last executing test programs: 8.082464197s ago: executing program 1 (id=321): openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x4100, 0x0) (async) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x4100, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r4], 0x30}}, 0x0) sendmsg$NL80211_CMD_DEL_INTERFACE(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, r1, 0x20, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x8, 0x14}}}}, ["", ""]}, 0x28}}, 0x4008884) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x181000, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) 8.007782933s ago: executing program 1 (id=324): socketpair$unix(0x1, 0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x40000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0x4c80, &(0x7f0000005780)={0x0, 0x0, "ac563d05d310141258e0a2a06783eb29e46b1fac57461914278705b6afba000000000000536dfdc9ce9c12d1207f8a3ad1dad7ed0fc16b2ccd02000008000000180000000c0996d78e489eef651d35ca509de7cf52e7578e9ce37710000001000032936e283ae72a63729b333fc1ee6b15fb899a2072631f76cd0a59b1709500000000000000c0df2d95b9c3fbccef0111f1fc6db466c73268074c38df1f6bf2cc88aa61ffffffff2b887e04e671d55f281047000002000000000003000000000100000039fb00", "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"}) 7.965569396s ago: executing program 1 (id=328): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x4, 0x4, 0x2}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x3, 0x22, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x9a0}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @jmp={0x5, 0x1, 0x7, 0x4, 0x5, 0x140, 0x4}, @alu={0x4, 0x0, 0x1a, 0x5, 0x1, 0x3eebdeecd6b7ee5a, 0xffffffffffffffff}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0xb, 0x0, 0x0, 0x0, 0xe}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x29}, @map_idx={0x18, 0x1, 0x5, 0x0, 0x9}]}, &(0x7f0000000080)='GPL\x00', 0xc, 0x1, &(0x7f0000000300)=""/1, 0x41100, 0x52, '\x00', 0x0, 0x34, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000000380)={0x5, 0x0, 0x8, 0x3}, 0x10, 0x0, 0xffffffffffffffff, 0xa, &(0x7f00000003c0)=[r0, r0], &(0x7f00000004c0)=[{0x1, 0x3, 0xc, 0xc}, {0x0, 0x5, 0xe, 0x2}, {0x3, 0x4, 0x10, 0xb}, {0x2, 0x2, 0x7, 0x2}, {0x0, 0x3, 0xf}, {0x0, 0x5, 0xa, 0x4}, {0x1, 0x3, 0xa, 0x3}, {0x5, 0x5, 0x4, 0x3}, {0x3, 0x5, 0xa, 0x9}, {0x0, 0x4, 0x3, 0x3}], 0x10, 0x6}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{r0, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r1}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0xc, &(0x7f0000000100)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='GPL\x00', 0x4}, 0x90) 7.965118066s ago: executing program 1 (id=330): r0 = perf_event_open(&(0x7f0000000580)={0x1, 0xc5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x8, &(0x7f0000001b40)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x49) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='mmap_lock_acquire_returned\x00', r1}, 0x10) (async, rerun: 64) prctl$PR_SET_THP_DISABLE(0x29, 0xdffffffffffffffe) (async, rerun: 64) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mkdir(0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount(&(0x7f0000000040)=@filename='./bus/file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x0, 0x0) (async, rerun: 64) pivot_root(&(0x7f0000000340)='./file0\x00', &(0x7f0000000300)='./file0/file0\x00') (rerun: 64) getsockname(r3, &(0x7f0000000140)=@isdn, &(0x7f00000001c0)=0x80) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f00000002c0)={'wg1\x00'}) (async) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x200801f, &(0x7f0000002d80)={[], [{@pcr={'pcr', 0x3d, 0x2a}}, {@obj_type}, {@audit}, {@euid_eq={'euid', 0x3d, 0xffffffffffffffff}}, {@uid_eq}, {@audit}]}, 0xfe, 0x4ee, &(0x7f0000002e00)="$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") (async) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x5452, &(0x7f00000006c0)='\x02;\xe5\b\x00\x1c\x9c\x00\x00\x00\x00\x00\x00\x91\xecB\xdcZ\xe5\xbd$\x05\x90\xa9\xf3\xc7\xcb\xb7\xf0\xa1;#\x989\xe9\x12\xdf^6T\xdf\xcd\x02\xc5\xb0\xba\x12\'QXp\t\xfc\xf3\x01\x02\xbc\xbf\xc0\xf0\x10\xee\xd3\\yy\xa4\xf9\xe8\x00\xdd\xe97 0_\xe4]W\xf7~\xacVK\xc9t\x9e+:\x85\xef\x94\x0e\x19\x9cV[N.\xeb\x9fJ>\xd9\x99\x88\xd8\xdd\xb8Y\xc3$\xc6\x93\v\x04REY\xf4\xea\xf2\xcd\xcd.\x16\x861\xa1\v\x8d\x8e\x84R\xa6\x83\x84\xc0\x01e\xc3\xc8\xcc?\xc8?\x19\xb2\xa2\xe1\xac<\xe9f\x11\xff3\xc7\x19\x9e\x19\xf5-\xfe\xbd\xae\xbbR\x82\x16\xf9\x15S\x03U\xe0\xd8t\xe3%96') (async) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f0000002c00)=0x7fff) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) (async) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) (async) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r4, 0x6, 0x24, &(0x7f0000000000)=0x1, 0x4) (async) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) (async, rerun: 64) recvmmsg(r4, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000500)=""/4097, 0x1001}], 0x1}}], 0x1, 0x0, 0x0) (async, rerun: 64) openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x16, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000061120000000000f29400000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x80) (async, rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0xe, 0x4, &(0x7f00000012c0)=ANY=[@ANYBLOB="1800000000000000000000000049000085000000000000009500000000000000"], 0x0, 0x0, 0x87, &(0x7f0000000800)=""/135}, 0x90) (async, rerun: 32) close(0xffffffffffffffff) (async) socketpair$unix(0x1, 0x2, 0x0, 0x0) (async) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x97, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext, 0x0, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async, rerun: 32) syz_clone(0x66023500, 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0x20, &(0x7f0000000180)={&(0x7f0000000140)=""/57, 0x39, 0x0, &(0x7f0000001340)=""/4085, 0xff5}}, 0x10) 7.888134893s ago: executing program 1 (id=332): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c00000000000000f2ffffff850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) (async) r2 = syz_io_uring_setup(0x4169, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000480), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x2000a94, &(0x7f0000000280)={0x0, 0x3, 0x8}, &(0x7f0000000300)=0x0, &(0x7f00000005c0)) syz_io_uring_submit(r4, r3, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x2000, @fd_index, 0x0, 0x0}) io_uring_enter(r2, 0x48e9, 0x0, 0x0, 0x0, 0x0) (async) r5 = syz_io_uring_setup(0x58f2, &(0x7f0000000140)={0x0, 0x0, 0x10100}, &(0x7f0000000000), &(0x7f0000000100)=0x0) (async) syz_io_uring_setup(0x62df, &(0x7f0000000140)={0x0, 0x2000, 0x0, 0x1, 0x40000}, &(0x7f0000000100)=0x0, &(0x7f0000000000)) syz_io_uring_submit(r7, r6, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0xb}) (async) io_uring_enter(r5, 0x1f82, 0x0, 0x0, 0x0, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r1}, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r8, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)={0x14, r9, 0x1}, 0x14}}, 0x40) (async) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r10 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r10, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) (async) connect$inet6(r10, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c) (async) syz_emit_ethernet(0x6e, &(0x7f0000000340)={@multicast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "02adf7", 0x38, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @time_exceed={0x2, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "fd9063", 0x0, 0x3a, 0x0, @mcast1, @loopback={0x0, 0xffffac1414aa}, [], "1e520b4c951ee12e"}}}}}}}, 0x0) r11 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r11, 0x114, 0x3f, 0x0, 0x4) (async) ioctl$F2FS_IOC_MOVE_RANGE(r11, 0xc020f509, &(0x7f0000000080)={r1, 0xffffffffffffffff, 0xb, 