last executing test programs: 2.253155639s ago: executing program 3 (id=592): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000200), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f00000009c0)={0x80, 0x0, 0xc8}) ftruncate(r0, 0xf) 2.160636147s ago: executing program 3 (id=595): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000005000000000000000100000c00000000010000000000000000000000005f306000"], 0x0, 0x35, 0x0, 0x0, 0x400000}, 0x20) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000014000000180001801400020000800000000000006d300000000000000800020000000000080013005ebb0000"], 0x3c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x3008042, &(0x7f0000000480), 0x1, 0x60a, &(0x7f00000012c0)="$eJzs3c9vFNcdAPDvrH9gY1ovqGpLD2WlqgKpxcYGKtT2YA69VMiiP5RLLnGwIYTlh2xHiUkkjEQukaJcoihSThxC/osEhSun5JRD7hESSiKOkbLR7M4Y/5i1zeL1Is/nIy07770dvzdevvtmnt+bDaC0auk/lYjDEXEjiRhNllfK+iMrrLVe9+THdy6kjyQajf99n0SS5eWvT7LnkWznoYj46sskDvVtrHdh6eaVmXp9bj5Ljy9evTG+sHTz+OWrM5fmLs1dm/zb5JnTp06fmTjR0XHdKsg7d+f1N0ffm375009+SiY++3Y6ian4d/bC1cexU2pRa/5Oko1FI2d2urIe6cv+n6x+i5P+HjaIZ5K/fwMR8bsYjb54+uaNxrv/6WnjgK5qJBENoKQS8Q8llV9/59f266+DK705LQF2weOzrQGAjfHf3xobjKHm2MD+J0msHtZJIqKzkbm1DkTEwwfTdy4+mL4TXRqHA4ot346I3xfFf9KM/2oMRbUZ/5U18Z+eF5zPntP8/3ZY//qhYvEPu6cV/0Obxn+0if9XVsX/qx3WX3u6+drwmvgf7vSQAAAAAAAAoLTun42Ivxb9/b+yMv8nCub/jETE1A7UX1uX3vj3/8qjHagGKPD4bMQ/C+f/VvLZv9WotrZ+1UwMJBcv1+dORMSvI+JYDOxL0xOb1HH8/UMftyurZfP/8kda/8NsLmDWjkf9+9buMzuzOPO8xw1EPL4d8YfC+b/JSv+fFPT/6efBjW3WcejP9863K8viP43wNvEPdEvjbsTRwv7/6V0rks3vzzHePB8Yz88KNvrj2x983q7+rfv/Ym4xAc8v7f/3bx7/1SS/X0/E3PzCs9dxcqm/sSGz2nrq9Px/MPl/85Yzg1neWzOLi/MTEYPJub40d03+5LO3GfaiPB7yeEnj/9ifNh//Kzr/H46I5XU/O/mhtaZ4fZ2//Xnkbrv2dNr/A88vjf/Z7fb/9frcfAcbk/eqX6xU+OD01D9W1b+9/v9Us68/luUY/4OWj/IwHVybXxCO/UVFu91eAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANgLKhFxIJLK2Mp2pTI2FjESEb+J/ZX69YXFv1y8/sa12bSs+f3/lfybfkdb6ST//v/qqvTkuvTJiDgYER/2DTfTYxeu12d7ffAAAAAAAAAAAAAAAAAAAADwghhps/4/9V1fr1sHdF1/B/s0utAOYPcVxP/XvWgHsPs66f+BvUH8Q3mJfygv8Q/lJf6hvMQ/lJf4h/IS/wAAAAAAsKccPHL/myQilv8+3HykBrOygZ62DOi2Sq8bAPSMW/xAeZn6A+W19TW+TwjY65Ityofa7rTVnpuodb4rAAAAAAAAAAAAAJTR0cPW/0NZWf8P5WX9P5RXvrr3SI/bAew+1/hAbLGSv3D9/5Z7AQAAAAAAAAAAAAA7aWHp5pWZen1u3sZLL0Yzurkxlb3reU6j0biVpnvesO5u/GuX6krW/Xp7dsiDhUX5Wr/t/ZzefB4BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAb/RIAAP//gx0fzw==") r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x458240, 0x90) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f00000003c0), 0x40100, 0x0) openat(r3, &(0x7f0000000400)='./file0\x00', 0x24cc40, 0x2) dup(r2) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x66, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r3) r4 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) r6 = socket(0x1d, 0x2, 0x6) bind$can_j1939(r6, &(0x7f0000000000)={0x1d, r5, 0x3}, 0x18) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[], 0x14}}, 0x0) io_uring_setup(0x396b, &(0x7f0000000180)) sendmsg$nl_route(r6, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2800003c483ac345df2507000000000000000000", @ANYRES32=r5, @ANYBLOB="08000100010000000800010000000000"], 0x28}}, 0x44004) sendmsg$TIPC_NL_MON_GET(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={0x0, 0x13c}}, 0x0) 1.436856165s ago: executing program 1 (id=608): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x10e, &(0x7f0000000080)={[{@grpid}, {@nodelalloc}, {@user_xattr}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x10000}}, {@block_validity}, {@block_validity}]}, 0x3, 0x45e, &(0x7f0000000180)="$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") sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a34000000090a000000000000000000000000000008000a40000000000900020073797a3200000000ffffffffffffff"], 0x5c}}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000440)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x0, 0x0, @remote}}, 0x0, 0x0, 0x2c, 0x0, "6970db5e1a5e59ab54053861b182c1aa5bfa09d21b699379ab04eb29ee95bfd4aa2e83662eefcca878e3677208de36650006bfdf10d35ddf3148573cbc274287f6f94c55fc2a25f51f91b69e87873ea1"}, 0xd8) syz_emit_ethernet(0x17b, &(0x7f0000000280)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0086dd6000000001450600fe8000000000000000000000000000bbff02000000000000000000000000000100004e22"], 0x0) 1.404500817s ago: executing program 4 (id=609): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x2, 0x101, 0x5, 0x109, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x4}, 0x48) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000080), 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000007c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c00000007000000030000000100000ff3fdffff050000003dcc00000000000205000000000000000900000003000000060000000000010004000000010000000100000081000000000000000f03000000032a08000000615f2e"], &(0x7f0000000780)=""/2, 0x6b, 0x2, 0x1}, 0x20) r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x4b, 0x0, 0x0, 0x8dda}, 0x0, 0xaffff7ffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000a00)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4, 0xb2325, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, 0xfffffffffffffffc) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x5452, &(0x7f00000015c0)='\x02;\xe5\b\x00\x1c\x9c\x00\x00\x00\x00\x00\x00\x91\xecB\xdcZ\xe5\xbd$\x05\x90\xa9\xf3\xc7\xcb\xb7\xf0\xa1;#\x989\xe9\x12\xdf^6T\xdf\xcd\x02\xc5\xb0\xba\x12\'QXp\t\xfc\xf3\x01\x02\xbc\xbf\xc0\xf0\x10\xee\xd3\\yy\xa4\xf9\xe8\x00\xdd\xe97 0_\xe4]W\xf7~\xacVK\xc9t\x9e+:\x85\xef\x94\x0e\x19\x9cV[N.\xeb\x9fJ>\xd9\x99\x88\xd8\xdd\xb8Y\xc3$\xc6\x93\v\x04REY\x010\xa5`\xdfI\xe5b{\x18z\xa2\xe8\xc9\xde\xea\xf4\xea\xf2\xcd\xcd.\x16\x861\xa1\v\x8d\x8e\x84R\xa6\x83\x84\xc0\x01e\xc3\xc8\xcc?\xc8?\x19\xb2\xa2\xe1\xac<\xe9f\x11\xff3\xc7\x19\x9e\x19\xf5-\xfe\xbd\xae\xbbR\x82\x16\xf9\x15S\x03U\xe0\xd8t\xe3%96') ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f0000000200)=0x7fff) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b405000000000000791061000000000007000000000000009500000000000000"], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x90) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup/syz1\x00', 0x1ff) write$cgroup_subtree(r1, 0x0, 0x6) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) recvmsg$unix(0xffffffffffffffff, &(0x7f0000001600)={&(0x7f0000000040)=@abs, 0x6e, &(0x7f0000001540)=[{0x0}, {&(0x7f00000013c0)=""/232, 0xe8}, {0x0}], 0x3, &(0x7f00000015c0)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a40), 0x4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000012c0)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(r0, &(0x7f0000000280)='blkio.bfq.io_service_time\x00', 0x0, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x10, &(0x7f0000001280), 0x56) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000140)}, {&(0x7f0000000580)="f4", 0x1}], 0x2}, 0x20000881) r4 = socket$phonet(0x23, 0x2, 0x1) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r5, 0x511d000) ioctl$SIOCPNGETOBJECT(r4, 0x89e0, 0x0) recvmsg(r3, 0x0, 0x40010141) recvmsg(r3, &(0x7f0000000fc0)={0x0, 0x0, 0x0}, 0x42) r6 = perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000829700000000000018010000202073f2f85d054b8845f02500000000002020207b1af8ff00000000bfa100000000000007810000f8fffeffb70200000800000087020000000000008500000006000000fa8613f9a272d00d0b5ea2fcd6d9662814cb57b415"], &(0x7f0000000140)='GPL\x00', 0x0, 0x9f, &(0x7f00000001c0)=""/159}, 0x90) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x5452, &(0x7f00000006c0)='\x02;\xe5\b\x00\x1c\x9c\x00\x00\x00\x00\x00\x00\x91\xecB\xdcZ\xe5\xbd$\x05\x90\xa9\xf3\xc7\xcb\xb7\xf0\xa1;#\x989\xe9\x12\xdf^6T\xdf\xcd\x02\xc5\xb0\xba\x12\'QXp\t\xfc\xf3\x01\x02\xbc\xbf\xc0\xf0\x10\xee\xd3\\yy\xa4\xf9\xe8\x00\xdd\xe97 0_\xe4]W\xf7~\xacVK\xc9t\x9e+:\x85\xef\x94\x0e\x19\x9cV[N.\xeb\x9fJ>\xd9\x99\x88\xd8\xdd\xb8Y\xc3$\xc6\x93\v\x04REY\xf4\xea\xf2\xcd\xcd.\x16\x861\xa1\v\x8d\x8e\x84R\xa6\x83\x84\xc0\x01e\xc3\xc8\xcc?\xc8?\x19\xb2\xa2\xe1\xac<\xe9f\x11\xff3\xc7\x19\x9e\x19\xf5-\xfe\xbd\xae\xbbR\x82\x16\xf9\x15S\x03U\xe0\xd8t\xe3%96') 1.382258139s ago: executing program 4 (id=610): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@minixdf}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100), 0xfecc) write$cgroup_int(r0, &(0x7f0000000200)=0x1500000000000000, 0xf000) 1.295554016s ago: executing program 3 (id=611): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000640)="d8000000180081064e81f782db4cb904021d", 0x12}], 0x1}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) getsockname(r1, &(0x7f00000014c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001540)=0x80) sendmsg$nl_route_sched(r0, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000009380)={&(0x7f00000000c0)=@deltfilter={0x2c, 0x2d, 0x1, 0x10400, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xf}, {}, {0x0, 0x1}}, [@TCA_CHAIN={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001f00)=ANY=[@ANYBLOB="200000005e00250e00000000000000000c000080eec47c8e670527ab040001"], 0x20}], 0x1}, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800500000000000000000000d00007f954b4e0d9e936a8dcc52ba3a79c586c24b4b02f332ba1eedc9d3bb694802bf85290ba7517ac55633e0d32bf9aa88abea7d5947d24fcb4f3e2a5835"], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x22, '\x00', r2, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x20}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={r4, 0xe0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8a85009a10d943a, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffff81, 0x14, 0x0, 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x64) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x1b, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x1089c8, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0}, 0xd20, 0x0, 0x3f, 0x378c1010a5cd1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x129}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="3400000000080103000000000000000000000000050003002100000006000240000000000900dff6b634836d7504af010073797a3100000000040004806995f5dfef9bf2ae3e2bab0db19dc1740bf28287a5a4ba609be6018d75e31d6a31a48c3c40fa69b8b72cd84182230c0edb917d2d3fd673cb413f3a8d5f2d2f17a53d"], 0x34}}, 0x0) r8 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000001040)={r5}, 0xb5023531) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000080)={@ifindex=r6, r8, 0x2f, 0x0, 0xffffffffffffffff, @prog_id}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000005c00)=ANY=[@ANYBLOB='b'], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) vmsplice(r9, &(0x7f00000013c0)=[{&(0x7f0000000080)='4', 0xfee1}, {&(0x7f0000000100)="a7", 0x1}, {&(0x7f0000000240)="9f", 0x1}, {&(0x7f0000000300)='b', 0x1}], 0x10000000000000e0, 0x1) 1.255608649s ago: executing program 4 (id=613): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000200), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000100)={{}, 0x0, 0x3ff}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={0x1, 0xffffffffffffffff}, 0x4) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)=@o_path={&(0x7f0000000040)='./file0\x00', r1, 0x4000, r0}, 0x18) syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000000)='./file0\x00', 0xa00a14, &(0x7f0000000080)=ANY=[], 0x1, 0x322, &(0x7f0000000580)="$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") r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r3 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r3, 0x0) ftruncate(r2, 0x1f) write$cgroup_type(r2, &(0x7f0000000200), 0x175d9003) 1.202455373s ago: executing program 3 (id=614): perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newsa={0x138, 0x10, 0x713, 0x0, 0xeaffffff, {{@in=@loopback}, {@in=@remote, 0x0, 0x32}, @in=@local, {}, {}, {}, 0x0, 0x0, 0xa, 0x1}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}}, 0x0) 1.202012094s ago: executing program 1 (id=615): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$team(&(0x7f00000001c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000004821178f459c0b7a600", @ANYRES32=r4, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0xffffffff, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x8, r9}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x10}]}, 0x28}}, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r3, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r11, @ANYBLOB="887b231fce"], 0x28}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newqdisc={0xffffffef, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {0x871437f98c18d4e2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x20, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x70dab7c4}, @TCA_TBF_BURST={0x8}, @TCA_TBF_RTAB={0x0, 0x2, [0x6, 0xfffffffa, 0x2, 0x1, 0x6, 0x40, 0x4, 0x5, 0x4, 0x4, 0x4, 0x3, 0x1, 0x0, 0x9, 0xa30, 0x0, 0x8, 0xc, 0x0, 0x2, 0xb38, 0x4, 0x9899, 0x1, 0xffffc9d6, 0x49ea, 0x8c, 0xc0f0, 0xfff, 0xb364, 0x15, 0x4, 0x2e, 0xdca, 0x6, 0x21100ed5, 0x8, 0x560, 0x4, 0x6, 0x8000, 0x9ee, 0x3, 0x64a9, 0x3, 0xff, 0x2, 0x7fffffff, 0x2, 0xa, 0x6, 0x0, 0xf, 0xfffffffb, 0x9, 0x7, 0x5, 0xfffffff9, 0xb, 0x5, 0x5, 0xffffffff, 0x56b, 0x2, 0x9, 0x0, 0x4, 0x2, 0x4, 0x400, 0xfffffbff, 0x7fff, 0x0, 0x616cf5fc, 0xffff, 0x8ac, 0xd314, 0x1, 0x81, 0x1, 0x7, 0x2, 0x5, 0x101, 0x4, 0x3, 0x9, 0x3, 0x3, 0xfffffffa, 0xa, 0x64f9, 0x5, 0x8, 0x1, 0x81, 0xfffffffb, 0x6, 0x4, 0x8, 0x9c79, 0x6, 0x6, 0x6, 0x2, 0x0, 0x3, 0x1, 0x27e, 0x7, 0x64, 0x4, 0x3c3f59c0, 0x7, 0x5, 0x1, 0xffffcd14, 0x6, 0x40, 0x8, 0x1, 0x33, 0x2, 0x6, 0x4a1, 0x8f, 0x0, 0xff, 0x6, 0x5, 0xfffffffa, 0x0, 0x3, 0x1, 0x3, 0x1, 0x101, 0xce, 0xd, 0x9, 0xfffff621, 0x7, 0x8, 0x8, 0x8, 0x5, 0x200, 0x10, 0x7, 0x8, 0x81, 0xe, 0x7, 0x5, 0x2, 0x510, 0x0, 0x0, 0x7, 0x10, 0x7, 0xfffffff7, 0x9, 0x0, 0x8ee8, 0x2, 0x401, 0x2, 0x3, 0x1, 0xfffffffd, 0x7, 0x40, 0x9, 0x0, 0x2, 0x100, 0x5, 0x1000, 0x6, 0x200, 0x2, 0x8458, 0x7f, 0x38400000, 0x6, 0x5, 0xffffffff, 0x8, 0xffffffff, 0xd0, 0xfffffff0, 0x2, 0x5, 0x81, 0x8, 0xa, 0x0, 0x7, 0x5, 0x2, 0x1f2c25b7, 0x0, 0x7, 0x200, 0x9, 0x0, 0xe401, 0x3, 0x101, 0x6, 0x25, 0x9ac9, 0x9, 0x37, 0x7fffffff, 0xb, 0x9, 0x53, 0x200, 0x0, 0x6, 0x4d, 0x6, 0x5, 0x6, 0x2, 0x0, 0x9101, 0x0, 0x8, 0x9, 0x9, 0x6, 0x3, 0xff, 0x10000, 0x2, 0x7fff, 0xcc6, 0x9, 0x7f, 0x8, 0x40, 0x7ff, 0x8, 0x1, 0x401, 0xb05, 0x8, 0xff, 0x7933633, 0x3, 0x5, 0x3]}]}}]}, 0x4c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 1.152890948s ago: executing program 3 (id=617): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f0000000280)={[{@grpquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x88}}, {@resuid}, {@max_batch_time={'max_batch_time', 0x3d, 0x3}}, {@lazytime}, {@usrquota}, {@data_err_abort}, {@data_err_abort}]}, 0x1, 0x5d8, &(0x7f0000001200)="$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") quotactl$Q_SETQUOTA(0x0, &(0x7f00000000c0)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x143042, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x0, 0x0, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000000800024000000000180003801400010076657468305f746f5f6873720000000050000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000001c000380180003801400018076657468305f746f5f68737200000000080007"], 0xf0}}, 0x0) getsockopt$bt_BT_RCVMTU(r0, 0x112, 0xa, 0x0, &(0x7f0000000180)) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x10, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[], 0x0, 0x3e, 0x0, 0xa}, 0x20) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/profiling', 0x22042, 0x0) write$tun(r2, &(0x7f0000000280)=ANY=[@ANYRESDEC=r2], 0x15) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000f3ff000085000000700000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000340), 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8052, &(0x7f00000005c0), 0x1, 0x4c4, &(0x7f00000000c0)="$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") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40286608, &(0x7f0000000540)) 1.152770678s ago: executing program 0 (id=618): syz_emit_ethernet(0x46, &(0x7f0000000600)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa0086dd60000000060000000000ff02000000000000000002000000000186009078060000000000"], 0x0) 1.12642076s ago: executing program 0 (id=619): socket(0x10, 0x803, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='uid_map\x00') ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x1) read$msr(r0, &(0x7f0000000080)=""/98, 0x62) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_proto_private(r1, 0x89e0, &(0x7f0000003180)) socket$inet6_udp(0xa, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x80, &(0x7f0000000440)=ANY=[@ANYRES16=0x0, @ANYRESOCT, @ANYRESHEX], 0x1, 0x124b, &(0x7f0000001880)="$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") madvise(&(0x7f0000000000/0x4000)=nil, 0x0, 0x0) pwritev2(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0x7a00, 0x30, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x4, 0x12, 0xffffffffffffffff, 0x0) stat(&(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)) creat(0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000714400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000000a000100aaaaaaaaaa0000001c00128009000100766c616e000000000c000280060005008100000040fc2f792d5ade04cc76670704c802571525cc48b84fe706f0b771e6fd0edb0fec5534a6bfe83c051448de925570d77ba41680df9c5e89668d9781e6602f0c91d010ef2b3a1eea23df307d7fb924ecbede8588238a66c02bfd6210a08b037823ac190a22054ae2d26d87c7"], 0x48}}, 0x0) r3 = perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x0, 0x37b}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_FS_INFO(r3, 0x8400941f, &(0x7f0000000480)) r4 = open(&(0x7f00000000c0)='./bus\x00', 0x24142, 0x10) r5 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) utimensat(0xffffffffffffffff, 0x0, 0x0, 0x0) r6 = open(&(0x7f0000000000)='./bus\x00', 0x60302, 0x0) r7 = open(&(0x7f0000000040)='./bus\x00', 0xc480, 0x0) ftruncate(r6, 0x2007ffd) sendfile(r6, r7, 0x0, 0x1000000201005) sendfile(r4, r5, 0x0, 0x1000000201005) bpf$PROG_LOAD(0x5, 0x0, 0x0) 1.058402295s ago: executing program 1 (id=620): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) mknod(&(0x7f0000000540)='./file1\x00', 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)=@gettaction={0x13, 0x32, 0x1, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}]}]}, 0x28}}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='attr/keycreate\x00') mount$9p_fd(0x0, &(0x7f00000006c0)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) syz_io_uring_setup(0x4174, &(0x7f0000000780)={0x0, 0x0, 0x400, 0x2}, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r2, 0x29, 0x45, &(0x7f00000000c0)={'icmp\x00'}, &(0x7f0000000140)=0x1e) syz_io_uring_submit(r3, r4, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/4, 0x4}], 0x1}) io_uring_enter(r2, 0x567, 0x0, 0x0, 0x0, 0x0) r5 = syz_io_uring_setup(0x52ba, &(0x7f0000000380)={0x0, 0x0, 0x80, 0x3}, &(0x7f0000000340), &(0x7f0000000280)) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r5, 0x13, 0x2000ac0a, r6) socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r7, &(0x7f0000000000)={0x18, 0x0, {0x2, @dev, 'team_slave_1\x00'}}, 0x1e) connect$pppoe(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x0, {0x2, @multicast, 'veth1_to_batadv\x00'}}, 0x1e) r8 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r8, &(0x7f0000000000)={0x18, 0x0, {0x2, @dev, 'veth1_to_batadv\x00'}}, 0x1e) syz_genetlink_get_family_id$ipvs(&(0x7f0000000480), 0xffffffffffffffff) r9 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r9, &(0x7f0000000000)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "0f03c8c7e8da000000000000ffffff017f000000cce67e1d0000e565aa9a9d32c7627ffe7a54cdbd77b3000000000000000000060000000000000000deff00", 0x1b}, 0x60) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN(r2, 0x4040942c, &(0x7f0000000300)={0x0, 0x1, [0x8, 0x2b00000000000, 0x98, 0xd09, 0x7, 0x7]}) getsockopt$nfc_llcp(r9, 0x118, 0x3, &(0x7f0000000140)=""/192, 0x20000057) io_uring_enter(r5, 0x43be, 0x0, 0x0, 0x0, 0x0) getsockopt$bt_hci(r2, 