last executing test programs: 2.731291637s ago: executing program 1 (id=2534): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup(r2) socket$nl_generic(0x10, 0x3, 0x10) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x64240, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYBLOB=',wfdno', @ANYRESHEX, @ANYBLOB=',version=9p2000.L,debug=0x000000', @ANYRESDEC, @ANYBLOB]) syz_io_uring_setup(0x5169, &(0x7f0000000200)={0x0, 0x0, 0x2}, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f00000035c0)={0x0, 0x0, 0x2000}, 0x0, 0x0) socket$inet_sctp(0x2, 0x0, 0x84) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) write$tun(0xffffffffffffffff, 0x0, 0xfdef) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000000000)=@nat={'nat\x00', 0x19, 0x1, 0x0, [0x0, 0x0, 0x0, 0x200003f0], 0x0, 0x0, 0x0}, 0x1f0) r4 = socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1e, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffc}, 0x48) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000001e00)={'bond0\x00', 0x0}) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000001e40)={r5, 0x3, 0x6}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011000100000006000000000000000000", @ANYRES32=r5], 0x20}}, 0x0) 2.398139074s ago: executing program 2 (id=2539): r0 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x80000000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000f3ffffb0150000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@getlink={0x28, 0x12, 0x205, 0x0, 0x0, {}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) socket$pppoe(0x18, 0x1, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000840), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r4, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000880)={0x3c, r5, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_SEC_OUT_KEY_ID={0x14, 0x2b, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_INDEX={0x5}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x2a, 0x2a}]}, 0x3c}}, 0x0) mount$tmpfs(0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0x12, &(0x7f0000000080)=ANY=[@ANYBLOB="18010000000000ebffffff000000008510000000000000186f045644", @ANYRES32, @ANYBLOB="0000000000000000000000000000000018000000000000000000000000000000950000000000000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a0000000000008500000006"], 0x0}, 0x90) socket$inet6(0xa, 0x1, 0x8010000000000084) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='ext4_mballoc_prealloc\x00'}, 0x10) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="6d706f6c3d62696e643d80746976653a"]) socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmmsg$inet6(r6, &(0x7f00000004c0)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={'\x00', '\xff\xff', @local}, r7}}}], 0x28}}, {{&(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c, 0x0, 0x0, &(0x7f00000003c0)=[@tclass={{0x14}}], 0x18}}], 0x2, 0x0) 2.32249903s ago: executing program 0 (id=2544): r0 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r0, 0x3) r1 = socket$inet_dccp(0x2, 0x6, 0x0) r2 = memfd_create(&(0x7f0000000400)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\x91\xfdy\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0`\xaa8\xc7\xc8\x9d\xfdA\b\x10\x92(c\x10\xcb\xa6\xc3\x964\x1b\xe2\xcaf-\xcfd\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\xcdI\x83\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7 \x1d\xa1\xce\x8b\xac\b\x00\x80\xdc\x02\xd7\x04\x9b\x9aL\x9f([4\x81\xf6_#\xa6\xb3\xcd\xa8\xdc\xa6\x8b\xe5\xb1\x85n\xfecJ\xb6\xdf\x16J\xab\xecC\xe2{\xfd\x8a\xb4W;)\x9f\x9cR\xae\x12G\xd8\xa4y\x069\xfb\x13\xc3\x04_]\x0fcI\xca\xe2\x89IN\x00[\x97\xb9\nc\x9d\x1a\n\x15\x90 \xf7\xeb\x9b\v[1u`\xf7\x94J\xdb\xd1sV\xe90W\xa5\x94\xfa\xd7.\xf0\x8f\xedO\xa6\xc3\xfdUDL\xbd\xdc~Z\xed\xbc(\xc4m0:\xce\ni.hl\x860L\"_\x12M?t\xf4\xeb\xf1y\xd8\x8e\xa2\xfd\x9d\x10U\xfa<\x83\x16\xe3~|ia\xc9\xd7\x9f$\xc9\xf2/\x13{\x1a\x7f\x00\x00\x00\x00+\x00\x02X\xb7KV\x90\xc3D\x82`\xea\x16\xc6\xcef\xab\x05\x19\x96\xb9_6*-\xf3\x8c\x9a\x15\x9c\xf5\xb4O\x17@d\x81+\xf6\xe6+\xed\r\xd2\xb3\xaa\x9b\x7fC\'\xa2\xf6\x12\xa1\x15Punfo\x7f\vG\x0e.\xce\xd8h\xb9p2\xccC\xbaH\xc4\xdc\xe2\xa1%)\x85\xc7O]\'9\x92\xad\xfbJ\x02\x1d\x91-\xc3\x0e\t&\xbd\xeb\x05\x9f\t5\x06\xdd\xaf\x84\xf4\"\x13\xcf\xe5\x93D\x8d~\x01\t\x00\x00\xaa\xc4F\xc1\xc08\x94\xe6\xe5\x1f\xa7\xf6\xcaA\x90T\x1b\xe6\xb9\xe7\xff\xc5H\x04\x8d\xca\xad\x17UlY\x9a}\r4\xac\x93\xac\v2\xc6\xf9\xbe\xfeI\x8b\xd4/\xf2\x1d\xf0`\xab\x1e\xcf\x7f\b\x94 2.{\xc1\xbe\x9bth~\xcb\xb9E\x10W\xed\xed5\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\xdem\xe3)q:3\xfa*\x98o\'f\xbcY\x8e?\xf9\x84y\x89Y\x1c]\xad$\x7fp\xf1\xa3\x99[\xff\x1f\x94\xc2\xdb\xbaG\xa6UD\x88Y6\x11Y\xd4\xd1x\x17/\v0\x9e\xde\x9a{]\xe2\x98W\xb9\x13\x17<\x8b!?\x8e\xbc\xae\xf9\xcc\b\x90n\x12\x7f\xd5WS\xfbN\xec)B\xe7R\xa5\xd7O\x83\x80}\xcc5\x99\xdb\xd6\xbd\x9c\x05l\xfc.\xf4\xbbeF\xa3\xea\x04\xf0\xd0\x00}\xfa}\xf1\x8bz\xca\xad\x8a\xd9IRV5\xa77\'\x1a\x1c\x89\xef:\xee\x10\xb2\xd6\xc8\xf4\xb5\xdd\xd8c\x01@JRY\t\x00Pjk\xf7\xa5d\xc2\xecn\xc9X\xfc\xd4D\x13\"\xb2\x06\xbd&\xf86\xddXv\xc9\x1322L\xaa\xa4\xb67\x89D\x93L\xc0\xa41\xf9sNG\x02\x83\xe6Bl\xd2\x02\xfb[\x82\xc0I\xb7\xf6}\xee}\x8b\x89\x04\x8a\'\xc7J\xca\xdf:\x8ft\xe0\xf8\x04\x00\x00\x00\x00\x00\x00\x00\x14\xf3\xe1}\r.\a\x97\xf1A\x16\xbb1\xe3\xb7-\x96\xc1\x19\x85\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xe9\xe1\x17\xec\xd9\xc9\xc0\xe9\xe8\xa4\x8e\x85SoD\xd0\x90`\xddKM\xf8\x88\x9aA(\\\xd1j)\xb9\x17s\x15\x93\xee\xcf\xec3\xf4\xf6\xe0\v\xae^~\x11\b\x1d\x97@\xd8\xfc\bCQ\xb9\x1f\x8c\xf9\b\xf6\xbdg\x99z}\xc5\xf4z\x9dr1\fY\x83\x1c|\xc2\xb1\x8f\xbdq\xae\xfaL\xf6\x8cY\xb8\xef\xfdU+\x93P\xadJ)\v46/.W(o\\ei9\x129\x18\xef\xf4\x02s\x8e\xca\xddP\xca!\x94\xb6\x1d\xca\x18\x13\xdci\r\x9f\xcfw\xc1[\x1d\xfe6\xff8\xa5\xa5\xee\x82\xc5', 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x1, 0x11, r4, 0x0) fallocate(r4, 0x0, 0x0, 0x800000b) sendfile(r2, r3, &(0x7f0000000100), 0x6c03) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_serviced\x00', 0x275a, 0x0) r5 = socket$rds(0x15, 0x5, 0x0) bind$rds(r5, &(0x7f0000000040)={0x2, 0x1, @loopback}, 0x10) shutdown(0xffffffffffffffff, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e24}, 0x10) accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r0, &(0x7f0000008080), 0x5a, 0x80) 2.320769791s ago: executing program 2 (id=2546): pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r1 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7020000f3ffffb0150000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r3) connect$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x0, @dev}, 0x10) close(0xffffffffffffffff) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x6}]}) memfd_secret(0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000140)=@assoc_value, &(0x7f0000000500)=0x8) write$binfmt_script(r4, &(0x7f0000000540), 0x84) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r4, 0x0) perf_event_open(&(0x7f0000000400)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$P9_RXATTRWALK(r5, &(0x7f0000000580)={0xf}, 0xf) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x1e, 0x10, r5, 0x6100e000) close_range(r0, 0xffffffffffffffff, 0x0) 2.20423811s ago: executing program 4 (id=2548): r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) close(r0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x3, 0x8, 0x2}, 0x48) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) mount$9p_fd(0x73, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000000)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 2.182026422s ago: executing program 4 (id=2549): socket(0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r1, &(0x7f0000000440)=""/247, 0x26) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, &(0x7f0000000080)={0x103, @tick, 0x10}) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r1, 0x40a85321, &(0x7f0000000540)={{0x80}}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0xc08c5335, &(0x7f0000000180)) tkill(r0, 0x7) 2.024560335s ago: executing program 4 (id=2551): r0 = syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x8000, &(0x7f00000004c0)={[{@grpjquota}, {@auto_da_alloc_val}, {@resuid}, {@debug}, {@dioread_nolock}, {@jqfmt_vfsold}, {@nomblk_io_submit}, {@usrjquota_path={'usrjquota', 0x3d, './bus'}}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x5819}}]}, 0x1, 0x5d8, &(0x7f00000005c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x9) r1 = signalfd(r0, &(0x7f0000000000)={[0x80]}, 0x8) setsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000000180)=0x5, 0x4) r2 = getpid() socket$inet6_tcp(0xa, 0x1, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fsmount(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0x8000f28, 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./bus\x00', 0x14542, &(0x7f0000000240)=ANY=[], 0x1, 0x1222, &(0x7f0000001580)="$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") r5 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r5, 0xc0185879, &(0x7f0000000080)={0x0, 0x200002000001, 0x2000, 0x0, 0x0, 0x0, 0x2401}) 1.703806681s ago: executing program 1 (id=2555): r0 = socket$inet6(0xa, 0x805, 0x0) sendmsg$NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="14"], 0x14}}, 0x0) getsockopt$bt_hci(r0, 0x84, 0x0, &(0x7f0000000080)=""/4076, &(0x7f0000000040)=0xfec) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x208080, &(0x7f00000000c0), 0x1, 0x598, &(0x7f0000000800)="$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") write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) r1 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) close(r1) r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001580)=ANY=[@ANYBLOB="ec000000210001000000000000000000ac1e0001000000000000000000000000fc0200"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000009c001100ff020000000000000000000000000001ff010000000000000000000000000001d2860000000000000000000000000000fe8000000000000000000000000000bb00020000000000000a000200ff020000000000000000000000000001ff010000000000000000000000000001fe8000000000000000000000000000aaff010000000000000000000000000001000000000000000000000000de1b037302275e81038cb39826800733169a122e2a6abcdb651afbbb9828500c70b08fd30b6703c2ab83"], 0xec}}, 0x4048084) fcntl$setlease(r2, 0x400, 0x1) execve(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r4, 0x541b, &(0x7f0000000040)={0xffffffffffffffff}) close_range(r5, 0xffffffffffffffff, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='attr/fscreate\x00') writev(r6, &(0x7f0000000080)=[{&(0x7f0000000180)="6bc9f1386d167f53a3b9a354c85f7fbf2907641fb8812b27511464a22373a50745b0a46787f40b757ac6150f4c9eda984be22e0af0f5d6484061d06e845154130e4c0614dcd9dc8eb13039ac746c430b51c23a9bcf48c337c65dbc89b866edcf5a6ac428294ca1906db8d7e18ab76a4bca0ce543d17bb468d3b4b1544620435e2c9095e00435be1745d643accf29c97c733d983240f833c85eec65661376d2063a6c297414b1d1b9c64b2a210d4d7a1b1f1c8dc3475f4ee50350caedc467a7a7a7167a635d29794134b99a943dbc4a814d862e7e9571dfaea7de00a9cd7d97316a65d407affc2caa2e78fe028f0e21a66f4462f7e5c22e07", 0xf8}, {&(0x7f0000000300)="b616b9a108b6eb9cc6a1158d59981401a5b9e2c10286d95d8bea2bc87fa9f87c3091666a40bfad3ab564dfbb21eb3f7c3e46303d5b57e6847bf727eba16287792f7852ac96ddf9ddd7655a7da10b056b1aaaf32cb34a9ac83d942ac69c71adc66d867ba99cf8ee3908bf368fc978e3d905cecb320daf4e5991c8c79db5116371ab9b1be385e00fe2ef718b99f1c8eaec7958cd8575cc69", 0x97}, {&(0x7f00000004c0)="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", 0x1000}], 0x3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events.local\x00', 0x275a, 0x0) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000014c0)=ANY=[@ANYBLOB="50000000030101014000000002802c0001800d00fe0b000000000000000000001a00009c0000000400ff0100000000000024d9f9738783b860c000000000e100007b2100001c4a317ebdf2514942d8479057ad181448a055896357d5760783d3929656ac6e22331b42d8d87efc0dc9c92fe2a1591e099ca734aba14432fada7dd24034cd2cd5a9c844c88cd9284c20a399e46458caaeb2ce415b0ec3ecdfd4284eacad45c15f16562d31d5abb157541d597922c86ac31172"], 0x50}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$inet(0x2, 0x4000000805, 0x0) socketpair$tipc(0x1e, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0) listen(r7, 0x7) sendmmsg(r7, &(0x7f0000000e40)=[{{&(0x7f0000000000)=@l2tp={0x2, 0x0, @local}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000540)="ae", 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000008400000005"], 0x18}}], 0x2, 0x0) r8 = fsopen(&(0x7f0000000140)='devpts\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f0000001880)='\x00\x8c\xa8\xdc\x9a\xbfs\x92\x1e\xa7\xea\x84\x01\xafd{7\xf0\xa4\xb3\xa9v\x91V\x7fC\xd6q8\x8b\xf0\x1c;\xa7\xa4\x04\r\xb9\x85/\x86\xd2\xe3&\xcb\xfc\x01\xb6>\bv@\xb7\x95yl\xfcj\x96\x10s\xf0\xff\xad\xdf\xa4P\x9a\xda`\xb6\xc7\x8arB\x95\x83\xa1\xc7s\x18&\a\xedd\t\x05~I\x0e4\x10 \xb4\xd2\x85\xe3\x9b\xf0\x00\x13Y\x18\x99\x14\xa5j5\x97\xc6an\xc3\xf1\xc4(!\xe1\xe0\x02z\x94w\x1c\a\xe7{\x86\x8c}Hs+\x89\x93l\xefn@{\xa0\xdc\xdf\x8b\xa8\xf4^U\xd7\xe6c\xa1Y\x9d\x02\x88\xfbP\x86\x80\x87\x19\x03\x1f\r\xad~\xd0\xe6\xc7\xcbX\x1aU\xe8\x81\x9e\aU\x03\xdct\x9dl\x90\x00\xda\xa4\xe1{\xfdW\x98\x1f\xf3\x85L\xe5\xf7M\xb4k*3\xd1\xa2r\xba\xc0\x83\xb7\xbe0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000001200010a0000000000e7010080000000"], 0x26}}, 0x0) (async) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000001200010a0000000000e7010080000000"], 0x26}}, 0x0) write(r0, &(0x7f00000007c0)="c8ecc376a4ed5e42f716ff6b635b89dde9cd20329f06e0c765702380ffa039f6782d64d4b86e5129e873569c967b3e0c8edb5190d5de67660644dd457e089fc71ace66a17f32aea57c5c996fa107dcfece896e800c0e911a87bf2014c8f92e2296c3e97a2354654c4048c1151b31d4278b62b445188e9bbab38f40c5d49225085765a932086b68627608bb59a35c68cbc1b3e7e32b2734122387ea10fd86c41970ff7dfcd509e3b00501476311485f8542cfe2588b00918fe0c019f0eb383fb77c9225394353678b1c621160f84464c72b2cb43abbb40c0e1877d9226ef31f46a6260a1b", 0xe4) splice(r2, 0x0, r1, 0x0, 0x7, 0x0) (async) splice(r2, 0x0, r1, 0x0, 0x7, 0x0) r3 = fsopen(&(0x7f0000000040)='devpts\x00', 0x0) r4 = socket$inet6(0xa, 0x2, 0x3a) setsockopt$sock_int(r4, 0x1, 0x29, &(0x7f0000000080)=0xff, 0x4) setsockopt$sock_int(r4, 0x1, 0x1d, &(0x7f0000000000)=0x5, 0x4) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast1, 0x6}, 0x1c) sendto$inet6(r4, &(0x7f0000000100)="80000fdc2208a1ce", 0x8, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f0000006280)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) (async) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000000)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$sock_int(r5, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) connect$inet(r5, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_mreqsrc(r2, 0x0, 0x27, &(0x7f0000000780)={@loopback, @local, @broadcast}, 0xc) (async) setsockopt$inet_mreqsrc(r2, 0x0, 0x27, &(0x7f0000000780)={@loopback, @local, @broadcast}, 0xc) openat$full(0xffffffffffffff9c, &(0x7f00000006c0), 0x40000, 0x0) (async) r6 = openat$full(0xffffffffffffff9c, &(0x7f00000006c0), 0x40000, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000740)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000700), 0x106}}, 0x20) sendmmsg$inet(r5, &(0x7f0000005400)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000037c0)='-', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000003d80)=[{&(0x7f0000003ac0)="bb", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000004200)=[{&(0x7f0000003e80)='Z', 0x1}], 0x1}}], 0x3, 0x60cd894) (async) sendmmsg$inet(r5, &(0x7f0000005400)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000037c0)='-', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000003d80)=[{&(0x7f0000003ac0)="bb", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000004200)=[{&(0x7f0000003e80)='Z', 0x1}], 0x1}}], 0x3, 0x60cd894) close_range(r3, 0xffffffffffffffff, 0x0) (async) close_range(r3, 0xffffffffffffffff, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) (async) r7 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000540)={0x6, 0x7ff, 0x8, 0x3, 0x400, 0x80, 0x7, 0x28}, &(0x7f0000000580)=0x20) (async) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000540)={0x6, 0x7ff, 0x8, 0x3, 0x400, 0x80, 0x7, 0x28, 0x0}, &(0x7f0000000580)=0x20) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r7, 0x84, 0x1f, &(0x7f00000005c0)={r8, @in6={{0xa, 0x4e24, 0x200, @private2={0xfc, 0x2, '\x00', 0x1}, 0xffffffff}}, 0x3, 0x20}, 0x90) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000000)=ANY=[], 0x1, 0x357, &(0x7f0000000180)="$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") (async) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000000)=ANY=[], 0x1, 0x357, &(0x7f0000000180)="$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") r9 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r9, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') 1.052152174s ago: executing program 2 (id=2559): r0 = socket$inet_udp(0x2, 0x2, 0x0) (async, rerun: 32) r1 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000a00)=ANY=[@ANYBLOB="2800000000040000000000000000000000000000e19f813f54f020882c90ca983f172c28c9e21d11d20e4356d797cf0d960ff7666c932510ec85c5b50782a07f4682d705d864995352619df0a77a15f3ede9b0dbd6f7646cc34837e60de59148537a17d001e0a6060375e9cec6a6eb5e75fd6f916345ca134447d6a908640d0f11a0112d038a92575b5816e41a1bfe892aab7127b1a0673b71e9b15f", @ANYRES32=0x0, @ANYBLOB="000000000000000008001c00", @ANYRESHEX=r1], 0x28}}, 0x0) (async) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) (async) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @multicast2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket(0x0, 0x0, 0x0) (async) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000180)={0x0, 0x0}) (async) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r2, &(0x7f0000000200)='./bus\x00', 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0xffffffff}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b7040000000000008500000043000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = timerfd_create(0x0, 0x0) (async) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000002c0)={'gretap0\x00'}) (async) semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f0000000f00)=""/153) (async) clock_settime(0x0, &(0x7f0000003c80)={0x77359400}) (async) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000240), 0x25, 0x4b6, &(0x7f0000000540)="$eJzs3c9vVFsdAPDvvW1pKYUWJfFHVBBRNISZdoCGsMKNxhASI3HlAmo7NE1nOk1nirSyKP+DiSSu9E9wYeLChJV7d7pzgwsTVOILfclbzMudmZZSOm3fo8x96Xw+ycm9555hvt/D9J4zPW3nBNC3LkTERkSciIgHETHeuZ50Stxul+xxr189md189WQ2iWbz3n+TVnt2LXb8m8ypznOORMTPfhzxy+TduPW19cWZSqW80qkXG9XlYn1t/epCdWa+PF9eKpWmp6Ynb167UTqyvp6v/vHljxbu/Pwvf/7mi79t/ODXWVpjnbad/ThK7a4PbcfJDEbEnQ8RLAcDnf6cyDsRPpc0Ir4UERez+7+ZdzYAQC80m+PRHN9ZBwCOu7S1Bpakhc5awFikaaHQXsM7F6NppVZvXHlYW12aa6+VTcRQ+nChUp7srBVOxFCS1ada52/qpV31axFxNiJ+M3yyVS/M1ipzeb7xAYA+dmrX/P/RcHv+BwCOuZG8EwAAes78DwD9x/wPAP3H/A8A/cf8DwD9x/wPAP3H/A8AfeWnd+9mpbnZ+fzruUdrq4u1R1fnyvXFQnV1tjBbW1kuzNdq863P7Kke9HyVWm156nqsPi42yvVGsb62fr9aW11q3G99rvf98lBPegUA7Ofs+ef/SCJi49bJVokdezmYq+F4S/NOAMjNQN4JALkZzDsBIDe+xwf22KL3LV1/RejZ0ecC9Mblr1n/h35l/R/6l/V/6F/W/6F/NZuJPf8BoM9Y4wf8/B8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+u7FWSdJCZy/wsUjTQiHidERMxFDycKFSnoyIMxHx9+Gh4aw+lXfSAMB7Sv+ddPb/ujx+aWx364nk4+HWMSJ+9bt7v30802isTGXX/7d9vfGsc72UR/4AwEG25umteXzL61dPZrdKL/N5+cP25qJZ3M1OabcMxmDrOBJDETH6/6RTb8verwwcQfyNpxHx1b36n7TWRiY6O5/ujp/FPt3T+Olb8dNWW/uY/V98+QhygX7zPBt/bu91/6VxoXXc+/4faY1Q729r/Nt8Z/xLt8e/gS7j34XDxrj+1590bXsa8fXBveIn2/GTLvEvHTL+P7/xrYvd2pq/j7gce8ffGavYqC4X62vrVxeqM/Pl+fJSqTQ9NT1589qNUrG1Rl3cWql+139uXTmzX/9Hu8QfOaD/3z1k///wyYNffHuf+N//zt6v/7l94mdz4vcOGX9m9E9dt+/O4s916f9Br/+VQ8Z/8a/1uUM+FADogfra+uJMpVJecdKzk+y92xcgDSe5nWRfAUfxPF/5gKnmPTIBH9qbmz7vTAAAAAAAAAAAAAAAgG568QdPefcRAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA4+vTAAAA//+0tdao") r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0) ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000180)) (async) pwritev2(r5, &(0x7f0000003100)=[{&(0x7f0000000440)='\x00', 0x4000}], 0x1, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) timerfd_settime(r3, 0x0, &(0x7f0000000000)={{}, {r6, r7+60000000}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async, rerun: 32) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000f7850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8, 0x0, 0x0, 0x0, 0x0}, 0x90) (async, rerun: 32) r9 = socket$inet6_mptcp(0xa, 0x1, 0x106) (rerun: 32) connect$inet6(r9, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0xd}, 0x1c) (async) syz_io_uring_setup(0x7c, &(0x7f0000000100), &(0x7f0000000000), &(0x7f0000185000)) (async) io_uring_setup(0x4ea5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x3, 0x7ff}) 936.340984ms ago: executing program 1 (id=2560): syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000a00)={[{@shortname_mixed}, {@numtail}, {@shortname_lower}, {@shortname_lower}, {@uni_xlateno}, {@utf8no}, {@shortname_winnt}, {@utf8no}, {@shortname_mixed}, {@fat=@check_strict}, {@shortname_winnt}, {@shortname_mixed}, {@rodir}, {@fat=@nfs}, {@fat=@umask={'umask', 0x3d, 0x6}}, {@fat=@time_offset={'time_offset', 0x3d, 0xfffffffffffffb5a}}]}, 0x6, 0x2d0, &(0x7f00000003c0)="$eJzs3b1uHFUUAOAz653ZBYp1QYWQGAkKqihOS7MWSiSEKyIXQAGGJBLyrpBiyRI/YklFS0NBwRNQ8SA0iBdAokWiI0iRLprZmf1xJhstYRMg39f4+N5z5p67O7bHha/ff3F6eqOMW3c+/yWGwyx64xjH3Sz2oxetL2PN+OsAAP7L7qYUv6e5beqyiBjuri0AYIe2/vn/w85bAgB27Prb77x5eHR09a2yHMa16Vfnx9Vv9tXH+fzhrfgoJnEzLsco7kXUDwp51E8LVXgtpTTrl5X9eGU6Oz+uKqfv/dhc//C3iLr+IEaxXw8tnjbq+jeOrh6Ucyv1s6qPZ5v1x1X9lRjF84vitforHfVxXMSrL6/0fylG8dOH8XFM4kbdxLL+i4OyfD1988dn71btVfXZ7Px4UOctpb3H/NYAAAAAAAAAAAAAAAAAAAAAAPA/dqk5O2cQ9fk91VBz/s7eveqTPMrW/vr5PPP6rL3Q6vlAKaVZiu/a83Uul2WZmsRlfT9e6Ef/yewaAAAAAAAAAAAAAAAAAAAA/l3OPvn09GQyuXn7Hwna0wD6EfHn9Yi/e53xyshLsTl50Kx5Mpn0mnA9pz9YGYm9NieL2NhGtYnuqZStLtF79Nfwmft6boLvP8i3vODw4Tl591oXg/4j7Ku9u05Psu7XcBDtyLC5Sb4tIpY5RTxkifZdLx6Uk2Kb26/onBptvffiuTqYbciJbFNjr/0631czkl3cRVG/qp3leRNEHt1fMsMH3M/dwf3fKzKndQAAAAAAAAAAAAAAAAAAwE5liz/67Zi8s7G0lwY7awsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHquzxf//XwQ/5xGLkXxtqglmTXHH1MWgiNtnT3iLAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPAX+CgAA//8wK1Yb") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000008c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SEC_PARAMS(0xffffffffffffffff, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000e80)={&(0x7f00000002c0)={0x28, r3, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_SEC_OUT_KEY_ID={0xc, 0x2b, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x4}]}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x28}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x401, 0x0, 0x0, {0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWCHAIN={0x30, 0x3, 0xa, 0x3, 0x0, 0x0, {0x3}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x4}]}], {0x14}}, 0xa0}}, 0x0) 935.771704ms ago: executing program 0 (id=2561): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0800000c0000000500000002000000000000070000000000002e5f00"], &(0x7f0000000780)=""/221, 0x29, 0xdd, 0x1}, 0x20) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100), 0x10000, 0x0) ioctl$BTRFS_IOC_QUOTA_CTL(r1, 0xc0109428, &(0x7f0000000140)={0x1, 0x3}) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x2, 0x7, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0xffffffffffff0000}, @NFACCT_FLAGS={0x8}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x20080004}, 0x4000804) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0800000c0000000500000002000000000000070000000000002e5f00"], &(0x7f0000000780)=""/221, 0x29, 0xdd, 0x1}, 0x20) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100), 0x10000, 0x0) (async) ioctl$BTRFS_IOC_QUOTA_CTL(r1, 0xc0109428, &(0x7f0000000140)={0x1, 0x3}) (async) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x2, 0x7, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0xffffffffffff0000}, @NFACCT_FLAGS={0x8}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x20080004}, 0x4000804) (async) 931.663424ms ago: executing program 2 (id=2562): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000240)={'#! ', './file1', [], 0xa, "b26c45b0ba9f93e1b884d7ee0fa7c5c76f1c3fb93b37678feb7121427c1f78066c84fa85fce5d562792cbf969492b749b81ec1da8d58"}, 0x41) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) r2 = socket(0xa, 0x6, 0x0) getsockopt$inet6_mreq(r2, 0x10d, 0xa3, 0x0, &(0x7f0000000040)) 873.777579ms ago: executing program 0 (id=2563): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) write(0xffffffffffffffff, &(0x7f0000000100)="1b", 0x1) r0 = syz_open_dev$usbfs(&(0x7f0000000c40), 0x310decfa, 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_aout(r1, &(0x7f0000000100)=ANY=[], 0xc1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000005, 0x12, r1, 0x0) ioctl$USBDEVFS_CONTROL(r0, 0x80045515, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 826.692123ms ago: executing program 0 (id=2564): r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000100), 0x60000, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct={0x0, 0x0, 0x0, 0x13, 0x0, 0x2}]}}, 0x0, 0x26, 0x0, 0x9}, 0x20) preadv(r0, &(0x7f0000002440)=[{&(0x7f0000000200)=""/218, 0xda}, {&(0x7f0000000380)=""/181, 0xb5}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000001440)=""/4096, 0x1000}, {&(0x7f0000000140)=""/11, 0xb}], 0x5, 0x0, 0x2400002) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) fsetxattr$security_selinux(r1, &(0x7f0000000080), &(0x7f00000001c0)='system_u:object_r:system_map_t:s0\x00', 0x22, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) socket$netlink(0x10, 0x3, 0x4) gettid() getpgid(0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000140), 0x10) r4 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r4, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) sendmsg$can_bcm(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="050000000300000000000000", @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x48}}, 0x0) recvmsg$can_bcm(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x42) read(r3, &(0x7f0000001480)=""/4096, 0x1000) 748.224909ms ago: executing program 3 (id=2565): setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRES32], 0x1) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000740)=0xc) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800), 0x154}}, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WOWLAN(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f0000000480)={0x30, r1, 0x8, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x67}, @val={0x8}, @val={0xc, 0x99, {0x2, 0x6f}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x2000c140}, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f0000004940)=ANY=[@ANYBLOB="12f2dbe091fffae6d752b5c33badb99baad955d7e9041ffb38b64e1a0529babc5120a22be89729aad765ce32d001387648a6c728a239d99129ef3a9d8c7f51f24aaf203906727292ed1cd50700000000000000597a25ba1c5b202900cafcb16f8cc28420edcde3fc9b5ee100d7bf1bc62d1f697293", @ANYRES16=r2, @ANYBLOB="0b14d86d7004fddbdf25550000000800010059000000c36c64309d26d42d39445e55f7a1b0f0943ec8ab4b919abb63718f36a3219fb6698d41f4df9c436d2816ff53df1060c87b0000067659af918a66e77c84a6172aa89c6e9da38d7122f39e5505a9ce8a84832c9af6ff1dd2920eeabe6fe849699b197bcfcafc"], 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x4004001) r3 = socket(0x10, 0x3, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="34000000100001000000000000000000080000000000000008000000", @ANYRES32=0x0, @ANYBLOB="14001b0000000000000000210000c06417e41ddf"], 0x34}], 0x1}, 0x0) r4 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000580)={'veth1_virt_wifi\x00', 0x0}) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x41, &(0x7f0000000140)=0x9de, 0x4) bind$packet(r4, &(0x7f0000000080)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$packet(r4, &(0x7f0000000040)="bb53a945842851722bb479853e60", 0xe, 0x0, 0x0, 0x0) setsockopt$SO_TIMESTAMP(r4, 0x1, 0x40, &(0x7f0000000440)=0x3f, 0x4) recvmmsg(r4, &(0x7f00000046c0)=[{{&(0x7f00000004c0)=@hci, 0x80, &(0x7f00000005c0)=[{&(0x7f00000008c0)=""/86, 0x56}, {&(0x7f00000002c0)=""/35, 0x23}, {&(0x7f0000000380)=""/44, 0x2c}], 0x3, &(0x7f0000000940)=""/103, 0x67}, 0x3}, {{0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f00000009c0)=""/169, 0xa9}, {&(0x7f0000000a80)=""/13, 0xd}, {&(0x7f0000000ac0)=""/200, 0xc8}, {&(0x7f0000000bc0)=""/196, 0xc4}, {&(0x7f0000000cc0)=""/13, 0xd}, {&(0x7f0000000d00)=""/64, 0x40}, {&(0x7f0000000d40)=""/217, 0xd9}, {&(0x7f0000000e40)=""/62, 0x3e}, {&(0x7f0000000e80)=""/40, 0x28}, {&(0x7f0000000ec0)=""/76, 0x4c}], 0xa, &(0x7f0000001000)=""/4096, 0x1000}, 0x7ff}, {{&(0x7f0000002000)=@un=@abs, 0x80, &(0x7f0000004540)=[{&(0x7f0000002080)=""/84, 0x54}, {&(0x7f0000002100)=""/105, 0x69}, {&(0x7f0000002180)=""/25, 0x19}, {&(0x7f00000021c0)=""/4096, 0x1000}, {&(0x7f00000031c0)=""/4096, 0x1000}, {&(0x7f00000041c0)=""/157, 0x9d}, {&(0x7f0000004280)=""/224, 0xe0}, {&(0x7f0000004380)=""/79, 0x4f}, {&(0x7f0000004400)=""/165, 0xa5}, {&(0x7f00000044c0)=""/81, 0x51}], 0xa, &(0x7f0000004600)=""/177, 0xb1}, 0xffff5975}], 0x3, 0x12040, &(0x7f0000004780)) recvmsg(r4, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x2022) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r4, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYBLOB="1c", @ANYBLOB="e8ff29bd700103dbdf256800000040ea0efee200000000000000c7e4eeab153c31dbdba5560aa84effc74400b014e85a08fb4b57e6f938e8c586e20af982ef0a0ec47c31f43eb89000f9aa2978c3eb9ad187ab6ffc9289bb57695e24c056", @ANYRES32=r6, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x880}, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000004880)=ANY=[@ANYBLOB="be3e152b3819654189e9717beda69fb25dc4ace46b79d22c84c2a07fc0c15dfebc1a", @ANYRES16=r7, @ANYBLOB="000425bd7000fcdbdf2537000000080003002bb886659b9e994b5ab00829cc7dc50555abbae49dbcf3c2d6ce0eac6dddc1790f4b4bccb326ffa7514cfcdc7255bd7ce81e0bdcfc5e", @ANYRES32=r6, @ANYBLOB="050018010c00f7ff0700a0000800000005001801280000000800a000050000000800a000f7ffffff050019010f000000"], 0x4c}, 0x1, 0x0, 0x0, 0x81}, 0x800) sendmsg$NL80211_CMD_DEL_KEY(r4, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40008013}, 0xc, &(0x7f0000000200)={&(0x7f0000000680)=ANY=[@ANYBLOB="347e7d0000000000000000000000f6a985b0287fc7ddd1d39500", @ANYRES16=r2, @ANYBLOB="009b1e14617104032cf4bd700cff45c73f985cb7802d10909a294eb0a47a72b6294be7b4c56a000000000c000058f8b8d6", @ANYRESHEX=r2, @ANYBLOB="0800090001ac0f0008003700f093cace050008000300000008003700000000000c000a009721e887699e4083"], 0x48}, 0x1, 0x0, 0x0, 0x20000800}, 0x20) sendmsg$NL80211_CMD_SET_QOS_MAP(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f00000047c0)={0x9c, r1, 0x400, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x7c, 0x6a}}}}, [@NL80211_ATTR_QOS_MAP={0x16, 0xc7, {[{0x7c, 0x5}, {0x7f, 0x4}, {0x98, 0x6}, {0x5, 0x4}, {0x0, 0x7}], "3b4a831b4f64af62"}}, @NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{0x20}, {0x10, 0x7}, {0x8, 0x1}], "d54cb4bce1654442"}}, @NL80211_ATTR_QOS_MAP={0x14, 0xc7, {[{0x80}, {0x2, 0x6}, {0xff, 0x1}, {}], "dbfec268d0679f37"}}, @NL80211_ATTR_QOS_MAP={0x32, 0xc7, {[{0x3}, {0x44, 0x4}, {0x2, 0x5}, {0x80, 0x4}, {0x9, 0x3}, {0x7f}, {0x1f, 0x1}, {0x2, 0x6}, {0x9, 0x6}, {0x4, 0x7}, {0x4}, {0xff, 0x4}, {0x3, 0x6}, {0x0, 0x1}, {0x8, 0x5}, {0xbb, 0x3}, {0xb1, 0x7}, {0x1, 0x5}, {0x2, 0x7}], "25972ce98bb5d4f4"}}]}, 0x9c}, 0x1, 0x0, 0x0, 0x20000001}, 0x40480c0) sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x28, r1, 0x4, 0x70bd25, 0x25dfdbfd, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'aa\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008000}, 0x801) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x0, 0x9f, 0x20}]}, 0x10) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r9 = dup(r8) syz_io_uring_setup(0x6116, &(0x7f0000000040)={0x0, 0x0, 0x32, 0x0, 0x0, 0x0, r9}, &(0x7f0000000140), &(0x7f0000ffc000)) 747.727409ms ago: executing program 2 (id=2566): pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r1 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7020000f3ffffb0150000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r3) connect$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x0, @dev}, 0x10) close(0xffffffffffffffff) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x6}]}) memfd_secret(0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000140)=@assoc_value, &(0x7f0000000500)=0x8) write$binfmt_script(r4, &(0x7f0000000540), 0x84) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r4, 0x0) perf_event_open(&(0x7f0000000400)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$P9_RXATTRWALK(r5, &(0x7f0000000580)={0xf}, 0xf) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x1e, 0x10, r5, 0x6100e000) close_range(r0, 0xffffffffffffffff, 0x0) 747.363259ms ago: executing program 3 (id=2567): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000340)={r0, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000006c0)=ANY=[@ANYBLOB="57732d7ffb36f4c938a6a6eefaa16f79a56e3e1a9d416d8b42bfcaefc449e028fa4cc9df715a51c245063dff48bae431c66d654e9f8f72afd64b92e84ed87419ac2fec3deb6f5fb88fb3460403e9e96abdca8efeca43dc5d5c03279e738fda6fe8c03f94d604d48022d99e15b490b33488eca5c1c9", @ANYRES64, @ANYRES32=0x0, @ANYRES8=r0, @ANYBLOB="f42ca0ba32cf89f31116d4d8df1459bf8be45814ab04f4994d868dbd1458ab1c68a743b86c668193e3db2bd65c1404fcf9f63bbdfed8cfc8f5a9097b8d04be782f8cc6747dd56ec9af39aceaeaa99233b32cb48554e081b19865a8f008e7ccb29506614d81366ff1d58579e70626e46007a139800c7766145f5bbcb3af129d4544901c2ea88837d2ba3588b750d4f1b6154845d8098aa1bf607716bb8971f8fcdeae2370b48650cb1bb3a9d602d1a7", @ANYBLOB="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", @ANYRES64=r1, @ANYRESDEC=r1, @ANYRESDEC=r0, @ANYRESHEX=r0], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffd32}, 0x90) r2 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) pwrite64(r2, &(0x7f00000000c0)="97", 0x1, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x6, 0xfff, 0x9}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='percpu_alloc_percpu\x00'}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r3}, &(0x7f0000000400), &(0x7f00000004c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 707.619583ms ago: executing program 3 (id=2568): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000340)={r0, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000006c0)=ANY=[@ANYBLOB="57732d7ffb36f4c938a6a6eefaa16f79a56e3e1a9d416d8b42bfcaefc449e028fa4cc9df715a51c245063dff48bae431c66d654e9f8f72afd64b92e84ed87419ac2fec3deb6f5fb88fb3460403e9e96abdca8efeca43dc5d5c03279e738fda6fe8c03f94d604d48022d99e15b490b33488eca5c1c9", @ANYRES64, @ANYRES32=0x0, @ANYRES8=r0, @ANYBLOB="f42ca0ba32cf89f31116d4d8df1459bf8be45814ab04f4994d868dbd1458ab1c68a743b86c668193e3db2bd65c1404fcf9f63bbdfed8cfc8f5a9097b8d04be782f8cc6747dd56ec9af39aceaeaa99233b32cb48554e081b19865a8f008e7ccb29506614d81366ff1d58579e70626e46007a139800c7766145f5bbcb3af129d4544901c2ea88837d2ba3588b750d4f1b6154845d8098aa1bf607716bb8971f8fcdeae2370b48650cb1bb3a9d602d1a7", @ANYBLOB="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", @ANYRES64=r1, @ANYRESDEC=r1, @ANYRESDEC=r0, @ANYRESHEX=r0], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffd32}, 0x90) r2 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) pwrite64(r2, &(0x7f00000000c0)="97", 0x1, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x6, 0xfff, 0x9}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='percpu_alloc_percpu\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 688.673144ms ago: executing program 3 (id=2569): r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x3c1, 0x3, 0x368, 0x0, 0x111, 0x4b4, 0x0, 0xd4feffff, 0x298, 0x20a, 0x278, 0x298, 0x278, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @empty, [], [0x0, 0x28f5c], 'ipvlan0\x00', 'vlan0\x00'}, 0x7a, 0x118, 0x140, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x0, 0x3}}, @common=@unspec=@connlabel={{0x28}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x8000}}}, {{@ipv6={@mcast1, @private1, [], [], 'veth1_to_hsr\x00', 'pim6reg1\x00'}, 0x0, 0xf0, 0x158, 0x0, {}, [@common=@dst={{0x48}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c8) 628.642499ms ago: executing program 3 (id=2570): sendmsg$IEEE802154_ASSOCIATE_REQ(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000dc0)=@newqdisc={0x90, 0x24, 0xf0b, 0x0, 0x6558, {0x0, 0x0, 0x12, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x60, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x4, 0xc}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x1, [], 0x0, [0x8]}}]}}]}, 0x90}}, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001900)=[{{0x0, 0x0, 0x0}, 0xee0000b0}, {{0x0, 0xffffff7a, 0x0, 0x0, &(0x7f0000000040)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @dev={0xac, 0x14, 0x14, 0x16}, @private}}}], 0x20}}], 0x2, 0x4850) setsockopt$inet_int(r0, 0x0, 0x0, &(0x7f0000000000)=0x2, 0x4) 628.168639ms ago: executing program 3 (id=2571): pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x4014) r2 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYRES64=r1, @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e64000000001400028008000f"], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x4000) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r1) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_RADAR_DETECT(r3, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYRES8, @ANYRESOCT=r4, @ANYBLOB="000126bd7000ffdb00d14e0000dfc86d769a91b2510008000300", @ANYRES32=r4, @ANYBLOB="f4070000"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x880) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005f3f770005000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e"], 0x3}}, 0x0) splice(r0, 0x0, r5, 0x0, 0x4ffe2, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r6) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) r7 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r8, 0x8933, &(0x7f00000003c0)={'wg2\x00', 0x0}) sendmsg$WG_CMD_GET_DEVICE(r7, &(0x7f0000000440)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000400)={&(0x7f00000026c0)=ANY=[@ANYBLOB, @ANYRES32=r9, @ANYBLOB="a00400a9"], 0xe10}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) 478.664631ms ago: executing program 0 (id=2572): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000840)=ANY=[@ANYBLOB="3c012b00190001000100000000000000fe8800000000000000000000000000010000000000000000000000000000000000000000000000000a0000002c000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000007f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000840005"], 0x13c}}, 0x0) 470.198722ms ago: executing program 0 (id=2573): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) getpid() sched_setaffinity(0x0, 0x4e, &(0x7f0000000040)=0x5) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x14, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000020000000850000008600"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) syz_clone3(&(0x7f0000000340)={0x42907480, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x3f}, 0x58) 234.968352ms ago: executing program 4 (id=2574): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) write(0xffffffffffffffff, &(0x7f0000000100)="1b", 0x1) r0 = syz_open_dev$usbfs(&(0x7f0000000c40), 0x310decfa, 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_aout(r1, &(0x7f0000000100)=ANY=[], 0xc1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000005, 0x12, r1, 0x0) ioctl$USBDEVFS_CONTROL(r0, 0x80045515, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 136.61811ms ago: executing program 4 (id=2575): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000580)='./file1\x00', 0x0, &(0x7f0000000280)={[{@init_itable_val={'init_itable', 0x3d, 0x7}}, {@nombcache}], [{@dont_hash}, {@uid_eq}, {@euid_eq}]}, 0x1, 0x59a, &(0x7f00000005c0)="$eJzs3U1oHGUfAPD/TLLN2zbvmxZeQaVIUaFC6Sbph1ZP6VUsFHoQvMSw2YaQTTZmN7UJPaT3IhYUlV7qTUGPihQP4sWjVy+KZ0G0qDQ9SGSyu2nzsXGTNtmS/f1gNs/H7PyfJ7PPszPDDBtAxzqavaQRT0XEhSSi74G67qhXHq2tt3jnauFedxSSWFq6+FsSSUTcvXO10Fg/qf89GBELEfFkRHybiziero9bmZufGCmVijP1fH91crq/Mjd/YnxyZKw4Vpw69dLLZ86ePjN4cvCR9fX6Tzfeuf79q7dufPr5kYXC+yNJDEVvve7BfmyqZ2sxa/+TXAytKT+9tc089pJ2N4Bt6aqP81xEPBF90VUf9cDet9QTsQR0qGTL439/mDNgL2gcB2Tnv41l1QHCws4ef/x6rnYCksVdrC+1mu7atYn4z/K5yYE/klVnJtn55qGdbRodYOFaRAx0d6///Cf1z9/2DTyKBrKjvjlX21Hr93+a7f+3Pquvt3b+6W1cO31Ijflvcd38l67Mf11N5r8LLcb4+42fP2oa/1rE0xvGT1biJxvETyPizRbj33z9q7PN6pY+jjgWG8dvSDa/Ptx/abxUHKi9bhjj62NHXtms/weaxB/apP9Z2XSL/f/yuy+ebfY1msV/4bnN9/9G8bNj8HdbjH/47ievNavL4o826f9m8bOyWy3Gf3Ho6I8trgoAAAAAAAAAAGxBunwvW5LmV9Jpms/XnuH9fxxIS+VK9fil8uzUaO2et0ORSxt3WvXV8kmWH6zfj9vIn1yTPxURhyPiva79y/l8oVwabXfnAQAAAAAAAAAAAAAAAAAA4DFxcM3z/3921Z7/BzqEn/yGzmX8Q+daPf6TtrUD2H2+/6FzGf/QuZqN/3u3d7khwK5r+v2f2912ALvP8T90LuMfOpfxD53L+AcAAAAAAAAAAAAAAAAAAAAAAAAAgB1x4fz5bFm6d+dqIcuPXp6bnShfPjFarEzkJ2cL+UJ5Zjo/Vi6PlYr5Qnny37ZXKpenB2Jq9kp/tVip9lfm5ocny7NT1eHxyZGx4nDRL4oAAAAAAAAAAAAAAAAAAADAer3LS5LmIyJdTqdpPh/x34g4FLnk0nipOBAR/4uIH7pyPVl+sN2NBgAAAAAAAAAAAAAAAAAAgD2mMjc/MVIqFWc2T6QtrLP3EvsiFlaXxNa2M/zX7rU5Iha29fZk4aGiJ9Hu3bSXEs/seyyakX3UAQAAAAAAAAAAAAAAAACAXXb/od8tvvHaDjUIAAAAAAAAAAAAAAAAAAAAOlL6S/aaRMSxvud7I+J27oHafcli1/LfiHj75sUProxUqzODWfnvK+XVD+vlJ9vVB6AVjXHaGMcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAfZW5+YmRUqk4s+VEupzoaWE7be4iAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwLb8EwAA///xe9Ex") prctl$PR_SET_SECUREBITS(0x1c, 0x0) sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[], 0x3c}}, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) syz_open_pts(0xffffffffffffffff, 0x105b01) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[@ANYBLOB="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", @ANYRESDEC=0x0], 0xfb, 0x11e0, &(0x7f00000036c0)="$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") r0 = open(&(0x7f0000000040)='./file2\x00', 0x181042, 0x0) write$P9_RREADDIR(r0, &(0x7f0000000500), 0xbf) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r1, &(0x7f0000000180), 0x40001) socket$inet6_sctp(0xa, 0x0, 0x84) setsockopt(0xffffffffffffffff, 0x84, 0x81, &(0x7f00000002c0)="1a00000019000000", 0x8) sendfile(r0, r0, &(0x7f0000000240), 0x7f06) socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="090300000000008000001d0000000c0001800800030004000000"], 0x20}}, 0x0) socket(0x400000000010, 0x0, 0x0) 29.046249ms ago: executing program 1 (id=2576): r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000000940)=[{{&(0x7f00000004c0)={0xa, 0x4e1d, 0x0, @mcast2, 0xf4010000}, 0x1c, 0x0}}, {{&(0x7f00000007c0)={0xa, 0x0, 0x0, @mcast1}, 0x1c, 0x0}}], 0x2, 0x0) 0s ago: executing program 1 (id=2577): r0 = socket$inet_udplite(0x2, 0x2, 0x88) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(0xffffffffffffffff, 0x0, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SCAUSEDIAG(r1, 0x89ec, &(0x7f0000000000)={0x2, 0xd}) ioprio_get$uid(0x0, 0x0) r2 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x1}, 0xffab) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) statx(0xffffffffffffffff, 0x0, 0x6000, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r2, 0x40189429, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0xd2}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000100)={0x20000014}) epoll_wait(r2, &(0x7f0000000040)=[{}], 0x1, 0xfffff001) kernel console output (not intermixed with test programs): 6-g720261cfc732 #0 [ 149.387439][ T9327] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 149.397482][ T9327] Call Trace: [ 149.400746][ T9327] [ 149.403666][ T9327] dump_stack_lvl+0xf2/0x150 [ 149.408371][ T9327] dump_stack+0x15/0x20 [ 149.412521][ T9327] dump_header+0x83/0x2d0 [ 149.416845][ T9327] oom_kill_process+0x33e/0x4c0 [ 149.421707][ T9327] out_of_memory+0x9af/0xbe0 [ 149.426295][ T9327] ? try_to_free_mem_cgroup_pages+0x22a/0x4e0 [ 149.432372][ T9327] mem_cgroup_out_of_memory+0x13e/0x190 [ 149.437921][ T9327] try_charge_memcg+0x745/0xcd0 [ 149.442837][ T9327] ? _raw_spin_unlock+0x26/0x50 [ 149.447764][ T9327] ? radix_tree_lookup+0xf9/0x150 [ 149.452783][ T9327] mem_cgroup_swapin_charge_folio+0x107/0x1a0 [ 149.458930][ T9327] __read_swap_cache_async+0x2b9/0x520 [ 149.464453][ T9327] swap_cluster_readahead+0x276/0x3f0 [ 149.469821][ T9327] swapin_readahead+0xe2/0x7a0 [ 149.474647][ T9327] ? __filemap_get_folio+0x420/0x5b0 [ 149.479967][ T9327] ? swap_cache_get_folio+0x6e/0x210 [ 149.485242][ T9327] do_swap_page+0x3bc/0x1840 [ 149.489895][ T9327] ? hrtimer_try_to_cancel+0x106/0x1d0 [ 149.495409][ T9327] ? __rcu_read_lock+0x36/0x50 [ 149.500161][ T9327] handle_mm_fault+0x8b9/0x2ac0 [ 149.505097][ T9327] exc_page_fault+0x3b9/0x650 [ 149.509831][ T9327] asm_exc_page_fault+0x26/0x30 [ 149.514770][ T9327] RIP: 0033:0x7f0af4347b05 [ 149.519180][ T9327] Code: 00 00 00 00 00 83 ff 03 74 7b 83 ff 02 b8 fa ff ff ff 49 89 ca 0f 44 f8 80 3d 3e da 12 00 00 74 14 b8 e6 00 00 00 0f 05 f7 d8 66 2e 0f 1f 84 00 00 00 00 00 48 83 ec 28 48 89 54 24 10 89 74 [ 149.538892][ T9327] RSP: 002b:00007fffa2b904c8 EFLAGS: 00010246 [ 149.544944][ T9327] RAX: 0000000000000000 RBX: 000000000000006a RCX: 00007f0af4347b03 [ 149.552902][ T9327] RDX: 00007fffa2b904e0 RSI: 0000000000000000 RDI: 0000000000000000 [ 149.560857][ T9327] RBP: 00007fffa2b9055c R08: 000000001936d647 R09: 7fffffffffffffff [ 149.568816][ T9327] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000032 [ 149.576773][ T9327] R13: 0000000000000bb8 R14: 000000000002365f R15: 00000000000234ca [ 149.584733][ T9327] [ 149.588697][ T9327] memory: usage 307200kB, limit 307200kB, failcnt 374 [ 149.590162][T10039] veth1_macvtap: entered promiscuous mode [ 149.595806][ T9327] memory+swap: usage 308484kB, limit 9007199254740988kB, failcnt 0 [ 149.608653][T10039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 149.609219][ T9327] kmem: usage 307076kB, limit 9007199254740988kB, failcnt 0 [ 149.619545][T10039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.626757][ T9327] Memory cgroup stats for /syz3 [ 149.636557][T10039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 149.641455][ T9327] : [ 149.651828][T10039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.651846][T10039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 149.674395][ T9327] cache 122880 [ 149.674519][T10039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.677817][ T9327] rss 0 [ 149.677823][ T9327] shmem 0 [ 149.677829][ T9327] mapped_file 122880 [ 149.677835][ T9327] dirty 122880 [ 149.677840][ T9327] writeback 0 [ 149.677846][ T9327] workingset_refault_anon 263 [ 149.677853][ T9327] workingset_refault_file 182 [ 149.677860][ T9327] swap 1314816 [ 149.677866][ T9327] swapcached 4096 [ 149.687744][T10039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 149.690445][ T9327] pgpgin 152844 [ 149.690453][ T9327] pgpgout 152813 [ 149.693398][T10039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.697283][ T9327] pgfault 172707 [ 149.700640][T10039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 149.703926][ T9327] pgmajfault 169 [ 149.703934][ T9327] inactive_anon 0 [ 149.708583][T10039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.708600][T10039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 149.713234][ T9327] active_anon 0 [ 149.716604][T10039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.720208][ T9327] inactive_file 0 [ 149.720216][ T9327] active_file 122880 [ 149.730601][T10039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 149.734028][ T9327] unevictable 0 [ 149.737582][T10039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.737597][T10039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 149.737607][T10039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.737621][T10039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 149.747391][ T9327] hierarchical_memory_limit 314572800 [ 149.750922][T10039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.755011][T10039] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 149.761349][ T9327] hierarchical_memsw_limit 9223372036854771712 [ 149.766004][T10039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 149.768482][ T9327] total_cache 122880 [ 149.768491][ T9327] total_rss 0 [ 149.768496][ T9327] total_shmem 0 [ 149.768502][ T9327] total_mapped_file 122880 [ 149.778284][T10039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.788710][ T9327] total_dirty 122880 [ 149.792146][T10039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 149.801918][ T9327] total_writeback 0 [ 149.805502][T10039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.809362][ T9327] total_workingset_refault_anon 263 [ 149.809370][ T9327] total_workingset_refault_file 182 [ 149.809377][ T9327] total_swap 1314816 [ 149.809383][ T9327] total_swapcached 4096 [ 149.819774][T10039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 149.823200][ T9327] total_pgpgin 152844 [ 149.823208][ T9327] total_pgpgout 152813 [ 149.823214][ T9327] total_pgfault 172707 [ 149.832991][T10039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.843435][ T9327] total_pgmajfault 169 [ 149.853201][T10039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 149.863605][ T9327] total_inactive_anon 0 [ 149.863614][ T9327] total_active_anon 0 [ 149.868959][T10039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.868975][T10039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 149.878754][ T9327] total_inactive_file 0 [ 149.885907][T10039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.892049][ T9327] total_active_file 122880 [ 149.902435][T10039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 149.906304][ T9327] total_unevictable 0 [ 149.909562][T10039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.909576][T10039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 149.913015][ T9327] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null) [ 149.917390][T10039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.927209][ T9327] ,cpuset= [ 149.931042][T10039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 149.941438][ T9327] syz3,mems_allowed=0,oom_memcg=/syz3 [ 149.945230][T10039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.945245][T10039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 149.945256][T10039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.972038][T10039] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 149.973516][ T9327] ,task_memcg= [ 149.991112][T10141] netlink: 'syz.2.1955': attribute type 5 has an invalid length. [ 149.991936][ T9327] /syz3 [ 150.011998][T10039] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.020700][ T9327] ,task=syz.3.1945,pid=10102,uid=0 [ 150.024656][T10039] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.024688][T10039] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.024760][T10039] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.060470][T10142] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(10) [ 150.063243][ T9327] Memory cgroup out of memory: Killed process 10102 (syz.3.1945) total-vm:80728kB, anon-rss:452kB, file-rss:10168kB, shmem-rss:0kB, UID:0 pgtables:112kB oom_score_adj:1000 [ 150.067588][T10142] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 150.260686][T10142] vhci_hcd vhci_hcd.0: Device attached [ 150.277694][T10143] vhci_hcd: connection closed [ 150.277900][ T6991] vhci_hcd: stop threads [ 150.286955][ T6991] vhci_hcd: release socket [ 150.291462][ T6991] vhci_hcd: disconnect device [ 150.316416][T10148] loop4: detected capacity change from 0 to 1024 [ 150.325122][T10148] ext4: Unknown parameter 'dont_hash' [ 150.364100][T10151] loop0: detected capacity change from 0 to 1024 [ 150.382038][T10151] ext4: Unknown parameter 'dont_hash' [ 150.437534][T10151] loop0: detected capacity change from 0 to 8192 [ 150.539125][T10160] netlink: 'syz.3.1960': attribute type 4 has an invalid length. [ 150.548061][T10157] loop4: detected capacity change from 0 to 8192 [ 150.574303][T10163] loop3: detected capacity change from 0 to 512 [ 150.596114][T10163] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 150.608835][T10163] ext4 filesystem being mounted at /44/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 150.624277][T10163] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 150.746461][ T9327] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.899874][T10194] loop2: detected capacity change from 0 to 1024 [ 150.906542][T10194] ext4: Unknown parameter 'dont_hash' [ 150.952138][T10201] loop3: detected capacity change from 0 to 128 [ 150.983544][T10194] loop2: detected capacity change from 0 to 8192 [ 151.149554][T10204] loop3: detected capacity change from 0 to 512 [ 151.156392][T10204] EXT4-fs: Ignoring removed mblk_io_submit option [ 151.165781][T10204] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 151.180142][T10206] hub 6-0:1.0: USB hub found [ 151.186798][T10206] hub 6-0:1.0: 8 ports detected [ 151.204635][T10204] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters [ 151.249314][T10204] EXT4-fs (loop3): 1 truncate cleaned up [ 151.265061][T10204] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 151.384437][T10212] loop2: detected capacity change from 0 to 512 [ 151.405536][T10212] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 151.480409][T10212] ext4 filesystem being mounted at /65/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 151.498606][T10212] EXT4-fs error (device loop2): ext4_do_update_inode:5154: inode #21: comm syz.2.1978: corrupted inode contents [ 151.510947][T10212] EXT4-fs error (device loop2): ext4_dirty_inode:6014: inode #21: comm syz.2.1978: mark_inode_dirty error [ 151.522521][T10212] EXT4-fs error (device loop2): ext4_do_update_inode:5154: inode #21: comm syz.2.1978: corrupted inode contents [ 151.534627][T10212] EXT4-fs error (device loop2): ext4_xattr_delete_inode:3007: inode #21: comm syz.2.1978: mark_inode_dirty error [ 151.547028][T10212] EXT4-fs error (device loop2): ext4_xattr_delete_inode:3010: inode #21: comm syz.2.1978: mark inode dirty (error -117) [ 151.560884][T10212] EXT4-fs warning (device loop2): ext4_evict_inode:271: xattr delete (err -117) [ 151.872320][ T9120] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.907092][T10225] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1980'. [ 151.918331][T10227] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1981'. [ 151.921529][T10225] bond_slave_0: entered promiscuous mode [ 151.932901][T10225] bond_slave_1: entered promiscuous mode [ 151.938950][T10225] macvtap1: entered promiscuous mode [ 151.944257][T10225] bond0: entered promiscuous mode [ 151.949538][T10225] macvtap1: entered allmulticast mode [ 151.955019][T10225] bond0: entered allmulticast mode [ 151.960140][T10225] bond_slave_0: entered allmulticast mode [ 151.965841][T10225] bond_slave_1: entered allmulticast mode [ 151.972333][ T9327] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.972793][T10225] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 151.991469][T10228] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1980'. [ 152.006749][T10230] netlink: 'syz.3.1982': attribute type 5 has an invalid length. [ 152.078910][T10239] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(10) [ 152.085605][T10239] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 152.093135][T10239] vhci_hcd vhci_hcd.0: Device attached [ 152.103143][T10240] usbip_core: unknown command [ 152.107849][T10240] vhci_hcd: unknown pdu 75816550 [ 152.112843][T10240] usbip_core: unknown command [ 152.118544][ T6991] vhci_hcd: stop threads [ 152.122858][ T6991] vhci_hcd: release socket [ 152.127256][ T6991] vhci_hcd: disconnect device [ 152.135843][T10242] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1985'. [ 152.305256][T10248] loop2: detected capacity change from 0 to 1024 [ 152.311871][T10248] ext4: Unknown parameter 'dont_hash' [ 152.357914][T10250] loop4: detected capacity change from 0 to 256 [ 152.380141][T10248] loop2: detected capacity change from 0 to 8192 [ 152.559619][T10254] syz.4.1989[10254] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 152.559689][T10254] syz.4.1989[10254] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 152.904617][T10264] loop3: detected capacity change from 0 to 8192 [ 152.927312][T10266] loop2: detected capacity change from 0 to 1024 [ 152.935999][T10266] ext4: Unknown parameter 'dont_hash' [ 153.089028][T10266] loop2: detected capacity change from 0 to 8192 [ 153.231653][T10273] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 153.239580][T10273] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 153.251463][T10273] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1995'. [ 153.260372][T10273] veth0: entered promiscuous mode [ 153.265416][T10273] veth0: entered allmulticast mode [ 153.276304][T10273] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1995'. [ 153.285602][T10273] veth0: left promiscuous mode [ 153.290404][T10273] veth0: left allmulticast mode [ 153.336334][T10277] netlink: 'syz.0.1996': attribute type 1 has an invalid length. [ 153.446257][T10290] loop3: detected capacity change from 0 to 1024 [ 153.453224][T10290] ext4: Unknown parameter 'dont_hash' [ 153.504155][T10290] loop3: detected capacity change from 0 to 8192 [ 153.543199][T10292] netlink: 'syz.4.2001': attribute type 5 has an invalid length. [ 153.628008][T10292] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(10) [ 153.634660][T10292] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 153.642175][T10292] vhci_hcd vhci_hcd.0: Device attached [ 153.650227][T10294] vhci_hcd: connection