last executing test programs: 7.016553323s ago: executing program 2 (id=1686): r0 = memfd_create(&(0x7f0000000000)='\x00\xc2\xea\x99\xb7\x1c\xdfjw\x97\x05\xa3\xa2\'\xdd\xe4q\xbf\t\x8c\xe0\x19`\x8ep\xd89\xec\x00\"\x9f\x00\x00\x00\x00\a\x00\x00\x00\x00\b \xff\x13\x96\xe3?\xdfH\x8c\xe4V\xe2\xfe\v8\x04\xa5\xb9\xc4:\xfb\xf7y_w\xd8\xcf\x90k\x05\x00\xf9\x1e\xe8m\xec\x12\xa015\xc2\xb3u|\x8bK\x111\xd4\f8\xeb\x18\xad\xbb!1\x85\x96P\x1b\xa1\x9a\x81\xf8\xb1\a\x00\x00\x00\x00\x00\x00\x00,_D\xe5|\xb1r\xdd(\x97}\x1a\xb4\x17\xafP\x85\xff\xff\xff\xff\x00\x00\x00\x00\\\x05\xd7g\xcbV\x8e\xd0\xac\x87I\x05\xa4|\x02\x19\x13\x0f;\xd1\x1f\x1ew\xa9&7\xbd\xc6\x9bI\x92\xb2\x87.\xb3\x1fs\xe7%\xdd+\r\xb4\x117\xa7ei~\xb8\x16\xd1P\xf2\x84\x89K\x16\xd0F|\xa3\x89\xc9~', 0x6) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r2) fchmod(r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[], 0xdc}}, 0x0) lseek(r4, 0x5, 0x4) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x20, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$unix(r3, &(0x7f0000001c40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}}], 0x1, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = dup(r5) write$UHID_INPUT(r6, &(0x7f0000001040)={0xf, {"a2e3ad21ed0d09f91b3d090987f70e06d038e7ff7fc6e5539b0d650e8b089b3f35074d090890e0878f0e1ac6e7049b3346959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31070d07580936cd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15ffffffffffffffff1243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f423500c7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9cc8036cbd65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f90000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400", 0x1000}}, 0x1006) 6.974549846s ago: executing program 2 (id=1687): openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xc01c2, 0x1fe) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed0006, &(0x7f0000000140)={[{@jqfmt_vfsold}, {@resgid={'resgid', 0x3d, 0xee00}}, {@bh}, {@noload}, {@grpquota}, {@usrjquota}]}, 0xfe, 0x43e, &(0x7f00000004c0)="$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") mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1adc51, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') socket$inet_tcp(0x2, 0x1, 0x0) r2 = open(&(0x7f0000000200)='./bus\x00', 0x141a42, 0x0) sendfile(r2, r1, 0x0, 0x100800001) 6.745066385s ago: executing program 2 (id=1689): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x380085a, &(0x7f0000000240)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRES16, @ANYRES32, @ANYRES32, @ANYRESHEX], 0x1, 0x2cb, &(0x7f0000000a40)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000040)=ANY=[@ANYRES8=r0], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r1}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000440)={0x3, &(0x7f0000000040)=[{0x20}, {0x45, 0x0, 0x0, 0x2}, {0x6}]}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000080)="7de7", 0x2}], 0x1}}], 0x1, 0x0) iopl(0x3) epoll_create1(0x94b319b0f62a6a14) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod$loop(0x0, 0x100000000000600d, 0x1) creat(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0x127f, &(0x7f00000001c0)={'\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) socket$inet_udplite(0x2, 0x2, 0x88) socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) pipe(&(0x7f0000000100)) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) r6 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000040)={'veth1_vlan\x00', &(0x7f0000000540)=@ethtool_gstrings={0x1b, 0x9}}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a3200000000140000001100"], 0x7c}}, 0x0) 6.080662359s ago: executing program 2 (id=1701): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000050a03000000000000000000020000000c00024000000000000000010900010073797a30000000002c000000030a01020000000000000000020000000900010073797a30000000000900030073797a32"], 0x80}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000100), 0x4) (async) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000400)='./file0\x00', 0x806, &(0x7f0000000500)={[{@rodir}, {@shortname_winnt}, {@uni_xlateno}, {@uni_xlate}, {@utf8no}, {@utf8}, {@numtail}, {@utf8no}, {@uni_xlateno}, {@fat=@flush}, {@shortname_mixed}, {@shortname_lower}, {@rodir}, {@shortname_winnt}, {@shortname_mixed}, {@utf8}]}, 0xfe, 0x2aa, &(0x7f0000000a40)="$eJzs3c9qY1UYAPDvpkka7SJZuBLBu5iFG8tkti7MIBXErpQs/AM6ODMwNGGggcCoGGflE7hw4Xu4cy+48Q0EH8Cdgwwcubm3SWzTtGlNK53fb9PDOd93z3dyTtvVPfn8teHB/cejh0+//j1arSxqvejFsyw6UYsj3wYAcJM8Syn+TKX1Muu1TdUEAGzWwv//xikh2ye73t50WQDABn340cfv393f3/sgz1sRw+/G/SzKn+X43YfxKAbxIG5HO55HpJmy/e57+3tRzwuduDWcjPtF5vCzX+ehMc3vRjs6y/O7eWkhfzLuN+LliCyLeNQrCrkT7XjlRH4xvndnSX70m/FGq1pkMf9utOO3L+JxDOJ+FLnz+b/p5vk76fu/vvqkCC7ys8m4vz2Nm0tbV703AAAAAAAAAAAAAAAAAAAAAADcXLv5TCduDYuu6v6drefT8d1/jU/v16lNx8v8LKI5bRy7H2iS4sej+3Vu53mesjJ+fr9PPV6tR/3aFg4AAAAAAAAAAAAAAAAAAAD/I6MnXx7cGwweHP4njeol/9lr/Rd9Tm+h5/VYHby91lyxVYUXtR6P6f7y6XDWUyziIsWPG3nEqpobJ3peKuo5+8l/p5RSlkVcbpsa55nrjMbO6pjiA/75h503D+5lZ32GraON+2lxqBmHoyfH9jSydSpMax2/5oqYZnVizvWcnUv+Er31RzlZ1ZOtsYpG1YjTjl9rrfN8dX+DAAAAAAAAAAAAAAAAAACA0vyl3yWDT1em1jZWFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABcsfn3/6/RmFTJy2NSSpNZTzMOR9e8RAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF4A/wQAAP//+YxnlA==") ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000080)) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async) connect$qrtr(0xffffffffffffffff, 0x0, 0x0) (async) bind$qrtr(0xffffffffffffffff, 0x0, 0x0) (async) ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, 0x0) (async) truncate(&(0x7f0000000080)='./file1\x00', 0x8) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x105042, 0x0) write$cgroup_pid(r2, &(0x7f0000000100), 0x3f00) write$P9_RWALK(0xffffffffffffffff, 0x0, 0x30) (async) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) (async) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000140), 0x4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001380)='net_prio.prioidx\x00', 0x275a, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) (async) r4 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r4, &(0x7f0000772000), 0x2) sendmsg$kcm(r3, &(0x7f00000000c0)={0x0, 0x5, &(0x7f0000000000)=[{&(0x7f0000004500)="d800000016008111e00212ba0d8105040a601100ff0f040b067c55a1bc0009001e0006990300000015000500fe808178a8021500030001400200000901ac04000bd67f6f9400710016277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad85667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b7fece0b440431629b0b5aa14c3d21e2fa353905e2a9ecbee5de6ccd40dd6e4edef3d93452a92307f00000e970300"/216, 0xd8}], 0x1}, 0x0) (async) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r5, 0xc004743e, 0x20001400) socket$inet6_udp(0xa, 0x2, 0x0) (async) pipe2(&(0x7f0000000200), 0x0) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) writev(r6, &(0x7f0000001480)=[{&(0x7f0000000100)='v', 0xff42}], 0x1) (async) recvmsg$kcm(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000100)=""/17, 0x11}], 0x1, &(0x7f00000003c0)=""/242, 0xf2}, 0x40) 3.389416431s ago: executing program 2 (id=1702): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) open_tree(0xffffffffffffff9c, &(0x7f00000005c0)='./file0\x00', 0x0) socket$inet6(0xa, 0x80002, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) close_range(r0, r3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r4}, &(0x7f0000000240), &(0x7f00000003c0)=r6}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r5, r2, 0x25, 0x2, @val=@tcx}, 0x40) syz_emit_ethernet(0x83, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff033286dd"], 0x0) 3.249375742s ago: executing program 2 (id=1734): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x74, 0x101301) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="02002303020048f80000000002"]) 1.439066591s ago: executing program 4 (id=1757): perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) memfd_create(&(0x7f0000000540)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x00\x00\x00\x00\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x05\x00\x00\x00\x00\x00\x00\x00_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xdcLF\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8o8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93\xf0y\xd6\xb0\xf2\x9f\xa7\xcf\xad\x86\\\xec\xec\xd6\x9d\bT\xcc\xa2\xea\x00'/1537, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x10132) creat(0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000080), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f00000008c0)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@noquota}, {@abort}, {@noload}, {@noload}]}, 0x64, 0x50a, &(0x7f0000000200)="$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") munlockall() 1.319936541s ago: executing program 4 (id=1760): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendto$inet6(r0, 0x0, 0x0, 0x20010004, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_REMOVE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x14, r2, 0x1, 0x0, 0x0, {0x4}}, 0x14}, 0x1, 0xfcffffff00000000, 0xa000000}, 0x0) 1.245467888s ago: executing program 1 (id=1764): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') open(&(0x7f0000000200)='./bus\x00', 0x141a42, 0x0) r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) fchdir(r0) r1 = syz_io_uring_setup(0x24f9, &(0x7f0000000200)={0x0, 0xf045, 0x10100}, &(0x7f0000000080), &(0x7f0000000140)=0x0) r3 = memfd_secret(0x0) ftruncate(r3, 0x5) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0x11, r3, 0x0) syz_io_uring_submit(r5, r2, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x18}) io_uring_enter(r1, 0x2d3e, 0x0, 0x1fffefff, 0x0, 0x0) 1.244115767s ago: executing program 1 (id=1766): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x6800, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STATS_ENABLED={0x5, 0x2a, 0x1}]}}}]}, 0x3c}}, 0x0) 1.196751691s ago: executing program 1 (id=1768): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000240), 0xc8243, 0x0) ioctl$PTP_PEROUT_REQUEST2(r2, 0x40383d0c, &(0x7f0000000040)={{}, {}, 0x0, 0x6}) openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) socket(0x20000000000000a, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}}, 0x0) r5 = socket(0x10, 0x3, 0x0) write(r5, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000b4bffc), 0x4) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f00000017c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000001b40)={0x0, 0x0, &(0x7f0000001b00)={&(0x7f0000000300)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="f5080000000000ce6678432675deb4e04f786ee167a66774150000000800030065f40c2ffa36ce7b06d8ced85dac84572c9ec800963535f171dfea8f5fde707235066bac8b53d9a830cd2594f3f674de8b66d419255145ab9fb3173957ad0c8cb9a45545e4743c0cc2193b886111dbefb8b747116c341bd307875259d4b7533606c56ef331fc7e3a75d588ca5e409b99a422c2d52ce96274e7c9", @ANYRES32=r9, @ANYBLOB="0c002d800500010000000000"], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="5400000010000104000000000200000000000000", @ANYRES32, @ANYBLOB="0000faffffff000034001280110001006272696467655f736c617665000000001c000580050021000000000006001f0000"], 0x54}}, 0x0) 420.730435ms ago: executing program 0 (id=1794): r0 = io_uring_setup(0x7312, &(0x7f0000000000)={0x0, 0x0, 0x20, 0x20000, 0x101}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x10012, r2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/rpc\x00') unshare(0x2000400) r4 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r4, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) socket$nl_sock_diag(0x10, 0x3, 0x4) r5 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r5, 0x0, 0x0, 0x0, 0x0) fchdir(r3) r6 = open(0x0, 0x0, 0x0) getdents(r6, &(0x7f0000000300)=""/104, 0x68) getdents(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="14006a001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000fe8540000000030a01020000000000000000010000000900030073797a320000f32614000480080002400000000008000140000000040900010073797a300000000014000000060a0000000000000000000000000000140000001100010000000000000000000000000a"], 0x9c}}, 0x0) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0xc0600, 0x0) r8 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r8, 0x107, 0x12, &(0x7f0000000140), 0x4) syz_emit_ethernet(0x36, &(0x7f00000005c0)=ANY=[@ANYBLOB="0180c200000e018db830e90086dd60e5be9e0000890000000700000000000000000000000000fe8000000000000000000000000000aa2fbbab068347e2caa6008b660c699666b5b45261e11ce09312b2862d12c17d06c20df9eff5ef8f7cadba7d5e06bd6abff5fe50f781557a3c62f9afcb0b0232bebe7c10abc484ef04152f6c18f1cfa76f06cec9c09fdf2e2a8bfa7922f0cb64e09a8bc7e6b9c498174007403efbce88bf27135ebad30097869d46b4b3c1ee160b503befed6efcc646afdc745a205918a4a9aaec057d2f37"], 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f00000000c0)=0xfffffffe) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000000)=ANY=[@ANYRES64], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x90) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r9, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={0xffffffffffffffff, &(0x7f00000004c0), &(0x7f0000000180)=@tcp6=r9}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=""/24}, 0x20) ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045518, &(0x7f0000000040)=0x8) close_range(r0, 0xffffffffffffffff, 0x0) 391.792837ms ago: executing program 4 (id=1795): r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0x5) pipe(0x0) socket$inet6(0xa, 0x3, 0x8000000003c) socket(0x10, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000180), 0x10) write(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="6583000a00000000000001000000080003"], 0x1c}}, 0x0) 391.219688ms ago: executing program 4 (id=1796): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000005000000040000000900000e"], 0x0, 0x51}, 0x20) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c00028005000100000000000800074000000000040006"], 0x98}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)={0xac, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @mcast1}]}]}, 0xac}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="400000001600010000000000000000000a000000", @ANYRES32=0x0, @ANYBLOB="1400010000000000000000000000ffffffffffff14000200fe8000000000000000000000000000005323cd11889e238b4db94f3a295b23c29afe2b9befbeb26d33e1c507b2811f4edc5a1538625a2f65a1f20e49fd14832c50"], 0x40}}, 0x0) 390.914188ms ago: executing program 0 (id=1797): openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x90) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r1, 0x5, &(0x7f0000000700)={0x0, 0x1, 0xffffffffffffff39}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @time={0x8, 0x3fd7}, {}, {}, @raw32={[0x0, 0x0, 0x1]}}], 0x1c) 390.702038ms ago: executing program 3 (id=1798): socket$nl_route(0x10, 0x3, 0x0) socket$igmp6(0xa, 0x3, 0x2) socket$inet_smc(0x2b, 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000016c0)={0x0, &(0x7f0000000140)}) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x0, &(0x7f0000000380)}) setgid(0xffffffffffffffff) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c00000003010101000000000000006c000000003c0001800400028005000100000000002c000180140003000000000000000000000000000014000400fc0200000000000000000000000000000c001980080001000a0100006e0c463c712d0956ff397b94457276f77845545f7dd6bd2575dcfa7823d3da9210fca4df072c17e3701e54710a63301765c0c670f57ad7eeae9feb370145"], 0x5c}}, 0x0) 341.003192ms ago: executing program 4 (id=1799): perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)={0x60, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffffffff}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5}]}, 0x60}}, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x400) ioctl$EVIOCSKEYCODE_V2(r2, 0x40284504, &(0x7f0000000040)={0xe, 0x16, 0x7, 0x9, "66a2dad4847bfc5fd772311c41b72b931f7f57094133712a2d9500406063ba12"}) setuid(0xee01) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000280)={'sit0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @loopback}}}}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x18, &(0x7f0000000080)=ANY=[], 0x1, 0x6fd, &(0x7f0000000880)="$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") readlink(&(0x7f0000000240)='./file1\x00', &(0x7f0000001fc0)=""/4107, 0x100b) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000006c0)={0x0, 0x0, 0x49}, 0x20) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000000c0)=@generic={&(0x7f0000000080)='./file0\x00'}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x12, 0x13, &(0x7f0000000200)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@map_idx={0x18, 0x2, 0x5, 0x0, 0x5}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, r1}, 0x90) 340.456931ms ago: executing program 0 (id=1800): ioperm(0x0, 0x5, 0xffffffffffffffff) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f00000000c0)=ANY=[@ANYRESDEC], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0xfffffffc}, 0x10}, 0x90) io_setup(0x9, &(0x7f0000000100)=0x0) r2 = socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000640)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xa, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x200}, 0x90) perf_event_open$cgroup(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x63, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="3af000000000000059760000", @ANYRES32, @ANYBLOB="0000000000000000950000000000000045"], 0x0}, 0x90) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'tunl0\x00', 0x100}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000080)) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x14c}}, 0x0) io_submit(r1, 0x1, &(0x7f0000000a40)=[&(0x7f0000000a00)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000dfff75390000000000000000850000007d00000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='io_uring_register\x00', r5}, 0x10) r6 = io_uring_setup(0x653, &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r6, 0xf, &(0x7f0000000540)={0x1002, 0x0, 0x0, 0x0, 0x28}, 0x20) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000200)={0x40000002}) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r3, &(0x7f00000005c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000580)={&(0x7f0000000680)=ANY=[@ANYBLOB="5c00000000d61d9af4d0c8c423beb27256476a230000000000070000070900010073797a310000000005000300110000000600024088e700001c000b8008000140007707ff080001400000092a0800014000000002050003002f000000050003003a000000"], 0x5c}, 0x1, 0x0, 0x0, 0x40}, 0x20040001) socket$nl_route(0x10, 0x3, 0x0) r7 = socket$igmp(0x2, 0x3, 0x2) getsockopt$inet_mreqn(r7, 0x0, 0x20, &(0x7f00000101c0)={@private, @remote}, &(0x7f0000010180)=0xc) setsockopt$MRT_ADD_VIF(r7, 0x0, 0xca, &(0x7f00000001c0)={0x1, 0x1, 0x40, 0x0, @vifc_lcl_addr=@private=0xa010101, @empty}, 0x10) setsockopt$MRT_FLUSH(r7, 0x0, 0xd4, &(0x7f0000001b40)=0xa, 0x4) r8 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000780)=@raw={'raw\x00', 0x8, 0x3, 0x3f0, 0x0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x320, 0xffffffff, 0xffffffff, 0x320, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'netpci0\x00'}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'ip_vti0\x00', 'gre0\x00'}, 0x0, 0x200, 0x230, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'ipvlan1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x450) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000001140)=ANY=[@ANYBLOB="84010000100033060000000000000000ac1414bb000000000000000000000000ac1414aa00"/64, @ANYRES16, @ANYRES32=0x0, @ANYBLOB="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"], 0x184}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) 