last executing test programs: 1.040170715s ago: executing program 1 (id=1271): r0 = socket(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000016000000000000006700000000"], 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth1_to_bridge\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newqdisc={0xf4, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x4788, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0xc4, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x7, [0xd, 0x9, 0x1, 0x3, 0xa, 0x3, 0x6, 0xd, 0x8, 0x0, 0x4, 0xd, 0xd, 0x8, 0xd, 0xa], 0x0, [0x200, 0xc000, 0xeba, 0x3, 0x0, 0xfd, 0x9e, 0x2, 0xc, 0x294, 0xffff, 0x9, 0x1, 0x0, 0xb, 0xc], [0x2, 0x0, 0x5, 0x0, 0x0, 0x4f0, 0x7, 0x0, 0x1, 0x1, 0x4, 0x3d8, 0x0, 0x6, 0x3, 0x1]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x54, 0x2, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0xb3}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8}]}, {0x34, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_CMD={0x5}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x10}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0xe3}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x200}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x18}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0xffffff9d}, @TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME_EXTENSION={0xc, 0x9, 0x1}]}}]}, 0xf4}}, 0x0) 1.018892776s ago: executing program 1 (id=1272): mlock2(&(0x7f0000668000/0x4000)=nil, 0x4000, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x66, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000003200)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0xa, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="180000001f000701000000000000000002"], 0x18}, 0x1, 0x0, 0x2000000}, 0x0) 962.586781ms ago: executing program 1 (id=1274): r0 = gettid() process_vm_writev(r0, &(0x7f0000000380)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f00000003c0)=""/231, 0xe7}], 0x1, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xe) ioctl$TIOCSSOFTCAR(r1, 0x5435, 0x0) syz_io_uring_setup(0x1114, &(0x7f0000000300)={0x0, 0x1, 0x4, 0x1}, &(0x7f00000001c0)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x10, 0x0, 0x7, 0x0, 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0x5, &(0x7f0000000740)=ANY=[@ANYBLOB="180000000000000000ffefffff0024863aab38f0524107001dcfd1fe000007000000006816e779f7c865"], &(0x7f00000007c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20}, 0x90) syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), 0xffffffffffffffff) r4 = socket$nl_route(0x10, 0x3, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = socket$tipc(0x1e, 0x4, 0x0) ppoll(&(0x7f0000000080)=[{r5}, {r4, 0x86d2fac9faa61e9}], 0x2, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_clone3(&(0x7f0000000680)={0x100, &(0x7f0000000000)=0xffffffffffffffff, &(0x7f00000004c0), &(0x7f0000000500), {0x12}, &(0x7f0000000540)=""/95, 0x5f, &(0x7f00000005c0)=""/90, &(0x7f0000000640)=[r0, r0, r0], 0x3}, 0x58) ioctl$int_in(r6, 0x5421, &(0x7f0000000700)=0x1) setns(0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$rds(0x15, 0x5, 0x0) bind$rds(r7, 0x0, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000080603000000004000000000000000000500010006000000"], 0x1c}}, 0x400300) socket$tipc(0x1e, 0x2, 0x0) r9 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r9, &(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) 924.882694ms ago: executing program 1 (id=1276): write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x69) execve(0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_io_uring_setup(0x279, 0x0, 0x0, 0x0) syz_io_uring_setup(0x60e6, &(0x7f0000000280), &(0x7f0000000300), 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) keyctl$unlink(0x9, 0x0, 0xfffffffffffffffa) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) flistxattr(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x62, &(0x7f0000000740)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0086dd600a0100002c2b0000000000f5ffffffffffffff00000000fe8000000000000000000000000000aa06020201"], 0x0) 846.67576ms ago: executing program 1 (id=1278): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x403, 0x88480000, 0x0, {0x0, 0x0, 0x74}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x4}]}}}]}, 0x3c}}, 0x0) 839.208821ms ago: executing program 1 (id=1280): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad4104c60000000f00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000140)='netlink_extack\x00', r0}, 0x10) ioctl$FS_IOC_READ_VERITY_METADATA(r0, 0xc0286687, &(0x7f0000000180)={0x3, 0xffffffff, 0xc7, &(0x7f0000000200)=""/199}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000440)={'syztnl2\x00', &(0x7f00000003c0)={'syztnl0\x00', 0x0, 0x29, 0x9c, 0x0, 0x28, 0x78, @ipv4={'\x00', '\xff\xff', @multicast1}, @ipv4={'\x00', '\xff\xff', @empty}, 0x1, 0x8000, 0x1, 0x17}}) sendmsg$nl_xfrm(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000800)=@newsa={0x184, 0x10, 0x1, 0x0, 0x0, {{@in6=@private2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3}, {@in=@empty, 0x0, 0x33}, @in=@remote, {}, {}, {0x1}, 0x0, 0x0, 0xa}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}, @algo_aead={0x4c, 0x12, {{'morus1280-sse2\x00'}}}]}, 0x184}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000300)={{0x1, 0x1, 0x18, r1, {0x8}}, './file0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="b40000000000000073113100100000001627e17b3239ee715f6f54b72b31c3d49dcf41ae7d5d0ed7b644ebc439b098b1453592a022d77a3926ad"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195}, 0x90) r5 = signalfd4(0xffffffffffffffff, &(0x7f0000000000), 0x8, 0x0) ppoll(&(0x7f0000000040)=[{r5}, {r5}], 0x2, 0x0, 0x0, 0x0) syz_io_uring_setup(0x5289, 0x0, 0x0, 0x0) write$binfmt_misc(r4, &(0x7f0000000340)={'syz0', "aa25d5f6db0a0c9e62e2861e80e29b5f9b8f51a001d42f4d4c9bf0f733b85858e928b5d4040d6d0564"}, 0x2d) 809.410143ms ago: executing program 4 (id=1283): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="3000000035000100000000000000000004000a00040000001800018014001000100008"], 0x30}}, 0x0) 754.566318ms ago: executing program 4 (id=1285): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_NEWRULE={0x38, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x4}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, "9c"}]}], {0x14}}, 0x60}, 0x1, 0x0, 0x0, 0x3000000}, 0x0) 754.353698ms ago: executing program 4 (id=1286): openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) syz_init_net_socket$llc(0x1a, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0x0, 0x0) connect$llc(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffefffff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x28, 0x5, 0x1, 0x0, 0xf}]}, @NFT_MSG_NEWSETELEM={0x82, 0xc, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x48, 0x3, 0x0, 0x1, [{0x44, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x38, 0xb, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc}]}}}, {0x14, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}]}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xf8}}, 0x0) 753.604588ms ago: executing program 4 (id=1288): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000c000000040000000000000e0400000000000000000000000000000d00000000060000000000000f0400000000000000000000020300000000005f615f"], 0x0, 0x58}, 0x20) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003580)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c710016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa73d897e3896d863081b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbd744e517e65ddab19e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f200004304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188541c300f5c1bf56705ba12d198e897186b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710f7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47cbb0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9ea410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88c3c44b3b7486f979e8a3174b531f573fe0e5239c000be0a33c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06a6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c6062368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c5bed4b0d73dffb17a88aaad5921aee7dae6a2f3009d9cb434898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a64d903b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867ec92d13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e7ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a00000000000000000000000000006a728258ca3d846a000e80d5f43109a48ddc54cec5d7f78c80e010ed02ffc0846577cafcd9e0ad83149bfb08ba7b5b431311041deb5e5d65610ad6e8d6ed55e900071b4d37d9fadb17a0407e7251866b63faccfe936980f59ceaa9d6b6863024b482023799a4f30a225b560f320e89ed44130e78f8cf000ac3c743b08d4256f282fc36162ac4b59527a3b67560313914ff6ac4ac43cd0e79d6372da631de3fde6c29de3b43d3046df23019ecadd57f175a2443928b1bcb9be16f54936796c3b928dc07c70771622cef2fafeb239a3ca4"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) symlink(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') readlinkat(0xffffffffffffffff, &(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffffff, 0x0) tkill(0xffffffffffffffff, 0x9) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @private2}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000000040)="d2", 0x1}], 0x1, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000840000000000000000000000000000f818000000000000008400000007"], 0x30}, 0x0) sendmmsg$inet_sctp(r1, &(0x7f0000000080)=[{&(0x7f0000000180)=@in={0x2, 0x4e22, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10, &(0x7f0000562000), 0x0, &(0x7f00000c3000)=ANY=[@ANYBLOB=' \x00'/14, @ANYRES32=0x0], 0x20}], 0x1, 0x0) readlink(&(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000004c0)=""/83, 0x53) bpf$PROG_BIND_MAP(0x23, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) writev(r2, &(0x7f0000000140)=[{&(0x7f0000000040)="aefdda9d240303005a90f57f07703aeff0f64eb9ee07962c220a2e11b44e65d76641cb010852f426072a", 0x2a}], 0x1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x28011, r3, 0x0) ftruncate(r3, 0x801da) read(r2, &(0x7f0000000080)=""/42, 0xffffff9b) syz_open_procfs(0x0, &(0x7f00000000c0)='net/if_inet6\x00') r4 = socket(0x1d, 0x2, 0x6) bind$can_j1939(r4, &(0x7f0000000040)={0x1d, 0x0, 0x100003}, 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000004c0)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x20, 0x0, 0x0, 0xfffff02c}, {0x6}]}, 0x10) r7 = fcntl$dupfd(r5, 0x0, r6) sendto$packet(r7, &(0x7f00000009c0)="b11f5bc3", 0x4, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010084797a3000000000080005400000000d08000640ffffff000800034000000008680000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000003c0003803800008008000340000000022c0002802800028008000180fffffffb"], 0xfc}, 0x1, 0x0, 0x0, 0x10}, 0x0) 733.366149ms ago: executing program 4 (id=1289): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r1, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r2, @ANYBLOB="01000000000000a00000090000"], 0xa0}}, 0x0) 678.589354ms ago: executing program 4 (id=1291): socket$packet(0x11, 0x3, 0x300) r0 = socket(0x200000100000011, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) socket$kcm(0xa, 0x0, 0x87) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f0000000340)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r4, 0xc0182101, &(0x7f0000000180)={r5}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f0000002780)={0x0}) close(r3) r8 = syz_open_dev$ttys(0xc, 0x2, 0x1) r9 = fspick(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r9, 0x1, &(0x7f00000001c0)='\xff\xff\xff\xff\xff\xff', &(0x7f0000000200)='\x00', 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r4, 0x40182103, &(0x7f0000000080)={r7, 0x3, r4}) bind$packet(r0, &(0x7f0000000040)={0x11, 0x16, r2, 0x1, 0xfd, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3d}}, 0x14) socket(0x15, 0x5, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x1, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x8680}, 0x0, 0x0, 0x7ffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, r6, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r10 = socket$inet6(0xa, 0x6, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_MSG_RING={0x28, 0x1, 0x0, 0xffffffffffffffff, 0x1ff, &(0x7f0000000300)="f9758d0e9019ab8e55a304ec3077a21077acffa3337397d053e3495af740abc238a9fc6899ef1f2b79fbee5da36eefb9e55f", 0x32, 0x0, 0x1}) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r11 = fcntl$dupfd(r0, 0x0, r8) ioctl$SCSI_IOCTL_GET_PCI(r11, 0x5393, &(0x7f0000000000)) bind$inet6(r10, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="18"], 0x0}, 0x90) r12 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r12, 0x0) getsockopt$inet6_mptcp_buf(r12, 0x11c, 0x2, &(0x7f00000001c0)=""/207, &(0x7f0000000000)=0xcf) listen(r10, 0x80080400) syz_open_pts(0xffffffffffffffff, 0x7e9422) 669.317545ms ago: executing program 2 (id=1295): perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32, @ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000440)='cgroup.threads\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000480)={r3, 0x0, 0xe, 0x0, &(0x7f0000000340)="7fc19e9e88708c2b4fd87e707708", 0x0, 0x0, 0x0, 0x0, 0xc0, 0x0, &(0x7f0000000400)="11"}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000300)) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) connect(r1, &(0x7f0000001380)=@nfc={0x27, 0x0, 0x0, 0x2}, 0x80) writev(r1, &(0x7f00000012c0)=[{&(0x7f00000005c0)="f1a08cbf4fb2e7921f36c4cc701e391bd62361ab1b44273921f45fa50dc5a4a2e4bb8b32b2e70df7dfbc2c1b9a67e9cf00297b2a1b3826d44210e43b72c5a31205fd42685892aaff9edce55e700fad1491537b94129033f42ddd1659db8dac43b9a9b6a44df92b818a8ddc0731ca1358c5a7ca474c6a5979104b163c9e21cc75aa7cd21306996ad0f4867c784644bfa5b3de2de8b4ee90492804153e2809b806b0459c3a0024af4235259fb9e55a8719957b3c385a66c0ff78572b38366e767c956b24518da1fc8c17a1fca8c5b0a2b8836c09dd2582e3759b03ff9dcb05", 0xde}, {&(0x7f00000006c0)="66f4c89080b7606f56c66703abf308c4d7599e3676d5f3fe03166345a5db1730dd72363b7f7286a0c9f9ba260541519d227dfc934efaf58e54afc3d6763c6488e5ddb8e2883a7ead22811283ff0ed0ffd8c52f2c6c33766e4f0bdbaee1800dc578b67b2c1542898d6b5583e21dc0345f9af69f214d08279bcf2f97f85fd66102301a26624d99862097d97848bf2e4bf4bbbbf4dcc4af547796ecad298a08983475b0", 0xa2}, {&(0x7f00000002c0)="c82d7047ca3c6ea987e08a434f1f0424a1c9ca812720fa143afdcfdee6b0ccee0ffd1014", 0x24}, {&(0x7f0000000780)="59b9cfc67edccd57d21579377195687c4f4d67c89b01b02eb4e9464553ff7275c362794d140fc00c0336dadbc134c20ed782c53283573a6042a5142ede5314085bfa8a9f25fb727e7847fc70f24478", 0x4f}, {&(0x7f0000000800)="572434a23ce4a0bd1093465d622337131a4a71f2197582a7bb3b26d5a394933ec4debd1fac9122c82d03b4d121eabadf08ae3da56035672cf33907cf2fa1b1ad99b1e94c43c383fb44d79e937991c96bc0d4b6bc99720e2ca07867d9dbf9a9fbb1d4eb59465208df285e609ca0b5327aad8563dc35", 0x75}, {&(0x7f0000000880)="ba7b803de63eec6212067fee6edbe9bc8f10a4b18714135a08c1b09fcb3c1af90b3e55833d0112bc8ddecdaba7b2ae2340a6afe0972fa828cc504a73f84000e23cdb266e3526fc9c73797d222ac78354a0071479c63390a7130e93e34e1a882df9925c8f9e9441390cf62027165a77d32a60573a7b07cd7d35a45f6b0c29f18bce19441c7b1dc0", 0x87}, {&(0x7f0000000940)="3c60fc972dba7d210fac2ad2c6ff0ad3606cfda2a4a03567be7e94d099b3a8866fc380bb720fbf5c38cf9b53374cc130e89a452f7498643103529d26bcd5816fa20636e1ecc89b49ff6ed2db94b972700a8782b99977fa47ee01d81f6de09b9e47ecf718e494cc6a7122ffe13afa99d452e8ec944cfe6e7c0e237216f2960292621cbebda40834dcfd92c0e64cbc61ebcbaf1adb0f5f2ade1c7f606995201f81782bcce17ea3877693d9665ac2461c27d46cccf5bad6bf10d546d8f7060a2bfd6b70d646da8703d4b49eb6f45447912f", 0xd0}, {&(0x7f0000000fc0)="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", 0xff}, {&(0x7f00000010c0)="940283119bdda256674d111da24de8ab06e870e87bd6b6ab44ea8b288bd4f06ceff4f4c4999a1005a90091fcedf2da5d3be64d8d20a7ddb90e1c9688825039dd74cac251a70468724a09a54bd7d13b234dae07687eabb821343c5b89232b24df857d421906c535913f0922e3ac8a46571cad41bb0d02aaf00ba0deaf944beb12a3a20b5e00351b5acb17b10867acb269a50b483ab84b74b85abf3d1310e910c3ac11c9be3a20bec3da0e9ad0101dd4897ffc08c2db68eee0e12ec2f1382eeda7c1aa0574eb55ca02776ae7466d", 0xcd}, {&(0x7f00000011c0)="85e140aa7f08c82b065577d2bac80c15d19b25cb4ab47e096ff43dc2352a816fda8a8e114f500c0aee486cf06caf0bd3435f43421e8beea17446f2ab985e806801710015d281295eb85219c1377d5c48d6e404f048e46bd6cbc662b7f46c5394f36587cd2af35c5621d0d4fec9e2adb11c4bbc946517ade7e50c87065ec82ac0e0497f60079c59af03793d164bc64813ee84a2c90bcfe7e1fcbdfcf35f970eda7ec6d9da174ee257558f4f620fe78687f5c835b8f09e44763c202aeee88f84daae8614e9cbd50cab81f3c4bbc03559595c94c2c162326ba28001944eafc374fba93678fab29253d2c596a4cba094", 0xee}], 0xa) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) recvmmsg(r1, &(0x7f00000000c0), 0x0, 0x2002, 0x0) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0xb) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000540)='./file2\x00', 0x808d, &(0x7f00000000c0), 0xfe, 0x504, &(0x7f0000000a80)="$eJzs3c9vG1kdAPDvTOJukmZxFjgsK7Gs2EVJBHWSDd2NOCwgITitBCz3EhI3iuLEVeJsm6iCVP0DkBACJC5w4oLEHwBCPXFGSJXgjgCBELRw4FAYZHvcpsZOXNU/kPP5SK/zw3a+3xd3nue9N/EEcGG9FhELEZFlWbYYEcV8f5qXOGmW+vMePri9US9JZNl7f0siae6baf2sF/Ll5fxlUxHx1S9FfCP537gHR8c765VKeT/fXqrtJo+y7PjK9u76VnmrvLe6uvLW2ttrV9eW+1LPuYh45wt/+t63f/LFd375qZu/v/aXhW82K9hUr1dfArVpVr3Q+F20TEbE/iCCjchko4ZNV0ecCwAAZ6uf738wIj4eEYtRjInG2RwAAAAwTrLPzsajpDn/BwAAAIynNCJmI0lLzcs4YzbStFRqXsP74ZhJK9WD2iez4uPxgrkopNe3K+Xl/NqBuSgk9e2V/Brb1vabbdurEfFSRHy3ON3YLm1UK5ujHPgAAACAC+Tyk/5/489h/1ls9v8BAACAMTM36gQAAACAgdP/BwAAgPGn/w8AAABj7cvvvlsvWev+15vvHx3uVN+/slk+2CntHm6UNqr7N0pb1epW4zv7ds/7eZVq9canY+/w1lKtfFBbOjg6vrZbPdyrXdt+6hbYAAAAwBC99LF7v0si4uQz02lr36V8WYjIJk4/eXLo6QEDlLbvOGuU7o+DzQUYrolRJwCMzDOf0v/qF4NJBBi6wqgTAEbuvHag67DAr/ufCwAAMBjzH3k8/98ocWr+PxlpZsCg5fP/iWMdLh7z/3Bx9TL/t3h3CIkAQ1c46wxApwDGXtrDof788/9Z9kxJAQAAfTfbKElayvsBs5GmpVLEi43bAhSS69uV8nJEfCAiflssvFDfXmm8MjE8AAAAAAAAAAAAAAAAAAAAAAAAAAA9yrIkMgAAAGCsRaR/TvL7f80X35htHx+4lPyr2FhGxM0fvvf9W+u12v5Kff/fH++v/SDf/+YoRjAAAACAdq1+eqsfDwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD99PDB7Y1WGWbcv34+IuY6xZ+MqcZyKgoRMfOPJCZPvS6JiIk+xD+5ExEvd4qf1NOKuTyL9vhpREyPOP7lPsSHi+xevf35XKfjL43XGsvOx99kXp5X9/YvbbRx9fgTXdq/F3uM8cr9ny11jX8n4pXJzu1Pq/1NusR/vcf4X//a8XG3x7IfR8x3/PxJnoq1VNu9sXRwdHxle3d9q7xV3ltdXXlr7e21q2vLS9e3K+X8344xvvPRn//nrPrPdIk/d0793+ix/v++f+vBh5qrhbaHCvGjLFt4vfP7/3LzN9RwOn7rs+8T+edAfXu+tX7SXD/t1Z/+5tWz6r/Zpf7nvf8LPdZ/8St3/9DjUwGAITg4Ot5Zr1TK++O2cun/Iw0r9ZXpGGLQ9ej8UJr/lx9a3b+VBxxGrKm+xxpRgwQAAAzMk5P+fAIBAAAAAAAAAAAAAAAAAAAAGLrzvgYs+vB1Yu0xT0ZTVQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAM/03AAD//8FN1tg=") 652.101456ms ago: executing program 3 (id=1296): r0 = socket$inet(0x2, 0x4000000805, 0x0) listen(r0, 0x4c4) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x0, &(0x7f00000003c0)={[{@user_xattr}, {@noquota}, {@barrier_val={'barrier', 0x3d, 0x6}}, {@jqfmt_vfsv1}, {@block_validity}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7b1}}, {@stripe={'stripe', 0x3d, 0x20}}, {@auto_da_alloc_val}, {@max_batch_time={'max_batch_time', 0x3d, 