0xffff}) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000900060a03060000000004803c0001800c0001007061796c6f6164002c000280080004400000000108000540000000000800030300000000080002400000000008000640000000010900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000ae63b4197dd2821f50ed9e5b8736c2a544a9dc2cfca15926f59341a633bc98ea2a85d09e0be46d37379e28c04bb1488dbda7255bc1f52687833f69e23aecc98144f5ea337e4498c80b26b9a50c80bf1985f02507e3434bc83b33c145162c5883181a3c722413a1c5004b6417b10a0840f36a5b500116235ff08a915e53ed21877d64768e4113ccc"], 0x94}}, 0x0) 7.879505603s ago: executing program 1 (id=334): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000001080), 0x1, 0x4e2, &(0x7f0000000b80)="$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") ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x1, 0x7fe2, 0x1}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$MAP_UPDATE_CONST_STR(0x15, &(0x7f0000000440)={{r0}, &(0x7f0000000480), 0x0}, 0x20) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x98, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10480, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00'}, 0x90) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="04", 0x1}], 0x1}, 0x1) sendmsg$inet(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)='#', 0x1}], 0x1}, 0x0) pwritev2(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0x0, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) write$binfmt_script(r3, &(0x7f0000000280)={'#! ', '', [{0x20, 'minixdf'}, {0x20, 'io.stat\x00'}, {0x20, '---'}], 0xa, "3a32f7b20756e8964ad1a47a1e7e04ebfee28d5c77a5c560471118b3c7064fd50b7b23190993094359db6afbffb8c40d29f2bb26f647dbc647d1a27ff06e06480f7cd163f3de56d63ed8ea190d40aba5baea553ed144d6f67b69d4d69262f544ee43040abdaa65c81e9bb0f8afe573670a161be9e79d6e534cf442285b0aba5363f5b98982e4"}, 0x9f) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r4, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x5, 0x1718, 0x0, 0x0, 0x0, 0x0, "ef359f413bb93852f7d6d1ce5d29c3ee5e5ca9000f7c41499dc2aac63a4b78c660e677df701908b9aaa3f6a00400", "036c47c6780820d1cbf7896de1fdcf335263bdbcef549ba197fce47ddfdd753abd9501ce721b6ae9b49600002a00", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00", [0x0, 0x2f]}) ioctl$FS_IOC_RESVSP(r3, 0x40305829, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x80000003}) socket$nl_route(0x10, 0x3, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x0, 0x0}) 3.545809969s ago: executing program 4 (id=389): bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) syz_open_dev$sg(&(0x7f00000000c0), 0x0, 0x141182) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002c80)={&(0x7f0000000740)=ANY=[@ANYBLOB="e0db62c93ceaad12155359cd93", @ANYRES16=r0, @ANYRES16=r1], &(0x7f0000000640)=""/256, 0x44, 0x100}, 0x20) (async) socket$packet(0x11, 0x2, 0x300) (async) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000340)={0x0, 0x6}, 0x4) (async) r2 = socket$packet(0x11, 0x3, 0x300) (async) r3 = socket(0x1, 0x1, 0x0) (async) capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140)) (async) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000600), 0xffffffffffffffff) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000380)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="010800000000000000000a0000008a7fa91abab92637e921ad2746744ccb9339256267bb181c05d2ceb2cf0f87be0832e7e08199bb8b62c377cbb7211e17fa829b9e844ea57d09ceed8abe92e738a0fea6aeb6f8749fbe0de50d7f4959b86f4dcb038cca75a926"], 0x14}}, 0x0) (async) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10) ioctl$sock_ifreq(r3, 0x89f2, &(0x7f0000000040)={'bond0\x00', @ifru_names='veth0\x00'}) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="540000000206030000000000000000000000000005000100270087000900020073797a30000000000c00078008001300000000000500050002000000050004000000000010000300686173683a69702c6d616300"], 0x54}}, 0x0) (async) memfd_create(&(0x7f0000000080)='\xf3e\t\xa9\xff\vty\x01senux\x00', 0x0) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x19, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000008f120000000000000100000018400000f9ffffff0000000000000000852000000300000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000feffffff8500000006000000057300010f000000186b00000b00000000000000f60b000018220000", @ANYRES32, @ANYBLOB="000000008300000085000000a8000000478906004800000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70200000000000085000000860000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000002c0)='ext4_discard_preallocations\x00', r7}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x26e1, 0x0) (async) syz_io_uring_setup(0x279, &(0x7f0000000200)={0x0, 0x0, 0x10100, 0x4, 0x3}, &(0x7f0000000100), &(0x7f0000000000)) (async) syz_io_uring_setup(0x7973, &(0x7f0000000280), &(0x7f0000000400), &(0x7f0000000440)) (async) eventfd2(0x7fff, 0x800) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1a}}, @in={0x2, 0x0, @dev}], 0x20) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r8, 0x84, 0x6e, &(0x7f00000001c0)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x38}}], 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) 3.41598472s ago: executing program 4 (id=390): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000004bc0)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000002c0)="316f825a3d29f96a2093a917017b4cd300000000bee70035ed313e19d6dd1fb41a20baf7f7343067fd40cdd4b16742e94b62f4eb1c5d9faab7f3028100ae8180db94b9de7456ae62b0e6fe7766a0842912179154a96fa88e161d4adf77a486e10d1d1d0b90c8997e6917226fa4bb5d77e85729336ba6369a4c33ac53b45d46a92db9fda99af4429dc23db6a1706328df4e75eb173a81bd4af8b89d1870c9b2382a759d67a4cbb1280955e9a59cd8e5e8ac68c27da3d542aece1ba7920e8f39b270458224e74afa52db1ac07f7cce47d5e8ce5b2806ff7171c64a689a0ba35e934506a46a10b9a579dc43630831e2c5400853b58e020c9cb65e44d4957b00ed35a858d44b25", 0x105}, {&(0x7f0000000f00)="f5e022a4d2ed0cf5f8b2e9857cb9af98da7aa60f7a1582aadeaef336f9139f6768452f868624c7e6ce0948f33f1a63e0fcf0f2df28a3f1f4de26a8b575ccb465985e48f65b9a7fcc93c0a5be8b16774f7c7ca9848a182d6ee7c0f2b9c0e7030ed93ee34214c25cb5", 0x68}], 0x2}}, {{0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000014c0)="23004e4ee760d48ddc6b7a1ebfc6e0276028840fb20d5233e81c802684e8ac1dc195296ffaaeace75a07a652ee918f67beb970cd36769470f7acb5cd5becfa3839cec05a81f9488931e0a9ba9a246f45fee8b5240bd1e078539b56973bfbbee5a100668daf66ef25121ca65db1d172", 0x6f}], 0x1}}, {{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000001bc0)="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", 0x2d8}], 0x1}}], 0x3, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r1, 0xc0182101, &(0x7f0000000200)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000300)={0x0}) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)) r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000000), 0x8, 0x0) setuid(0x0) linkat(r3, &(0x7f0000000340)='./file0\x00', 0xffffffffffffffff, 0x0, 0x1400) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000240)={r2, 0x1, r1, 0x6}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r1, 0xc0182101, &(0x7f0000000280)={r2}) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) 2.183240011s ago: executing program 4 (id=395): r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000140), 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e64000000001400028005000100040000000600190002000000"], 0x44}}, 0x0) ppoll(&(0x7f0000000000)=[{r0, 0x14c5}], 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) unshare(0x26020480) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={r4}) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f00000007c0)=@filter={'filter\x00', 0x2, 0x4, 0x3a0, 0xffffffff, 0xd0, 0xd0, 0x1c8, 0xfeffffff, 0xffffffff, 0x2d0, 0x2d0, 0x2d0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0xa8, 0xd0}, @REJECT={0x28}}, {{@ipv6={@loopback, @dev={0xfe, 0x80, '\x00', 0x12}, [0xffffffff, 0xff, 0xff, 0xffffffff], [0xffffffff, 0xff, 0xffffff00, 0xff], 'erspan0\x00', 'pimreg\x00', {0xff}, {}, 0x2c, 0x7, 0x646c744f95c6f5fd, 0x33}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@eui64={{0x28}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}, {{@ipv6={@loopback, @ipv4={'\x00', '\xff\xff', @multicast1}, [], [0x0, 