11: block 1: comm syz.4.392: invalid block [ 103.845699][ T5677] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.392: couldn't read orphan inode 11 (err -117) [ 103.860345][ T5677] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.900741][ T5690] loop1: detected capacity change from 0 to 2048 [ 103.908796][ T4785] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.933226][ T5690] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.946153][ T3339] IPVS: starting estimator thread 0... [ 103.954787][ T5690] ext4 filesystem being mounted at /42/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 103.981999][ T5690] 9pnet: p9_errstr2errno: server reported unknown error T]HRFl [ 104.012907][ T4774] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.038944][ T5699] IPVS: using max 2256 ests per chain, 112800 per kthread [ 104.115274][ T5705] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5705 comm=syz.4.398 [ 104.115506][ T5705] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5705 comm=syz.4.398 [ 104.295906][ T5725] loop2: detected capacity change from 0 to 512 [ 104.313184][ T5725] EXT4-fs error (device loop2): __ext4_iget:4985: inode #11: block 1: comm syz.2.409: invalid block [ 104.346043][ T5727] loop4: detected capacity change from 0 to 2048 [ 104.356460][ T5725] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.409: couldn't read orphan inode 11 (err -117) [ 104.383325][ T5725] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 104.394848][ T5716] loop1: detected capacity change from 0 to 8192 [ 104.403369][ T5727] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 104.416067][ T5727] ext4 filesystem being mounted at /29/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 104.417381][ T4663] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.430668][ T5727] 9pnet: p9_errstr2errno: server reported unknown error T]HRFl [ 104.447332][ T5716] loop1: p1 p2 p3 p4 [ 104.455468][ T5716] loop1: p1 size 108922248 extends beyond EOD, truncated [ 104.467310][ T5716] loop1: p2 start 861536256 is beyond EOD, truncated [ 104.474045][ T5716] loop1: p3 start 851968 is beyond EOD, truncated [ 104.480512][ T5716] loop1: p4 size 65536 extends beyond EOD, truncated [ 104.493499][ T4785] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.505754][ T2960] loop1: p1 p2 p3 p4 [ 104.510724][ T2960] loop1: p1 size 108922248 extends beyond EOD, truncated [ 104.511392][ T5737] dummy0: entered promiscuous mode [ 104.525208][ T2960] loop1: p2 start 861536256 is beyond EOD, truncated [ 104.530114][ T5737] dummy0: left promiscuous mode [ 104.532039][ T2960] loop1: p3 start 851968 is beyond EOD, truncated [ 104.543461][ T2960] loop1: p4 size 65536 extends beyond EOD, truncated [ 104.598998][ T29] kauditd_printk_skb: 407 callbacks suppressed [ 104.599056][ T29] audit: type=1326 audit(1724620639.974:1160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5734 comm="syz.0.413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f600b689e79 code=0x7ffc0000 [ 104.603468][ T5742] loop0: detected capacity change from 0 to 128 [ 104.635557][ T29] audit: type=1326 audit(1724620639.974:1161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5734 comm="syz.0.413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f600b689e79 code=0x7ffc0000 [ 104.643285][ T4070] udevd[4070]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 104.659325][ T29] audit: type=1326 audit(1724620639.974:1162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5734 comm="syz.0.413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f600b689e79 code=0x7ffc0000 [ 104.671120][ T3999] udevd[3999]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 104.692313][ T29] audit: type=1326 audit(1724620639.974:1163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5734 comm="syz.0.413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f600b689e79 code=0x7ffc0000 [ 104.725514][ T29] audit: type=1326 audit(1724620639.974:1164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5734 comm="syz.0.413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f600b688810 code=0x7ffc0000 [ 104.734617][ T4070] udevd[4070]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 104.749080][ T29] audit: type=1326 audit(1724620639.974:1165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5734 comm="syz.0.413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f600b688810 code=0x7ffc0000 [ 104.761266][ T3999] udevd[3999]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 104.782206][ T29] audit: type=1326 audit(1724620639.974:1166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5734 comm="syz.0.413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f600b689e79 code=0x7ffc0000 [ 104.815513][ T29] audit: type=1326 audit(1724620639.974:1167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5734 comm="syz.0.413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f600b689e79 code=0x7ffc0000 [ 104.830631][ T5742] syz.0.413: attempt to access beyond end of device [ 104.830631][ T5742] loop0: rw=0, sector=97, nr_sectors = 944 limit=128 [ 104.838837][ T29] audit: type=1326 audit(1724620639.974:1168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5734 comm="syz.0.413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f600b689e79 code=0x7ffc0000 [ 104.875222][ T29] audit: type=1326 audit(1724620639.974:1169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5734 comm="syz.0.413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f600b689e79 code=0x7ffc0000 [ 104.994410][ T35] IPVS: starting estimator thread 0... [ 105.089010][ T5753] IPVS: using max 2304 ests per chain, 115200 per kthread [ 105.524192][ T5793] loop0: detected capacity change from 0 to 512 [ 105.541137][ T5793] EXT4-fs error (device loop0): __ext4_iget:4985: inode #11: block 1: comm syz.0.435: invalid block [ 105.570735][ T5793] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.435: couldn't read orphan inode 11 (err -117) [ 105.586123][ T5793] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 105.610731][ T4782] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.651755][ T5800] loop0: detected capacity change from 0 to 2048 [ 105.669105][ T5800] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 105.683426][ T5800] ext4 filesystem being mounted at /39/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 105.699430][ T5800] 9pnet: p9_errstr2errno: server reported unknown error T]HRFl [ 105.723395][ T4782] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.055960][ T5826] loop4: detected capacity change from 0 to 512 [ 106.096841][ T5826] EXT4-fs error (device loop4): __ext4_iget:4985: inode #11: block 1: comm syz.4.447: invalid block [ 106.116095][ T5824] loop1: detected capacity change from 0 to 2048 [ 106.120019][ T5829] loop0: detected capacity change from 0 to 2048 [ 106.130439][ T5824] EXT4-fs: Ignoring removed orlov option [ 106.131315][ T5826] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.447: couldn't read orphan inode 11 (err -117) [ 106.175360][ T5824] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 106.198499][ T5826] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 106.216087][ T5829] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 106.231378][ T5829] ext4 filesystem being mounted at /44/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 106.253084][ T4774] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 106.253279][ T4774] EXT4-fs (loop1): Remounting filesystem read-only [ 106.253793][ T4774] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=13 [ 106.253840][ T4774] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=13 [ 106.253976][ T4774] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=14 [ 106.254153][ T4774] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=14 [ 106.254362][ T4774] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=15 [ 106.254404][ T4774] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=15 [ 106.254528][ T4774] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=16 [ 106.254584][ T4774] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=16 [ 106.254642][ T4774] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=16 [ 106.254709][ T4774] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=16 [ 106.254845][ T4774] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=17 [ 106.254886][ T4774] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=17 [ 106.255608][ T4774] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.277237][ T5829] 9pnet: p9_errstr2errno: server reported unknown error T]HRFl [ 106.303012][ T4785] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.325710][ T4782] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.588876][ T5855] FAULT_INJECTION: forcing a failure. [ 106.588876][ T5855] name failslab, interval 1, probability 0, space 0, times 0 [ 106.601614][ T5855] CPU: 1 UID: 0 PID: 5855 Comm: syz.0.458 Not tainted 6.11.0-rc5-syzkaller #0 [ 106.610627][ T5855] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 106.620880][ T5855] Call Trace: [ 106.624158][ T5855] [ 106.627098][ T5855] dump_stack_lvl+0xf2/0x150 [ 106.631710][ T5855] dump_stack+0x15/0x20 [ 106.635919][ T5855] should_fail_ex+0x229/0x230 [ 106.640644][ T5855] ? __se_sys_acct+0xd5/0x420 [ 106.645352][ T5855] should_failslab+0x8f/0xb0 [ 106.650033][ T5855] __kmalloc_cache_noprof+0x4b/0x2a0 [ 106.655399][ T5855] __se_sys_acct+0xd5/0x420 [ 106.659993][ T5855] __x64_sys_acct+0x1f/0x30 [ 106.664642][ T5855] x64_sys_call+0xbbe/0x2d60 [ 106.669303][ T5855] do_syscall_64+0xc9/0x1c0 [ 106.673927][ T5855] ? clear_bhb_loop+0x55/0xb0 [ 106.678620][ T5855] ? clear_bhb_loop+0x55/0xb0 [ 106.683335][ T5855] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.689272][ T5855] RIP: 0033:0x7f600b689e79 [ 106.693761][ T5855] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 106.713379][ T5855] RSP: 