0x3fe}}, {@user_xattr}, {@orlov}]}, 0x1, 0x562, &(0x7f0000001080)="$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") pipe2(0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r1, &(0x7f0000001000)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "df3f0400000000000000000000000609000040"}) r2 = syz_open_pts(r1, 0x0) r3 = dup3(r2, r1, 0x0) ioctl$TCFLSH(r3, 0x540b, 0x2) socket$nl_route(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f0000000ac0)=[{{&(0x7f0000000000)=@l2tp={0x2, 0x0, @broadcast}, 0x80, &(0x7f0000000180)}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1020d500100000000000000000000000b315db90c723c19898d1ca08ee7326dfda8b51b7a7a0feb62eb77275dd48582187ad00000000000000006ac79e50a539e430106206fdbccca5a05a2af3107a46970f355d54bda603c9e9cb63"], 0x10}}], 0x2, 0x0) 532.184646ms ago: executing program 2 (id=1299): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000c000000040000000000000e0400000000000000000000000000000d00000000060000000000000f0400000000000000000000020300000000005f615f"], 0x0, 0x58}, 0x20) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003580)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) symlink(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') readlinkat(0xffffffffffffffff, &(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffffff, 0x0) tkill(0xffffffffffffffff, 0x9) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @private2}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000000040)="d2", 0x1}], 0x1, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000840000000000000000000000000000f818000000000000008400000007"], 0x30}, 0x0) sendmmsg$inet_sctp(r1, &(0x7f0000000080)=[{&(0x7f0000000180)=@in={0x2, 0x4e22, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10, &(0x7f0000562000), 0x0, &(0x7f00000c3000)=ANY=[@ANYBLOB=' \x00'/14, @ANYRES32=0x0], 0x20}], 0x1, 0x0) readlink(&(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000004c0)=""/83, 0x53) bpf$PROG_BIND_MAP(0x23, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) writev(r2, &(0x7f0000000140)=[{&(0x7f0000000040)="aefdda9d240303005a90f57f07703aeff0f64eb9ee07962c220a2e11b44e65d76641cb010852f426072a", 0x2a}], 0x1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x28011, r3, 0x0) ftruncate(r3, 0x801da) read(r2, &(0x7f0000000080)=""/42, 0xffffff9b) syz_open_procfs(0x0, &(0x7f00000000c0)='net/if_inet6\x00') r4 = socket(0x1d, 0x2, 0x6) bind$can_j1939(r4, &(0x7f0000000040)={0x1d, 0x0, 0x100003}, 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000004c0)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x20, 0x0, 0x0, 0xfffff02c}, {0x6}]}, 0x10) r7 = fcntl$dupfd(r5, 0x0, r6) sendto$packet(r7, &(0x7f00000009c0)="b11f5bc3", 0x4, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010084797a3000000000080005400000000d08000640ffffff000800034000000008680000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000003c0003803800008008000340000000022c0002802800028008000180fffffffb"], 0xfc}, 0x1, 0x0, 0x0, 0x10}, 0x0) 522.494857ms ago: executing program 0 (id=1300): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_DONE(r0, 0x0, 0x19, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$pppl2tp(0x18, 0x1, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = syz_open_procfs(0x0, 0x0) r2 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0xfffffffffffffdc6, &(0x7f0000000780)={&(0x7f0000002d80)=@newqdisc={0xac, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x7c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [], 0x0, [0x8, 0x4], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10}, @TCA_TAPRIO_ATTR_TXTIME_DELAY={0x8}]}}]}, 0xac}}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x10, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x0, 0x0, 0x0, r1}, 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_MAP_GET_NEXT_ID(0xc, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) r5 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r5, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), 0xffffffffffffffff) 462.702072ms ago: executing program 0 (id=1301): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="200000002b0009000000000000000074010000000c0007800800000000000000b0f26545147d572fd6b05d3f0c3e984336bd622a861640046b91adf823820dfd87764f5f4fea41c067bc0d2b35e8938bca230003f0f439baeb7697c4e04eda540c4ea46e17e4e6966a0cd76bf83193fcf0979aa87fd116d65ae1d0c3348807870f8b199765f19f87a7d51016b162f2fcd6a8e8841715a79cf0d49c351f9303548e0735e87b815459585ca0a9cd57300fd6a27fe8db617d881f9fcc2e6f05a68b769b71d7af0c06a13369d62a4f049a03066f37089f452c2d54c41ecb"], 0x20}}, 0x0) 461.793872ms ago: executing program 0 (id=1302): perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x66, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000300)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) getsockopt(0xffffffffffffffff, 0x3fe, 0x20, 0x0, 0x0) setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, 0x0, 0x0) r0 = socket(0xa, 0x3, 0x3a) accept$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000180)=0x1c) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000540)) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000000)={@in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3, 0x0, "d8dda79cffbab637ed68517f4b8b80c92e7380f3ff2b6af1350bc66d504e1f39bc7443921d5f850e07a0b59a286fffc0c092856957ba3bea4edc78761fe65d564814e4be2859ffbbb82cea36ab4dfad6"}, 0xd8) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000400)={@in={{0x2, 0x0, @loopback}}, 0xaa, 0x0, 0x1043, 0x0, "9e01d38162d11d34e29ca77dcbf24898d6a94fd4fa08282a85f3f595ecc7ea4970f940447ed103a76cd02d6f7c2b69aac55e1b172ff20dcc8ca7134702e02bd6738454ac00"}, 0xd8) connect$inet(r2, &(0x7f00000003c0)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000001a00)={@in={{0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x44}}}, 0x0, 0x0, 0x4, 0x0, "e91b1dc5727500bb1f86bee48ec8d8126ddc3ecd08e785ac1c2662df00256b8c01f0a6f5a70b8935d4d32116282e9d4161c64eed7a8ff52095bd39c3a708b1649892c15bb15773fa3293578178b35412"}, 0xd8) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000140), 0x16) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000c40)=@delchain={0x23c, 0x65, 0x0, 0x0, 0x0, {}, [@TCA_CHAIN={0x8}, @TCA_RATE={0x6, 0x5, {0x4}}, @TCA_CHAIN={0x8}, @filter_kind_options=@f_flower={{0xb}, {0x40, 0x2, [@TCA_FLOWER_KEY_ARP_OP={0x5}, @TCA_FLOWER_KEY_ICMPV6_CODE={0x5}, @TCA_FLOWER_KEY_TCP_DST_MASK={0x6}, @TCA_FLOWER_KEY_ENC_IPV6_SRC_MASK={0x14}, @TCA_FLOWER_KEY_UDP_SRC_MASK={0x6}, @TCA_FLOWER_KEY_ICMPV6_TYPE={0x5}]}}, @filter_kind_options=@f_route={{0xa}, {0x1a8, 0x2, [@TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_IIF={0x8}, @TCA_ROUTE4_ACT={0x18c, 0x6, [@m_nat={0xb0, 0x0, 0x0, 0x0, {{0x8}, {0x54, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{}, @rand_addr, @loopback}}, @TCA_NAT_PARMS={0x28, 0x1, {{}, @rand_addr, @broadcast, 0xffffffff}}]}, {0x35, 0x6, "3eaed48f5023f5c36bc9d8619f3e2af20800000000000000a40bc384135c74eb813bf1cf69dbeaddd76b564e92016d53f6"}, {0xc}, {0xc}}}, @m_connmark={0xac, 0x0, 0x0, 0x0, {{0xd}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0x0, 0xe}}}, @TCA_CONNMARK_PARMS={0x1c}]}, {0x41, 0x6, "66396e732cf67237ecb590a592c571fa73ca19ec26dea927df7162b385d80fe15ca7f5cb6a4d958bd18714cd4f89f48d039d7da0dc8795f6ad32634b6b"}, {0xc}, {0xc}}}, @m_bpf={0x2c, 0x0, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xfffffe55}, {0xc}}}]}]}}]}, 0x23c}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendto(r3, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r3) recvmmsg(r3, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x8}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000280)='2', 0x1}], 0x1) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000480)) setsockopt$MRT6_DEL_MIF(0xffffffffffffffff, 0x29, 0xc8, 0x0, 0xc000000) setsockopt$MRT6_DONE(r0, 0x29, 0xc9, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) fcntl$getownex(r4, 0x10, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/stat\x00', 0x0, 0x0) 378.763188ms ago: executing program 0 (id=1303): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000904001f000000fe0ec00d000000000800040001000000", 0x24) 365.2384ms ago: executing program 0 (id=1304): creat(&(0x7f0000000380)='./file0\x00', 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='kfree\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b80)=ANY=[@ANYBLOB="4800000010000305000000000000000000030000", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b0001006d616373656300001800028005000300040000000c0004000300000100c280"], 0x48}}, 0x0) 344.895971ms ago: executing program 0 (id=1305): creat(&(0x7f0000000000)='./file0\x00', 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00'}, 0x10) mount$9p_tcp(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=tcp,port=0x0000000000004e22']) 341.824481ms ago: executing program 2 (id=1306): syz_open_dev$tty1(0xc, 0x4, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='numa_maps\x00') mbind(&(0x7f00004c7000/0x2000)=nil, 0x2000, 0x2, &(0x7f00000000c0)=0x1, 0xf4, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@getsa={0x34, 0x12, 0x1, 0x0, 0x0, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x33}, [@mark={0xc}]}, 0x34}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x4, 0x0, 0x0}, 0x90) epoll_create1(0x0) r1 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x1000}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7020000f3ffffb0150000008600000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r3) r4 = io_uring_setup(0x168e, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f00000002c0)=[{0x0}], 0x1) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r4, 0x10, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000400)=""/83, 0x53}], 0x0, 0x1}, 0x20) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) 174.642955ms ago: executing program 3 (id=1307): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x900, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x60, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pfifo={{0xa}, {0x7}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, {0x6, 0x2, [0x0]}}]}]}, 0x60}}, 0x0) 145.839357ms ago: executing program 3 (id=1308): write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r1, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r2, @ANYBLOB="01000000005000000000030000002400018005000200050000000800060000000000060005004e21000005000200650000000400018005000500ff0000000800040005000000040006"], 0xa0}}, 0x0) 136.407418ms ago: executing program 3 (id=1309): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) ftruncate(r0, 0xb1c) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000080)={0x0, 0x5b}, 0xe) shutdown(r1, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x14800, 0x0) r3 = socket$inet(0x2, 0x5, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x33, &(0x7f00000a2000)={0x1, &(0x7f0000000380)=[{0x6}]}, 0x10) close_range(r2, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7c, &(0x7f00000000c0)={r4}, 0x8) sendto$inet6(r1, &(0x7f00000000c0)="9fa43dfb", 0x4, 0x40, &(0x7f0000000100)={0xa, 0x4e24, 0xf3cd, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, 0x1c) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipv4_newroute={0x2c, 0x1a, 0x1, 0x0, 0x0, {}, [@RTA_IP_PROTO={0x5, 0x1b, 0x11}, @RTA_SPORT={0x6}]}, 0x2c}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x28011, r0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={r0, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, &(0x7f0000000200)=[0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0], 0x0, 0x7d, &(0x7f0000000280)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000300), &(0x7f0000000340), 0x8, 0x95, 0x8, 0x8, &(0x7f00000003c0)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="b40000000000000000cf2e00000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x4, 0x16, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76}, 0x48) 88.398632ms ago: executing program 3 (id=1310): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = syz_clone(0x40000000, &(0x7f0000000340)="7a50714a03fd7a7585fbb54b988ffb90aa8ba1b5435d1f8d0c0c8e7226aafce6bdb962cbf9d0de247f0cb6015c24820a860ce5e3adaa790853ef34d8c0e041531180df53166f04bf28c3b550e7810b831fc0ddb134902eda769fb7115707f36f113d2c32365b01ed8bd9aea069182eb9a3279fe89f597cc185acfeb1339e906ad6df0d472d5cddd08cd8fdd505", 0x8d, &(0x7f00000004c0), &(0x7f00000000c0), &(0x7f0000000400)="3b4bc30f005f629d699d823ea4d73b78fcccecfa0d89673f363d11cbaad5389bb6ee58e7825f52f9cd9d5f1b2a4061516784a43fbefd927705722bfd86b917fb96593813b282e4d061df44757038640dcc75470fdc689681719ae5959d79228e0ba3a17b9d4ed75231e04bb8eded2151d599beeecd7cbe3b0e8d8c6655426d6e7d23edf4d49d6bdfe138fb97ccf5b61dbb7b85c17c8b159538790c17959079f676ea4d6aa471f28004") ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000140)=r1) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0xfffffffffffffe4e, &(0x7f0000000000)=[{&(0x7f00000001c0)="d8000000180081054e81f782db44b904021d005c06007c09e8fe55a10a0015400500142603600e1208000b0000000401a80016000800014009001100036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360d070100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r3, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r4, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) getsockname$packet(r7, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000f40)=@newlink={0xec, 0x10, 0x801, 0xfffc, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_AF_SPEC={0xcc, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0x2, 0x0, 0x1, [@IFLA_INET6_TOKEN={0xa, 0x7, @local}]}, @AF_INET={0x30, 0x2, 0x0, 0x1, {0x4, 0x1, 0x0, 0x1, [{0x3}, {0x8}, {0x4}, {0x8}, {0x8}]}}, @AF_INET={0x18, 0x2, 0x0, 0x1, {0x56, 0x1, 0x0, 0x1, [{0x11}, {0x8}]}}, @AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_ADDR_GEN_MODE]}, @AF_INET={0x28, 0x2, 0x0, 0x1, {0x24, 0x1, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}}, @AF_MPLS={0x4}, @AF_INET6={0x0, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_TOKEN={0x0, 0x7, @private1}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE]}, @AF_MPLS={0x4}]}]}, 0xec}}, 0x0) 82.521722ms ago: executing program 2 (id=1311): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={0x20, 0x0, 0x7, 0x201, 0x0, 0x0, {}, [@NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}}, 0x0) sendmsg$NFNL_MSG_ACCT_DEL(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x20, 0x3, 0x7, 0x5, 0x0, 0x0, {}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) (async) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) (async, rerun: 64) listen(r1, 0x8) (async, rerun: 64) r2 = accept4(r1, 0x0, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="b4050000000000007110bf0000000000460000000000000095000000004a000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd96, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) (async) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) unshare(0x20000400) (async) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r3, 0x1269, &(0x7f0000001080)) (async) get_robust_list(0x0, 0x0, 0xfffffffffffffffe) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x84, &(0x7f0000000180)={0x0, @in={{0x2, 0x0, @empty}}}, 0x90) (async, rerun: 32) r4 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) (rerun: 32) getdents(r4, 0x0, 0x0) openat$loop_ctrl(0xffffff9c, &(0x7f0000000100), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001840)) (async) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {{}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x10000000}, {}, {0x4, 0x0}}}, &(0x7f0000000200)='syzkaller\x00', 0x7, 0x1003, &(0x7f0000001e40)=""/4099}, 0x90) (async, rerun: 32) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280), 0xd) (async, rerun: 32) r5 = gettid() r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000001c0), 0x0) read(r6, &(0x7f0000000100)=""/140, 0xde) (async) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r6, 0x4040534e, &(0x7f0000000040)={0x37, @time}) (async, rerun: 64) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r6, 0xc0bc5351, &(0x7f0000000200)={{}, 'port1\x00'}) (async, rerun: 64) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0x80045301, 0x0) (async) tkill(r5, 0x7) 30.493957ms ago: executing program 2 (id=1312): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$qrtr(0x2a, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x2) pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f00000003c0)="45c89f4246969427969fa7338a34e95fcd4923d99ae12f58e655120ea89306dc98df2d1e67026f8cfd436beed8c9afaf32bacf661d6dc93abaf85133fb1b3afe35cc5f69f06244ae71d16390add5aaadc027455a3482231a8034660252ceaf26bde894cb65f7ec0ce79c7c5f6446e28b5240feb4af06c16cfa218d11f576911657ad889b35cd903776404c9ea3a010a5e8e3eb1f7f0f6bb137460111839bd084cd14ea5b5fe49b2b5012c1a8b0793aace81ea611a65a8e", 0xb7}, {&(0x7f0000000480)="b773b4a35a7043f2b4f4b4004259a9492a2707817bbc3f5a2905205e94ebaeb14020932cf343e594ace0d55d84b83872fb471a1d3517d0f08824a1a52d95dafa194787646718b32497deaf56b86ed04c0a2ec3ad0280faf1fa47b01803bf0c00897e9dd4101380bd3810bcf9a916ee73bbb76ee26cae375eee205649549eb43e434d9371b16f7109f99d43bbff03", 0x8e}], 0x2, 0x1, 0x1) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) write$binfmt_script(r2, 0x0, 0xfffffe5d) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="3c00000010008506000000ff01000000000e0000", @ANYRES32=r3, @ANYBLOB="01e6f8e1d5ed00001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) getsockname$packet(r2, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0x14) r5 = socket(0x10, 0x0, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="380000001900010027bd7000fddbdf2502202082ff03ff0a0010000008000f005e0a000008001900", @ANYRES32=0x0, @ANYBLOB="0c0009009f1d53e4", @ANYRES32=r4, @ANYBLOB], 0x38}, 0x1, 0x0, 0x0, 0x24040040}, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) open(&(0x7f00000005c0)='./bus\x00', 0x24843, 0x0) socket$key(0xf, 0x3, 0x2) socket$packet(0x11, 0x2, 0x300) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x4, 0x0, 0x6, 0x9b, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x40000, 0x0, 0x0, 0xffffffff, 0xfffd, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0xd, 0x180, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000540), 0xb}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, 0x0, 0x1, 0xffffffffffffffff, 0x8) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x0, 0x1, 0x5, 0x40, r6, 0x64a8, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5, 0x4, 0x3}, 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r8, @ANYBLOB="00000000364f0000b7020000f3ffffb0150000008600000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r9) openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/bus/input/handlers\x00', 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) syz_open_dev$sg(&(0x7f0000000380), 0x0, 0x0) 8.647148ms ago: executing program 2 (id=1313): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0xfffffffffffffe79, 0x34, 0x9, 0x0, 0x0, {0x14}, [@typed={0x4}, @typed={0x0, 0x48, 0x0, 