closed [ 153.651260][ T6980] vhci_hcd: stop threads [ 153.660227][ T6980] vhci_hcd: release socket [ 153.664635][ T6980] vhci_hcd: disconnect device [ 153.799312][T10304] loop3: detected capacity change from 0 to 512 [ 153.806884][T10304] EXT4-fs: Ignoring removed nomblk_io_submit option [ 153.816149][T10304] EXT4-fs error (device loop3): ext4_expand_extra_isize_ea:2812: inode #11: comm syz.3.2004: corrupted xattr block 95: invalid header [ 153.831032][T10304] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.2004: bg 0: block 7: invalid block bitmap [ 153.845514][T10304] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 153.854524][T10304] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2978: inode #11: comm syz.3.2004: corrupted xattr block 95: invalid header [ 153.870091][T10304] EXT4-fs warning (device loop3): ext4_evict_inode:271: xattr delete (err -117) [ 153.879239][T10304] EXT4-fs (loop3): 1 orphan inode deleted [ 153.885449][T10304] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 153.901793][ T29] audit: type=1400 audit(2000000019.826:1023): avc: denied { remount } for pid=10303 comm="syz.3.2004" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 153.918834][T10304] ext4: Unknown parameter 'ÿÿÿÿÿÿÿÿÿÿ01777777777777777777777ñ¼ÊíXc¥vÌ:ýQºòœÞ' [ 153.930701][T10304] ext4: Unknown parameter 'ÿÿÿÿÿÿÿÿÿÿ01777777777777777777777ñ¼ÊíXc¥vÌ:ýQºòœÞ' [ 153.930887][T10307] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: none. [ 153.940039][T10304] ext4: Unknown parameter 'ÿÿÿÿÿÿÿÿÿÿ01777777777777777777777ñ¼ÊíXc¥vÌ:ýQºòœÞ' [ 153.961093][T10313] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=26648 sclass=netlink_route_socket pid=10313 comm=syz.2.2005 [ 153.975875][ T9327] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.055227][T10315] loop3: detected capacity change from 0 to 1024 [ 154.062230][T10315] ext4: Unknown parameter 'appraise_type' [ 154.070891][T10315] No such timeout policy "syz0" [ 154.077747][T10322] netlink: 92 bytes leftover after parsing attributes in process `syz.2.2009'. [ 154.133811][T10326] loop3: detected capacity change from 0 to 256 [ 154.289766][T10335] loop0: detected capacity change from 0 to 1024 [ 154.303232][T10335] ext4: Unknown parameter 'dont_hash' [ 154.317746][T10338] syz.3.2011[10338] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 154.317810][T10338] syz.3.2011[10338] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 154.360831][T10335] loop0: detected capacity change from 0 to 8192 [ 154.437579][T10345] batman_adv: batadv1: Interface deactivated: netdevsim0 [ 154.444716][T10345] batman_adv: batadv1: Removing interface: netdevsim0 [ 154.484483][T10350] loop4: detected capacity change from 0 to 764 [ 154.566754][T10353] loop4: detected capacity change from 0 to 1024 [ 154.585101][T10353] ext4: Unknown parameter 'dont_hash' [ 154.662808][T10353] loop4: detected capacity change from 0 to 8192 [ 154.985668][T10359] loop2: detected capacity change from 0 to 1024 [ 155.040661][T10359] EXT4-fs: Ignoring removed orlov option [ 155.046652][T10359] EXT4-fs: Ignoring removed nomblk_io_submit option [ 155.058594][T10360] loop0: detected capacity change from 0 to 1024 [ 155.066030][T10360] ext4: Unknown parameter 'appraise_type' [ 155.086430][T10359] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 155.117669][T10357] No such timeout policy "syz0" [ 155.146379][ T9120] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.230325][T10368] loop3: detected capacity change from 0 to 128 [ 155.274231][T10380] loop4: detected capacity change from 0 to 2048 [ 155.280910][T10384] loop2: detected capacity change from 0 to 1024 [ 155.290058][T10384] ext4: Unknown parameter 'dont_hash' [ 155.333968][T10384] loop2: detected capacity change from 0 to 8192 [ 155.370323][T10390] loop3: detected capacity change from 0 to 1024 [ 155.403626][T10390] ext4: Unknown parameter 'appraise_type' [ 155.416279][T10390] No such timeout policy "syz0" [ 155.451933][T10397] loop3: detected capacity change from 0 to 256 [ 155.672617][T10403] syz.3.2036[10403] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 155.672669][T10403] syz.3.2036[10403] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 155.692649][ T29] audit: type=1326 audit(2000000021.468:1024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10393 comm="syz.4.2035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f12125b59 code=0x7ffc0000 [ 155.777505][ T29] audit: type=1326 audit(2000000021.468:1025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10393 comm="syz.4.2035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5f12125b59 code=0x7ffc0000 [ 155.801013][ T29] audit: type=1326 audit(2000000021.468:1026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10393 comm="syz.4.2035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f12125b59 code=0x7ffc0000 [ 155.824634][ T29] audit: type=1326 audit(2000000021.468:1027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10393 comm="syz.4.2035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f5f12125b59 code=0x7ffc0000 [ 155.848108][ T29] audit: type=1326 audit(2000000021.468:1028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10393 comm="syz.4.2035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f12125b59 code=0x7ffc0000 [ 155.871700][ T29] audit: type=1326 audit(2000000021.468:1029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10393 comm="syz.4.2035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=285 compat=0 ip=0x7f5f12125b59 code=0x7ffc0000 [ 155.895168][ T29] audit: type=1326 audit(2000000021.468:1030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10393 comm="syz.4.2035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f12125b59 code=0x7ffc0000 [ 155.918773][ T29] audit: type=1326 audit(2000000021.468:1031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10393 comm="syz.4.2035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f5f12125b59 code=0x7ffc0000 [ 155.942125][ T29] audit: type=1326 audit(2000000021.468:1032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10393 comm="syz.4.2035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f12125b59 code=0x7ffc0000 [ 156.177638][T10415] hub 5-0:1.0: USB hub found [ 156.190124][T10415] hub 5-0:1.0: 8 ports detected [ 156.241706][T10419] program syz.2.2042 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 156.266069][T10418] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2042'. [ 156.327979][T10422] loop0: detected capacity change from 0 to 1024 [ 156.334600][T10424] autofs4:pid:10424:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(1000000.1), cmd(0xc018937e) [ 156.348382][T10424] autofs4:pid:10424:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc018937e) [ 156.367734][T10422] ext4: Unknown parameter 'dont_hash' [ 156.432201][T10422] loop0: detected capacity change from 0 to 8192 [ 156.556603][T10441] loop2: detected capacity change from 0 to 1024 [ 156.595116][T10441] ext4: Unknown parameter 'appraise_type' [ 156.623118][T10439] No such timeout policy "syz0" [ 156.713107][T10453] loop4: detected capacity change from 0 to 1024 [ 156.733249][T10453] ext4: Unknown parameter 'dont_hash' [ 156.754077][T10454] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2050'. [ 156.765797][T10457] loop3: detected capacity change from 0 to 1764 [ 156.774758][T10457] ISOFS: Logical zone size(0) < hardware blocksize(1024) [ 156.791515][T10457] openvswitch: netlink: VXLAN extension 0 has unexpected len 5 expected 0 [ 156.815450][T10462] netlink: 'syz.2.2055': attribute type 1 has an invalid length. [ 156.819269][T10453] loop4: detected capacity change from 0 to 8192 [ 156.835607][T10462] bond1: entered promiscuous mode [ 156.847983][T10462] bond1: (slave ip6gretap1): making interface the new active one [ 156.855848][T10462] ip6gretap1: entered promiscuous mode [ 156.862514][T10462] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 156.873206][T10462] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2055'. [ 156.888447][T10462] bond1 (unregistering): (slave ip6gretap1): Releasing active interface [ 156.896836][T10462] ip6gretap1: left promiscuous mode [ 156.907996][T10462] bond1 (unregistering): Released all slaves [ 156.934330][T10470] loop0: detected capacity change from 0 to 256 [ 156.943812][ T9299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.002919][T10474] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 157.076015][T10484] program syz.4.2062 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 157.148787][T10498] syz.0.2057[10498] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 157.148868][T10498] syz.0.2057[10498] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 157.162088][T10494] FAULT_INJECTION: forcing a failure. [ 157.162088][T10494] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 157.186961][T10494] CPU: 0 PID: 10494 Comm: syz.4.2065 Not tainted 6.10.0-syzkaller-08676-g720261cfc732 #0 [ 157.196829][T10494] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 157.206877][T10494] Call Trace: [ 157.210178][T10494] [ 157.213098][T10494] dump_stack_lvl+0xf2/0x150 [ 157.217761][T10494] dump_stack+0x15/0x20 [ 157.221952][T10494] should_fail_ex+0x229/0x230 [ 157.226682][T10494] __should_fail_alloc_page+0xfd/0x110 [ 157.232183][T10494] __alloc_pages_noprof+0x109/0x360 [ 157.237382][T10494] alloc_pages_mpol_noprof+0xb1/0x1e0 [ 157.242801][T10494] shmem_get_folio_gfp+0x3e4/0xb70 [ 157.247906][T10494] shmem_write_begin+0xa0/0x1c0 [ 157.252758][T10494] generic_perform_write+0x1b4/0x580 [ 157.258071][T10494] shmem_file_write_iter+0xc8/0xf0 [ 157.263178][T10494] vfs_write+0x78f/0x900 [ 157.267432][T10494] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 157.273380][T10494] ksys_write+0xeb/0x1b0 [ 157.277615][T10494] __x64_sys_write+0x42/0x50 [ 157.282197][T10494] x64_sys_call+0x2a40/0x2e00 [ 157.286935][T10494] do_syscall_64+0xc9/0x1c0 [ 157.291424][T10494] ? clear_bhb_loop+0x55/0xb0 [ 157.296105][T10494] ? clear_bhb_loop+0x55/0xb0 [ 157.300800][T10494] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.306725][T10494] RIP: 0033:0x7f5f121246df [ 157.311125][T10494] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 29 8c 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 7c 8c 02 00 48 [ 157.330717][T10494] RSP: 002b:00007f5f113a6d50 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 157.339174][T10494] RAX: ffffffffffffffda RBX: 0000000000100000 RCX: 00007f5f121246df [ 157.347163][T10494] RDX: 0000000000100000 RSI: 00007f5f08f87000 RDI: 0000000000000004 [ 157.355120][T10494] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000597 [ 157.363100][T10494] R10: 0000000020000b82 R11: 0000000000000293 R12: 0000000000000004 [ 157.371128][T10494] R13: 00007f5f113a6dfc R14: 00007f5f113a6e00 R15: 00007f5f08f87000 [ 157.379117][T10494] [ 157.394367][T10503] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2067'. [ 157.425624][T10505] loop4: detected capacity change from 0 to 1024 [ 157.435529][T10503] macsec1: entered promiscuous mode [ 157.440793][T10503] macvlan0: entered promiscuous mode [ 157.446711][T10505] ext4: Unknown parameter 'dont_hash' [ 157.469523][ T6991] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.531350][ T6991] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.542066][T10505] loop4: detected capacity change from 0 to 8192 [ 157.554685][T10471] chnl_net:caif_netlink_parms(): no params data found [ 157.592013][T10508] loop2: detected capacity change from 0 to 256 [ 157.603206][T10508] loop2: detected capacity change from 0 to 128 [ 157.615422][ T6991] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.639869][T10508] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 157.644665][T10517] loop3: detected capacity change from 0 to 128 [ 157.667641][T10471] bridge0: port 1(bridge_slave_0) entered blocking state [ 157.674704][T10471] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.674989][T10508] ext4 filesystem being mounted at /99/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 157.700096][T10471] bridge_slave_0: entered allmulticast mode [ 157.723096][T10471] bridge_slave_0: entered promiscuous mode [ 157.741614][ T6991] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.758328][T10471] bridge0: port 2(bridge_slave_1) entered blocking state [ 157.758398][ T9120] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 157.765392][T10471] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.778901][T10471] bridge_slave_1: entered allmulticast mode [ 157.789706][T10520] FAULT_INJECTION: forcing a failure. [ 157.789706][T10520] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 157.802850][T10520] CPU: 0 PID: 10520 Comm: syz.3.2071 Not tainted 6.10.0-syzkaller-08676-g720261cfc732 #0 [ 157.812655][T10520] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 157.822710][T10520] Call Trace: [ 157.825985][T10520] [ 157.828921][T10520] dump_stack_lvl+0xf2/0x150 [ 157.833549][T10520] dump_stack+0x15/0x20 [ 157.837756][T10520] should_fail_ex+0x229/0x230 [ 157.842559][T10520] should_fail+0xb/0x10 [ 157.846825][T10520] should_fail_usercopy+0x1a/0x20 [ 157.851854][T10520] _copy_from_user+0x1e/0xd0 [ 157.856456][T10520] rds_rdma_extra_size+0xe7/0x260 [ 157.861555][T10520] rds_rm_size+0x31b/0x480 [ 157.865970][T10520] rds_sendmsg+0x815/0x1400 [ 157.870500][T10520] ? __pfx_rds_sendmsg+0x10/0x10 [ 157.875433][T10520] __sock_sendmsg+0x140/0x180 [ 157.880154][T10520] ____sys_sendmsg+0x312/0x410 [ 157.884910][T10520] __sys_sendmsg+0x1e9/0x280 [ 157.889642][T10520] __x64_sys_sendmsg+0x46/0x50 [ 157.894411][T10520] x64_sys_call+0x26f8/0x2e00 [ 157.899081][T10520] do_syscall_64+0xc9/0x1c0 [ 157.903570][T10520] ? clear_bhb_loop+0x55/0xb0 [ 157.908242][T10520] ? clear_bhb_loop+0x55/0xb0 [ 157.912922][T10520] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.918878][T10520] RIP: 0033:0x7f0af4315b59 [ 157.923286][T10520] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 157.942892][T10520] RSP: 002b:00007f0af3597048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 157.951295][T10520] RAX: ffffffffffffffda RBX: 00007f0af44a5f60 RCX: 00007f0af4315b59 [ 157.959253][T10520] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000006 [ 157.967227][T10520] RBP: 00007f0af35970a0 R08: 0000000000000000 R09: 0000000000000000 [ 157.975238][T10520] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 157.983260][T10520] R13: 000000000000000b R14: 00007f0af44a5f60 R15: 00007fffa2b90208 [ 157.991294][T10520] [ 157.996639][T10471] bridge_slave_1: entered promiscuous mode [ 158.034197][T10471] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 158.056493][T10471] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 158.092581][T10529] loop4: detected capacity change from 0 to 1024 [ 158.104859][T10530] loop2: detected capacity change from 0 to 512 [ 158.134341][ T6991] bridge_slave_1: left allmulticast mode [ 158.140074][ T6991] bridge_slave_1: left promiscuous mode [ 158.145831][ T6991] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.154582][T10530] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 158.170933][ T6991] bridge_slave_0: left allmulticast mode [ 158.176581][ T6991] bridge_slave_0: left promiscuous mode [ 158.182352][ T6991] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.198708][T10529] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 158.214179][T10530] ext4 filesystem being mounted at /100/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 158.270845][T10530] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.389791][ T6991] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 158.405763][ T6991] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 158.415969][ T6991] bond0 (unregistering): Released all slaves [ 158.424843][T10471] team0: Port device team_slave_0 added [ 158.431919][T10471] team0: Port device team_slave_1 added [ 158.456338][T10546] loop3: detected capacity change from 0 to 1024 [ 158.462709][T10524] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 158.463222][T10546] ext4: Unknown parameter 'dont_hash' [ 158.501821][T10524] EXT4-fs (loop4): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 1 with error 28 [ 158.514332][T10524] EXT4-fs (loop4): This should not happen!! Data will be lost [ 158.514332][T10524] [ 158.523980][T10524] EXT4-fs (loop4): Total free blocks count 0 [ 158.529953][T10524] EXT4-fs (loop4): Free/Dirty block details [ 158.535967][T10524] EXT4-fs (loop4): free_blocks=68451041280 [ 158.541772][T10524] EXT4-fs (loop4): dirty_blocks=16 [ 158.546893][T10524] EXT4-fs (loop4): Block reservation details [ 158.552861][T10524] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 158.557934][T10546] loop3: detected capacity change from 0 to 8192 [ 158.599401][T10550] loop2: detected capacity change from 0 to 1024 [ 158.606034][T10550] ext4: Unknown parameter 'dont_hash' [ 158.624473][T10471] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 158.631442][T10471] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 158.645301][T10550] loop2: detected capacity change from 0 to 8192 [ 158.657370][T10471] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 158.677895][ T6991] hsr_slave_0: left promiscuous mode [ 158.686295][ T6991] hsr_slave_1: left promiscuous mode [ 158.692358][ T6991] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 158.699861][ T6991] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 158.710283][ T6991] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 158.717704][ T6991] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 158.732277][ T6991] veth1_macvtap: left promiscuous mode [ 158.737821][ T6991] veth0_macvtap: left promiscuous mode [ 158.743426][ T6991] veth1_vlan: left promiscuous mode [ 158.748707][ T6991] veth0_vlan: left promiscuous mode [ 158.872647][ T6991] team0 (unregistering): Port device team_slave_1 removed [ 158.894689][ T6991] team0 (unregistering): Port device team_slave_0 removed [ 158.960052][T10471] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 158.967021][T10471] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 158.993006][T10471] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 159.051263][T10558] loop2: detected capacity change from 0 to 764 [ 159.056104][T10471] hsr_slave_0: entered promiscuous mode [ 159.064671][T10471] hsr_slave_1: entered promiscuous mode [ 159.076399][T10471] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 159.084446][T10471] Cannot create hsr debugfs directory [ 159.200395][T10571] loop3: detected capacity change from 0 to 256 [ 159.405043][T10580] syz.3.2086[10580] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 159.405104][T10580] syz.3.2086[10580] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 159.418450][ T5217] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.556163][T10587] loop4: detected capacity change from 0 to 1024 [ 159.570012][T10587] ext4: Unknown parameter 'dont_hash' [ 159.621341][T10471] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 159.630149][T10471] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 