221.107121ms ago: executing program 1 (id=1801): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x600000000000000, 0x13, r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x8000000003c) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$tipc(0x1e, 0x0, 0x0) r1 = socket$kcm(0x2, 0x0, 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000280)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(0xffffffffffffffff, 0x0, 0xffe) socket$inet_tcp(0x2, 0x1, 0x0) socket$packet(0x11, 0x0, 0x300) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) syz_mount_image$ext4(&(0x7f0000000a00)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000280)={[{@min_batch_time={'min_batch_time', 0x3d, 0x1}}, {}, {@orlov}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@dioread_nolock}, {@nodelalloc}, {@acl}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x3f}}]}, 0xfc, 0x560, &(0x7f00000003c0)="$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") 214.887312ms ago: executing program 3 (id=1802): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="4801000013fe0100000000000000000000000000000000000000000000000001e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000008400050000000000000000000000000000000000000000002b00000002000000e00000020000000000000000000000000000000001"], 0x148}}, 0x0) 138.101138ms ago: executing program 4 (id=1803): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}, 0x0, 0x40000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) listen(r0, 0x0) r1 = syz_io_uring_setup(0x2704, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000001440)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000001400)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, r0, 0x0}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r6, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet6_buf(r6, 0x29, 0x0, &(0x7f0000000000)="a2a246816bc615dc16728f4488d4998f9ddb1d32b404d8b0ade10013acaa7ec4eb4cf2c1d835a1aa50a4805909dd52ea35a780b90664f741cb43867eeec435e14ad72f5ad96752533e99e2d4a5579f2e1d98812016efd89ad4735c72605dd54fa128d2fcfded7f1b1dd277147d03cc6a", 0x70) r7 = socket$inet_smc(0x2b, 0x1, 0x0) socket$inet6(0xa, 0x3, 0x9) setsockopt$inet_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) shutdown(0xffffffffffffffff, 0x1) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000), 0xfce3) r8 = socket$inet_tcp(0x2, 0x1, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP_SET_OP_GET_FNAME(r9, 0x1, 0x53, &(0x7f00000001c0)={0x8, 0x7, 0x0, 'syz0\x00'}, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYRES16=r4], 0xa4}, 0x1, 0x0, 0x0, 0x4000}, 0x0) write$cgroup_int(r5, &(0x7f0000000200), 0xf000) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000001, 0x12, r4, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB], 0x14}}, 0x0) recvmmsg(r10, &(0x7f0000005640)=[{{0x0, 0x0, &(0x7f0000000fc0)}}], 0x1, 0x0, 0x0) io_uring_enter(r1, 0xa3d, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xa, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000009661dc100000000000040000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) connect$inet(r8, &(0x7f0000000280)={0x2, 0x4e20, @private=0xa010100}, 0x10) 137.794228ms ago: executing program 3 (id=1804): openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r0 = openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000380)={@multicast1, @multicast2, 0x0}, &(0x7f00000003c0)=0xc) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0x3, &(0x7f0000000400)={&(0x7f0000000180)=""/113, 0x79, 0x0, &(0x7f0000001100)=""/4080, 0x1000}}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0x4, &(0x7f00000005c0)=@raw=[@call={0x85, 0x0, 0x0, 0xaf}, @call={0x85, 0x0, 0x0, 0xa0}, @map_fd={0x18, 0x6}], &(0x7f0000000600)='syzkaller\x00', 0x2, 0x76, &(0x7f0000000640)=""/118, 0x41100, 0x6, '\x00', r1, 0xb, 0xffffffffffffffff, 0x8, &(0x7f00000006c0)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000000700)={0x2, 0x5, 0x1, 0x1}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x6, &(0x7f0000000740)=[0x1, 0x1, 0xffffffffffffffff], &(0x7f0000000780)=[{0x2, 0x2, 0xe, 0x5}, {0x1, 0x2, 0x7}, {0x3, 0x2, 0xa, 0x7}, {0x2, 0x2, 0x1, 0x1}, {0x1, 0xd, 0x10, 0xb}, {0x3, 0x2, 0xd}], 0x10, 0x80}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x10, 0x4, &(0x7f0000000cc0)=ANY=[@ANYBLOB="850000002e000000350000000000000026000000230000009500000000000000f4670880271e3503200ffa9585fba2c8c037c5a142dfa8d76287066c5197fab55f98cd34d5aeed8d38e65cb6e22fd7dde54704d25c79949c23e2eb15d755a22400a7c09cc2017673294f42a5f0a8322e13822c45c0f8612c10b100000000b0d3712c7e93363af33700ff1e23166a32d95433bb755a2dd576090c4867a7b6393e366c6386d5ec7209d031f40f3012e9576e51a7f57846c744ae6af3e4195cc037102124d85c298901ebb39522f6649dd76d067a82f5fe29fe5f17f9ab800f4104dbaba46aa43a815b1e5c6d1d224b64be6c4d7f47ef21eb7e46f9aa4a9779f8555eaea760c1f2b614abd0ef4b253d110ee282ab76f593d928cf95846be6277c04b4c5324812696a623cd8a4f8dc8dcba00b1b2d2747c45b0c52087b5efabf8496b9a951667d510ba0e37b56c0ebfb19a34268335648e1f844ce328c10752a42dca52fb9481452b6518a6ef7297f9b2744419a2f238f173d0cd46dafc6ac5500f53e5309d891d83cf4fbd775d9c07d8d591a4dac60ff000000b78863e6b41c70aa00000000000000000000449c810d3174c87ee545867a7a8b2074009a3b54026e2e613814c66686b201abb3db4f8acdce6b3a7a4908a365d6788c75149b6f1f2395d97b49c4d095eec1c274e143c30372b5ac2ce03c8ea8239ab03ce67c0e41ffea99e36a63a7785086b3b95038fde89f075181e6b42429aa68209b7b0d1cd172f49b11b11e75eac0153ca8e7576ebb57fd9159731d78e42f0fe56b54b18f93d9abf3831eb28ca735e0414315969dda6265e7a4be91a63eec4225d4216995b9e599e0dbccbf55bd628a773bb6a1a2644ec629e125083dfbe978a2e675a3a125d0659c81f8bb370d45c95869eab7a61c73bd194ebb9d90b5ecb25f65629b91d4257e7d035e8e203b754e8c700b64106650d4b383c08fd2c8cfb93ee8ea9390f341c86be2cb000055a5362e836ff8812383907ef348870ccac3c421849d8b38ba5f880dcc07cabcfe3f8b8ee32f7da1839c300b700e08ad43fa92b6b0fee33d9206e25437cd11209fd28aedcb81b11c4addbdace5381fba093573b3b99fcc24d3bd835eab386c181e0eb7cda4a100e45e7ff203ca3f106118bb1f4424f3a53865f9f9fc184a90cbcdb4858a2601add23e5021d53cae51aedcfb7d6d10fd6f92a2c911b26f5ca843a43c09272fea7cc2c2cc837154bd72cb057aa0cc11c2e5d79ba3e9f0d7f872054c9882245e190b8362602bff8dceeea9a30a0ebca0660a64b555bf2087cc1ddd8dc59e76e7db1bc5b5e2655c4fcd00aefbda234db2caf875ea2c860d0d3fa2a6d62761f212db65804c2645d6ebe58ddf99d1a50990c9bc6a737bbc0b48fa4011ca45f3577388e04989a5634c74eeb55ac7891a6c6755ef48602fa95d0c16eba3965cd57f50cc8b7d1a0dc911979e2e9b327535c2e433e087aecaaf4180ab7165d5522331bf972e88"], &(0x7f0000000140)='GPL\x00', 0x4, 0xa0, &(0x7f00000004c0)=""/160, 0x40f00, 0x0, '\x00', r1, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r2, r3, 0x0, 0x0, 0x0, 0x10, 0x400}, 0x90) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$FITHAW(r0, 0xc0045878) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x12, r7, 0x0) r8 = socket(0xa, 0x6, 0x0) getsockopt$inet6_mreq(r8, 0x10d, 0xfe, 0x0, &(0x7f0000000000)) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNGETIFF(r6, 0x800454d2, &(0x7f0000000080)={'ip_vti0\x00'}) ioctl$sock_inet6_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000340)={@loopback, 0x71}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r10, 0x8943, &(0x7f0000000080)) sendmsg$nl_route(r10, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@getroute={0x14, 0x1a, 0x4, 0x70bd25, 0x25dfdbfe, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0xc1}, 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r4, 0xfffff000, 0xd6, 0x0, &(0x7f00000008c0)="61df712bc884fed5728100b6c2a7537100000000d28c6d6f6cac8b3d54497f1bc9a71dd76391bb12533f5b0baca3285b884dc0f9b5736256dd6c16661efb91476ee79260bfeb85034ca2a01dc90dc464a298968a3256ff8aac74ac92abd47dd4d4106d425083513c93ef22c2628b07203525d1524162fa33d3577e0ffb4af4fc783924857f88b22cf37cfbb80802a68fffffff7f34303e7e012d8d8e5bcb0b757a4f9b22159bdee83c0d8b714d3ca069ef6ffda362cefde403e24a20a6bf6cf63e8edd693444c6e7852e1253f8890ae02e9f4b7e3abc", 0x0, 0x8003, 0x0, 0x0, 0x5c, &(0x7f0000000000), &(0x7f00000009c0)="43dc01a15bd4ff5d34f4f3a225e3ce27a815d84d16072c0cfa863d3face92e55e6bdde64a0959bf2b58d14bf609e9382043fa1c02291dab63dde7c744de8b134cb1a90abf05a5a7facd8065b1c059a2bd720eb19606c8a189219f40f", 0x0, 0x0, 0x40000000}, 0x50) 120.22506ms ago: executing program 0 (id=1805): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x101c088, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x6, 0x2cc, &(0x7f0000000e00)="$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") (async, rerun: 32) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) (rerun: 32) fstat(r0, &(0x7f00000033c0)) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) (async) listen(r1, 0x0) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)={0x18, 0x2d, 0x107, 0x0, 0x0, {0x4, 0x7c}, [@nested={0x4, 0x1}]}, 0x18}}, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f0000000080)={0x0, 0x4, 0x10, 0x1, 0x1}, &(0x7f00000000c0)=0x18) (async) ioctl$TUNGETIFF(r2, 0x800454d2, &(0x7f0000000040)={'macvlan0\x00'}) syz_emit_ethernet(0x5e, &(0x7f00000001c0)=ANY=[@ANYBLOB="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", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="a410000090780000080ea40d903a608f2d76da700b5900037a000000"], 0x0) 99.661531ms ago: executing program 3 (id=1806): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000082b6fe8e00000000008040008500000050000000a50000009700000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x40) r1 = syz_clone(0x0, 0x0, 0xffffffffffffffad, 0x0, 0x0, 0x0) r2 = syz_pidfd_open(r1, 0x0) process_mrelease(r2, 0x0) r3 = dup2(r0, r0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x8, 0x0, r3, 0x6, '\x00', 0x0, r3, 0x1, 0x4, 0x3}, 0x48) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000200)={'vxcan1\x00'}) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) r5 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r5, 0x8915, 0x0) r6 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r6, &(0x7f0000000180)={0x2d, 0x30, 0xfa00, {0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x38) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000200)={r6, 0x20, &(0x7f00000001c0)={&(0x7f0000000140)=""/56, 0x38, 0x0, 0x0}}, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x208042, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xb, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0xc6, &(0x7f0000000380)=""/198, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r7}, 0x90) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x200000b, 0x40010, r8, 0x0) ftruncate(r8, 0x8001) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000580)={r3}, 0x4) mount(&(0x7f00000001c0)=@filename='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='vfat\x00', 0x8cffffff, 0x0) eventfd2(0x0, 0x0) eventfd2(0x0, 0x0) 99.202641ms ago: executing program 1 (id=1807): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./bus\x00', 0x200000, &(0x7f0000000100)=ANY=[@ANYBLOB='uni_xlate=0,shortname=lower,shortname=win95,utf8=0,rodir,uni_xlate=1,utf8=1,errors=continue,shortname=lower,\x00\x00\x00\x00arset=cp865,nonumtail=0,nonumtail=0,\x00'], 0x5, 0x28e, &(0x7f0000000240)="$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") r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000200)='mm_page_free\x00', r0}, 0x10) r1 = io_uring_setup(0x2802, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0xf2ff, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) 33.115167ms ago: executing program 3 (id=1808): r0 = socket$pppl2tp(0x18, 0x1, 0x1) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) (async) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) move_pages(0x0, 0x2, &(0x7f0000000040)=[&(0x7f0000ff3000/0xa000)=nil, &(0x7f0000ff5000/0x3000)=nil], &(0x7f0000000080)=[0x1f], 0x0, 0x1100000000000000) r3 = pidfd_getfd(r2, r2, 0x0) setns(r3, 0x66020000) (async) mount$9p_fd(0x0, &(0x7f0000000980)='.\x00', 0x0, 0x84000, 0x0) (async) r4 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7020000f3ffffb0150000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r6) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd, 0x0, 0x20000000, 0x8020, 0x0, 0x0, {0x1}}) (async) r7 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r8 = fcntl$dupfd(r7, 0x0, r7) ioctl$SCSI_IOCTL_GET_PCI(r8, 0x5393, &(0x7f0000000000)) (async) socket$rds(0x15, 0x5, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) socket$packet(0x11, 0x2, 0x300) (async) socket(0x200000100000011, 0x803, 0x0) (async) socket$key(0xf, 0x3, 0x2) socket$packet(0x11, 0x3, 0x300) (async) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)) (async) socket$nl_generic(0x10, 0x3, 0x10) close(0xffffffffffffffff) (async) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r9}, 0x8) (async) r10 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r11 = fcntl$dupfd(r10, 0x0, r10) ioctl$SCSI_IOCTL_GET_PCI(r11, 0x5393, &(0x7f0000000000)) 32.935357ms ago: executing program 3 (id=1809): syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000040)='./file2\x00', 0x1210000, &(0x7f00000001c0), 0x1, 0x546, &(0x7f0000000200)="$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") perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd"], 0xfdef) socket$inet_sctp(0x2, 0x0, 0x84) r0 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00'}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) r2 = socket$inet(0x2, 0x2000000080002, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000280)=@broute={'broute\x00', 0x20, 0x2, 0x238, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200005c0], 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"]}, 0x2b0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000100)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000040], 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0000000000000000000000000000000000001773347c000000000001000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000f60000000000000000000000000000000000fcffffff00"/126]}, 0xf5) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'syz_tun\x00'}) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@random="56d646f6072f", @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x2f, 0x0, @multicast2, @multicast1=0xe000fe00}, {0x0, 0x0, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "f3d006e2ceee356eac3b5747c91b1218f12ae680b8445224f7397fda7ff495eb", "57cc16326488918e9bbf5e5a48b9b96956886f0c308ec1be1fbb557b447f99cdc7224d89300ea4b9fd6ea214f544ca21", "d4e142ef162181b9df4f5e58c4a295a696208405003fa9be94c8476a", {"9cffc038e7a6d109737b0ce1ca271c07"}}}}}}}, 0x0) 31.132847ms ago: executing program 1 (id=1810): sync() r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="d80000001800eb054e81f783db4cb9040a1d080006007c09e8fc55a10a0015000600142603600e1208000f00060004010c00080008000c4004000000035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cb8b4c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e002c2a73ae028d1b34ff4f8cc430bb5a360db598262f3d40fad9e3bb9ad809d5e1cace81ed0bffece8b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d930000", 0xd8}], 0x1}, 0x0) sync() r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0x40049, 0x4) recvmmsg(r3, 0x0, 0x0, 0x0, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) socket$packet(0x11, 0x3, 0x300) r5 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x234400, &(0x7f0000000400)={[{@noload}, {@minixdf}, {@dioread_lock}, {@data_err_ignore}, {@bsdgroups}, {@lazytime}, {@noauto_da_alloc}, {@usrquota}, {@nojournal_checksum}]}, 0xfe, 0x55d, &(0x7f0000000980)="$eJzs3d9rW1UcAPDvTX/sp66DMdQHKezByVy6tv6Y4MN8FB0O9H2G9q6Mpsto0rHWgduDe9mLDEHEgfgH+O7j8B/wrxjoYMgo+uBL5aY3XbYmbZZlSzSfD9ztnPuj55yce07OyUm4AQytyeyfQsSrEfFNEnGo6dho5AcnN89bf3htLtuS2Nj47M8kknxf4/wk//9AHnklIn79OuJEYXu61dW1xVK5nC7n8ana0uWp6urayYtLpYV0Ib00Mzt7+p3Zmfffe7dnZX3z3N/ff3r3o9O3jq1/9/P9w7eTOBMH82PN5XgG15sjkzGZvyZjceaJE6d7kNggSfqdAboykrfzscj6gEMxkrd64P/vq4jYAIZUov3DkGqMAxpz+x7Ng/8zHny4OQHaXv7Rzc9GYm99brR/PXlsZpTNdyd6kH6Wxi9/3LmdbdG7zyEAdnX9RkScGh3d3v8lef/XvVMdnPNkGvo/eHHuZuOft1qNfwpb459oMf450KLtdmP39l+43+KypFefUmfjvw9ajn+3Fq0mRvLYS/Ux31hy4WI5zfq2lyPieIztyeI7reecXr+30e5Y8/gv27L0G2PBPB/3R/c8fs18qVZ6ljI3e3Aj4rWW499kq/6TFvWfvR7nOkzjaHrn9XbHdi//87XxU8QbLev/0YpWsvP65FT9fphq3BXb/XXz6G/t0u93+bP6379z+SeS5vXa6tOn8ePef9J2x7q9/8eTz+vh8Xzf1VKttjwdMZ58sn3/zKNrG/HG+Vn5jx/buf9rdf/vi4gvOiz/zSM32546CPU//1T1//SBex9/+UO79Dur/7froeP5nk76v04z+CyvHQAAAAAAAAyaQkQcjKRQ3AoXCsXi5vc7jsT+QrlSrZ24UFm5NB/138pOxFihsdJ9qOn7ENP592Eb8Zkn4rMRcTgivh3ZV48X5yrl+X4XHgAAAAAAAAAAAAAAAAAAAAbEgTa//8/8PtLykvEXm0PgufLIbxheu7b/XjzpCRhI3v9heHXV/vf1Ph/Ai+f9H4bUWL8zAPST938YXto/DC/tH4aX9g8AAAAAAAAAAAAAAAAAAAAAAAAAAAA9de7s2WzbWH94bS6Lz19ZXVmsXDk5n1YXi0src8W5yvLl4kKlslBOi3OVpd3+XrlSuTw9EytXp2pptTZVXV07v1RZuVQ7f3GptJCeTz1tCAAAAAAAAAAAAAAAAAAAALarrq4tlsrldFlAoKvA6GBkQ6ApcKsHrbvPHRMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANPk3AAD//0unNek=") r6 = creat(&(0x7f0000000240)='./bus\x00', 0x0) pwritev2(r6, &(0x7f00000015c0)=[{&(0x7f0000000080)="ec", 0x1}], 0x1, 0xfffff, 0x0, 0x0) r7 = open(&(0x7f0000000200)='./bus\x00', 0x44000, 0x0) dup3(r7, r6, 0x0) finit_module(r7, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'gretap0\x00', 0x0}) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x50}}, 0x0) r9 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000100)='rxrpc\x00', 0x0, &(0x7f0000000140)="0000000000000004ff6943b80000000800000014f200000000861f4104bfeacd1f63dd65dd530700a28f2cbf86f474fad8cb594ed9fabe9ec2", 0x39, r9) sendmsg$NFT_MSG_GETTABLE(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYRESOCT], 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x8010) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000040)={'syztnl0\x00', 0x0, 0x29, 0x1, 0x8, 0x791, 0x0, @loopback, @mcast1, 0x10, 0x0, 0x0, 0x4}}) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a0300000000000000000007e300000900010073797a300000000044000000090a0104000000000000000000002cea0800084000001b000900020073797a31000000000900010073797a30000000000800"], 0x8c}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x3, 0x9, 0x359, 0x4, 0x2804, r6, 0xfffffff7, '\x00', 0x0, r7, 0x0, 0x3, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0x10, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESHEX, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRESOCT, @ANYRESOCT=r5], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r8, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r10 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r10, &(0x7f0000000140), 0x10) setsockopt$CAN_RAW_FILTER(r10, 0x65, 0x1, &(0x7f0000000100), 0x0) 23.978568ms ago: executing program 0 (id=1811): socket$unix(0x1, 0x2, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x0) socket$pptp(0x18, 0x1, 0x2) socket$inet_sctp(0x2, 0x1, 0x84) r0 = socket$inet_udplite(0x2, 0x2, 0x88) socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x2, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="8910000000"], &(0x7f0000000280)='GPL\x00'}, 0x90) socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000058", @ANYRES32=r1, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES16, @ANYRES32=r2], 0x44}}, 0x0) 0s ago: executing program 0 (id=1812): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000240), 0xc8243, 0x0) ioctl$PTP_PEROUT_REQUEST2(r2, 0x40383d0c, &(0x7f0000000040)={{}, {}, 0x0, 0x6}) openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) socket(0x20000000000000a, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}}, 0x0) r5 = socket(0x10, 0x3, 0x0) write(r5, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000b4bffc), 0x4) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f00000017c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000001b40)={0x0, 