0x0, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}}]}, 0x24}}, 0x0) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000100)) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000040)) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000001840)=@nat={'nat\x00', 0x670, 0x5, 0x368, 0x0, 0xa8, 0xfeffffff, 0xa8, 0xa8, 0x2d0, 0x2d0, 0xffffffff, 0x2d0, 0x2d0, 0x5, 0x0, {[{{@ip={@private, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'gre0\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x6800, {0x0, @multicast2, @empty, @gre_key, @gre_key}}}}, {{@uncond, 0x0, 0xb0, 0xd8, 0x0, {0x0, 0x7}, [@common=@set={{0x40}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ip={@loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'pimreg1\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0xa8}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x0, @local, @local}}}}, {{@ip={@multicast2, @multicast2, 0x0, 0x0, 'caif0\x00', 'pim6reg0\x00'}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @port, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c8) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0x0, 0x0, 0x101}}) set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r6 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r5], 0x270}}, 0x0) r7 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) read$usbmon(r7, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r2) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x68}}, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000300)={0xa, 0x4e20, 0x1, @mcast2, 0x7ba}, 0x1c) sendmsg$NFT_MSG_GETFLOWTABLE(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c000000170a010800000000e5040000000000000900010073797a300c000540000006000000000200000000"], 0x2c}}, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r9 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) r11 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$TIOCSETD(r11, 0x5423, &(0x7f0000000000)=0x3) ioctl$TCGETA(r11, 0x5405, 0xffffffffffffffff) setuid(r10) 0s ago: executing program 3 (id=1314): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newqdisc={0x5c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x8848}}, {0x4}}]}, @qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x5c}}, 0x0) kernel console output (not intermixed with test programs): 8410][ T3078] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.526449][ T4223] 8021q: adding VLAN 0 to HW filter on device bond0 [ 43.551910][ T4223] 8021q: adding VLAN 0 to HW filter on device team0 [ 43.552596][ T4388] netlink: 'syz.3.356': attribute type 1 has an invalid length. [ 43.578890][ T4340] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.593127][ T4393] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.602390][ T3166] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.602459][ T4393] netlink: 12 bytes leftover after parsing attributes in process `syz.0.354'. [ 43.609535][ T3166] bridge0: port 1(bridge_slave_0) entered forwarding state [ 43.635012][ T4399] loop3: detected capacity change from 0 to 512 [ 43.647537][ T3157] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.650246][ T4401] netlink: 40 bytes leftover after parsing attributes in process `syz.0.358'. [ 43.654604][ T3157] bridge0: port 2(bridge_slave_1) entered forwarding state [ 43.672552][ T29] audit: type=1400 audit(1720614442.421:798): avc: denied { create } for pid=4400 comm="syz.0.358" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 43.691818][ T29] audit: type=1400 audit(1720614442.421:799): avc: denied { write } for pid=4400 comm="syz.0.358" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 43.750095][ T4399] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.750326][ T4405] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 43.776471][ T4399] ext4 filesystem being mounted at /79/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 43.792382][ T4223] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 43.822689][ T3080] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.896652][ T4223] veth0_vlan: entered promiscuous mode [ 43.905147][ T4223] veth1_vlan: entered promiscuous mode [ 43.915181][ T4223] veth0_macvtap: entered promiscuous mode [ 43.923135][ T4223] veth1_macvtap: entered promiscuous mode [ 43.930708][ T4431] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.942132][ T4223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 43.952730][ T4223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 43.962536][ T4223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 43.972976][ T4223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 43.982820][ T4223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 43.993274][ T4223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 44.003073][ T4223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 44.013501][ T4223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 44.024978][ T4223] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 44.035839][ T4223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 44.046428][ T4223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 44.056300][ T4223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 44.066884][ T4223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 44.067698][ T4439] loop4: detected capacity change from 0 to 1024 [ 44.076684][ T4223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 44.083932][ T4439] EXT4-fs (loop4): can't mount with data=, fs mounted w/o journal [ 44.093414][ T4223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 44.093429][ T4223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 44.093441][ T4223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 44.102246][ T4223] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 44.134958][ T4441] loop3: detected capacity change from 0 to 512 [ 44.140542][ T4223] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.153693][ T4223] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.162432][ T4223] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.169050][ T29] audit: type=1400 audit(1720614442.941:800): avc: denied { recv } for pid=40 comm="kworker/u8:2" saddr=10.128.0.163 src=30030 daddr=10.128.0.177 dest=58426 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 44.171193][ T4223] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.209071][ T29] audit: type=1400 audit(1720614442.981:801): avc: denied { egress } for pid=40 comm="kworker/u8:2" daddr=ff02::1:ff00:1c netif=gretap0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 44.210818][ T4441] EXT4-fs (loop3): corrupt root inode, run e2fsck [ 44.234431][ T29] audit: type=1400 audit(1720614442.981:802): avc: denied { sendto } for pid=40 comm="kworker/u8:2" daddr=ff02::1:ff00:1c netif=gretap0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 44.245199][ T4441] EXT4-fs (loop3): mount failed [ 44.314556][ T4446] loop2: detected capacity change from 0 to 4096 [ 44.323005][ T4446] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.361682][ T4223] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.379306][ T4453] loop3: detected capacity change from 0 to 512 [ 44.398202][ T4453] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.411016][ T4453] ext4 filesystem being mounted at /84/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 44.464846][ T3080] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.558677][ T4460] netlink: 'syz.2.374': attribute type 1 has an invalid length. [ 44.591565][ T4466] loop2: detected capacity change from 0 to 512 [ 44.608626][ T4466] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.622391][ T4466] ext4 filesystem being mounted at /3/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 44.731316][ T4470] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.732767][ T4223] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.766331][ T4474] loop3: detected capacity change from 0 to 512 [ 44.774206][ T4474] EXT4-fs (loop3): failed to initialize system zone (-117) [ 44.782518][ T4474] EXT4-fs (loop3): mount failed [ 44.827357][ T4474] tmpfs: Bad value for 'mpol' [ 44.871527][ T4483] netlink: 'syz.3.380': attribute type 1 has an invalid length. [ 44.987227][ T4489] loop3: detected capacity change from 0 to 128 [ 44.994556][ T4489] FAT-fs (loop3): invalid media value (0x00) [ 45.000653][ T4489] FAT-fs (loop3): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 45.009944][ T4489] FAT-fs (loop3): Can't find a valid FAT filesystem [ 45.014251][ T4498] loop4: detected capacity change from 0 to 512 [ 45.033205][ T4498] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 45.059971][ T4498] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR [ 45.060055][ T4498] EXT4-fs: failed to create workqueue [ 45.074958][ T4498] EXT4-fs (loop4): mount failed [ 45.214151][ T4484] loop2: detected capacity change from 0 to 512 [ 45.266096][ T4484] EXT4-fs: Invalid want_extra_isize 7 [ 45.354463][ T4530] loop3: detected capacity change from 0 to 512 [ 45.386657][ T4530] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2842e028, mo2=0002] [ 45.408278][ T4530] System zones: 1-12 [ 45.422599][ T4539] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 45.433186][ T4530] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.394: invalid indirect mapped block 8 (level 2) [ 45.466120][ T4530] EXT4-fs (loop3): Remounting filesystem read-only [ 45.487849][ T4530] EXT4-fs (loop3): 1 truncate cleaned up [ 45.505391][ T4530] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.533084][ T4530] SELinux: (dev loop3, type ext4) getxattr errno 5 [ 45.551310][ T4530] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.648067][ T4571] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.655147][ T4571] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.696437][ T4573] netlink: 'syz.4.402': attribute type 29 has an invalid length. [ 45.711843][ T4577] batman_adv: batadv0: Adding interface: ipvlan2 [ 45.718407][ T4577] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.743809][ T4577] batman_adv: batadv0: Interface activated: ipvlan2 [ 45.775592][ T4581] loop3: detected capacity change from 0 to 512 [ 45.787823][ T4581] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 45.811180][ T4581] EXT4-fs (loop3): warning: checktime reached, running e2fsck is recommended [ 45.823354][ T4581] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a84ec02c, mo2=0002] [ 45.832295][ T4581] System zones: 0-2, 18-18, 34-34 [ 45.838845][ T4581] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1137: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 45.854840][ T4581] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.404: bg 0: block 408: padding at end of block bitmap is not set [ 45.870474][ T4581] EXT4-fs (loop3): Remounting filesystem read-only [ 45.877292][ T4581] EXT4-fs (loop3): 1 truncate cleaned up [ 45.883253][ T4581] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.896075][ T4581] SELinux: (dev loop3, type ext4) getxattr errno 5 [ 45.925845][ T4581] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.063074][ T4595] netlink: 'syz.3.409': attribute type 10 has an invalid length. [ 46.089507][ T4595] team0: Failed to send options change via netlink (err -105) [ 46.097049][ T4595] team0: Port device netdevsim1 added [ 46.113332][ T3166] team0: Failed to send port change of device netdevsim1 via netlink (err -105) [ 46.125492][ T4599] netlink: 'syz.3.409': attribute type 10 has an invalid length. [ 46.136888][ T4599] team0: Failed to send options change via netlink (err -105) [ 46.149929][ T4599] team0: Failed to send port change of device netdevsim1 via netlink (err -105) [ 46.160372][ T4599] team0: Port device netdevsim1 removed [ 46.169779][ T4599] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 46.171686][ T4586] loop4: detected capacity change from 0 to 512 [ 46.192718][ T4586] EXT4-fs: Invalid want_extra_isize 7 [ 46.522967][ T4649] loop2: detected capacity change from 0 to 512 [ 46.547475][ T4649] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.568162][ T4649] ext4 filesystem being mounted at /12/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 46.612859][ T4223] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.735106][ T4671] loop2: detected capacity change from 0 to 8192 [ 46.743448][ T4671] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 46.757923][ T4671] ebt_limit: overflow, try lower: 570423552/2483027968 [ 46.961180][ T4703] loop2: detected capacity change from 0 to 512 [ 46.974561][ T4703] EXT4-fs: Ignoring removed i_version option [ 46.998586][ T4703] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a016c018, mo2=0002] [ 47.016039][ T4703] System zones: 1-12 [ 47.026800][ T4703] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.419: bg 0: block 131: padding at end of block bitmap is not set [ 47.119701][ T4703] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 47.187392][ T4738] Cannot find set identified by id 0 to match [ 47.207890][ T4703] EXT4-fs (loop2): 1 truncate cleaned up [ 47.227033][ T4738] __nla_validate_parse: 6 callbacks suppressed [ 47.227045][ T4738] netlink: 12 bytes leftover after parsing attributes in process `syz.3.422'. [ 47.251893][ T4703] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.321999][ T29] kauditd_printk_skb: 15 callbacks suppressed [ 47.322012][ T29] audit: type=1400 audit(1720614446.091:818): avc: denied { create } for pid=4701 comm="syz.2.419" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 47.337952][ T4703] devtmpfs: Unknown parameter 'rt' [ 47.410866][ T29] audit: type=1400 audit(1720614446.101:819): avc: denied { mounton } for pid=4701 comm="syz.2.419" path="/16/file0/file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 47.433917][ T29] audit: type=1400 audit(1720614446.131:820): avc: denied { bind } for pid=4709 comm="syz.0.421" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 47.483850][ T4223] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.506089][ T4815] validate_nla: 1 callbacks suppressed [ 47.506102][ T4815] netlink: 'syz.3.424': attribute type 1 has an invalid length. [ 47.525920][ T4815] 8021q: adding VLAN 0 to HW filter on device bond3 [ 47.541768][ T4815] tap0: tun_chr_ioctl cmd 2147767517 [ 47.548001][ T29] audit: type=1400 audit(1720614446.321:821): avc: denied { write } for pid=4811 comm="syz.3.424" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 47.551287][ T4818] netlink: 277 bytes leftover after parsing attributes in process `syz.2.425'. [ 47.573947][ T29] audit: type=1400 audit(1720614446.321:822): avc: denied { open } for pid=4811 comm="syz.3.424" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 47.606891][ T29] audit: type=1400 audit(1720614446.361:823): avc: denied { ioctl } for pid=4817 comm="syz.2.425" path="socket:[9439]" dev="sockfs" ino=9439 ioctlcmd=0x9423 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 47.684720][ T4832] batadv_slave_1: entered promiscuous mode [ 47.691464][ T29] audit: type=1400 audit(1720614446.461:824): avc: denied { mount } for pid=4817 comm="syz.2.425" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 47.716548][ T4833] batadv_slave_1: left promiscuous mode [ 47.733564][ T4818] loop2: detected capacity change from 0 to 512 [ 47.735010][ T4841] 9pnet: p9_errstr2errno: server reported unknown error œæçæŒÎs•ñÿÿÿ [ 47.740284][ T4818] EXT4-fs: Ignoring removed nomblk_io_submit option [ 47.757375][ T4842] netlink: 92 bytes leftover after parsing attributes in process `syz.3.431'. [ 47.757582][ T4818] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.780234][ T29] audit: type=1400 audit(1720614446.531:825): avc: denied { bind } for pid=4839 comm="syz.3.431" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 47.787512][ T4846] loop3: detected capacity change from 0 to 2048 [ 47.804766][ T4818] ext4 filesystem being mounted at /17/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 47.838645][ T4340] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.852613][ T4846] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.867221][ T29] audit: type=1400 audit(1720614446.631:826): avc: denied { map } for pid=4840 comm="syz.4.432" path="/dev/sg0" dev="devtmpfs" ino=113 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 47.890912][ T29] audit: type=1400 audit(1720614446.631:827): avc: denied { execute } for pid=4840 comm="syz.4.432" path="/dev/sg0" dev="devtmpfs" ino=113 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 47.934313][ T4852] netlink: 16 bytes leftover after parsing attributes in process `syz.0.434'. [ 47.945458][ T4223] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.955880][ T4340] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.979698][ T4860] : renamed from batadv0 (while UP) [ 47.994178][ T4860] : entered promiscuous mode [ 48.024380][ T4340] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.038075][ T4852] netlink: 'syz.0.434': attribute type 10 has an invalid length. [ 48.051542][ T4866] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=4866 comm=syz.4.440 [ 48.089159][ T28] bridge_slave_1: left allmulticast mode [ 48.094833][ T28] bridge_slave_1: left promiscuous mode [ 48.100678][ T28] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.118664][ T28] bridge_slave_0: left allmulticast mode [ 48.124318][ T28] bridge_slave_0: left promiscuous mode [ 48.129963][ T28] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.145656][ T4870] can: request_module (can-proto-0) failed. [ 48.233626][ T1917] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 48.249396][ T1917] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 48.261990][ T1917] EXT4-fs (loop3): This should not happen!! Data will be lost [ 48.261990][ T1917] [ 48.271750][ T1917] EXT4-fs (loop3): Total free blocks count 0 [ 48.277897][ T1917] EXT4-fs (loop3): Free/Dirty block details [ 48.283783][ T1917] EXT4-fs (loop3): free_blocks=2415919104 [ 48.289523][ T1917] EXT4-fs (loop3): dirty_blocks=8192 [ 48.294846][ T1917] EXT4-fs (loop3): Block reservation details [ 48.300905][ T1917] EXT4-fs (loop3): i_reserved_data_blocks=512 [ 48.326604][ T11] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 48.348291][ T28] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 48.363532][ T28] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 48.379443][ T28] bond0 (unregistering): Released all slaves [ 48.411927][ T4874] netlink: 92 bytes leftover after parsing attributes in process `syz.4.442'. [ 48.424708][ T4340] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 48.436216][ T4872] loop2: detected capacity change from 0 to 512 [ 48.446815][ T4340] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 48.455405][ T4872] EXT4-fs: Invalid want_extra_isize 7 [ 48.462510][ T4878] loop4: detected capacity change from 0 to 256 [ 48.470910][ T4340] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 48.478054][ T4878] FAT-fs (loop4): Unrecognized mount option "ÿÿ0xffffffffffffffff" or missing value [ 48.489450][ T4340] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 