159.643539][T10471] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 159.663683][T10587] loop4: detected capacity change from 0 to 8192 [ 159.672171][T10471] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 159.726884][T10589] loop0: detected capacity change from 0 to 8192 [ 159.807154][T10471] 8021q: adding VLAN 0 to HW filter on device bond0 [ 159.867791][T10471] 8021q: adding VLAN 0 to HW filter on device team0 [ 159.919795][ T24] bridge0: port 1(bridge_slave_0) entered blocking state [ 159.926950][ T24] bridge0: port 1(bridge_slave_0) entered forwarding state [ 159.998706][ T24] bridge0: port 2(bridge_slave_1) entered blocking state [ 160.005824][ T24] bridge0: port 2(bridge_slave_1) entered forwarding state [ 160.043096][T10471] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 160.053605][T10471] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 160.196835][T10605] loop2: detected capacity change from 0 to 1024 [ 160.210796][T10605] ext4: Unknown parameter 'appraise_type' [ 160.223624][T10601] No such timeout policy "syz0" [ 160.225195][T10471] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 160.264650][T10607] netlink: 112 bytes leftover after parsing attributes in process `syz.2.2095'. [ 160.424365][T10471] veth0_vlan: entered promiscuous mode [ 160.451134][T10471] veth1_vlan: entered promiscuous mode [ 160.460650][T10624] loop2: detected capacity change from 0 to 512 [ 160.473297][T10624] EXT4-fs: Ignoring removed bh option [ 160.480833][T10626] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2102'. [ 160.496103][T10624] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 160.507699][T10626] netlink: 'syz.3.2102': attribute type 8 has an invalid length. [ 160.519924][T10624] EXT4-fs (loop2): 1 truncate cleaned up [ 160.525950][T10624] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 160.539046][T10471] veth0_macvtap: entered promiscuous mode [ 160.548400][ T29] kauditd_printk_skb: 74 callbacks suppressed [ 160.548412][ T29] audit: type=1400 audit(2000000025.954:1107): avc: denied { getopt } for pid=10623 comm="syz.2.2100" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 160.576609][T10624] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.587174][T10471] veth1_macvtap: entered promiscuous mode [ 160.598605][T10471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 160.609140][T10471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.619039][T10471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 160.629475][T10471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.639350][T10471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 160.649915][T10471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.659855][T10471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 160.664453][T10637] loop3: detected capacity change from 0 to 1024 [ 160.670342][T10471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.677405][T10637] ext4: Unknown parameter 'appraise_type' [ 160.686505][T10471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 160.702733][T10471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.712556][T10471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 160.723032][T10471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.732826][T10471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 160.743261][T10471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.753125][T10471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 160.755872][T10638] No such timeout policy "syz0" [ 160.763560][T10471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.778199][T10471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 160.788612][T10471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.800922][T10471] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 160.809555][T10471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 160.820050][T10471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.829887][T10471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 160.840343][T10471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.850219][T10471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 160.860670][T10471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.870542][T10471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 160.880968][T10471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.890787][T10471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 160.901224][T10471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.911073][T10471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 160.921500][T10471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.931418][T10471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 160.941877][T10471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.951715][T10471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 160.962130][T10471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.971949][T10471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 160.982362][T10471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.003960][T10471] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 161.018578][T10640] netlink: 'syz.2.2106': attribute type 1 has an invalid length. [ 161.028996][T10471] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.037743][T10471] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.046425][T10471] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.055117][T10471] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.118013][T10655] loop0: detected capacity change from 0 to 256 [ 161.120357][T10656] loop1: detected capacity change from 0 to 128 [ 161.165479][T10650] loop3: detected capacity change from 0 to 8192 [ 161.170464][T10661] loop1: detected capacity change from 0 to 512 [ 161.180134][T10659] IPVS: set_ctl: invalid protocol: 108 0.0.0.0:20000 [ 161.189912][T10661] EXT4-fs error (device loop1): ext4_orphan_get:1391: inode #17: comm syz.1.2113: iget: bogus i_mode (0) [ 161.201349][T10666] loop2: detected capacity change from 0 to 512 [ 161.203711][T10661] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.2113: couldn't read orphan inode 17 (err -117) [ 161.208106][T10666] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 161.232285][T10661] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 161.260034][T10471] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.389711][T10687] netlink: 'syz.4.2121': attribute type 11 has an invalid length. [ 161.397688][T10687] netlink: 140 bytes leftover after parsing attributes in process `syz.4.2121'. [ 161.430746][T10689] netlink: 'syz.0.2122': attribute type 5 has an invalid length. [ 161.605738][T10696] loop0: detected capacity change from 0 to 1024 [ 161.612625][T10696] ext4: Unknown parameter 'dont_hash' [ 161.653823][T10696] loop0: detected capacity change from 0 to 8192 [ 161.930352][T10725] netlink: 'syz.1.2134': attribute type 5 has an invalid length. [ 161.980924][T10729] loop3: detected capacity change from 0 to 8192 [ 162.006334][ T6980] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x9b [ 162.056031][T10747] loop4: detected capacity change from 0 to 512 [ 162.065327][T10747] EXT4-fs (loop4): orphan cleanup on readonly fs [ 162.086471][T10747] Quota error (device loop4): do_check_range: Getting block 71 out of range 1-5 [ 162.089057][T10750] loop1: detected capacity change from 0 to 128 [ 162.095580][T10747] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 162.111307][T10747] EXT4-fs error (device loop4): ext4_acquire_dquot:6848: comm syz.4.2140: Failed to acquire dquot type 0 [ 162.123264][T10747] EXT4-fs (loop4): 1 truncate cleaned up [ 162.131360][T10747] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 162.150539][T10747] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2140'. [ 162.173977][ T5217] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.258591][T10765] loop0: detected capacity change from 0 to 1024 [ 162.280965][T10765] ext4: Unknown parameter 'dont_hash' [ 162.302421][T10767] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(12) [ 162.309123][T10767] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 162.316873][T10767] vhci_hcd vhci_hcd.0: Device attached [ 162.357173][ T29] audit: type=1400 audit(2000000027.625:1108): avc: denied { map } for pid=10766 comm="syz.4.2147" path="socket:[33381]" dev="sockfs" ino=33381 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 162.381467][T10768] vhci_hcd: connection closed [ 162.403788][ T11] vhci_hcd: stop threads [ 162.407735][T10765] loop0: detected capacity change from 0 to 8192 [ 162.408485][ T11] vhci_hcd: release socket [ 162.408492][ T11] vhci_hcd: disconnect device [ 162.434878][ T29] audit: type=1400 audit(2000000027.625:1109): avc: denied { accept } for pid=10766 comm="syz.4.2147" path="socket:[33381]" dev="sockfs" ino=33381 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 162.834134][T10791] loop2: detected capacity change from 0 to 8192 [ 163.034302][ T29] audit: type=1326 audit(2000000028.253:1110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10795 comm="syz.4.2156" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5f12125b59 code=0x0 [ 163.064164][T10800] loop0: detected capacity change from 0 to 512 [ 163.124187][T10800] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 163.167698][T10800] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=240 sclass=netlink_route_socket pid=10800 comm=syz.0.2158 [ 163.208290][T10803] loop1: detected capacity change from 0 to 8192 [ 163.234722][T10803] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 163.268438][T10810] loop0: detected capacity change from 0 to 1024 [ 163.280277][T10803] FAT-fs (loop1): error, fat_free_clusters: deleting FAT entry beyond EOF [ 163.288807][T10803] FAT-fs (loop1): Filesystem has been set read-only [ 163.291188][T10810] ext4: Unknown parameter 'dont_hash' [ 163.349259][T10824] FAULT_INJECTION: forcing a failure. [ 163.349259][T10824] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 163.356849][T10822] loop2: detected capacity change from 0 to 1024 [ 163.362701][T10824] CPU: 0 PID: 10824 Comm: syz.1.2164 Not tainted 6.10.0-syzkaller-08676-g720261cfc732 #0 [ 163.378496][T10824] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 163.388668][T10824] Call Trace: [ 163.391248][T10822] ext4: Unknown parameter 'dont_hash' [ 163.391935][T10824] [ 163.391943][T10824] dump_stack_lvl+0xf2/0x150 [ 163.404822][T10824] dump_stack+0x15/0x20 [ 163.409022][T10824] should_fail_ex+0x229/0x230 [ 163.413718][T10824] should_fail+0xb/0x10 [ 163.417904][T10824] should_fail_usercopy+0x1a/0x20 [ 163.422951][T10824] _copy_from_user+0x1e/0xd0 [ 163.427833][T10824] do_ipt_set_ctl+0x423/0x8b0 [ 163.432500][T10824] ? tcp_release_cb+0xfe/0x380 [ 163.437328][T10824] nf_setsockopt+0x195/0x1b0 [ 163.441911][T10824] ip_setsockopt+0xea/0x100 [ 163.446520][T10824] tcp_setsockopt+0x93/0xb0 [ 163.451018][T10824] sock_common_setsockopt+0x64/0x80 [ 163.456206][T10824] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 163.462151][T10824] __sys_setsockopt+0x1d8/0x250 [ 163.467002][T10824] __x64_sys_setsockopt+0x66/0x80 [ 163.472020][T10824] x64_sys_call+0x2a0e/0x2e00 [ 163.476723][T10824] do_syscall_64+0xc9/0x1c0 [ 163.481236][T10824] ? clear_bhb_loop+0x55/0xb0 [ 163.485965][T10824] ? clear_bhb_loop+0x55/0xb0 [ 163.490634][T10824] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.496564][T10824] RIP: 0033:0x7f3e76ba5b59 [ 163.501017][T10824] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 163.520866][T10824] RSP: 002b:00007f3e75e27048 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 163.529323][T10824] RAX: ffffffffffffffda RBX: 00007f3e76d35f60 RCX: 00007f3e76ba5b59 [ 163.537366][T10824] RDX: 0000000000000040 RSI: 0004000000000000 RDI: 0000000000000004 [ 163.545324][T10824] RBP: 00007f3e75e270a0 R08: 0000000000000248 R09: 0000000000000000 [ 163.553355][T10824] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000001 [ 163.561313][T10824] R13: 000000000000000b R14: 00007f3e76d35f60 R15: 00007ffe40582038 [ 163.569341][T10824] [ 163.617077][T10810] loop0: detected capacity change from 0 to 8192 [ 163.630635][T10830] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2166'. [ 163.643062][T10807] chnl_net:caif_netlink_parms(): no params data found [ 163.702415][T10826] loop2: detected capacity change from 0 to 8192 [ 163.722379][T10807] bridge0: port 1(bridge_slave_0) entered blocking state [ 163.729510][T10807] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.761526][T10844] loop1: detected capacity change from 0 to 256 [ 163.781108][T10807] bridge_slave_0: entered allmulticast mode [ 163.786570][T10843] loop3: detected capacity change from 0 to 8192 [ 163.794241][T10807] bridge_slave_0: entered promiscuous mode [ 163.801357][T10807] bridge0: port 2(bridge_slave_1) entered blocking state [ 163.808419][T10807] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.817184][T10807] bridge_slave_1: entered allmulticast mode [ 163.824634][T10807] bridge_slave_1: entered promiscuous mode [ 163.859377][T10807] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 163.871971][T10807] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 163.904981][T10807] team0: Port device team_slave_0 added [ 163.922376][T10807] team0: Port device team_slave_1 added [ 163.961063][T10807] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 163.968296][T10807] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 163.994295][T10807] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 164.008790][T10807] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 164.015784][T10807] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 164.041894][T10807] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 164.110741][T10807] hsr_slave_0: entered promiscuous mode [ 164.119101][T10851] syz.1.2170[10851] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 164.119169][T10851] syz.1.2170[10851] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 164.139014][T10807] hsr_slave_1: entered promiscuous mode [ 164.161304][T10807] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 164.175185][T10807] Cannot create hsr debugfs directory [ 164.283588][ T29] audit: type=1400 audit(2000000029.406:1111): avc: denied { accept } for pid=10861 comm="syz.3.2176" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 164.330872][T10807] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.346030][T10862] tap0: tun_chr_ioctl cmd 3288372253 [ 164.358451][T10862] tap0: tun_chr_ioctl cmd 1074025680 [ 164.393088][T10870] loop2: detected capacity change from 0 to 512 [ 164.412345][T10807] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.462177][T10870] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 164.493271][T10870] ext4 filesystem being mounted at /119/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 164.507185][T10807] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.538512][ T9120] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.564539][T10807] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.605700][ T29] audit: type=1326 audit(2000000029.702:1112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10883 comm="syz.2.2184" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2fdc0d5b59 code=0x0 [ 164.652812][T10807] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 164.669443][T10807] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 164.678527][T10807] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 164.687165][T10807] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 164.707030][T10807] bridge0: port 2(bridge_slave_1) entered blocking state [ 164.714156][T10807] bridge0: port 2(bridge_slave_1) entered forwarding state [ 164.721534][T10807] bridge0: port 1(bridge_slave_0) entered blocking state [ 164.728570][T10807] bridge0: port 1(bridge_slave_0) entered forwarding state [ 164.745688][ T3164] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.758147][ T3164] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.811035][T10892] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2187'. [ 164.829599][T10807] 8021q: adding VLAN 0 to HW filter on device bond0 [ 164.846978][T10807] 8021q: adding VLAN 0 to HW filter on device team0 [ 164.858103][ T3164] bridge0: port 1(bridge_slave_0) entered blocking state [ 164.865267][ T3164] bridge0: port 1(bridge_slave_0) entered forwarding state [ 164.884636][T10146] bridge0: port 2(bridge_slave_1) entered blocking state [ 164.891773][T10146] bridge0: port 2(bridge_slave_1) entered forwarding state [ 164.924547][ T29] audit: type=1400 audit(2000000029.997:1113): avc: denied { lock } for pid=10898 comm="syz.1.2190" path="socket:[33629]" dev="sockfs" ino=33629 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 164.984892][T10807] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 165.113260][T10807] veth0_vlan: entered promiscuous mode [ 165.117812][T10807] veth1_vlan: entered promiscuous mode [ 165.142589][T10807] veth0_macvtap: entered promiscuous mode [ 165.145263][T10807] veth1_macvtap: entered promiscuous mode [ 165.164565][T10807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 165.164582][T10807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.164619][T10807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 165.164632][T10807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.164641][T10807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 165.164654][T10807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.225560][T10807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 165.225582][T10807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.225597][T10807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 165.225631][T10807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.225646][T10807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 165.225659][T10807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.286518][T10807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 165.286532][T10807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.286542][T10807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 165.286553][T10807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.286564][T10807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 165.286598][T10807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.347305][T10807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 165.347320][T10807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.350402][T10807] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 165.399945][T10807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 165.399985][T10807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.399995][T10807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 165.430694][T10807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.430712][T10807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 165.430724][T10807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.430738][T10807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 