0x0, 0x3, &(0x7f0000000200)=""/171, &(0x7f00000002c0)=0xab) 981.701541ms ago: executing program 4 (id=622): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x1c, 0x35, 0x1, 0x0, 0x0, {0x4}, [@typed={0x4}, @typed={0x4, 0x8}]}, 0x1c}}, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) fgetxattr(r1, &(0x7f0000000500)=@random={'btrfs.', 'nl80211\x00'}, 0x0, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='hugetlb.2MB.rsvd.max_usage_in_bytes\x00', 0x2, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000000)={@private0={0xfc, 0x0, '\x00', 0x1}}, 0x14) close(r2) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000080)={0x1, [0x0]}, &(0x7f00000000c0)=0x8) r3 = io_uring_setup(0x17ba, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r3, 0x2, &(0x7f0000000040)=[0xffffffffffffffff], 0x100002) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x84, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0xfffd}, 0x90) sendmmsg(r4, &(0x7f0000003ac0)=[{{&(0x7f0000000140)=@in6={0xa, 0x0, 0x0, @local, 0x8}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000380)='[', 0x1}], 0x1}}], 0x1, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r5 = socket$key(0xf, 0x3, 0x2) connect$rxrpc(0xffffffffffffffff, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x24) sendmmsg(0xffffffffffffffff, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001880)=[{{0x0, 0x0, 0x0}}], 0xf000, 0x10002, 0x0) sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000340)={&(0x7f0000000200)=ANY=[@ANYBLOB="30000000170a050000000000001e000001e0ff071c000380080002400000000008000240000000060800014000000000"], 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x24040010) sendmsg$key(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="02142000110000000040000000000000030005000000000002000000ffffffff0000000000000000080012000000010000000000000000000600000000000027b20e97a6a9ecae000000ee00000000000000000000000000fc020000000000000000000000000000030006000000000002000000e00000010000000000000000010018"], 0x88}}, 0x0) 769.215738ms ago: executing program 2 (id=626): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) mknod(&(0x7f0000000540)='./file1\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='attr/keycreate\x00') ioctl$sock_proto_private(r1, 0x89ec, &(0x7f00000000c0)) mount$9p_fd(0x0, &(0x7f00000006c0)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) r2 = syz_io_uring_setup(0x4174, &(0x7f0000000780)={0x0, 0x0, 0x10100}, 0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/4, 0x4}], 0x1}) io_uring_enter(r2, 0x567, 0x0, 0x0, 0x0, 0x0) 703.925454ms ago: executing program 2 (id=627): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x10e, &(0x7f0000000080)={[{@grpid}, {@nodelalloc}, {@user_xattr}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x10000}}, {@block_validity}, {@block_validity}]}, 0x3, 0x45e, &(0x7f0000000180)="$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") sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a34000000090a000000000000000000000000000008000a40000000000900020073797a3200000000ffffffffffffff"], 0x5c}}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000440)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x0, 0x0, @remote}}, 0x0, 0x0, 0x2c, 0x0, "6970db5e1a5e59ab54053861b182c1aa5bfa09d21b699379ab04eb29ee95bfd4aa2e83662eefcca878e3677208de36650006bfdf10d35ddf3148573cbc274287f6f94c55fc2a25f51f91b69e87873ea1"}, 0xd8) syz_emit_ethernet(0x17b, &(0x7f0000000280)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0086dd6000000001450600fe8000000000000000000000000000bbff02000000000000000000000000000100004e22"], 0x0) 605.368371ms ago: executing program 2 (id=628): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r0, &(0x7f0000000600)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000480)={0x148, 0x17, 0xa, 0x301, 0x0, 0x1400, {0x3, 0x0, 0xa}, [@NFTA_FLOWTABLE_HOOK={0xac, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_HOOK_DEVS={0x90, 0x3, 0x0, 0x1, [{0x14, 0x1, 'pim6reg0\x00'}, {0x14, 0x1, 'syzkaller1\x00'}, {0x14, 0x1, 'hsr0\x00'}, {0x14, 0x1, 'ipvlan0\x00'}, {0x14, 0x1, 'virt_wifi0\x00'}, {0x14, 0x1, 'pimreg1\x00'}, {0x14, 0x1, 'team0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_HOOK={0x50, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'xfrm0\x00'}, {0x14, 0x1, 'rose0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x7eb}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}]}, 0x148}, 0x1, 0x0, 0x0, 0x40080}, 0x40) 493.122281ms ago: executing program 2 (id=629): sync() (async) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="d80000001800eb054e81f783db4cb9040a1d080006007c09e8fc55a10a0015000600142603600e1208000f00060004010c00080008000c4004000000035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cb8b4c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e002c2a73ae028d1b34ff4f8cc430bb5a360db598262f3d40fad9e3bb9ad809d5e1cace81ed0bffece8b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d930000", 0xd8}, {&(0x7f0000000580)="a0025054a9306c0515cc905d18ee2f7fc0eaeda60ec5734f297ddf7fac66d938425badea011927eecf9bdea67a887625a3ed7313484b678b091674293b14ab558d859a76762565fa0bdd4121f8fd16bef1c32120a9a2042ad032cf362141351486ef4deed42d0174df0aef42de0fb329116df4681166b3bb07feda2fea749b351ae6bea739e4d5ba877de8efed4bffa4d84fab11fa1c7ff3e5f0303f32413b2047fd0d00f08b4f3acbc111c94ab123799c7ea3548cf331d39d051c00455b60aa317d3ed50b358bdefb7ac24c15515f24611186cc61319373a2a3d3be9a0abc834eadaf9d1892597807e6e56d04d42334fb88eb1984e9", 0xf6}, {&(0x7f0000000680)="cd7a65788f12ba623e5e0dce3ec67d97aa491227c5ede9f0b8ff28e0787ca5a93bc7d882650a80ec3231c7d6e4a8e1de156922ba61df61f84c39ee15ec28179f37d57fdfa088be3e34b87b4c78f643d97ea4658e1bd5bf04497c07e57ce7afebb2975ac8d6070a79", 0x68}], 0x3}, 0x0) (async) sync() (async) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x40049, 0x4) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) (async, rerun: 64) perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x10000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (async, rerun: 64) syz_io_uring_setup(0x259b, 0x0, 0x0, &(0x7f0000000180)) (async) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) syz_io_uring_submit(0x0, 0x0, 0x0) (async) socket(0x0, 0x0, 0x0) (async) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) open(0x0, 0x0, 0x128) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x10, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) (async) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) (async, rerun: 64) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async, rerun: 64) io_setup(0x0, 0x0) (async) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) (async, rerun: 64) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) (async, rerun: 64) close(0xffffffffffffffff) (async) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000000700)={'filter\x00', 0x7, 0x4, 0x3f0, 0x110, 0x220, 0x0, 0x308, 0x308, 0x308, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@random="58607b1c69cb", @empty, @loopback}}}, {{@arp={@remote, @empty, 0x0, 0x0, 0xf, 0x5, {@mac}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 'ip6gre0\x00', 'veth1_virt_wifi\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @rand_addr=0x64010100, @empty, 0xf, 0xffffffff}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) (async, rerun: 32) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) (async) socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'gretap0\x00'}) 404.979977ms ago: executing program 2 (id=630): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$team(&(0x7f00000001c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000004821178f459c0b7a600", @ANYRES32=r4, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0xffffffff, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x8, r9}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x10}]}, 0x28}}, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r3, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r11, @ANYBLOB="887b231fce"], 0x28}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newqdisc={0xffffffef, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {0x871437f98c18d4e2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x20, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x70dab7c4}, @TCA_TBF_BURST={0x8}, @TCA_TBF_RTAB={0x0, 0x2, [0x6, 0xfffffffa, 0x2, 0x1, 0x6, 0x40, 0x4, 0x5, 0x4, 0x4, 0x4, 0x3, 0x1, 0x0, 0x9, 0xa30, 0x0, 0x8, 0xc, 0x0, 0x2, 0xb38, 0x4, 0x9899, 0x1, 0xffffc9d6, 0x49ea, 0x8c, 0xc0f0, 0xfff, 0xb364, 0x15, 0x4, 0x2e, 0xdca, 0x6, 0x21100ed5, 0x8, 0x560, 0x4, 0x6, 0x8000, 0x9ee, 0x3, 0x64a9, 0x3, 0xff, 0x2, 0x7fffffff, 0x2, 0xa, 0x6, 0x0, 0xf, 0xfffffffb, 0x9, 0x7, 0x5, 0xfffffff9, 0xb, 0x5, 0x5, 0xffffffff, 0x56b, 0x2, 0x9, 0x0, 0x4, 0x2, 0x4, 0x400, 0xfffffbff, 0x7fff, 0x0, 0x616cf5fc, 0xffff, 0x8ac, 0xd314, 0x1, 0x81, 0x1, 0x7, 0x2, 0x5, 0x101, 0x4, 0x3, 0x9, 0x3, 0x3, 0xfffffffa, 0xa, 0x64f9, 0x5, 0x8, 0x1, 0x81, 0xfffffffb, 0x6, 0x4, 0x8, 0x9c79, 0x6, 0x6, 0x6, 0x2, 0x0, 0x3, 0x1, 0x27e, 0x7, 0x64, 0x4, 0x3c3f59c0, 0x7, 0x5, 0x1, 0xffffcd14, 0x6, 0x40, 0x8, 0x1, 0x33, 0x2, 0x6, 0x4a1, 0x8f, 0x0, 0xff, 0x6, 0x5, 0xfffffffa, 0x0, 0x3, 0x1, 0x3, 0x1, 0x101, 0xce, 0xd, 0x9, 0xfffff621, 0x7, 0x8, 0x8, 0x8, 0x5, 0x200, 0x10, 0x7, 0x8, 0x81, 0xe, 0x7, 0x5, 0x2, 0x510, 0x0, 0x0, 0x7, 0x10, 0x7, 0xfffffff7, 0x9, 0x0, 0x8ee8, 0x2, 0x401, 0x2, 0x3, 0x1, 0xfffffffd, 0x7, 0x40, 0x9, 0x0, 0x2, 0x100, 0x5, 0x1000, 0x6, 0x200, 0x2, 0x8458, 0x7f, 0x38400000, 0x6, 0x5, 0xffffffff, 0x8, 0xffffffff, 0xd0, 0xfffffff0, 0x2, 0x5, 0x81, 0x8, 0xa, 0x0, 0x7, 0x5, 0x2, 0x1f2c25b7, 0x0, 0x7, 0x200, 0x9, 0x0, 0xe401, 0x3, 0x101, 0x6, 0x25, 0x9ac9, 0x9, 0x37, 0x7fffffff, 0xb, 0x9, 0x53, 0x200, 0x0, 0x6, 0x4d, 0x6, 0x5, 0x6, 0x2, 0x0, 0x9101, 0x0, 0x8, 0x9, 0x9, 0x6, 0x3, 0xff, 0x10000, 0x2, 0x7fff, 0xcc6, 0x9, 0x7f, 0x8, 0x40, 0x7ff, 0x8, 0x1, 0x401, 0xb05, 0x8, 0xff, 0x7933633, 0x3, 0x5, 0x3]}]}}]}, 0x4c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 375.44175ms ago: executing program 2 (id=631): r0 = socket(0x2, 0x3, 0xff) connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x0, 0xffff, 0x0, 0x0, 0x0, 0xffffff7f}, 0x1c) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000005c0)={{0x14}, [], {0x14}}, 0x28}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000dc0)={'syztnl1\x00', &(0x7f0000000d40)={'ip6tnl0\x00', 0x0, 0x29, 0xe9, 0x81, 0x6, 0x13, @mcast2, @local, 0x10, 0x7, 0x7f, 0x5}}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = socket$inet6(0xa, 0x6, 0x0) r6 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x8002) write$binfmt_aout(r6, &(0x7f0000000380)=ANY=[@ANYBLOB="03070000b5"], 0xc8) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) r7 = memfd_create(0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0) r8 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_raw(r8, &(0x7f00000005c0), 0x10) read(r8, &(0x7f00000017c0)=""/4106, 0x100a) setsockopt$SO_TIMESTAMP(r8, 0x1, 0x23, &(0x7f00000000c0)=0x1, 0x4) setsockopt$CAN_RAW_RECV_OWN_MSGS(r8, 0x65, 0x4, &(0x7f0000000580)=0x1, 0x4) sendmsg$can_raw(r8, &(0x7f0000000240)={&(0x7f0000000780)={0x1d, r9}, 0x10, &(0x7f0000000200)={&(0x7f0000000140), 0x10}}, 0x0) write$binfmt_aout(r4, &(0x7f00000001c0)=ANY=[@ANYRES32=r9, @ANYRESHEX=r7, @ANYRESHEX=r6, @ANYRES64=r7], 0x119) close_range(r5, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="03000000000000002c0012800c0001006d6163766c616e001c000280080001000800000006000200010000001ffe02000000000008000500", @ANYRES32=r12, @ANYBLOB="08100a00", @ANYRES32=r10, @ANYBLOB], 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0xc010) 327.113194ms ago: executing program 3 (id=632): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="200000001814010000000003000000000800010000000000080003"], 0x20}}, 0x0) 269.997289ms ago: executing program 0 (id=633): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0x1c, &(0x7f0000000440)=ANY=[@ANYBLOB="feff000002000000ebd1ea43edb94b33756692e2b88e00"/32, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bfa90000000000003509"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r3 = dup(r2) write$P9_RLERRORu(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[], [], 0x6b}}) open(&(0x7f00000006c0)='./file0\x00', 0x0, 0x40000100) 149.076348ms ago: executing program 1 (id=634): pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 32) r2 = socket(0x10, 0x3, 0x0) (async, rerun: 32) syz_genetlink_get_family_id$ethtool(&(0x7f0000000840), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) (async) statx(0xffffffffffffffff, 0x0, 0x0, 0x8, 0x0) (async) mount$9p_fd(0x0, 0x0, &(0x7f0000000180), 0x40000, 0x0) (async) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000001800)=@raw={'raw\x00', 0x3c1, 0x3, 0x1378, 0x11b8, 0xc8, 0x8, 0x0, 0x5803, 0x12a8, 0x2e8, 0x2e8, 0x12a8, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x1198, 0x11b8, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5df11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f35a214e67262c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x2}}, @common=@unspec=@cgroup1={{0x1030}, {0x0, 0x1, 0x0, 0x0, './cgroup.cpu/syz1\x00'}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x13d8) (async) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0xc, 0x13, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x100, 0x100, 0x9, 0x1, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000), &(0x7f00000002c0), 0x8, r4}, 0x38) (async, rerun: 64) r5 = socket$inet_tcp(0x2, 0x1, 0x0) (async, rerun: 64) r6 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000480), 0x8c40, 0x0) ioctl$PTP_SYS_OFFSET_EXTENDED(r6, 0xc4c03d09, &(0x7f00000006c0)={0x13}) setsockopt$ARPT_SO_SET_REPLACE(r5, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x3e8, 0x200, 0x200, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2}}, {@mac}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'erspan0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x2, 0x4}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x2}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local}, {@mac=@multicast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x2}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) (async) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x3, r4}, 0x38) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000100), 0xfecc) (async, rerun: 32) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x100010, r7, 0x0) (rerun: 32) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x5, 0x933, 0x1f, 0x40, 0xffffffffffffffff, 0xb175, '\x00', 0x0, r0, 0x1, 0x0, 0x3, 0xd}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x90) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x200}) (async) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x89f3, &(0x7f0000000080)) (async, rerun: 64) r9 = socket$inet_udplite(0x2, 0x2, 0x88) (rerun: 64) setsockopt$IPT_SO_SET_REPLACE(r9, 0x4000000000000, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x4001, 0x3, 0x208, 0xd0, 0x0, 0x148, 0x0, 0x148, 0x170, 0x240, 0x240, 0x170, 0x240, 0x7fffffe, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'ip6gretap0\x00', 'veth1_to_batadv\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [], 0x0, 0x3}}}}, {{@ip={@local, @empty, 0x0, 0x0, 'wlan0\x00', 'ipvlan1\x00', {}, {}, 0x0, 0x0, 0x718249cafe03eccf}, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x268) (async) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYRES32=r9, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006d616373656300000400028060001680580001800c00040054000000000000000c000300050000000500000014000b00060000000000000008000000000000002800010005000000bbbbbbbbbbbb00000000cc0131322329330d70ea36000100000000000000000000000000000000000000000400018000ebeab6847e578079eac90f1715d09951290cc83dc2ad1e3567e27b892a83f332535bce24dc77bba599f00688b8f3faafa7dfb84f6804d12e9155972019287e"], 0x94}}, 0x0) syz_io_uring_setup(0x6105, &(0x7f0000000000)={0x0, 0x384f, 0x0, 0x3, 0x12c, 0x0, r1}, &(0x7f0000000080), &(0x7f00000004c0)) 148.904478ms ago: executing program 1 (id=635): socket$nl_netfilter(0x10, 0x3, 0xc) getresgid(&(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_GET(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="18000000121401000000000000000000040002"], 0x18}}, 0x0) syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000200)='./file0\x00', 0x10814, &(0x7f0000000440)=ANY=[@ANYBLOB='umask=00000000000000000000000,flush,nodots,dots,gid=', @ANYRESHEX=r2, @ANYBLOB="00006b746769643d0092", @ANYRESOCT=r0, @ANYRES32=r3, @ANYRESOCT=r1], 0x1, 0x1fe, &(0x7f0000000240)="$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") r4 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) dup3(r5, r6, 0x0) syz_open_dev$usbfs(&(0x7f0000000000), 0x800000001ff, 0x2) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000400)='./file0\x00', 0x806, &(0x7f0000000500)={[{@rodir}, {@shortname_winnt}, {@uni_xlateno}, {@uni_xlate}, {@utf8no}, {@utf8}, {@numtail}, {@utf8no}, {@uni_xlateno}, {@fat=@flush}, {@shortname_mixed}, {@shortname_lower}, {@rodir}, {@shortname_winnt}, {@shortname_mixed}, {@utf8}]}, 0xfe, 0x2aa, &(0x7f0000000a40)="$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") socket$netlink(0x10, 0x3, 0x0) fallocate(r4, 0x40000000, 0x0, 0x1000f4) 142.014899ms ago: executing program 4 (id=636): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6(0xa, 0x0, 0x88) bind$inet6(r0, &(0x7f0000000300)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x66, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x0, 0x5}, 0x48) syz_open_dev$tty1(0xc, 0x4, 0x1) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$BPF_PROG_ATTACH(0x9, &(0x7f0000000080)={@map=0x1, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, @prog_id}, 0x20) bpf$ITER_CREATE(0x21, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$BTRFS_IOC_DEFRAG_RANGE(0xffffffffffffffff, 0x40309410, &(0x7f0000000080)={0x0, 0x72ee4330, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x7]}) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x2, 0x250, [0x0, 0x20000100, 0x20000130, 0x20000280, 0x0, 0x1100], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"]}, 0x2c8) r2 = socket$packet(0x11, 0x0, 0x300) sendto$packet(r2, &(0x7f00000000c0)="3f030e00031b1200000000de1f81", 0xe, 0x0, 0x0, 0x0) 114.890121ms ago: executing program 0 (id=637): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) mknod(&(0x7f0000000540)='./file1\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='attr/keycreate\x00') ioctl$sock_proto_private(r1, 0x89ec, &(0x7f00000000c0)) mount$9p_fd(0x0, &(0x7f00000006c0)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) r2 = syz_io_uring_setup(0x4174, &(0x7f0000000780)={0x0, 0x0, 0x10100}, 0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/4, 0x4}], 0x1}) io_uring_enter(r2, 0x567, 0x0, 0x0, 0x0, 0x0) 35.414107ms ago: executing program 0 (id=638): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x10e, &(0x7f0000000080)={[{@grpid}, {@nodelalloc}, {@user_xattr}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x10000}}, {@block_validity}, {@block_validity}]}, 0x3, 0x45e, &(0x7f0000000180)="$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") sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a34000000090a000000000000000000000000000008000a40000000000900020073797a3200000000ffffffffffffff"], 0x5c}}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000440)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x0, 0x0, @remote}}, 0x0, 0x0, 0x2c, 0x0, "6970db5e1a5e59ab54053861b182c1aa5bfa09d21b699379ab04eb29ee95bfd4aa2e83662eefcca878e3677208de36650006bfdf10d35ddf3148573cbc274287f6f94c55fc2a25f51f91b69e87873ea1"}, 0xd8) syz_emit_ethernet(0x17b, &(0x7f0000000280)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0086dd6000000001450600fe8000000000000000000000000000bbff02000000000000000000000000000100004e22"], 0x0) 1.48195ms ago: executing program 0 (id=639): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_REPLAY_PROTECT={0x5, 