48.508923][ T28] hsr_slave_0: left promiscuous mode [ 48.514685][ T28] hsr_slave_1: left promiscuous mode [ 48.522835][ T28] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 48.530288][ T28] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 48.538778][ T28] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 48.546246][ T28] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 48.559636][ T28] veth1_macvtap: left promiscuous mode [ 48.565117][ T28] veth0_macvtap: left promiscuous mode [ 48.570645][ T28] veth1_vlan: left promiscuous mode [ 48.575863][ T28] veth0_vlan: left promiscuous mode [ 48.597831][ T4884] loop2: detected capacity change from 0 to 512 [ 48.659461][ T4884] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 48.693622][ T4881] loop3: detected capacity change from 0 to 2048 [ 48.722832][ T4881] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.756177][ T28] team0 (unregistering): Port device team_slave_1 removed [ 48.770634][ T4905] loop0: detected capacity change from 0 to 2048 [ 48.779655][ T28] team0 (unregistering): Port device team_slave_0 removed [ 48.808300][ T4905] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.822319][ T4889] netlink: 4 bytes leftover after parsing attributes in process `syz.3.443'. [ 48.832103][ T3078] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.867398][ T4340] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.881510][ T4340] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.891796][ T3159] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.898903][ T3159] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.931733][ T24] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.938818][ T24] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.969453][ T4340] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 49.030234][ T4926] netlink: 'syz.2.457': attribute type 1 has an invalid length. [ 49.061949][ T4340] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.179743][ T4959] netlink: 'syz.2.464': attribute type 6 has an invalid length. [ 49.206448][ T4940] loop4: detected capacity change from 0 to 512 [ 49.219364][ T4340] veth0_vlan: entered promiscuous mode [ 49.220485][ T4940] EXT4-fs: Invalid want_extra_isize 7 [ 49.236941][ T4340] veth1_vlan: entered promiscuous mode [ 49.263275][ T4340] veth0_macvtap: entered promiscuous mode [ 49.278872][ T4340] veth1_macvtap: entered promiscuous mode [ 49.288211][ T4963] loop2: detected capacity change from 0 to 736 [ 49.300602][ T4340] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 49.311065][ T4340] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.321089][ T4340] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 49.331702][ T4340] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.341560][ T4340] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 49.352079][ T4340] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.361967][ T4340] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 49.372496][ T4340] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.383528][ T4340] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.391992][ T4340] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 49.398341][ T4963] netdevsim netdevsim2 netdevsim0: Unsupported IPsec algorithm [ 49.402536][ T4340] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.419837][ T4340] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 49.430395][ T4340] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.440220][ T4340] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 49.450706][ T4340] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.460726][ T4340] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 49.471252][ T4340] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.484377][ T3080] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.487131][ T4340] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.513189][ T4340] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.522036][ T4340] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.530765][ T4340] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.539483][ T4340] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.589259][ T4969] netlink: 72 bytes leftover after parsing attributes in process `syz.2.470'. [ 49.605832][ T4969] loop2: detected capacity change from 0 to 1024 [ 49.612996][ T4971] selection: kmalloc() failed [ 49.614519][ T4969] EXT4-fs (loop2): stripe (7) is not aligned with cluster size (16), stripe is disabled [ 49.636432][ T4969] EXT4-fs (loop2): can't mount with journal_async_commit, fs mounted w/o journal [ 49.702997][ T4987] loop4: detected capacity change from 0 to 1024 [ 49.711357][ T4987] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 49.724856][ T4987] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.750729][ T4990] netlink: 4 bytes leftover after parsing attributes in process `syz.3.477'. [ 49.751756][ T4994] loop1: detected capacity change from 0 to 512 [ 49.771354][ T4994] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps block group descriptors [ 49.776491][ T3084] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.791446][ T4994] EXT4-fs error (device loop1): __ext4_fill_super:5447: inode #2: comm syz.1.478: iget: special inode unallocated [ 49.805028][ T4994] EXT4-fs (loop1): get root inode failed [ 49.810774][ T4994] EXT4-fs (loop1): mount failed [ 49.944318][ T5011] loop1: detected capacity change from 0 to 256 [ 49.974351][ T4931] kexec: Could not allocate control_code_buffer [ 49.990748][ T5012] loop4: detected capacity change from 0 to 512 [ 50.007177][ T5016] loop0: detected capacity change from 0 to 256 [ 50.013748][ T5016] FAT-fs (loop0): Unrecognized mount option "uid8†íÏ«ÁE³-2;" or missing value [ 50.050126][ T5012] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.063573][ T5012] ext4 filesystem being mounted at /111/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 50.083705][ T3084] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.096624][ T5018] netlink: 12 bytes leftover after parsing attributes in process `syz.1.486'. [ 50.185063][ T5030] netlink: 'syz.4.489': attribute type 3 has an invalid length. [ 50.213336][ T5039] loop4: detected capacity change from 0 to 256 [ 50.285572][ T5052] netlink: 596 bytes leftover after parsing attributes in process `syz.4.498'. [ 50.311888][ T5054] netlink: 'syz.4.499': attribute type 12 has an invalid length. [ 50.336437][ T5055] Process accounting resumed [ 50.491492][ T5077] loop3: detected capacity change from 0 to 512 [ 50.509335][ T5077] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.526204][ T5077] ext4 filesystem being mounted at /118/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 50.572659][ T3080] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.621797][ T5086] netlink: 'syz.2.504': attribute type 10 has an invalid length. [ 50.638327][ T5086] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.658263][ T5086] bond0: (slave team0): Enslaving as an active interface with an up link [ 50.684625][ T5090] netlink: 'syz.3.505': attribute type 10 has an invalid length. [ 50.696723][ T5090] bond0: (slave netdevsim1): Releasing backup interface [ 50.705101][ T5090] team0: Failed to send port change of device netdevsim1 via netlink (err -105) [ 50.714244][ T5090] team0: Failed to send options change via netlink (err -105) [ 50.721707][ T5090] team0: Port device netdevsim1 added [ 50.729053][ T5090] netlink: 'syz.3.505': attribute type 10 has an invalid length. [ 50.790238][ T5102] netlink: zone id is out of range [ 50.795501][ T5102] netlink: del zone limit has 4 unknown bytes [ 50.802319][ T5096] netlink: 'syz.2.508': attribute type 1 has an invalid length. [ 50.863624][ T5106] loop0: detected capacity change from 0 to 512 [ 50.877214][ T5106] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 50.902189][ T5106] EXT4-fs (loop0): 1 truncate cleaned up [ 50.908141][ T5106] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.948066][ T5110] loop2: detected capacity change from 0 to 764 [ 50.956175][ T3078] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.068483][ T5126] loop1: detected capacity change from 0 to 164 [ 51.246500][ T5137] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=58470 sclass=netlink_route_socket pid=5137 comm=syz.0.522 [ 51.330756][ T5144] loop2: detected capacity change from 0 to 512 [ 51.344886][ T5144] EXT4-fs: Invalid want_extra_isize 7 [ 51.615422][ T5163] loop4: detected capacity change from 0 to 2048 [ 51.617551][ T5165] loop2: detected capacity change from 0 to 512 [ 51.638181][ T5163] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.650798][ T5165] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.664701][ T5165] ext4 filesystem being mounted at /43/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 51.665626][ T28] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 51.690024][ T5173] sctp: [Deprecated]: syz.3.534 (pid 5173) Use of int in maxseg socket option. [ 51.690024][ T5173] Use struct sctp_assoc_value instead [ 51.690027][ T28] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 51.716364][ T28] EXT4-fs (loop4): This should not happen!! Data will be lost [ 51.716364][ T28] [ 51.726051][ T28] EXT4-fs (loop4): Total free blocks count 0 [ 51.732051][ T28] EXT4-fs (loop4): Free/Dirty block details [ 51.737960][ T28] EXT4-fs (loop4): free_blocks=2415919104 [ 51.743685][ T28] EXT4-fs (loop4): dirty_blocks=16 [ 51.748807][ T28] EXT4-fs (loop4): Block reservation details [ 51.754865][ T28] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 51.762290][ T3084] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.769511][ T5177] loop3: detected capacity change from 0 to 512 [ 51.778142][ T5177] EXT4-fs (loop3): invalid inodes per group: 2 [ 51.778142][ T5177] [ 51.809799][ T4223] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.855286][ T5186] loop3: detected capacity change from 0 to 512 [ 51.879470][ T5186] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.908586][ T5186] ext4 filesystem being mounted at /127/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 51.973485][ T3080] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.250220][ T5212] loop1: detected capacity change from 0 to 512 [ 52.317805][ T5212] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.346745][ T5204] loop4: detected capacity change from 0 to 512 [ 52.360104][ T5204] EXT4-fs: Invalid want_extra_isize 7 [ 52.369308][ T5212] ext4 filesystem being mounted at /10/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 52.507681][ T4340] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.580084][ T29] kauditd_printk_skb: 40 callbacks suppressed [ 52.580098][ T29] audit: type=1400 audit(1720614451.351:868): avc: denied { shutdown } for pid=5224 comm="syz.3.551" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 52.617123][ T29] audit: type=1400 audit(1720614451.391:869): avc: denied { sqpoll } for pid=5227 comm="syz.1.549" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 52.618359][ T5225] __nla_validate_parse: 3 callbacks suppressed [ 52.618371][ T5225] netlink: 24 bytes leftover after parsing attributes in process `syz.3.551'. [ 52.637684][ T29] audit: type=1400 audit(1720614451.411:870): avc: denied { write } for pid=5227 comm="syz.1.549" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 52.684944][ T5232] loop3: detected capacity change from 0 to 512 [ 52.727266][ T5232] EXT4-fs (loop3): too many log groups per flexible block group [ 52.727517][ T5239] validate_nla: 1 callbacks suppressed [ 52.727527][ T5239] netlink: 'syz.1.554': attribute type 3 has an invalid length. [ 52.734933][ T5232] EXT4-fs (loop3): failed to initialize mballoc (-12) [ 52.766044][ T5232] EXT4-fs (loop3): mount failed [ 52.807473][ T5248] IPv6: NLM_F_CREATE should be specified when creating new route [ 52.819804][ T5250] loop4: detected capacity change from 0 to 512 [ 52.848076][ T5250] ext4 filesystem being mounted at /132/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 52.877954][ T5258] loop1: detected capacity change from 0 to 256 [ 52.888003][ T5257] ALSA: seq fatal error: cannot create timer (-22) [ 52.891494][ T5258] FAT-fs (loop1): Directory bread(block 64) failed [ 52.901409][ T5258] FAT-fs (loop1): Directory bread(block 65) failed [ 52.909848][ T5258] FAT-fs (loop1): Directory bread(block 66) failed [ 52.916748][ T5258] FAT-fs (loop1): Directory bread(block 67) failed [ 52.924870][ T5258] FAT-fs (loop1): Directory bread(block 68) failed [ 52.931490][ T5258] FAT-fs (loop1): Directory bread(block 69) failed [ 52.942899][ T5258] FAT-fs (loop1): Directory bread(block 70) failed [ 52.949492][ T5258] FAT-fs (loop1): Directory bread(block 71) failed [ 52.950645][ T5263] loop3: detected capacity change from 0 to 1024 [ 52.956146][ T5258] FAT-fs (loop1): Directory bread(block 72) failed [ 52.965372][ T5263] Quota error (device loop3): v2_read_file_info: Can't read info structure [ 52.969830][ T5258] FAT-fs (loop1): Directory bread(block 73) failed [ 52.980795][ T5263] EXT4-fs warning (device loop3): ext4_enable_quotas:7078: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix. [ 53.000104][ T5263] EXT4-fs (loop3): mount failed [ 53.006323][ T5258] syz.1.562: attempt to access beyond end of device [ 53.006323][ T5258] loop1: rw=2049, sector=1224, nr_sectors = 128 limit=256 [ 53.068330][ T5270] loop3: detected capacity change from 0 to 512 [ 53.076589][ T5270] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.566: bg 0: block 288: padding at end of block bitmap is not set [ 53.091055][ T5270] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 53.100239][ T5270] EXT4-fs error (device loop3): ext4_clear_blocks:883: inode #13: comm syz.3.566: attempt to clear invalid blocks 1024 len 1 [ 53.113597][ T5270] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.566: invalid indirect mapped block 1819239214 (level 0) [ 53.128169][ T5270] EXT4-fs (loop3): 1 truncate cleaned up [ 53.272772][ T5277] loop3: detected capacity change from 0 to 512 [ 53.286861][ T5277] EXT4-fs error (device loop3): ext4_quota_enable:7030: comm syz.3.569: Bad quota inum: 13, type: 1 [ 53.297849][ T5277] EXT4-fs warning (device loop3): ext4_enable_quotas:7078: Failed to enable quota tracking (type=1, err=-117, ino=13). Please run e2fsck to fix. [ 53.312783][ T5277] EXT4-fs (loop3): mount failed [ 53.743673][ T5288] netlink: 76 bytes leftover after parsing attributes in process `syz.4.571'. [ 53.787374][ T5291] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: ipvlan2 [ 53.797282][ T5291] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.807754][ T5291] dummy0: entered promiscuous mode [ 53.838915][ T5297] loop4: detected capacity change from 0 to 512 [ 53.846368][ T5296] netlink: 64 bytes leftover after parsing attributes in process `syz.2.576'. [ 53.861739][ T5297] ext4 filesystem being mounted at /135/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 53.904498][ T5301] netlink: 'syz.2.578': attribute type 1 has an invalid length. [ 54.002961][ T5314] netlink: 'syz.4.580': attribute type 4 has an invalid length. [ 54.147101][ T5322] loop4: detected capacity change from 0 to 2048 [ 54.388843][ T5335] netlink: 'syz.4.589': attribute type 1 has an invalid length. [ 54.403848][ T5340] vcan0 speed is unknown, defaulting to 1000 [ 54.408273][ T5345] netlink: 12 bytes leftover after parsing attributes in process `syz.4.591'. [ 54.422256][ T29] audit: type=1400 audit(1720614453.191:871): avc: denied { listen } for pid=5344 comm="syz.4.591" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 54.431542][ T5347] netlink: 16 bytes leftover after parsing attributes in process `syz.4.592'. [ 54.500941][ T5352] netlink: 'syz.2.594': attribute type 10 has an invalid length. [ 54.508766][ T5352] netlink: 40 bytes leftover after parsing attributes in process `syz.2.594'. [ 54.518963][ T5352] bridge0: port 3(gretap0) entered blocking state [ 54.525379][ T5352] bridge0: port 3(gretap0) entered disabled state [ 54.532203][ T5352] gretap0: entered allmulticast mode [ 54.537887][ T5352] gretap0: entered promiscuous mode [ 54.543234][ T5352] bridge0: port 3(gretap0) entered blocking state [ 54.549719][ T5352] bridge0: port 3(gretap0) entered forwarding state [ 54.622378][ T5359] loop4: detected capacity change from 0 to 512 [ 54.633920][ T29] audit: type=1400 audit(1720614453.401:872): avc: denied { write } for pid=5361 comm="syz.3.598" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 54.656655][ T5359] EXT4-fs (loop4): 1 truncate cleaned up [ 54.856064][ T5371] loop3: detected capacity change from 0 to 512 [ 54.868186][ T5371] ext4 filesystem being mounted at /145/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 54.914661][ T5375] netlink: 'syz.4.601': attribute type 1 has an invalid length. [ 54.938936][ T5381] loop3: detected capacity change from 0 to 512 [ 54.968927][ T5381] ext4 filesystem being mounted at /146/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 54.979880][ T5387] netlink: 24 bytes leftover after parsing attributes in process `syz.4.605'. [ 55.008500][ T5381] FAULT_INJECTION: forcing a failure. [ 55.008500][ T5381] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 55.021645][ T5381] CPU: 1 PID: 5381 Comm: syz.3.603 Not tainted 6.10.0-rc7-syzkaller-00012-g34afb82a3c67 #0 [ 55.031658][ T5381] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 55.031671][ T5381] Call Trace: [ 55.031678][ T5381] [ 55.031684][ T5381] dump_stack_lvl+0xf2/0x150 [ 55.031711][ T5381] dump_stack+0x15/0x20 [ 55.031730][ T5381] should_fail_ex+0x229/0x230 [ 55.031816][ T5381] should_fail+0xb/0x10 [ 55.031840][ T5381] should_fail_usercopy+0x1a/0x20 [ 55.031956][ T5381] strncpy_from_user+0x25/0x270 [ 55.031981][ T5381] ? should_failslab+0x9/0x20 [ 55.032093][ T5381] ? kmem_cache_alloc_noprof+0x10c/0x290 [ 55.032188][ T5381] getname_flags+0xb4/0x360 [ 55.032215][ T5381] user_path_at_empty+0x2c/0x120 [ 55.032234][ T5381] path_setxattr+0x60/0x1a0 [ 55.032317][ T5381] __x64_sys_lsetxattr+0x6a/0x80 [ 55.032347][ T5381] x64_sys_call+0x1688/0x2d70 [ 55.032372][ T5381] do_syscall_64+0xc9/0x1c0 [ 55.032392][ T5381] ? clear_bhb_loop+0x55/0xb0 [ 55.032421][ T5381] ? clear_bhb_loop+0x55/0xb0 [ 55.032471][ T5381] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 55.032491][ T5381] RIP: 0033:0x7fbd0152bbd9 [ 55.032505][ T5381] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 55.032590][ T5381] RSP: 002b:00007fbd007ad048 EFLAGS: 00000246 ORIG_RAX: 00000000000000bd [ 55.032616][ T5381] RAX: ffffffffffffffda RBX: 00007fbd016b9f60 RCX: 00007fbd0152bbd9 [ 55.032628][ T5381] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000020000000 [ 55.032639][ T5381] RBP: 00007fbd007ad0a0 R08: 0000000000000000 R09: 0000000000000000 [ 55.032650][ T5381] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 55.032662][ T5381] R13: 000000000000000b R14: 00007fbd016b9f60 R15: 00007ffee4dd5228 [ 55.032678][ T5381] [ 55.055447][ T5398] netlink: 