165.430750][T10807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.430763][T10807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 165.430775][T10807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.501696][T10807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 165.501709][T10807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.501736][T10807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 165.501745][T10807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.501755][T10807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 165.501764][T10807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.501789][T10807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 165.573083][T10807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.573102][T10807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 165.573120][T10807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.608037][T10807] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 165.612700][T10807] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.612808][T10807] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.612833][T10807] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.612857][T10807] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.705234][T10922] loop3: detected capacity change from 0 to 1024 [ 165.705442][T10922] ext4: Unknown parameter 'dont_hash' [ 165.732313][T10927] TCP: TCP_TX_DELAY enabled [ 165.792320][T10931] loop4: detected capacity change from 0 to 256 [ 165.851166][T10922] loop3: detected capacity change from 0 to 8192 [ 166.125051][T10945] syz.4.2195[10945] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 166.125182][T10945] syz.4.2195[10945] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 166.159413][T10944] loop1: detected capacity change from 0 to 8192 [ 166.203829][T10949] dccp_v6_rcv: dropped packet with invalid checksum [ 166.213501][T10944] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 166.300514][T10959] loop3: detected capacity change from 0 to 512 [ 166.333894][T10959] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 166.380635][T10959] EXT4-fs (loop3): 1 truncate cleaned up [ 166.389625][T10959] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 166.417780][T10959] FAULT_INJECTION: forcing a failure. [ 166.417780][T10959] name failslab, interval 1, probability 0, space 0, times 0 [ 166.430602][T10959] CPU: 1 PID: 10959 Comm: syz.3.2203 Not tainted 6.10.0-syzkaller-08676-g720261cfc732 #0 [ 166.440407][T10959] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 166.450457][T10959] Call Trace: [ 166.453802][T10959] [ 166.456725][T10959] dump_stack_lvl+0xf2/0x150 [ 166.461391][T10959] dump_stack+0x15/0x20 [ 166.465602][T10959] should_fail_ex+0x229/0x230 [ 166.470358][T10959] ? ext4_htree_store_dirent+0x5d/0x2a0 [ 166.475993][T10959] __should_failslab+0x92/0xa0 [ 166.480815][T10959] should_failslab+0x9/0x20 [ 166.485319][T10959] __kmalloc_noprof+0xa5/0x370 [ 166.490085][T10959] ext4_htree_store_dirent+0x5d/0x2a0 [ 166.495464][T10959] htree_dirblock_to_tree+0x4c3/0x630 [ 166.500835][T10959] ext4_htree_fill_tree+0x429/0x9c0 [ 166.506033][T10959] ? terminate_walk+0x260/0x280 [ 166.510920][T10959] ? filldir+0x365/0x400 [ 166.515158][T10959] ext4_readdir+0x15b2/0x1ac0 [ 166.519841][T10959] ? kstrtouint_from_user+0xb0/0xe0 [ 166.525032][T10959] ? __rcu_read_unlock+0x4e/0x70 [ 166.530017][T10959] ? get_pid_task+0x8e/0xc0 [ 166.534514][T10959] ? proc_fail_nth_write+0x12d/0x160 [ 166.539802][T10959] ? down_read_killable+0x172/0x6b0 [ 166.545110][T10959] ? selinux_file_permission+0x22c/0x360 [ 166.550776][T10959] iterate_dir+0x12c/0x330 [ 166.555212][T10959] __se_sys_getdents+0x88/0x1a0 [ 166.560071][T10959] ? __pfx_filldir+0x10/0x10 [ 166.564745][T10959] __x64_sys_getdents+0x43/0x50 [ 166.569632][T10959] x64_sys_call+0x281a/0x2e00 [ 166.574305][T10959] do_syscall_64+0xc9/0x1c0 [ 166.578852][T10959] ? clear_bhb_loop+0x55/0xb0 [ 166.583658][T10959] ? clear_bhb_loop+0x55/0xb0 [ 166.588337][T10959] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.594246][T10959] RIP: 0033:0x7f0af4315b59 [ 166.598659][T10959] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 166.618271][T10959] RSP: 002b:00007f0af3597048 EFLAGS: 00000246 ORIG_RAX: 000000000000004e [ 166.626767][T10959] RAX: ffffffffffffffda RBX: 00007f0af44a5f60 RCX: 00007f0af4315b59 [ 166.634742][T10959] RDX: 00000000000000b8 RSI: 0000000020001fc0 RDI: 0000000000000005 [ 166.642720][T10959] RBP: 00007f0af35970a0 R08: 0000000000000000 R09: 0000000000000000 [ 166.650707][T10959] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 166.658765][T10959] R13: 000000000000000b R14: 00007f0af44a5f60 R15: 00007fffa2b90208 [ 166.666760][T10959] [ 166.753921][ T9327] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.766777][T10973] loop2: detected capacity change from 0 to 512 [ 166.775043][T10973] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 166.808964][T10973] EXT4-fs (loop2): 1 truncate cleaned up [ 166.816501][T10973] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 166.826969][T10979] syz.0.2211[10979] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 166.828545][T10979] syz.0.2211[10979] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 166.872329][ T9120] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.875274][T10979] syz.0.2211[10979] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 166.919214][T10979] syz.0.2211[10979] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 167.086916][T11008] loop1: detected capacity change from 0 to 1024 [ 167.144853][T11013] netlink: 'syz.4.2223': attribute type 5 has an invalid length. [ 167.170643][T11020] loop2: detected capacity change from 0 to 256 [ 167.510972][T11013] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(10) [ 167.517589][T11013] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 167.525457][T11013] vhci_hcd vhci_hcd.0: Device attached [ 167.560724][T11024] vhci_hcd: connection closed [ 167.560925][ T3293] vhci_hcd: stop threads [ 167.569995][ T3293] vhci_hcd: release socket [ 167.574428][ T3293] vhci_hcd: disconnect device [ 167.739569][T11037] syz.2.2226[11037] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 167.739657][T11037] syz.2.2226[11037] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 167.932708][T11033] tipc: Invalid UDP bearer configuration [ 167.944174][T11033] tipc: Enabling of bearer rejected, failed to enable media [ 167.972141][T11047] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.979396][T11047] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.991341][T11047] bridge0: entered allmulticast mode [ 167.997390][ T29] audit: type=1400 audit(2000000032.831:1114): avc: denied { watch watch_reads } for pid=11031 comm="syz.3.2229" path=2F6465762F7074732F30202864656C6574656429 dev="devpts" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_devpts_t tclass=chr_file permissive=1 [ 168.135340][T11049] loop1: detected capacity change from 0 to 8192 [ 168.183740][T11055] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2237'. [ 168.236833][T11067] loop3: detected capacity change from 0 to 128 [ 168.244219][T11067] vfat: Unknown parameter '0000000000000000000301777777777777777777777±s¨Õ¢˜ÑU„V»wÛÂÿ.ó‹µÄÞ\(ÏšD 3æ' [ 168.306271][T11062] syz.0.2233[11062] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 168.306329][T11062] syz.0.2233[11062] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 168.310613][T11072] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2243'. [ 168.384982][T11067] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x3 [ 168.457655][T11087] netlink: 'syz.0.2248': attribute type 5 has an invalid length. [ 168.497699][T11087] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(10) [ 168.504324][T11087] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 168.511836][T11087] vhci_hcd vhci_hcd.0: Device attached [ 168.519735][T11096] usbip_core: unknown command [ 168.524508][T11096] vhci_hcd: unknown pdu 75816550 [ 168.529460][T11096] usbip_core: unknown command [ 168.532521][T11101] loop3: detected capacity change from 0 to 1024 [ 168.540671][T11091] netlink: zone id is out of range [ 168.546211][T11091] netlink: del zone limit has 4 unknown bytes [ 168.552583][ T6980] vhci_hcd: stop threads [ 168.556217][T11101] ext4: Unknown parameter 'dont_hash' [ 168.556907][ T6980] vhci_hcd: release socket [ 168.566725][ T6980] vhci_hcd: disconnect device [ 168.627126][T11101] loop3: detected capacity change from 0 to 8192 [ 168.639362][T11113] tap0: tun_chr_ioctl cmd 1074025675 [ 168.644695][T11113] tap0: persist enabled [ 168.852703][T11133] tmpfs: Bad value for 'mpol' [ 168.858818][T11133] loop2: detected capacity change from 0 to 256 [ 168.865372][T11133] vfat: Bad value for 'fmask' [ 168.941077][T11139] loop2: detected capacity change from 0 to 256 [ 169.101485][ T29] audit: type=1326 audit(2000000033.855:1115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11141 comm="syz.0.2269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32783e5b59 code=0x7ffc0000 [ 169.130028][ T29] audit: type=1326 audit(2000000033.874:1116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11141 comm="syz.0.2269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32783e5b59 code=0x7ffc0000 [ 169.153622][ T29] audit: type=1326 audit(2000000033.874:1117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11141 comm="syz.0.2269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f32783e5b59 code=0x7ffc0000 [ 169.177019][ T29] audit: type=1326 audit(2000000033.874:1118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11141 comm="syz.0.2269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32783e5b59 code=0x7ffc0000 [ 169.200559][ T29] audit: type=1326 audit(2000000033.874:1119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11144 comm="syz.0.2269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f3278417b45 code=0x7ffc0000 [ 169.224224][ T29] audit: type=1326 audit(2000000033.874:1120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11141 comm="syz.0.2269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7f32783e5b59 code=0x7ffc0000 [ 169.247701][ T29] audit: type=1326 audit(2000000033.874:1121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11141 comm="syz.0.2269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32783e5b59 code=0x7ffc0000 [ 169.271320][ T29] audit: type=1326 audit(2000000033.874:1122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11141 comm="syz.0.2269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32783e5b59 code=0x7ffc0000 [ 169.294948][ T29] audit: type=1326 audit(2000000033.874:1123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11141 comm="syz.0.2269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3278381569 code=0x7ffc0000 [ 169.534383][T11160] tmpfs: Bad value for 'mpol' [ 169.541658][T11160] loop1: detected capacity change from 0 to 256 [ 169.548495][T11160] vfat: Bad value for 'fmask' [ 169.640666][T11164] loop4: detected capacity change from 0 to 2048 [ 169.645059][T11166] loop1: detected capacity change from 0 to 128 [ 169.657325][T11166] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 169.671251][T11164] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 169.685134][T11166] ext4 filesystem being mounted at /40/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 169.727500][T11164] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 169.742523][T11164] EXT4-fs (loop4): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 16 with error 28 [ 169.754932][T11164] EXT4-fs (loop4): This should not happen!! Data will be lost [ 169.754932][T11164] [ 169.764575][T11164] EXT4-fs (loop4): Total free blocks count 0 [ 169.770720][T11164] EXT4-fs (loop4): Free/Dirty block details [ 169.776624][T11164] EXT4-fs (loop4): free_blocks=2415919104 [ 169.782429][T11164] EXT4-fs (loop4): dirty_blocks=16 [ 169.787538][T11164] EXT4-fs (loop4): Block reservation details [ 169.793554][T11164] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 169.814810][T10807] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.224461][T11198] loop4: detected capacity change from 0 to 2048 [ 170.271269][T11198] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 170.330899][T10807] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.450538][T11215] loop2: detected capacity change from 0 to 256 [ 170.458322][T11216] loop4: detected capacity change from 0 to 256 [ 170.589838][T10471] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 170.627230][T11222] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 170.676507][T11229] netlink: 'syz.4.2299': attribute type 5 has an invalid length. [ 170.688236][T11229] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(10) [ 170.695004][T11229] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 170.702533][T11229] vhci_hcd vhci_hcd.0: Device attached [ 170.711708][T11234] usbip_core: unknown command [ 170.716505][T11234] vhci_hcd: unknown pdu 75816550 [ 170.721467][T11234] usbip_core: unknown command [ 170.726970][ T6980] vhci_hcd: stop threads [ 170.731234][ T6980] vhci_hcd: release socket [ 170.735836][ T6980] vhci_hcd: disconnect device [ 170.751074][T11250] SELinux: policydb magic number 0xda3f4579 does not match expected magic number 0xf97cff8c [ 170.770232][T11250] SELinux: failed to load policy [ 170.801926][T11260] loop3: detected capacity change from 0 to 128 [ 170.808854][T11260] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 170.830603][T11265] netlink: 'syz.0.2311': attribute type 5 has an invalid length. [ 170.898728][T11277] netlink: 'syz.3.2316': attribute type 10 has an invalid length. [ 170.918982][T11277] team0: Failed to send options change via netlink (err -105) [ 170.927059][T11277] team0: Port device netdevsim1 added [ 170.938869][ T9] team0: Failed to send port change of device netdevsim1 via netlink (err -105) [ 170.949495][T11279] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2314'. [ 170.958559][T11277] netlink: 'syz.3.2316': attribute type 10 has an invalid length. [ 170.984407][T11281] loop3: detected capacity change from 0 to 512 [ 171.013287][T11281] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 171.026165][T11278] No such timeout policy "syz0" [ 171.043075][T11281] ext4 filesystem being mounted at /132/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 171.077706][ T9327] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.133236][T11301] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2325'. [ 171.148943][T11301] batman_adv: batadv1: Adding interface: netdevsim0 [ 171.155551][T11301] batman_adv: batadv1: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 171.185074][T11301] batman_adv: batadv1: Interface activated: netdevsim0 [ 171.238200][T11304] netlink: 5 bytes leftover after parsing attributes in process `syz.3.2326'. [ 171.248892][T11304] 0ªX¹¦D: renamed from gretap0 [ 171.257818][T11304] 0ªX¹¦D: entered allmulticast mode [ 171.263126][T11304] A link change request failed with some changes committed already. Interface 40ªX¹¦D may have been left with an inconsistent configuration, please check. [ 171.324238][T11310] loop4: detected capacity change from 0 to 512 [ 171.336705][T11310] EXT4-fs: Ignoring removed i_version option [ 171.342845][T11310] EXT4-fs: Ignoring removed nobh option [ 171.355096][T11310] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 171.371254][T11310] EXT4-fs (loop4): 1 truncate cleaned up [ 171.379296][T11310] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 171.394321][T11310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.526507][T11344] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2340'. [ 171.544937][T11346] loop2: detected capacity change from 0 to 512 [ 171.551585][T11346] EXT4-fs: Invalid want_extra_isize 13 [ 171.566770][T11346] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2341'. [ 171.627084][T11352] loop2: detected capacity change from 0 to 8192 [ 171.803382][T11357] loop1: detected capacity change from 0 to 1764 [ 171.810393][T11357] ISOFS: Logical zone size(0) < hardware blocksize(1024) [ 171.822388][T11357] openvswitch: netlink: VXLAN extension message has 12 unknown bytes. [ 171.851976][T11363] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2348'. [ 171.871883][T11363] bridge0: port 3(vlan0) entered blocking state [ 171.878234][T11363] bridge0: port 3(vlan0) entered disabled state [ 171.884906][T11363] vlan0: entered allmulticast mode [ 171.890059][T11363] veth0_vlan: entered allmulticast mode [ 171.896354][T11363] vlan0: entered promiscuous mode [ 171.901667][T11363] bridge0: mtu less than device minimum [ 171.907278][T11363] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 171.912056][T11368] program syz.2.2350 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 172.109856][T11375] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 172.117903][T11375] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 172.331219][T11419] tmpfs: Bad value for 'mpol' [ 172.376833][T11427] netlink: 84 bytes leftover after parsing attributes in process `syz.4.2373'. [ 172.385830][T11427] veth0_vlan: entered allmulticast mode [ 172.399282][T11429] netlink: 'syz.0.2374': attribute type 5 has an invalid length. [ 172.410780][T11429] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9) [ 172.417298][T11429] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 172.424764][T11429] vhci_hcd vhci_hcd.0: Device attached [ 172.429674][T11431] loop1: detected capacity change from 0 to 512 [ 172.431302][T11432] usbip_core: unknown command [ 172.441432][T11432] vhci_hcd: unknown pdu 75816550 [ 172.446406][T11432] usbip_core: unknown command [ 172.465082][T11431] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 172.477737][ T6991] vhci_hcd: stop threads [ 172.482069][ T6991] vhci_hcd: release socket [ 172.483546][T11442] tmpfs: Bad value for 'mpol' [ 172.486464][ T6991] vhci_hcd: disconnect device [ 172.492495][T11431] ext4 filesystem being mounted at /58/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 172.510638][T11442] loop4: detected capacity change from 0 to 256 [ 172.517295][T11442] vfat: Bad value for 'fmask' [ 172.522905][T10471] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.607263][T11455] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.626697][T11457] loop1: detected capacity change from 0 to 512 [ 172.641968][T11457] ext4 filesystem being mounted at /62/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 172.653295][T11457] EXT4-fs error (device loop1): ext4_search_dir:1505: inode #2: block 3: comm syz.1.2385: bad entry in directory: rec_len is smaller than minimal - offset=16444, inode=113, rec_len=0, size=2048 fake=0 [ 172.674353][T11457] EXT4-fs error (device loop1): ext4_add_entry:2435: inode #2: comm syz.1.2385: Directory hole found for htree leaf block 0 [ 172.688808][T11457] EXT4-fs error (device loop1): ext4_add_entry:2435: inode #2: comm syz.1.2385: Directory hole found for htree leaf block 0 [ 172.955199][T11485] loop2: detected capacity change from 0 to 512 [ 172.980603][T11467] chnl_net:caif_netlink_parms(): no params