0x0, 0x0, 0xffffff00], 'veth0_virt_wifi\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@loopback}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x400) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$SIOCGETSGCNT(r5, 0x89e1, &(0x7f00000001c0)={@empty, @private=0xa010100}) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000e6ffffffffc40000001f0000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r6}, 0x10) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2c00000013000500000000000000000007000000", @ANYRES32=r9, @ANYBLOB="00000000000000000c00297908000480050009803c9f0af10b1a1441220e7e89233e6be78bfc6c699120df7cc768dcda8c4515f1baf2d7e96d"], 0x2c}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="3081000000000000000000000014000200fc0200"/48], 0x30}}, 0x0) socket$qrtr(0x2a, 0x2, 0x0) 1.431724893s ago: executing program 4 (id=401): socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x11, 0x800000003, 0x0) r1 = syz_io_uring_setup(0x24f9, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x2, 0x2bc}, &(0x7f0000000300)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x19, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, {0x8005}}) (async) io_uring_enter(r1, 0x6ed3, 0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) (async) r4 = creat(&(0x7f0000000040)='./file0\x00', 0x0) close(r4) r5 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f00000000c0)={'vxcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000040)={0x1d, r6, 0x1, {0x0, 0xff}}, 0x18) socket$inet6_sctp(0xa, 0x801, 0x84) (async) unshare(0x40020000) (async) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2400000026000100000000000000000008000000", @ANYRES32=r7, @ANYBLOB='\x00\x00\x00\x00', @ANYRESHEX], 0x24}], 0x1}, 0xc000) connect$can_j1939(r5, &(0x7f0000000080)={0x1d, r6, 0x3}, 0x18) (async) r8 = dup(r5) sendmsg$nl_generic(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="c000000000000000000000000000000000000000b4cc1db148026af0a35e90457c01348c056749ed3cdc5389805afd6581ccdb"], 0x33fe0}}, 0x0) r9 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r9, 0x10f, 0x87, &(0x7f0000000000)={0x43}, 0x10) (async) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYRES64=r3, @ANYRES64=r6, @ANYBLOB="09102f0600000000000000b734bb7e49751d09031df2e62a13b54ac86eecc91ce41624edfdd659ac0ebc9f0dc61af74adb592abfa996b2d06eb96d7c4169"]) (async) r10 = open(&(0x7f0000000000)='./bus\x00', 0x16f47e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x11, r10, 0x0) (async) socket(0x10, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) (async) r11 = socket(0x10, 0x3, 0x0) (async) r12 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000005c0)=@newqdisc={0x54, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r13, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8}, {0x4}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c}, {0x4}}]}]}, 0x54}}, 0x0) 1.21998928s ago: executing program 4 (id=404): mkdir(&(0x7f0000000300)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r2, &(0x7f00000002c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @private2}}}, 0x30) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) write$binfmt_elf64(r2, &(0x7f0000000000)=ANY=[], 0x81a) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}}) (fail_nth: 26) 1.136383657s ago: executing program 4 (id=405): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) r2 = gettid() tkill(r2, 0x1000000000013) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r3) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000600)={'wpan1\x00'}) syz_emit_ethernet(0x82, &(0x7f0000000080)=ANY=[@ANYRES32=0x0, @ANYRESDEC=r2, @ANYRES32=0x41424344, @ANYRES8=r3, @ANYRESDEC=0x0], 0x0) 760.182858ms ago: executing program 2 (id=408): syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x8c11, &(0x7f0000000400), 0x0, 0x491, &(0x7f0000001240)="$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") lseek(0xffffffffffffffff, 0x9, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = fcntl$dupfd(r0, 0x0, r0) write$sndseq(r1, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32={[0x0, 0x0, 0x3]}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote={{0xfc}}}], 0x38) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) read(r3, &(0x7f0000002340)=""/4096, 0x1000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001700)=ANY=[@ANYBLOB="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"], 0xc0}, 0x1, 0x0, 0x0, 0x4008800}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000cc0), 0x1c1341, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008000, &(0x7f0000000240)={[{@debug}, {@orlov}, {@discard}, {@block_validity}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6}}, {@init_itable_val}, {@usrquota}, {@usrquota}]}, 0x1, 0x5ba, &(0x7f0000001bc0)="$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") mount$nfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000001100)=ANY=[@ANYBLOB='v2']) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000cc0), 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r6}, 0x2e) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r7}, 0x2e) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) r8 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1a1200, 0x42) execveat(r8, &(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000005c0)=[&(0x7f00000003c0)='syzkaller0\x00', &(0x7f0000000400)='$\'\x80', &(0x7f00000004c0)='&\x00', &(0x7f0000000500)='\x00', &(0x7f0000000540)='\x00', &(0x7f0000000900)='syzkaller0\x00t}q6\x8a\xc6\xa3GyUS\xdfW\b\xb9\am\"\xb3{\xc3\aM\x1a\x902\xcb\xcci\xadD\xda\xff.^\xcb\xd4l\x92|\xe6\xba\xeb\xc7\xcds\x990\x12\x8d\xca\x95\xb93\x8a\xc2\x160\xec\xa3R1\xff\xd7!\x9cxD\xa3\x7f\x88T;2t\xdc1\x00\xec\x81\xd4\xf7\x8a\xa2$LT\x96j\x8fC\x82D}\x06\xc0\xde> \x13<@\x87\xbe*\xef<,r\x99\xa3&'], &(0x7f00000011c0)=[&(0x7f0000000600)='@\x00', &(0x7f0000000800)='\x00]\x87X-\a\x8cR(w\xc4\xb8\x04\xfe8K+\xe6\xbfZ\xb57\x97\xce9\xd1P\x0f\x96\xc1B\xc3\xcd\x03\xfb\xf7\xfe\x10J\xdau\x88\x0e@B\xd7`\xebq\xfc\xf5\x1a\xab\x88', &(0x7f0000000700)='\x00', &(0x7f00000006c0)='syzkaller0\x00', &(0x7f0000000780)='\x00', &(0x7f0000000740)=',.{\xe3\x00[\xe4h\x92\xbd\rI\xd51\xb0\t~\xddX#t\xba=E\x9c\x89*\x00', &(0x7f00000008c0)='\x00\x00\x00', &(0x7f0000000840)='\x00'/11, &(0x7f00000007c0)='usrquota', &(0x7f0000000980)='\x00', &(0x7f0000001080)='orlov'], 0x800) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000a40)={[{@stripe={'stripe', 0x3d, 0x3}}, {@noauto_da_alloc}, {@jqfmt_vfsold}, {@data_err_ignore}, {@noauto_da_alloc}, {@delalloc}, {@resuid}, {@oldalloc}, {@jqfmt_vfsv1}]}, 0xfc, 0x550, &(0x7f0000000b00)="$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") 492.6734ms ago: executing program 2 (id=413): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000001040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xe, &(0x7f0000000440), 0x3, 0x440, &(0x7f00000006c0)="$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") inotify_init1(0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0xb8}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="b80000001900674c0000000000000000ff0100000000000000000000ff000001e000000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000"/109], 0xb8}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="b80000001900674c0000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a00000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e2ffffffffffffff00004721a064000000000000000000000000000000000300000000000000000040"], 0xb8}}, 0x0) 402.921807ms ago: executing program 3 (id=415): r0 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc12}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000100)) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x64}}, 0x0) 402.733677ms ago: executing program 0 (id=416): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000012000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000058000000090a010400000000"], 