0x0, &(0x7f0000001b00)={&(0x7f0000000300)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="f5080000000000ce6678432675deb4e04f786ee167a66774150000000800030065f40c2ffa36ce7b06d8ced85dac84572c9ec800963535f171dfea8f5fde707235066bac8b53d9a830cd2594f3f674de8b66d419255145ab9fb3173957ad0c8cb9a45545e4743c0cc2193b886111dbefb8b747116c341bd307875259d4b7533606c56ef331fc7e3a75d588ca5e409b99a422c2d52ce96274e7c9", @ANYRES32=r9, @ANYBLOB="0c002d800500010000000000"], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="5400000010000104000000000200000000000000", @ANYRES32, @ANYBLOB="0000faffffff000034001280110001006272696467655f736c617665000000001c000580050021000000000006001f0000"], 0x54}}, 0x0) kernel console output (not intermixed with test programs): 84.437130][ T7092] obj_cgroup_charge_pages+0xbd/0x1d0 [ 84.442550][ T7092] __memcg_kmem_charge_page+0x9d/0x170 [ 84.447996][ T7092] __alloc_pages_noprof+0x1bc/0x360 [ 84.453174][ T7092] alloc_pages_mpol_noprof+0xb1/0x1e0 [ 84.458531][ T7092] alloc_pages_noprof+0xe1/0x100 [ 84.463452][ T7092] __vmalloc_node_range_noprof+0x719/0xef0 [ 84.469250][ T7092] kvmalloc_node_noprof+0x121/0x170 [ 84.474444][ T7092] ? ip_set_alloc+0x1f/0x30 [ 84.478975][ T7092] ip_set_alloc+0x1f/0x30 [ 84.483288][ T7092] hash_netiface_create+0x273/0x730 [ 84.488484][ T7092] ? __nla_parse+0x40/0x60 [ 84.492940][ T7092] ? __pfx_hash_netiface_create+0x10/0x10 [ 84.498652][ T7092] ip_set_create+0x359/0x8a0 [ 84.503231][ T7092] ? memchr+0x1/0x50 [ 84.507117][ T7092] ? __nla_parse+0x40/0x60 [ 84.511585][ T7092] nfnetlink_rcv_msg+0x4a9/0x570 [ 84.516556][ T7092] netlink_rcv_skb+0x12c/0x230 [ 84.521374][ T7092] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 84.527016][ T7092] nfnetlink_rcv+0x16c/0x15b0 [ 84.531694][ T7092] ? kmem_cache_free+0xd8/0x280 [ 84.536626][ T7092] ? nlmon_xmit+0x51/0x60 [ 84.540941][ T7092] ? __kfree_skb+0x102/0x150 [ 84.545551][ T7092] ? consume_skb+0x57/0x180 [ 84.550057][ T7092] ? nlmon_xmit+0x51/0x60 [ 84.554395][ T7092] ? dev_hard_start_xmit+0x3c1/0x3f0 [ 84.559752][ T7092] ? __dev_queue_xmit+0xb21/0x1e50 [ 84.564839][ T7092] ? ref_tracker_free+0x3a5/0x410 [ 84.569875][ T7092] ? __netlink_deliver_tap+0x495/0x4c0 [ 84.575321][ T7092] netlink_unicast+0x58d/0x660 [ 84.580068][ T7092] netlink_sendmsg+0x5ca/0x6e0 [ 84.584819][ T7092] ? __pfx_netlink_sendmsg+0x10/0x10 [ 84.590104][ T7092] __sock_sendmsg+0x140/0x180 [ 84.594939][ T7092] ____sys_sendmsg+0x312/0x410 [ 84.599724][ T7092] __sys_sendmsg+0x1e9/0x280 [ 84.604347][ T7092] ? futex_wait+0x18e/0x1c0 [ 84.608927][ T7092] __x64_sys_sendmsg+0x46/0x50 [ 84.614106][ T7092] x64_sys_call+0xb25/0x2d70 [ 84.618746][ T7092] do_syscall_64+0xc9/0x1c0 [ 84.623232][ T7092] ? clear_bhb_loop+0x55/0xb0 [ 84.627906][ T7092] ? clear_bhb_loop+0x55/0xb0 [ 84.632691][ T7092] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.638584][ T7092] RIP: 0033:0x7f51f3b6abd9 [ 84.643048][ T7092] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 84.662834][ T7092] RSP: 002b:00007f51f2dec048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 84.671248][ T7092] RAX: ffffffffffffffda RBX: 00007f51f3cf8f60 RCX: 00007f51f3b6abd9 [ 84.679306][ T7092] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000009 [ 84.687265][ T7092] RBP: 00007f51f3bd9a98 R08: 0000000000000000 R09: 0000000000000000 [ 84.695284][ T7092] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 84.703288][ T7092] R13: 000000000000000b R14: 00007f51f3cf8f60 R15: 00007ffc08536698 [ 84.711467][ T7092] [ 84.714611][ T7092] memory: usage 307200kB, limit 307200kB, failcnt 5333 [ 84.721520][ T7092] memory+swap: usage 307624kB, limit 9007199254740988kB, failcnt 0 [ 84.729455][ T7092] kmem: usage 307200kB, limit 9007199254740988kB, failcnt 0 [ 84.736769][ T7092] Memory cgroup stats for /syz0: [ 84.736998][ T7092] cache 0 [ 84.744842][ T7092] rss 0 [ 84.747633][ T7092] shmem 0 [ 84.750563][ T7092] mapped_file 0 [ 84.754010][ T7092] dirty 0 [ 84.756953][ T7092] writeback 0 [ 84.760232][ T7092] workingset_refault_anon 446 [ 84.764935][ T7092] workingset_refault_file 7768 [ 84.769732][ T7092] swap 434176 [ 84.773076][ T7092] swapcached 0 [ 84.776434][ T7092] pgpgin 187105 [ 84.779883][ T7092] pgpgout 187105 [ 84.783433][ T7092] pgfault 73064 [ 84.786975][ T7092] pgmajfault 308 [ 84.790513][ T7092] inactive_anon 0 [ 84.794115][ T7092] active_anon 0 [ 84.797625][ T7092] inactive_file 0 [ 84.801230][ T7092] active_file 0 [ 84.804701][ T7092] unevictable 0 [ 84.808188][ T7092] hierarchical_memory_limit 314572800 [ 84.813550][ T7092] hierarchical_memsw_limit 9223372036854771712 [ 84.819773][ T7092] total_cache 0 [ 84.823208][ T7092] total_rss 0 [ 84.826465][ T7092] total_shmem 0 [ 84.829967][ T7092] total_mapped_file 0 [ 84.834010][ T7092] total_dirty 0 [ 84.837486][ T7092] total_writeback 0 [ 84.841267][ T7092] total_workingset_refault_anon 446 [ 84.846460][ T7092] total_workingset_refault_file 7768 [ 84.851729][ T7092] total_swap 434176 [ 84.855509][ T7092] total_swapcached 0 [ 84.859411][ T7092] total_pgpgin 187105 [ 84.863363][ T7092] total_pgpgout 187105 [ 84.867466][ T7092] total_pgfault 73064 [ 84.871431][ T7092] total_pgmajfault 308 [ 84.875469][ T7092] total_inactive_anon 0 [ 84.879630][ T7092] total_active_anon 0 [ 84.883579][ T7092] total_inactive_file 0 [ 84.887660][ T29] kauditd_printk_skb: 16 callbacks suppressed [ 84.887672][ T29] audit: type=1400 audit(1720058344.630:705): avc: denied { connect } for pid=7128 comm="syz.4.1132" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 84.887722][ T7092] total_active_file 0 [ 84.893757][ T29] audit: type=1400 audit(1720058344.630:706): avc: denied { getopt } for pid=7128 comm="syz.4.1132" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 84.913183][ T7092] total_unevictable 0 [ 84.913192][ T7092] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.1120,pid=7091,uid=0 [ 84.913299][ T7092] Memory cgroup out of memory: Killed process 7091 (syz.0.1120) total-vm:80752kB, anon-rss:448kB, file-rss:10068kB, shmem-rss:0kB, UID:0 pgtables:108kB oom_score_adj:1000 [ 85.000396][ T7137] loop2: detected capacity change from 0 to 1024 [ 85.012406][ T7141] loop3: detected capacity change from 0 to 1024 [ 85.040754][ T7137] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 85.064714][ T5823] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.081656][ T7153] tipc: Invalid UDP bearer configuration [ 85.081668][ T7153] tipc: Enabling of bearer rejected, failed to enable media [ 85.120070][ T7155] xt_CT: No such helper "pptp" [ 85.132019][ T7155] xt_CT: You must specify a L4 protocol and not use inversions on it [ 85.144650][ T7155] netlink: 'syz.3.1138': attribute type 27 has an invalid length. [ 85.212663][ T7163] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=24592 sclass=netlink_route_socket pid=7163 comm=syz.1.1140 [ 85.239613][ T7168] loop1: detected capacity change from 0 to 512 [ 85.309199][ T7168] loop1: detected capacity change from 0 to 8192 [ 85.388350][ T7191] bridge2: entered promiscuous mode [ 85.393577][ T7191] bridge2: entered allmulticast mode [ 85.464214][ T7199] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.570611][ T29] audit: type=1326 audit(1720058345.320:707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7128 comm="syz.4.1132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e46f87bd9 code=0x7fc00000 [ 86.088779][ T7218] loop2: detected capacity change from 0 to 512 [ 86.244720][ T7218] loop2: detected capacity change from 0 to 8192 [ 86.259300][ T7218] FAT-fs (loop2): Unrecognized mount option "0xffffffffffffffff˙" or missing value [ 86.410701][ T7231] xt_CT: No such helper "pptp" [ 86.432348][ T7231] xt_CT: No such helper "pptp" [ 86.447585][ T7231] xt_CT: No such helper "pptp" [ 86.460022][ T7231] xt_CT: No such helper "pptp" [ 86.473739][ T7231] xt_CT: No such helper "pptp" [ 86.486374][ T7231] xt_CT: No such helper "pptp" [ 86.499019][ T7231] xt_CT: No such helper "pptp" [ 86.541918][ T7231] xt_CT: No such helper "pptp" [ 86.555800][ T7231] xt_CT: No such helper "pptp" [ 86.617367][ T29] audit: type=1400 audit(1720058346.360:708): avc: denied { bind } for pid=7258 comm="syz.1.1170" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 86.672395][ T29] audit: type=1400 audit(1720058346.400:709): avc: denied { connect } for pid=7258 comm="syz.1.1170" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 86.692343][ T29] audit: type=1400 audit(1720058346.400:710): avc: denied { getopt } for pid=7258 comm="syz.1.1170" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 86.732485][ T7279] loop4: detected capacity change from 0 to 512 [ 86.738636][ T7278] loop2: detected capacity change from 0 to 2048 [ 86.886966][ T7279] loop4: detected capacity change from 0 to 8192 [ 86.900167][ T7279] FAT-fs (loop4): Unrecognized mount option "0xffffffffffffffff˙" or missing value [ 86.944971][ T7316] program syz.3.1185 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 86.954326][ T29] audit: type=1400 audit(1720058346.690:711): avc: denied { mounton } for pid=7309 comm="syz.2.1182" path="/syzcgroup/unified/syz2" dev="cgroup2" ino=96 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 87.025263][ T7317] __nla_validate_parse: 11 callbacks suppressed [ 87.025279][ T7317] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1180'. [ 87.043731][ T7322] loop3: detected capacity change from 0 to 512 [ 87.062400][ T7322] EXT4-fs: Ignoring removed mblk_io_submit option [ 87.073069][ T7322] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities [ 87.123125][ T29] audit: type=1400 audit(1720058346.870:712): avc: denied { getopt } for pid=7323 comm="syz.4.1187" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 87.194435][ T7335] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1191'. [ 87.209309][ T29] audit: type=1326 audit(1720058346.960:713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7336 comm="syz.4.1192" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5e46f87bd9 code=0x0 [ 87.756400][ T7363] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1201'. [ 87.776838][ T7363] IPv6: Can't replace route, no match found [ 87.946078][ T7385] loop2: detected capacity change from 0 to 512 [ 87.957562][ T7388] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1210'. [ 87.957800][ T7385] EXT4-fs: Ignoring removed i_version option [ 87.973333][ T7385] EXT4-fs: Ignoring removed i_version option [ 87.995050][ T7394] loop3: detected capacity change from 0 to 512 [ 88.009871][ T7394] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 88.019670][ T7385] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 88.055397][ T7396] hub 9-0:1.0: USB hub found [ 88.060800][ T29] audit: type=1400 audit(1720058347.790:714): avc: denied { map } for pid=7387 comm="syz.0.1210" path="/dev/vsock" dev="devtmpfs" ino=231 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 88.084654][ T7394] EXT4-fs (loop3): failed to open journal device unknown-block(0,0) -6 [ 88.101305][ T7385] EXT4-fs (loop2): 1 orphan inode deleted [ 88.107137][ T7385] EXT4-fs (loop2): 1 truncate cleaned up [ 88.107200][ T7396] hub 9-0:1.0: 8 ports detected [ 88.125587][ T7385] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 88.166520][ T7394] lo speed is unknown, defaulting to 1000 [ 88.247173][ T5823] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.268601][ T7426] lo speed is unknown, defaulting to 1000 [ 88.286921][ T7430] loop4: detected capacity change from 0 to 2048 [ 88.330923][ T7432] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1220'. [ 88.341195][ T7430] loop4: p1 p3 < > p4 < p5 > [ 88.345898][ T7430] loop4: partition table partially beyond EOD, truncated [ 88.370747][ T7430] loop4: p1 size 33024 extends beyond EOD, truncated [ 88.387460][ T7430] loop4: p3 start 4284289 is beyond EOD, truncated [ 88.397940][ T7430] loop4: p5 size 33024 extends beyond EOD, truncated [ 88.874511][ T7427] syz.0.1220 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 88.885685][ T7427] CPU: 1 PID: 7427 Comm: syz.0.1220 Not tainted 6.10.0-rc6-syzkaller-00067-g8a9c6c40432e #0 [ 88.895803][ T7427] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 88.905835][ T7427] Call Trace: [ 88.909095][ T7427] [ 88.912002][ T7427] dump_stack_lvl+0xf2/0x150 [ 88.916620][ T7427] dump_stack+0x15/0x20 [ 88.920781][ T7427] dump_header+0x83/0x2d0 [ 88.925098][ T7427] oom_kill_process+0x33e/0x4c0 [ 88.929933][ T7427] out_of_memory+0x9af/0xbe0 [ 88.934502][ T7427] mem_cgroup_out_of_memory+0x13e/0x190 [ 88.940030][ T7427] try_charge_memcg+0x745/0xcd0 [ 88.944867][ T7427] ? _raw_spin_unlock+0x26/0x50 [ 88.949754][ T7427] ? radix_tree_lookup+0xf9/0x150 [ 88.954760][ T7427] mem_cgroup_swapin_charge_folio+0x107/0x1a0 [ 88.960825][ T7427] __read_swap_cache_async+0x2b9/0x520 [ 88.966416][ T7427] swap_cluster_readahead+0x276/0x3f0 [ 88.971773][ T7427] swapin_readahead+0xe2/0x7a0 [ 88.976521][ T7427] ? __filemap_get_folio+0x420/0x5b0 [ 88.981873][ T7427] ? swap_cache_get_folio+0x6e/0x210 [ 88.987188][ T7427] do_swap_page+0x3bc/0x1840 [ 88.991770][ T7427] ? cgroup_rstat_updated+0x99/0x550 [ 88.997137][ T7427] ? __rcu_read_lock+0x36/0x50 [ 89.002012][ T7427] handle_mm_fault+0x809/0x2a80 [ 89.006852][ T7427] ? mas_walk+0x204/0x320 [ 89.011264][ T7427] exc_page_fault+0x3b9/0x650 [ 89.015926][ T7427] asm_exc_page_fault+0x26/0x30 [ 89.020776][ T7427] RIP: 0033:0x7f51f3a3f564 [ 89.025287][ T7427] Code: 00 69 3d 53 b1 de 00 e8 03 00 00 48 8d 1d 14 9a 2b 00 e8 df b5 12 00 eb 11 0f 1f 44 00 00 48 81 c3 d8 00 00 00 48 39 dd 74 bc <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df e8 87 ee ff ff eb [ 89.044885][ T7427] RSP: 002b:00007ffc08536780 EFLAGS: 00010206 [ 89.051029][ T7427] RAX: 0000000000000000 RBX: 00007f51f3cf8f60 RCX: 0000000000000000 [ 89.058989][ T7427] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000055555d1f7808 [ 89.066944][ T7427] RBP: 00007f51f3cfaa60 R08: 0000000000000000 R09: 7fffffffffffffff [ 89.074909][ T7427] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000015be4 [ 89.082962][ T7427] R13: 0000000000000032 R14: 00007f51f3cfaa60 R15: 00007f51f3cf9038 [ 89.090914][ T7427] [ 89.094134][ T7427] memory: usage 307200kB, limit 307200kB, failcnt 5741 [ 89.101025][ T7427] memory+swap: usage 307496kB, limit 9007199254740988kB, failcnt 0 [ 89.109071][ T7427] kmem: usage 307176kB, limit 9007199254740988kB, failcnt 0 [ 89.116352][ T7427] Memory cgroup stats for /syz0: [ 89.116460][ T7427] cache 0 [ 89.124326][ T7427] rss 12288 [ 89.127478][ T7427] shmem 0 [ 89.130463][ T7427] mapped_file 0 [ 89.133893][ T7427] dirty 0 [ 89.136825][ T7427] writeback 4096 [ 89.140373][ T7427] workingset_refault_anon 551 [ 89.145033][ T7427] workingset_refault_file 8041 [ 89.149861][ T7427] swap 303104 [ 89.153118][ T7427] swapcached 24576 [ 89.156884][ T7427] pgpgin 188257 [ 89.160323][ T7427] pgpgout 188251 [ 89.163847][ T7427] pgfault 74907 [ 89.167352][ T7427] pgmajfault 376 [ 89.170871][ T7427] inactive_anon 4096 [ 89.174739][ T7427] active_anon 0 [ 89.178191][ T7427] inactive_file 0 [ 89.181858][ T7427] active_file 0 [ 89.185293][ T7427] unevictable 0 [ 89.188798][ T7427] hierarchical_memory_limit 314572800 [ 89.194154][ T7427] hierarchical_memsw_limit 9223372036854771712 [ 89.200342][ T7427] total_cache 0 [ 89.203776][ T7427] total_rss 12288 [ 89.207455][ T7427] total_shmem 0 [ 89.210942][ T7427] total_mapped_file 0 [ 89.214901][ T7427] total_dirty 0 [ 89.218366][ T7427] total_writeback 4096 [ 89.222473][ T7427] total_workingset_refault_anon 551 [ 89.227670][ T7427] total_workingset_refault_file 8041 [ 89.232944][ T7427] total_swap 303104 [ 89.236789][ T7427] total_swapcached 24576 [ 89.241033][ T7427] total_pgpgin 188257 [ 89.245042][ T7427] total_pgpgout 188251 [ 89.249110][ T7427] total_pgfault 74907 [ 89.253081][ T7427] total_pgmajfault 376 [ 89.257149][ T7427] total_inactive_anon 4096 [ 89.261548][ T7427] total_active_anon 0 [ 89.265516][ T7427] total_inactive_file 0 [ 89.269752][ T7427] total_active_file 0 [ 89.273811][ T7427] total_unevictable 0 [ 89.277883][ T7427] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.1220,pid=7427,uid=0 [ 89.292832][ T7427] Memory cgroup out of memory: Killed process 7427 (syz.0.1220) total-vm:80752kB, anon-rss:448kB, file-rss:9940kB, shmem-rss:0kB, UID:0 pgtables:108kB oom_score_adj:1000 [ 92.029082][ T7464] 9pnet_fd: Insufficient options for proto=fd [ 92.043798][ T7459] macvlan1: entered allmulticast mode [ 92.049265][ T7459] veth1_vlan: entered allmulticast mode [ 92.064209][ T7474] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1235'. [ 92.094491][ T7478] loop1: detected capacity change from 0 to 1024 [ 92.102029][ T7478] EXT4-fs: Ignoring removed orlov option [ 92.108224][ T7478] EXT4-fs: test_dummy_encryption option not supported [ 92.177698][ T7488] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1241'. [ 92.692512][ T7485] syz.4.1241 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 92.703546][ T7485] CPU: 1 PID: 7485 Comm: syz.4.1241 Not tainted 6.10.0-rc6-syzkaller-00067-g8a9c6c40432e #0 [ 92.713656][ T7485] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 92.723757][ T7485] Call Trace: [ 92.727026][ T7485] [ 92.729967][ T7485] dump_stack_lvl+0xf2/0x150 [ 92.734718][ T7485] dump_stack+0x15/0x20 [ 92.738937][ T7485] dump_header+0x83/0x2d0 [ 92.743245][ T7485] oom_kill_process+0x33e/0x4c0 [ 92.748201][ T7485] out_of_memory+0x9af/0xbe0 [ 92.752779][ T7485] mem_cgroup_out_of_memory+0x13e/0x190 [ 92.758368][ T7485] try_charge_memcg+0x745/0xcd0 [ 92.763229][ T7485] ? radix_tree_lookup+0xf9/0x150 [ 92.768253][ T7485] mem_cgroup_swapin_charge_folio+0x107/0x1a0 [ 92.774629][ T7485] __read_swap_cache_async+0x2b9/0x520 [ 92.780179][ T7485] swap_cluster_readahead+0x276/0x3f0 [ 92.785549][ T7485] swapin_readahead+0xe2/0x7a0 [ 92.790313][ T7485] ? __filemap_get_folio+0x420/0x5b0 [ 92.795608][ T7485] ? swap_cache_get_folio+0x6e/0x210 [ 92.801032][ T7485] do_swap_page+0x3bc/0x1840 [ 92.805689][ T7485] ? cgroup_rstat_updated+0x99/0x550 [ 92.811052][ T7485] ? __rcu_read_lock+0x36/0x50 [ 92.815820][ T7485] handle_mm_fault+0x809/0x2a80 [ 92.820664][ T7485] ? mas_walk+0x204/0x320 [ 92.824977][ T7485] exc_page_fault+0x3b9/0x650 [ 92.829787][ T7485] asm_exc_page_fault+0x26/0x30 [ 92.834664][ T7485] RIP: 0033:0x7f5e46e5c564 [ 92.839142][ T7485] Code: 00 69 3d 53 b1 de 00 e8 03 00 00 48 8d 1d 14 9a 2b 00 e8 df b5 12 00 eb 11 0f 1f 44 00 00 48 81 c3 d8 00 00 00 48 39 dd 74 bc <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df e8 87 ee ff ff eb [ 92.858781][ T7485] RSP: 002b:00007ffcc44c8540 EFLAGS: 00010202 [ 92.864823][ T7485] RAX: 0000000000000000 RBX: 00007f5e47115f60 RCX: 0000000000000000 [ 92.872813][ T7485] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000055558b47f808 [ 92.880892][ T7485] RBP: 00007f5e47117a60 R08: 0000000000000000 R09: 7fffffffffffffff [ 92.888862][ T7485] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000016b0c [ 92.896823][ T7485] R13: 0000000000000032 R14: 00007f5e47117a60 R15: 00007f5e47116038 [ 92.904821][ T7485] [ 92.907949][ T7485] memory: usage 307200kB, limit 307200kB, failcnt 669 [ 92.914697][ T7485] memory+swap: usage 307580kB, limit 9007199254740988kB, failcnt 0 [ 92.922573][ T7485] kmem: usage 307200kB, limit 9007199254740988kB, failcnt 0 [ 92.929841][ T7485] Memory cgroup stats for /syz4: [ 92.929956][ T7485] cache 0 [ 92.937921][ T7485] rss 24576 [ 92.941011][ T7485] shmem 0 [ 92.943935][ T7485] mapped_file 0 [ 92.947438][ T7485] dirty 0 [ 92.950452][ T7485] writeback 0 [ 92.953795][ T7485] workingset_refault_anon 71 [ 92.958378][ T7485] workingset_refault_file 522 [ 92.963041][ T7485] swap 364544 [ 92.966314][ T7485] swapcached 24576 [ 92.970051][ T7485] pgpgin 57798 [ 92.973409][ T7485] pgpgout 57792 [ 92.976866][ T7485] pgfault 44948 [ 92.980318][ T7485] pgmajfault 59 [ 92.983816][ T7485] inactive_anon 8192 [ 92.987715][ T7485] active_anon 0 [ 92.991157][ T7485] inactive_file 0 [ 92.994785][ T7485] active_file 0 [ 92.998242][ T7485] unevictable 0 [ 93.001732][ T7485] hierarchical_memory_limit 314572800 [ 93.007196][ T7485] hierarchical_memsw_limit 9223372036854771712 [ 93.013338][ T7485] total_cache 0 [ 93.016803][ T7485] total_rss 24576 [ 93.020425][ T7485] total_shmem 0 [ 93.023870][ T7485] total_mapped_file 0 [ 93.027941][ T7485] total_dirty 0 [ 93.031450][ T7485] total_writeback 0 [ 93.035399][ T7485] total_workingset_refault_anon 71 [ 93.040547][ T7485] total_workingset_refault_file 522 [ 93.045745][ T7485] total_swap 364544 [ 93.049534][ T7485] total_swapcached 24576 [ 93.053752][ T7485] total_pgpgin 57798 [ 93.057630][ T7485] total_pgpgout 57792 [ 93.061589][ T7485] total_pgfault 44948 [ 93.065566][ T7485] total_pgmajfault 59 [ 93.069535][ T7485] total_inactive_anon 8192 [ 93.073986][ T7485] total_active_anon 0 [ 93.077968][ T7485] total_inactive_file 0 [ 93.082101][ T7485] total_active_file 0 [ 93.086086][ T7485] total_unevictable 0 [ 93.090050][ T7485] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.1241,pid=7485,uid=0 [ 93.104870][ T7485] Memory cgroup out of memory: Killed process 7485 (syz.4.1241) total-vm:80752kB, anon-rss:560kB, file-rss:9936kB, shmem-rss:0kB, UID:0 pgtables:108kB oom_score_adj:1000 [ 96.168092][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port [::1]:20002. Sending cookies. [ 96.225215][ T7509] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1248'. [ 96.238867][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 96.238880][ T29] audit: type=1400 audit(1720058355.990:719): avc: denied { ioctl } for pid=7508 comm="syz.4.1249" path="socket:[20486]" dev="sockfs" ino=20486 ioctlcmd=0x89ec scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 96.283215][ T7514] loop3: detected capacity change from 0 to 1024 [ 96.298254][ T7514] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 96.349130][ T7525] loop4: detected capacity change from 0 to 512 [ 96.355643][ T7525] EXT4-fs: Ignoring removed i_version option [ 96.362108][ T7525] EXT4-fs: Ignoring removed oldalloc option [ 96.378336][ T7527] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1253'. [ 96.426046][ T7514] loop3: detected capacity change from 0 to 8192 [ 96.433527][ T7525] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 96.446081][ T7525] ext4 filesystem being mounted at /192/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 96.461047][ T7525] netlink: 144 bytes leftover after parsing attributes in process `syz.4.1254'. [ 96.470624][ T7514] loop3: p1 p2[DM] p4 [ 96.474763][ T7514] loop3: p1 size 196608 extends beyond EOD, truncated [ 96.488232][ T7514] loop3: p2 size 150994946 extends beyond EOD, truncated [ 96.503458][ T7514] loop3: p4 size 50331648 extends beyond EOD, truncated [ 96.530121][ T7514] FAULT_INJECTION: forcing a failure. [ 96.530121][ T7514] name failslab, interval 1, probability 0, space 0, times 0 [ 96.542903][ T7514] CPU: 1 PID: 7514 Comm: syz.3.1250 Not tainted 6.10.0-rc6-syzkaller-00067-g8a9c6c40432e #0 [ 96.552972][ T7514] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 96.563015][ T7514] Call Trace: [ 96.566360][ T7514] [ 96.569276][ T7514] dump_stack_lvl+0xf2/0x150 [ 96.573995][ T7514] dump_stack+0x15/0x20 [ 96.578308][ T7514] should_fail_ex+0x229/0x230 [ 96.583067][ T7514] ? vmemdup_user+0x42/0x1b0 [ 96.587657][ T7514] __should_failslab+0x92/0xa0 [ 96.592420][ T7514] should_failslab+0x9/0x20 [ 96.597016][ T7514] __kmalloc_node_noprof+0xa8/0x380 [ 96.602262][ T7514] vmemdup_user+0x42/0x1b0 [ 96.606681][ T7514] setxattr+0x122/0x230 [ 96.610851][ T7514] path_setxattr+0xf5/0x1a0 [ 96.615393][ T7514] __x64_sys_setxattr+0x6d/0x80 [ 96.620241][ T7514] x64_sys_call+0x2957/0x2d70 [ 96.624924][ T7514] do_syscall_64+0xc9/0x1c0 [ 96.629435][ T7514] ? clear_bhb_loop+0x55/0xb0 [ 96.634183][ T7514] ? clear_bhb_loop+0x55/0xb0 [ 96.638913][ T7514] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.644803][ T7514] RIP: 0033:0x7f2bbd934bd9 [ 96.649215][ T7514] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 96.668817][ T7514] RSP: 002b:00007f2bbcbb6048 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc [ 96.677245][ T7514] RAX: ffffffffffffffda RBX: 00007f2bbdac2f60 RCX: 00007f2bbd934bd9 [ 96.685206][ T7514] RDX: 0000000020000280 RSI: 00000000200002c0 RDI: 00000000200001c0 [ 96.693170][ T7514] RBP: 00007f2bbcbb60a0 R08: 0000000000000003 R09: 0000000000000000 [ 96.701131][ T7514] R10: 0000000000000025 R11: 0000000000000246 R12: 0000000000000001 [ 96.709091][ T7514] R13: 000000000000000b R14: 00007f2bbdac2f60 R15: 00007fff5f00ecc8 [ 96.717066][ T7514] [ 96.753325][ T4247] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.021689][ T7560] loop4: detected capacity change from 0 to 512 [ 97.044127][ T7560] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 97.108865][ T7560] EXT4-fs (loop4): warning: checktime reached, running e2fsck is recommended [ 97.119067][ T7560] EXT4-fs error (device loop4): ext4_orphan_get:1420: comm syz.4.1266: bad orphan inode 15 [ 97.152848][ T7560] ext4_test_bit(bit=14, block=2) = 0 [ 97.172408][ T7560] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 97.229968][ T7560] ext2 filesystem being mounted at /199/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 97.242191][ T7569] netlink: 'syz.3.1269': attribute type 2 has an invalid length. [ 97.308408][ T7571] loop2: detected capacity change from 0 to 2048 [ 97.315410][ T29] audit: type=1326 audit(1720058357.060:720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7572 comm="syz.3.1271" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2bbd934bd9 code=0x0 [ 97.341921][ T29] audit: type=1400 audit(1720058357.100:721): avc: denied { setattr } for pid=7559 comm="syz.4.1266" path="/199/file0" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 97.375010][ T7580] syz_tun: entered promiscuous mode [ 97.380284][ T7580] vlan2: entered promiscuous mode [ 97.386158][ T4247] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.395349][ T7580] syz_tun: left promiscuous mode [ 97.396471][ T7571] loop2: p1 < > p2 p3 < p5 > p4 [ 97.405289][ T7571] loop2: partition table partially beyond EOD, truncated [ 97.415266][ T7571] loop2: p1 start 4278190080 is beyond EOD, truncated [ 97.422167][ T7571] loop2: p2 start 16908800 is beyond EOD, truncated [ 97.432071][ T7571] loop2: p4 start 11326 is beyond EOD, truncated [ 97.438519][ T7571] loop2: p5 start 16908800 is beyond EOD, truncated [ 97.449464][ T29] audit: type=1400 audit(1720058357.200:722): avc: denied { bind } for pid=7570 comm="syz.2.1270" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 97.497372][ T29] audit: type=1400 audit(1720058357.200:723): avc: denied { name_bind } for pid=7570 comm="syz.2.1270" src=97 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 97.517237][ T7588] loop4: detected capacity change from 0 to 512 [ 97.517800][ T29] audit: type=1400 audit(1720058357.200:724): avc: denied { node_bind } for pid=7570 comm="syz.2.1270" src=97 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 97.526672][ T7586] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5127 sclass=netlink_route_socket pid=7586 comm=syz.3.1275 [ 97.560004][ T7588] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 97.590102][ T29] audit: type=1400 audit(1720058357.330:725): avc: denied { getopt } for pid=7596 comm="syz.0.1280" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 97.612932][ T7588] EXT4-fs (loop4): 1 truncate cleaned up [ 97.627059][ T7588] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 97.642439][ T7604] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 97.649664][ T7604] IPv6: NLM_F_CREATE should be set when creating new route [ 97.676032][ T4247] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.695227][ T7601] syzkaller0: entered promiscuous mode [ 97.701180][ T7601] syzkaller0: entered allmulticast mode [ 97.711764][ T29] audit: type=1400 audit(1720058357.460:726): avc: denied { relabelfrom } for pid=7600 comm="syz.0.1282" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 97.732161][ T29] audit: type=1400 audit(1720058357.460:727): avc: denied { relabelto } for pid=7600 comm="syz.0.1282" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 97.795527][ T7611] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1287'. [ 97.800368][ T7618] loop4: detected capacity change from 0 to 1024 [ 97.811861][ T29] audit: type=1400 audit(1720058357.570:728): avc: denied { connect } for pid=7610 comm="syz.1.1287" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 97.812127][ T7611] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1547 sclass=netlink_route_socket pid=7611 comm=syz.1.1287 [ 97.846516][ T7618] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 97.874572][ T7624] loop1: detected capacity change from 0 to 2048 [ 97.889499][ T1238] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 97.904733][ T1238] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 4 with error 28 [ 97.916968][ T1238] EXT4-fs (loop4): This should not happen!! Data will be lost [ 97.916968][ T1238] [ 97.926595][ T1238] EXT4-fs (loop4): Total free blocks count 0 [ 97.932656][ T1238] EXT4-fs (loop4): Free/Dirty block details [ 97.938603][ T1238] EXT4-fs (loop4): free_blocks=68451041280 [ 97.944476][ T1238] EXT4-fs (loop4): dirty_blocks=16 [ 97.949608][ T1238] EXT4-fs (loop4): Block reservation details [ 97.955583][ T1238] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 97.972408][ T4247] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.987934][ T7624] loop1: p1 < > p4 [ 97.992389][ T7624] loop1: p4 size 8388608 extends beyond EOD, truncated [ 98.030779][ T7624] loop1: detected capacity change from 0 to 512 [ 98.040728][ T7628] loop4: detected capacity change from 0 to 256 [ 98.193501][ T7642] loop4: detected capacity change from 0 to 1024 [ 98.210913][ T7648] FAULT_INJECTION: forcing a failure. [ 98.210913][ T7648] name failslab, interval 1, probability 0, space 0, times 0 [ 98.223549][ T7648] CPU: 0 PID: 7648 Comm: syz.1.1298 Not tainted 6.10.0-rc6-syzkaller-00067-g8a9c6c40432e #0 [ 98.233613][ T7648] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 98.243736][ T7648] Call Trace: [ 98.247015][ T7648] [ 98.249937][ T7648] dump_stack_lvl+0xf2/0x150 [ 98.254525][ T7648] dump_stack+0x15/0x20 [ 98.258711][ T7648] should_fail_ex+0x229/0x230 [ 98.263398][ T7648] ? skb_clone+0x154/0x1f0 [ 98.267853][ T7648] __should_failslab+0x92/0xa0 [ 98.272611][ T7648] should_failslab+0x9/0x20 [ 98.277113][ T7648] kmem_cache_alloc_noprof+0x4c/0x290 [ 98.282510][ T7648] skb_clone+0x154/0x1f0 [ 98.286759][ T7648] dev_queue_xmit_nit+0x149/0x620 [ 98.291826][ T7648] ? xa_load+0xb9/0xe0 [ 98.295905][ T7648] dev_hard_start_xmit+0xcc/0x3f0 [ 98.300925][ T7648] ? validate_xmit_skb+0x658/0x8c0 [ 98.306078][ T7648] __dev_queue_xmit+0xf83/0x1e50 [ 98.311093][ T7648] ? should_fail_ex+0xd7/0x230 [ 98.315856][ T7648] ? __dev_queue_xmit+0x161/0x1e50 [ 98.320967][ T7648] ? __skb_clone+0x2d0/0x2f0 [ 98.325578][ T7648] __netlink_deliver_tap+0x39f/0x4c0 [ 98.328689][ T7642] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 98.330867][ T7648] netlink_unicast+0x63b/0x660 [ 98.347613][ T7648] netlink_sendmsg+0x5ca/0x6e0 [ 98.352437][ T7648] ? __pfx_netlink_sendmsg+0x10/0x10 [ 98.357749][ T7648] __sock_sendmsg+0x140/0x180 [ 98.362749][ T7648] ____sys_sendmsg+0x312/0x410 [ 98.367519][ T7648] __sys_sendmsg+0x1e9/0x280 [ 98.372196][ T7648] __x64_sys_sendmsg+0x46/0x50 [ 98.376968][ T7648] x64_sys_call+0xb25/0x2d70 [ 98.381567][ T7648] do_syscall_64+0xc9/0x1c0 [ 98.386095][ T7648] ? clear_bhb_loop+0x55/0xb0 [ 98.390775][ T7648] ? clear_bhb_loop+0x55/0xb0 [ 98.395451][ T7648] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.401353][ T7648] RIP: 0033:0x7fcd22b65bd9 [ 98.405770][ T7648] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 98.425477][ T7648] RSP: 002b:00007fcd21de7048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 98.433889][ T7648] RAX: ffffffffffffffda RBX: 00007fcd22cf3f60 RCX: 00007fcd22b65bd9 [ 98.441862][ T7648] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000004 [ 98.449911][ T7648] RBP: 00007fcd21de70a0 R08: 0000000000000000 R09: 0000000000000000 [ 98.457881][ T7648] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 98.465910][ T7648] R13: 000000000000000b R14: 00007fcd22cf3f60 R15: 00007ffdd7bafb18 [ 98.473890][ T7648] [ 98.498937][ T7656] bridge0: port 3(batadv0) entered blocking state [ 98.505454][ T7656] bridge0: port 3(batadv0) entered disabled state [ 98.512644][ T7656] batadv0: entered allmulticast mode [ 98.575668][ T7665] netlink: 'syz.2.1305': attribute type 10 has an invalid length. [ 98.596599][ T7665] team0: Failed to send options change via netlink (err -105) [ 98.604126][ T7665] team0: Port device netdevsim1 added [ 98.622350][ T7663] loop1: detected capacity change from 0 to 2048 [ 98.623737][ T7660] loop3: detected capacity change from 0 to 1024 [ 98.636682][ T7660] EXT4-fs: Ignoring removed orlov option [ 98.643220][ T7660] EXT4-fs (loop3): unsupported descriptor size 0 [ 98.665141][ T7673] loop2: detected capacity change from 0 to 1024 [ 98.671984][ T7673] EXT4-fs: Ignoring removed nobh option [ 98.677579][ T7673] EXT4-fs: Ignoring removed orlov option [ 98.704143][ T7673] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.760503][ T7685] netlink: 'syz.1.1307': attribute type 10 has an invalid length. [ 98.785145][ T5823] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.824240][ T7685] bond0: (slave netdevsim1): Releasing backup interface [ 98.850966][ T7685] team0: Failed to send port change of device netdevsim1 via netlink (err -105) [ 98.860107][ T7685] team0: Failed to send options change via netlink (err -105) [ 98.860634][ T4247] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.868194][ T7685] team0: Port device netdevsim1 added [ 98.883345][ T7691] netlink: 'syz.1.1307': attribute type 10 has an invalid length. [ 98.915562][ T7698] x_tables: duplicate underflow at hook 2 [ 98.949075][ T7713] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1319'. [ 98.966046][ T7705] bridge0: port 3(batadv0) entered blocking state [ 98.972557][ T7705] bridge0: port 3(batadv0) entered disabled state [ 98.979405][ T7705] batadv0: entered allmulticast mode [ 98.994216][ T7705] batadv0: entered promiscuous mode [ 99.002015][ T7705] bridge0: port 3(batadv0) entered blocking state [ 99.008476][ T7705] bridge0: port 3(batadv0) entered forwarding state [ 99.074560][ T3589] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 99.083787][ T3589] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 99.096629][ T3589] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 99.105864][ T3589] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 99.277801][ T7731] vhci_hcd: invalid port number 211 [ 99.283028][ T7731] vhci_hcd: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub [ 99.366343][ T7743] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1326'. [ 99.577216][ T7754] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1330'. [ 100.045357][ T7766] netlink: 'syz.2.1335': attribute type 21 has an invalid length. [ 100.053236][ T7766] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1335'. [ 100.058623][ T7762] loop4: detected capacity change from 0 to 8192 [ 100.069186][ T7762] FAT-fs (loop4): Unrecognized mount option "/dev/null" or missing value [ 100.144544][ T7773] netlink: 'syz.4.1338': attribute type 29 has an invalid length. [ 100.152910][ T7773] netlink: 'syz.4.1338': attribute type 29 has an invalid length. [ 100.161739][ T7773] netlink: 'syz.4.1338': attribute type 29 has an invalid length. [ 100.170074][ T7773] netlink: 'syz.4.1338': attribute type 29 has an invalid length. [ 100.178525][ T7773] netlink: 'syz.4.1338': attribute type 29 has an invalid length. [ 100.269546][ T7782] loop4: detected capacity change from 0 to 2048 [ 100.297203][ T7782] loop4: p2 < > [ 100.340536][ T7782] loop4: detected capacity change from 0 to 1024 [ 100.400155][ T7791] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1345'. [ 100.409161][ T7791] tc_dump_action: action bad kind [ 100.615381][ C0] vcan0: j1939_tp_rxtimer: 0xffff888113162800: rx timeout, send abort [ 100.638879][ T7814] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1353'. [ 100.651974][ T7814] 8021q: adding VLAN 0 to HW filter on device team1 [ 100.662110][ T7814] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1353'. [ 100.725888][ T7833] dccp_invalid_packet: P.type (CLOSEREQ) not Data || [Data]Ack, while P.X == 0 [ 100.817708][ T7839] loop4: detected capacity change from 0 to 512 [ 100.824183][ T7839] ext4: Unknown parameter 'dont_measure' [ 100.873981][ T7845] FAULT_INJECTION: forcing a failure. [ 100.873981][ T7845] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 100.887520][ T7845] CPU: 0 PID: 7845 Comm: syz.4.1361 Not tainted 6.10.0-rc6-syzkaller-00067-g8a9c6c40432e #0 [ 100.897585][ T7845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 100.907633][ T7845] Call Trace: [ 100.910928][ T7845] [ 100.913858][ T7845] dump_stack_lvl+0xf2/0x150 [ 100.918466][ T7845] dump_stack+0x15/0x20 [ 100.922662][ T7845] should_fail_ex+0x229/0x230 [ 100.927360][ T7845] should_fail+0xb/0x10 [ 100.931541][ T7845] should_fail_usercopy+0x1a/0x20 [ 100.936586][ T7845] _copy_from_iter+0xd3/0xb00 [ 100.941283][ T7845] ? __alloc_skb+0x1ad/0x300 [ 100.945926][ T7845] ? kmalloc_reserve+0x16e/0x190 [ 100.950923][ T7845] ? __build_skb_around+0x196/0x1f0 [ 100.956152][ T7845] ? __alloc_skb+0x217/0x300 [ 100.960764][ T7845] ? __virt_addr_valid+0x1dd/0x240 [ 100.965884][ T7845] ? __check_object_size+0x35b/0x510 [ 100.971207][ T7845] netlink_sendmsg+0x460/0x6e0 [ 100.976047][ T7845] ? __pfx_netlink_sendmsg+0x10/0x10 [ 100.981347][ T7845] __sock_sendmsg+0x140/0x180 [ 100.986042][ T7845] ____sys_sendmsg+0x312/0x410 [ 100.990894][ T7845] __sys_sendmsg+0x1e9/0x280 [ 100.995497][ T7845] __x64_sys_sendmsg+0x46/0x50 [ 101.000273][ T7845] x64_sys_call+0xb25/0x2d70 [ 101.004894][ T7845] do_syscall_64+0xc9/0x1c0 [ 101.009441][ T7845] ? clear_bhb_loop+0x55/0xb0 [ 101.014128][ T7845] ? clear_bhb_loop+0x55/0xb0 [ 101.018820][ T7845] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.024724][ T7845] RIP: 0033:0x7f5e46f87bd9 [ 101.029140][ T7845] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 101.048900][ T7845] RSP: 002b:00007f5e46209048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 101.057348][ T7845] RAX: ffffffffffffffda RBX: 00007f5e47115f60 RCX: 00007f5e46f87bd9 [ 101.065341][ T7845] RDX: 0000000000000000 RSI: 0000000020000180 RDI: 0000000000000003 [ 101.073297][ T7845] RBP: 00007f5e462090a0 R08: 0000000000000000 R09: 0000000000000000 [ 101.081296][ T7845] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 101.089267][ T7845] R13: 000000000000000b R14: 00007f5e47115f60 R15: 00007ffcc44c8458 [ 101.097228][ T7845] [ 101.123719][ C0] vcan0: j1939_tp_rxtimer: 0xffff888113162800: abort rx timeout. Force session deactivation [ 101.151160][ T7853] lo: Caught tx_queue_len zero misconfig [ 101.244614][ T7861] loop3: detected capacity change from 0 to 512 [ 101.254728][ T7861] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 