4 bytes leftover after parsing attributes in process `syz.4.609'. [ 55.257904][ T29] audit: type=1326 audit(1720614454.031:873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5400 comm="syz.4.611" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f343e187bd9 code=0x0 [ 55.281896][ T29] audit: type=1326 audit(1720614454.051:874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5400 comm="syz.4.611" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f343e187bd9 code=0x0 [ 55.393847][ T5413] netlink: 'syz.3.615': attribute type 1 has an invalid length. [ 55.639571][ T5433] netlink: 8 bytes leftover after parsing attributes in process `syz.0.621'. [ 55.648806][ T5433] netlink: 'syz.0.621': attribute type 5 has an invalid length. [ 55.673950][ T5435] netlink: 28 bytes leftover after parsing attributes in process `syz.0.622'. [ 55.714171][ T5437] netlink: 'syz.0.623': attribute type 1 has an invalid length. [ 55.907515][ T5439] xt_CT: You must specify a L4 protocol and not use inversions on it [ 55.995171][ T29] audit: type=1400 audit(1720614454.691:875): avc: denied { map } for pid=5436 comm="syz.0.623" path="socket:[11694]" dev="sockfs" ino=11694 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 56.018522][ T29] audit: type=1400 audit(1720614454.691:876): avc: denied { read } for pid=5436 comm="syz.0.623" path="socket:[11694]" dev="sockfs" ino=11694 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 56.101828][ T5442] openvswitch: netlink: IP tunnel dst address not specified [ 56.189628][ T5446] netlink: 'syz.4.626': attribute type 13 has an invalid length. [ 56.222967][ T5446] syz_tun: refused to change device tx_queue_len [ 56.241750][ T5453] bridge0: port 3(gretap0) entered disabled state [ 56.248300][ T5453] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.255417][ T5453] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.320031][ T5472] IPv6: NLM_F_CREATE should be specified when creating new route [ 56.328518][ T5472] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 56.335840][ T5472] IPv6: NLM_F_CREATE should be set when creating new route [ 56.343056][ T5472] IPv6: NLM_F_CREATE should be set when creating new route [ 56.350292][ T5472] IPv6: NLM_F_CREATE should be set when creating new route [ 56.382471][ T5476] loop4: detected capacity change from 0 to 512 [ 56.390136][ T5476] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 56.398129][ T5476] EXT4-fs (loop4): orphan cleanup on readonly fs [ 56.416549][ T5476] EXT4-fs warning (device loop4): ext4_enable_quotas:7078: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 56.431667][ T5476] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 56.438870][ T5476] EXT4-fs error (device loop4): ext4_orphan_get:1394: inode #16: comm syz.4.637: casefold flag without casefold feature [ 56.452179][ T5476] EXT4-fs error (device loop4): ext4_orphan_get:1399: comm syz.4.637: couldn't read orphan inode 16 (err -117) [ 56.699732][ T5493] vcan0 speed is unknown, defaulting to 1000 [ 56.856743][ T5506] infiniband syz1: set down [ 56.864634][ T24] infiniband syz1: ib_query_port failed (-19) [ 56.872393][ T28] smc: removing ib device syz1 [ 57.027627][ T5510] vcan0 speed is unknown, defaulting to 1000 [ 57.033949][ T5510] vcan0 speed is unknown, defaulting to 1000 [ 57.040844][ T5510] vcan0 speed is unknown, defaulting to 1000 [ 57.077760][ T5510] infiniband syz1: set active [ 57.082458][ T5510] infiniband syz1: added vcan0 [ 57.087469][ T9] vcan0 speed is unknown, defaulting to 1000 [ 57.095887][ T5517] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 54587 - 0 [ 57.104731][ T5517] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 54587 - 0 [ 57.113563][ T5517] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 54587 - 0 [ 57.114129][ T5510] RDS/IB: syz1: added [ 57.122485][ T5517] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 54587 - 0 [ 57.126663][ T5510] smc: adding ib device syz1 with port count 1 [ 57.136127][ T5517] netdevsim netdevsim3 netdevsim0: set [1, 2] type 2 family 0 port 35883 - 0 [ 57.142270][ T5510] smc: ib device syz1 port 1 has pnetid [ 57.150135][ T5517] netdevsim netdevsim3 netdevsim1: set [1, 2] type 2 family 0 port 35883 - 0 [ 57.165184][ T5517] netdevsim netdevsim3 netdevsim2: set [1, 2] type 2 family 0 port 35883 - 0 [ 57.174069][ T5517] netdevsim netdevsim3 netdevsim3: set [1, 2] type 2 family 0 port 35883 - 0 [ 57.187203][ T5517] geneve2: entered promiscuous mode [ 57.194579][ T5517] netdevsim netdevsim3 netdevsim0: unset [1, 2] type 2 family 0 port 35883 - 0 [ 57.203575][ T5517] netdevsim netdevsim3 netdevsim1: unset [1, 2] type 2 family 0 port 35883 - 0 [ 57.212580][ T5517] netdevsim netdevsim3 netdevsim2: unset [1, 2] type 2 family 0 port 35883 - 0 [ 57.221534][ T5517] netdevsim netdevsim3 netdevsim3: unset [1, 2] type 2 family 0 port 35883 - 0 [ 57.230679][ T5517] netdevsim netdevsim3 netdevsim0: unset [1, 1] type 2 family 0 port 54587 - 0 [ 57.240366][ T5517] netdevsim netdevsim3 netdevsim1: unset [1, 1] type 2 family 0 port 54587 - 0 [ 57.249629][ T5517] netdevsim netdevsim3 netdevsim2: unset [1, 1] type 2 family 0 port 54587 - 0 [ 57.258603][ T5517] netdevsim netdevsim3 netdevsim3: unset [1, 1] type 2 family 0 port 54587 - 0 [ 57.288545][ T3142] vcan0 speed is unknown, defaulting to 1000 [ 57.295696][ T5510] vcan0 speed is unknown, defaulting to 1000 [ 57.342643][ T5510] vcan0 speed is unknown, defaulting to 1000 [ 57.385307][ T5510] vcan0 speed is unknown, defaulting to 1000 [ 57.429723][ T5510] vcan0 speed is unknown, defaulting to 1000 [ 57.474307][ T5510] vcan0 speed is unknown, defaulting to 1000 [ 57.877926][ T5557] loop2: detected capacity change from 0 to 512 [ 57.891364][ T5555] loop4: detected capacity change from 0 to 4096 [ 57.909387][ T5557] ext4 filesystem being mounted at /73/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 58.095546][ T5572] loop2: detected capacity change from 0 to 512 [ 58.102535][ T5572] EXT4-fs: Ignoring removed nomblk_io_submit option [ 58.116138][ T5572] EXT4-fs: old and new quota format mixing [ 58.407628][ T5578] loop4: detected capacity change from 0 to 512 [ 58.414065][ T5578] EXT4-fs: Invalid want_extra_isize 7 [ 58.494631][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 58.494649][ T29] audit: type=1400 audit(1720614457.261:877): avc: denied { ioctl } for pid=5590 comm="syz.3.669" path="/dev/nvram" dev="devtmpfs" ino=98 ioctlcmd=0x5878 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 58.529185][ T5596] __nla_validate_parse: 12 callbacks suppressed [ 58.529199][ T5596] netlink: 24 bytes leftover after parsing attributes in process `syz.3.671'. [ 58.672846][ T5613] loop4: detected capacity change from 0 to 128 [ 58.680836][ T5613] FAT-fs (loop4): bogus logical sector size 0 [ 58.686957][ T5613] FAT-fs (loop4): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 58.696273][ T5613] FAT-fs (loop4): Can't find a valid FAT filesystem [ 58.769732][ T5613] loop4: detected capacity change from 0 to 512 [ 58.777496][ T5613] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 58.788322][ T5613] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a016c018, mo2=0002] [ 58.797028][ T5613] System zones: 1-12 [ 58.801304][ T5613] EXT4-fs (loop4): 1 truncate cleaned up [ 58.869417][ T5617] loop2: detected capacity change from 0 to 512 [ 58.888306][ T5617] ext4 filesystem being mounted at /75/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 58.915998][ T29] audit: type=1400 audit(1720614457.671:878): avc: denied { read } for pid=5616 comm="syz.2.678" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 59.310216][ T5650] loop3: detected capacity change from 0 to 256 [ 59.377675][ T29] audit: type=1400 audit(1720614458.151:879): avc: denied { bind } for pid=5664 comm="syz.0.696" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 59.418715][ T5667] bridge_slave_0: left allmulticast mode [ 59.424394][ T5667] bridge_slave_0: left promiscuous mode [ 59.430059][ T5667] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.474495][ T29] audit: type=1400 audit(1720614458.241:880): avc: denied { read } for pid=5679 comm="syz.4.701" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 59.500337][ T29] audit: type=1400 audit(1720614458.271:881): avc: denied { open } for pid=5679 comm="syz.4.701" path="/dev/cpu/0/msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 59.549736][ T29] audit: type=1400 audit(1720614458.321:882): avc: denied { ioctl } for pid=5679 comm="syz.4.701" path="socket:[12153]" dev="sockfs" ino=12153 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 59.571086][ T5691] loop3: detected capacity change from 0 to 512 [ 59.607934][ T5691] ext4 filesystem being mounted at /172/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 59.609693][ T5693] validate_nla: 7 callbacks suppressed [ 59.609704][ T5693] netlink: 'syz.2.704': attribute type 10 has an invalid length. [ 59.654434][ T5693] team0: Device netdevsim1 is up. Set it down before adding it as a team port [ 59.738590][ T5708] loop4: detected capacity change from 0 to 256 [ 59.745158][ T5705] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 59.768502][ T5705] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 59.787244][ T5705] bond0 (unregistering): Released all slaves [ 59.794099][ T29] audit: type=1400 audit(1720614458.561:883): avc: denied { write } for pid=5713 comm="syz.0.712" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 59.828347][ T5717] loop4: detected capacity change from 0 to 128 [ 59.887904][ T5722] loop3: detected capacity change from 0 to 128 [ 60.020379][ T5723] loop2: detected capacity change from 0 to 512 [ 60.026937][ T5723] EXT4-fs: Invalid want_extra_isize 7 [ 60.115013][ T5737] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=61 sclass=netlink_route_socket pid=5737 comm=syz.4.720 [ 60.142535][ T29] audit: type=1326 audit(1720614458.911:884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5738 comm="syz.4.721" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f343e187bd9 code=0x0 [ 60.204209][ T5740] loop4: detected capacity change from 0 to 2048 [ 60.248007][ T5740] Alternate GPT is invalid, using primary GPT. [ 60.254266][ T5740] loop4: p1 p2 p3 [ 60.284553][ T5744] netlink: 16 bytes leftover after parsing attributes in process `syz.2.723'. [ 60.297584][ T5744] netlink: 'syz.2.723': attribute type 10 has an invalid length. [ 60.310358][ T5744] bond0: (slave team0): Releasing backup interface [ 60.318005][ T5744] batman_adv: batadv0: Adding interface: team0 [ 60.324165][ T5744] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.349288][ T5744] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 60.361375][ T29] audit: type=1326 audit(1720614459.131:885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5743 comm="syz.2.723" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1e57cd7bd9 code=0x0 [ 60.635001][ T5758] netlink: 40 bytes leftover after parsing attributes in process `syz.0.727'. [ 60.738813][ T5762] usb usb8: usbfs: interface 0 claimed by hub while 'syz.0.729' sets config #0 [ 60.872526][ T5771] netlink: 'syz.3.733': attribute type 29 has an invalid length. [ 61.157817][ T5783] pim6reg1: entered promiscuous mode [ 61.163219][ T5783] pim6reg1: entered allmulticast mode [ 61.217227][ T5785] netlink: 104 bytes leftover after parsing attributes in process `syz.4.737'. [ 61.275118][ T5787] loop4: detected capacity change from 0 to 2048 [ 61.356889][ T5787] netlink: 8 bytes leftover after parsing attributes in process `syz.4.738'. [ 61.388861][ T5787] loop4: detected capacity change from 0 to 256 [ 61.395371][ T5787] FAT-fs (loop4): Unrecognized mount option "@" or missing value [ 61.461441][ T5793] netlink: 20 bytes leftover after parsing attributes in process `syz.0.740'. [ 61.487236][ T5793] netlink: 20 bytes leftover after parsing attributes in process `syz.0.740'. [ 61.526311][ T29] audit: type=1400 audit(1720614460.291:886): avc: denied { read } for pid=5782 comm="syz.2.736" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 61.551442][ T5799] netlink: 40 bytes leftover after parsing attributes in process `syz.0.743'. [ 61.617062][ T5813] vcan0 speed is unknown, defaulting to 1000 [ 61.741557][ T5822] netlink: 8 bytes leftover after parsing attributes in process `syz.4.746'. [ 61.768470][ T5819] vcan0 speed is unknown, defaulting to 1000 [ 61.805712][ T5827] netlink: 4 bytes leftover after parsing attributes in process `syz.0.745'. [ 61.988572][ T5840] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 61.995790][ T5840] IPv6: NLM_F_CREATE should be set when creating new route [ 62.003012][ T5840] IPv6: NLM_F_CREATE should be set when creating new route [ 62.010210][ T5840] IPv6: NLM_F_CREATE should be set when creating new route [ 62.038153][ T5840] loop2: detected capacity change from 0 to 512 [ 62.044692][ T5840] EXT4-fs: Ignoring removed mblk_io_submit option [ 62.053447][ T5840] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 62.064591][ T5840] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters [ 62.080081][ T5840] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2856: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 62.093370][ T5840] EXT4-fs (loop2): 1 truncate cleaned up [ 62.171525][ T5841] loop4: detected capacity change from 0 to 512 [ 62.186244][ T5841] EXT4-fs: Invalid want_extra_isize 7 [ 62.207399][ T5845] loop3: detected capacity change from 0 to 1024 [ 62.214376][ T5845] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 62.224213][ T5845] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 62.234757][ T5845] EXT4-fs (loop3): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 62.248401][ T5845] EXT4-fs error (device loop3): ext4_get_journal_inode:5752: inode #5: comm syz.3.754: unexpected bad inode w/o EXT4_IGET_BAD [ 62.262488][ T5845] EXT4-fs (loop3): no journal found [ 62.267707][ T5845] EXT4-fs (loop3): can't get journal size [ 62.460165][ T5870] loop4: detected capacity change from 0 to 512 [ 62.467770][ T5870] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 62.495251][ T5870] EXT4-fs (loop4): 1 orphan inode deleted [ 62.501064][ T5870] EXT4-fs (loop4): 1 truncate cleaned up [ 62.568171][ T5875] netlink: 'syz.4.763': attribute type 5 has an invalid length. [ 62.637494][ T5881] loop4: detected capacity change from 0 to 256 [ 62.643965][ T5881] FAT-fs (loop4): Unrecognized mount option "ÿÿ0xffffffffffffffff" or missing value [ 63.026312][ T5895] loop2: detected capacity change from 0 to 256 [ 63.059039][ T5886] loop4: detected capacity change from 0 to 512 [ 63.076382][ T5886] EXT4-fs: Invalid want_extra_isize 7 [ 63.091291][ T5889] vcan0 speed is unknown, defaulting to 1000 [ 63.091985][ T5895] loop2: detected capacity change from 0 to 512 [ 63.119689][ T5895] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 63.128772][ T5895] EXT4-fs (loop2): blocks per group (71) and clusters per group (32768) inconsistent [ 63.175733][ T28] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.294405][ T5903] loop4: detected capacity change from 0 to 1024 [ 63.369548][ T5851] kexec: Could not allocate control_code_buffer [ 63.379601][ T28] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.395900][ T5904] netlink: 'syz.2.770': attribute type 4 has an invalid length. [ 63.439724][ T5914] 9pnet_fd: Insufficient options for proto=fd [ 63.447368][ T5911] netlink: 'syz.2.770': attribute type 4 has an invalid length. [ 63.460514][ T28] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.485434][ T5889] chnl_net:caif_netlink_parms(): no params data found [ 63.509765][ T5929] netdevsim netdevsim0 netdevsim0: Unsupported IPsec algorithm [ 63.530241][ T28] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.569531][ T5943] FAULT_INJECTION: forcing a failure. [ 63.569531][ T5943] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 63.582652][ T5943] CPU: 1 PID: 5943 Comm: syz.0.783 Not tainted 6.10.0-rc7-syzkaller-00012-g34afb82a3c67 #0 [ 63.592635][ T5943] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 63.602874][ T5943] Call Trace: [ 63.606228][ T5943] [ 63.609214][ T5943] dump_stack_lvl+0xf2/0x150 [ 63.613848][ T5943] dump_stack+0x15/0x20 [ 63.618000][ T5943] should_fail_ex+0x229/0x230 [ 63.622704][ T5943] should_fail+0xb/0x10 [ 63.626888][ T5943] should_fail_usercopy+0x1a/0x20 [ 63.631943][ T5943] _copy_to_user+0x1e/0xa0 [ 63.636424][ T5943] simple_read_from_buffer+0xa0/0x110 [ 63.641815][ T5943] proc_fail_nth_read+0xfc/0x140 [ 63.646750][ T5943] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 63.652293][ T5943] vfs_read+0x1a2/0x6e0 [ 63.656473][ T5943] ? __rcu_read_unlock+0x4e/0x70 [ 63.661413][ T5943] ? __fget_files+0x1da/0x210 [ 63.666084][ T5943] ksys_read+0xeb/0x1b0 [ 63.670247][ T5943] __x64_sys_read+0x42/0x50 [ 63.674856][ T5943] x64_sys_call+0x27e5/0x2d70 [ 63.679542][ T5943] do_syscall_64+0xc9/0x1c0 [ 63.684076][ T5943] ? clear_bhb_loop+0x55/0xb0 [ 63.688763][ T5943] ? clear_bhb_loop+0x55/0xb0 [ 63.693434][ T5943] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 63.699357][ T5943] RIP: 0033:0x7fbc3cdc16bc [ 63.703862][ T5943] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8c 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 1f 8d 02 00 48 [ 63.723459][ T5943] RSP: 002b:00007fbc3c044040 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 63.731898][ T5943] RAX: ffffffffffffffda RBX: 00007fbc3cf50f60 RCX: 00007fbc3cdc16bc [ 63.739854][ T5943] RDX: 000000000000000f RSI: 00007fbc3c0440b0 RDI: 0000000000000006 [ 63.747828][ T5943] RBP: 00007fbc3c0440a0 R08: 0000000000000000 R09: 0000000000000000 [ 63.755843][ T5943] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 63.763797][ T5943] R13: 000000000000000b R14: 00007fbc3cf50f60 R15: 00007fff6aff4f58 [ 63.771755][ T5943] [ 63.801712][ T5889] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.808992][ T5889] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.819096][ T5889] bridge_slave_0: entered allmulticast mode [ 63.825763][ T5889] bridge_slave_0: entered promiscuous mode [ 63.837110][ T5889] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.844273][ T5889] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.852527][ T5889] bridge_slave_1: entered allmulticast mode [ 63.860006][ T5889] bridge_slave_1: entered promiscuous mode [ 63.887626][ T5955] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 63.888865][ T5889] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.913485][ T5889] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.922798][ T28] bridge_slave_1: left allmulticast mode [ 63.928537][ T28] bridge_slave_1: left promiscuous mode [ 63.934256][ T28] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.939345][ T5955] __nla_validate_parse: 3 callbacks suppressed [ 63.939357][ T5955] netlink: 20 bytes leftover after parsing attributes in process `syz.0.787'. [ 63.958317][ T28] bridge_slave_0: left allmulticast mode [ 63.964011][ T28] bridge_slave_0: left promiscuous mode [ 63.969853][ T28] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.998334][ T5963] netlink: 4 bytes leftover after parsing attributes in process `syz.2.790'. [ 64.010606][ T5965] netlink: 224 bytes leftover after parsing attributes in process `syz.3.791'. [ 64.088685][ T28] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 64.098843][ T28] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 64.109405][ T28] bond0 (unregistering): Released all slaves [ 64.121809][ T5961] netlink: 68 bytes leftover after parsing attributes in process `syz.0.789'. [ 64.130752][ T5961] netlink: 36 bytes leftover after parsing attributes in process `syz.0.789'. [ 64.144947][ T5965] netlink: 28 bytes leftover after parsing attributes in process `syz.3.791'. [ 64.153854][ T5965] netlink: 28 bytes leftover after parsing attributes in process `syz.3.791'. [ 64.163529][ T5965] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 64.189279][ T5970] openvswitch: netlink: VXLAN extension 0 has unexpected len 5 expected 0 [ 64.202360][ T5889] team0: Port device team_slave_0 added [ 64.217983][ T5975] loop2: detected capacity change from 0 to 256 [ 64.225215][ T5889] team0: Port device team_slave_1 added [ 64.234814][ T29] kauditd_printk_skb: 6 callbacks suppressed [ 64.234840][ T29] audit: type=1400 audit(1720614462.991:893): avc: denied { watch } for pid=5971 comm="syz.4.793" path="/206/control" dev="tmpfs" ino=1146 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 64.270949][ T5975] FAULT_INJECTION: forcing a failure. [ 64.270949][ T5975] name failslab, interval 1, probability 0, space 0, times 0 [ 64.284950][ T5975] CPU: 1 PID: 5975 Comm: syz.2.795 Not tainted 6.10.0-rc7-syzkaller-00012-g34afb82a3c67 #0 [ 64.294939][ T5975] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 64.305057][ T5975] Call Trace: [ 64.308332][ T5975] [ 64.311250][ T5975] dump_stack_lvl+0xf2/0x150 [ 64.315835][ T5975] dump_stack+0x15/0x20 [ 64.320047][ T5975] should_fail_ex+0x229/0x230 [ 64.324796][ T5975] ? getname_flags+0x86/0x360 [ 64.329464][ T5975] __should_failslab+0x92/0xa0 [ 64.334216][ T5975] should_failslab+0x9/0x20 [ 64.338709][ T5975] kmem_cache_alloc_noprof+0x4c/0x290 [ 64.344077][ T5975] getname_flags+0x86/0x360 [ 64.348571][ T5975] __x64_sys_rename+0x44/0x70 [ 64.353261][ T5975] x64_sys_call+0x2781/0x2d70 [ 64.357930][ T5975] do_syscall_64+0xc9/0x1c0 [ 64.362419][ T5975] ? clear_bhb_loop+0x55/0xb0 [ 64.367126][ T5975] ? clear_bhb_loop+0x55/0xb0 [ 64.371789][ T5975] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 64.377726][ T5975] RIP: 0033:0x7f1e57cd7bd9 [ 64.382122][ T5975] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 64.401714][ T5975] RSP: 002b:00007f1e56f59048 EFLAGS: 00000246 ORIG_RAX: 0000000000000052 [ 64.410121][ T5975] RAX: ffffffffffffffda RBX: 00007f1e57e65f60 RCX: 00007f1e57cd7bd9 [ 64.418226][ T5975] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000020000200 [ 64.426183][ T5975] RBP: 00007f1e56f590a0 R08: 0000000000000000 R09: 0000000000000000 [ 64.434154][ T5975] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 64.442143][ T5975] R13: 000000000000000b R14: 00007f1e57e65f60 R15: 00007ffc7a105628 [ 64.450172][ T5975] [ 64.466732][ T28] hsr_slave_0: left promiscuous mode [ 64.474249][ T28] hsr_slave_1: left promiscuous mode [ 64.480784][ T29] audit: type=1400 audit(1720614463.251:894): avc: denied { map } for pid=5985 comm="syz.4.800" path="socket:[12990]" dev="sockfs" ino=12990 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 64.503872][ T29] audit: type=1400 audit(1720614463.251:895): avc: denied { read } for pid=5985 comm="syz.4.800" path="socket:[12990]" dev="sockfs" ino=12990 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 64.528761][ T28] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 64.536294][ T28] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 64.544071][ T28] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 64.551550][ T28] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 64.561556][ T28] veth1_macvtap: left promiscuous mode [ 64.567111][ T28] veth0_macvtap: left promiscuous mode [ 64.572631][ T28] veth1_vlan: left promiscuous mode [ 64.577929][ T28] veth0_vlan: left promiscuous mode [ 64.689089][ T28] team0 (unregistering): Port device team_slave_1 removed [ 64.703059][ T28] team0 (unregistering): Port device team_slave_0 removed [ 64.743059][ T5889] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.750057][ T5889] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.775987][ T5889] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.790262][ T5982] netlink: 'syz.3.798': attribute type 10 has an invalid length. [ 64.804823][ T5987] netlink: 'syz.3.798': attribute type 10 has an invalid length. [ 64.817698][ T5889] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.824670][ T5889] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.850566][ T5889] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.863043][ T5991] vcan0 speed is unknown, defaulting to 1000 [ 64.879865][ T5999] netlink: 20 bytes leftover after parsing attributes in process `syz.2.803'. [ 64.894907][ T5999] netlink: 20 bytes leftover after parsing attributes in process `syz.2.803'. [ 64.905878][ T5889] hsr_slave_0: entered promiscuous mode [ 64.912344][ T5889] hsr_slave_1: entered promiscuous mode [ 64.919965][ T5889] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.927916][ T5889] Cannot create hsr debugfs directory [ 64.933400][ T5997] netlink: 8 bytes leftover after parsing attributes in process `syz.3.802'. [ 64.983973][ T6007] Cannot find add_set index 0 as target [ 65.044062][ T29] audit: type=1400 audit(1720614463.811:896): avc: denied { write } for pid=6016 comm="syz.0.810" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 65.063476][ T6021] loop2: detected capacity change from 0 to 512 [ 65.077591][ T6021] ext4 filesystem being mounted at /105/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 65.157364][ T6033] vcan0 speed is unknown, defaulting to 1000 [ 65.169844][ T29] audit: type=1400 audit(1720614463.941:897): avc: denied { read } for pid=6034 comm="syz.4.817" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 65.192959][ T29] audit: type=1400 audit(1720614463.941:898): avc: denied { open } for pid=6034 comm="syz.4.817" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 65.214614][ T6030] vcan0 speed is unknown, defaulting to 1000 [ 65.216450][ T29] audit: type=1400 audit(1720614463.941:899): avc: denied { append } for pid=6034 comm="syz.4.817" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 65.245725][ T29] audit: type=1400 audit(1720614463.941:900): avc: denied { ioctl } for pid=6034 comm="syz.4.817" path="/dev/autofs" dev="devtmpfs" ino=91 ioctlcmd=0x9374 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 65.270756][ T29] audit: type=1400 audit(1720614463.941:901): avc: denied { write } for pid=6034 comm="syz.4.817" name="rtc0" dev="devtmpfs" ino=219 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 65.277174][ T6046] ALSA: seq fatal error: cannot create timer (-22) [ 65.329522][ T6044] netlink: 'syz.0.816': attribute type 21 has an invalid length. [ 65.386131][ T29] audit: type=1400 audit(1720614464.151:902): avc: denied { write } for pid=6054 comm="syz.2.823" path="socket:[13163]" dev="sockfs" ino=13163 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 65.394825][ T6033] ALSA: seq fatal error: cannot create timer (-16) [ 65.493803][ T5889] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 65.512286][ T5889] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 65.536342][ T5889] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 65.551213][ T5889] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 65.609505][ T5889] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.609976][ T6081] loop2: detected capacity change from 0 to 512 [ 65.626814][ T5889] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.636015][ T3159] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.643137][ T3159] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.661496][ T6081] ext4 filesystem being mounted at /115/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 65.662810][ T5889] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 65.682308][ T5889] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 65.721131][ T3159] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.728220][ T3159] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.803012][ T5889] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.834464][ T6096] loop2: detected capacity change from 0 to 2048 [ 65.924131][ T5889] veth0_vlan: entered promiscuous mode [ 65.942238][ T5889] veth1_vlan: entered promiscuous mode [ 65.970256][ T5889] veth0_macvtap: entered promiscuous mode [ 65.987733][ T5889] veth1_macvtap: entered promiscuous mode [ 66.003031][ T5889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.013697][ T5889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.023518][ T5889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.033957][ T5889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.043815][ T5889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.054288][ T5889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.064223][ T5889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.074709][ T5889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.093367][ T5889] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.102068][ T5889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.112576][ T5889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.122490][ T5889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.129452][ T6115] loop4: detected capacity change from 0 to 512 [ 66.132916][ T5889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.148987][ T5889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.159405][ T5889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.169227][ T5889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.179659][ T5889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.191659][ T5889] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.194677][ T6115] EXT4-fs error (device loop4): ext4_orphan_get:1394: inode #15: comm syz.4.838: casefold flag without casefold feature [ 66.212377][ T6115] EXT4-fs (loop4): Remounting filesystem read-only [ 66.221946][ T5889] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.224884][ T6115] SELinux: (dev loop4, type ext4) getxattr errno 5 [ 66.230922][ T5889] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.246250][ T5889] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.254916][ T5889] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.286297][ T6123] netlink: 'syz.0.840': attribute type 4 has an invalid length. [ 66.456332][ T6146] loop3: detected capacity change from 0 to 1024 [ 66.488656][ T6146] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 66.536380][ T6146] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 66.560337][ T6155] loop2: detected capacity change from 0 to 8192 [ 66.575139][ T6146] EXT4-fs (loop3): orphan cleanup on readonly fs [ 66.582277][ T6146] EXT4-fs warning (device loop3): ext4_enable_quotas:7078: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 66.596835][ T6146] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 66.658958][ T6146] EXT4-fs (loop3): 1 truncate cleaned up [ 66.683107][ T6146] EXT4-fs error (device loop3): ext4_search_dir:1548: inode #2: block 16: comm syz.3.848: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 66.882412][ T6158] loop4: detected capacity change from 0 to 512 [ 66.904952][ T6157] loop1: detected capacity change from 0 to 512 [ 66.916143][ T6157] EXT4-fs: Invalid want_extra_isize 7 [ 66.921697][ T6158] EXT4-fs: Invalid want_extra_isize 7 [ 66.968114][ T6178] loop2: detected capacity change from 0 to 512 [ 66.998135][ T6178] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c01c, mo2=0002] [ 67.018919][ T6178] System zones: 0-2, 18-18, 34-35 [ 67.025253][ T6178] ext4 filesystem being mounted at /125/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 67.077458][ T6178] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 67.101480][ T6187] loop4: detected capacity change from 0 to 764 [ 67.115869][ T6189] loop1: detected capacity change from 0 to 1764 [ 67.190976][ T6203] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 67.203076][ T6213] loop3: detected capacity change from 0 to 128 [ 67.312909][ T6236] netlink: 'syz.1.877': attribute type 10 has an invalid length. [ 67.329438][ T6236] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.347623][ T6236] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 67.368683][ T6236] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=6236 comm=syz.1.877 [ 67.467639][ T6257] loop4: detected capacity change from 0 to 512 [ 67.477129][ T6257] ext4: Unexpected value for 'nobarrier' [ 67.541979][ T6264] loop1: detected capacity change from 0 to 2048 [ 67.551990][ T6251] loop3: detected capacity change from 0 to 512 [ 67.558641][ T6251] EXT4-fs: Invalid want_extra_isize 7 [ 67.675776][ T6269] No such timeout policy "syz1" [ 67.681398][ T6269] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 67.692652][ T6269] loop3: detected capacity change from 0 to 512 [ 67.731978][ T6277] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=784 sclass=netlink_route_socket pid=6277 comm=syz.1.893 [ 67.750447][ T6269] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=44411 sclass=netlink_route_socket pid=6269 comm=syz.3.890 [ 67.778937][ T6281] loop3: detected capacity change from 0 to 2048 [ 67.798407][ T6281] EXT4-fs mount: 42 callbacks suppressed [ 67.798421][ T6281] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 67.818875][ T6284] loop1: detected capacity change from 0 to 512 [ 67.825414][ T6284] EXT4-fs: Ignoring removed nomblk_io_submit option [ 67.832474][ T6284] EXT4-fs: old and new quota format mixing [ 67.838911][ T6281] EXT4-fs error (device loop3): __ext4_new_inode:1070: comm syz.3.895: reserved inode found cleared - inode=1 [ 67.884527][ T6284] loop1: detected capacity change from 0 to 1764 [ 67.891103][ T6284] iso9660: Unexpected value for 'unhide' [ 68.083633][ T6296] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=29714 sclass=netlink_route_socket pid=6296 comm=syz.2.900 [ 68.109219][ T6298] bridge_slave_0: left allmulticast mode [ 68.114968][ T6298] bridge_slave_0: left promiscuous mode [ 68.120624][ T6298] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.249244][ T6305] IPv6: Can't replace route, no match found [ 68.326445][ T6317] vcan0 speed is unknown, defaulting to 1000 [ 68.470612][ T6340] loop2: detected capacity change from 0 to 512 [ 68.477509][ T6340] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities [ 68.498929][ T6341] netlink: 'syz.0.916': attribute type 1 has an invalid length. [ 68.514824][ T6341] bond1: (slave vcan0): The slave device specified does not support setting the MAC address [ 68.525112][ T6341] bond1: (slave vcan0): Setting fail_over_mac to active for active-backup mode [ 68.592025][ T6341] bond1: (slave vcan0): making interface the new active one [ 68.606274][ T6341] bond1: (slave vcan0): Enslaving as an active interface with an up link [ 68.656277][ T3080] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.690197][ T6350] loop1: detected capacity change from 0 to 512 [ 68.716527][ T6350] EXT4-fs warning (device loop1): dx_probe:877: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 68.728041][ T6350] EXT4-fs warning (device loop1): dx_probe:880: Enable large directory feature to access it [ 68.738132][ T6350] EXT4-fs warning (device loop1): dx_probe:965: inode #2: comm syz.1.919: Corrupt directory, running e2fsck is recommended [ 68.755953][ T6350] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 68.774985][ T6350] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2234: inode #15: comm syz.1.919: corrupted in-inode xattr: invalid ea_ino [ 68.791457][ T6352] netlink: 'syz.2.921': attribute type 10 has an invalid length. [ 68.799405][ T6350] EXT4-fs (loop1): Remounting filesystem read-only [ 68.816791][ T6352] team0: Failed to send options change via netlink (err -105) [ 68.824262][ T6352] team0: Port device netdevsim1 added [ 68.839807][ T6350] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.859148][ T6352] netlink: 'syz.2.921': attribute type 10 has an invalid length. [ 68.871782][ T6350] SELinux: (dev loop1, type ext4) getxattr errno 5 [ 68.879519][ T6350] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.891090][ T6352] team0: Failed to send options change via netlink (err -105) [ 68.903973][ T6352] team0: Failed to send port change of device netdevsim1 via netlink (err -105) [ 68.914602][ T6352] team0: Port device netdevsim1 removed [ 68.949452][ T6350] loop1: detected capacity change from 0 to 256 [ 69.015691][ T6350] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:17 to non-existent VLAN 1280 [ 69.043677][ T6371] __nla_validate_parse: 28 callbacks suppressed [ 69.043692][ T6371] netlink: 40 bytes leftover after parsing attributes in process `syz.2.926'. [ 69.089837][ T6367] rdma_op ffff88811615a980 conn xmit_rdma 0000000000000000 [ 69.118849][ T6379] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.147581][ T6379] netlink: 12 bytes leftover after parsing attributes in process `syz.1.928'. [ 69.171390][ T6385] loop3: detected capacity change from 0 to 1024 [ 69.181935][ T6383] loop2: detected capacity change from 0 to 8192 [ 69.188138][ T6385] EXT4-fs: Ignoring removed orlov option [ 69.193130][ T6387] loop4: detected capacity change from 0 to 736 [ 69.193926][ T6385] EXT4-fs: Ignoring removed nomblk_io_submit option [ 69.209091][ T6387] rock: directory entry would overflow storage [ 69.215340][ T6387] rock: sig=0x3b10, size=4, remaining=3 [ 69.226627][ T6383] loop2: p1 p2 [ 69.230300][ T6383] loop2: p1 start 16777472 is beyond EOD, truncated [ 69.236998][ T6383] loop2: p2 start 67698708 is beyond EOD, truncated [ 69.254999][ T6385] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.282068][ T3080] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.312001][ T6401] syz_tun: entered promiscuous mode [ 69.318079][ T6401] bridge0: entered promiscuous mode [ 69.324324][ T6401] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 69.332591][ T6401] Cannot create hsr debugfs directory [ 69.338304][ T6401] hsr1: Slave B (bridge0) is not up; please bring it up to get a fully working HSR network [ 69.396728][ T6415] netlink: 12 bytes leftover after parsing attributes in process `syz.2.943'. [ 69.414724][ T6417] loop4: detected capacity change from 0 to 512 [ 69.439768][ T6421] loop2: detected capacity change from 0 to 512 [ 69.456828][ T6417] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.470716][ T6417] ext4 filesystem being mounted at /226/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 69.510334][ T29] kauditd_printk_skb: 75 callbacks suppressed [ 69.510347][ T29] audit: type=1400 audit(1720614468.281:977): avc: denied { setopt } for pid=6427 comm="syz.3.947" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 69.539317][ T6421] netlink: 12 bytes leftover after parsing attributes in process `syz.2.946'. [ 69.548200][ T6421] tipc: Started in network mode [ 69.553110][ T6421] tipc: Node identity ., cluster identity 8 [ 69.573982][ T6430] program syz.3.948 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 69.594667][ T6432] netlink: 80 bytes leftover after parsing attributes in process `syz.3.949'. [ 69.615669][ T6434] loop3: detected capacity change from 0 to 256 [ 69.623091][ T6434] FAT-fs (loop3): Unrecognized mount option "ÿÿ0xffffffffffffffff" or missing value [ 69.640444][ T3084] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.759655][ T29] audit: type=1400 audit(1720614468.521:978): avc: denied { connect } for pid=6442 comm="syz.3.954" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 69.779086][ T29] audit: type=1400 audit(1720614468.521:979): avc: denied { read } for pid=6442 comm="syz.3.954" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 69.855397][ T6447] vcan0 speed is unknown, defaulting to 1000 [ 69.871593][ T6451] loop3: detected capacity change from 0 to 2048 [ 69.909394][ T6451] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.000277][ T6465] netlink: 'syz.2.959': attribute type 6 has an invalid length. [ 70.048022][ T29] audit: type=1400 audit(1720614468.821:980): avc: denied { read } for pid=6466 comm="syz.2.960" path="socket:[15102]" dev="sockfs" ino=15102 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 70.223349][ T6497] netlink: 324 bytes leftover after parsing attributes in process `syz.1.968'. [ 70.252790][ T6500] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 70.265832][ T6500] batadv_slave_0: entered allmulticast mode [ 70.373946][ T4748] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 70.391297][ T4748] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 70.403813][ T4748] EXT4-fs (loop3): This should not happen!! Data will be lost [ 70.403813][ T4748] [ 70.413469][ T4748] EXT4-fs (loop3): Total free blocks count 0 [ 70.419466][ T4748] EXT4-fs (loop3): Free/Dirty block details [ 70.425401][ T4748] EXT4-fs (loop3): free_blocks=2415919104 [ 70.431194][ T4748] EXT4-fs (loop3): dirty_blocks=8192 [ 70.436622][ T4748] EXT4-fs (loop3): Block reservation details [ 70.442632][ T4748] EXT4-fs (loop3): i_reserved_data_blocks=512 [ 70.529556][ T6510] vcan0 speed is unknown, defaulting to 1000 [ 70.556747][ T29] audit: type=1400 audit(1720614469.321:981): avc: denied { execute } for pid=6511 comm="syz.0.973" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=15633 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 70.637088][ T4748] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 70.673730][ T29] audit: type=1400 audit(1720614469.361:982): avc: denied { watch_reads } for pid=6511 comm="syz.0.973" path="/190" dev="tmpfs" ino=1038 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 70.825446][ T6524] netlink: 'syz.0.977': attribute type 17 has an invalid length. [ 70.906859][ T6529] tipc: Can't bind to reserved service type 2 [ 71.034854][ T6540] netlink: 'syz.0.982': attribute type 4 has an invalid length. [ 71.076408][ T6541] netlink: 4 bytes leftover after parsing attributes in process `syz.3.981'. [ 71.101301][ T29] audit: type=1400 audit(1720614469.871:983): avc: denied { mount } for pid=6543 comm="syz.0.984" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 71.130089][ T6545] netlink: 'syz.2.983': attribute type 3 has an invalid length. [ 71.150248][ T29] audit: type=1400 audit(1720614469.921:984): avc: denied { unmount } for pid=3078 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 71.284910][ T6557] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 71.303735][ T6561] netlink: 'syz.2.992': attribute type 1 has an invalid length. [ 71.313060][ T6555] usb usb8: usbfs: process 6555 (syz.4.989) did not claim interface 0 before use [ 71.338302][ T6555] netlink: 'syz.4.989': attribute type 11 has an invalid length. [ 71.346069][ T6555] netlink: 140 bytes leftover after parsing attributes in process `syz.4.989'. [ 71.359769][ T29] audit: type=1400 audit(1720614470.131:985): avc: denied { connect } for pid=6562 comm="syz.0.994" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 71.388079][ T6565] loop2: detected capacity change from 0 to 164 [ 71.394789][ T29] audit: type=1400 audit(1720614470.161:986): avc: denied { setopt } for pid=6554 comm="syz.4.989" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 71.421834][ T6555] dccp_invalid_packet: P.type (RESET) not Data || [Data]Ack, while P.X == 0 [ 71.465403][ T6571] loop2: detected capacity change from 0 to 512 [ 71.486039][ T6568] netlink: 'syz.0.995': attribute type 4 has an invalid length. [ 71.507163][ T6574] netlink: 'syz.4.997': attribute type 6 has an invalid length. [ 71.507904][ T6571] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.549475][ T6578] netlink: 36 bytes leftover after parsing attributes in process `syz.4.999'. [ 71.568222][ T6571] ext4 filesystem being mounted at /162/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 71.724739][ T6586] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1001'. [ 71.758097][ T6591] loop1: detected capacity change from 0 to 512 [ 71.825295][ T4223] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.845510][ T6593] loop3: detected capacity change from 0 to 512 [ 71.881283][ T6597] ALSA: seq fatal error: cannot create timer (-22) [ 71.918753][ T6593] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.951174][ T6593] ext4 filesystem being mounted at /222/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 71.969364][ T6593] FAULT_INJECTION: forcing a failure. [ 71.969364][ T6593] name failslab, interval 1, probability 0, space 0, times 0 [ 71.982006][ T6593] CPU: 0 PID: 6593 Comm: syz.3.1003 Not tainted 6.10.0-rc7-syzkaller-00012-g34afb82a3c67 #0 [ 71.992071][ T6593] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 72.002119][ T6593] Call Trace: [ 72.005399][ T6593] [ 72.008333][ T6593] dump_stack_lvl+0xf2/0x150 [ 72.012920][ T6593] dump_stack+0x15/0x20 [ 72.017072][ T6593] should_fail_ex+0x229/0x230 [ 72.021816][ T6593] ? vmemdup_user+0x42/0x1b0 [ 72.026410][ T6593] __should_failslab+0x92/0xa0 [ 72.031173][ T6593] should_failslab+0x9/0x20 [ 72.035714][ T6593] __kmalloc_node_noprof+0xa8/0x380 [ 72.041006][ T6593] vmemdup_user+0x42/0x1b0 [ 72.045441][ T6593] setxattr+0x122/0x230 [ 72.049595][ T6593] path_setxattr+0xf5/0x1a0 [ 72.054155][ T6593] __x64_sys_lsetxattr+0x6a/0x80 [ 72.059137][ T6593] x64_sys_call+0x1688/0x2d70 [ 72.063848][ T6593] do_syscall_64+0xc9/0x1c0 [ 72.068357][ T6593] ? clear_bhb_loop+0x55/0xb0 [ 72.073114][ T6593] ? clear_bhb_loop+0x55/0xb0 [ 72.077786][ T6593] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 72.083674][ T6593] RIP: 0033:0x7fbd0152bbd9 [ 72.088083][ T6593] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 72.107703][ T6593] RSP: 002b:00007fbd007ad048 EFLAGS: 00000246 ORIG_RAX: 00000000000000bd [ 72.116169][ T6593] RAX: ffffffffffffffda RBX: 00007fbd016b9f60 RCX: 00007fbd0152bbd9 [ 72.124167][ T6593] RDX: 0000000020000100 RSI: 00000000200000c0 RDI: 0000000020000000 [ 72.131047][ T6606] loop1: detected capacity change from 0 to 2048 [ 72.132123][ T6593] RBP: 00007fbd007ad0a0 R08: 0000000000000000 R09: 0000000000000000 [ 72.146406][ T6593] R10: 0000000000000015 R11: 0000000000000246 R12: 0000000000000001 [ 72.154375][ T6593] R13: 000000000000000b R14: 00007fbd016b9f60 R15: 00007ffee4dd5228 [ 72.162418][ T6593] [ 72.173510][ T3080] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.197879][ T6606] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.225027][ T6612] loop2: detected capacity change from 0 to 2048 [ 72.262374][ T6612] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 72.288371][ T5889] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.298605][ T6612] EXT4-fs (loop2): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 72.314353][ T6632] IPv6: NLM_F_CREATE should be specified when creating new route [ 72.317587][ T6612] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=a002e01c, mo2=0002] [ 72.330269][ T6612] System zones: 0-19 [ 72.335519][ T6612] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.369187][ T4223] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.398512][ T6649] loop1: detected capacity change from 0 to 256 [ 72.426718][ T6644] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 72.464439][ T6653] dummy0: entered promiscuous mode [ 72.471079][ T6653] macvtap1: entered promiscuous mode [ 72.476523][ T6653] macvtap1: entered allmulticast mode [ 72.476536][ T6653] dummy0: entered allmulticast mode [ 72.510675][ T6653] dummy0: left allmulticast mode [ 72.515753][ T6653] dummy0: left promiscuous mode [ 72.522334][ T6653] macvtap1: left promiscuous mode [ 72.527411][ T6653] macvtap1: left allmulticast mode [ 72.709140][ T6691] loop2: detected capacity change from 0 to 512 [ 72.717219][ T6691] EXT4-fs error (device loop2): ext4_orphan_get:1394: inode #15: comm syz.2.1036: casefold flag without casefold feature [ 72.740105][ T6691] EXT4-fs (loop2): Remounting filesystem read-only [ 72.755732][ T6691] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.782790][ T6691] SELinux: (dev loop2, type ext4) getxattr errno 5 [ 72.797404][ T6691] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.980231][ T6706] netlink: 'syz.2.1043': attribute type 7 has an invalid length. [ 73.085359][ T6706] loop2: detected capacity change from 0 to 8192 [ 73.170662][ T6714] loop2: detected capacity change from 0 to 512 [ 73.192350][ T6714] EXT4-fs error (device loop2): ext4_orphan_get:1394: inode #15: comm syz.2.1047: iget: bad extended attribute block 1 [ 73.205697][ T6714] EXT4-fs error (device loop2): ext4_orphan_get:1399: comm syz.2.1047: couldn't read orphan inode 15 (err -117) [ 73.220149][ T6714] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.250014][ T6726] netlink: 'syz.0.1050': attribute type 13 has an invalid length. [ 73.267488][ T6726] syz_tun: refused to change device tx_queue_len [ 73.294347][ T11] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 73.715707][ T6748] openvswitch: netlink: IP tunnel dst address not specified [ 73.766036][ T6750] capability: warning: `syz.4.1059' uses 32-bit capabilities (legacy support in use) [ 73.789488][ T6750] loop4: detected capacity change from 0 to 512 [ 73.858170][ T6750] program syz.4.1059 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 74.004716][ T4223] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.054577][ T6756] loop3: detected capacity change from 0 to 1024 [ 74.072807][ T6756] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 74.112522][ T6763] loop2: detected capacity change from 0 to 2048 [ 74.123381][ T6763] EXT4-fs: Ignoring removed i_version option [ 74.143054][ T6763] EXT4-fs (loop2): unsupported descriptor size 1344 [ 74.149903][ T6756] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 74.158396][ T6756] EXT4-fs (loop3): orphan cleanup on readonly fs [ 74.174397][ T6756] EXT4-fs warning (device loop3): ext4_enable_quotas:7078: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 74.189094][ T6756] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 74.196762][ T6756] EXT4-fs (loop3): 1 truncate cleaned up [ 74.202795][ T6756] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 74.678910][ T6756] EXT4-fs error (device loop3): ext4_search_dir:1548: inode #2: block 16: comm syz.3.1062: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 74.711003][ T6756] __nla_validate_parse: 13 callbacks suppressed [ 74.711017][ T6756] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1062'. [ 74.778121][ T6778] loop2: detected capacity change from 0 to 512 [ 74.814926][ T6778] EXT4-fs: Ignoring removed oldalloc option [ 74.831384][ T6778] EXT4-fs (loop2): blocks per group (320) and clusters per group (8192) inconsistent [ 74.949380][ T3080] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.978816][ T6794] rdma_rxe: rxe_newlink: failed to add vcan0 [ 74.988158][ T6794] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 53994 - 0 [ 74.997020][ T6794] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 53994 - 0 [ 75.005794][ T6794] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 53994 - 0 [ 75.014604][ T6794] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 53994 - 0 [ 75.030757][ T6794] netdevsim netdevsim2 netdevsim0: set [1, 2] type 2 family 0 port 38015 - 0 [ 75.039612][ T6794] netdevsim netdevsim2 netdevsim1: set [1, 2] type 2 family 0 port 38015 - 0 [ 75.048647][ T6794] netdevsim netdevsim2 netdevsim2: set [1, 2] type 2 family 0 port 38015 - 0 [ 75.057452][ T6794] netdevsim netdevsim2 netdevsim3: set [1, 2] type 2 family 0 port 38015 - 0 [ 75.067598][ T6794] geneve2: entered promiscuous mode [ 75.075591][ T6794] netdevsim netdevsim2 netdevsim0: unset [1, 2] type 2 family 0 port 38015 - 0 [ 75.084644][ T6794] netdevsim netdevsim2 netdevsim1: unset [1, 2] type 2 family 0 port 38015 - 0 [ 75.093798][ T6794] netdevsim netdevsim2 netdevsim2: unset [1, 2] type 2 family 0 port 38015 - 0 [ 75.102791][ T6794] netdevsim netdevsim2 netdevsim3: unset [1, 2] type 2 family 0 port 38015 - 0 [ 75.118354][ T6794] netdevsim netdevsim2 netdevsim0: unset [1, 1] type 2 family 0 port 53994 - 0 [ 75.127377][ T6794] netdevsim netdevsim2 netdevsim1: unset [1, 1] type 2 family 0 port 53994 - 0 [ 75.130907][ T29] kauditd_printk_skb: 8 callbacks suppressed [ 75.130918][ T29] audit: type=1400 audit(1720614473.901:994): avc: denied { bind } for pid=6813 comm="syz.1.1082" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 75.136492][ T6794] netdevsim netdevsim2 netdevsim2: unset [1, 1] type 2 family 0 port 53994 - 0 [ 75.161677][ T29] audit: type=1400 audit(1720614473.911:995): avc: denied { ioctl } for pid=6813 comm="syz.1.1082" path="socket:[16238]" dev="sockfs" ino=16238 ioctlcmd=0x9431 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 75.170646][ T6794] netdevsim netdevsim2 netdevsim3: unset [1, 1] type 2 family 0 port 53994 - 0 [ 75.214770][ T6809] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1077'. [ 75.223804][ T6812] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 75.231006][ T6812] IPv6: NLM_F_CREATE should be set when creating new route [ 75.286598][ T6831] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1089'. [ 75.303079][ T6833] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=31250 sclass=netlink_route_socket pid=6833 comm=syz.0.1090 [ 75.305793][ T6827] dummy0: entered promiscuous mode [ 75.322952][ T6827] vlan2: entered promiscuous mode [ 75.336860][ T29] audit: type=1400 audit(1720614474.101:996): avc: denied { append } for pid=6836 comm="syz.3.1092" name="vcs4" dev="devtmpfs" ino=504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 75.359537][ T6827] dummy0: left promiscuous mode [ 75.360252][ T6837] loop3: detected capacity change from 0 to 512 [ 75.376923][ T29] audit: type=1400 audit(1720614474.141:997): avc: denied { setopt } for pid=6834 comm="syz.2.1091" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 75.398257][ T6837] EXT4-fs error (device loop3): ext4_orphan_get:1420: comm syz.3.1092: bad orphan inode 17 [ 75.408657][ T6837] ext4_test_bit(bit=16, block=4) = 1 [ 75.413966][ T6837] is_bad_inode(inode)=0 [ 75.418133][ T6837] NEXT_ORPHAN(inode)=0 [ 75.422206][ T6837] max_ino=32 [ 75.425479][ T6837] i_nlink=1 [ 75.429045][ T6837] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.460005][ T6856] 9pnet: Could not find request transport: rdmNr/—î2yÈ0000000000000400 [ 75.502849][ T6869] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: ipvlan2 [ 75.512710][ T6869] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.523590][ T6869] batman_adv: batadv0: Adding interface: ipvlan2 [ 75.528458][ T29] audit: type=1400 audit(1720614474.301:998): avc: denied { map } for pid=6855 comm="syz.0.1097" path="/dev/bus/usb/003/001" dev="devtmpfs" ino=128 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 75.530007][ T6869] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.579312][ T6869] batman_adv: batadv0: Not using interface ipvlan2 (retrying later): interface not active [ 75.601337][ T6878] x_tables: duplicate underflow at hook 1 [ 75.610438][ T29] audit: type=1400 audit(1720614474.381:999): avc: denied { read } for pid=6836 comm="syz.3.1092" name="usbmon0" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 75.648444][ T29] audit: type=1400 audit(1720614474.381:1000): avc: denied { open } for pid=6836 comm="syz.3.1092" path="/dev/usbmon0" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 75.695730][ T6892] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1105'. [ 75.712768][ T3080] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.720067][ T6894] loop1: detected capacity change from 0 to 1024 [ 75.728508][ T6894] ext4: Unknown parameter 'bsdd' [ 75.728983][ T6890] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.762028][ T6890] bridge_slave_1: left allmulticast mode [ 75.767767][ T6890] bridge_slave_1: left promiscuous mode [ 75.773666][ T6890] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.782703][ T6890] bridge_slave_0: left allmulticast mode [ 75.788407][ T6890] bridge_slave_0: left promiscuous mode [ 75.794049][ T6890] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.804798][ T6890] bridge0 (unregistering): left promiscuous mode [ 75.853084][ T6901] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1104'. [ 75.862989][ T29] audit: type=1400 audit(1720614474.611:1001): avc: denied { create } for pid=6897 comm="syz.3.1108" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 75.883127][ T29] audit: type=1400 audit(1720614474.621:1002): avc: denied { write } for pid=3142 comm="kworker/1:2" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=16692 scontext=system_u:system_r:kernel_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 75.919838][ T6907] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1110'. [ 76.009524][ T6926] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1116'. [ 76.018625][ T6929] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1117'. [ 76.133982][ T29] audit: type=1400 audit(1720614474.901:1003): avc: denied { create } for pid=6933 comm="syz.0.1120" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 76.196709][ T6942] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1121'. [ 76.299146][ T6908] loop1: detected capacity change from 0 to 512 [ 76.308560][ T6908] EXT4-fs: Invalid want_extra_isize 7 [ 76.348823][ T6969] loop2: detected capacity change from 0 to 512 [ 76.356679][ C1] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 76.367432][ T6968] 9pnet_fd: p9_fd_create_tcp (6968): problem connecting socket to 127.0.0.1 [ 76.388710][ T6969] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.401540][ T6969] ext4 filesystem being mounted at /183/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 