0xa0}}, 0x0) 389.999768ms ago: executing program 2 (id=417): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000000c0)='./bus\x00', 0x0, &(0x7f0000000140)={[{@numtail}, {@fat=@showexec}, {@fat=@nocase}, {@numtail}, {@shortname_lower}, {@shortname_lower}, {@utf8no}, {@fat=@quiet}, {@rodir}, {@rodir}, {@shortname_winnt}]}, 0x1, 0x21d, &(0x7f0000000240)="$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") r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000180), 0xfefc) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000004, 0x10012, r3, 0x0) socket$inet6(0xa, 0x2, 0x0) r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x2, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)={0x150, 0x1403, 0x1, 0x70bd29, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'ipvlan0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'rose0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth0_to_batadv\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'wg0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'vlan1\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'caif0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'wg0\x00'}}]}, 0x150}}, 0x2000c800) 380.485049ms ago: executing program 0 (id=418): socket$key(0xf, 0x3, 0x2) (async) pause() (async, rerun: 32) pause() (async, rerun: 32) r0 = socket(0x2a, 0x1, 0xa) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x10142) (async) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) (async) pause() openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) (async) accept$phonet_pipe(r0, 0x0, &(0x7f00000000c0)) (async) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x8000, 0x200) ioctl$USBDEVFS_SETCONFIGURATION(r3, 0x80045505, &(0x7f0000000140)=0x2) (async, rerun: 64) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r1, 0x6628) (async, rerun: 64) sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x18, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x20004880}, 0x40408c0) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000280), &(0x7f00000002c0)=0x4) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.net/syz1\x00', 0x200002, 0x0) (async, rerun: 64) r4 = syz_clone(0x1000b00, &(0x7f00000003c0)="4d4fee71a3a07b7ffd27ef55f48975c4f1a7b0ffd005222cf73d6dc3a3e36ce8875513b5d332dc4d45dbb4e8256077d4ec9dd716994c44828b0d3efbbaa789067942545bdec2665c8538e42322486a2a3c0032d15ba900479cec950fbbde239bf5234612ed6e0158f2380760d4d4c8da0f84d0e3617f1ae604d298", 0x7b, &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)="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") (async, rerun: 64) r5 = perf_event_open(&(0x7f00000014c0)={0x3, 0x80, 0x3, 0x5, 0x6, 0x3, 0x0, 0x9, 0xb0900, 0x6, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8d6d, 0x7fffffffffffffff}, 0x1210, 0x1cd, 0x0, 0x8, 0x839d, 0x1, 0x3, 0x0, 0x9, 0x0, 0x4}, 0xffffffffffffffff, 0x6, r2, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x81, 0x5, 0xe, 0xda, 0x0, 0x1e8fec70, 0x10000, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, @perf_config_ext={0x8, 0x10000}, 0x2400, 0x6, 0x9, 0x7, 0x9, 0x5, 0x7ff, 0x0, 0x8, 0x0, 0x4}, r4, 0xf, r5, 0xffc9973f2defbdc9) socket$kcm(0x29, 0x0, 0x0) (async) mkdir(&(0x7f0000001540)='./file0\x00', 0x84) unshare(0x40000) unshare(0x1a020300) socket$inet6_sctp(0xa, 0x1, 0x84) (async, rerun: 32) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000001580)=@assoc_value, &(0x7f00000015c0)=0x8) (async, rerun: 32) write$P9_RCLUNK(r2, &(0x7f0000001600)={0x7, 0x79, 0x2}, 0x7) (async) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000001680)={{{@in6=@ipv4={""/10, ""/2, @local}, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@empty}}, &(0x7f0000001780)=0xe8) quotactl$Q_GETFMT(0xffffffff80000401, &(0x7f0000001640)=@md0, r6, &(0x7f00000017c0)) r7 = socket$inet(0x2, 0x5, 0xff) r8 = fcntl$dupfd(r7, 0x406, r3) ioctl$VT_DISALLOCATE(r8, 0x5608) 268.314488ms ago: executing program 0 (id=419): syz_mount_image$vfat(&(0x7f0000000200), &(0x7f00000001c0)='./file0\x00', 0x101c08a, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x6, 0x2d2, &(0x7f00000006c0)="$eJzs3T9rJGUYAPBnktnZORU2hZUIDmhhdVyutdlD7kBM5ZFCLTR4OZBMEO4g4B8crcTOxtJPIAh+B1sbO0vBD2DnCQcjMzuTnTWbTU6yES+/X5Mn77zPvM/MvEkmRZ68/+Lhwb0i7n/52W+R50lsTGMaj5LYio3ofRELpt8EAPB/9qiu4496ZsnhX78+JS+JiHzNtQEA63HGz/9OOg9/vJSyAIA1uvv2O2/e2tm5/VZR5HHn8Kuj3eY3++bj7Pit+/FhlLEfN2ISjyPaF4VRtG8LTXinrusqLRpb8cphdbTbZB6+93N3/p+e64LtmMRWGx2/bbT5b+zc3i5mBvlVU8cz3frTZv2bMYnnj5MX8m8uyY/dLF59eVD/9ZjELx/ER1HGvbaIef7n20Xxev3tn5++25TX5CfV0e64nTdXb/aLV5f4fAAAAAAAAAAAAAAAAAAAAAAAeDpd73rnjKPt39MMdf13Nh83n4yi6G0t9ueZ5Sf9iYb9geq6rur4ru+vc6MoirqbOM9P44V02FgQAAAAAAAAAAAAAAAAAAAArq6HH39ysFeW+w8uJOi7AaQR8dfdiH97nulg5KVYPXncrblXlhtduDgnHY7EZj8niVhZRnMRF3Rbzgqunai5C77/YWlWuvDg0hgcys9edLR8rYsM+t11sJcsv4fj45rz2SZpG0HM52RxzrWy0w7Vcer2u3byPNnSJSZPfO3Zs21QrZgTyaqvi9d+n925biT551Vk7V09+UzLcn/UjQzSF5fIz7WfI5+ln/xekejWAQAAAAAAAAAAAAAAAAAAazX/69+F4awPRqenbtTjtZYGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJdm/v//nyCouuRzTM7iwcP/+BIBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4Av4OAAD//wPYX1k=") (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) (async, rerun: 32) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) (async, rerun: 32) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$binfmt_script(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async, rerun: 64) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async, rerun: 64) symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') acct(&(0x7f0000003040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00') (async) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0) (async) prctl$PR_SET_MM_AUXV(0x23, 0xc, 0x0, 0xd) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x66, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000000c0)="5c00000014006b05c84e21000ab16d6e230675f810000000440002005817d30461bc24eeb556a705251e6182149a36c23d3b48dfd8cdbf9367b098fa51f60a64c9f408000000e786a6d0bdd70000b6c0504bb9189d9193e9bd1c1b78", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) (async) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) (async) mount$bind(&(0x7f0000000300)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) (async) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1adc51, 0x0) (async) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0/../file0\x00', 0x0) (async) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') creat(&(0x7f0000000040)='./bus\x00', 0x0) (async) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) (async) r4 = open(&(0x7f0000000100)='./bus\x00', 0x14113e, 0x0) write$binfmt_script(r4, &(0x7f0000000080), 0x208e24b) r5 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x0) sendfile(r5, r3, 0x0, 0x80000003) 267.024098ms ago: executing program 3 (id=420): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f00000004c0)={[{@resuid}, {@errors_continue}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x8}}, {@data_err_abort}]}, 0x3, 0x451, &(0x7f0000000f80)="$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") (async) r0 = socket$rds(0x15, 0x5, 0x0) listen(r0, 0x40) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r1, &(0x7f0000000240)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000040)=""/2, 0x2}}, 0x120) (async) readv(r1, &(0x7f0000000140), 0x0) (async) write$UHID_DESTROY(r1, &(0x7f0000000200), 0x4) (async) personality(0x4000009) (async) rseq(&(0x7f0000000680), 0x20, 0x0, 0x0) (async) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x3938700}, 0x0) (async) shmat(0x0, &(0x7f0000360000/0x3000)=nil, 0x7000) (async) r2 = creat(0x0, 0x140) (async) r3 = creat(&(0x7f0000000140)='./file0\x00', 0x200065) close(r3) (async) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x98132, 0xffffffffffffffff, 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r3, 0x0, 0x61, &(0x7f00000002c0)={'filter\x00', 0x4}, 0x64) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x0, 