101.263719][ T7861] EXT4-fs (loop3): invalid journal inode [ 101.269610][ T7861] EXT4-fs (loop3): can't get journal size [ 101.285111][ T7861] EXT4-fs (loop3): 1 truncate cleaned up [ 101.291284][ T7861] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.310276][ T29] kauditd_printk_skb: 17 callbacks suppressed [ 101.310288][ T29] audit: type=1400 audit(1720058873.065:746): avc: denied { create } for pid=7860 comm="syz.3.1366" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 101.349761][ T7870] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1368'. [ 101.366881][ T29] audit: type=1400 audit(1720058873.075:747): avc: denied { watch } for pid=7868 comm="syz.1.1369" path="/205/bus" dev="tmpfs" ino=1134 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 101.389172][ T29] audit: type=1400 audit(1720058873.075:748): avc: denied { mounton } for pid=7860 comm="syz.3.1366" path="/193/file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop3" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 101.463822][ T7877] FAULT_INJECTION: forcing a failure. [ 101.463822][ T7877] name failslab, interval 1, probability 0, space 0, times 0 [ 101.476540][ T7877] CPU: 1 PID: 7877 Comm: syz.0.1372 Not tainted 6.10.0-rc6-syzkaller-00067-g8a9c6c40432e #0 [ 101.486611][ T7877] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 101.496696][ T7877] Call Trace: [ 101.499984][ T7877] [ 101.502911][ T7877] dump_stack_lvl+0xf2/0x150 [ 101.507504][ T7877] dump_stack+0x15/0x20 [ 101.511655][ T7877] should_fail_ex+0x229/0x230 [ 101.516339][ T7877] ? vlan_dev_set_egress_priority+0x106/0x1f0 [ 101.522415][ T7877] __should_failslab+0x92/0xa0 [ 101.526785][ T7873] loop3: detected capacity change from 512 to 64 [ 101.527161][ T7877] should_failslab+0x9/0x20 [ 101.538098][ T7877] kmalloc_trace_noprof+0x4b/0x2a0 [ 101.543308][ T7877] vlan_dev_set_egress_priority+0x106/0x1f0 [ 101.549211][ T7877] vlan_changelink+0x254/0x2d0 [ 101.553986][ T7877] vlan_newlink+0x2c0/0x320 [ 101.558518][ T7877] ? __pfx_vlan_newlink+0x10/0x10 [ 101.563644][ T7877] rtnl_newlink+0xefd/0x1690 [ 101.568237][ T7877] ? rtnl_newlink+0x301/0x1690 [ 101.572999][ T7877] ? __pfx_rtnl_newlink+0x10/0x10 [ 101.578048][ T7877] rtnetlink_rcv_msg+0x85e/0x910 [ 101.583095][ T7877] ? __rcu_read_unlock+0x34/0x70 [ 101.588087][ T7877] ? sock_def_readable+0xae/0x1b0 [ 101.593142][ T7877] ? packet_rcv+0x8d1/0x940 [ 101.597653][ T7877] ? skb_release_data+0x583/0x5a0 [ 101.602674][ T7877] ? kmem_cache_free+0xd8/0x280 [ 101.607665][ T7877] ? nlmon_xmit+0x51/0x60 [ 101.612005][ T7877] ? __kfree_skb+0x102/0x150 [ 101.616589][ T7877] ? consume_skb+0x57/0x180 [ 101.617485][ T7861] EXT4-fs warning (device loop3): ext4_dx_find_entry:1794: inode #2: lblock 1: comm syz.3.1366: error -12 reading directory block [ 101.621077][ T7877] ? nlmon_xmit+0x51/0x60 [ 101.638837][ T7877] ? dev_hard_start_xmit+0x3c1/0x3f0 [ 101.644206][ T7877] ? __dev_queue_xmit+0xb21/0x1e50 [ 101.649368][ T7877] ? ref_tracker_free+0x3a5/0x410 [ 101.654430][ T7877] netlink_rcv_skb+0x12c/0x230 [ 101.659222][ T7877] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 101.662504][ T4510] EXT4-fs warning (device loop3): htree_dirblock_to_tree:1082: inode #2: lblock 1: comm syz-executor: error -12 reading directory block [ 101.664742][ T7877] rtnetlink_rcv+0x1c/0x30 [ 101.683039][ T7877] netlink_unicast+0x58d/0x660 [ 101.687808][ T7877] netlink_sendmsg+0x5ca/0x6e0 [ 101.692582][ T7877] ? __pfx_netlink_sendmsg+0x10/0x10 [ 101.697872][ T7877] __sock_sendmsg+0x140/0x180 [ 101.702554][ T7877] ____sys_sendmsg+0x312/0x410 [ 101.707368][ T7877] __sys_sendmsg+0x1e9/0x280 [ 101.712046][ T7877] __x64_sys_sendmsg+0x46/0x50 [ 101.716880][ T7877] x64_sys_call+0xb25/0x2d70 [ 101.721470][ T7877] do_syscall_64+0xc9/0x1c0 [ 101.725981][ T7877] ? clear_bhb_loop+0x55/0xb0 [ 101.730661][ T7877] ? clear_bhb_loop+0x55/0xb0 [ 101.735350][ T7877] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.741250][ T7877] RIP: 0033:0x7f51f3b6abd9 [ 101.745742][ T7877] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 101.765520][ T7877] RSP: 002b:00007f51f2dec048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 101.773952][ T7877] RAX: ffffffffffffffda RBX: 00007f51f3cf8f60 RCX: 00007f51f3b6abd9 [ 101.781914][ T7877] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000004 [ 101.790001][ T7877] RBP: 00007f51f2dec0a0 R08: 0000000000000000 R09: 0000000000000000 [ 101.797966][ T7877] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 101.805944][ T7877] R13: 000000000000000b R14: 00007f51f3cf8f60 R15: 00007ffc08536698 [ 101.813965][ T7877] [ 101.817339][ T7872] loop1: detected capacity change from 0 to 512 [ 101.819279][ T4510] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.823825][ T7872] EXT4-fs: Ignoring removed i_version option [ 101.838937][ T7872] EXT4-fs: Ignoring removed i_version option [ 101.882151][ T7879] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1374'. [ 101.937152][ T7883] netem: change failed [ 102.064712][ T3104] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.122833][ T3104] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.190904][ T3104] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.252995][ T3104] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.298937][ T7918] capability: warning: `syz.0.1387' uses 32-bit capabilities (legacy support in use) [ 102.340553][ T7902] lo speed is unknown, defaulting to 1000 [ 102.355416][ T3104] bridge_slave_1: left allmulticast mode [ 102.361096][ T3104] bridge_slave_1: left promiscuous mode [ 102.367240][ T3104] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.379165][ T7924] FAULT_INJECTION: forcing a failure. [ 102.379165][ T7924] name failslab, interval 1, probability 0, space 0, times 0 [ 102.391782][ T7924] CPU: 1 PID: 7924 Comm: syz.2.1389 Not tainted 6.10.0-rc6-syzkaller-00067-g8a9c6c40432e #0 [ 102.401841][ T7924] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 102.411901][ T7924] Call Trace: [ 102.415173][ T7924] [ 102.418117][ T7924] dump_stack_lvl+0xf2/0x150 [ 102.422713][ T7924] dump_stack+0x15/0x20 [ 102.426874][ T7924] should_fail_ex+0x229/0x230 [ 102.431602][ T7924] ? vm_area_dup+0x98/0x130 [ 102.436157][ T7924] __should_failslab+0x92/0xa0 [ 102.440954][ T7924] should_failslab+0x9/0x20 [ 102.445510][ T7924] kmem_cache_alloc_noprof+0x4c/0x290 [ 102.450914][ T7924] vm_area_dup+0x98/0x130 [ 102.455301][ T7924] copy_mm+0x6a5/0x11d0 [ 102.459520][ T7924] copy_process+0xee1/0x1f90 [ 102.464117][ T7924] kernel_clone+0x16a/0x570 [ 102.468662][ T7924] __x64_sys_clone+0xe8/0x120 [ 102.473338][ T7924] x64_sys_call+0x23e7/0x2d70 [ 102.478021][ T7924] do_syscall_64+0xc9/0x1c0 [ 102.482592][ T7924] ? clear_bhb_loop+0x55/0xb0 [ 102.487275][ T7924] ? clear_bhb_loop+0x55/0xb0 [ 102.491967][ T7924] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.497859][ T7924] RIP: 0033:0x7fb60e2cbbd9 [ 102.502286][ T7924] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 102.521930][ T7924] RSP: 002b:00007fb60d54cff8 EFLAGS: 00000202 ORIG_RAX: 0000000000000038 [ 102.530381][ T7924] RAX: ffffffffffffffda RBX: 00007fb60e459f60 RCX: 00007fb60e2cbbd9 [ 102.538347][ T7924] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000209e8440 [ 102.546310][ T7924] RBP: 00007fb60d54d0a0 R08: 0000000000000000 R09: 0000000000000000 [ 102.554282][ T7924] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000002 [ 102.562279][ T7924] R13: 000000000000000b R14: 00007fb60e459f60 R15: 00007fff71b14b28 [ 102.570251][ T7924] [ 102.573778][ T3104] bridge_slave_0: left allmulticast mode [ 102.579936][ T3104] bridge_slave_0: left promiscuous mode [ 102.585646][ T3104] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.940532][ T3104] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 102.950835][ T3104] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 102.969462][ T3104] bond0 (unregistering): Released all slaves [ 103.094645][ T7973] loop1: detected capacity change from 0 to 512 [ 103.155607][ T7973] __nla_validate_parse: 4 callbacks suppressed [ 103.155619][ T7973] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1405'. [ 103.236584][ T3104] hsr_slave_0: left promiscuous mode [ 103.246573][ T3104] hsr_slave_1: left promiscuous mode [ 103.263168][ T3104] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 103.271069][ T3104] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 103.287206][ T3104] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 103.294758][ T3104] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 103.309450][ T3104] veth1_macvtap: left promiscuous mode [ 103.314968][ T3104] veth0_macvtap: left promiscuous mode [ 103.320466][ T3104] veth1_vlan: left promiscuous mode [ 103.325686][ T3104] veth0_vlan: left allmulticast mode [ 103.331019][ T3104] veth0_vlan: left promiscuous mode [ 103.344897][ T7973] loop1: detected capacity change from 0 to 8192 [ 103.532172][ T3104] team0 (unregistering): Port device team_slave_1 removed [ 103.543665][ T3104] team0 (unregistering): Port device team_slave_0 removed [ 103.604583][ T7975] tipc: Enabled bearer , priority 10 [ 103.613254][ T7902] chnl_net:caif_netlink_parms(): no params data found [ 103.728927][ T7902] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.736031][ T7902] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.779857][ T7902] bridge_slave_0: entered allmulticast mode [ 103.797229][ T7902] bridge_slave_0: entered promiscuous mode [ 103.817639][ T8005] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1412'. [ 103.826768][ T7902] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.830443][ T8010] loop2: detected capacity change from 0 to 512 [ 103.833800][ T7902] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.837316][ T7902] bridge_slave_1: entered allmulticast mode [ 103.843963][ T8010] EXT4-fs: Ignoring removed i_version option [ 103.851297][ T8002] loop1: detected capacity change from 0 to 8192 [ 103.853036][ T8010] EXT4-fs: Ignoring removed nobh option [ 103.865458][ T8010] EXT4-fs: quotafile must be on filesystem root [ 103.865713][ T29] audit: type=1400 audit(1720058875.615:749): avc: denied { ioctl } for pid=8011 comm="syz.0.1416" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=20434 ioctlcmd=0x660f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 103.878937][ T7902] bridge_slave_1: entered promiscuous mode [ 103.922385][ T7902] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 103.933384][ T7902] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 103.948313][ T8002] loop1: p1 p2 p4 < > [ 103.952443][ T8002] loop1: partition table partially beyond EOD, truncated [ 103.961298][ T8002] loop1: p1 size 108986237 extends beyond EOD, truncated [ 103.970219][ T8002] loop1: p2 start 65535 is beyond EOD, [ 103.970225][ T7902] team0: Port device team_slave_0 added [ 103.971046][ T7902] team0: Port device team_slave_1 added [ 103.975825][ T8002] truncated [ 103.982405][ T8013] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1414'. [ 103.986851][ T8002] loop1: p4 start 50331648 is beyond EOD, truncated [ 104.021922][ T3104] IPVS: stop unused estimator thread 0... [ 104.059517][ T7902] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 104.066465][ T7902] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.092902][ T7902] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 104.104094][ T7902] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 104.111112][ T7902] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.137503][ T7902] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 104.167035][ T7902] hsr_slave_0: entered promiscuous mode [ 104.173141][ T7902] hsr_slave_1: entered promiscuous mode [ 104.189534][ T8013] loop1: detected capacity change from 0 to 512 [ 104.196183][ T8013] EXT4-fs: Ignoring removed nomblk_io_submit option [ 104.209422][ T8013] EXT4-fs (loop1): write access unavailable, skipping orphan cleanup [ 104.218541][ T8013] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 104.232108][ T8002] EXT4-fs (loop1): Couldn't remount RDWR because of unprocessed orphan inode list. Please umount/remount instead [ 104.460765][ T8005] syz.4.1412 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 104.471238][ T7902] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 104.472238][ T8005] CPU: 0 PID: 8005 Comm: syz.4.1412 Not tainted 6.10.0-rc6-syzkaller-00067-g8a9c6c40432e #0 [ 104.488476][ T8005] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 104.498506][ T8005] Call Trace: [ 104.501797][ T8005] [ 104.504706][ T8005] dump_stack_lvl+0xf2/0x150 [ 104.509279][ T8005] dump_stack+0x15/0x20 [ 104.513448][ T8005] dump_header+0x83/0x2d0 [ 104.517794][ T8005] oom_kill_process+0x33e/0x4c0 [ 104.522627][ T8005] out_of_memory+0x9af/0xbe0 [ 104.527288][ T8005] mem_cgroup_out_of_memory+0x13e/0x190 [ 104.532853][ T8005] try_charge_memcg+0x745/0xcd0 [ 104.537709][ T8005] ? _raw_spin_unlock+0x26/0x50 [ 104.542567][ T8005] ? radix_tree_lookup+0xf9/0x150 [ 104.547605][ T8005] mem_cgroup_swapin_charge_folio+0x107/0x1a0 [ 104.553726][ T8005] __read_swap_cache_async+0x2b9/0x520 [ 104.559176][ T8005] swap_cluster_readahead+0x276/0x3f0 [ 104.564576][ T8005] swapin_readahead+0xe2/0x7a0 [ 104.569467][ T8005] ? __filemap_get_folio+0x420/0x5b0 [ 104.574810][ T8005] ? swap_cache_get_folio+0x6e/0x210 [ 104.580084][ T8005] do_swap_page+0x3bc/0x1840 [ 104.584766][ T8005] ? __rcu_read_lock+0x36/0x50 [ 104.589516][ T8005] handle_mm_fault+0x809/0x2a80 [ 104.594414][ T8005] exc_page_fault+0x296/0x650 [ 104.599070][ T8005] asm_exc_page_fault+0x26/0x30 [ 104.603908][ T8005] RIP: 0010:rep_stos_alternative+0x40/0x80 [ 104.609706][ T8005] Code: ff c7 48 ff c9 75 f6 c3 cc cc cc cc 48 89 07 48 83 c7 08 83 e9 08 74 ef 83 f9 08 73 ef eb de 66 2e 0f 1f 84 00 00 00 00 00 90 <48> 89 07 48 89 47 08 48 89 47 10 48 89 47 18 48 89 47 20 48 89 47 [ 104.629291][ T8005] RSP: 0018:ffffc90000f23ca0 EFLAGS: 00050246 [ 104.635336][ T8005] RAX: 0000000000000000 RBX: 00007f5e461e8044 RCX: 0000000000000040 [ 104.643289][ T8005] RDX: ffffc9000a10e000 RSI: 0000000000004a32 RDI: 00007f5e461e7f00 [ 104.651307][ T8005] RBP: 00007f5e461e8044 R08: ffffffff81082359 R09: 0000000000000000 [ 104.659341][ T8005] R10: 0001ffffffffffff R11: 0001c90000f23dc8 R12: 00007f5e461e7d00 [ 104.667319][ T8005] R13: 00007f5e461e7d00 R14: ffff888101b0c200 R15: ffff888101b0ced0 [ 104.675266][ T8005] ? copy_fpstate_to_sigframe+0x79/0x720 [ 104.680887][ T8005] copy_fpstate_to_sigframe+0xac/0x720 [ 104.686405][ T8005] ? common_hrtimer_rearm+0xa6/0xc0 [ 104.691631][ T8005] ? _raw_spin_unlock_irqrestore+0x2b/0x60 [ 104.697426][ T8005] ? posixtimer_rearm+0x16d/0x1a0 [ 104.702495][ T8005] ? dequeue_signal+0x29f/0x430 [ 104.707347][ T8005] ? fpu__alloc_mathframe+0x95/0xd0 [ 104.712584][ T8005] get_sigframe+0x295/0x350 [ 104.717101][ T8005] x64_setup_rt_frame+0xa7/0x570 [ 104.722017][ T8005] arch_do_signal_or_restart+0x287/0x4b0 [ 104.727632][ T8005] syscall_exit_to_user_mode+0x59/0x130 [ 104.733208][ T8005] do_syscall_64+0xd6/0x1c0 [ 104.737768][ T8005] ? clear_bhb_loop+0x55/0xb0 [ 104.742498][ T8005] ? clear_bhb_loop+0x55/0xb0 [ 104.747219][ T8005] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.753103][ T8005] RIP: 0033:0x7f5e46f87bd7 [ 104.757560][ T8005] Code: ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 [ 104.777156][ T8005] RSP: 002b:00007f5e461e80f8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 104.785590][ T8005] RAX: 00000000000000ca RBX: 00007f5e47116040 RCX: 00007f5e46f87bd9 [ 104.793634][ T8005] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f5e47116040 [ 104.801580][ T8005] RBP: 00007f5e47116038 R08: 00007f5e461e86c0 R09: 00007f5e461e86c0 [ 104.809560][ T8005] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f5e47116044 [ 104.817524][ T8005] R13: 000000000000006e R14: 00007ffcc44c8370 R15: 00007ffcc44c8458 [ 104.825476][ T8005] [ 104.829837][ T8005] memory: usage 307200kB, limit 307200kB, failcnt 1317 [ 104.830701][ T7902] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 104.836674][ T8005] memory+swap: usage 307552kB, limit 9007199254740988kB, failcnt 0 [ 104.836687][ T8005] kmem: usage 307172kB, limit 9007199254740988kB, failcnt 0 [ 104.836699][ T8005] Memory cgroup stats for /syz4: [ 104.860220][ T8005] cache 0 [ 104.862726][ T29] audit: type=1400 audit(1720058876.615:750): avc: denied { getopt } for pid=8018 comm="syz.0.1417" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 104.865132][ T8005] rss 28672 [ 104.865140][ T8005] shmem 0 [ 104.894798][ T8005] mapped_file 0 [ 104.898256][ T8005] dirty 0 [ 104.901167][ T8005] writeback 0 [ 104.904476][ T8005] workingset_refault_anon 111 [ 104.909138][ T8005] workingset_refault_file 669 [ 104.913791][ T8005] swap 360448 [ 104.918024][ T8005] swapcached 28672 [ 104.921906][ T8005] pgpgin 75125 [ 104.925366][ T8005] pgpgout 75118 [ 104.928827][ T8005] pgfault 64260 [ 104.932261][ T8005] pgmajfault 87 [ 104.935692][ T8005] inactive_anon 0 [ 104.939379][ T8005] active_anon 28672 [ 104.943178][ T8005] inactive_file 0 [ 104.947693][ T8005] active_file 0 [ 104.951127][ T8005] unevictable 0 [ 104.954557][ T8005] hierarchical_memory_limit 314572800 [ 104.959973][ T8005] hierarchical_memsw_limit 9223372036854771712 [ 104.966103][ T8005] total_cache 0 [ 104.969549][ T8005] total_rss 28672 [ 104.973152][ T8005] total_shmem 0 [ 104.976715][ T8005] total_mapped_file 0 [ 104.981351][ T8005] total_dirty 0 [ 104.984800][ T8005] total_writeback 0 [ 104.988597][ T8005] total_workingset_refault_anon 111 [ 104.993780][ T8005] total_workingset_refault_file 669 [ 104.998963][ T8005] total_swap 360448 [ 105.002818][ T8005] total_swapcached 28672 [ 105.007764][ T8005] total_pgpgin 75125 [ 105.011630][ T8005] total_pgpgout 75118 [ 105.015653][ T8005] total_pgfault 64260 [ 105.019628][ T8005] total_pgmajfault 87 [ 105.023643][ T8005] total_inactive_anon 0 [ 105.027796][ T8005] total_active_anon 28672 [ 105.032107][ T8005] total_inactive_file 0 [ 105.036244][ T8005] total_active_file 0 [ 105.040940][ T8005] total_unevictable 0 [ 105.044899][ T8005] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.1412,pid=7995,uid=0 [ 105.059810][ T8005] Memory cgroup out of memory: Killed process 7995 (syz.4.1412) total-vm:82800kB, anon-rss:452kB, file-rss:10116kB, shmem-rss:0kB, UID:0 pgtables:108kB oom_score_adj:1000 [ 105.079672][ T3937] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.090689][ T8024] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1418'. [ 105.101012][ T7902] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 105.114014][ T7902] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 105.195155][ T7902] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.212825][ T8032] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1422'. [ 105.229182][ T7902] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.247281][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.254354][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.284463][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.291539][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.378429][ T7902] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 105.388874][ T7902] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 105.692281][ T8053] loop4: detected capacity change from 0 to 512 [ 105.714937][ T7902] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 105.726445][ T8061] loop2: detected capacity change from 0 to 256 [ 105.813358][ T8053] EXT4-fs (loop4): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 105.861921][ T8053] Quota error (device loop4): v2_read_file_info: Free block number 58381 out of range (1, 6). [ 105.872304][ T8053] EXT4-fs warning (device loop4): ext4_enable_quotas:7078: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 105.873505][ T8080] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1430'. [ 105.914141][ T7902] veth0_vlan: entered promiscuous mode [ 105.924086][ T7902] veth1_vlan: entered promiscuous mode [ 105.933867][ T8082] loop1: detected capacity change from 0 to 512 [ 105.938806][ T7902] veth0_macvtap: entered promiscuous mode [ 105.951103][ T7902] veth1_macvtap: entered promiscuous mode [ 105.962667][ T4247] EXT4-fs (loop4): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 105.971536][ T7902] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 105.982092][ T7902] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.982645][ T8082] EXT4-fs: Ignoring removed oldalloc option [ 105.991974][ T7902] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 106.008345][ T7902] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.018332][ T7902] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 106.028780][ T7902] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.038641][ T7902] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 106.049095][ T7902] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.060099][ T7902] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 106.068875][ T7902] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 106.079669][ T7902] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.089636][ T7902] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 106.100082][ T7902] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.109992][ T7902] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 106.120452][ T7902] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.130404][ T7902] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 106.140881][ T7902] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.151969][ T7902] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 106.195190][ T8090] lo speed is unknown, defaulting to 1000 [ 106.197439][ T7902] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.209769][ T7902] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.218518][ T7902] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.227274][ T7902] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.282283][ T8108] loop4: detected capacity change from 0 to 1024 [ 106.338299][ T8108] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 106.409962][ T8109] bond1: entered promiscuous mode [ 106.415068][ T8109] bond1: entered allmulticast mode [ 106.430220][ T8109] 8021q: adding VLAN 0 to HW filter on device bond1 [ 106.449860][ T8109] bond1 (unregistering): Released all slaves [ 106.473912][ T8126] validate_nla: 1 callbacks suppressed [ 106.473925][ T8126] netlink: 'syz.4.1440': attribute type 3 has an invalid length. [ 106.657910][ T8137] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1449'. [ 106.680444][ T8140] loop2: detected capacity change from 0 to 512 [ 106.717389][ T29] audit: type=1400 audit(1720058878.465:751): avc: denied { map } for pid=8146 comm="syz.1.1453" path="socket:[21864]" dev="sockfs" ino=21864 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 106.721212][ T8147] loop1: detected capacity change from 0 to 512 [ 106.771964][ T8140] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1450'. [ 106.837103][ T8140] loop2: detected capacity change from 0 to 8192 [ 106.845349][ T8140] FAT-fs (loop2): Unrecognized mount option "0xffffffffffffffff˙" or missing value [ 106.942584][ T8164] lo speed is unknown, defaulting to 1000 [ 106.993696][ T8167] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1461'. [ 107.094090][ T8175] dccp_invalid_packet: P.Data Offset(0) too small [ 107.104353][ T29] audit: type=1326 audit(1720058878.855:752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8107 comm="syz.4.1440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e46f87bd9 code=0x7fc00000 [ 107.202724][ T4247] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.315647][ T8189] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1466'. [ 107.357911][ T8189] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 107.377400][ T29] audit: type=1400 audit(1720058879.125:753): avc: denied { ioctl } for pid=8195 comm="syz.0.1471" path="/dev/cpu/0/msr" dev="devtmpfs" ino=85 ioctlcmd=0x63a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 107.423172][ T8197] loop4: detected capacity change from 0 to 256 [ 107.441747][ T8189] TCP: TCP_TX_DELAY enabled [ 107.582755][ T8203] netlink: 'syz.0.1473': attribute type 21 has an invalid length. [ 107.710195][ T8206] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.746255][ T29] audit: type=1400 audit(1720058879.495:754): avc: denied { map } for pid=8213 comm="syz.1.1478" path="socket:[21959]" dev="sockfs" ino=21959 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 107.770810][ T29] audit: type=1400 audit(1720058879.495:755): avc: denied { read } for pid=8213 comm="syz.1.1478" path="socket:[21959]" dev="sockfs" ino=21959 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 107.896440][ T8226] lo speed is unknown, defaulting to 1000 [ 108.044841][ T8240] loop2: detected capacity change from 0 to 512 [ 108.070097][ T8240] EXT4-fs: Mount option(s) incompatible with ext2 [ 108.079483][ T8242] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 108.088373][ T8242] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 108.097164][ T8242] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 108.128202][ T8242] vxlan0: entered promiscuous mode [ 108.133437][ T8242] vxlan0: entered allmulticast mode [ 108.159475][ T8242] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 108.168500][ T8242] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 108.177441][ T8242] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 108.235921][ T8259] __nla_validate_parse: 5 callbacks suppressed [ 108.235938][ T8259] netlink: 92 bytes leftover after parsing attributes in process `syz.2.1492'. [ 108.297767][ T8263] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1495'. [ 108.349152][ T8276] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1495'. [ 108.406722][ T8280] loop2: detected capacity change from 0 to 128 [ 108.487050][ T8297] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1504'. [ 108.644381][ T8315] loop4: detected capacity change from 0 to 512 [ 108.679470][ T8313] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1510'. [ 108.699609][ T8313] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 108.758500][ T8313] loop2: detected capacity change from 0 to 512 [ 108.765145][ T8313] EXT4-fs: Ignoring removed i_version option [ 108.766621][ T8313] EXT4-fs (loop2): orphan cleanup on readonly fs [ 108.776018][ T8324] tipc: Enabling of bearer rejected, failed to enable media [ 108.776385][ T8313] EXT4-fs warning (device loop2): ext4_enable_quotas:7078: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 108.776549][ T8313] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 108.776769][ T8313] EXT4-fs error (device loop2): ext4_ext_check_inode:520: inode #13: comm syz.2.1510: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 108.777664][ T8313] EXT4-fs error (device loop2): ext4_orphan_get:1399: comm syz.2.1510: couldn't read orphan inode 13 (err -117) [ 108.778145][ T8313] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 108.782032][ T8329] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1514'. [ 108.791465][ T8313] EXT4-fs error (device loop2): ext4_lookup:1854: comm syz.2.1510: inode #15: comm syz.2.1510: iget: illegal inode # [ 108.832824][ T8332] program syz.4.1516 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 108.833081][ T8332] FAULT_INJECTION: forcing a failure. [ 108.833081][ T8332] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 108.833103][ T8332] CPU: 0 PID: 8332 Comm: syz.4.1516 Not tainted 6.10.0-rc6-syzkaller-00067-g8a9c6c40432e #0 [ 108.833122][ T8332] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 108.833132][ T8332] Call Trace: [ 108.833139][ T8332] [ 108.833145][ T8332] dump_stack_lvl+0xf2/0x150 [ 108.833240][ T8332] dump_stack+0x15/0x20 [ 108.833278][ T8332] should_fail_ex+0x229/0x230 [ 108.833309][ T8332] should_fail+0xb/0x10 [ 108.833332][ T8332] should_fail_usercopy+0x1a/0x20 [ 108.833413][ T8332] _copy_to_user+0x1e/0xa0 [ 108.833522][ T8332] simple_read_from_buffer+0xa0/0x110 [ 108.833554][ T8332] proc_fail_nth_read+0xfc/0x140 [ 108.833594][ T8332] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 108.833621][ T8332] vfs_read+0x1a2/0x6e0 [ 108.833642][ T8332] ? __rcu_read_unlock+0x4e/0x70 [ 108.833671][ T8332] ? __fget_files+0x1da/0x210 [ 108.833718][ T8332] ksys_read+0xeb/0x1b0 [ 108.833737][ T8332] __x64_sys_read+0x42/0x50 [ 108.833757][ T8332] x64_sys_call+0x27e5/0x2d70 [ 108.833801][ T8332] do_syscall_64+0xc9/0x1c0 [ 108.833825][ T8332] ? clear_bhb_loop+0x55/0xb0 [ 108.833849][ T8332] ? clear_bhb_loop+0x55/0xb0 [ 108.833871][ T8332] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.833961][ T8332] RIP: 0033:0x7f5e46f866bc [ 108.833976][ T8332] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8c 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 1f 8d 02 00 48 [ 108.834011][ T8332] RSP: 002b:00007f5e46209040 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 108.834028][ T8332] RAX: ffffffffffffffda RBX: 00007f5e47115f60 RCX: 00007f5e46f866bc [ 108.834039][ T8332] RDX: 000000000000000f RSI: 00007f5e462090b0 RDI: 0000000000000005 [ 108.834050][ T8332] RBP: 00007f5e462090a0 R08: 0000000000000000 R09: 0000000000000000 [ 108.834125][ T8332] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 108.834137][ T8332] R13: 000000000000000b R14: 00007f5e47115f60 R15: 00007ffcc44c8458 [ 108.834165][ T8332] [ 108.842975][ T5823] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.914819][ T29] audit: type=1326 audit(1720058880.655:756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8334 comm="syz.1.1517" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcd22b65bd9 code=0x0 [ 109.175535][ T8348] loop3: detected capacity change from 0 to 512 [ 109.195689][ T8351] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1522'. [ 109.207156][ T8348] netlink: 144 bytes leftover after parsing attributes in process `syz.3.1521'. [ 109.242574][ T8357] lo speed is unknown, defaulting to 1000 [ 109.263027][ T8348] loop3: detected capacity change from 0 to 8192 [ 109.269872][ T8348] FAT-fs (loop3): Unrecognized mount option "0xffffffffffffffff˙" or missing value [ 109.515072][ T8386] all: renamed from lo (while UP) [ 109.530277][ T29] audit: type=1326 audit(1720058881.285:757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8383 comm="syz.2.1535" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb60e2cbbd9 code=0x0 [ 109.584665][ T8394] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 109.591245][ T8394] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 109.599103][ T8394] vhci_hcd vhci_hcd.0: Device attached [ 109.621100][ T8401] loop3: detected capacity change from 0 to 1024 [ 109.623936][ T8402] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1541'. [ 109.628621][ T8401] ext4: Unknown parameter 'noacl' [ 109.782096][ T8415] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 109.862355][ T29] audit: type=1400 audit(1720058881.615:758): avc: denied { mount } for pid=8421 comm="syz.1.1548" name="/" dev="configfs" ino=1222 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 109.936860][ T969] usb 6-1: SetAddress Request (2) to port 0 [ 109.943918][ T969] usb 6-1: new SuperSpeed USB device number 2 using vhci_hcd [ 109.961889][ T29] audit: type=1400 audit(1720058881.645:759): avc: denied { read } for pid=8421 comm="syz.1.1548" name="/" dev="configfs" ino=1222 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 109.983934][ T29] audit: type=1400 audit(1720058881.645:760): avc: denied { open } for pid=8421 comm="syz.1.1548" path="/238/file0" dev="configfs" ino=1222 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 110.018479][ T8437] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1555'. [ 110.151750][ T8462] lo speed is unknown, defaulting to 1000 [ 110.215049][ T8467] hub 9-0:1.0: USB hub found [ 110.222801][ T8467] hub 9-0:1.0: 8 ports detected [ 110.228287][ T8474] loop1: detected capacity change from 0 to 256 [ 110.336780][ T8395] vhci_hcd: connection reset by peer [ 110.349136][ T11] vhci_hcd: stop threads [ 110.353468][ T11] vhci_hcd: release socket [ 110.358003][ T11] vhci_hcd: disconnect device [ 110.895717][ T35] IPVS: starting estimator thread 0... [ 110.905462][ T8510] loop3: detected capacity change from 0 to 512 [ 110.997964][ T8509] IPVS: using max 2832 ests per chain, 141600 per kthread [ 111.082948][ T8534] loop4: detected capacity change from 0 to 512 [ 111.098151][ T8534] EXT4-fs: Ignoring removed bh option [ 111.108235][ T8534] EXT4-fs (loop4): orphan cleanup on readonly fs [ 111.115082][ T8534] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 111.132437][ T8510] loop3: detected capacity change from 0 to 8192 [ 111.140029][ T8534] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.1581: invalid indirect mapped block 8 (level 2) [ 111.165675][ T8510] FAT-fs (loop3): Unrecognized mount option "0xffffffffffffffff˙" or missing value [ 111.175256][ T8534] EXT4-fs (loop4): Remounting filesystem read-only [ 111.184147][ T8534] EXT4-fs (loop4): 1 truncate cleaned up [ 111.197764][ T8534] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 111.233138][ T8534] SELinux: (dev loop4, type ext4) getxattr errno 5 [ 111.263161][ T8534] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.372548][ T8551] lo speed is unknown, defaulting to 1000 [ 111.442353][ T8567] syz.0.1593[8567] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 111.442418][ T8567] syz.0.1593[8567] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 111.543267][ T8575] lo speed is unknown, defaulting to 1000 [ 111.815569][ T8584] loop2: detected capacity change from 0 to 512 [ 111.909479][ T8584] loop2: detected capacity change from 0 to 8192 [ 111.916153][ T8584] FAT-fs (loop2): Unrecognized mount option "0xffffffffffffffff˙" or missing value [ 112.034663][ T8594] loop2: detected capacity change from 0 to 128 [ 112.044682][ T8594] FAT-fs (loop2): Unrecognized mount option "00000000000000000000000˙˙0000000000000000000000000000000000000000000" or missing value [ 112.126914][ T8598] loop2: detected capacity change from 0 to 1024 [ 112.146498][ T8598] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 112.160525][ T8598] EXT4-fs (loop2): stripe (10) is not aligned with cluster size (16), stripe is disabled [ 112.170488][ T8598] EXT4-fs (loop2): can't mount with data=, fs mounted w/o journal [ 112.254340][ T8576] syz.4.1595 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 112.266408][ T8576] CPU: 0 PID: 8576 Comm: syz.4.1595 Not tainted 6.10.0-rc6-syzkaller-00067-g8a9c6c40432e #0 [ 112.276485][ T8576] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 112.286530][ T8576] Call Trace: [ 112.289860][ T8576] [ 112.292778][ T8576] dump_stack_lvl+0xf2/0x150 [ 112.297427][ T8576] dump_stack+0x15/0x20 [ 112.301626][ T8576] dump_header+0x83/0x2d0 [ 112.305943][ T8576] oom_kill_process+0x33e/0x4c0 [ 112.310785][ T8576] out_of_memory+0x9af/0xbe0 [ 112.315367][ T8576] mem_cgroup_out_of_memory+0x13e/0x190 [ 112.320963][ T8576] try_charge_memcg+0x745/0xcd0 [ 112.325809][ T8576] ? _raw_spin_unlock+0x26/0x50 [ 112.330659][ T8576] ? radix_tree_lookup+0xf9/0x150 [ 112.335803][ T8576] mem_cgroup_swapin_charge_folio+0x107/0x1a0 [ 112.341860][ T8576] __read_swap_cache_async+0x2b9/0x520 [ 112.347365][ T8576] swap_cluster_readahead+0x276/0x3f0 [ 112.352740][ T8576] swapin_readahead+0xe2/0x7a0 [ 112.357500][ T8576] ? __filemap_get_folio+0x420/0x5b0 [ 112.362821][ T8576] ? cgroup_rstat_updated+0x99/0x550 [ 112.368106][ T8576] ? swap_cache_get_folio+0x6e/0x210 [ 112.373467][ T8576] do_swap_page+0x3bc/0x1840 [ 112.378047][ T8576] ? bsearch+0x98/0xc0 [ 112.382139][ T8576] ? __get_user_nocheck_4+0xa/0x20 [ 112.387246][ T8576] ? __rcu_read_lock+0x36/0x50 [ 112.392021][ T8576] handle_mm_fault+0x809/0x2a80 [ 112.396873][ T8576] exc_page_fault+0x296/0x650 [ 112.401563][ T8576] asm_exc_page_fault+0x26/0x30 [ 112.406411][ T8576] RIP: 0010:__get_user_4+0x11/0x20 [ 112.411636][ T8576] Code: 01 ca c3 cc cc cc cc 66 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 89 c2 48 c1 fa 3f 48 09 d0 0f 01 cb <8b> 10 31 c0 0f 01 ca c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 [ 112.431302][ T8576] RSP: 0018:ffffc90000ecbbf8 EFLAGS: 00050202 [ 112.437357][ T8576] RAX: 00007f5e47116040 RBX: ffffc90000ecbc70 RCX: ffffffff84fbbb44 [ 112.445366][ T8576] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff888100f9b484 [ 112.453322][ T8576] RBP: 00000000fffffff2 R08: 0001ffff86043fa7 R09: 0000000000000000 [ 112.461385][ T8576] R10: 0001ffffffffffff R11: 0001888114a42c24 R12: 00007f5e47116040 [ 112.469394][ T8576] R13: ffffc90000ecbc1c R14: 0000000000000000 R15: 0000000000000000 [ 112.477354][ T8576] ? _raw_spin_unlock+0x14/0x50 [ 112.482294][ T8576] futex_wait_setup+0xe6/0x1d0 [ 112.487067][ T8576] __futex_wait+0x97/0x290 [ 112.491518][ T8576] ? __pfx_futex_wake_mark+0x10/0x10 [ 112.496953][ T8576] futex_wait+0x99/0x1c0 [ 112.501194][ T8576] do_futex+0x276/0x370 [ 112.505348][ T8576] __se_sys_futex+0x25d/0x3a0 [ 112.510020][ T8576] __x64_sys_futex+0x78/0x90 [ 112.514608][ T8576] x64_sys_call+0x28c1/0x2d70 [ 112.519282][ T8576] do_syscall_64+0xc9/0x1c0 [ 112.523889][ T8576] ? clear_bhb_loop+0x55/0xb0 [ 112.528557][ T8576] ? clear_bhb_loop+0x55/0xb0 [ 112.533228][ T8576] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.539110][ T8576] RIP: 0033:0x7f5e46f87bd9 [ 112.543545][ T8576] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 112.563228][ T8576] RSP: 002b:00007f5e461e80f8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 112.571637][ T8576] RAX: ffffffffffffffda RBX: 00007f5e47116040 RCX: 00007f5e46f87bd9 [ 112.579602][ T8576] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f5e47116040 [ 112.587558][ T8576] RBP: 00007f5e47116038 R08: 00007f5e461e86c0 R09: 00007f5e461e86c0 [ 112.595515][ T8576] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f5e47116044 [ 112.603473][ T8576] R13: 000000000000006e R14: 00007ffcc44c8370 R15: 00007ffcc44c8458 [ 112.611501][ T8576] [ 112.615919][ T8576] memory: usage 307200kB, limit 307200kB, failcnt 1539 [ 112.623038][ T8576] memory+swap: usage 307560kB, limit 9007199254740988kB, failcnt 0 [ 112.630947][ T8576] kmem: usage 307180kB, limit 9007199254740988kB, failcnt 0 [ 112.639378][ T8576] Memory cgroup stats for /syz4: [ 112.639537][ T8576] cache 0 [ 112.647457][ T8576] rss 16384 [ 112.650558][ T8576] shmem 0 [ 112.653484][ T8576] mapped_file 0 [ 112.657026][ T8576] dirty 0 [ 112.660024][ T8576] writeback 0 [ 112.663300][ T8576] workingset_refault_anon 165 [ 112.668974][ T8576] workingset_refault_file 1420 [ 112.673756][ T8576] swap 364544 [ 112.677039][ T8576] swapcached 20480 [ 112.680758][ T8576] pgpgin 93225 [ 112.684164][ T8576] pgpgout 93219 [ 112.687640][ T8576] pgfault 84259 [ 112.691189][ T8576] pgmajfault 123 [ 112.694735][ T8576] inactive_anon 8192 [ 112.699786][ T8576] active_anon 8192 [ 112.703502][ T8576] inactive_file 0 [ 112.707206][ T8576] active_file 0 [ 112.710661][ T8576] unevictable 0 [ 112.712340][ T8600] loop3: detected capacity change from 0 to 512 [ 