002b:00007f600a307038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a3 [ 106.721795][ T5855] RAX: ffffffffffffffda RBX: 00007f600b825f80 RCX: 00007f600b689e79 [ 106.729776][ T5855] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000200000c0 [ 106.737754][ T5855] RBP: 00007f600a307090 R08: 0000000000000000 R09: 0000000000000000 [ 106.745725][ T5855] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 106.753753][ T5855] R13: 0000000000000000 R14: 00007f600b825f80 R15: 00007fff4885ea58 [ 106.761795][ T5855] [ 106.914612][ T5865] loop3: detected capacity change from 0 to 128 [ 106.940518][ T5865] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 106.954010][ T5864] selinux_netlink_send: 2 callbacks suppressed [ 106.954028][ T5864] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5864 comm=syz.1.460 [ 106.981909][ T5865] ext4 filesystem being mounted at /59/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 107.009791][ T5867] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5867 comm=syz.1.460 [ 107.029592][ T4780] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 107.058213][ T5869] loop3: detected capacity change from 0 to 512 [ 107.098292][ T5869] EXT4-fs error (device loop3): __ext4_iget:4985: inode #11: block 1: comm syz.3.463: invalid block [ 107.120890][ T5869] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.463: couldn't read orphan inode 11 (err -117) [ 107.152232][ T5869] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 107.201941][ T4780] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.278551][ T5877] loop1: detected capacity change from 0 to 2048 [ 107.291924][ T5766] loop2: detected capacity change from 0 to 262144 [ 107.325894][ T5877] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 107.347023][ T5877] ext4 filesystem being mounted at /57/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 107.401797][ T5893] loop2: detected capacity change from 0 to 1024 [ 107.418276][ T5893] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 107.450387][ T5877] 9pnet: p9_errstr2errno: server reported unknown error T]HRFl [ 107.453838][ T5903] loop4: detected capacity change from 0 to 512 [ 107.494824][ T5900] loop3: detected capacity change from 0 to 2048 [ 107.545941][ T5900] EXT4-fs: Ignoring removed mblk_io_submit option [ 107.555414][ T4774] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.575449][ T5903] EXT4-fs error (device loop4): __ext4_iget:4985: inode #11: block 1: comm syz.4.477: invalid block [ 107.586873][ T5903] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.477: couldn't read orphan inode 11 (err -117) [ 107.599649][ T5903] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 107.607535][ T5900] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 107.627129][ T5907] netlink: 1680 bytes leftover after parsing attributes in process `syz.0.478'. [ 107.652496][ T4663] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.706409][ T4785] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.016804][ T5933] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5933 comm=syz.4.486 [ 108.040274][ T5934] hub 6-0:1.0: USB hub found [ 108.045109][ T5934] hub 6-0:1.0: 8 ports detected [ 108.098480][ T5936] loop2: detected capacity change from 0 to 2048 [ 108.110547][ T5937] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5937 comm=syz.4.486 [ 108.159103][ T5936] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 108.176998][ T5936] ext4 filesystem being mounted at /52/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 108.223339][ T5936] 9pnet: p9_errstr2errno: server reported unknown error T]HRFl [ 108.303666][ T5947] pim6reg1: entered allmulticast mode [ 108.313943][ T5949] loop2: detected capacity change from 0 to 512 [ 108.330807][ T5949] EXT4-fs error (device loop2): __ext4_iget:4985: inode #11: block 1: comm syz.2.491: invalid block [ 108.345737][ T5949] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.491: couldn't read orphan inode 11 (err -117) [ 108.346288][ T5954] pim6reg1: entered allmulticast mode [ 108.365065][ T5954] FAULT_INJECTION: forcing a failure. [ 108.365065][ T5954] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 108.378465][ T5954] CPU: 0 UID: 0 PID: 5954 Comm: syz.3.496 Not tainted 6.11.0-rc5-syzkaller #0 [ 108.387371][ T5954] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 108.397515][ T5954] Call Trace: [ 108.400790][ T5954] [ 108.403748][ T5954] dump_stack_lvl+0xf2/0x150 [ 108.408370][ T5954] dump_stack+0x15/0x20 [ 108.412559][ T5954] should_fail_ex+0x229/0x230 [ 108.417244][ T5954] should_fail+0xb/0x10 [ 108.421477][ T5954] should_fail_usercopy+0x1a/0x20 [ 108.426741][ T5954] _copy_from_user+0x1e/0xd0 [ 108.431358][ T5954] kstrtouint_from_user+0x76/0xe0 [ 108.436430][ T5954] proc_fail_nth_write+0x4f/0x160 [ 108.441515][ T5954] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 108.447160][ T5954] vfs_write+0x28b/0x900 [ 108.451470][ T5954] ? __fget_files+0x1da/0x210 [ 