0x16, &(0x7f0000000540)=ANY=[@ANYBLOB="61126e00000000006113500000000000bf2000000000000015000f00511b48013d030100000000009500000000000000bc26000000000000bf67000000000000070300000fff07006702000003000000360600000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a83683d58719"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1e, 0xe, &(0x7f0000001600)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040), 0xfffffffffffffd67}, 0x48) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0xfff, 0x7}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000600)={{r4}, 0x0, 0x0}, 0x20) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x100, 0x100, 0x9, 0x1, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000000), 0xcff5, r5}, 0x38) (async) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500), 0x0, 0x2, r5}, 0x38) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="44000000340009000000000000000000030000001c005b800c0042000500000000000000080001"], 0x44}}, 0x0) openat$cgroup_procs(r2, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) (async) setsockopt$MRT_FLUSH(r2, 0x0, 0xd4, &(0x7f00000001c0)=0x4, 0x4) 211.108463ms ago: executing program 3 (id=421): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0241, 0x0) (async) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8) connect$inet6(r1, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) (async) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10) (async) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_DEV(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r2, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_SEC_DEVICE={0x10, 0x2e, 0x0, 0x1, {0xc, 0x14}}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x2c}}, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000240)={0x1f}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) (async, rerun: 64) write(r1, &(0x7f00000000c0)="8f2e0a6508000000000000000580a7b6070d6328a7ba3dfe", 0x22) (async, rerun: 64) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async, rerun: 32) socket$kcm(0x2, 0xa, 0x2) (rerun: 32) write$tun(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="034886dd090328000300300000006000000001002f0081e949b93897bc3b0000000000007d01ff020000000000000000000000000001"], 0xfdef) (async) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xb, 0xd, 0x200cc, 0x6, 0x5}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)='D', &(0x7f0000000240), 0x4b2, r4}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000700)={0x0, &(0x7f0000000540)=""/245, &(0x7f0000000640), &(0x7f0000000680), 0x2, r4}, 0x38) (async) r5 = socket$nl_rdma(0x10, 0x3, 0x14) (async) r6 = syz_pidfd_open(0xffffffffffffffff, 0x0) splice(r5, &(0x7f0000000080)=0xfffffffeffffffff, r6, &(0x7f00000000c0)=0x2, 0x7f, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYRES8=r3, @ANYRES32=r3, @ANYBLOB="0000000002000000b705000008000000850000005e00000095"], &(0x7f0000000300)='GPL\x00', 0xa, 0x0, 0x0, 0x40f00}, 0x90) 194.469964ms ago: executing program 0 (id=422): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x4, [@int={0x2, 0x0, 0x0, 0x1, 0x0, 0x5, 0x0, 0x57, 0x4}, @var={0x9, 0x0, 0x0, 0xe, 0x4}]}, {0x0, [0x0, 0x61]}}, &(0x7f0000000100)=""/234, 0x3c, 0xea, 0x0, 0xcb}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0x20, &(0x7f0000000340)={&(0x7f00000002c0)=""/49, 0x31, 0x0, &(0x7f0000000300)=""/32, 0x20}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x5, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x401}, [@map_idx_val={0x18, 0x4, 0x6, 0x0, 0x5}]}, &(0x7f0000000400)='GPL\x00', 0x9, 0x0, 0x0, 0x2575bf72d239fab0, 0x61, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000440)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000480)={0x3, 0xd, 0x0, 0x9}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000004c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0x1], &(0x7f0000000500)=[{0x1, 0x3, 0x9, 0x9}, {0x3, 0x2, 0xd, 0x7}], 0x10, 0x3}, 0x90) (async) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x5, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x401}, [@map_idx_val={0x18, 0x4, 0x6, 0x0, 0x5}]}, &(0x7f0000000400)='GPL\x00', 0x9, 0x0, 0x0, 0x2575bf72d239fab0, 0x61, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000440)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000480)={0x3, 0xd, 0x0, 0x9}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000004c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0x1], &(0x7f0000000500)=[{0x1, 0x3, 0x9, 0x9}, {0x3, 0x2, 0xd, 0x7}], 0x10, 0x3}, 0x90) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000600)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x10000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x9, 0x3, &(0x7f0000000000)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @cb_func={0x18, 0x5, 0x4, 0x0, 0xffffffffffffffff}], &(0x7f0000000040)='GPL\x00', 0x5, 0x37, &(0x7f0000000080)=""/55, 0x41100, 0x0, '\x00', 0x0, 0x3, r0, 0x8, &(0x7f0000000240)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000280)={0x3, 0x5, 0x6aed, 0x8}, 0x10, r1, r2, 0x2, &(0x7f0000000680)=[r3, 0x1], &(0x7f00000006c0)=[{0x4, 0x5, 0x0, 0xa}, {0x4, 0x5, 0x2, 0x7}], 0x10, 0xbba}, 0x90) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r4, 0x400c6615, &(0x7f00000007c0)) r5 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000840)=@o_path={&(0x7f0000000800)='./file0\x00', 0x0, 0x8, r3}, 0x18) sendfile(r0, r5, &(0x7f0000000880)=0x1ff, 0x4) r6 = accept4$x25(0xffffffffffffffff, &(0x7f00000008c0), &(0x7f0000000900)=0x12, 0x0) ioctl$SIOCX25GFACILITIES(r6, 0x89e2, &(0x7f0000000940)) (async) ioctl$SIOCX25GFACILITIES(r6, 0x89e2, &(0x7f0000000940)) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000980)={0x15, 0x65, 0xffff, 0x6, 0x8, '9P2000.u'}, 0x15) (async) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000980)={0x15, 0x65, 0xffff, 0x6, 0x8, '9P2000.u'}, 0x15) r7 = openat$bsg(0xffffffffffffff9c, &(0x7f00000009c0), 0x420c0, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000a40)={0x0}, &(0x7f0000000a80)=0xc) pipe2$watch_queue(&(0x7f0000000ac0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) syz_pidfd_open(0xffffffffffffffff, 0x0) (async) r10 = syz_pidfd_open(0xffffffffffffffff, 0x0) sendmsg$netlink(r0, &(0x7f0000001f00)={&(0x7f0000000a00)=@proc={0x10, 0x0, 0x25dfdbfd, 0x100}, 0xc, &(0x7f0000001e00)=[{&(0x7f0000000b00)={0x12c8, 0x12, 0x400, 0x70bd2c, 0x25dfdbfe, "", [@typed={0x8, 0xc0, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x29}}, @generic="f5e5845e43e67417974267a096fcdd0be24ddf1819c8be85ed61e4493102995bf0c74c7cf8bc482caa9e9f348f613573f9c85b2c14ffd8a478231afe", @generic="462d0b4538e9f624690d9d73dc92c5c26150bd1f6f35972f60", @generic="8b231954def478b8147db707c541e2b8ca85f8bace38326442", @generic="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", @generic="2c241f0cd34698e91fd4eb9e63efd5bc586e7d6f371d03d1dea3ed5e24c8ec0ba12a185e8300947cc969923bd072c36e14e63fd8b3d3653295581b25f683dce89871006717ac51e8ac951d41925bac84910c41250a6aca4c508440fee949de09d10989eb8969e8e41bbfe509851008efedc6450fa2b814c1dc502d7f2684d8a7fd6110cd74db7fc57722c409e78f28a22b1781247f70ac34a2d2a0ce8bfd4d6ef3151028fa2c7817a2c64f4f20a07993965dadae875296b6b8a20c0e8b755f2feb2f8d5c6dc7517973ba7b60a14711903da4cd1140e198c74629568134b36bd53cbdbeaf7d6f3bbf81c3", @nested={0x84, 0xad, 0x0, 0x1, [@typed={0x8, 0x2, 0x0, 0x0, @u32=0xd7b0}, @generic="07ed9116587e5e25c9866da90a7911e68479c37693d78b7a250a0abcb25b690518c114", @typed={0x8, 0x69, 0x0, 0x0, @pid=r8}, @generic="31c0d8836cedeb8caa5b95a105eb8bcd19c374582c91cbbaf2ec4c82d3ec91f146dfabd37d3e3dc79b14c1be6b005b736d4c86014abc8033f2aa3a7fa3b422616ec629083e0ae5262238291365"]}, @generic="3960064e342f4812a97f95618cd4694e4c1806bfdbb7c24c59f657c97f6bb971f327fae7c1a42975bfe6628282d7cb99e9b002651013155ada541e21dfde168f5853b9a1fd04c22178f763f9feac9beea44c53b451bb58c70cf0f94e2d57c58b5af67ac294fe91c5053e5add5d2dce709cd1e2c8d010f3e2637f2de9a054949877581698759174ee07c1a4ac2f0661ad28cd1759f6b555a6b934c0374aea5d2c2a54eebb783b02d872e57f0c76674d02e2c4e5abdf3da688d7c9a49de0e51adfac6f0b50db6167b4041f74", @typed={0x8, 