112.714110][ T8576] hierarchical_memory_limit 314572800 [ 112.714143][ T8576] hierarchical_memsw_limit 9223372036854771712 [ 112.732871][ T8576] total_cache 0 [ 112.736316][ T8576] total_rss 16384 [ 112.739945][ T8576] total_shmem 0 [ 112.743462][ T8576] total_mapped_file 0 [ 112.747484][ T8576] total_dirty 0 [ 112.750923][ T8576] total_writeback 0 [ 112.754759][ T8576] total_workingset_refault_anon 165 [ 112.760636][ T8576] total_workingset_refault_file 1420 [ 112.765914][ T8576] total_swap 364544 [ 112.769711][ T8576] total_swapcached 20480 [ 112.773932][ T8576] total_pgpgin 93225 [ 112.777833][ T8576] total_pgpgout 93219 [ 112.781838][ T8576] total_pgfault 84259 [ 112.785872][ T8576] total_pgmajfault 123 [ 112.790694][ T8576] total_inactive_anon 8192 [ 112.795086][ T8576] total_active_anon 8192 [ 112.799386][ T8576] total_inactive_file 0 [ 112.803656][ T8576] total_active_file 0 [ 112.807680][ T8576] total_unevictable 0 [ 112.811640][ T8576] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.1595,pid=8571,uid=0 [ 112.827351][ T8576] Memory cgroup out of memory: Killed process 8571 (syz.4.1595) total-vm:80752kB, anon-rss:452kB, file-rss:9968kB, shmem-rss:0kB, UID:0 pgtables:108kB oom_score_adj:1000 [ 112.909492][ T8604] lo speed is unknown, defaulting to 1000 [ 112.910638][ T8600] netlink: 'syz.3.1605': attribute type 5 has an invalid length. [ 112.943585][ T8600] SET target dimension over the limit! [ 113.011546][ T8606] lo speed is unknown, defaulting to 1000 [ 113.322335][ T8647] __nla_validate_parse: 7 callbacks suppressed [ 113.322350][ T8647] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1623'. [ 113.337620][ T8647] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1623'. [ 113.365104][ T8652] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=24596 sclass=netlink_tcpdiag_socket pid=8652 comm=syz.4.1625 [ 113.427459][ T8659] loop4: detected capacity change from 0 to 512 [ 113.448257][ T8659] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 113.470203][ T8659] ext4 filesystem being mounted at /271/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 113.494860][ T8659] EXT4-fs (loop4): shut down requested (0) [ 113.532483][ T4247] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 113.567261][ T8667] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=13 sclass=netlink_route_socket pid=8667 comm=syz.2.1630 [ 113.645522][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 113.645536][ T29] audit: type=1400 audit(1720058885.395:766): avc: denied { getopt } for pid=8672 comm="syz.2.1632" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 113.776158][ T8686] loop1: detected capacity change from 0 to 512 [ 113.783207][ T29] audit: type=1400 audit(1720058885.525:767): avc: denied { mount } for pid=8678 comm="syz.4.1635" name="/" dev="hugetlbfs" ino=24785 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 113.806120][ T29] audit: type=1400 audit(1720058885.535:768): avc: denied { create } for pid=8678 comm="syz.4.1635" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=blk_file permissive=1 [ 113.975874][ T8712] lo speed is unknown, defaulting to 1000 [ 114.088473][ T29] audit: type=1400 audit(1720058885.835:769): avc: denied { nlmsg_write } for pid=8709 comm="syz.2.1644" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 114.109225][ T29] audit: type=1400 audit(1720058885.835:770): avc: denied { nlmsg_read } for pid=8709 comm="syz.2.1644" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 114.130645][ T8716] loop3: detected capacity change from 0 to 2048 [ 114.140108][ T8718] lo speed is unknown, defaulting to 1000 [ 114.159646][ T8716] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 114.207499][ T29] audit: type=1400 audit(1720058885.955:771): avc: denied { mounton } for pid=8715 comm="syz.3.1646" path="/35/file0/file0" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 114.230231][ T29] audit: type=1400 audit(1720058885.955:772): avc: denied { mount } for pid=8715 comm="syz.3.1646" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 114.252562][ T29] audit: type=1400 audit(1720058885.955:773): avc: denied { search } for pid=8715 comm="syz.3.1646" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 114.274268][ T29] audit: type=1400 audit(1720058885.965:774): avc: denied { write } for pid=8715 comm="syz.3.1646" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 114.314991][ T7902] EXT4-fs error (device loop3): ext4_readdir:260: inode #2: block 16: comm syz-executor: path /35/file0: bad entry in directory: rec_len is smaller than minimal - offset=60, inode=117440527, rec_len=0, size=2048 fake=0 [ 114.381360][ T7902] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 114.420045][ T29] audit: type=1400 audit(1720058886.175:775): avc: denied { unmount } for pid=7902 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 114.455608][ T7902] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.588885][ T8750] loop2: detected capacity change from 0 to 128 [ 114.606808][ T8753] loop3: detected capacity change from 0 to 512 [ 114.617903][ T8750] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 114.668791][ T8753] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 114.737985][ T8753] ext4 filesystem being mounted at /37/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 114.782219][ T11] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 114.808820][ T11] bio_check_eod: 15104 callbacks suppressed [ 114.808833][ T11] kworker/u8:0: attempt to access beyond end of device [ 114.808833][ T11] loop2: rw=1, sector=361, nr_sectors = 680 limit=128 [ 114.819815][ T8753] hugetlbfs: Bad value '0x00000000ffffffff' for mount option 'uid' [ 114.819815][ T8753] [ 114.852707][ T8774] netlink: 'syz.0.1665': attribute type 1 has an invalid length. [ 114.860481][ T8774] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1665'. [ 114.883912][ T8779] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1666'. [ 114.921972][ T8780] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1663'. [ 114.951749][ T8786] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1670'. [ 114.985453][ T8770] loop1: detected capacity change from 0 to 512 [ 114.991026][ T8791] loop2: detected capacity change from 0 to 1024 [ 114.998396][ T8791] EXT4-fs: Ignoring removed orlov option [ 115.004245][ T8791] EXT4-fs: Ignoring removed nomblk_io_submit option [ 115.011047][ T8770] EXT4-fs: Ignoring removed nobh option [ 115.020535][ T8770] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 115.030836][ T8791] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 115.059404][ T5823] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.086046][ T8805] loop4: detected capacity change from 0 to 764 [ 115.107106][ T969] usb 6-1: device descriptor read/8, error -110 [ 115.113853][ T8805] rock: directory entry would overflow storage [ 115.117206][ T8776] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.120051][ T8805] rock: sig=0x4654, size=5, remaining=4 [ 115.191156][ T3104] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.214208][ T8821] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1682'. [ 115.233497][ T969] usb 6-1: new SuperSpeed USB device number 2 using vhci_hcd [ 115.270439][ T3104] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.273781][ T8830] loop4: detected capacity change from 0 to 512 [ 115.292378][ T969] usb 6-1: enqueue for inactive port 0 [ 115.304313][ T969] usb 6-1: enqueue for inactive port 0 [ 115.315408][ T969] usb 6-1: enqueue for inactive port 0 [ 115.322393][ T8830] EXT4-fs (loop4): filesystem is read-only [ 115.329262][ T8815] lo speed is unknown, defaulting to 1000 [ 115.342899][ T3104] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.389781][ T8839] loop2: detected capacity change from 0 to 512 [ 115.404018][ T3104] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.412246][ T8839] EXT4-fs: Ignoring removed bh option [ 115.421150][ T8839] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 115.431023][ T8830] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1684'. [ 115.448418][ T8839] EXT4-fs (loop2): 1 truncate cleaned up [ 115.454645][ T8839] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.535562][ T3104] bridge_slave_1: left allmulticast mode [ 115.541252][ T3104] bridge_slave_1: left promiscuous mode [ 115.546905][ T3104] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.555663][ T8842] netlink: 'syz.4.1688': attribute type 4 has an invalid length. [ 115.575007][ T3104] bridge_slave_0: left allmulticast mode [ 115.580697][ T3104] bridge_slave_0: left promiscuous mode [ 115.586317][ T3104] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.663800][ T8846] loop1: detected capacity change from 0 to 512 [ 115.702822][ T3104] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 115.717720][ T3104] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 115.728543][ T3104] bond0 (unregistering): Released all slaves [ 115.743430][ T3104] bond1 (unregistering): Released all slaves [ 115.786289][ T8852] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1693'. [ 115.814920][ T8815] chnl_net:caif_netlink_parms(): no params data found [ 115.841261][ T8] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 115.848709][ T8] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 115.856243][ T8] hid-generic 0000:0000:0000.0003: unknown main item tag 0x2 [ 115.864808][ T8] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 115.872208][ T8] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 115.879663][ T8] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 115.888098][ T8] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 115.895499][ T8] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 115.902884][ T8] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 115.910313][ T8] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 115.918755][ T8] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 115.926164][ T8] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 115.933550][ T8] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 115.940947][ T8] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 115.949555][ T8] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 115.957163][ T8] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 115.964539][ T8] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 115.971912][ T8] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 115.979939][ T8] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 115.987417][ T8] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 115.994831][ T8] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 116.002363][ T8] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 116.010823][ T8] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 116.018330][ T8] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 116.025763][ T8] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 116.033130][ T8] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 116.041222][ T8] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 116.048585][ T8] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 116.055979][ T8] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 116.063422][ T8] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 116.072032][ T8] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 116.079440][ T8] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 116.086837][ T8] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 116.094196][ T8] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 116.102382][ T8] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 116.109911][ T8] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 116.117370][ T8] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 116.124730][ T8] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 116.138354][ T8] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz0] on syz0 [ 116.149009][ T8815] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.156077][ T8815] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.167206][ T8815] bridge_slave_0: entered allmulticast mode [ 116.173663][ T8815] bridge_slave_0: entered promiscuous mode [ 116.180390][ T8815] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.188525][ T8815] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.195947][ T8815] bridge_slave_1: entered allmulticast mode [ 116.202574][ T8815] bridge_slave_1: entered promiscuous mode [ 116.240370][ T5823] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.255195][ T8815] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 116.295053][ T8815] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 116.306586][ T3104] hsr_slave_0: left promiscuous mode [ 116.315118][ T3104] hsr_slave_1: left promiscuous mode [ 116.321793][ T3104] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 116.329292][ T3104] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 116.341779][ T3104] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 116.349307][ T3104] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 116.361679][ T3104] veth1_macvtap: left promiscuous mode [ 116.367205][ T3104] veth0_macvtap: left promiscuous mode [ 116.372720][ T3104] veth1_vlan: left promiscuous mode [ 116.378050][ T3104] veth0_vlan: left promiscuous mode [ 116.438847][ T969] usb usb6-port1: attempt power cycle [ 116.478613][ T3104] team0 (unregistering): Port device team_slave_1 removed [ 116.489682][ T3104] team0 (unregistering): Port device team_slave_0 removed [ 116.537816][ T8903] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1708'. [ 116.564670][ T8815] team0: Port device team_slave_0 added [ 116.571376][ T8815] team0: Port device team_slave_1 added [ 116.594187][ T8815] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 116.601175][ T8815] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 116.627207][ T8815] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 116.639364][ T8815] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 116.646359][ T8815] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 116.672377][ T8815] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 116.701534][ T8815] hsr_slave_0: entered promiscuous mode [ 116.707615][ T8815] hsr_slave_1: entered promiscuous mode [ 116.722745][ T8889] lo speed is unknown, defaulting to 1000 [ 116.837448][ T8889] chnl_net:caif_netlink_parms(): no params data found [ 116.871818][ T8889] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.879601][ T8889] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.886771][ T8889] bridge_slave_0: entered allmulticast mode [ 116.893423][ T8889] bridge_slave_0: entered promiscuous mode [ 116.900438][ T8889] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.908184][ T8889] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.915509][ T8889] bridge_slave_1: entered allmulticast mode [ 116.922147][ T8889] bridge_slave_1: entered promiscuous mode [ 116.942954][ T8889] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 116.953364][ T8889] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 116.976088][ T8889] team0: Port device team_slave_0 added [ 116.982532][ T8889] team0: Port device team_slave_1 added [ 116.997838][ T8889] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 117.004773][ T8889] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 117.031787][ T8889] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 117.044743][ T8889] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 117.051722][ T8889] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 117.077655][ T8889] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 117.096296][ T3104] team0: Port device netdevsim1 removed [ 117.102174][ T8924] 9pnet_fd: Insufficient options for proto=fd [ 117.123894][ T8889] hsr_slave_0: entered promiscuous mode [ 117.129872][ T8889] hsr_slave_1: entered promiscuous mode [ 117.135819][ T8889] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 117.143446][ T8889] Cannot create hsr debugfs directory [ 117.190982][ T8815] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 117.206600][ T8815] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 117.235430][ T8815] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 117.245815][ T3104] bridge_slave_1: left allmulticast mode [ 117.251502][ T3104] bridge_slave_1: left promiscuous mode [ 117.257241][ T3104] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.265829][ T3104] bridge_slave_0: left allmulticast mode [ 117.272546][ T3104] bridge_slave_0: left promiscuous mode [ 117.278186][ T3104] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.329920][ T3104] bridge0 (unregistering): left promiscuous mode [ 117.429222][ T3104] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 117.439941][ T3104] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 117.450858][ T3104] bond0 (unregistering): Released all slaves [ 117.459420][ T3104] bond1 (unregistering): Released all slaves [ 117.469036][ T8815] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 117.498771][ T3104] tipc: Disabling bearer [ 117.504003][ T3104] tipc: Left network mode [ 117.513893][ T8815] 8021q: adding VLAN 0 to HW filter on device bond0 [ 117.525644][ T8815] 8021q: adding VLAN 0 to HW filter on device team0 [ 117.535088][ T3159] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.542149][ T3159] bridge0: port 1(bridge_slave_0) entered forwarding state [ 117.556847][ T3159] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.563920][ T3159] bridge0: port 2(bridge_slave_1) entered forwarding state [ 117.580831][ T8815] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 117.591196][ T8815] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 117.631861][ T3104] batadv0: left promiscuous mode [ 117.639890][ T3104] hsr_slave_0: left promiscuous mode [ 117.645384][ T3104] hsr_slave_1: left promiscuous mode [ 117.651272][ T3104] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 117.659443][ T3104] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 117.667327][ T3104] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 117.674711][ T3104] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 117.683412][ T3104] veth1_macvtap: left promiscuous mode [ 117.689560][ T3104] veth0_macvtap: left promiscuous mode [ 117.695205][ T3104] veth1_vlan: left promiscuous mode [ 117.700431][ T3104] veth0_vlan: left promiscuous mode [ 117.772844][ T3104] team0 (unregistering): Port device team_slave_1 removed [ 117.784536][ T3104] team0 (unregistering): Port device team_slave_0 removed [ 117.834445][ T8815] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 117.893902][ T8815] veth0_vlan: entered promiscuous mode [ 117.901994][ T8815] veth1_vlan: entered promiscuous mode [ 117.919148][ T8815] veth0_macvtap: entered promiscuous mode [ 117.932861][ T8815] veth1_macvtap: entered promiscuous mode [ 117.940413][ T8889] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 117.949392][ T8889] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 117.959850][ T8889] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 117.973378][ T8815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 117.983844][ T8815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.994827][ T8815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 118.005297][ T8815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.015103][ T8815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 118.026162][ T8815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.039159][ T8815] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 118.046597][ T8889] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 118.057834][ T8815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 118.068398][ T8815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.078251][ T8815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 118.089392][ T8815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.099309][ T8815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 118.109703][ T8815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.120796][ T8815] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 118.135493][ T8815] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.144374][ T8815] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.154453][ T8815] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.163185][ T8815] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.188856][ T8959] lo speed is unknown, defaulting to 1000 [ 118.224491][ T8889] 8021q: adding VLAN 0 to HW filter on device bond0 [ 118.251824][ T8889] 8021q: adding VLAN 0 to HW filter on device team0 [ 118.262714][ T3104] IPVS: stop unused estimator thread 0... [ 118.276139][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.283310][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 118.321962][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.329093][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 118.356121][ T8889] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 118.366723][ T8889] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 118.443335][ T8889] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 118.467114][ T969] usb usb6-port1: unable to enumerate USB device [ 118.500632][ T8994] loop1: detected capacity change from 0 to 256 [ 118.530115][ T8889] veth0_vlan: entered promiscuous mode [ 118.546672][ T8889] veth1_vlan: entered promiscuous mode [ 118.580819][ T8889] veth0_macvtap: entered promiscuous mode [ 118.593562][ T8889] veth1_macvtap: entered promiscuous mode [ 118.620953][ T8889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 118.631708][ T8889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.642592][ T8889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 118.653023][ T8889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.662985][ T8889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 118.674336][ T8889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.684287][ T8889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 118.694793][ T8889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.707363][ T8889] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 118.726441][ T8889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 118.737975][ T8889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.747860][ T8889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 118.758422][ T8889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.769375][ T8889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 118.780102][ T8889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.789935][ T8889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 118.801396][ T8889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.815488][ T8889] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 118.823928][ T8889] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.833771][ T8889] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.842537][ T8889] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.851288][ T8889] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.964764][ T29] kauditd_printk_skb: 7 callbacks suppressed [ 118.964775][ T29] audit: type=1400 audit(1720058890.715:783): avc: denied { create } for pid=9008 comm="syz.1.1730" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 119.004437][ T9012] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=19472 sclass=netlink_route_socket pid=9012 comm=syz.1.1731 [ 119.048092][ T9016] loop1: detected capacity change from 0 to 1024 [ 119.076256][ T29] audit: type=1400 audit(1720058890.815:784): avc: denied { ioctl } for pid=9017 comm="syz.4.1732" path="socket:[25990]" dev="sockfs" ino=25990 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 119.117504][ T9016] FAULT_INJECTION: forcing a failure. [ 119.117504][ T9016] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 119.130792][ T9016] CPU: 1 PID: 9016 Comm: syz.1.1733 Not tainted 6.10.0-rc6-syzkaller-00067-g8a9c6c40432e #0 [ 119.140858][ T9016] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 119.150910][ T9016] Call Trace: [ 119.154177][ T9016] [ 119.157140][ T9016] dump_stack_lvl+0xf2/0x150 [ 119.161802][ T9016] dump_stack+0x15/0x20 [ 119.165963][ T9016] should_fail_ex+0x229/0x230 [ 119.170717][ T9016] should_fail+0xb/0x10 [ 119.175013][ T9016] should_fail_usercopy+0x1a/0x20 [ 119.180046][ T9016] copy_page_from_iter_atomic+0x22a/0xda0 [ 119.185811][ T9016] ? shmem_write_begin+0xa0/0x1c0 [ 119.190839][ T9016] ? shmem_write_begin+0x10c/0x1c0 [ 119.195960][ T9016] generic_perform_write+0x21a/0x410 [ 119.201350][ T9016] ? __pfx_shmem_write_end+0x10/0x10 [ 119.206634][ T9016] shmem_file_write_iter+0xc8/0xf0 [ 119.211864][ T9016] vfs_write+0x78f/0x900 [ 119.216113][ T9016] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 119.222022][ T9016] ksys_write+0xeb/0x1b0 [ 119.226275][ T9016] __x64_sys_write+0x42/0x50 [ 119.230890][ T9016] x64_sys_call+0x27ef/0x2d70 [ 119.235603][ T9016] do_syscall_64+0xc9/0x1c0 [ 119.240121][ T9016] ? clear_bhb_loop+0x55/0xb0 [ 119.244801][ T9016] ? clear_bhb_loop+0x55/0xb0 [ 119.249482][ T9016] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.255424][ T9016] RIP: 0033:0x7fcd22b65bd9 [ 119.259834][ T9016] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 119.279468][ T9016] RSP: 002b:00007fcd21de7048 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 119.284684][ T9028] loop4: detected capacity change from 0 to 512 [ 119.287869][ T9016] RAX: ffffffffffffffda RBX: 00007fcd22cf3f60 RCX: 00007fcd22b65bd9 [ 119.287884][ T9016] RDX: 0000000000043400 RSI: 0000000020000200 RDI: 0000000000000004 [ 119.287896][ T9016] RBP: 00007fcd21de70a0 R08: 0000000000000000 R09: 0000000000000000 [ 119.318023][ T9016] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 119.326015][ T9016] R13: 000000000000000b R14: 00007fcd22cf3f60 R15: 00007ffdd7bafb18 [ 119.334015][ T9016] [ 119.359410][ T9030] __nla_validate_parse: 3 callbacks suppressed [ 119.359422][ T9030] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1737'. [ 119.433462][ T29] audit: type=1400 audit(1720058891.185:785): avc: denied { ioctl } for pid=9031 comm="syz.0.1738" path="/dev/usbmon0" dev="devtmpfs" ino=117 ioctlcmd=0x9203 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 119.550878][ T9041] loop3: detected capacity change from 0 to 512 [ 119.570149][ T9041] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 119.609033][ T9041] EXT4-fs error (device loop3): ext4_ext_check_inode:520: inode #15: comm syz.3.1741: pblk 0 bad header/extent: invalid eh_entries - magic f30a, entries 24833, max 4(4), depth 0(0) [ 119.635892][ T9047] netlink: 'syz.0.1743': attribute type 15 has an invalid length. [ 119.644289][ T9041] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz.3.1741: couldn't read orphan inode 15 (err -117) [ 119.659801][ T9028] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 119.670650][ T9041] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 119.687857][ T9041] ext2 filesystem being mounted at /4/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 119.705034][ T9028] EXT4-fs (loop4): warning: checktime reached, running e2fsck is recommended [ 119.713990][ T9028] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c01c, mo2=0002] [ 119.722092][ T9028] System zones: 0-2, 18-18, 34-34 [ 119.728560][ T9028] EXT4-fs error (device loop4): ext4_ext_check_inode:520: inode #15: comm syz.4.1736: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 119.748673][ T9028] EXT4-fs error (device loop4): ext4_orphan_get:1399: comm syz.4.1736: couldn't read orphan inode 15 (err -117) [ 119.749478][ T8815] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.763649][ T9028] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 119.974011][ T9061] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1746'. [ 119.983105][ T9061] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1746'. [ 119.992143][ T9061] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1746'. [ 120.031651][ T9064] FAULT_INJECTION: forcing a failure. [ 120.031651][ T9064] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 120.044760][ T9064] CPU: 0 PID: 9064 Comm: syz.3.1748 Not tainted 6.10.0-rc6-syzkaller-00067-g8a9c6c40432e #0 [ 120.054905][ T9064] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 120.064979][ T9064] Call Trace: [ 120.068255][ T9064] [ 120.071247][ T9064] dump_stack_lvl+0xf2/0x150 [ 120.075847][ T9064] dump_stack+0x15/0x20 [ 120.080003][ T9064] should_fail_ex+0x229/0x230 [ 120.084683][ T9064] should_fail+0xb/0x10 [ 120.088900][ T9064] should_fail_usercopy+0x1a/0x20 [ 120.093933][ T9064] _copy_from_user+0x1e/0xd0 [ 120.098534][ T9064] snd_seq_write+0x1d4/0x510 [ 120.103127][ T9064] ? __pfx_snd_seq_write+0x10/0x10 [ 120.108237][ T9064] vfs_write+0x28b/0x900 [ 120.112500][ T9064] ? __fget_files+0x1da/0x210 [ 120.117173][ T9064] ksys_write+0xeb/0x1b0 [ 120.121453][ T9064] __x64_sys_write+0x42/0x50 [ 120.126048][ T9064] x64_sys_call+0x27ef/0x2d70 [ 120.130735][ T9064] do_syscall_64+0xc9/0x1c0 [ 120.135244][ T9064] ? clear_bhb_loop+0x55/0xb0 [ 120.139923][ T9064] ? clear_bhb_loop+0x55/0xb0 [ 120.144602][ T9064] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.150536][ T9064] RIP: 0033:0x7f5e4f946bd9 [ 120.155019][ T9064] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 120.174715][ T9064] RSP: 002b:00007f5e4ebc8048 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 120.183148][ T9064] RAX: ffffffffffffffda RBX: 00007f5e4fad4f60 RCX: 00007f5e4f946bd9 [ 120.191110][ T9064] RDX: 000000000000ffc8 RSI: 0000000020000000 RDI: 0000000000000004 [ 120.199082][ T9064] RBP: 00007f5e4ebc80a0 R08: 0000000000000000 R09: 0000000000000000 [ 120.207051][ T9064] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 120.215015][ T9064] R13: 000000000000000b R14: 00007f5e4fad4f60 R15: 00007fff5448bc38 [ 120.223038][ T9064] [ 120.259181][ T29] audit: type=1326 audit(1720058892.015:786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9066 comm="syz.1.1749" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcd22b65bd9 code=0x0 [ 120.848425][ T4247] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.864742][ T9083] lo speed is unknown, defaulting to 1000 [ 120.921444][ T9088] loop4: detected capacity change from 0 to 512 [ 120.929333][ T9088] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 120.939111][ T9088] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 120.947716][ T9088] EXT4-fs (loop4): orphan cleanup on readonly fs [ 120.954566][ T9088] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1757: bg 0: block 248: padding at end of block bitmap is not set [ 120.969850][ T9088] Quota error (device loop4): write_blk: dquota write failed [ 120.977703][ T9088] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 120.987625][ T9088] EXT4-fs error (device loop4): ext4_acquire_dquot:6860: comm syz.4.1757: Failed to acquire dquot type 1 [ 120.999968][ T9088] EXT4-fs (loop4): 1 truncate cleaned up [ 121.006223][ T9088] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 121.031358][ T4247] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.063468][ T29] audit: type=1400 audit(1720058892.815:787): avc: denied { getopt } for pid=9096 comm="syz.0.1762" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 121.186990][ T8] usb usb6-port1: attempt power cycle [ 121.196555][ T9115] netlink: 'syz.3.1769': attribute type 5 has an invalid length. [ 121.285065][ T9123] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1771'. [ 121.351051][ T29] audit: type=1326 audit(1720058893.105:788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9129 comm="syz.0.1775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51f3b6abd9 code=0x7ffc0000 [ 121.375804][ T29] audit: type=1326 audit(1720058893.125:789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9129 comm="syz.0.1775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=163 compat=0 ip=0x7f51f3b6abd9 code=0x7ffc0000 [ 121.400091][ T29] audit: type=1326 audit(1720058893.125:790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9129 comm="syz.0.1775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51f3b6abd9 code=0x7ffc0000 [ 121.604910][ T9162] loop3: detected capacity change from 0 to 512 [ 121.612973][ T9162] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2234: inode #15: comm syz.3.1781: corrupted in-inode xattr: invalid ea_ino [ 121.613149][ T9162] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz.3.1781: couldn't read orphan inode 15 (err -117) [ 121.649374][ T9162] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 121.700871][ T8815] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.765683][ T9173] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1786'. [ 121.774669][ T9173] netlink: 21 bytes leftover after parsing attributes in process `syz.3.1786'. [ 121.783618][ T9173] netlink: 21 bytes leftover after parsing attributes in process `syz.3.1786'. [ 121.821508][ T9178] loop3: detected capacity change from 0 to 256 [ 121.829086][ T9178] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 121.989608][ T9204] dvmrp1: entered allmulticast mode [ 121.995896][ T9204] dvmrp1: left allmulticast mode [ 122.020351][ T9206] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1798'. [ 122.122306][ T9208] xt_hashlimit: invalid interval [ 122.127958][ T9208] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1800'. [ 122.142839][ T9210] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=65043 sclass=netlink_xfrm_socket pid=9210 comm=syz.3.1802 [ 122.200139][ T9212] loop1: detected capacity change from 0 to 1024 [ 122.206723][ T9212] EXT4-fs: Ignoring removed orlov option [ 122.265960][ T9233] loop1: detected capacity change from 0 to 256 [ 122.328892][ T9240] loop3: detected capacity change from 0 to 512 [ 122.340934][ T9240] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 122.376424][ T9247] netlink: 'syz.1.1810': attribute type 21 has an invalid length. [ 122.396668][ T9240] EXT4-fs error (device loop3): ext4_ext_check_inode:520: inode #15: comm syz.3.1809: pblk 0 bad header/extent: invalid eh_entries - magic f30a, entries 24833, max 4(4), depth 0(0) [ 122.443651][ T9240] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz.3.1809: couldn't read orphan inode 15 (err -117) [ 122.451452][ T9251] loop1: detected capacity change from 0 to 1024 [ 122.478107][ T9240] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 122.493939][ T9240] ext2 filesystem being mounted at /25/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 122.548507][ T8815] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.571975][ T9257] syz_tun: entered promiscuous mode [ 122.572028][ T3104] ================================================================== [ 122.585266][ T3104] BUG: KCSAN: data-race in __dev_change_flags / is_upper_ndev_bond_master_filter [ 122.594386][ T3104] [ 122.596699][ T3104] read-write to 0xffff888112fca0b0 of 4 bytes by task 9257 on cpu 1: [ 122.604752][ T3104] __dev_change_flags+0x9a/0x410 [ 122.609692][ T3104] rtnl_newlink+0x121e/0x1690 [ 122.614366][ T3104] rtnetlink_rcv_msg+0x85e/0x910 [ 122.619305][ T3104] netlink_rcv_skb+0x12c/0x230 [ 122.624077][ T3104] rtnetlink_rcv+0x1c/0x30 [ 122.628505][ T3104] netlink_unicast+0x58d/0x660 [ 122.633276][ T3104] netlink_sendmsg+0x5ca/0x6e0 [ 122.638048][ T3104] __sock_sendmsg+0x140/0x180 [ 122.642736][ T3104] ____sys_sendmsg+0x312/0x410 [ 122.647497][ T3104] __sys_sendmsg+0x1e9/0x280 [ 122.652077][ T3104] __x64_sys_sendmsg+0x46/0x50 [ 122.656831][ T3104] x64_sys_call+0xb25/0x2d70 [ 122.661418][ T3104] do_syscall_64+0xc9/0x1c0 [ 122.665915][ T3104] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.671813][ T3104] [ 122.674127][ T3104] read to 0xffff888112fca0b0 of 4 bytes by task 3104 on cpu 0: [ 122.681667][ T3104] is_upper_ndev_bond_master_filter+0x2b/0xb0 [ 122.687737][ T3104] ib_enum_roce_netdev+0x124/0x1d0 [ 122.692854][ T3104] ib_enum_all_roce_netdevs+0x8a/0x100 [ 122.698317][ T3104] netdevice_event_work_handler+0x15b/0x3c0 [ 122.704213][ T3104] process_scheduled_works+0x483/0x9a0 [ 122.709688][ T3104] worker_thread+0x526/0x720 [ 122.714283][ T3104] kthread+0x1d1/0x210 [ 122.718356][ T3104] ret_from_fork+0x4b/0x60 [ 122.722764][ T3104] ret_from_fork_asm+0x1a/0x30 [ 122.727528][ T3104] [ 122.729845][ T3104] value changed: 0x00001002 -> 0x00008002 [ 122.735549][ T3104] [ 122.737854][ T3104] Reported by Kernel Concurrency Sanitizer on: [ 122.743984][ T3104] CPU: 0 PID: 3104 Comm: kworker/u8:6 Not tainted 6.10.0-rc6-syzkaller-00067-g8a9c6c40432e #0 [ 122.754214][ T3104] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 122.764264][ T3104] Workqueue: gid-cache-wq netdevice_event_work_handler [ 122.771116][ T3104] ================================================================== [ 122.803640][ T9257] syz_tun: left promiscuous mode [ 122.916614][ T9259] loop3: detected capacity change from 0 to 8192 [ 122.955110][ T9259] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 122.990812][ T9259] FAT-fs (loop3): error, fat_free_clusters: deleting FAT entry beyond EOF [ 122.999357][ T9259] FAT-fs (loop3): Filesystem has been set read-only [ 123.236972][ T8] usb usb6-port1: unable to enumerate USB device [ 124.453731][ T3104] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.499976][ T3104] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.570848][ T3104] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.630771][ T3104] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.691451][ T3104] bridge_slave_1: left allmulticast mode [ 124.697615][ T3104] bridge_slave_1: left promiscuous mode [ 124.703253][ T3104] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.712776][ T3104] bridge_slave_0: left allmulticast mode [ 124.718461][ T3104] bridge_slave_0: left promiscuous mode [ 124.724062][ T3104] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.839363][ T3104] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 124.850567][ T3104] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 124.861015][ T3104] bond0 (unregistering): Released all slaves [ 124.997100][ T3104] hsr_slave_0: left promiscuous mode [ 125.002752][ T3104] hsr_slave_1: left promiscuous mode [ 125.011201][ T3104] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 125.018596][ T3104] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 125.025977][ T3104] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 125.033445][ T3104] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 125.042688][ T3104] veth1_macvtap: left promiscuous mode [ 125.048269][ T3104] veth0_macvtap: left promiscuous mode [ 125.053872][ T3104] veth1_vlan: left promiscuous mode [ 125.059160][ T3104] veth0_vlan: left promiscuous mode [ 125.146348][ T3104] team0 (unregistering): Port device team_slave_1 removed [ 125.156560][ T3104] team0 (unregistering): Port device team_slave_0 removed [ 130.327562][ T29] kauditd_printk_skb: 72 callbacks suppressed [ 130.327576][ T29] audit: type=1400 audit(1720058902.085:863): avc: denied { search } for pid=2765 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1