0xc, 0x1}]}}}]}, 0x3c}, 0x1, 0x600}, 0x0) 1.15743ms ago: executing program 4 (id=640): socket$packet(0x11, 0x0, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r1, 0x0) r2 = socket$qrtr(0x2a, 0x2, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_io_uring_setup(0x23b, &(0x7f0000000080)={0x0, 0x0, 0x10100}, 0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000380)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r3, 0x2def, 0x0, 0x0, 0x0, 0xfffffffffffffe9d) io_uring_enter(r3, 0x0, 0x0, 0x0, 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100), 0x111}}, 0x20) writev(0xffffffffffffffff, &(0x7f0000000000), 0x0) connect$qrtr(r2, &(0x7f0000000040), 0xc) r5 = socket$netlink(0x10, 0x3, 0x0) dup2(r5, r2) ftruncate(r1, 0xc17a) sendmsg$tipc(r0, &(0x7f00000005c0)={&(0x7f0000000000), 0x10, &(0x7f0000000480)=[{&(0x7f0000000180)="f7", 0x101d0}], 0x1}, 0x0) (fail_nth: 3) 0s ago: executing program 1 (id=641): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$team(&(0x7f00000001c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000004821178f459c0b7a600", @ANYRES32=r4, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x50}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0xffffffff, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x8, r9}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x10}]}, 0x28}}, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r3, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r11, @ANYBLOB="887b231fce"], 0x28}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newqdisc={0xffffffef, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {0x871437f98c18d4e2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x20, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x70dab7c4}, @TCA_TBF_BURST={0x8}, @TCA_TBF_RTAB={0x0, 0x2, [0x6, 0xfffffffa, 0x2, 0x1, 0x6, 0x40, 0x4, 0x5, 0x4, 0x4, 0x4, 0x3, 0x1, 0x0, 0x9, 0xa30, 0x0, 0x8, 0xc, 0x0, 0x2, 0xb38, 0x4, 0x9899, 0x1, 0xffffc9d6, 0x49ea, 0x8c, 0xc0f0, 0xfff, 0xb364, 0x15, 0x4, 0x2e, 0xdca, 0x6, 0x21100ed5, 0x8, 0x560, 0x4, 0x6, 0x8000, 0x9ee, 0x3, 0x64a9, 0x3, 0xff, 0x2, 0x7fffffff, 0x2, 0xa, 0x6, 0x0, 0xf, 0xfffffffb, 0x9, 0x7, 0x5, 0xfffffff9, 0xb, 0x5, 0x5, 0xffffffff, 0x56b, 0x2, 0x9, 0x0, 0x4, 0x2, 0x4, 0x400, 0xfffffbff, 0x7fff, 0x0, 0x616cf5fc, 0xffff, 0x8ac, 0xd314, 0x1, 0x81, 0x1, 0x7, 0x2, 0x5, 0x101, 0x4, 0x3, 0x9, 0x3, 0x3, 0xfffffffa, 0xa, 0x64f9, 0x5, 0x8, 0x1, 0x81, 0xfffffffb, 0x6, 0x4, 0x8, 0x9c79, 0x6, 0x6, 0x6, 0x2, 0x0, 0x3, 0x1, 0x27e, 0x7, 0x64, 0x4, 0x3c3f59c0, 0x7, 0x5, 0x1, 0xffffcd14, 0x6, 0x40, 0x8, 0x1, 0x33, 0x2, 0x6, 0x4a1, 0x8f, 0x0, 0xff, 0x6, 0x5, 0xfffffffa, 0x0, 0x3, 0x1, 0x3, 0x1, 0x101, 0xce, 0xd, 0x9, 0xfffff621, 0x7, 0x8, 0x8, 0x8, 0x5, 0x200, 0x10, 0x7, 0x8, 0x81, 0xe, 0x7, 0x5, 0x2, 0x510, 0x0, 0x0, 0x7, 0x10, 0x7, 0xfffffff7, 0x9, 0x0, 0x8ee8, 0x2, 0x401, 0x2, 0x3, 0x1, 0xfffffffd, 0x7, 0x40, 0x9, 0x0, 0x2, 0x100, 0x5, 0x1000, 0x6, 0x200, 0x2, 0x8458, 0x7f, 0x38400000, 0x6, 0x5, 0xffffffff, 0x8, 0xffffffff, 0xd0, 0xfffffff0, 0x2, 0x5, 0x81, 0x8, 0xa, 0x0, 0x7, 0x5, 0x2, 0x1f2c25b7, 0x0, 0x7, 0x200, 0x9, 0x0, 0xe401, 0x3, 0x101, 0x6, 0x25, 0x9ac9, 0x9, 0x37, 0x7fffffff, 0xb, 0x9, 0x53, 0x200, 0x0, 0x6, 0x4d, 0x6, 0x5, 0x6, 0x2, 0x0, 0x9101, 0x0, 0x8, 0x9, 0x9, 0x6, 0x3, 0xff, 0x10000, 0x2, 0x7fff, 0xcc6, 0x9, 0x7f, 0x8, 0x40, 0x7ff, 0x8, 0x1, 0x401, 0xb05, 0x8, 0xff, 0x7933633, 0x3, 0x5, 0x3]}]}}]}, 0x4c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) kernel console output (not intermixed with test programs): -fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 32.238767][ T3081] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.303826][ T3392] netlink: 16 bytes leftover after parsing attributes in process `syz.2.53'. [ 32.336480][ T3394] syz.0.54 uses obsolete (PF_INET,SOCK_PACKET) [ 32.406909][ T3402] loop3: detected capacity change from 0 to 512 [ 32.413965][ T3402] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 32.427566][ T3402] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 32.435891][ T3402] System zones: 1-12 [ 32.441625][ T3402] EXT4-fs (loop3): 1 truncate cleaned up [ 32.451210][ T3402] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 32.486071][ T3079] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.583629][ T3426] netlink: 216 bytes leftover after parsing attributes in process `syz.4.67'. [ 32.595343][ T3426] netlink: 24 bytes leftover after parsing attributes in process `syz.4.67'. [ 32.615558][ T3433] loop2: detected capacity change from 0 to 512 [ 32.626642][ T3433] EXT4-fs (loop2): 1 truncate cleaned up [ 32.637362][ T3433] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 32.687655][ T3081] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.709556][ T3450] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 32.717511][ T3450] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 32.719661][ T3452] can: request_module (can-proto-0) failed. [ 32.741152][ T3452] FAULT_INJECTION: forcing a failure. [ 32.741152][ T3452] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 32.754586][ T3452] CPU: 0 PID: 3452 Comm: syz.4.74 Not tainted 6.10.0-rc6-syzkaller-00061-ge9d22f7a6655 #0 [ 32.764706][ T3452] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 32.774871][ T3452] Call Trace: [ 32.778151][ T3452] [ 32.781199][ T3452] dump_stack_lvl+0xf2/0x150 [ 32.785837][ T3452] dump_stack+0x15/0x20 [ 32.790014][ T3452] should_fail_ex+0x229/0x230 [ 32.794748][ T3452] should_fail+0xb/0x10 [ 32.798929][ T3452] should_fail_usercopy+0x1a/0x20 [ 32.803968][ T3452] copy_page_from_iter_atomic+0x22a/0xda0 [ 32.809878][ T3452] ? shmem_write_begin+0xa0/0x1c0 [ 32.815043][ T3452] ? shmem_write_begin+0x10c/0x1c0 [ 32.820236][ T3452] generic_perform_write+0x21a/0x410 [ 32.825679][ T3452] ? __pfx_shmem_write_end+0x10/0x10 [ 32.831002][ T3452] shmem_file_write_iter+0xc8/0xf0 [ 32.836284][ T3452] vfs_write+0x78f/0x900 [ 32.840622][ T3452] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 32.846447][ T3452] ksys_write+0xeb/0x1b0 [ 32.850719][ T3452] __x64_sys_write+0x42/0x50 [ 32.855455][ T3452] x64_sys_call+0x27ef/0x2d70 [ 32.860994][ T3452] do_syscall_64+0xc9/0x1c0 [ 32.865715][ T3452] ? clear_bhb_loop+0x55/0xb0 [ 32.870695][ T3452] ? clear_bhb_loop+0x55/0xb0 [ 32.875494][ T3452] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 32.882161][ T3452] RIP: 0033:0x7f1ad0f5c71f [ 32.886598][ T3452] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 29 8c 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 7c 8c 02 00 48 [ 32.906579][ T3452] RSP: 002b:00007f1ad01dee00 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 32.915053][ T3452] RAX: ffffffffffffffda RBX: 0000000000100000 RCX: 00007f1ad0f5c71f [ 32.923203][ T3452] RDX: 0000000000100000 RSI: 00007f1ac7dbf000 RDI: 0000000000000006 [ 32.931247][ T3452] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000785 [ 32.939252][ T3452] R10: 0000000020000802 R11: 0000000000000293 R12: 0000000000000006 [ 32.947228][ T3452] R13: 00007f1ad01def00 R14: 00007f1ad01deec0 R15: 00007f1ac7dbf000 [ 32.955222][ T3452] [ 32.966381][ T3452] loop4: detected capacity change from 0 to 2048 [ 32.973646][ T3452] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 32.983485][ T3452] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 32.998711][ T3452] EXT4-fs (loop4): failed to initialize system zone (-117) [ 33.006405][ T3452] EXT4-fs (loop4): mount failed [ 33.026307][ T3458] loop3: detected capacity change from 0 to 512 [ 33.039995][ T3458] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 33.049996][ T3458] EXT4-fs (loop3): inodes count not valid: 32 vs 7 [ 33.158712][ T3471] loop2: detected capacity change from 0 to 512 [ 33.179836][ T3471] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 33.204727][ T3474] FAULT_INJECTION: forcing a failure. [ 33.204727][ T3474] name failslab, interval 1, probability 0, space 0, times 1 [ 33.217487][ T3474] CPU: 1 PID: 3474 Comm: syz.3.84 Not tainted 6.10.0-rc6-syzkaller-00061-ge9d22f7a6655 #0 [ 33.227402][ T3474] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 33.237478][ T3474] Call Trace: [ 33.240873][ T3474] [ 33.243809][ T3474] dump_stack_lvl+0xf2/0x150 [ 33.248430][ T3474] dump_stack+0x15/0x20 [ 33.252602][ T3474] should_fail_ex+0x229/0x230 [ 33.257296][ T3474] ? cond_bools_copy+0x30/0x80 [ 33.262127][ T3474] __should_failslab+0x92/0xa0 [ 33.266976][ T3474] should_failslab+0x9/0x20 [ 33.271502][ T3474] kmalloc_node_track_caller_noprof+0xa6/0x380 [ 33.277668][ T3474] kmemdup_noprof+0x2a/0x60 [ 33.282188][ T3474] cond_bools_copy+0x30/0x80 [ 33.286791][ T3474] hashtab_duplicate+0x12c/0x370 [ 33.291763][ T3474] ? __pfx_cond_bools_copy+0x10/0x10 [ 33.297122][ T3474] ? __pfx_cond_bools_destroy+0x10/0x10 [ 33.302747][ T3474] cond_policydb_dup+0xdb/0x710 [ 33.307653][ T3474] ? should_failslab+0x9/0x20 [ 33.312342][ T3474] ? kmalloc_node_track_caller_noprof+0x17e/0x380 [ 33.318882][ T3474] security_set_bools+0xa8/0x350 [ 33.324083][ T3474] ? sel_commit_bools_write+0x16a/0x260 [ 33.329680][ T3474] sel_commit_bools_write+0x1e4/0x260 [ 33.335125][ T3474] vfs_writev+0x402/0x880 [ 33.339473][ T3474] ? __pfx_sel_commit_bools_write+0x10/0x10 [ 33.345391][ T3474] ? mutex_lock+0xd/0x40 [ 33.349697][ T3474] do_writev+0xf8/0x220 [ 33.353952][ T3474] __x64_sys_writev+0x45/0x50 [ 33.358681][ T3474] x64_sys_call+0x1ee2/0x2d70 [ 33.363427][ T3474] do_syscall_64+0xc9/0x1c0 [ 33.367941][ T3474] ? clear_bhb_loop+0x55/0xb0 [ 33.372632][ T3474] ? clear_bhb_loop+0x55/0xb0 [ 33.377335][ T3474] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 33.383234][ T3474] RIP: 0033:0x7f7b44ae4b99 [ 33.387674][ T3474] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 33.407287][ T3474] RSP: 002b:00007f7b43d66048 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 33.415705][ T3474] RAX: ffffffffffffffda RBX: 00007f7b44c72f60 RCX: 00007f7b44ae4b99 [ 33.423675][ T3474] RDX: 0000000000000002 RSI: 00000000200025c0 RDI: 0000000000000003 [ 33.431711][ T3474] RBP: 00007f7b43d660a0 R08: 0000000000000000 R09: 0000000000000000 [ 33.439873][ T3474] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 33.447892][ T3474] R13: 000000000000000b R14: 00007f7b44c72f60 R15: 00007ffc1de4d848 [ 33.455914][ T3474] [ 33.462960][ T3471] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.491773][ T3081] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.511050][ T3408] syz.0.61 (3408) used greatest stack depth: 10016 bytes left [ 33.528860][ T3480] loop3: detected capacity change from 0 to 512 [ 33.559869][ T3482] loop0: detected capacity change from 0 to 512 [ 33.578385][ T3480] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2234: inode #15: comm syz.3.86: corrupted in-inode xattr: invalid ea_ino [ 33.604748][ T3482] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2234: inode #15: comm syz.0.87: corrupted in-inode xattr: invalid ea_ino [ 33.612419][ T3480] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz.3.86: couldn't read orphan inode 15 (err -117) [ 33.634597][ T3482] EXT4-fs error (device loop0): ext4_orphan_get:1399: comm syz.0.87: couldn't read orphan inode 15 (err -117) [ 33.634971][ T3480] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 33.665550][ T3482] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 33.681647][ T3480] FAULT_INJECTION: forcing a failure. [ 33.681647][ T3480] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 33.695039][ T3480] CPU: 0 PID: 3480 Comm: syz.3.86 Not tainted 6.10.0-rc6-syzkaller-00061-ge9d22f7a6655 #0 [ 33.705429][ T3480] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 33.717655][ T3480] Call Trace: [ 33.721944][ T3480] [ 33.725056][ T3480] dump_stack_lvl+0xf2/0x150 [ 33.732114][ T3480] dump_stack+0x15/0x20 [ 33.737232][ T3480] should_fail_ex+0x229/0x230 [ 33.742030][ T3480] __should_fail_alloc_page+0xfd/0x110 [ 33.747518][ T3480] __alloc_pages_noprof+0x109/0x360 [ 33.752745][ T3480] alloc_pages_mpol_noprof+0xb1/0x1e0 [ 33.758294][ T3480] folio_alloc_noprof+0xee/0x130 [ 33.763342][ T3480] filemap_alloc_folio_noprof+0x69/0x220 [ 33.769032][ T3480] __filemap_get_folio+0x298/0x5b0 [ 33.774178][ T3480] ? ext4_prepare_inline_data+0x12f/0x150 [ 33.779919][ T3480] ext4_try_to_write_inline_data+0x847/0xb90 [ 33.785924][ T3480] ? __brelse+0x30/0x60 [ 33.790107][ T3480] ? ext4_xattr_ibody_get+0x189/0x430 [ 33.795657][ T3480] ? ext4_inode_journal_mode+0xdf/0x1d0 [ 33.801329][ T3480] ? ext4_writepage_trans_blocks+0x1e6/0x210 [ 33.807491][ T3480] ext4_write_begin+0x122/0xbb0 [ 33.812382][ T3480] ? ext4_xattr_security_get+0x32/0x40 [ 33.818092][ T3480] ? __pfx_ext4_xattr_security_get+0x10/0x10 [ 33.824105][ T3480] ? __vfs_getxattr+0x29f/0x2b0 [ 33.829072][ T3480] ext4_da_write_begin+0x1ba/0x550 [ 33.834203][ T3480] generic_perform_write+0x1d5/0x410 [ 33.839522][ T3480] ? file_modified_flags+0x247/0x340 [ 33.844988][ T3480] ext4_buffered_write_iter+0x1f6/0x380 [ 33.850616][ T3480] ext4_file_write_iter+0x29f/0xe30 [ 33.855964][ T3480] ? avc_policy_seqno+0x15/0x20 [ 33.860913][ T3480] ? selinux_file_permission+0x22c/0x360 [ 33.866658][ T3480] ? security_file_permission+0x55/0x70 [ 33.872231][ T3480] ? rw_verify_area+0x8b/0x150 [ 33.877112][ T3480] aio_write+0x304/0x430 [ 33.881368][ T3480] io_submit_one+0xb18/0x1240 [ 33.886061][ T3480] __se_sys_io_submit+0xf5/0x280 [ 33.891020][ T3480] __x64_sys_io_submit+0x43/0x50 [ 33.896058][ T3480] x64_sys_call+0x2ab5/0x2d70 [ 33.900749][ T3480] do_syscall_64+0xc9/0x1c0 [ 33.905300][ T3480] ? clear_bhb_loop+0x55/0xb0 [ 33.910012][ T3480] ? clear_bhb_loop+0x55/0xb0 [ 33.914696][ T3480] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 33.920600][ T3480] RIP: 0033:0x7f7b44ae4b99 [ 33.925115][ T3480] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 33.944728][ T3480] RSP: 002b:00007f7b43d66048 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 33.953141][ T3480] RAX: ffffffffffffffda RBX: 00007f7b44c72f60 RCX: 00007f7b44ae4b99 [ 33.961113][ T3480] RDX: 0000000020000580 RSI: 0000000000000001 RDI: 00007f7b44c46000 [ 33.969087][ T3480] RBP: 00007f7b43d660a0 R08: 0000000000000000 R09: 0000000000000000 [ 33.977136][ T3480] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 33.985184][ T3480] R13: 000000000000000b R14: 00007f7b44c72f60 R15: 00007ffc1de4d848 [ 33.993219][ T3480] [ 34.106523][ T3079] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.114277][ T3080] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.257787][ T3156] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 34.267135][ T3156] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz0] on syz0 [ 34.282157][ T3523] FAULT_INJECTION: forcing a failure. [ 34.282157][ T3523] name failslab, interval 1, probability 0, space 0, times 0 [ 34.294918][ T3523] CPU: 0 PID: 3523 Comm: syz.0.100 Not tainted 6.10.0-rc6-syzkaller-00061-ge9d22f7a6655 #0 [ 34.304991][ T3523] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 34.315061][ T3523] Call Trace: [ 34.318506][ T3523] [ 34.322620][ T3523] dump_stack_lvl+0xf2/0x150 [ 34.327393][ T3523] dump_stack+0x15/0x20 [ 34.331982][ T3523] should_fail_ex+0x229/0x230 [ 34.337032][ T3523] ? sctp_add_bind_addr+0x6f/0x1e0 [ 34.342183][ T3523] __should_failslab+0x92/0xa0 [ 34.346957][ T3523] should_failslab+0x9/0x20 [ 34.351657][ T3523] kmalloc_trace_noprof+0x4b/0x2a0 [ 34.356836][ T3523] sctp_add_bind_addr+0x6f/0x1e0 [ 34.362079][ T3523] sctp_copy_local_addr_list+0x19b/0x220 [ 34.367839][ T3523] sctp_copy_one_addr+0x83/0x410 [ 34.372822][ T3523] sctp_bind_addr_copy+0x81/0x2b0 [ 34.377882][ T3523] sctp_assoc_set_bind_addr_from_ep+0xc0/0xd0 [ 34.384928][ T3523] sctp_connect_new_asoc+0x1d0/0x3b0 [ 34.390989][ T3523] __sctp_connect+0x41d/0x7a0 [ 34.397027][ T3523] sctp_setsockopt_connectx+0xc5/0x120 [ 34.404423][ T3523] sctp_setsockopt+0x71c/0xea0 [ 34.409233][ T3523] sock_common_setsockopt+0x64/0x80 [ 34.414499][ T3523] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 34.420409][ T3523] __sys_setsockopt+0x1d8/0x250 [ 34.425492][ T3523] __x64_sys_setsockopt+0x66/0x80 [ 34.430614][ T3523] x64_sys_call+0x1183/0x2d70 [ 34.435320][ T3523] do_syscall_64+0xc9/0x1c0 [ 34.439838][ T3523] ? clear_bhb_loop+0x55/0xb0 [ 34.444525][ T3523] ? clear_bhb_loop+0x55/0xb0 [ 34.449344][ T3523] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 34.455259][ T3523] RIP: 0033:0x7f1b96ba5b99 [ 34.459680][ T3523] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 34.479294][ T3523] RSP: 002b:00007f1b95e27048 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 34.487718][ T3523] RAX: ffffffffffffffda RBX: 00007f1b96d33f60 RCX: 00007f1b96ba5b99 [ 34.495685][ T3523] RDX: 000000000000006e RSI: 0000000000000084 RDI: 000000000000000c [ 34.503649][ T3523] RBP: 00007f1b95e270a0 R08: 000000000000001c R09: 0000000000000000 [ 34.511620][ T3523] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000002 [ 34.519622][ T3523] R13: 000000000000000b R14: 00007f1b96d33f60 R15: 00007ffed522e108 [ 34.527693][ T3523] [ 34.538062][ T3525] FAULT_INJECTION: forcing a failure. [ 34.538062][ T3525] name failslab, interval 1, probability 0, space 0, times 0 [ 34.550798][ T3525] CPU: 1 PID: 3525 Comm: syz.3.98 Not tainted 6.10.0-rc6-syzkaller-00061-ge9d22f7a6655 #0 [ 34.556450][ T3527] loop2: detected capacity change from 0 to 512 [ 34.560884][ T3525] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 34.579759][ T3525] Call Trace: [ 34.583064][ T3525] [ 34.586019][ T3525] dump_stack_lvl+0xf2/0x150 [ 34.588758][ T3527] EXT4-fs error (device loop2): __ext4_iget:4906: inode #15: block 1803188595: comm syz.2.101: invalid block [ 34.590715][ T3525] dump_stack+0x15/0x20 [ 34.603543][ T3527] EXT4-fs error (device loop2): ext4_orphan_get:1399: comm syz.2.101: couldn't read orphan inode 15 (err -117) [ 34.606414][ T3525] should_fail_ex+0x229/0x230 [ 34.620421][ T3527] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.622846][ T3525] ? legacy_init_fs_context+0x31/0x70 [ 34.640759][ T3525] __should_failslab+0x92/0xa0 [ 34.641348][ T3527] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.101: invalid indirect mapped block 234881024 (level 0) [ 34.645544][ T3525] should_failslab+0x9/0x20 [ 34.645581][ T3525] kmalloc_trace_noprof+0x4b/0x2a0 [ 34.670919][ T3525] ? alloc_fs_context+0x44/0x4e0 [ 34.676579][ T3525] legacy_init_fs_context+0x31/0x70 [ 34.682249][ T3525] alloc_fs_context+0x3f8/0x4e0 [ 34.691156][ T3525] fs_context_for_mount+0x21/0x30 [ 34.697855][ T3525] do_new_mount+0xf3/0x690 [ 34.703697][ T3525] path_mount+0x49b/0xb30 [ 34.708598][ T3525] __se_sys_mount+0x27f/0x2d0 [ 34.713523][ T3525] __x64_sys_mount+0x67/0x80 [ 34.718268][ T3525] x64_sys_call+0x25c9/0x2d70 [ 34.723526][ T3525] do_syscall_64+0xc9/0x1c0 [ 34.728075][ T3525] ? clear_bhb_loop+0x55/0xb0 [ 34.732801][ T3525] ? clear_bhb_loop+0x55/0xb0 [ 34.737494][ T3525] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 34.743481][ T3525] RIP: 0033:0x7f7b44ae4b99 [ 34.747960][ T3525] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 34.767824][ T3525] RSP: 002b:00007f7b43d45048 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 34.776252][ T3525] RAX: ffffffffffffffda RBX: 00007f7b44c73038 RCX: 00007f7b44ae4b99 [ 34.784286][ T3525] RDX: 0000000020000180 RSI: 0000000020000000 RDI: 0000000000000000 [ 34.792265][ T3525] RBP: 00007f7b43d450a0 R08: 0000000020000680 R09: 0000000000000000 [ 34.800242][ T3525] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 34.808231][ T3525] R13: 000000000000006e R14: 00007f7b44c73038 R15: 00007ffc1de4d848 [ 34.816266][ T3525] [ 34.843152][ T3532] netlink: 22 bytes leftover after parsing attributes in process `syz.0.103'. [ 34.865354][ T3081] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.957578][ T3543] netlink: 28 bytes leftover after parsing attributes in process `syz.2.108'. [ 34.967931][ T3543] netlink: 8 bytes leftover after parsing attributes in process `syz.2.108'. [ 35.008592][ T3552] SET target dimension over the limit! [ 35.034760][ T3159] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 35.043047][ T3159] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz0] on syz0 [ 35.109313][ T3573] netlink: 'syz.3.116': attribute type 4 has an invalid length. [ 35.134790][ T3573] netlink: 'syz.3.116': attribute type 4 has an invalid length. [ 35.164014][ T3576] loop4: detected capacity change from 0 to 2048 [ 35.173371][ T3582] Driver unsupported XDP return value 0 on prog (id 25) dev N/A, expect packet loss! [ 35.181499][ T3576] EXT4-fs: Ignoring removed mblk_io_submit option [ 35.203991][ T3576] EXT4-fs (loop4): stripe (4) is not aligned with cluster size (16), stripe is disabled [ 35.219239][ T3586] netlink: 28 bytes leftover after parsing attributes in process `syz.0.120'. [ 35.250973][ T3576] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.267531][ T3586] netlink: 8 bytes leftover after parsing attributes in process `syz.0.120'. [ 35.308949][ T29] kauditd_printk_skb: 189 callbacks suppressed [ 35.308985][ T29] audit: type=1400 audit(1719999798.442:337): avc: denied { append } for pid=3599 comm="syz.0.123" name="001" dev="devtmpfs" ino=122 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 35.344790][ T3576] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.118: bg 0: block 234: padding at end of block bitmap is not set [ 35.364464][ T29] audit: type=1400 audit(1719999798.502:338): avc: denied { write } for pid=3599 comm="syz.0.123" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 35.368556][ T3600] netlink: 308 bytes leftover after parsing attributes in process `syz.0.123'. [ 35.384923][ T29] audit: type=1400 audit(1719999798.502:339): avc: denied { getopt } for pid=3599 comm="syz.0.123" lport=36238 faddr=127.0.0.1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 35.394768][ T3576] EXT4-fs (loop4): Remounting filesystem read-only [ 35.434214][ T29] audit: type=1400 audit(1719999798.562:340): avc: denied { name_connect } for pid=3597 comm="syz.3.122" dest=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 35.486548][ T29] audit: type=1400 audit(1719999798.602:341): avc: denied { create } for pid=3597 comm="syz.3.122" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 35.506224][ T29] audit: type=1400 audit(1719999798.602:342): avc: denied { connect } for pid=3597 comm="syz.3.122" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 35.522494][ T3600] infiniband syz: set down [ 35.526321][ T29] audit: type=1326 audit(1719999798.602:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3597 comm="syz.3.122" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7b44ae4b99 code=0x0 [ 35.543735][ T29] audit: type=1400 audit(1719999798.672:344): avc: denied { bind } for pid=3605 comm="syz.1.124" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 35.554312][ T3600] infiniband syz: added ipvlan0 [ 35.578251][ T29] audit: type=1400 audit(1719999798.712:345): avc: denied { setopt } for pid=3605 comm="syz.1.124" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 35.578282][ T29] audit: type=1400 audit(1719999798.712:346): avc: denied { connect } for pid=3605 comm="syz.1.124" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 35.622289][ T3085] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.634767][ T3600] RDS/IB: syz: added [ 35.639640][ T3600] smc: adding ib device syz with port count 1 [ 35.647517][ T3600] smc: ib device syz port 1 has pnetid [ 35.769776][ T3617] 9pnet_fd: Insufficient options for proto=fd [ 35.790326][ T3617] loop1: detected capacity change from 0 to 512 [ 35.797258][ T3617] EXT4-fs: Ignoring removed oldalloc option [ 35.803339][ T3617] EXT4-fs: Ignoring removed i_version option [ 35.810041][ T3617] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 35.824809][ T3617] EXT4-fs (loop1): orphan cleanup on readonly fs [ 35.831932][ T3617] EXT4-fs (loop1): 1 truncate cleaned up [ 35.838700][ T3617] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 35.851814][ T3617] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.878946][ T3616] loop4: detected capacity change from 0 to 512 [ 35.890632][ T3616] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 35.934263][ T3625] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 35.934702][ T3616] EXT4-fs error (device loop4): ext4_orphan_get:1394: inode #17: comm syz.4.128: iget: bad i_size value: -6917529027641081756 [ 35.958595][ T3625] Cannot find add_set index 0 as target [ 35.967425][ T3628] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 35.998281][ T3616] EXT4-fs error (device loop4): ext4_orphan_get:1399: comm syz.4.128: couldn't read orphan inode 17 (err -117) [ 36.011475][ T3632] netlink: 20 bytes leftover after parsing attributes in process `syz.2.131'. [ 36.025128][ T3616] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.045188][ T3616] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.128: bg 0: block 65: padding at end of block bitmap is not set [ 36.060843][ T3632] bridge_slave_1: left allmulticast mode [ 36.066662][ T3632] bridge_slave_1: left promiscuous mode [ 36.072362][ T3632] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.083491][ T3616] EXT4-fs error (device loop4): ext4_acquire_dquot:6860: comm syz.4.128: Failed to acquire dquot type 0 [ 36.095674][ T3632] bridge1: port 1(bridge_slave_1) entered blocking state [ 36.102761][ T3632] bridge1: port 1(bridge_slave_1) entered disabled state [ 36.119859][ T3632] bridge_slave_1: entered allmulticast mode [ 36.127397][ T3632] bridge_slave_1: entered promiscuous mode [ 36.133749][ T3632] bridge1: port 1(bridge_slave_1) entered blocking state [ 36.140911][ T3632] bridge1: port 1(bridge_slave_1) entered forwarding state [ 36.154247][ T3640] bridge1: port 2(veth1_to_bond) entered blocking state [ 36.161392][ T3640] bridge1: port 2(veth1_to_bond) entered disabled state [ 36.169564][ T3640] veth1_to_bond: entered allmulticast mode [ 36.180730][ T3640] veth1_to_bond: entered promiscuous mode [ 36.192549][ T3640] bridge1: port 2(veth1_to_bond) entered blocking state [ 36.199673][ T3640] bridge1: port 2(veth1_to_bond) entered forwarding state [ 36.206966][ T3641] netlink: 28 bytes leftover after parsing attributes in process `syz.0.133'. [ 36.251121][ T3645] loop3: detected capacity change from 0 to 2048 [ 36.265963][ T3645] EXT4-fs: Ignoring removed mblk_io_submit option [ 36.273184][ T3645] EXT4-fs (loop3): stripe (4) is not aligned with cluster size (16), stripe is disabled [ 36.275327][ T3619] syzkaller0: entered promiscuous mode [ 36.288714][ T3619] syzkaller0: entered allmulticast mode [ 36.296652][ T3636] netlink: 8 bytes leftover after parsing attributes in process `syz.0.133'. [ 36.308301][ T3650] vlan2: entered promiscuous mode [ 36.309943][ T3645] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.313432][ T3650] bond0: entered promiscuous mode [ 36.331032][ T3650] bond_slave_0: entered promiscuous mode [ 36.336808][ T3650] bond_slave_1: entered promiscuous mode [ 36.350529][ T3650] team0: Port device vlan2 added [ 36.392798][ T3659] loop2: detected capacity change from 0 to 512 [ 36.408943][ T3657] loop0: detected capacity change from 0 to 512 [ 36.419511][ T3659] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 36.434312][ T3657] EXT4-fs (loop0): fragment/cluster size (8192) != block size (2048) [ 36.436385][ T3659] EXT4-fs (loop2): orphan cleanup on readonly fs [ 36.447062][ T3645] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.135: bg 0: block 234: padding at end of block bitmap is not set [ 36.465231][ T3659] EXT4-fs warning (device loop2): ext4_enable_quotas:7078: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 36.468043][ T3616] syz.4.128 (3616) used greatest stack depth: 9040 bytes left [ 36.481895][ T3659] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 36.496705][ T3659] EXT4-fs error (device loop2): ext4_orphan_get:1394: inode #16: comm syz.2.138: casefold flag without casefold feature [ 36.511484][ T3645] EXT4-fs (loop3): Remounting filesystem read-only [ 36.517120][ T3659] EXT4-fs error (device loop2): ext4_orphan_get:1399: comm syz.2.138: couldn't read orphan inode 16 (err -117) [ 36.532982][ T3085] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.550664][ T3659] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 36.636420][ T3676] netlink: 'syz.0.145': attribute type 10 has an invalid length. [ 36.645896][ T3676] veth1_macvtap: left promiscuous mode [ 36.665704][ T3677] netlink: 'syz.1.143': attribute type 1 has an invalid length. [ 36.703851][ T3079] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.799964][ T3683] netlink: 20 bytes leftover after parsing attributes in process `syz.3.147'. [ 36.850876][ T3692] netlink: 28 bytes leftover after parsing attributes in process `syz.4.150'. [ 36.869804][ T3683] bridge_slave_1: left allmulticast mode [ 36.875698][ T3683] bridge_slave_1: left promiscuous mode [ 36.881402][ T3683] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.899487][ T3683] bridge1: port 1(bridge_slave_1) entered blocking state [ 36.906763][ T3683] bridge1: port 1(bridge_slave_1) entered disabled state [ 36.934205][ T3683] bridge_slave_1: entered allmulticast mode [ 36.940792][ T3683] bridge_slave_1: entered promiscuous mode [ 36.947280][ T3683] bridge1: port 1(bridge_slave_1) entered blocking state [ 36.954442][ T3683] bridge1: port 1(bridge_slave_1) entered forwarding state [ 36.962314][ T3081] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.971498][ T3703] team0: Device veth0_virt_wifi is up. Set it down before adding it as a team port [ 36.983741][ T3704] bridge1: port 2(veth1_to_bond) entered blocking state [ 36.992536][ T3704] bridge1: port 2(veth1_to_bond) entered disabled state [ 37.000640][ T3704] veth1_to_bond: entered allmulticast mode [ 37.007766][ T3704] veth1_to_bond: entered promiscuous mode [ 37.016152][ T3704] bridge1: port 2(veth1_to_bond) entered blocking state [ 37.024062][ T3704] bridge1: port 2(veth1_to_bond) entered forwarding state [ 37.034748][ T3692] netlink: 8 bytes leftover after parsing attributes in process `syz.4.150'. [ 37.037377][ T3706] loop2: detected capacity change from 0 to 512 [ 37.063249][ T3706] EXT4-fs (loop2): filesystem is read-only [ 37.103635][ T3716] capability: warning: `syz.1.156' uses 32-bit capabilities (legacy support in use) [ 37.147360][ T3726] loop3: detected capacity change from 0 to 1024 [ 37.169293][ T3732] netlink: 'syz.2.159': attribute type 10 has an invalid length. [ 37.169417][ T3726] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (1764!=20869) [ 37.198028][ T3726] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 37.209104][ T3732] veth1_macvtap: left promiscuous mode [ 37.215284][ T3726] EXT4-fs (loop3): invalid journal inode [ 37.221065][ T3726] EXT4-fs (loop3): can't get journal size [ 37.229528][ T3726] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 37.262416][ T3079] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.332275][ T3747] netlink: 'syz.3.163': attribute type 10 has an invalid length. [ 37.353276][ T3747] team0: Port device netdevsim1 added [ 37.366398][ T3749] netlink: 28 bytes leftover after parsing attributes in process `syz.1.165'. [ 37.367379][ T3752] 9pnet_fd: Insufficient options for proto=fd [ 37.381517][ T3747] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=34887 sclass=netlink_route_socket pid=3747 comm=syz.3.163 [ 37.521271][ T3774] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 37.521738][ T3776] FAULT_INJECTION: forcing a failure. [ 37.521738][ T3776] name failslab, interval 1, probability 0, space 0, times 0 [ 37.541176][ T3776] CPU: 1 PID: 3776 Comm: syz.3.174 Not tainted 6.10.0-rc6-syzkaller-00061-ge9d22f7a6655 #0 [ 37.551199][ T3776] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 37.561531][ T3776] Call Trace: [ 37.564808][ T3776] [ 37.567744][ T3776] dump_stack_lvl+0xf2/0x150 [ 37.572350][ T3776] dump_stack+0x15/0x20 [ 37.576517][ T3776] should_fail_ex+0x229/0x230 [ 37.581276][ T3776] ? sctp_process_init+0xb9b/0x1630 [ 37.586544][ T3776] __should_failslab+0x92/0xa0 [ 37.591325][ T3776] should_failslab+0x9/0x20 [ 37.595887][ T3776] kmalloc_node_track_caller_noprof+0xa6/0x380 [ 37.602102][ T3776] kmemdup_noprof+0x2a/0x60 [ 37.606737][ T3776] sctp_process_init+0xb9b/0x1630 [ 37.611838][ T3776] sctp_sf_do_unexpected_init+0x68b/0x960 [ 37.617696][ T3776] sctp_sf_do_5_2_1_siminit+0x3c/0x50 [ 37.623099][ T3776] sctp_do_sm+0xb8/0x31a0 [ 37.627539][ T3776] sctp_assoc_bh_rcv+0x2b2/0x430 [ 37.632515][ T3776] sctp_inq_push+0x10b/0x120 [ 37.637121][ T3776] sctp_backlog_rcv+0xf8/0x4e0 [ 37.642045][ T3776] ? __pfx_sctp_backlog_rcv+0x10/0x10 [ 37.647512][ T3776] sk_backlog_rcv+0x8d/0x1a0 [ 37.652251][ T3776] __release_sock+0xbb/0x140 [ 37.656954][ T3776] release_sock+0x44/0x150 [ 37.661422][ T3776] sctp_sendmsg+0x1481/0x1920 [ 37.666154][ T3776] ? __pfx_sctp_sendmsg+0x10/0x10 [ 37.671244][ T3776] inet_sendmsg+0xc5/0xd0 [ 37.675606][ T3776] __sock_sendmsg+0x102/0x180 [ 37.680323][ T3776] __sys_sendto+0x1e5/0x260 [ 37.684861][ T3776] __x64_sys_sendto+0x78/0x90 [ 37.689722][ T3776] x64_sys_call+0x16d7/0x2d70 [ 37.694439][ T3776] do_syscall_64+0xc9/0x1c0 [ 37.699055][ T3776] ? clear_bhb_loop+0x55/0xb0 [ 37.703840][ T3776] ? clear_bhb_loop+0x55/0xb0 [ 37.708555][ T3776] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 37.714702][ T3776] RIP: 0033:0x7f7b44ae4b99 [ 37.719140][ T3776] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 37.739537][ T3776] RSP: 002b:00007f7b43d66048 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 37.747989][ T3776] RAX: ffffffffffffffda RBX: 00007f7b44c72f60 RCX: 00007f7b44ae4b99 [ 37.758444][ T3776] RDX: 000000000000fef4 RSI: 0000000020000500 RDI: 0000000000000003 [ 37.766448][ T3776] RBP: 00007f7b43d660a0 R08: 0000000020000100 R09: 000000000000001c [ 37.774463][ T3776] R10: 00000000000080fe R11: 0000000000000246 R12: 0000000000000002 [ 37.782465][ T3776] R13: 000000000000000b R14: 00007f7b44c72f60 R15: 00007ffc1de4d848 [ 37.790593][ T3776] [ 37.843594][ T3787] 9pnet_fd: Insufficient options for proto=fd [ 37.910453][ T3798] TCP: request_sock_TCP: Possible SYN flooding on port [::ffff:0.0.0.0]:20002. Sending cookies. [ 37.998337][ T3807] loop3: detected capacity change from 0 to 2048 [ 38.011999][ T3807] EXT4-fs: Ignoring removed mblk_io_submit option [ 38.026325][ T3807] EXT4-fs (loop3): stripe (4) is not aligned with cluster size (16), stripe is disabled [ 38.054618][ T3807] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.071381][ T3812] bridge_slave_1: left allmulticast mode [ 38.077237][ T3812] bridge_slave_1: left promiscuous mode [ 38.082968][ T3812] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.165442][ T3812] bridge1: port 1(bridge_slave_1) entered blocking state [ 38.172782][ T3812] bridge1: port 1(bridge_slave_1) entered disabled state [ 38.204330][ T3812] bridge_slave_1: entered allmulticast mode [ 38.223128][ T3807] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.186: bg 0: block 234: padding at end of block bitmap is not set [ 38.227322][ T3812] bridge_slave_1: entered promiscuous mode [ 38.239879][ T3807] EXT4-fs (loop3): Remounting filesystem read-only [ 38.258489][ T3812] bridge1: port 1(bridge_slave_1) entered blocking state [ 38.265831][ T3812] bridge1: port 1(bridge_slave_1) entered forwarding state [ 38.293818][ T3809] netlink: 'syz.2.181': attribute type 10 has an invalid length. [ 38.304735][ T3820] bridge1: port 2(veth1_to_bond) entered blocking state [ 38.304836][ T3820] bridge1: port 2(veth1_to_bond) entered disabled state [ 38.304955][ T3820] veth1_to_bond: entered allmulticast mode [ 38.342938][ T3820] veth1_to_bond: entered promiscuous mode [ 38.343161][ T3820] bridge1: port 2(veth1_to_bond) entered blocking state [ 38.343210][ T3820] bridge1: port 2(veth1_to_bond) entered forwarding state [ 38.479329][ T3079] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.480232][ T3834] loop1: detected capacity change from 0 to 2048 [ 38.518215][ T3840] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3840 comm=syz.0.197 [ 38.537651][ T3838] loop0: detected capacity change from 0 to 512 [ 38.538083][ T3842] loop4: detected capacity change from 0 to 512 [ 38.557268][ T3834] Alternate GPT is invalid, using primary GPT. [ 38.558606][ T3842] EXT4-fs error (device loop4): ext4_orphan_get:1394: inode #15: comm syz.4.198: casefold flag without casefold feature [ 38.563617][ T3834] loop1: p1 p2 p3 [ 38.577372][ T3842] EXT4-fs error (device loop4): ext4_orphan_get:1399: comm syz.4.198: couldn't read orphan inode 15 (err -117) [ 38.617072][ T3838] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.638863][ T3847] loop3: detected capacity change from 0 to 1024 [ 38.644348][ T3838] ext4 filesystem being mounted at /43/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 38.700207][ T3842] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.708692][ T3851] loop2: detected capacity change from 0 to 1024 [ 38.723545][ T3851] EXT4-fs: Ignoring removed orlov option [ 38.729976][ T3851] EXT4-fs: Ignoring removed nomblk_io_submit option [ 38.752668][ T3157] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 38.765486][ T3847] loop3: detected capacity change from 0 to 512 [ 38.779520][ T3066] udevd[3066]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 38.790175][ T3857] udevd[3857]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 38.791678][ T3073] udevd[3073]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 38.819421][ T3851] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.836718][ T3080] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.847156][ T3085] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.885426][ T3862] loop1: detected capacity change from 0 to 2048 [ 38.892086][ T3862] EXT4-fs: Ignoring removed bh option [ 38.897593][ T3862] EXT4-fs: Ignoring removed nomblk_io_submit option [ 38.908601][ T3862] EXT4-fs: Ignoring removed nobh option [ 38.922814][ T3081] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.947300][ T3862] EXT4-fs (loop1): #clusters per group too big: 16384 [ 38.962919][ T3868] xt_ecn: cannot match TCP bits for non-tcp packets [ 38.967295][ T3870] loop0: detected capacity change from 0 to 512 [ 38.996292][ T3862] loop1: detected capacity change from 0 to 128 [ 39.034315][ T3862] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 39.052368][ T3879] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 39.070582][ T3862] ext4 filesystem being mounted at /38/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 39.106353][ T3884] xt_CT: You must specify a L4 protocol and not use inversions on it [ 39.110425][ T3870] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.133235][ T3862] mmap: syz.1.202 (3862) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 39.150420][ T3870] ext4 filesystem being mounted at /45/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 39.185212][ T3082] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 39.216022][ T3080] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.238170][ T3890] loop2: detected capacity change from 0 to 1024 [ 39.286506][ T3896] block device autoloading is deprecated and will be removed. [ 39.319959][ T3890] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.351953][ T3890] netlink: 'syz.2.211': attribute type 10 has an invalid length. [ 39.359817][ T3890] bond0: entered promiscuous mode [ 39.364913][ T3890] bond_slave_0: entered promiscuous mode [ 39.370648][ T3890] bond_slave_1: entered promiscuous mode [ 39.370974][ T3916] loop1: detected capacity change from 0 to 1024 [ 39.381243][ T3890] bridge0: port 2(bond0) entered blocking state [ 39.389452][ T3890] bridge0: port 2(bond0) entered disabled state [ 39.394466][ T3890] bond0: entered allmulticast mode [ 39.400977][ T3890] bond_slave_0: entered allmulticast mode [ 39.406920][ T3890] bond_slave_1: entered allmulticast mode [ 39.419378][ T3890] bridge0: port 2(bond0) entered