0x101, 0x0, 0x0, @fd=r9}]}, 0x12c8}], 0x1, &(0x7f0000001e40)=[@rights={{0x24, 0x1, 0x1, [r10, r4, r7, r6, r2]}}, @rights={{0x18, 0x1, 0x1, [r2, r6]}}, @rights={{0x1c, 0x1, 0x1, [r6, r6, r5]}}, @rights={{0x1c, 0x1, 0x1, [r2, r0, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [r2]}}], 0x98, 0x850}, 0x4000) r11 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000022c0)={0x6, 0x1c, &(0x7f0000001f40)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3b4f, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r10}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000002040)='syzkaller\x00', 0x0, 0xdb, &(0x7f0000002080)=""/219, 0x40f00, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000002180)={0x2, 0x1}, 0x8, 0x10, &(0x7f00000021c0)={0x3, 0xc, 0x4, 0xb}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000002200)=[r7, r3, r7, r7, r7], &(0x7f0000002240)=[{0x4, 0x2, 0x2, 0xa}, {0x5, 0x3, 0x5, 0xb}, {0x3, 0x3, 0x3, 0xb}, {0x1, 0x1, 0x9, 0x3}, {0x3, 0x3, 0x5, 0x4}, {0x5, 0x1, 0x9, 0x7}, {0x1, 0x4, 0x4, 0xa}], 0x10, 0x9}, 0x90) io_uring_register$IORING_REGISTER_FILES(r7, 0x2, &(0x7f0000002380)=[r11, r2, r5, r6, r3], 0x5) (async) io_uring_register$IORING_REGISTER_FILES(r7, 0x2, &(0x7f0000002380)=[r11, r2, r5, r6, r3], 0x5) syz_emit_ethernet(0x22, &(0x7f00000023c0)={@remote, @random="fcffcb1d01be", @val={@void, {0x8100, 0x1, 0x0, 0x3}}, {@can={0xc, {{0x1, 0x1, 0x0, 0x1}, 0x5, 0x0, 0x0, 0x0, "3e186e3849ebfded"}}}}, &(0x7f0000002400)={0x1, 0x2, [0xb24, 0xfb0, 0xef4, 0x8a3]}) recvmmsg(r9, &(0x7f0000008600)=[{{&(0x7f0000002440)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private0}}, 0x80, &(0x7f0000002500)=[{&(0x7f00000024c0)=""/45, 0x2d}], 0x1, &(0x7f0000002540)=""/196, 0xc4}, 0x4}, {{0x0, 0x0, 0xfffffffffffffffd, 0x0, &(0x7f0000002640)=""/235, 0xeb}, 0x3ff}, {{&(0x7f0000002740)=@ieee802154={0x24, @long}, 0x80, &(0x7f0000004840)=[{&(0x7f00000027c0)=""/4096, 0x1000}, {0xfffffffffffffffd}, {&(0x7f00000037c0)=""/76, 0x4c}, {&(0x7f0000003840)=""/4096, 0x1000}], 0x4, &(0x7f0000004880)=""/188, 0xbc}, 0x3ddca621}, {{&(0x7f0000004940)=@hci, 0x80, &(0x7f0000005d00)=[{&(0x7f00000049c0)=""/215, 0xd7}, {&(0x7f0000004ac0)=""/228, 0xe4}, {&(0x7f0000004bc0)=""/156, 0x9c}, {&(0x7f0000004c80)=""/79, 0x4f}, {&(0x7f0000004d00)=""/4096, 0x1000}], 0x5, &(0x7f0000005d80)}, 0x7}, {{&(0x7f0000005dc0)=@caif=@dgm, 0x80, &(0x7f0000008180)=[{&(0x7f0000005e40)=""/190, 0xbe}, {&(0x7f0000005f00)=""/234, 0xea}, {&(0x7f0000006000)=""/4096, 0x1000}, {&(0x7f0000007000)=""/156, 0x9c}, {&(0x7f00000070c0)=""/95, 0x5f}, {&(0x7f0000007140)=""/4096, 0x1000}, {&(0x7f0000008140)=""/8, 0x8}], 0x7}, 0x3}, {{&(0x7f0000008200)=@xdp={0x2c, 0x0, 0x0}, 0x80, &(0x7f0000008480)=[{&(0x7f0000008280)=""/47, 0x2f}, {&(0x7f00000082c0)=""/54, 0x36}, {&(0x7f0000008300)=""/125, 0x7d}, {&(0x7f0000008380)=""/59, 0x3b}, {&(0x7f00000083c0)=""/153, 0x99}], 0x5, &(0x7f0000008500)=""/216, 0xd8}, 0x400}], 0x6, 0x10102, &(0x7f0000008780)) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000087c0)=r1, 0x4) (async) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000087c0)=r1, 0x4) syz_genetlink_get_family_id$ethtool(&(0x7f0000008840), r7) (async) r13 = syz_genetlink_get_family_id$ethtool(&(0x7f0000008840), r7) getsockopt$inet6_mreq(r7, 0x29, 0x15, &(0x7f0000008880)={@ipv4={""/10, ""/2, @empty}, 0x0}, &(0x7f00000088c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f0000008900)={'vcan0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r9, &(0x7f0000008b40)={&(0x7f0000008800)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000008b00)={&(0x7f0000008940)={0x1b0, r13, 0x8, 0x70bd2c, 0x25dfdbff, {}, [@HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}]}, @HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}, @HEADER={0x8c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}]}, 0x1b0}, 0x1, 0x0, 0x0, 0x24000080}, 0x0) (async) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r9, &(0x7f0000008b40)={&(0x7f0000008800)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000008b00)={&(0x7f0000008940)={0x1b0, r13, 0x8, 0x70bd2c, 0x25dfdbff, {}, [@HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}]}, @HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}, @HEADER={0x8c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}]}, 0x1b0}, 0x1, 0x0, 0x0, 0x24000080}, 0x0) mount$bind(&(0x7f0000008b80)='./file0\x00', &(0x7f0000008bc0)='./file0\x00', &(0x7f0000008c00), 0x10, 0x0) getsockopt$IPT_SO_GET_INFO(r7, 0x0, 0x40, &(0x7f0000008c40)={'filter\x00', 0x0, [0x2, 0xffffff2c, 0x5, 0xfffffffd, 0x9]}, &(0x7f0000008cc0)=0x54) (async) getsockopt$IPT_SO_GET_INFO(r7, 0x0, 0x40, &(0x7f0000008c40)={'filter\x00', 0x0, [0x2, 0xffffff2c, 0x5, 0xfffffffd, 0x9]}, &(0x7f0000008cc0)=0x54) ioctl$sock_inet_SIOCGIFBRDADDR(r6, 0x8919, &(0x7f0000008d00)={'veth0_to_bond\x00', {0x2, 0x0, @local}}) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2f, &(0x7f0000008d40)={0x37, {{0xa, 0x4e23, 0x5, @loopback, 0x1}}, {{0xa, 0x4e24, 0x2, @loopback, 0x4}}}, 0x108) (async) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2f, &(0x7f0000008d40)={0x37, {{0xa, 0x4e23, 0x5, @loopback, 0x1}}, {{0xa, 0x4e24, 0x2, @loopback, 0x4}}}, 0x108) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r9, &(0x7f0000009100)={&(0x7f0000008e80)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000090c0)={&(0x7f0000008fc0)={0xd8, 0x0, 0x408, 0x70bd27, 0x25dfdbfd, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x254c3a4afb918aac}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0xc}, 0x4000000) 132.298679ms ago: executing program 0 (id=423): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000003c0)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000700)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x0, @mcast2={0xff, 0x5}}, r1}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000340)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @remote}, {0xa, 0x0, 0x0, @empty}, r1}}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"/2655], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 131.864779ms ago: executing program 3 (id=424): r0 = perf_event_open(&(0x7f0000000240)={0x5, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2000000, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000f3ffffb0150000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) sync_file_range(r3, 0x0, 0x0, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) socket$nl_route(0x10, 0x3, 0x0) (async) socket$packet(0x11, 0x2, 0x300) (async) prlimit64(0x0, 0x7, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f0000000a40)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r4, 0x40182103, &(0x7f0000000080)={r5, 0x3, r4}) (async) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r3, 0x40082102, &(0x7f0000000080)=r5) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, r3, 0x0, 0x1}, 0x48) r7 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7020000f3ffffb0150000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r9) (async) r10 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001280)=@newtaction={0x78, 0x30, 0x51b, 0x0, 0x0, {}, [{0x64, 0x1, [@m_skbmod={0x60, 0x1, 0x0, 0x0, {{0xb}, {0x34, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x0, 0x0, 0xffffffffffffffff}}}, @TCA_SKBMOD_DMAC={0xa, 0x3, @random="792e6490b45b"}]}, {0x4, 0x14}, {0xc}, {0xc}}}]}]}, 0x78}}, 0x0) (async, rerun: 64) r11 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (rerun: 64) r12 = syz_io_uring_setup(0x239, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000), &(0x7f0000000280)) io_uring_enter(r12, 0x2def, 0x0, 0x0, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000080b702000014000000b7030000000000008500000005000000bca900000000000035090100013800002c00000000000000b7020000000000007b2af8ff00000000b509000000000000dbaaf8fff1000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffc70200000800000018220000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000000000008500000007000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) socket(0xb, 