76.572891][ T6975] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1133'. [ 76.631871][ T6990] loop1: detected capacity change from 0 to 512 [ 76.639900][ T6990] EXT4-fs error (device loop1): ext4_ext_check_inode:520: inode #15: comm syz.1.1138: pblk 0 bad header/extent: invalid eh_entries - magic f30a, entries 24833, max 4(4), depth 0(0) [ 76.658071][ T6990] EXT4-fs error (device loop1): ext4_orphan_get:1399: comm syz.1.1138: couldn't read orphan inode 15 (err -117) [ 76.670441][ T6990] EXT4-fs (loop1): mounted filesystem ffffff7f-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.682519][ T6990] ext4 filesystem being mounted at /56/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 76.704427][ T5889] EXT4-fs (loop1): unmounting filesystem ffffff7f-0000-0000-0000-000000000000. [ 76.890477][ T7000] program syz.1.1141 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 77.084923][ T7015] netlink: 'syz.1.1147': attribute type 32 has an invalid length. [ 77.096042][ T7015] @ÿ: renamed from veth0_vlan (while UP) [ 77.129310][ T4223] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.178859][ T6968] 9pnet_fd: p9_fd_create_tcp (6968): problem connecting socket to 127.0.0.1 [ 77.188543][ T7018] loop4: detected capacity change from 0 to 512 [ 77.194939][ T7018] EXT4-fs: Invalid want_extra_isize 7 [ 77.234469][ T7032] netlink: 'syz.0.1151': attribute type 4 has an invalid length. [ 77.263102][ T7032] netlink: 'syz.0.1151': attribute type 4 has an invalid length. [ 77.284738][ T7034] loop1: detected capacity change from 0 to 1024 [ 77.300928][ T7034] EXT4-fs: Ignoring removed oldalloc option [ 77.308282][ T7034] EXT4-fs (loop1): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 77.329870][ T7034] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 77.441097][ T5889] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.459386][ T7064] 9pnet_fd: p9_fd_create_tcp (7064): problem connecting socket to 127.0.0.1 [ 77.794343][ T7075] vcan0 speed is unknown, defaulting to 1000 [ 77.943649][ T7083] loop1: detected capacity change from 0 to 512 [ 77.950587][ T7083] EXT4-fs (loop1): Invalid log block size: 7 [ 78.071491][ T7094] netlink: 'syz.1.1173': attribute type 33 has an invalid length. [ 78.134507][ T7100] loop4: detected capacity change from 0 to 1764 [ 78.190977][ T7106] netlink: 'syz.1.1177': attribute type 3 has an invalid length. [ 78.294891][ T7108] loop2: detected capacity change from 0 to 512 [ 78.301983][ T7108] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 78.312832][ T7108] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec01c, mo2=0002] [ 78.319668][ T7113] netlink: 'syz.1.1179': attribute type 2 has an invalid length. [ 78.320852][ T7108] System zones: 1-12 [ 78.333205][ T7108] EXT4-fs (loop2): 1 truncate cleaned up [ 78.344127][ T7108] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.399928][ T4223] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.480137][ T7124] loop4: detected capacity change from 0 to 4096 [ 78.491670][ T7124] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.518952][ T3084] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.634879][ T7141] loop2: detected capacity change from 0 to 1024 [ 78.659109][ T7141] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 78.739349][ T4223] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.845807][ T7150] netlink: 'syz.0.1191': attribute type 7 has an invalid length. [ 79.074794][ T7097] kexec: Could not allocate control_code_buffer [ 79.099371][ T7171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: ipvlan2 [ 79.103304][ T7174] FAULT_INJECTION: forcing a failure. [ 79.103304][ T7174] name failslab, interval 1, probability 0, space 0, times 0 [ 79.109292][ T7171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.109392][ T7171] dummy0: entered promiscuous mode [ 79.122000][ T7174] CPU: 1 PID: 7174 Comm: syz.1.1202 Not tainted 6.10.0-rc7-syzkaller-00012-g34afb82a3c67 #0 [ 79.132064][ T7171] dummy0: left promiscuous mode [ 79.136787][ T7174] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 79.160604][ T7176] loop2: detected capacity change from 0 to 512 [ 79.161695][ T7174] Call Trace: [ 79.161704][ T7174] [ 79.168217][ T7176] EXT4-fs: Ignoring removed i_version option [ 79.171174][ T7174] dump_stack_lvl+0xf2/0x150 [ 79.184683][ T7174] dump_stack+0x15/0x20 [ 79.188931][ T7174] should_fail_ex+0x229/0x230 [ 79.193678][ T7174] ? cma_alloc_port+0x3e/0x300 [ 79.198433][ T7174] __should_failslab+0x92/0xa0 [ 79.203410][ T7174] should_failslab+0x9/0x20 [ 79.207903][ T7174] kmalloc_trace_noprof+0x4b/0x2a0 [ 79.213005][ T7174] cma_alloc_port+0x3e/0x300 [ 79.217603][ T7174] rdma_bind_addr_dst+0xa3f/0x1e30 [ 79.222794][ T7174] ? selinux_file_open+0x34c/0x3b0 [ 79.227902][ T7174] rdma_resolve_addr+0x4ea/0x1280 [ 79.232981][ T7174] ? xas_load+0x3ae/0x3d0 [ 79.237306][ T7174] ucma_resolve_addr+0x198/0x1c0 [ 79.242261][ T7174] ucma_write+0x1aa/0x240 [ 79.246584][ T7174] ? __pfx_ucma_write+0x10/0x10 [ 79.251423][ T7174] vfs_write+0x28b/0x900 [ 79.255684][ T7174] ? __fget_files+0x1da/0x210 [ 79.260411][ T7174] ksys_write+0xeb/0x1b0 [ 79.264655][ T7174] __x64_sys_write+0x42/0x50 [ 79.269290][ T7174] x64_sys_call+0x27ef/0x2d70 [ 79.273960][ T7174] do_syscall_64+0xc9/0x1c0 [ 79.278457][ T7174] ? clear_bhb_loop+0x55/0xb0 [ 79.283222][ T7174] ? clear_bhb_loop+0x55/0xb0 [ 79.287892][ T7174] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.293794][ T7174] RIP: 0033:0x7f2110ab3bd9 [ 79.298197][ T7174] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 79.317856][ T7174] RSP: 002b:00007f210fd35048 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 79.326257][ T7174] RAX: ffffffffffffffda RBX: 00007f2110c41f60 RCX: 00007f2110ab3bd9 [ 79.334266][ T7174] RDX: 0000000000000118 RSI: 0000000020000280 RDI: 0000000000000003 [ 79.342257][ T7174] RBP: 00007f210fd350a0 R08: 0000000000000000 R09: 0000000000000000 [ 79.350217][ T7174] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 79.358176][ T7174] R13: 000000000000000b R14: 00007f2110c41f60 R15: 00007ffe21c07778 [ 79.366139][ T7174] [ 79.372282][ T7176] EXT4-fs (loop2): orphan cleanup on readonly fs [ 79.379226][ T7176] EXT4-fs warning (device loop2): ext4_enable_quotas:7078: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 79.394137][ T7176] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 79.403449][ T7176] EXT4-fs error (device loop2): ext4_ext_check_inode:520: inode #13: comm syz.2.1203: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 79.422002][ T7176] EXT4-fs error (device loop2): ext4_orphan_get:1399: comm syz.2.1203: couldn't read orphan inode 13 (err -117) [ 79.440153][ T7176] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 79.449131][ T7183] loop4: detected capacity change from 0 to 512 [ 79.460098][ T7183] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 79.487325][ T7183] EXT4-fs (loop4): 1 truncate cleaned up [ 79.487845][ T7181] loop1: detected capacity change from 0 to 1764 [ 79.493232][ T7183] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.512527][ T4223] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.526261][ T7181] iso9660: Unknown parameter 'ctriat' [ 79.532799][ T7185] sit0: Master is either lo or non-ether device [ 79.594152][ T3084] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.669524][ T7209] loop2: detected capacity change from 0 to 512 [ 79.702756][ T7211] loop4: detected capacity change from 0 to 512 [ 79.711331][ T7209] EXT4-fs error (device loop2): ext4_quota_enable:7030: comm syz.2.1215: Bad quota inum: 16, type: 1 [ 79.723758][ T7209] EXT4-fs warning (device loop2): ext4_enable_quotas:7078: Failed to enable quota tracking (type=1, err=-117, ino=16). Please run e2fsck to fix. [ 79.739677][ T7209] EXT4-fs (loop2): mount failed [ 79.911532][ T7228] __nla_validate_parse: 12 callbacks suppressed [ 79.911550][ T7228] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1221'. [ 79.941746][ T7229] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1222'. [ 79.954052][ T7229] ip6gretap1: entered allmulticast mode [ 79.988627][ T7232] loop2: detected capacity change from 0 to 512 [ 79.995041][ T7232] EXT4-fs: Ignoring removed i_version option [ 80.001143][ T7232] EXT4-fs: Ignoring removed nobh option [ 80.008028][ T7232] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 80.023896][ T7232] EXT4-fs (loop2): 1 truncate cleaned up [ 80.029925][ T7232] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 80.045385][ T7232] netlink: 'syz.2.1223': attribute type 1 has an invalid length. [ 80.053123][ T7232] netlink: 'syz.2.1223': attribute type 2 has an invalid length. [ 80.084544][ T7236] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1224'. [ 80.137379][ T7245] kernel profiling enabled (shift: 63) [ 80.142865][ T7245] profiling shift: 63 too large [ 80.181140][ T4223] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.190338][ T7245] netlink: 116 bytes leftover after parsing attributes in process `syz.1.1226'. [ 80.232810][ T29] kauditd_printk_skb: 32 callbacks suppressed [ 80.232823][ T29] audit: type=1400 audit(1720614479.001:1036): avc: denied { ioctl } for pid=7250 comm="syz.4.1230" path="socket:[17942]" dev="sockfs" ino=17942 ioctlcmd=0x941f scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 80.304610][ T7260] tipc: Enabling of bearer rejected, failed to enable media [ 80.354439][ T7269] FAULT_INJECTION: forcing a failure. [ 80.354439][ T7269] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 80.367619][ T7269] CPU: 0 PID: 7269 Comm: syz.4.1235 Not tainted 6.10.0-rc7-syzkaller-00012-g34afb82a3c67 #0 [ 80.377748][ T7269] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 80.387815][ T7269] Call Trace: [ 80.391092][ T7269] [ 80.394016][ T7269] dump_stack_lvl+0xf2/0x150 [ 80.398617][ T7269] dump_stack+0x15/0x20 [ 80.402837][ T7269] should_fail_ex+0x229/0x230 [ 80.407585][ T7269] should_fail+0xb/0x10 [ 80.411780][ T7269] should_fail_usercopy+0x1a/0x20 [ 80.416929][ T7269] _copy_from_user+0x1e/0xd0 [ 80.421549][ T7269] copy_msghdr_from_user+0x54/0x2a0 [ 80.426767][ T7269] __sys_sendmsg+0x17d/0x280 [ 80.431369][ T7269] __x64_sys_sendmsg+0x46/0x50 [ 80.436192][ T7269] x64_sys_call+0xb25/0x2d70 [ 80.440777][ T7269] do_syscall_64+0xc9/0x1c0 [ 80.445272][ T7269] ? clear_bhb_loop+0x55/0xb0 [ 80.449957][ T7269] ? clear_bhb_loop+0x55/0xb0 [ 80.454621][ T7269] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.460510][ T7269] RIP: 0033:0x7f343e187bd9 [ 80.465062][ T7269] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 80.484692][ T7269] RSP: 002b:00007f343d409048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 80.493137][ T7269] RAX: ffffffffffffffda RBX: 00007f343e315f60 RCX: 00007f343e187bd9 [ 80.501092][ T7269] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000005 [ 80.509067][ T7269] RBP: 00007f343d4090a0 R08: 0000000000000000 R09: 0000000000000000 [ 80.517025][ T7269] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 80.524983][ T7269] R13: 000000000000000b R14: 00007f343e315f60 R15: 00007fff8b2711b8 [ 80.532943][ T7269] [ 80.585643][ T7285] netlink: 'syz.4.1237': attribute type 4 has an invalid length. [ 80.593492][ T7290] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1239'. [ 80.614433][ T7293] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1240'. [ 80.632340][ T7293] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1240'. [ 80.645745][ T7298] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1242'. [ 81.178518][ T7313] loop2: detected capacity change from 0 to 512 [ 81.185456][ T7313] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 81.206192][ T7313] EXT4-fs (loop2): 1 truncate cleaned up [ 81.212599][ T7313] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 81.260638][ T4223] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.282846][ T29] audit: type=1400 audit(1720614480.051:1037): avc: denied { write } for pid=7320 comm="syz.0.1251" name="sg0" dev="devtmpfs" ino=113 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 81.308141][ T7321] program syz.0.1251 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 81.323830][ T7318] loop3: detected capacity change from 0 to 512 [ 81.337907][ T7328] loop1: detected capacity change from 0 to 512 [ 81.345151][ T7318] EXT4-fs error (device loop3): ext4_orphan_get:1394: inode #15: comm syz.3.1248: casefold flag without casefold feature [ 81.359132][ T7318] EXT4-fs (loop3): Remounting filesystem read-only [ 81.366318][ T7318] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 81.379064][ T7318] SELinux: (dev loop3, type ext4) getxattr errno 5 [ 81.379442][ T7328] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.386563][ T7318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.407384][ T7328] ext4 filesystem being mounted at /90/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 81.428983][ T5889] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.487184][ T7335] loop3: detected capacity change from 0 to 2048 [ 81.498244][ T7335] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 81.511864][ T3080] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.543911][ C0] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 81.740740][ T7363] loop3: detected capacity change from 0 to 256 [ 81.753452][ T29] audit: type=1400 audit(1720614480.521:1038): avc: denied { mount } for pid=7362 comm="syz.3.1264" name="/" dev="loop3" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 81.783952][ T29] audit: type=1400 audit(1720614480.551:1039): avc: denied { unmount } for pid=3080 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 81.805733][ T29] audit: type=1400 audit(1720614480.571:1040): avc: denied { block_suspend } for pid=7361 comm="syz.1.1263" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 81.903618][ T7371] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1265'. [ 81.941501][ T7371] syz_tun: refused to change device tx_queue_len [ 81.956086][ T7373] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1267'. [ 82.009764][ T7378] xt_CT: You must specify a L4 protocol and not use inversions on it [ 82.064176][ T7388] loop3: detected capacity change from 0 to 256 [ 82.264637][ T7411] openvswitch: netlink: IP tunnel dst address not specified [ 82.404618][ T7440] loop2: detected capacity change from 0 to 512 [ 82.413830][ T7440] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 82.421930][ T7440] EXT4-fs (loop2): orphan cleanup on readonly fs [ 82.428578][ T7440] Quota error (device loop2): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 82.438923][ T7440] EXT4-fs warning (device loop2): ext4_enable_quotas:7078: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 82.453672][ T7440] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 82.461300][ T7440] EXT4-fs error (device loop2): ext4_orphan_get:1394: inode #16: comm syz.2.1295: casefold flag without casefold feature [ 82.462545][ T7443] loop3: detected capacity change from 0 to 1024 [ 82.476513][ T7440] EXT4-fs error (device loop2): ext4_orphan_get:1399: comm syz.2.1295: couldn't read orphan inode 16 (err -117) [ 82.481729][ T7443] EXT4-fs: Ignoring removed orlov option [ 82.492672][ T7440] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 82.513864][ T7443] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 82.532251][ T4223] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.561416][ T7454] validate_nla: 5 callbacks suppressed [ 82.561428][ T7454] netlink: 'syz.0.1301': attribute type 7 has an invalid length. [ 82.584771][ T29] audit: type=1326 audit(1720614481.351:1041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7457 comm="syz.0.1302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc3cdc2bd9 code=0x7ffc0000 [ 82.612216][ T29] audit: type=1326 audit(1720614481.381:1042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7457 comm="syz.0.1302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7fbc3cdc2bd9 code=0x7ffc0000 [ 82.635548][ T29] audit: type=1326 audit(1720614481.381:1043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7457 comm="syz.0.1302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc3cdc2bd9 code=0x7ffc0000 [ 82.658950][ T29] audit: type=1326 audit(1720614481.381:1044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7457 comm="syz.0.1302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc3cdc2bd9 code=0x7ffc0000 [ 82.722454][ C1] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 82.848808][ T3080] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.974754][ T7476] vcan0 speed is unknown, defaulting to 1000 [ 82.994740][ T7484] netlink: 'syz.2.1312': attribute type 1 has an invalid length. [ 83.011027][ T7484] 8021q: adding VLAN 0 to HW filter on device bond1 [ 83.021329][ T7486] netlink: 'syz.3.1310': attribute type 21 has an invalid length. [ 83.064239][ T3080] ================================================================== [ 83.072338][ T3080] BUG: KCSAN: data-race in generic_fillattr / inode_add_bytes [ 83.079804][ T3080] [ 83.082113][ T3080] read-write to 0xffff888113c40cd0 of 8 bytes by task 7488 on cpu 1: [ 83.090168][ T3080] inode_add_bytes+0x45/0xd0 [ 83.094762][ T3080] __dquot_alloc_space+0x181/0x8a0 [ 83.099883][ T3080] shmem_inode_acct_blocks+0x124/0x230 [ 83.105341][ T3080] shmem_get_folio_gfp+0x5d3/0xb70 [ 83.110452][ T3080] shmem_write_begin+0xa0/0x1c0 [ 83.115311][ T3080] generic_perform_write+0x1d5/0x410 [ 83.120607][ T3080] shmem_file_write_iter+0xc8/0xf0 [ 83.125727][ T3080] __kernel_write_iter+0x24f/0x4e0 [ 83.130837][ T3080] dump_user_range+0x3a7/0x550 [ 83.135605][ T3080] elf_core_dump+0x1aeb/0x1c30 [ 83.140366][ T3080] do_coredump+0xff6/0x1860 [ 83.144876][ T3080] get_signal+0xdc1/0x1080 [ 83.149295][ T3080] arch_do_signal_or_restart+0x95/0x4b0 [ 83.154844][ T3080] irqentry_exit_to_user_mode+0x94/0x130 [ 83.160479][ T3080] irqentry_exit+0x12/0x50 [ 83.164888][ T3080] exc_general_protection+0x33d/0x4d0 [ 83.170267][ T3080] asm_exc_general_protection+0x26/0x30 [ 83.175826][ T3080] [ 83.175831][ T3080] read to 0xffff888113c40cd0 of 8 bytes by task 3080 on cpu 0: [ 83.175845][ T3080] generic_fillattr+0x233/0x2f0 [ 83.175869][ T3080] shmem_getattr+0x17b/0x200 [ 83.175884][ T3080] vfs_getattr+0x19b/0x1e0 [ 83.199612][ T3080] vfs_statx+0x140/0x320 [ 83.203859][ T3080] vfs_fstatat+0xcd/0x100 [ 83.208196][ T3080] __se_sys_newfstatat+0x58/0x260 [ 83.213234][ T3080] __x64_sys_newfstatat+0x55/0x70 [ 83.218267][ T3080] x64_sys_call+0x1451/0x2d70 [ 83.222950][ T3080] do_syscall_64+0xc9/0x1c0 [ 83.227453][ T3080] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.233347][ T3080] [ 83.235659][ T3080] value changed: 0x0000000000000ad0 -> 0x0000000000000ae8 [ 83.242755][ T3080] [ 83.245066][ T3080] Reported by Kernel Concurrency Sanitizer on: [ 83.251200][ T3080] CPU: 0 PID: 3080 Comm: syz-executor Not tainted 6.10.0-rc7-syzkaller-00012-g34afb82a3c67 #0 [ 83.261427][ T3080] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 83.271476][ T3080] ==================================================================