blocking state [ 39.425883][ T3890] bridge0: port 2(bond0) entered forwarding state [ 39.432952][ T3920] netlink: 'syz.2.211': attribute type 10 has an invalid length. [ 39.538377][ T3926] xt_ecn: cannot match TCP bits for non-tcp packets [ 39.543106][ T3925] loop4: detected capacity change from 0 to 512 [ 39.545630][ T3928] loop0: detected capacity change from 0 to 512 [ 39.560923][ T3925] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 39.569330][ T3925] EXT4-fs (loop4): orphan cleanup on readonly fs [ 39.581357][ T3925] EXT4-fs error (device loop4): ext4_acquire_dquot:6860: comm syz.4.221: Failed to acquire dquot type 1 [ 39.591126][ T3928] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 39.606468][ T3928] ext4 filesystem being mounted at /48/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 39.606586][ T3925] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.221: bg 0: block 40: padding at end of block bitmap is not set [ 39.631361][ T3925] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 39.631691][ T3925] EXT4-fs (loop4): 1 truncate cleaned up [ 39.647723][ T3925] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 39.677833][ T3085] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.695777][ T3080] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 39.708942][ T3081] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.764912][ T3938] loop0: detected capacity change from 0 to 512 [ 39.782678][ T3938] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 0 not in group (block 5)! [ 39.793256][ T3938] EXT4-fs (loop0): group descriptors corrupted! [ 39.805853][ T3939] 9pnet_fd: Insufficient options for proto=fd [ 39.835700][ T3157] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 39.885869][ T3948] loop4: detected capacity change from 0 to 1024 [ 39.895487][ T3948] EXT4-fs (loop4): can't mount with data=, fs mounted w/o journal [ 39.929139][ T3956] loop0: detected capacity change from 0 to 128 [ 39.935850][ T3956] FAT-fs (loop0): Unrecognized mount option "wireguard" or missing value [ 40.065279][ T3964] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3964 comm=syz.0.234 [ 40.080469][ T3964] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3964 comm=syz.0.234 [ 40.094068][ T3964] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3964 comm=syz.0.234 [ 40.106694][ T3964] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3964 comm=syz.0.234 [ 40.119650][ T3964] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3964 comm=syz.0.234 [ 40.132445][ T3964] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3964 comm=syz.0.234 [ 40.146861][ T3964] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3964 comm=syz.0.234 [ 40.162143][ T3965] process 'syz.4.233' launched './file1' with NULL argv: empty string added [ 40.173718][ T3964] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3964 comm=syz.0.234 [ 40.246534][ T3969] loop3: detected capacity change from 0 to 1024 [ 40.304704][ T3157] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 40.311653][ T3969] loop3: detected capacity change from 0 to 512 [ 40.314853][ T3157] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 40.330304][ T3157] Buffer I/O error on dev loop3, logical block 0, async page read [ 40.449933][ T3971] xt_ecn: cannot match TCP bits for non-tcp packets [ 40.597197][ T29] kauditd_printk_skb: 61 callbacks suppressed [ 40.597211][ T29] audit: type=1400 audit(1719999803.732:403): avc: denied { write } for pid=3977 comm="syz.3.238" path="socket:[5946]" dev="sockfs" ino=5946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 40.627700][ T29] audit: type=1400 audit(1719999803.732:404): avc: denied { nlmsg_read } for pid=3977 comm="syz.3.238" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 40.768372][ T3989] __nla_validate_parse: 11 callbacks suppressed [ 40.768388][ T3989] netlink: 12 bytes leftover after parsing attributes in process `syz.2.244'. [ 40.859937][ T3989] team0: Port device bridge2 added [ 40.880285][ T3989] netlink: 8 bytes leftover after parsing attributes in process `syz.2.244'. [ 40.909848][ T29] audit: type=1400 audit(1719999804.042:405): avc: denied { ioctl } for pid=3994 comm="syz.3.246" path="/dev/rtc0" dev="devtmpfs" ino=219 ioctlcmd=0x7003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 40.944084][ T3963] syz.0.234 (3963) used greatest stack depth: 7856 bytes left [ 40.987550][ T3997] program syz.0.247 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 41.006012][ T4002] loop3: detected capacity change from 0 to 1024 [ 41.020037][ T29] audit: type=1400 audit(1719999804.152:406): avc: denied { module_load } for pid=3996 comm="syz.0.247" path="/sys/power/wakeup_count" dev="sysfs" ino=192 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=system permissive=1 [ 41.059767][ T4007] loop2: detected capacity change from 0 to 1024 [ 41.071875][ T4002] loop3: detected capacity change from 0 to 512 [ 41.101844][ T3998] netlink: 20 bytes leftover after parsing attributes in process `syz.0.247'. [ 41.152011][ T29] audit: type=1326 audit(1719999804.282:407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4006 comm="syz.2.250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5172169b99 code=0x7ffc0000 [ 41.175447][ T29] audit: type=1326 audit(1719999804.282:408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4006 comm="syz.2.250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5172169b99 code=0x7ffc0000 [ 41.199495][ T29] audit: type=1326 audit(1719999804.282:409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4006 comm="syz.2.250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5172169b99 code=0x7ffc0000 [ 41.223460][ T29] audit: type=1326 audit(1719999804.282:410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4006 comm="syz.2.250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5172169b99 code=0x7ffc0000 [ 41.246755][ T29] audit: type=1326 audit(1719999804.282:411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4006 comm="syz.2.250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5172169b99 code=0x7ffc0000 [ 41.259686][ T4010] loop1: detected capacity change from 0 to 1764 [ 41.270127][ T29] audit: type=1326 audit(1719999804.282:412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4006 comm="syz.2.250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=438 compat=0 ip=0x7f5172169b99 code=0x7ffc0000 [ 41.332659][ T4002] xt_ecn: cannot match TCP bits for non-tcp packets [ 41.403803][ T4018] loop2: detected capacity change from 0 to 512 [ 41.422579][ T4018] ext4: Unknown parameter 'obj_type' [ 41.440924][ T4018] netlink: 8 bytes leftover after parsing attributes in process `syz.2.254'. [ 41.452132][ T4018] netlink: 'syz.2.254': attribute type 4 has an invalid length. [ 41.488956][ T4028] netlink: 12 bytes leftover after parsing attributes in process `syz.3.258'. [ 41.523857][ T4028] team0: Port device bridge2 added [ 41.532328][ T4018] netlink: 'syz.2.254': attribute type 4 has an invalid length. [ 41.543269][ T4028] netlink: 8 bytes leftover after parsing attributes in process `syz.3.258'. [ 41.587903][ T4039] loop1: detected capacity change from 0 to 512 [ 41.616145][ T4039] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 41.652885][ T4039] ext4 filesystem being mounted at /48/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 41.746599][ T3082] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 41.799967][ T4058] loop4: detected capacity change from 0 to 512 [ 41.811053][ T4058] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 41.830456][ T4058] EXT4-fs (loop4): 1 truncate cleaned up [ 41.840987][ T4061] loop1: detected capacity change from 0 to 1024 [ 41.850079][ T4058] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.852539][ T4065] netlink: 12 bytes leftover after parsing attributes in process `syz.2.272'. [ 41.892288][ T4061] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.894198][ T4065] team0: Port device bridge3 added [ 41.912046][ T3085] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.912633][ T4065] netlink: 8 bytes leftover after parsing attributes in process `syz.2.272'. [ 42.046421][ T4073] netlink: 'syz.1.268': attribute type 3 has an invalid length. [ 42.081886][ T4078] SELinux: Context system_u:object_r:udev_helper_exec_t:s0 is not valid (left unmapped). [ 42.114863][ T4078] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4) [ 42.121534][ T4078] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 42.129384][ T4078] vhci_hcd vhci_hcd.0: Device attached [ 42.138754][ T4084] vhci_hcd: connection closed [ 42.138920][ T50] vhci_hcd: stop threads [ 42.148085][ T50] vhci_hcd: release socket [ 42.152538][ T50] vhci_hcd: disconnect device [ 42.356821][ T4091] FAULT_INJECTION: forcing a failure. [ 42.356821][ T4091] name failslab, interval 1, probability 0, space 0, times 0 [ 42.369638][ T4091] CPU: 0 PID: 4091 Comm: syz.0.278 Not tainted 6.10.0-rc6-syzkaller-00061-ge9d22f7a6655 #0 [ 42.379621][ T4091] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 42.390061][ T4091] Call Trace: [ 42.393424][ T4091] [ 42.396624][ T4091] dump_stack_lvl+0xf2/0x150 [ 42.401329][ T4091] dump_stack+0x15/0x20 [ 42.406119][ T4091] should_fail_ex+0x229/0x230 [ 42.411120][ T4091] ? skb_clone+0x154/0x1f0 [ 42.415754][ T4091] __should_failslab+0x92/0xa0 [ 42.420600][ T4091] should_failslab+0x9/0x20 [ 42.425427][ T4091] kmem_cache_alloc_noprof+0x4c/0x290 [ 42.430910][ T4091] skb_clone+0x154/0x1f0 [ 42.435207][ T4091] __netlink_deliver_tap+0x2bd/0x4c0 [ 42.440605][ T4091] netlink_unicast+0x63b/0x660 [ 42.445459][ T4091] netlink_sendmsg+0x5ca/0x6e0 [ 42.450257][ T4091] ? __pfx_netlink_sendmsg+0x10/0x10 [ 42.456197][ T4091] __sock_sendmsg+0x140/0x180 [ 42.461728][ T4091] ____sys_sendmsg+0x312/0x410 [ 42.466706][ T4091] __sys_sendmsg+0x1e9/0x280 [ 42.471946][ T4091] __x64_sys_sendmsg+0x46/0x50 [ 42.476843][ T4091] x64_sys_call+0xb25/0x2d70 [ 42.481745][ T4091] do_syscall_64+0xc9/0x1c0 [ 42.486399][ T4091] ? clear_bhb_loop+0x55/0xb0 [ 42.491165][ T4091] ? clear_bhb_loop+0x55/0xb0 [ 42.495919][ T4091] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 42.501854][ T4091] RIP: 0033:0x7f1b96ba5b99 [ 42.506336][ T4091] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 42.525969][ T4091] RSP: 002b:00007f1b95de5048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 42.534412][ T4091] RAX: ffffffffffffffda RBX: 00007f1b96d34110 RCX: 00007f1b96ba5b99 [ 42.542399][ T4091] RDX: 0000000000000000 RSI: 0000000020000300 RDI: 0000000000000005 [ 42.550452][ T4091] RBP: 00007f1b95de50a0 R08: 0000000000000000 R09: 0000000000000000 [ 42.558745][ T4091] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 42.566991][ T4091] R13: 000000000000006e R14: 00007f1b96d34110 R15: 00007ffed522e108 [ 42.576030][ T4091] [ 42.672812][ T4093] loop3: detected capacity change from 0 to 2048 [ 42.679617][ T4093] EXT4-fs: Ignoring removed nomblk_io_submit option [ 42.695716][ T4093] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.714612][ T3079] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.726336][ T3082] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.781274][ T4097] nfs: Unknown parameter '' [ 42.802397][ T4101] loop3: detected capacity change from 0 to 164 [ 42.875907][ T3157] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 42.915143][ T4112] netlink: 12 bytes leftover after parsing attributes in process `syz.3.285'. [ 42.946540][ T4112] team0: Port device bridge3 added [ 42.960989][ T4114] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 42.969333][ T4114] team0: Device ipvlan2 is already an upper device of the team interface [ 43.046103][ T4112] netlink: 8 bytes leftover after parsing attributes in process `syz.3.285'. [ 43.071194][ T4122] netlink: 'syz.2.286': attribute type 3 has an invalid length. [ 43.356888][ T4151] FAULT_INJECTION: forcing a failure. [ 43.356888][ T4151] name failslab, interval 1, probability 0, space 0, times 0 [ 43.369652][ T4151] CPU: 0 PID: 4151 Comm: syz.3.297 Not tainted 6.10.0-rc6-syzkaller-00061-ge9d22f7a6655 #0 [ 43.379834][ T4151] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 43.393066][ T4151] Call Trace: [ 43.396532][ T4151] [ 43.399766][ T4151] dump_stack_lvl+0xf2/0x150 [ 43.405439][ T4151] dump_stack+0x15/0x20 [ 43.409863][ T4151] should_fail_ex+0x229/0x230 [ 43.414676][ T4151] ? __alloc_skb+0x10b/0x300 [ 43.415930][ T4155] team0: Port device bridge1 added [ 43.419445][ T4151] __should_failslab+0x92/0xa0 [ 43.429852][ T4151] should_failslab+0x9/0x20 [ 43.434495][ T4151] kmem_cache_alloc_node_noprof+0x51/0x2b0 [ 43.440371][ T4151] __alloc_skb+0x10b/0x300 [ 43.444853][ T4151] netlink_alloc_large_skb+0xad/0xe0 [ 43.450239][ T4151] netlink_sendmsg+0x3b4/0x6e0 [ 43.455042][ T4151] ? __pfx_netlink_sendmsg+0x10/0x10 [ 43.460415][ T4151] __sock_sendmsg+0x140/0x180 [ 43.465162][ T4151] ____sys_sendmsg+0x312/0x410 [ 43.469971][ T4151] __sys_sendmsg+0x1e9/0x280 [ 43.474611][ T4151] __x64_sys_sendmsg+0x46/0x50 [ 43.479395][ T4151] x64_sys_call+0xb25/0x2d70 [ 43.484009][ T4151] do_syscall_64+0xc9/0x1c0 [ 43.488529][ T4151] ? clear_bhb_loop+0x55/0xb0 [ 43.493227][ T4151] ? clear_bhb_loop+0x55/0xb0 [ 43.497976][ T4151] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 43.503975][ T4151] RIP: 0033:0x7f7b44ae4b99 [ 43.508438][ T4151] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 43.528083][ T4151] RSP: 002b:00007f7b43d66048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 43.536508][ T4151] RAX: ffffffffffffffda RBX: 00007f7b44c72f60 RCX: 00007f7b44ae4b99 [ 43.544487][ T4151] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000004 [ 43.552501][ T4151] RBP: 00007f7b43d660a0 R08: 0000000000000000 R09: 0000000000000000 [ 43.560498][ T4151] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 43.568635][ T4151] R13: 000000000000000b R14: 00007f7b44c72f60 R15: 00007ffc1de4d848 [ 43.576655][ T4151] [ 43.595676][ T4158] loop2: detected capacity change from 0 to 1024 [ 43.602557][ T4158] EXT4-fs: Ignoring removed orlov option [ 43.608389][ T4158] ext4: Unknown parameter 'appraise' [ 43.684633][ T4168] syz.1.305 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 43.735667][ T4170] netlink: 'syz.0.304': attribute type 3 has an invalid length. [ 43.846273][ T4189] loop0: detected capacity change from 0 to 2048 [ 43.888533][ T4188] team0: Port device bridge2 added [ 43.896110][ T4189] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.924698][ T4189] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 43.966042][ T4189] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 43.978296][ T4189] EXT4-fs (loop0): This should not happen!! Data will be lost [ 43.978296][ T4189] [ 43.987971][ T4189] EXT4-fs (loop0): Total free blocks count 0 [ 43.993974][ T4189] EXT4-fs (loop0): Free/Dirty block details [ 43.999986][ T4189] EXT4-fs (loop0): free_blocks=2415919104 [ 44.005769][ T4189] EXT4-fs (loop0): dirty_blocks=16 [ 44.010987][ T4189] EXT4-fs (loop0): Block reservation details [ 44.017008][ T4189] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 44.040315][ T3080] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.293128][ T4212] loop0: detected capacity change from 0 to 512 [ 44.314930][ T4212] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c01c, mo2=0002] [ 44.327742][ T4212] System zones: 0-5 [ 44.332425][ T4212] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.347034][ T4212] EXT4-fs (loop0): Online resizing not supported with sparse_super2 [ 44.429179][ T4227] loop1: detected capacity change from 0 to 512 [ 44.476905][ T4227] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 44.497268][ T4227] ext4 filesystem being mounted at /59/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 44.524734][ T3080] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.562269][ T3082] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 44.701138][ T4234] team0: Port device bridge2 added [ 44.798984][ T4247] FAULT_INJECTION: forcing a failure. [ 44.798984][ T4247] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 44.812324][ T4247] CPU: 1 PID: 4247 Comm: syz.1.328 Not tainted 6.10.0-rc6-syzkaller-00061-ge9d22f7a6655 #0 [ 44.822421][ T4247] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 44.832503][ T4247] Call Trace: [ 44.835796][ T4247] [ 44.838739][ T4247] dump_stack_lvl+0xf2/0x150 [ 44.843447][ T4247] dump_stack+0x15/0x20 [ 44.847640][ T4247] should_fail_ex+0x229/0x230 [ 44.852425][ T4247] should_fail+0xb/0x10 [ 44.856634][ T4247] should_fail_usercopy+0x1a/0x20 [ 44.861683][ T4247] _copy_to_user+0x1e/0xa0 [ 44.866146][ T4247] simple_read_from_buffer+0xa0/0x110 [ 44.871652][ T4247] proc_fail_nth_read+0xfc/0x140 [ 44.876626][ T4247] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 44.882275][ T4247] vfs_read+0x1a2/0x6e0 [ 44.886539][ T4247] ? __rcu_read_unlock+0x4e/0x70 [ 44.891509][ T4247] ? __fget_files+0x1da/0x210 [ 44.896350][ T4247] ksys_read+0xeb/0x1b0 [ 44.900734][ T4247] __x64_sys_read+0x42/0x50 [ 44.905280][ T4247] x64_sys_call+0x27e5/0x2d70 [ 44.910201][ T4247] do_syscall_64+0xc9/0x1c0 [ 44.914794][ T4247] ? clear_bhb_loop+0x55/0xb0 [ 44.919570][ T4247] ? clear_bhb_loop+0x55/0xb0 [ 44.924267][ T4247] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 44.930170][ T4247] RIP: 0033:0x7f3de9ec467c [ 44.934631][ T4247] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8c 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 1f 8d 02 00 48 [ 44.954247][ T4247] RSP: 002b:00007f3de9147040 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 44.962798][ T4247] RAX: ffffffffffffffda RBX: 00007f3dea053f60 RCX: 00007f3de9ec467c [ 44.971314][ T4247] RDX: 000000000000000f RSI: 00007f3de91470b0 RDI: 0000000000000004 [ 44.979368][ T4247] RBP: 00007f3de91470a0 R08: 0000000000000000 R09: 0000000000000000 [ 44.987390][ T4247] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 44.995843][ T4247] R13: 000000000000000b R14: 00007f3dea053f60 R15: 00007ffc2fd7e1c8 [ 45.003840][ T4247] [ 45.097805][ T4259] veth0_to_batadv: entered allmulticast mode [ 45.362312][ T4279] loop4: detected capacity change from 0 to 1024 [ 45.375773][ T4279] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.458604][ T4282] kernel profiling enabled (shift: 7) [ 45.472182][ T4282] EXT4-fs (loop4): Online resizing not supported with bigalloc [ 45.533624][ T4284] loop3: detected capacity change from 0 to 512 [ 45.545890][ T4284] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 45.563130][ T4284] EXT4-fs error (device loop3): ext4_orphan_get:1420: comm syz.3.342: bad orphan inode 17 [ 45.574063][ T4284] ext4_test_bit(bit=16, block=4) = 1 [ 45.579430][ T4284] is_bad_inode(inode)=0 [ 45.583598][ T4284] NEXT_ORPHAN(inode)=1048336 [ 45.588309][ T4284] max_ino=32 [ 45.591591][ T4284] i_nlink=0 [ 45.596627][ T4284] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.623677][ T3079] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.699039][ T29] kauditd_printk_skb: 105 callbacks suppressed [ 45.699057][ T29] audit: type=1400 audit(1719999808.832:518): avc: denied { read } for pid=4286 comm="syz.3.343" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 45.905548][ T29] audit: type=1400 audit(1719999809.042:519): avc: denied { bind } for pid=4290 comm="syz.3.344" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 45.973327][ T29] audit: type=1400 audit(1719999809.102:520): avc: denied { unmount } for pid=3082 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 45.998973][ T4293] loop0: detected capacity change from 0 to 256 [ 46.011837][ T29] audit: type=1400 audit(1719999809.152:521): avc: denied { mount } for pid=4292 comm="syz.0.345" name="/" dev="loop0" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 46.123757][ T29] audit: type=1400 audit(1719999809.252:522): avc: denied { unmount } for pid=3080 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 46.141230][ T4303] __nla_validate_parse: 14 