data found [ 173.022035][T11467] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.029177][T11467] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.039156][T11467] bridge_slave_0: entered allmulticast mode [ 173.041115][T11496] loop2: detected capacity change from 0 to 1024 [ 173.046554][T11467] bridge_slave_0: entered promiscuous mode [ 173.052015][T11496] EXT4-fs: Ignoring removed i_version option [ 173.061075][T11467] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.071077][T11467] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.079066][T11467] bridge_slave_1: entered allmulticast mode [ 173.085588][T11467] bridge_slave_1: entered promiscuous mode [ 173.100925][ T6991] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.124882][T11467] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 173.135374][T11467] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 173.159685][T11467] team0: Port device team_slave_0 added [ 173.169712][ T6991] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.184292][T11467] team0: Port device team_slave_1 added [ 173.199288][T11508] loop2: detected capacity change from 0 to 8192 [ 173.212006][T11467] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 173.219085][T11467] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 173.245009][T11467] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 173.259789][ T6991] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.271504][T11467] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 173.278442][T11467] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 173.304439][T11467] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 173.329617][ T6991] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.356188][T11467] hsr_slave_0: entered promiscuous mode [ 173.373674][T11467] hsr_slave_1: entered promiscuous mode [ 173.388236][T11467] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 173.395868][T11467] Cannot create hsr debugfs directory [ 173.422154][ T6991] vlan0: left allmulticast mode [ 173.427052][ T6991] veth0_vlan: left allmulticast mode [ 173.432495][ T6991] vlan0: left promiscuous mode [ 173.437387][ T6991] bridge0: port 3(vlan0) entered disabled state [ 173.445532][ T6991] bridge_slave_1: left allmulticast mode [ 173.451308][ T6991] bridge_slave_1: left promiscuous mode [ 173.457076][ T6991] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.464956][ T6991] bridge_slave_0: left allmulticast mode [ 173.470594][ T6991] bridge_slave_0: left promiscuous mode [ 173.476329][ T6991] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.505778][T11518] loop4: detected capacity change from 0 to 512 [ 173.523809][T11518] loop4: detected capacity change from 0 to 1024 [ 173.542495][T11518] ext4 filesystem being mounted at /35/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 173.586500][ T6991] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 173.596929][ T6991] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 173.607616][ T6991] bond0 (unregistering): Released all slaves [ 173.620095][T11525] netlink: 'syz.2.2405': attribute type 5 has an invalid length. [ 173.633976][T11525] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9) [ 173.640509][T11525] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 173.647985][T11525] vhci_hcd vhci_hcd.0: Device attached [ 173.654725][T11529] usbip_core: unknown command [ 173.659473][T11529] vhci_hcd: unknown pdu 75816550 [ 173.664402][T11529] usbip_core: unknown command [ 173.670778][ T6980] vhci_hcd: stop threads [ 173.671667][T11528] tmpfs: Bad value for 'mpol' [ 173.675013][ T6980] vhci_hcd: release socket [ 173.675021][ T6980] vhci_hcd: disconnect device [ 173.691501][T11528] loop4: detected capacity change from 0 to 256 [ 173.692064][T11514] loop3: detected capacity change from 0 to 512 [ 173.697836][T11528] vfat: Bad value for 'fmask' [ 173.707820][T11514] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.2400: invalid indirect mapped block 256 (level 2) [ 173.722521][T11514] EXT4-fs (loop3): 2 truncates cleaned up [ 173.771765][ T6991] hsr_slave_0: left promiscuous mode [ 173.777310][ T6991] hsr_slave_1: left promiscuous mode [ 173.783401][ T6991] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 173.790898][ T6991] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 173.798538][ T6991] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 173.806215][ T6991] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 173.817570][ T6991] veth1_macvtap: left promiscuous mode [ 173.823068][ T6991] veth0_macvtap: left promiscuous mode [ 173.828598][ T6991] veth1_vlan: left promiscuous mode [ 173.833881][ T6991] veth0_vlan: left promiscuous mode [ 173.836557][T11543] loop3: detected capacity change from 0 to 512 [ 173.848064][T11543] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps block group descriptors [ 173.858884][T11543] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 not in group (block 2)! [ 173.869205][T11543] EXT4-fs (loop3): group descriptors corrupted! [ 173.925589][ T6991] team0 (unregistering): Port device team_slave_1 removed [ 173.936867][ T6991] team0 (unregistering): Port device team_slave_0 removed [ 173.974338][T11543] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 173.997395][ T29] kauditd_printk_skb: 44 callbacks suppressed [ 173.997410][ T29] audit: type=1326 audit(2000000038.369:1168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11544 comm="syz.4.2411" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd563ff5b59 code=0x0 [ 174.292579][T11563] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2417'. [ 174.301473][T11563] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2417'. [ 174.312640][ T29] audit: type=1400 audit(2000000038.664:1169): avc: denied { read } for pid=11562 comm="syz.2.2417" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 174.314148][T11563] bridge0: port 1(team0) entered blocking state [ 174.336527][ T29] audit: type=1400 audit(2000000038.664:1170): avc: denied { open } for pid=11562 comm="syz.2.2417" path="/dev/nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 174.341946][T11563] bridge0: port 1(team0) entered disabled state [ 174.365636][ T29] audit: type=1400 audit(2000000038.664:1171): avc: denied { ioctl } for pid=11562 comm="syz.2.2417" path="/dev/nvram" dev="devtmpfs" ino=98 ioctlcmd=0x7041 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 174.374769][T11563] team0: entered allmulticast mode [ 174.401867][T11563] team_slave_0: entered allmulticast mode [ 174.407676][T11563] team_slave_1: entered allmulticast mode [ 174.414286][T11563] team0: entered promiscuous mode [ 174.419345][T11563] team_slave_0: entered promiscuous mode [ 174.425018][T11563] team_slave_1: entered promiscuous mode [ 174.431461][T11563] bridge0: port 1(team0) entered blocking state [ 174.437771][T11563] bridge0: port 1(team0) entered forwarding state [ 174.467560][ T29] audit: type=1400 audit(2000000038.802:1172): avc: denied { listen } for pid=11564 comm="syz.3.2418" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 174.474670][T11467] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 174.488513][ T29] audit: type=1400 audit(2000000038.802:1173): avc: denied { read } for pid=11564 comm="syz.3.2418" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 174.516600][T11467] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 174.525783][T11467] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 174.536198][T11467] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 174.548953][T11567] loop3: detected capacity change from 0 to 512 [ 174.718382][T11567] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a806c018, mo2=0103] [ 174.743086][T11567] System zones: 1-12 [ 174.747213][T11567] EXT4-fs error (device loop3): ext4_init_orphan_info:586: comm syz.3.2418: inode #0: comm syz.3.2418: iget: illegal inode # [ 174.768101][T11567] EXT4-fs (loop3): get orphan inode failed [ 174.774032][T11567] EXT4-fs (loop3): mount failed [ 174.782682][T11659] netlink: 'syz.2.2423': attribute type 5 has an invalid length. [ 174.795003][T11659] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(10) [ 174.801628][T11659] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 174.801802][T11467] 8021q: adding VLAN 0 to HW filter on device bond0 [ 174.809057][T11659] vhci_hcd vhci_hcd.0: Device attached [ 174.826112][T11660] usbip_core: unknown command [ 174.828661][T11467] 8021q: adding VLAN 0 to HW filter on device team0 [ 174.830859][T11660] vhci_hcd: unknown pdu 75816550 [ 174.840432][T10146] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.842528][T11660] usbip_core: unknown command [ 174.849377][T10146] bridge0: port 1(bridge_slave_0) entered forwarding state [ 174.864786][T11629] vhci_hcd: stop threads [ 174.869068][T11629] vhci_hcd: release socket [ 174.873561][T11629] vhci_hcd: disconnect device [ 174.875372][T10146] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.885375][T10146] bridge0: port 2(bridge_slave_1) entered forwarding state [ 174.951968][T11467] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 174.978514][T11676] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11676 comm=syz.4.2426 [ 175.018303][T11467] veth0_vlan: entered promiscuous mode [ 175.019989][ T29] audit: type=1326 audit(2000000039.310:1174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11664 comm="syz.3.2425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0af4315b59 code=0x7fc00000 [ 175.028235][T11467] veth1_vlan: entered promiscuous mode [ 175.065780][T11467] veth0_macvtap: entered promiscuous mode [ 175.073415][T11467] veth1_macvtap: entered promiscuous mode [ 175.078059][T11467] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 175.089592][T11467] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.099385][T11467] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 175.109903][T11467] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.119766][T11467] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 175.130187][T11467] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.139998][T11467] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 175.150776][T11467] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.160807][T11467] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 175.171304][T11467] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.171321][T11467] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 175.171334][T11467] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.201444][T11467] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 175.211918][T11467] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.221723][T11467] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 175.232182][T11467] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.241992][T11467] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 175.252407][T11467] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.262199][T11467] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 175.272632][T11467] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.283722][T11467] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 175.301493][T11683] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 175.318626][T11467] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 175.329114][T11467] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.329131][T11467] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 175.329143][T11467] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.329162][T11467] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 175.329174][T11467] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.379497][T11467] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 175.379512][T11467] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.379539][T11467] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 175.379552][T11467] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.420156][T11467] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 175.420171][T11467] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.420185][T11467] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 175.420276][T11467] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.420291][T11467] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 175.420304][T11467] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.420319][T11467] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 175.420332][T11467] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.420348][T11467] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 175.486442][T11687] tmpfs: Bad value for 'mpol' [ 175.491504][T11467] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.496536][T11467] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 175.535307][T11467] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.544180][T11467] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.552900][T11467] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.561722][T11467] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.599283][T11690] netlink: 'syz.1.2387': attribute type 4 has an invalid length. [ 175.625930][T11693] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2429'. [ 175.653816][T11699] batadv0: entered promiscuous mode [ 175.660209][T11701] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=59920 sclass=netlink_xfrm_socket pid=11701 comm=syz.2.2430 [ 175.673225][T11697] batadv0: left promiscuous mode [ 175.681854][ T29] audit: type=1326 audit(2000000039.928:1175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11703 comm="syz.4.2434" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd563ff5b59 code=0x0 [ 175.771912][T11714] loop1: detected capacity change from 0 to 8192 [ 175.828690][ T29] audit: type=1326 audit(2000000040.067:1176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11664 comm="syz.3.2425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0af4315b59 code=0x7fc00000 [ 175.837776][T11722] netlink: 'syz.2.2441': attribute type 5 has an invalid length. [ 175.880461][T11722] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(10) [ 175.887156][T11722] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 175.894682][T11722] vhci_hcd vhci_hcd.0: Device attached [ 175.908778][T11725] IPVS: length: 33 != 24 [ 175.962215][T11726] vhci_hcd: connection closed [ 175.962568][T11626] vhci_hcd: stop threads [ 175.971584][T11626] vhci_hcd: release socket [ 175.975995][T11626] vhci_hcd: disconnect device [ 176.006359][T10145] kernel write not supported for file /commit_pending_bools (pid: 10145 comm: kworker/1:7) [ 176.063451][T11735] loop3: detected capacity change from 0 to 128 [ 176.090523][T11735] vfat: Unknown parameter '01777777777777777777777ÿÿÿÿÿÿÿÿÿÿÿÿ' [ 176.220397][ T29] audit: type=1400 audit(2000000040.427:1177): avc: denied { map } for pid=11736 comm="syz.3.2446" path="/dev/vcs" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1 [ 176.257066][T11745] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.264453][T11745] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.314715][T11745] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.321866][T11745] bridge0: port 2(bridge_slave_1) entered forwarding state [ 176.329211][T11745] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.336283][T11745] bridge0: port 1(bridge_slave_0) entered forwarding state [ 176.343910][T11745] bridge0: entered promiscuous mode [ 176.349236][T11745] bridge0: entered allmulticast mode [ 176.393776][T11762] loop1: detected capacity change from 0 to 128 [ 176.395887][T11763] loop3: detected capacity change from 0 to 512 [ 176.412378][T11763] ext4 filesystem being mounted at /164/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 176.464917][T11763] loop3: detected capacity change from 512 to 64 [ 176.473831][T11777] loop1: detected capacity change from 0 to 512 [ 176.479427][ T9327] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5810: Out of memory [ 176.489923][T11777] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 176.491005][ T9327] EXT4-fs error (device loop3): ext4_dirty_inode:6014: inode #2: comm syz-executor: mark_inode_dirty error [ 176.499481][T11777] EXT4-fs (loop1): orphan cleanup on readonly fs [ 176.517111][T11777] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.2458: bg 0: block 248: padding at end of block bitmap is not set [ 176.532744][T11777] EXT4-fs error (device loop1): ext4_acquire_dquot:6848: comm syz.1.2458: Failed to acquire dquot type 1 [ 176.544750][T11777] EXT4-fs (loop1): 1 truncate cleaned up [ 176.554360][T11777] EXT4-fs error (device loop1): ext4_lookup:1815: inode #2: comm syz.1.2458: deleted inode referenced: 12 [ 176.610600][T11795] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 176.686695][T11807] loop4: detected capacity change from 0 to 1024 [ 176.695738][T11807] ext4: Unknown parameter 'dont_hash' [ 176.744314][T11807] loop4: detected capacity change from 0 to 8192 [ 176.781449][ T9327] EXT4-fs unmount: 11 callbacks suppressed [ 176.781464][ T9327] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.820249][T11629] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.877204][T11629] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.927798][T11629] team0: Port device netdevsim1 removed [ 176.936682][T11629] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.974643][T11629] batman_adv: batadv1: Interface deactivated: netdevsim0 [ 176.992932][T11629] batman_adv: batadv1: Removing interface: netdevsim0 [ 177.000421][T11629] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.076202][T11629] bridge_slave_1: left allmulticast mode [ 177.081937][T11629] bridge_slave_1: left promiscuous mode [ 177.087697][T11629] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.096065][T11629] bridge_slave_0: left allmulticast mode [ 177.101724][T11629] bridge_slave_0: left promiscuous mode [ 177.107483][T11629] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.258172][T11629] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 177.269081][T11629] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 177.279650][T11629] bond0 (unregistering): Released all slaves [ 177.287883][T11629] bond1 (unregistering): Released all slaves [ 177.314878][T11823] chnl_net:caif_netlink_parms(): no params data found [ 177.348145][T11823] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.355309][T11823] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.362605][T11823] bridge_slave_0: entered allmulticast mode [ 177.369282][T11823] bridge_slave_0: entered promiscuous mode [ 177.378319][T11629] hsr_slave_0: left promiscuous mode [ 177.384102][T11629] hsr_slave_1: left promiscuous mode [ 177.389915][T11629] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 177.397506][T11629] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 177.405327][T11629] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 177.412855][T11629] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 177.423148][T11629] veth1_macvtap: left promiscuous mode [ 177.428614][T11629] veth0_macvtap: left promiscuous