108.456165][ T5954] ksys_write+0xeb/0x1b0 [ 108.460432][ T5954] __x64_sys_write+0x42/0x50 [ 108.465061][ T5954] x64_sys_call+0x27dd/0x2d60 [ 108.469805][ T5954] do_syscall_64+0xc9/0x1c0 [ 108.474461][ T5954] ? clear_bhb_loop+0x55/0xb0 [ 108.479220][ T5954] ? clear_bhb_loop+0x55/0xb0 [ 108.483929][ T5954] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.489834][ T5954] RIP: 0033:0x7f7554b8895f [ 108.494268][ T5954] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8d 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 1c 8e 02 00 48 [ 108.513957][ T5954] RSP: 002b:00007f7553807030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 108.522376][ T5954] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f7554b8895f [ 108.530354][ T5954] RDX: 0000000000000001 RSI: 00007f75538070a0 RDI: 000000000000000d [ 108.538329][ T5954] RBP: 00007f7553807090 R08: 0000000000000000 R09: 0000000000000000 [ 108.546460][ T5954] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 108.554451][ T5954] R13: 0000000000000000 R14: 00007f7554d25f80 R15: 00007ffd077fc7e8 [ 108.562485][ T5954] [ 108.627595][ T5962] loop1: detected capacity change from 0 to 512 [ 108.646057][ T5962] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a846e01c, mo2=0002] [ 108.654872][ T5962] System zones: 1-12 [ 108.660037][ T5962] EXT4-fs error (device loop1): dx_probe:823: inode #2: comm syz.1.500: Directory hole found for htree index block 0 [ 108.673467][ T5962] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -117 [ 108.695769][ T5962] EXT4-fs error (device loop1): dx_probe:823: inode #2: comm syz.1.500: Directory hole found for htree index block 0 [ 108.709548][ T5962] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 108.777152][ T5968] loop3: detected capacity change from 0 to 2048 [ 108.847030][ T5968] ext4 filesystem being mounted at /68/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 108.899952][ T5968] 9pnet: p9_errstr2errno: server reported unknown error T]HRFl [ 108.931469][ T5981] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5981 comm=syz.2.503 [ 108.969074][ T5966] loop0: detected capacity change from 0 to 2048 [ 108.993971][ T5966] EXT4-fs: Ignoring removed oldalloc option [ 109.000042][ T5966] EXT4-fs: Ignoring removed i_version option [ 109.000130][ T5988] loop1: detected capacity change from 0 to 512 [ 109.061271][ T5972] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5972 comm=syz.2.503 [ 109.089270][ T5988] EXT4-fs error (device loop1): __ext4_iget:4985: inode #11: block 1: comm syz.1.508: invalid block [ 109.101599][ T5966] EXT4-fs (loop0): bad geometry: first data block 0 is beyond end of filesystem (0) [ 109.134962][ T5988] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.508: couldn't read orphan inode 11 (err -117) [ 109.148952][ T2960] ================================================================== [ 109.157053][ T2960] BUG: KCSAN: data-race in block_uevent / inc_diskseq [ 109.163838][ T2960] [ 109.166159][ T2960] write to 0xffff888101250220 of 8 bytes by task 5966 on cpu 1: [ 109.173875][ T2960] inc_diskseq+0x2c/0x40 [ 109.178216][ T2960] disk_force_media_change+0x9f/0xf0 [ 109.183614][ T2960] lo_release+0x2d0/0x400 [ 109.187966][ T2960] bdev_release+0x3d2/0x430 [ 109.192483][ T2960] blkdev_release+0x15/0x20 [ 109.197099][ T2960] __fput+0x192/0x6f0 [ 109.201094][ T2960] __fput_sync+0x44/0x60 [ 109.205364][ T2960] __se_sys_close+0x101/0x1b0 [ 109.210055][ T2960] __x64_sys_close+0x1f/0x30 [ 109.214657][ T2960] x64_sys_call+0x25cb/0x2d60 [ 109.219344][ T2960] do_syscall_64+0xc9/0x1c0 [ 109.223881][ T2960] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.229789][ T2960] [ 109.232110][ T2960] read to 0xffff888101250220 of 8 bytes by task 2960 on cpu 0: [ 109.239671][ T2960] block_uevent+0x31/0x50 [ 109.244007][ T2960] dev_uevent+0x2fd/0x380 [ 109.248343][ T2960] uevent_show+0x10c/0x1f0 [ 109.253133][ T2960] dev_attr_show+0x3a/0xa0 [ 109.257567][ T2960] sysfs_kf_seq_show+0x17c/0x250 [ 109.262510][ T2960] kernfs_seq_show+0x7c/0x90 [ 109.267123][ T2960] seq_read_iter+0x2d7/0x940 [ 109.271771][ T2960] kernfs_fop_read_iter+0xc6/0x310 [ 109.276900][ T2960] vfs_read+0x5e9/0x6e0 [ 109.281074][ T2960] ksys_read+0xeb/0x1b0 [ 109.285249][ T2960] __x64_sys_read+0x42/0x50 [ 109.289773][ T2960] x64_sys_call+0x27d3/0x2d60 [ 109.294464][ T2960] do_syscall_64+0xc9/0x1c0 [ 109.299779][ T2960] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.305692][ T2960] [ 109.308016][ T2960] value changed: 0x00000000000000e0 -> 0x00000000000000e3 [ 109.315124][ T2960] [ 109.317453][ T2960] Reported by Kernel Concurrency Sanitizer on: [ 109.323690][ T2960] CPU: 0 UID: 0 PID: 2960 Comm: udevd Not tainted 6.11.0-rc5-syzkaller #0 [ 109.332468][ T2960] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 109.342529][ T2960] ================================================================== [ 109.763845][ T5983] syz.4.506 (5983) used greatest stack depth: 9728 bytes left