callbacks suppressed [ 46.141318][ T4303] netlink: 28 bytes leftover after parsing attributes in process `syz.1.349'. [ 46.167629][ T4305] netlink: 320 bytes leftover after parsing attributes in process `syz.2.351'. [ 46.177195][ T4305] unsupported nlmsg_type 40 [ 46.205816][ T29] audit: type=1400 audit(1719999809.342:523): avc: denied { rmdir } for pid=3085 comm="syz-executor" name="lost+found" dev="loop4" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 46.232499][ T3085] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2234: inode #15: comm syz-executor: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 46.239617][ T29] audit: type=1400 audit(1719999809.372:524): avc: denied { unlink } for pid=3085 comm="syz-executor" name="file1" dev="loop4" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 46.277577][ T3085] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2234: inode #15: comm syz-executor: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 46.285330][ T4313] loop2: detected capacity change from 0 to 512 [ 46.298319][ T29] audit: type=1400 audit(1719999809.422:525): avc: denied { nlmsg_write } for pid=4311 comm="syz.0.355" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 46.324746][ T4313] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 46.345057][ T4313] EXT4-fs error (device loop2): ext4_orphan_get:1420: comm syz.2.353: bad orphan inode 17 [ 46.363184][ T4313] ext4_test_bit(bit=16, block=4) = 1 [ 46.368568][ T4313] is_bad_inode(inode)=0 [ 46.373032][ T4313] NEXT_ORPHAN(inode)=1048336 [ 46.377729][ T4313] max_ino=32 [ 46.380944][ T4313] i_nlink=0 [ 46.391303][ T4313] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.406677][ T4321] 9pnet: Could not find request transport: fd0x0000000000000003 [ 46.428225][ T3081] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.456300][ T29] audit: type=1400 audit(1719999809.592:526): avc: denied { execute } for pid=4326 comm="syz.0.360" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=6880 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 46.494701][ T4329] netlink: 'syz.2.358': attribute type 29 has an invalid length. [ 46.508484][ T4329] netlink: 'syz.2.358': attribute type 29 has an invalid length. [ 46.518954][ T4329] netlink: 'syz.2.358': attribute type 29 has an invalid length. [ 46.530262][ T4331] loop0: detected capacity change from 0 to 256 [ 46.618758][ T3085] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.631523][ T3626] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.679105][ T3626] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.713288][ T4338] loop0: detected capacity change from 0 to 256 [ 46.722285][ T29] audit: type=1400 audit(1719999809.842:527): avc: denied { mounton } for pid=4339 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 46.773586][ T3626] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.844370][ T3626] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.861695][ T4351] loop0: detected capacity change from 0 to 512 [ 46.878241][ T4351] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 46.897198][ T4352] 9pnet: Could not find request transport: fd0x0000000000000003 [ 46.924461][ T4351] EXT4-fs error (device loop0): ext4_orphan_get:1420: comm syz.0.368: bad orphan inode 17 [ 46.972124][ T4351] ext4_test_bit(bit=16, block=4) = 1 [ 46.977855][ T4351] is_bad_inode(inode)=0 [ 46.982034][ T4351] NEXT_ORPHAN(inode)=1048336 [ 46.986673][ T4351] max_ino=32 [ 46.989882][ T4351] i_nlink=0 [ 47.006886][ T3626] bridge_slave_1: left allmulticast mode [ 47.012644][ T3626] bridge_slave_1: left promiscuous mode [ 47.018519][ T3626] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.033153][ T4351] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.049959][ T3626] bridge_slave_0: left allmulticast mode [ 47.055803][ T3626] bridge_slave_0: left promiscuous mode [ 47.061527][ T3626] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.089440][ T3080] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.228560][ T4386] loop0: detected capacity change from 0 to 256 [ 47.242961][ T3626] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 47.253992][ T3626] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 47.264956][ T3626] bond0 (unregistering): Released all slaves [ 47.285794][ T4364] geneve2: entered promiscuous mode [ 47.291047][ T4364] geneve2: entered allmulticast mode [ 47.325820][ T4373] team_slave_0: entered promiscuous mode [ 47.331501][ T4373] team_slave_1: entered promiscuous mode [ 47.337307][ T4373] bridge2: entered promiscuous mode [ 47.345798][ T4373] macsec0: entered promiscuous mode [ 47.351082][ T4373] team0: entered promiscuous mode [ 47.357001][ T4373] macsec0: entered allmulticast mode [ 47.362384][ T4373] team0: entered allmulticast mode [ 47.367555][ T4373] team_slave_0: entered allmulticast mode [ 47.373279][ T4373] team_slave_1: entered allmulticast mode [ 47.379134][ T4373] vlan2: entered allmulticast mode [ 47.384284][ T4373] bond0: entered allmulticast mode [ 47.389418][ T4373] bond_slave_0: entered allmulticast mode [ 47.395195][ T4373] bond_slave_1: entered allmulticast mode [ 47.401010][ T4373] bridge2: entered allmulticast mode [ 47.499592][ T4397] loop1: detected capacity change from 0 to 512 [ 47.538774][ T4397] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2234: inode #15: comm syz.1.376: corrupted in-inode xattr: invalid ea_ino [ 47.539421][ T4404] loop0: detected capacity change from 0 to 512 [ 47.570058][ T4402] 9pnet: Could not find request transport: fd0x0000000000000003 [ 47.576609][ T4397] EXT4-fs error (device loop1): ext4_orphan_get:1399: comm syz.1.376: couldn't read orphan inode 15 (err -117) [ 47.594993][ T4397] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.617680][ T4404] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 47.619948][ T3626] hsr_slave_0: left promiscuous mode [ 47.650598][ T3626] hsr_slave_1: left promiscuous mode [ 47.661023][ T4404] EXT4-fs error (device loop0): ext4_orphan_get:1420: comm syz.0.380: bad orphan inode 17 [ 47.679045][ T3082] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.690077][ T4404] ext4_test_bit(bit=16, block=4) = 1 [ 47.695513][ T4404] is_bad_inode(inode)=0 [ 47.699784][ T4404] NEXT_ORPHAN(inode)=1048336 [ 47.704403][ T4404] max_ino=32 [ 47.707602][ T4404] i_nlink=0 [ 47.712879][ T3626] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 47.714774][ T4404] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.720336][ T3626] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 47.751395][ T3626] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 47.759035][ T3626] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 47.776096][ T3626] veth1_macvtap: left promiscuous mode [ 47.781628][ T3626] veth0_macvtap: left promiscuous mode [ 47.787206][ T3626] veth1_vlan: left promiscuous mode [ 47.792468][ T3626] veth0_vlan: left promiscuous mode [ 47.824766][ T3080] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.910566][ T4426] loop1: detected capacity change from 0 to 256 [ 48.010201][ T3626] team0 (unregistering): Port device team_slave_1 removed [ 48.024815][ T3626] team0 (unregistering): Port device team_slave_0 removed [ 48.085203][ T4429] netlink: 'syz.0.383': attribute type 5 has an invalid length. [ 48.118748][ T4432] netlink: 4 bytes leftover after parsing attributes in process `syz.2.385'. [ 48.142797][ T4339] chnl_net:caif_netlink_parms(): no params data found [ 48.200149][ T4439] loop1: detected capacity change from 0 to 1024 [ 48.219218][ T4439] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.238407][ T4444] loop0: detected capacity change from 0 to 128 [ 48.248756][ T4443] loop2: detected capacity change from 0 to 512 [ 48.263236][ T3082] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.285757][ T4443] EXT4-fs: Invalid want_extra_isize 165 [ 48.315596][ T4339] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.323298][ T4339] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.342351][ T4339] bridge_slave_0: entered allmulticast mode [ 48.352445][ T4339] bridge_slave_0: entered promiscuous mode [ 48.387231][ T4463] 9pnet_fd: Insufficient options for proto=fd [ 48.406014][ T4339] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.413126][ T4339] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.423385][ T4339] bridge_slave_1: entered allmulticast mode [ 48.430314][ T4339] bridge_slave_1: entered promiscuous mode [ 48.486873][ T4339] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.501275][ T4472] macvlan2: entered promiscuous mode [ 48.506754][ T4472] macvlan2: entered allmulticast mode [ 48.522776][ T4473] loop1: detected capacity change from 0 to 2048 [ 48.535746][ T4339] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.569078][ T4473] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.607621][ T4473] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.626677][ T4339] team0: Port device team_slave_0 added [ 48.639430][ T4339] team0: Port device team_slave_1 added [ 48.677701][ T4481] loop3: detected capacity change from 0 to 256 [ 48.685061][ T4485] netlink: 12 bytes leftover after parsing attributes in process `syz.2.396'. [ 48.722498][ T4473] netlink: 20 bytes leftover after parsing attributes in process `syz.1.393'. [ 48.743898][ T4339] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.750995][ T4339] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 48.777004][ T4339] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.821771][ T4485] team0: Port device bridge4 added [ 48.829444][ T4339] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.836448][ T4339] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 48.863138][ T4339] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.875925][ T4485] netlink: 8 bytes leftover after parsing attributes in process `syz.2.396'. [ 48.897568][ T4499] loop3: detected capacity change from 0 to 512 [ 48.938961][ T4499] EXT4-fs (loop3): invalid first ino: 0 [ 48.964212][ T4504] loop2: detected capacity change from 0 to 128 [ 48.966198][ T4339] hsr_slave_0: entered promiscuous mode [ 48.980597][ T4339] hsr_slave_1: entered promiscuous mode [ 48.988138][ T4339] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 49.006152][ T4339] Cannot create hsr debugfs directory [ 49.048191][ T4510] 9pnet_fd: Insufficient options for proto=fd [ 49.179902][ T4527] loop3: detected capacity change from 0 to 512 [ 49.208474][ T4527] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 49.233326][ T4535] loop0: detected capacity change from 0 to 1024 [ 49.259150][ T4532] loop1: detected capacity change from 0 to 256 [ 49.295072][ T4527] EXT4-fs (loop3): orphan cleanup on readonly fs [ 49.329805][ T4527] EXT4-fs warning (device loop3): ext4_enable_quotas:7078: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 49.335557][ T4535] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.359340][ T4527] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 49.386631][ T4527] EXT4-fs error (device loop3): ext4_orphan_get:1394: inode #16: comm syz.3.405: casefold flag without casefold feature [ 49.433971][ T4535] netlink: 20 bytes leftover after parsing attributes in process `syz.0.407'. [ 49.465518][ T4527] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz.3.405: couldn't read orphan inode 16 (err -117) [ 49.488002][ T4527] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 49.530416][ T3080] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.537672][ T4549] netlink: 12 bytes leftover after parsing attributes in process `syz.1.408'. [ 49.574552][ T4549] bridge3: entered promiscuous mode [ 49.579885][ T4549] bridge3: entered allmulticast mode [ 49.585761][ T3079] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.596412][ T4549] team0: Port device bridge3 added [ 49.602846][ T4549] netlink: 8 bytes leftover after parsing attributes in process `syz.1.408'. [ 49.635795][ T4558] netlink: 16255 bytes leftover after parsing attributes in process `syz.0.409'. [ 49.648827][ T4339] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 49.662189][ T4339] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 49.692657][ T4561] tipc: Started in network mode [ 49.698074][ T4561] tipc: Node identity ac1414aa, cluster identity 4711 [ 49.702879][ T4558] loop0: detected capacity change from 0 to 512 [ 49.707150][ T4561] tipc: Enabled bearer , priority 10 [ 49.722123][ T4564] loop1: detected capacity change from 0 to 1024 [ 49.729902][ T4558] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 49.736445][ T4339] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 49.752136][ T4558] EXT4-fs (loop0): orphan cleanup on readonly fs [ 49.752417][ T4564] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.762232][ T4558] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.409: bg 0: block 248: padding at end of block bitmap is not set [ 49.788177][ T4561] tipc: Disabling bearer [ 49.793534][ T4564] ext4 filesystem being mounted at /80/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 49.813083][ T4339] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 49.833501][ T3082] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.833609][ T4558] EXT4-fs error (device loop0): ext4_acquire_dquot:6860: comm syz.0.409: Failed to acquire dquot type 1 [ 49.885870][ T4558] EXT4-fs (loop0): 1 truncate cleaned up [ 49.900616][ T4558] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 49.934028][ T4577] 9pnet_fd: Insufficient options for proto=fd [ 49.935146][ T4339] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.974052][ T4339] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.991575][ T913] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.998700][ T913] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.044072][ T3080] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.055668][ T4339] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 50.066387][ T4339] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 50.093213][ T913] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.100454][ T913] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.126812][ T4595] macvlan2: entered promiscuous mode [ 50.132160][ T4595] macvlan2: entered allmulticast mode [ 50.149822][ T4592] bridge0: port 2(bond0) entered blocking state [ 50.156425][ T4592] bridge0: port 2(bond0) entered disabled state [ 50.165903][ T4592] bridge0: port 2(bond0) entered blocking state [ 50.167507][ T4601] loop0: detected capacity change from 0 to 256 [ 50.172200][ T4592] bridge0: port 2(bond0) entered forwarding state [ 50.187278][ T4600] bridge0: port 2(bond0) entered disabled state [ 50.229610][ T4604] team0: Port device bridge5 added [ 50.322499][ T4339] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.338060][ T4612] loop1: detected capacity change from 0 to 512 [ 50.371304][ T4620] 9pnet_fd: Insufficient options for proto=fd [ 50.374437][ T4612] EXT4-fs: Ignoring removed nomblk_io_submit option [ 50.410917][ T4612] EXT4-fs: Ignoring removed orlov option [ 50.417605][ T4612] EXT4-fs (loop1): can't mount with data=, fs mounted w/o journal [ 50.495467][ T4639] loop0: detected capacity change from 0 to 2048 [ 50.507279][ T4642] loop2: detected capacity change from 0 to 256 [ 50.516346][ T4639] ext4: Unknown parameter 'smackfstransmute' [ 50.555157][ T3854] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 50.563648][ T4639] loop0: detected capacity change from 0 to 1 [ 50.656731][ T4660] netlink: 'syz.2.430': attribute type 3 has an invalid length. [ 50.699872][ T4339] veth0_vlan: entered promiscuous mode [ 50.712317][ T29] kauditd_printk_skb: 91 callbacks suppressed [ 50.712335][ T29] audit: type=1326 audit(1719999813.842:616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4641 comm="syz.2.430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5172169b99 code=0x7ffc0000 [ 50.759023][ T4339] veth1_vlan: entered promiscuous mode [ 50.778139][ T29] audit: type=1326 audit(1719999813.872:617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4641 comm="syz.2.430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5172169b99 code=0x7ffc0000 [ 50.801949][ T29] audit: type=1326 audit(1719999813.872:618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4641 comm="syz.2.430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5172169b99 code=0x7ffc0000 [ 50.828435][ T29] audit: type=1326 audit(1719999813.872:619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4641 comm="syz.2.430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5172169b99 code=0x7ffc0000 [ 50.851896][ T29] audit: type=1326 audit(1719999813.872:620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4641 comm="syz.2.430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f5172169b99 code=0x7ffc0000 [ 50.875328][ T29] audit: type=1326 audit(1719999813.892:621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4641 comm="syz.2.430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5172169b99 code=0x7ffc0000 [ 50.897114][ T4678] macvlan2: entered promiscuous mode [ 50.898736][ T29] audit: type=1326 audit(1719999813.892:622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4641 comm="syz.2.430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5172169b99 code=0x7ffc0000 [ 50.903974][ T4678] macvlan2: entered allmulticast mode [ 50.927541][ T29] audit: type=1326 audit(1719999813.892:623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4641 comm="syz.2.430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5172169b99 code=0x7ffc0000 [ 50.927581][ T29] audit: type=1326 audit(1719999813.892:624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4641 comm="syz.2.430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5172169b99 code=0x7ffc0000 [ 50.927659][ T29] audit: type=1326 audit(1719999813.892:625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4641 comm="syz.2.430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=264 compat=0 ip=0x7f5172169b99 code=0x7ffc0000 [ 51.005051][ T4339] veth0_macvtap: entered promiscuous mode [ 51.013264][ T4339] veth1_macvtap: entered promiscuous mode [ 51.050110][ T4339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 51.060640][ T4339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.070748][ T4339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 51.081218][ T4339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.091117][ T4339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 51.102121][ T4339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.112351][ T4339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 51.123021][ T4339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.161688][ T4339] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 51.174244][ T4692] __nla_validate_parse: 3 callbacks suppressed [ 51.174293][ T4692] netlink: 12 bytes leftover after parsing attributes in process `syz.0.433'. [ 51.217612][ T4339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 51.229803][ T4339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.239833][ T4339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 51.250477][ T4339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.260418][ T4339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 51.270993][ T4339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.280844][ T4339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 51.291323][ T4339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.307191][ T4339] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 51.337986][ T4692] team0: Port device bridge3 added [ 51.345710][ T4692] netlink: 8 bytes leftover after parsing attributes in process `syz.0.433'. [ 51.358450][ T4339] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.367384][ T4339] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.376136][ T4339] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.385084][ T4339] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.461296][ T4707] loop3: detected capacity change from 0 to 256 [ 51.586318][ T4725] 9pnet_fd: Insufficient options for proto=fd [ 51.643910][ T4736] netlink: 16 bytes leftover after parsing attributes in process `syz.3.439'. [ 51.661481][ T4735] loop4: detected capacity change from 0 to 2048 [ 51.696234][ T4735] ext4: Unknown parameter 'smackfstransmute' [ 51.736721][ T3157] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 51.758698][ T4748] netlink: 12 bytes leftover after parsing attributes in process `syz.2.444'. [ 51.803326][ T4753] FAULT_INJECTION: forcing a failure. [ 51.803326][ T4753] name failslab, interval 1, probability 0, space 0, times 0 [ 51.816198][ T4753] CPU: 1 PID: 4753 Comm: syz.0.445 Not tainted 6.10.0-rc6-syzkaller-00061-ge9d22f7a6655 #0 [ 51.825577][ T4748] team0: Port device bridge6 added [ 51.826187][ T4753] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 51.842118][ T4753] Call Trace: [ 51.843668][ T4748] netlink: 8 bytes leftover after parsing attributes in process `syz.2.444'. [ 51.847042][ T4753] [ 51.847062][ T4753] dump_stack_lvl+0xf2/0x150 [ 51.847105][ T4753] dump_stack+0x15/0x20 [ 51.867618][ T4755] loop0: detected capacity change from 0 to 1 [ 51.868055][ T4753] should_fail_ex+0x229/0x230 [ 51.878863][ T4753] ? sctp_add_bind_addr+0x6f/0x1e0 [ 51.884018][ T4753] __should_failslab+0x92/0xa0 [ 51.888914][ T4753] should_failslab+0x9/0x20 [ 51.893456][ T4753] kmalloc_trace_noprof+0x4b/0x2a0 [ 51.896126][ T4752] loop3: detected capacity change from 0 to 1024 [ 51.898598][ T4753] sctp_add_bind_addr+0x6f/0x1e0 [ 51.909895][ T4753] sctp_copy_local_addr_list+0x19b/0x220 [ 51.915661][ T4753] sctp_copy_one_addr+0x83/0x410 [ 51.920662][ T4753] sctp_bind_addr_copy+0x81/0x2b0 [ 51.925854][ T4753] sctp_assoc_set_bind_addr_from_ep+0xc0/0xd0 [ 51.925964][ T4752] EXT4-fs: Ignoring removed nomblk_io_submit option [ 51.932199][ T4753] sctp_connect_new_asoc+0x1d0/0x3b0 [ 51.940228][ T4755] loop4: detected capacity change from 0 to 2048 [ 51.944083][ T4753] sctp_sendmsg+0xf05/0x1920 [ 51.955115][ T4753] ? __pfx_sctp_sendmsg+0x10/0x10 [ 51.960189][ T4753] inet_sendmsg+0xc5/0xd0 [ 51.964560][ T4753] __sock_sendmsg+0x102/0x180 [ 51.967229][ T4752] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 51.969301][ T4753] ____sys_sendmsg+0x312/0x410 [ 51.982182][ T4753] __sys_sendmmsg+0x269/0x500 [ 51.986250][ T4752] System zones: 0-1, 3-36 [ 51.987065][ T4753] __x64_sys_sendmmsg+0x57/0x70 [ 51.991454][ T4752] [ 51.996335][ T4753] x64_sys_call+0xa87/0x2d70 [ 51.996375][ T4753] do_syscall_64+0xc9/0x1c0 [ 52.007851][ T4753] ? clear_bhb_loop+0x55/0xb0 [ 52.012566][ T4753] ? clear_bhb_loop+0x55/0xb0 [ 52.017287][ T4753] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.023222][ T4753] RIP: 0033:0x7f1b96ba5b99 [ 52.027662][ T4753] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 52.047473][ T4753] RSP: 002b:00007f1b95e27048 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 52.055930][ T4753] RAX: ffffffffffffffda RBX: 00007f1b96d33f60 RCX: 00007f1b96ba5b99 [ 52.063927][ T4753] RDX: 0000000000000001 RSI: 0000000020003c40 RDI: 0000000000000004 [ 52.071936][ T4753] RBP: 00007f1b95e270a0 R08: 0000000000000000 R09: 0000000000000000 [ 52.079929][ T4753] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 52.087931][ T4753] R13: 000000000000000b R14: 00007f1b96d33f60 R15: 00007ffed522e108 [ 52.095941][ T4753] [ 52.112523][ T4752] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.171296][ T4755] loop4: p2 p3 p7 [ 52.178932][ T4766] selinux_netlink_send: 56 callbacks suppressed [ 52.179018][ T4766] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4766 comm=syz.2.448 [ 52.204571][ T4765] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=4765 comm=syz.2.448 [ 52.230959][ T3079] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.234406][ T4765] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=4765 comm=syz.2.448 [ 52.241582][ T4769] 9pnet_fd: Insufficient options for proto=fd [ 52.283040][ T2784] loop4: p2 p3 p7 [ 52.314210][ T4765] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=4765 comm=syz.2.448 [ 52.334699][ T4339] __loop_clr_fd: partition scan of loop4 failed (rc=-16) [ 52.341913][ T3157] I/O error, dev loop4, sector 608 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 52.355348][ T4765] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=4765 comm=syz.2.448 [ 52.368575][ T3857] I/O error, dev loop4, sector 408 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 52.380120][ T3854] I/O error, dev loop4, sector 208 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 52.400250][ T3157] I/O error, dev loop4, sector 608 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 52.404174][ T4765] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=4765 comm=syz.2.448 [ 52.409670][ T3157] Buffer I/O error on dev loop4p2, logical block 8, async page read [ 52.450797][ T3857] I/O error, dev loop4, sector 408 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 52.460185][ T3857] Buffer I/O error on dev loop4p7, logical block 8, async page read [ 52.474227][ T3854] I/O error, dev loop4, sector 208 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 52.481877][ T3157] I/O error, dev loop4, sector 609 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 52.483555][ T3854] Buffer I/O error on dev loop4p3, logical block 8, async page read [ 52.485232][ T4778] loop3: detected capacity change from 0 to 256 [ 52.493019][ T3157] Buffer I/O error on dev loop4p2, logical block 9, async page read [ 52.502765][ T4765] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=4765 comm=syz.2.448 [ 52.538617][ T3854] I/O error, dev loop4, sector 209 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 52.548126][ T3854] Buffer I/O error on dev loop4p3, logical block 9, async page read [ 52.557783][ T4782] 9pnet_fd: Insufficient options for proto=fd [ 52.576822][ T3857] Buffer I/O error on dev loop4p7, logical block 9, async page read [ 52.591838][ T3157] Buffer I/O error on dev loop4p2, logical block 10, async page read [ 52.602546][ T3857] Buffer I/O error on dev loop4p7, logical block 10, async page read [ 52.612178][ T3854] Buffer I/O error on dev loop4p3, logical block 10, async page read [ 52.634722][ T3857] Buffer I/O error on dev loop4p7, logical block 11, async page read [ 52.660220][ T4765] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=4765 comm=syz.2.448 [ 52.732485][ T4765] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=4765 comm=syz.2.448 [ 52.746125][ T4765] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=4765 comm=syz.2.448 [ 52.767771][ T3157] udevd[3157]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 52.783138][ T3854] udevd[3854]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 52.798450][ T3857] udevd[3857]: inotify_add_watch(7, /dev/loop4p7, 10) failed: No such file or directory [ 52.829078][ T4794] loop3: detected capacity change from 0 to 2048 [ 52.838714][ T4796] loop4: detected capacity change from 0 to 512 [ 52.859672][ T3073] udevd[3073]: inotify_add_watch(7, /dev/loop4p7, 10) failed: No such file or directory [ 52.859903][ T3157] udevd[3157]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 52.875948][ T3857] udevd[3857]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 52.913905][ T4796] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.921248][ T4802] netlink: 12 bytes leftover after parsing attributes in process `syz.2.458'. [ 52.938893][ T4796] ext4 filesystem being mounted at /6/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 52.946089][ T3157] udevd[3157]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 52.955668][ T3857] udevd[3857]: inotify_add_watch(7, /dev/loop4p7, 10) failed: No such file or directory [ 52.977827][ T3854] udevd[3854]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 53.010394][ T4802] team0: Port device bridge7 added [ 53.024700][ T3157] udevd[3157]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 53.037255][ T4802] netlink: 8 bytes leftover after parsing attributes in process `syz.2.458'. [ 53.059430][ T4806] netlink: 8 bytes leftover after parsing attributes in process `syz.3.459'. [ 53.073796][ T4806] macvlan2: entered promiscuous mode [ 53.079260][ T4806] macvlan2: entered allmulticast mode [ 53.082607][ T4810] loop0: detected capacity change from 0 to 512 [ 53.103647][ T4339] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.131408][ T4812] loop2: detected capacity change from 0 to 256 [ 53.155113][ T4810] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.188989][ T3164] kernel write not supported for file /25/attr/keycreate (pid: 3164 comm: kworker/1:5) [ 53.235596][ T4810] ext4 filesystem being mounted at /107/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 53.290658][ T4810] EXT4-fs error (device loop0): ext4_xattr_block_get:596: inode #15: comm syz.0.461: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 53.351801][ T4810] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 53.357420][ T4834] netlink: 8 bytes leftover after parsing attributes in process `syz.3.470'. [ 53.369857][ T4810] EXT4-fs error (device loop0): ext4_xattr_block_get:596: inode #15: comm syz.0.461: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 53.395515][ T4836] netlink: 40 bytes leftover after parsing attributes in process `syz.2.469'. [ 53.430769][ T4810] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 53.441520][ T4810] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz.0.461: bg 0: block 18: invalid block bitmap [ 53.471222][ T4810] EXT4-fs error (device loop0): ext4_acquire_dquot:6860: comm syz.0.461: Failed to acquire dquot type 1 [ 53.485270][ T4845] FAULT_INJECTION: forcing a failure. [ 53.485270][ T4845] name failslab, interval 1, probability 0, space 0, times 0 [ 53.498392][ T4845] CPU: 1 PID: 4845 Comm: syz.2.474 Not tainted 6.10.0-rc6-syzkaller-00061-ge9d22f7a6655 #0 [ 53.508613][ T4845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 53.518767][ T4845] Call Trace: [ 53.522063][ T4845] [ 53.525012][ T4845] dump_stack_lvl+0xf2/0x150 [ 53.529655][ T4845] dump_stack+0x15/0x20 [ 53.533842][ T4845] should_fail_ex+0x229/0x230 [ 53.538627][ T4845] ? cond_bools_copy+0x30/0x80 [ 53.543428][ T4845] __should_failslab+0x92/0xa0 [ 53.548296][ T4845] should_failslab+0x9/0x20 [ 53.552914][ T4845] kmalloc_node_track_caller_noprof+0xa6/0x380 [ 53.559122][ T4845] kmemdup_noprof+0x2a/0x60 [ 53.563783][ T4845] cond_bools_copy+0x30/0x80 [ 53.568482][ T4845] hashtab_duplicate+0x12c/0x370 [ 53.573474][ T4845] ? __pfx_cond_bools_copy+0x10/0x10 [ 53.578875][ T4845] ? __pfx_cond_bools_destroy+0x10/0x10 [ 53.584551][ T4845] cond_policydb_dup+0xdb/0x710 [ 53.589449][ T4845] ? should_failslab+0x9/0x20 [ 53.594161][ T4845] ? kmalloc_node_track_caller_noprof+0x17e/0x380 [ 53.601003][ T4845] security_set_bools+0xa8/0x350 [ 53.605964][ T4845] ? sel_commit_bools_write+0x16a/0x260 [ 53.611620][ T4845] sel_commit_bools_write+0x1e4/0x260 [ 53.617038][ T4845] vfs_writev+0x402/0x880 [ 53.621466][ T4845] ? __pfx_sel_commit_bools_write+0x10/0x10 [ 53.627421][ T4845] ? mutex_lock+0xd/0x40 [ 53.631798][ T4845] do_writev+0xf8/0x220 [ 53.635999][ T4845] __x64_sys_writev+0x45/0x50 [ 53.640830][ T4845] x64_sys_call+0x1ee2/0x2d70 [ 53.645566][ T4845] do_syscall_64+0xc9/0x1c0 [ 53.650158][ T4845] ? clear_bhb_loop+0x55/0xb0 [ 53.654860][ T4845] ? clear_bhb_loop+0x55/0xb0 [ 53.659610][ T4845] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.665637][ T4845] RIP: 0033:0x7f5172169b99 [ 53.670082][ T4845] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 53.681605][ T4844] team0: Port device bridge4 added [ 53.689707][ T4845] RSP: 002b:00007f51713eb048 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 53.689737][ T4845] RAX: ffffffffffffffda RBX: 00007f51722f7f60 RCX: 00007f5172169b99 [ 53.689754][ T4845] RDX: 0000000000000001 RSI: 00000000200025c0 RDI: 0000000000000003 [ 53.689772][ T4845] RBP: 00007f51713eb0a0 R08: 0000000000000000 R09: 0000000000000000 [ 53.689789][ T4845] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 53.735729][ T4845] R13: 000000000000004d R14: 00007f51722f7f60 R15: 00007ffc374bc958 [ 53.743785][ T4845] [ 53.747754][ T3080] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.774029][ T4847] macvlan2: entered promiscuous mode [ 53.779553][ T4847] macvlan2: entered allmulticast mode [ 53.814922][ T4852] loop4: detected capacity change from 0 to 256 [ 53.857703][ T4855] loop2: detected capacity change from 0 to 256 [ 53.875078][ T913] kernel write not supported for file /278/attr/keycreate (pid: 913 comm: kworker/0:2) [ 54.097328][ T4874] loop0: detected capacity change from 0 to 1024 [ 54.167501][ T4882] team0: Port device bridge8 added [ 54.302903][ T9] kernel write not supported for file /286/attr/keycreate (pid: 9 comm: kworker/0:1) [ 54.370232][ T4906] netlink: 'syz.2.496': attribute type 27 has an invalid length. [ 54.380972][ T4906] loop2: detected capacity change from 0 to 256 [ 54.433825][ C0] hrtimer: interrupt took 36860 ns [ 54.722216][ T4916] team0: Device macvtap0 is up. Set it down before adding it as a team port [ 54.795448][ T4914] team0: entered promiscuous mode [ 54.800583][ T4914] team_slave_0: entered promiscuous mode [ 54.806526][ T4914] team_slave_1: entered promiscuous mode [ 54.812265][ T4914] bridge2: entered promiscuous mode [ 54.817588][ T4914] bridge3: entered promiscuous mode [ 54.822956][ T4914] bridge4: entered promiscuous mode [ 54.828424][ T4914] bridge5: entered promiscuous mode [ 54.833897][ T4914] bridge6: entered promiscuous mode [ 54.839236][ T4914] bridge7: entered promiscuous mode [ 54.844635][ T4914] bridge8: entered promiscuous mode [ 54.855454][ T4913] team0: left promiscuous mode [ 54.860277][ T4913] team_slave_0: left promiscuous mode [ 54.865793][ T4913] team_slave_1: left promiscuous mode [ 54.871271][ T4913] bridge2: left promiscuous mode [ 54.876314][ T4913] bridge3: left promiscuous mode [ 54.881472][ T4913] bridge4: left promiscuous mode [ 54.886531][ T4913] bridge5: left promiscuous mode [ 54.891629][ T4913] bridge6: left promiscuous mode [ 54.896760][ T4913] bridge7: left promiscuous mode [ 54.901804][ T4913] bridge8: left promiscuous mode [ 54.942686][ T4932] loop4: detected capacity change from 0 to 1024 [ 55.036510][ T4954] loop1: detected capacity change from 0 to 2048 [ 55.125084][ T4971] loop3: detected capacity change from 0 to 512 [ 55.142318][ T4971] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e01c, mo2=0002] [ 55.153704][ T4971] System zones: 1-12 [ 55.159886][ T4971] EXT4-fs error (device loop3): ext4_orphan_get:1394: inode #11: comm syz.3.515: iget: bogus i_mode (0) [ 55.160347][ T4969] bridge4: entered promiscuous mode [ 55.172444][ T4971] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz.3.515: couldn't read orphan inode 11 (err -117) [ 55.176473][ T4969] bridge4: entered allmulticast mode [ 55.194049][ T4969] team0: Port device bridge4 added [ 55.244158][ T4977] loop2: detected capacity change from 0 to 2048 [ 55.250918][ T4977] EXT4-fs: Ignoring removed mblk_io_submit option [ 55.265567][ T4988] netlink: set zone limit has 8 unknown bytes [ 55.306255][ T4977] EXT4-fs (loop2): stripe (4) is not aligned with cluster size (16), stripe is disabled [ 55.333309][ T4998] loop3: detected capacity change from 0 to 512 [ 55.365794][ T5007] loop1: detected capacity change from 0 to 1024 [ 55.374766][ T4998] ext4 filesystem being mounted at /116/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 55.410931][ T4998] EXT4-fs error (device loop3): ext4_acquire_dquot:6860: comm syz.3.524: Failed to acquire dquot type 1 [ 55.446782][ T4977] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.517: bg 0: block 234: padding at end of block bitmap is not set [ 55.471754][ T4977] EXT4-fs (loop2): Remounting filesystem read-only [ 55.511026][ T5022] team0: Port device bridge5 added [ 55.616084][ T5034] usb usb1: usbfs: process 5034 (syz.0.535) did not claim interface 0 before use [ 55.738855][ T5051] loop2: detected capacity change from 0 to 512 [ 55.748195][ T5051] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 55.761231][ T5051] EXT4-fs error (device loop2): ext4_orphan_get:1420: comm syz.2.540: bad orphan inode 17 [ 55.771665][ T29] kauditd_printk_skb: 183 callbacks suppressed [ 55.771680][ T29] audit: type=1400 audit(1719999818.902:805): avc: denied { mount } for pid=5053 comm="syz.4.541" name="/" dev="ramfs" ino=9855 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 55.778496][ T5051] ext4_test_bit(bit=16, block=4) = 1 [ 55.800159][ T29] audit: type=1400 audit(1719999818.902:806): avc: denied { unmount } for pid=5053 comm="syz.4.541" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 55.825490][ T5051] is_bad_inode(inode)=0 [ 55.829644][ T5051] NEXT_ORPHAN(inode)=1048336 [ 55.834280][ T5051] max_ino=32 [ 55.837493][ T5051] i_nlink=0 [ 55.848429][ T5055] loop0: detected capacity change from 0 to 128 [ 55.856070][ T5055] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 55.972235][ T5062] loop2: detected capacity change from 0 to 1024 [ 56.008214][ T5064] team0: Port device bridge1 added [ 56.034815][ T5066] macvlan2: entered promiscuous mode [ 56.040265][ T5066] macvlan2: entered allmulticast mode [ 56.072710][ T5071] FAULT_INJECTION: forcing a failure. [ 56.072710][ T5071] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 56.085849][ T5071] CPU: 0 PID: 5071 Comm: syz.4.547 Not tainted 6.10.0-rc6-syzkaller-00061-ge9d22f7a6655 #0 [ 56.088094][ T5072] loop2: detected capacity change from 0 to 164 [ 56.095895][ T5071] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 56.112424][ T5071] Call Trace: [ 56.115720][ T5071] [ 56.118660][ T5071] dump_stack_lvl+0xf2/0x150 [ 56.123347][ T5071] dump_stack+0x15/0x20 [ 56.127639][ T5071] should_fail_ex+0x229/0x230 [ 56.132537][ T5071] should_fail+0xb/0x10 [ 56.136723][ T5071] should_fail_usercopy+0x1a/0x20 [ 56.141757][ T5071] _copy_to_user+0x1e/0xa0 [ 56.146225][ T5071] snd_seq_ioctl+0x21f/0x2a0 [ 56.150845][ T5071] ? __pfx_snd_seq_ioctl+0x10/0x10 [ 56.155998][ T5071] __se_sys_ioctl+0xd3/0x150 [ 56.160600][ T5071] __x64_sys_ioctl+0x43/0x50 [ 56.165203][ T5071] x64_sys_call+0x1581/0x2d70 [ 56.169892][ T5071] do_syscall_64+0xc9/0x1c0 [ 56.174420][ T5071] ? clear_bhb_loop+0x55/0xb0 [ 56.179111][ T5071] ? clear_bhb_loop+0x55/0xb0 [ 56.183798][ T5071] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 56.189728][ T5071] RIP: 0033:0x7f5d3c0eab99 [ 56.194151][ T5071] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 56.213824][ T5071] RSP: 002b:00007f5d3b36c048 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 56.222255][ T5071] RAX: ffffffffffffffda RBX: 00007f5d3c278f60 RCX: 00007f5d3c0eab99 [ 56.230318][ T5071] RDX: 00000000200009c0 RSI: 000000004058534c RDI: 0000000000000003 [ 56.238320][ T5071] RBP: 00007f5d3b36c0a0 R08: 0000000000000000 R09: 0000000000000000 [ 56.246558][ T5071] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 56.254550][ T5071] R13: 000000000000000b R14: 00007f5d3c278f60 R15: 00007ffeabf749e8 [ 56.262618][ T5071] [ 56.297532][ T5074] loop4: detected capacity change from 0 to 1024 [ 56.304379][ T5074] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 56.339427][ T29] audit: type=1400 audit(1719999819.472:807): avc: denied { write } for pid=5075 comm="syz.1.548" path="socket:[9131]" dev="sockfs" ino=9131 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 56.365527][ T29] audit: type=1400 audit(1719999819.482:808): avc: denied { setopt } for pid=5075 comm="syz.1.548" lport=42007 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 56.407645][ T5080] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.431291][ T29] audit: type=1400 audit(1719999819.522:809): avc: denied { setopt } for pid=5079 comm="syz.3.551" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 56.500751][ T5095] loop4: detected capacity change from 