mode [ 177.434138][T11629] veth1_vlan: left promiscuous mode [ 177.439345][T11629] veth0_vlan: left promiscuous mode [ 177.511385][T11845] FAULT_INJECTION: forcing a failure. [ 177.511385][T11845] name failslab, interval 1, probability 0, space 0, times 0 [ 177.524087][T11845] CPU: 1 PID: 11845 Comm: syz.2.2480 Not tainted 6.10.0-syzkaller-08676-g720261cfc732 #0 [ 177.533899][T11845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 177.543950][T11845] Call Trace: [ 177.547255][T11845] [ 177.550170][T11845] dump_stack_lvl+0xf2/0x150 [ 177.554776][T11845] dump_stack+0x15/0x20 [ 177.558932][T11845] should_fail_ex+0x229/0x230 [ 177.563654][T11845] ? __alloc_skb+0x10b/0x310 [ 177.568225][T11845] __should_failslab+0x92/0xa0 [ 177.573081][T11845] should_failslab+0x9/0x20 [ 177.577581][T11845] kmem_cache_alloc_node_noprof+0x51/0x2b0 [ 177.583371][T11845] __alloc_skb+0x10b/0x310 [ 177.587786][T11845] netlink_ack+0xef/0x4f0 [ 177.592122][T11845] nfnetlink_rcv+0x1363/0x15b0 [ 177.596905][T11845] netlink_unicast+0x593/0x670 [ 177.601648][T11845] netlink_sendmsg+0x5cc/0x6e0 [ 177.606464][T11845] ? __pfx_netlink_sendmsg+0x10/0x10 [ 177.611737][T11845] __sock_sendmsg+0x140/0x180 [ 177.616406][T11845] ____sys_sendmsg+0x312/0x410 [ 177.621214][T11845] __sys_sendmsg+0x1e9/0x280 [ 177.625835][T11845] __x64_sys_sendmsg+0x46/0x50 [ 177.630581][T11845] x64_sys_call+0x26f8/0x2e00 [ 177.635243][T11845] do_syscall_64+0xc9/0x1c0 [ 177.639736][T11845] ? clear_bhb_loop+0x55/0xb0 [ 177.644417][T11845] ? clear_bhb_loop+0x55/0xb0 [ 177.649103][T11845] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.655138][T11845] RIP: 0033:0x7f2fdc0d5b59 [ 177.659532][T11845] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 177.679192][T11845] RSP: 002b:00007f2fdb357048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 177.687625][T11845] RAX: ffffffffffffffda RBX: 00007f2fdc265f60 RCX: 00007f2fdc0d5b59 [ 177.695617][T11845] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 177.703569][T11845] RBP: 00007f2fdb3570a0 R08: 0000000000000000 R09: 0000000000000000 [ 177.711549][T11845] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 177.711561][T11845] R13: 000000000000004d R14: 00007f2fdc265f60 R15: 00007fff549ad938 [ 177.711576][T11845] [ 177.714571][T11629] team0 (unregistering): Port device team_slave_1 removed [ 177.785623][T11629] team0 (unregistering): Port device team_slave_0 removed [ 177.855201][T11823] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.862265][T11823] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.869630][T11823] bridge_slave_1: entered allmulticast mode [ 177.876316][T11823] bridge_slave_1: entered promiscuous mode [ 177.899194][T11851] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2482'. [ 177.929146][T11850] No such timeout policy "syz0" [ 178.184965][T11823] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 178.216018][T11823] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 178.262547][T11823] team0: Port device team_slave_0 added [ 178.286378][T11823] team0: Port device team_slave_1 added [ 178.344320][T11823] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 178.351320][T11823] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 178.377318][T11823] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 178.393943][T11823] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 178.400903][T11823] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 178.426847][T11823] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 178.485020][T11823] hsr_slave_0: entered promiscuous mode [ 178.491392][T11823] hsr_slave_1: entered promiscuous mode [ 178.501796][T11823] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 178.509494][T11823] Cannot create hsr debugfs directory [ 178.636992][T11883] netlink: 'syz.2.2494': attribute type 5 has an invalid length. [ 178.648084][T11883] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 178.654705][T11883] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 178.662193][T11883] vhci_hcd vhci_hcd.0: Device attached [ 178.670703][T11884] usbip_core: unknown command [ 178.675471][T11884] vhci_hcd: unknown pdu 75816550 [ 178.680392][T11884] usbip_core: unknown command [ 178.685335][T11639] vhci_hcd: stop threads [ 178.689607][T11639] vhci_hcd: release socket [ 178.694013][T11639] vhci_hcd: disconnect device [ 178.776691][T11886] cgroup: fork rejected by pids controller in /syz0 [ 178.823549][T11823] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 178.835372][T11823] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 178.847471][T11823] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 178.858482][T11823] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 178.909990][T11823] 8021q: adding VLAN 0 to HW filter on device bond0 [ 178.930575][T11823] 8021q: adding VLAN 0 to HW filter on device team0 [ 178.958009][ T24] bridge0: port 1(bridge_slave_0) entered blocking state [ 178.965084][ T24] bridge0: port 1(bridge_slave_0) entered forwarding state [ 178.980874][ T24] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.987964][ T24] bridge0: port 2(bridge_slave_1) entered forwarding state [ 179.058488][T11823] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 179.135385][T11823] veth0_vlan: entered promiscuous mode [ 179.144277][T11823] veth1_vlan: entered promiscuous mode [ 179.162200][T11823] veth0_macvtap: entered promiscuous mode [ 179.169969][T11823] veth1_macvtap: entered promiscuous mode [ 179.183505][T11823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 179.194044][T11823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.203893][T11823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 179.214382][T11823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.224373][T11823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 179.234836][T11823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.244734][T11823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 179.255217][T11823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.265101][T11823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 179.275627][T11823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.285468][T11823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 179.295877][T11823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.305936][T11823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 179.316520][T11823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.326315][T11823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 179.336776][T11823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.346565][T11823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 179.357000][T11823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.366826][T11823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 179.374129][T12048] loop1: detected capacity change from 0 to 128 [ 179.377344][T11823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.411694][T11823] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 179.440355][T11823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 179.450880][T11823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.460859][T11823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 179.471388][T11823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.481460][T11823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 179.491967][T11823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.501810][T11823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 179.512303][T11823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.522147][T11823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 179.532652][T11823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.542522][T11823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 179.553048][T11823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.562888][T11823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 179.573343][T11823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.583352][T11823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 179.593967][T11823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.603888][T11823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 179.614312][T11823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.624207][T11823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 179.634720][T11823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.669600][T11823] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 179.683337][T12050] netlink: 'syz.1.2506': attribute type 39 has an invalid length. [ 179.696310][ T29] kauditd_printk_skb: 16 callbacks suppressed [ 179.696323][ T29] audit: type=1400 audit(2000000043.620:1192): avc: denied { accept } for pid=12049 comm="syz.1.2506" path="socket:[37868]" dev="sockfs" ino=37868 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 179.726082][ T29] audit: type=1400 audit(2000000043.630:1193): avc: granted { setsecparam } for pid=12061 comm="syz.0.2510" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 179.749267][T12050] veth1_macvtap: left promiscuous mode [ 179.776747][T12057] bridge: RTM_NEWNEIGH with invalid state 0x0 [ 179.789560][T11823] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.798381][T11823] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.807205][T11823] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.815945][T11823] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.874187][T12067] loop3: detected capacity change from 0 to 1024 [ 179.883820][T12067] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 179.908541][T11823] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.088199][ T29] audit: type=1400 audit(2000000043.990:1194): avc: denied { mount } for pid=12051 comm="syz.2.2507" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 180.450383][T12073] loop4: detected capacity change from 0 to 256 [ 180.490008][T12076] 9pnet_fd: Insufficient options for proto=fd [ 180.533962][T12078] 9pnet_fd: Insufficient options for proto=fd [ 180.557782][T12078] bond_slave_0: entered promiscuous mode [ 180.563451][T12078] bond_slave_1: entered promiscuous mode [ 180.569905][T12078] bond_slave_0: left promiscuous mode [ 180.575377][T12078] bond_slave_1: left promiscuous mode [ 180.584256][T12077] bpf_get_probe_write_proto: 4 callbacks suppressed [ 180.584270][T12077] syz.4.2512[12077] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 180.590979][T12077] syz.4.2512[12077] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 180.591248][T12078] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 180.629475][T12078] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 180.641951][T12078] bond0 (unregistering): Released all slaves [ 180.681052][ T29] audit: type=1400 audit(2000000044.543:1195): avc: denied { unmount } for pid=9120 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 180.763212][T12087] netlink: 'syz.2.2516': attribute type 5 has an invalid length. [ 180.772194][T12087] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 180.778748][T12087] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 180.786241][T12087] vhci_hcd vhci_hcd.0: Device attached [ 180.792432][T12088] usbip_core: unknown command [ 180.797128][T12088] vhci_hcd: unknown pdu 75816550 [ 180.802144][T12088] usbip_core: unknown command [ 180.807092][T11639] vhci_hcd: stop threads [ 180.811411][T11639] vhci_hcd: release socket [ 180.815836][T11639] vhci_hcd: disconnect device [ 181.405652][T12101] loop3: detected capacity change from 0 to 1024 [ 181.412256][T12101] ext4: Unknown parameter 'dont_hash' [ 181.452699][T12101] loop3: detected capacity change from 0 to 8192 [ 181.479023][ T29] audit: type=1326 audit(2000000045.273:1196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12102 comm="syz.0.2523" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f32783e5b59 code=0x0 [ 181.697245][T12126] loop3: detected capacity change from 0 to 512 [ 181.711005][T12126] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 181.723694][T12126] ext4 filesystem being mounted at /8/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 181.740984][T11823] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.767571][T12136] loop3: detected capacity change from 0 to 256 [ 181.896258][T12137] syz.3.2532[12137] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 181.896297][T12137] syz.3.2532[12137] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 182.111443][T12142] 9pnet_fd: Insufficient options for proto=fd [ 182.147831][T12142] bond_slave_0: entered promiscuous mode [ 182.153523][T12142] bond_slave_1: entered promiscuous mode [ 182.160253][T12142] bond_slave_0: left promiscuous mode [ 182.165736][T12142] bond_slave_1: left promiscuous mode [ 182.178642][T12142] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 182.190596][T12142] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 182.202676][T12142] bond0 (unregistering): Released all slaves [ 182.359504][T12147] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2535'. [ 182.374423][T12147] batman_adv: batadv1: Adding interface: netdevsim0 [ 182.381155][T12147] batman_adv: batadv1: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 182.407994][T12147] batman_adv: batadv1: Interface activated: netdevsim0 [ 182.447375][T12158] tmpfs: Bad value for 'mpol' [ 182.460046][T12164] loop4: detected capacity change from 0 to 128 [ 182.466592][T12164] vfat: Unknown parameter '01777777777777777777777ÿÿÿÿÿÿÿÿÿÿÿÿ' [ 182.513770][ T29] audit: type=1400 audit(2000000046.233:1197): avc: denied { setattr } for pid=12174 comm="syz.4.2545" name="" dev="pipefs" ino=38694 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 182.563291][ T29] audit: type=1326 audit(2000000046.260:1198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12177 comm="syz.2.2546" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2fdc0d5b59 code=0x0 [ 182.761513][T12193] loop4: detected capacity change from 0 to 1024 [ 182.770669][T12193] EXT4-fs: Ignoring removed nomblk_io_submit option [ 182.784901][T12193] EXT4-fs: quotafile must be on filesystem root [ 182.968684][T12198] loop4: detected capacity change from 0 to 8192 [ 182.978880][T12198] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 183.243924][T12204] loop1: detected capacity change from 0 to 512 [ 183.315768][T12204] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 183.356786][T12204] ext4 filesystem being mounted at /23/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 183.521619][T12204] EXT4-fs error (device loop1): ext4_add_entry:2435: inode #2: comm syz.1.2555: Directory hole found for htree leaf block 0 [ 183.659354][T12204] EXT4-fs error (device loop1): ext4_add_entry:2435: inode #2: comm syz.1.2555: Directory hole found for htree leaf block 0 [ 183.691834][T12209] 8021q: adding VLAN 0 to HW filter on device bond1 [ 183.730712][T11467] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 183.751870][T12212] netlink: 'syz.4.2557': attribute type 5 has an invalid length. [ 183.792780][T12215] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1024 sclass=netlink_route_socket pid=12215 comm=syz.2.2559 [ 183.845878][T12225] loop1: detected capacity change from 0 to 256 [ 183.949636][T12228] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(10) [ 183.956258][T12228] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 183.963766][T12228] vhci_hcd vhci_hcd.0: Device attached [ 183.989308][T12230] usbip_core: unknown command [ 183.994025][T12230] vhci_hcd: unknown pdu 75816550 [ 183.998999][T12230] usbip_core: unknown command [ 184.003963][T12233] syz.1.2560[12233] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 184.004017][T12233] syz.1.2560[12233] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 184.025711][ T11] vhci_hcd: stop threads [ 184.041549][ T11] vhci_hcd: release socket [ 184.045956][ T11] vhci_hcd: disconnect device [ 184.070858][ T29] audit: type=1326 audit(2000000047.663:1199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12242 comm="syz.2.2566" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2fdc0d5b59 code=0x0 [ 184.131824][T12250] xt_CT: You must specify a L4 protocol and not use inversions on it [ 184.660781][T12268] loop4: detected capacity change from 0 to 1024 [ 184.668138][T12268] ext4: Unknown parameter 'dont_hash' [ 184.757088][T12268] loop4: detected capacity change from 0 to 8192 [ 184.856037][ T29] audit: type=1400 audit(2000000048.392:1200): avc: denied { ioctl } for pid=12271 comm="syz.1.2577" path="socket:[39942]" dev="sockfs" ino=39942 ioctlcmd=0x89ec scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 184.910422][T12268] ================================================================== [ 184.918525][T12268] BUG: KCSAN: data-race in mark_buffer_dirty_inode / sync_mapping_buffers [ 184.927048][T12268] [ 184.929365][T12268] write to 0xffff8881094ef6d8 of 8 bytes by task 12272 on cpu 1: [ 184.937082][T12268] sync_mapping_buffers+0x162/0x7e0 [ 184.942297][T12268] fat_file_fsync+0xad/0x100 [ 184.946896][T12268] vfs_fsync_range+0x122/0x140 [ 184.951669][T12268] generic_file_write_iter+0x191/0x1d0 [ 184.957118][T12268] iter_file_splice_write+0x5e6/0x970 [ 184.962484][T12268] direct_splice_actor+0x16c/0x2c0 [ 184.967592][T12268] splice_direct_to_actor+0x305/0x670 [ 184.972957][T12268] do_splice_direct+0xd7/0x150 [ 184.977711][T12268] do_sendfile+0x3ab/0x950 [ 184.982120][T12268] __x64_sys_sendfile64+0xbd/0x150 [ 184.987227][T12268] x64_sys_call+0xfc3/0x2e00 [ 184.991810][T12268] do_syscall_64+0xc9/0x1c0 [ 184.996304][T12268] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.002201][T12268] [ 185.004519][T12268] read to 0xffff8881094ef6d8 of 8 bytes by task 12268 on cpu 0: [ 185.012138][T12268] mark_buffer_dirty_inode+0x96/0x1c0 [ 185.017513][T12268] fat16_ent_put+0x4f/0x60 [ 185.021921][T12268] fat_ent_write+0x66/0xe0 [ 185.026329][T12268] fat_chain_add+0x15f/0x400 [ 185.030914][T12268] fat_get_block+0x46b/0x5e0 [ 185.035494][T12268] __block_write_begin_int+0x417/0xfa0 [ 185.040947][T12268] block_write_begin+0x7b/0x170 [ 185.045791][T12268] cont_write_begin+0x486/0x6b0 [ 185.050638][T12268] fat_write_begin+0x61/0xf0 [ 185.055219][T12268] generic_perform_write+0x1b4/0x580 [ 185.060504][T12268] __generic_file_write_iter+0xa1/0x120 [ 185.066034][T12268] generic_file_write_iter+0x7d/0x1d0 [ 185.071390][T12268] vfs_write+0x78f/0x900 [ 185.075618][T12268] ksys_write+0xeb/0x1b0 [ 185.079849][T12268] __x64_sys_write+0x42/0x50 [ 185.084425][T12268] x64_sys_call+0x2a40/0x2e00 [ 185.089095][T12268] do_syscall_64+0xc9/0x1c0 [ 185.093585][T12268] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.099473][T12268] [ 185.101778][T12268] value changed: 0xffff88811207bb08 -> 0x0000000000000000 [ 185.108867][T12268] [ 185.111174][T12268] Reported by Kernel Concurrency Sanitizer on: [ 185.117303][T12268] CPU: 0 PID: 12268 Comm: syz.4.2575 Not tainted 6.10.0-syzkaller-08676-g720261cfc732 #0 [ 185.127106][T12268] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 185.137153][T12268] ==================================================================