0 to 512 [ 56.511923][ T5095] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 56.534839][ T5080] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.554641][ T5095] EXT4-fs error (device loop4): ext4_orphan_get:1420: comm syz.4.552: bad orphan inode 17 [ 56.568529][ T5095] ext4_test_bit(bit=16, block=4) = 1 [ 56.573942][ T5095] is_bad_inode(inode)=0 [ 56.578238][ T5095] NEXT_ORPHAN(inode)=1048336 [ 56.582845][ T5095] max_ino=32 [ 56.586270][ T5095] i_nlink=0 [ 56.601811][ T5102] __nla_validate_parse: 24 callbacks suppressed [ 56.601827][ T5102] netlink: 12 bytes leftover after parsing attributes in process `syz.1.556'. [ 56.624222][ T5104] macvlan3: entered promiscuous mode [ 56.629627][ T5104] macvlan3: entered allmulticast mode [ 56.637340][ T5102] bridge5: entered promiscuous mode [ 56.643593][ T5102] bridge5: entered allmulticast mode [ 56.667001][ T5102] team0: Port device bridge5 added [ 56.684835][ T5080] team0: Port device netdevsim1 removed [ 56.686545][ T5080] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.713559][ T5102] netlink: 8 bytes leftover after parsing attributes in process `syz.1.556'. [ 56.754772][ T5080] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.783150][ T5117] netlink: 'syz.1.563': attribute type 1 has an invalid length. [ 56.827023][ T5080] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.836957][ T29] audit: type=1326 audit(1719999819.982:810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5118 comm="syz.1.565" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3de9ec5b99 code=0x0 [ 56.848661][ T5080] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.890000][ T29] audit: type=1400 audit(1719999820.012:811): avc: denied { unlink } for pid=2766 comm="syslogd" name="messages.0" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 56.890877][ T5080] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.955057][ T5080] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.961008][ T29] audit: type=1400 audit(1719999820.072:812): avc: denied { ioctl } for pid=5125 comm="syz.2.566" path="socket:[10252]" dev="sockfs" ino=10252 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 57.018557][ T5133] macvlan3: entered promiscuous mode [ 57.023946][ T5133] macvlan3: entered allmulticast mode [ 57.040294][ T29] audit: type=1400 audit(1719999820.172:813): avc: denied { bind } for pid=5136 comm="syz.3.571" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 57.103083][ T5137] netlink: 20 bytes leftover after parsing attributes in process `syz.3.571'. [ 57.117269][ T5145] netlink: 28 bytes leftover after parsing attributes in process `syz.2.573'. [ 57.179346][ T5152] netlink: 36 bytes leftover after parsing attributes in process `syz.2.574'. [ 57.194546][ T5155] netlink: 'syz.3.576': attribute type 8 has an invalid length. [ 57.202302][ T5155] FAULT_INJECTION: forcing a failure. [ 57.202302][ T5155] name failslab, interval 1, probability 0, space 0, times 0 [ 57.216890][ T5155] CPU: 0 PID: 5155 Comm: syz.3.576 Not tainted 6.10.0-rc6-syzkaller-00061-ge9d22f7a6655 #0 [ 57.229682][ T5155] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 57.243022][ T5155] Call Trace: [ 57.246348][ T5155] [ 57.249380][ T5155] dump_stack_lvl+0xf2/0x150 [ 57.254025][ T5155] dump_stack+0x15/0x20 [ 57.258539][ T5155] should_fail_ex+0x229/0x230 [ 57.263301][ T5155] ? skb_clone+0x154/0x1f0 [ 57.267740][ T5155] __should_failslab+0x92/0xa0 [ 57.272707][ T5155] should_failslab+0x9/0x20 [ 57.277784][ T5155] kmem_cache_alloc_noprof+0x4c/0x290 [ 57.283460][ T5155] skb_clone+0x154/0x1f0 [ 57.288424][ T5155] dev_queue_xmit_nit+0x149/0x620 [ 57.295878][ T5155] dev_hard_start_xmit+0xcc/0x3f0 [ 57.301072][ T5155] ? validate_xmit_skb+0x658/0x8c0 [ 57.306214][ T5155] __dev_queue_xmit+0xf83/0x1e50 [ 57.311247][ T5155] ? should_fail_ex+0xd7/0x230 [ 57.316056][ T5155] ? __dev_queue_xmit+0x161/0x1e50 [ 57.321264][ T5155] ? __skb_clone+0x2d0/0x2f0 [ 57.325935][ T5155] __netlink_deliver_tap+0x39f/0x4c0 [ 57.331306][ T5155] __netlink_sendskb+0xda/0xe0 [ 57.336116][ T5155] netlink_dump+0x725/0x820 [ 57.340663][ T5155] __netlink_dump_start+0x42e/0x510 [ 57.345956][ T5155] ? __pfx_neigh_dump_info+0x10/0x10 [ 57.351296][ T5155] rtnetlink_rcv_msg+0x75d/0x910 [ 57.356270][ T5155] ? __pfx_neigh_dump_info+0x10/0x10 [ 57.361663][ T5155] ? __pfx_neigh_dump_info+0x10/0x10 [ 57.366964][ T5155] ? __memcg_slab_free_hook+0xc9/0x1e0 [ 57.372452][ T5155] ? kmem_cache_free+0xd8/0x280 [ 57.377437][ T5155] ? nlmon_xmit+0x51/0x60 [ 57.381866][ T5155] ? __kfree_skb+0x102/0x150 [ 57.386473][ T5155] ? consume_skb+0x57/0x180 [ 57.391029][ T5155] ? nlmon_xmit+0x51/0x60 [ 57.395522][ T5155] ? dev_hard_start_xmit+0x3c1/0x3f0 [ 57.401026][ T5155] ? __dev_queue_xmit+0xb21/0x1e50 [ 57.406178][ T5155] ? ref_tracker_free+0x3a5/0x410 [ 57.411293][ T5155] netlink_rcv_skb+0x12c/0x230 [ 57.416169][ T5155] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 57.421655][ T5155] rtnetlink_rcv+0x1c/0x30 [ 57.426122][ T5155] netlink_unicast+0x58d/0x660 [ 57.430912][ T5155] netlink_sendmsg+0x5ca/0x6e0 [ 57.435787][ T5155] ? __pfx_netlink_sendmsg+0x10/0x10 [ 57.441276][ T5155] __sock_sendmsg+0x140/0x180 [ 57.446000][ T5155] sock_write_iter+0x164/0x1b0 [ 57.450927][ T5155] do_iter_readv_writev+0x339/0x3e0 [ 57.456186][ T5155] vfs_writev+0x2e0/0x880 [ 57.460620][ T5155] do_writev+0xf8/0x220 [ 57.464885][ T5155] __x64_sys_writev+0x45/0x50 [ 57.469585][ T5155] x64_sys_call+0x1ee2/0x2d70 [ 57.474357][ T5155] do_syscall_64+0xc9/0x1c0 [ 57.478948][ T5155] ? clear_bhb_loop+0x55/0xb0 [ 57.483733][ T5155] ? clear_bhb_loop+0x55/0xb0 [ 57.488432][ T5155] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 57.494431][ T5155] RIP: 0033:0x7f7b44ae4b99 [ 57.498933][ T5155] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 57.518646][ T5155] RSP: 002b:00007f7b43d66048 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 57.527092][ T5155] RAX: ffffffffffffffda RBX: 00007f7b44c72f60 RCX: 00007f7b44ae4b99 [ 57.535081][ T5155] RDX: 0000000000000001 RSI: 00000000200000c0 RDI: 0000000000000005 [ 57.543720][ T5155] RBP: 00007f7b43d660a0 R08: 0000000000000000 R09: 0000000000000000 [ 57.552542][ T5155] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 57.562030][ T5155] R13: 000000000000000b R14: 00007f7b44c72f60 R15: 00007ffc1de4d848 [ 57.570130][ T5155] [ 57.642460][ T29] audit: type=1400 audit(1719999820.772:814): avc: denied { unmount } for pid=3081 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 57.669853][ T5179] tipc: Started in network mode [ 57.674892][ T5179] tipc: Node identity 000000000000000000000000000003, cluster identity 4711 [ 57.700182][ T5178] macvlan4: entered promiscuous mode [ 57.700298][ T5178] macvlan4: entered allmulticast mode [ 57.768022][ T3164] kernel write not supported for file /257/attr/keycreate (pid: 3164 comm: kworker/1:5) [ 57.827525][ T5190] loop4: detected capacity change from 0 to 256 [ 57.855272][ T5198] loop2: detected capacity change from 0 to 512 [ 57.884215][ T5198] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 57.921359][ T5198] EXT4-fs error (device loop2): ext4_orphan_get:1420: comm syz.2.590: bad orphan inode 17 [ 57.939351][ T5196] loop1: detected capacity change from 0 to 8192 [ 57.954301][ T5208] loop3: detected capacity change from 0 to 1024 [ 57.962913][ T5198] ext4_test_bit(bit=16, block=4) = 1 [ 57.968746][ T5198] is_bad_inode(inode)=0 [ 57.973119][ T5198] NEXT_ORPHAN(inode)=1048336 [ 57.977782][ T5198] max_ino=32 [ 57.981119][ T5198] i_nlink=0 [ 57.984509][ T5196] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 58.064874][ T5219] netlink: 'syz.2.598': attribute type 1 has an invalid length. [ 58.080810][ T5217] loop4: detected capacity change from 0 to 1024 [ 58.114561][ T3157] blk_print_req_error: 19 callbacks suppressed [ 58.114577][ T3157] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 58.134627][ T5225] netlink: 4 bytes leftover after parsing attributes in process `syz.2.600'. [ 58.168332][ T9] kernel write not supported for file /359/attr/keycreate (pid: 9 comm: kworker/0:1) [ 58.212845][ T5230] netlink: 104 bytes leftover after parsing attributes in process `syz.2.602'. [ 58.264442][ T5234] netlink: 12 bytes leftover after parsing attributes in process `syz.4.604'. [ 58.298708][ T5234] team0: Port device bridge2 added [ 58.324315][ T5234] netlink: 8 bytes leftover after parsing attributes in process `syz.4.604'. [ 58.365292][ T5236] loop4: detected capacity change from 0 to 512 [ 58.376313][ T5236] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 58.393809][ T5236] EXT4-fs (loop4): orphan cleanup on readonly fs [ 58.402206][ T5236] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.605: bg 0: block 248: padding at end of block bitmap is not set [ 58.417671][ T5236] EXT4-fs error (device loop4): ext4_acquire_dquot:6860: comm syz.4.605: Failed to acquire dquot type 1 [ 58.434864][ T5236] EXT4-fs (loop4): 1 truncate cleaned up [ 58.538092][ T5242] loop4: detected capacity change from 0 to 512 [ 58.556884][ T5242] EXT4-fs (loop4): orphan cleanup on readonly fs [ 58.563454][ T5242] EXT4-fs error (device loop4): ext4_ext_check_inode:520: inode #4: comm syz.4.606: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 58.590358][ T5242] EXT4-fs error (device loop4): ext4_quota_enable:7037: comm syz.4.606: Bad quota inode: 4, type: 1 [ 58.603222][ T5242] EXT4-fs warning (device loop4): ext4_enable_quotas:7078: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 58.619505][ T5242] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 58.748807][ T5249] loop4: detected capacity change from 0 to 512 [ 58.780350][ T5251] loop1: detected capacity change from 0 to 512 [ 58.780589][ T5249] ext4 filesystem being mounted at /51/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 58.791511][ T5251] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 58.817012][ T5251] EXT4-fs error (device loop1): ext4_orphan_get:1420: comm syz.1.608: bad orphan inode 17 [ 58.828589][ T5251] ext4_test_bit(bit=16, block=4) = 1 [ 58.834071][ T5251] is_bad_inode(inode)=0 [ 58.838326][ T5251] NEXT_ORPHAN(inode)=1048336 [ 58.842918][ T5251] max_ino=32 [ 58.846577][ T5251] i_nlink=0 [ 58.874162][ T5256] netlink: 4 bytes leftover after parsing attributes in process `syz.3.611'. [ 58.888699][ T3155] kernel write not supported for file /334/attr/keycreate (pid: 3155 comm: kworker/0:3) [ 58.899763][ T5251] TCP segment has incorrect auth options set for [fe80::bb].0->[ff02::1].20002 [RP.] [ 58.958517][ T5264] loop3: detected capacity change from 0 to 1024 [ 58.989472][ T5271] loop4: detected capacity change from 0 to 128 [ 59.006023][ T5271] FAT-fs (loop4): Unrecognized mount option "" or missing value [ 59.019078][ T5270] bridge6: entered promiscuous mode [ 59.024564][ T5270] bridge6: entered allmulticast mode [ 59.035812][ T5270] team0: Port device bridge6 added [ 59.071126][ T5274] EXT4-fs (loop3): Online resizing not supported with bigalloc [ 59.103610][ T3155] kernel write not supported for file /268/attr/keycreate (pid: 3155 comm: kworker/0:3) [ 59.149247][ T5273] loop0: detected capacity change from 0 to 8192 [ 59.158389][ T5273] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 59.231113][ T5288] loop2: detected capacity change from 0 to 2048 [ 59.275526][ T5288] Alternate GPT is invalid, using primary GPT. [ 59.281876][ T5288] loop2: p1 p2 p3 [ 59.293484][ T2784] Alternate GPT is invalid, using primary GPT. [ 59.299884][ T2784] loop2: p1 p2 p3 [ 59.328899][ T3157] udevd[3157]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 59.335519][ T3854] udevd[3854]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 59.341286][ T3857] udevd[3857]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 59.364552][ T3156] kernel write not supported for file /376/attr/keycreate (pid: 3156 comm: kworker/0:4) [ 59.382635][ T3857] udevd[3857]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 59.383586][ T3157] udevd[3157]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 59.405168][ T3854] udevd[3854]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 59.437336][ T5295] loop2: detected capacity change from 0 to 512 [ 59.458474][ T5295] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 59.475642][ T5295] EXT4-fs error (device loop2): ext4_orphan_get:1420: comm syz.2.627: bad orphan inode 17 [ 59.486792][ T5295] ext4_test_bit(bit=16, block=4) = 1 [ 59.492127][ T5295] is_bad_inode(inode)=0 [ 59.496472][ T5295] NEXT_ORPHAN(inode)=1048336 [ 59.501109][ T5295] max_ino=32 [ 59.504431][ T5295] i_nlink=0 [ 59.609305][ T5301] netlink: 'syz.2.629': attribute type 21 has an invalid length. [ 59.729847][ T5305] team0: Port device bridge9 added [ 59.797933][ T3079] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2234: inode #15: comm syz-executor: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 59.814987][ T3079] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2234: inode #15: comm syz-executor: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 59.967751][ T5324] loop1: detected capacity change from 0 to 256 [ 59.985430][ T5324] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 60.020915][ T3158] kernel write not supported for file /347/attr/keycreate (pid: 3158 comm: kworker/1:3) [ 60.057512][ T5333] loop0: detected capacity change from 0 to 512 [ 60.065843][ T5333] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 60.077174][ T5333] EXT4-fs error (device loop0): ext4_orphan_get:1420: comm syz.0.638: bad orphan inode 17 [ 60.087866][ T5333] ext4_test_bit(bit=16, block=4) = 1 [ 60.093513][ T5333] is_bad_inode(inode)=0 [ 60.097719][ T5333] NEXT_ORPHAN(inode)=1048336 [ 60.102311][ T5333] max_ino=32 [ 60.105592][ T5333] i_nlink=0 [ 60.132769][ T5336] FAULT_INJECTION: forcing a failure. [ 60.132769][ T5336] name failslab, interval 1, probability 0, space 0, times 0 [ 60.145507][ T5336] CPU: 1 PID: 5336 Comm: syz.4.640 Not tainted 6.10.0-rc6-syzkaller-00061-ge9d22f7a6655 #0 [ 60.155817][ T5336] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 60.166965][ T5336] Call Trace: [ 60.171402][ T5336] [ 60.174344][ T5336] dump_stack_lvl+0xf2/0x150 [ 60.179172][ T5336] dump_stack+0x15/0x20 [ 60.183357][ T5336] should_fail_ex+0x229/0x230 [ 60.188108][ T5336] ? tipc_nametbl_lookup_group+0x450/0x620 [ 60.194009][ T5336] __should_failslab+0x92/0xa0 [ 60.198843][ T5336] should_failslab+0x9/0x20 [ 60.203441][ T5336] kmalloc_trace_noprof+0x4b/0x2a0 [ 60.208632][ T5336] tipc_nametbl_lookup_group+0x450/0x620 [ 60.214286][ T5336] __tipc_sendmsg+0x110d/0x1c30 [ 60.219163][ T5336] __tipc_sendstream+0xa2b/0xb20 [ 60.224131][ T5336] ? avc_has_perm+0xd4/0x160 [ 60.228792][ T5336] ? selinux_socket_sendmsg+0x182/0x1b0 [ 60.234511][ T5336] ? _raw_spin_unlock_bh+0x36/0x40 [ 60.239928][ T5336] ? lock_sock_nested+0x10f/0x140 [ 60.244979][ T5336] ? __pfx_tipc_send_packet+0x10/0x10 [ 60.250357][ T5336] tipc_send_packet+0x65/0x80 [ 60.255100][ T5336] __sock_sendmsg+0x140/0x180 [ 60.259847][ T5336] ____sys_sendmsg+0x312/0x410 [ 60.264785][ T5336] __sys_sendmsg+0x1e9/0x280 [ 60.269443][ T5336] __x64_sys_sendmsg+0x46/0x50 [ 60.274247][ T5336] x64_sys_call+0xb25/0x2d70 [ 60.278869][ T5336] do_syscall_64+0xc9/0x1c0 [ 60.283396][ T5336] ? clear_bhb_loop+0x55/0xb0 [ 60.288131][ T5336] ? clear_bhb_loop+0x55/0xb0 [ 60.292809][ T5336] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 60.298709][ T5336] RIP: 0033:0x7f5d3c0eab99 [ 60.303133][ T5336] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 60.325175][ T5336] RSP: 002b:00007f5d3b36c048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 60.338254][ T5336] RAX: ffffffffffffffda RBX: 00007f5d3c278f60 RCX: 00007f5d3c0eab99 [ 60.346597][ T5336] RDX: 0000000000000000 RSI: 00000000200005c0 RDI: 0000000000000004 [ 60.354582][ T5336] RBP: 00007f5d3b36c0a0 R08: 0000000000000000 R09: 0000000000000000 [ 60.362598][ T5336] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 60.370625][ T5336] R13: 000000000000000b R14: 00007f5d3c278f60 R15: 00007ffeabf749e8 [ 60.378722][ T5336] [ 60.385488][ T3080] ================================================================== [ 60.393608][ T3080] BUG: KCSAN: data-race in fsnotify_detach_mark / inotify_handle_inode_event [ 60.402829][ T3080] [ 60.405479][ T3080] write to 0xffff888101eb8544 of 4 bytes by task 3157 on cpu 1: [ 60.415498][ T3080] fsnotify_detach_mark+0xe1/0x190 [ 60.422476][ T3080] fsnotify_destroy_mark+0x9a/0x1a0 [ 60.429424][ T3080] __se_sys_inotify_rm_watch+0xfd/0x180 [ 60.435182][ T3080] __x64_sys_inotify_rm_watch+0x31/0x40 [ 60.440757][ T3080] x64_sys_call+0x1b06/0x2d70 [ 60.445455][ T3080] do_syscall_64+0xc9/0x1c0 [ 60.449982][ T3080] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 60.456065][ T3080] [ 60.458393][ T3080] read to 0xffff888101eb8544 of 4 bytes by task 3080 on cpu 0: [ 60.465954][ T3080] inotify_handle_inode_event+0x2c2/0x310 [ 60.472779][ T3080] fsnotify_handle_inode_event+0x18e/0x1f0 [ 60.478803][ T3080] fsnotify+0x10ba/0x11a0 [ 60.484231][ T3080] __fsnotify_parent+0x285/0x370 [ 60.489957][ T3080] __fput+0x5ca/0x6f0 [ 60.493957][ T3080] __fput_sync+0x44/0x60 [ 60.498220][ T3080] __se_sys_close+0x101/0x1b0 [ 60.502922][ T3080] __x64_sys_close+0x1f/0x30 [ 60.507527][ T3080] x64_sys_call+0x25f1/0x2d70 [ 60.512222][ T3080] do_syscall_64+0xc9/0x1c0 [ 60.516747][ T3080] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 60.522650][ T3080] [ 60.524974][ T3080] value changed: 0x00000003 -> 0x00000000 [ 60.530695][ T3080] [ 60.533030][ T3080] Reported by Kernel Concurrency Sanitizer on: [ 60.539273][ T3080] CPU: 0 PID: 3080 Comm: syz-executor Not tainted 6.10.0-rc6-syzkaller-00061-ge9d22f7a6655 #0 [ 60.549705][ T3080] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 60.560480][ T3080] ================================================================== [ 60.622620][ T5340] bridge7: entered promiscuous mode [ 60.628098][ T5340] bridge7: entered allmulticast mode [ 60.635006][ T5340] team0: Port device bridge7 added [ 63.541736][ T11] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.585603][ T11] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.627187][ T11] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.666008][ T11] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.754009][ T11] bridge_slave_0: left allmulticast mode [ 63.759839][ T11] bridge_slave_0: left promiscuous mode [ 63.765714][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.776594][ T11] veth1_to_bond: left allmulticast mode [ 63.782257][ T11] veth1_to_bond: left promiscuous mode [ 63.787919][ T11] bridge1: port 2(veth1_to_bond) entered disabled state [ 63.799054][ T11] bridge_slave_1: left allmulticast mode [ 63.804747][ T11] bridge_slave_1: left promiscuous mode [ 63.810403][ T11] bridge1: port 1(bridge_slave_1) entered disabled state [ 63.985823][ T11] team0: Port device bridge2 removed [ 64.026435][ T11] team0: Port device bridge3 removed [ 64.066032][ T11] team0: Port device bridge4 removed [ 64.117120][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 64.128648][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 64.138884][ T11] bond0 (unregistering): Released all slaves [ 64.175605][ T11] tipc: Left network mode [ 64.226053][ T11] hsr_slave_0: left promiscuous mode [ 64.231846][ T11] hsr_slave_1: left promiscuous mode [ 64.238987][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 64.246592][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 64.255496][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 64.263124][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 64.272346][ T11] veth1_macvtap: left promiscuous mode [ 64.277907][ T11] veth0_macvtap: left promiscuous mode [ 64.283502][ T11] veth1_vlan: left promiscuous mode [ 64.288801][ T11] veth0_vlan: left promiscuous mode [ 64.382209][ T11] team0 (unregistering): Port device team_slave_1 removed [ 64.394252][ T11] team0 (unregistering): Port device team_slave_0 removed