0x6, 0xfffffffc) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r13, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000fdff01000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000048000000090a010400000000000000000100000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000300c0009800800014044"], 0x90}}, 0x0) 129.12689ms ago: executing program 0 (id=425): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000900000000000000213f0000c50000000e800000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r0}, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x2064, &(0x7f0000000040)=[&(0x7f0000ff9000/0x2000)=nil], &(0x7f0000001180), &(0x7f0000000000), 0x0) syz_io_uring_setup(0x4172, &(0x7f0000000780)={0x0, 0x0, 0x10100, 0x0, 0x20}, &(0x7f0000000100), &(0x7f0000000140)) 118.084781ms ago: executing program 2 (id=426): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r1}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newsa={0x294, 0x10, 0x713, 0x0, 0x25dfdbfd, {{@in6=@remote, @in=@multicast2}, {@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x32}, @in=@loopback, {}, {}, {0x0, 0xd}, 0x0, 0x0, 0x8}, [@algo_auth_trunc={0x1a4, 0x14, {{'sha256-avx\x00'}, 0xac0, 0x0, "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"}}]}, 0x294}}, 0x0) 92.035023ms ago: executing program 2 (id=427): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000001040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xe, &(0x7f0000000440), 0x3, 0x440, &(0x7f00000006c0)="$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") inotify_init1(0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0xb8}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="b80000001900674c0000000000000000ff0100000000000000000000ff000001e000000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000"/108], 0xb8}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="b80000001900674c0000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a00000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e2ffffffffffffff00004721a064000000000000000000000000000000000300000000000000000040"], 0xb8}}, 0x0) 39.519997ms ago: executing program 3 (id=428): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000012000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000058000000090a010400000000"], 0xa0}}, 0x0) 10.05757ms ago: executing program 3 (id=429): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0x0) r2 = memfd_create(&(0x7f0000000a80)='\x00\x00\x1a\x00\x00\x00z\x9b\xb2\xe8t%\xfc\x02\x00\x00\x009\xa0\x8b\x14d\xa2\xa1\xa8!\xe8\xd1\xa0\x8a\xce0\x1c\xb7\xf1\xccm\xce\xd4\xdb\x99\xe5\x8f\xe2\xb6\xdc\n\xf5kWnr\x92G\xbd\b\x01\xd0\xf5\xbb}\xeb\x86P=\xe51\x9d,\xb7\xc3_M\xbe\x19\xea#\xffWj\xdc\xd4\xb1\xcc\\\xa8N\x8c)[\xd1\xc3\x9a\xa3\x1b\xf9\xe9\x1d \xce1\xc9\x9f\xb0\x14\xc2\xeb\xf9\xceE\xad\xa4\x92\f\xef\x87g\xb6\xabW\xac\rP\xf42\xb7\xc8\xaajn\xbfF}\xbd\x1c\xff\xff\xff\xff\xff\xff\xb5v*R?\xa0Y$\x95tO*\xf4\xae\xb8\xb8m\xbf\r\xd5\xbf*\xfd\xc7\x85\x1b\x8b\xe5\x97j`c\xe0\x88?\xe8\xd6\xae1\xc3\x9e\xec`\xf2\xd1BM\x10\xc6\xb4F\n\x10q\xde\v\xec\xa2\x92x\xe9\xf5\x1f\xc9hj\xc0\xe5\xce\xd1v\bez\"\xb1\xd3 \xbc\x9b\xe8\x86u\x0e\v\x17\x85\xb8\xdb2\x92\x00\x00\x00\x00\x00\x00\x00\x00\x80\x9c99\n|\xc1,\xd3\xedI\x11\xf9\xa6wN\xa3\xc9M\xe6\x92\xaf\xb2I\x16}\xae\xe8\xa8\xd7\xad\\\x84\v\fB\xe2d\x90\xdd\x90\x1e\x8c\xe4\xc70\x93\xc7\x8b\xec/a8\x95a\x8c?)\xa2\xf6~\xa7\xc3\xfc\x19\xa8\x98\x1f\x8d\x13\x00e;g]\x1c\x1d\xb0\xa0\x96\xac\x9f3\xe8\xa7R\x92\xe6\n\xdda\x86\xa8\x13\xf1\xccQa\xef\x94u\xed\x0fvq=|\xb0\xc2I/\\}\xf4\xb7\xda\xdds\xf3\xf9\f\xff\xcc\xf3\xa8\x02\xa9/\xfd\xcfn\x00\x84wa[,\xd8\xda\xd4h\xdd\xc4\x80\xb9_\x7f\xa1\x90H\x824Y\x89E', 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000080)={0x1d, r5, 0x2}, 0x18) sendmsg$L2TP_CMD_SESSION_CREATE(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYRESHEX=r2, @ANYRESOCT=r0, @ANYRESDEC=r1], 0x14}, 0x1, 0x0, 0x0, 0x4050}, 0x0) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_GET(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="20010000", @ANYRES16=r6, @ANYBLOB="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"], 0x120}, 0x1, 0x0, 0x0, 0x4840}, 0x44041) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r9, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r10, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001a40)=@delchain={0x24, 0x2a, 0x400, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x1}}}, 0x24}}, 0x40) sendmsg$NFT_MSG_GETRULE(r8, &(0x7f0000000540)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000003c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="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"], 0xa4}, 0x1, 0x0, 0x0, 0x40000}, 0x40041) sendmsg$DEVLINK_CMD_SB_POOL_SET(r3, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="d0000000", @ANYRES16=r6, @ANYBLOB="10002abd7000fddbdf25100000000e0001006e657464657673696d0000000f0002006e657464657673696d30200008000b0008000000060011000400000008001300010000800500140001000000080001007063690011000200303030303a30303a31302e300000000008000b0004000000060011000200000008001300e37c000005001400000000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000b0001ffffff060011000500000008001300030000000500140000000000"], 0xd0}, 0x1, 0x0, 0x0, 0x8000}, 0x20048000) r11 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x40042) write(r11, &(0x7f0000000000)="9b6862fa82e59a033b7656a13619040fa35872ff56db9371c404cc27d3797b9b89ab7da9", 0x24) ioctl$SG_BLKTRACETEARDOWN(r11, 0x1276, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4}) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000340)) ioctl$sock_ifreq(r3, 0x8991, &(0x7f0000002080)={'bond0\x00', @ifru_names='ip6gre0\x00'}) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) socket$nl_rdma(0x10, 0x3, 0x14) 0s ago: executing program 2 (id=430): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$P9_RXATTRCREATE(r0, &(0x7f0000000000)={0x7, 0x21, 0x2}, 0x7) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f00000008c0)={[{@nobh}, {@noauto_da_alloc}, {@jqfmt_vfsold}, {@data_err_ignore}, {@resuid}, {@dioread_nolock}, {@usrjquota}, {@discard}, {@jqfmt_vfsv1}]}, 0xfc, 0x564, &(0x7f0000002bc0)="$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") r1 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x12, r1, 0xcd304000) fallocate(r1, 0x0, 0x0, 0x1000f4) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f000000aa80)) r2 = open(&(0x7f0000000100)='./bus\x00', 0x341042, 0x0) fallocate(r2, 0x20, 0x0, 0x10000) r3 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) fallocate(r3, 0x0, 0x0, 0x10000) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r4, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='rdma.current\x00', 0x275a, 0x0) mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x0, 0x12, r5, 0x6bb19000) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="61128c000000000061134c0000000000bf2000000000000007000000180000003d030100000000009500f000000000007126000000000000bf67000000000000360602000fff07006706000020000000170200000ee60000bf250000000000002d350000000000006507000002080000070700004c0000001f75000000000000bf54000000000000070400000400f9ffad03000000000000720400000000000014000000000000009500000000000000db13d5d8b741f2cdaabc8383c8f56b8c2b84a800ea6553f304000000815dcf00c3eebc52267b042d19"], &(0x7f0000000100)='GPL\x00'}, 0x48) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) kernel console output (not intermixed with test programs): 919] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 40.044817][ T4058] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.051895][ T4058] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.060178][ T4058] bridge_slave_1: entered allmulticast mode [ 40.066786][ T4058] bridge_slave_1: entered promiscuous mode [ 40.087204][ T4058] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 40.096827][ T3919] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 40.107866][ T3919] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 40.119892][ T4058] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 40.136075][ T3919] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 40.162820][ T4058] team0: Port device team_slave_0 added [ 40.175691][ T4058] team0: Port device team_slave_1 added [ 40.209858][ T4058] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 40.216994][ T4058] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 40.243023][ T4058] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 40.271025][ T3919] 8021q: adding VLAN 0 to HW filter on device bond0 [ 40.295945][ T4058] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 40.303066][ T4058] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 40.329115][ T4058] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 40.346286][ T3919] 8021q: adding VLAN 0 to HW filter on device team0 [ 40.356743][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.363962][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.376467][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.383663][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.405336][ T3919] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 40.415806][ T3919] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 40.449177][ T4154] sit0 speed is unknown, defaulting to 1000 [ 40.635617][ T4058] hsr_slave_0: entered promiscuous mode [ 40.645958][ T4058] hsr_slave_1: entered promiscuous mode [ 40.651953][ T4058] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 40.664236][ T4058] Cannot create hsr debugfs directory [ 40.673600][ T3919] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.757973][ T4182] loop0: detected capacity change from 0 to 8192 [ 40.812174][ T4182] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 40.860023][ T4154] chnl_net:caif_netlink_parms(): no params data found [ 40.928605][ T4208] FAULT_INJECTION: forcing a failure. [ 40.928605][ T4208] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 40.941735][ T4208] CPU: 0 UID: 0 PID: 4208 Comm: syz.1.134 Not tainted 6.11.0-rc3-syzkaller-00279-ge5fa841af679 #0 [ 40.952314][ T4208] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 40.962360][ T4208] Call Trace: [ 40.965632][ T4208] [ 40.968554][ T4208] dump_stack_lvl+0xf2/0x150 [ 40.973201][ T4208] dump_stack+0x15/0x20 [ 40.977354][ T4208] should_fail_ex+0x229/0x230 [ 40.982204][ T4208] should_fail+0xb/0x10 [ 40.986385][ T4208] should_fail_usercopy+0x1a/0x20 [ 40.991478][ T4208] _copy_from_user+0x1e/0xd0 [ 40.996066][ T4208] memdup_user+0x64/0xc0 [ 41.000303][ T4208] update_filter+0xbc/0x3b0 [ 41.004869][ T4208] __tun_chr_ioctl+0xb14/0x1860 [ 41.009716][ T4208] tun_chr_ioctl+0x27/0x30 [ 41.014135][ T4208] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 41.019235][ T4208] __se_sys_ioctl+0xd3/0x150 [ 41.023825][ T4208] __x64_sys_ioctl+0x43/0x50 [ 41.028418][ T4208] x64_sys_call+0x15cc/0x2d60 [ 41.033153][ T4208] do_syscall_64+0xc9/0x1c0 [ 41.037653][ T4208] ? clear_bhb_loop+0x55/0xb0 [ 41.042331][ T4208] ? clear_bhb_loop+0x55/0xb0 [ 41.047075][ T4208] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 41.053038][ T4208] RIP: 0033:0x7f36135a9e79 [ 41.057511][ T4208] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 41.077135][ T4208] RSP: 002b:00007f3612227038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 41.085560][ T4208] RAX: ffffffffffffffda RBX: 00007f3613745f80 RCX: 00007f36135a9e79 [ 41.093524][ T4208] RDX: 0000000020000100 RSI: 00000000400454d1 RDI: 0000000000000003 [ 41.101525][ T4208] RBP: 00007f3612227090 R08: 0000000000000000 R09: 0000000000000000 [ 41.109504][ T4208] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 41.117472][ T4208] R13: 0000000000000000 R14: 00007f3613745f80 R15: 00007ffeef0eab98 [ 41.125492][ T4208] [ 41.251137][ T3919] veth0_vlan: entered promiscuous mode [ 41.312495][ T4154] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.320009][ T4154] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.329327][ T4154] bridge_slave_0: entered allmulticast mode [ 41.336768][ T4154] bridge_slave_0: entered promiscuous mode [ 41.363110][ T4154] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.370174][ T4154] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.378448][ T4154] bridge_slave_1: entered allmulticast mode [ 41.403085][ T4154] bridge_slave_1: entered promiscuous mode [ 41.422374][ T4154] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 41.435156][ T3919] veth1_vlan: entered promiscuous mode [ 41.442784][ T4154] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 41.458874][ T3919] veth0_macvtap: entered promiscuous mode [ 41.467159][ T3919] veth1_macvtap: entered promiscuous mode [ 41.509665][ T4058] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 41.534183][ T4154] team0: Port device team_slave_0 added [ 41.542615][ T4154] team0: Port device team_slave_1 added [ 41.568723][ T4058] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 41.592761][ T3919] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 41.603237][ T3919] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.613045][ T3919] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 41.623519][ T3919] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.633411][ T3919] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 41.643847][ T3919] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.666828][ T3919] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 41.675014][ T3919] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 41.685503][ T3919] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.695345][ T3919] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 41.705920][ T3919] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.715770][ T3919] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 41.726194][ T3919] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.741435][ T3919] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 41.750542][ T3919] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.759281][ T3919] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.768049][ T3919] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.776828][ T3919] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.800755][ T29] kauditd_printk_skb: 43 callbacks suppressed [ 41.800766][ T29] audit: type=1400 audit(1723930607.010:324): avc: denied { mount } for pid=3919 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 41.828976][ T4058] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 41.852297][ T4058] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 41.869301][ T4154] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 41.876294][ T4154] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 41.903257][ T4154] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 41.957450][ T29] audit: type=1400 audit(1723930607.170:325): avc: denied { write } for pid=4227 comm="syz.1.137" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 41.979756][ T4228] loop1: detected capacity change from 0 to 512 [ 42.024396][ T4228] EXT4-fs error (device loop1): ext4_quota_enable:7018: comm syz.1.137: Bad quota inum: 11, type: 1 [ 42.046978][ T4232] netlink: 165 bytes leftover after parsing attributes in process `syz.3.91'. [ 42.080360][ T4058] 8021q: adding VLAN 0 to HW filter on device bond0 [ 42.095972][ T4235] loop0: detected capacity change from 0 to 512 [ 42.113740][ T4228] EXT4-fs warning (device loop1): ext4_enable_quotas:7066: Failed to enable quota tracking (type=1, err=-117, ino=11). Please run e2fsck to fix. [ 42.144508][ T4154] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 42.151464][ T4154] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 42.177492][ T4154] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 42.216908][ T29] audit: type=1400 audit(1723930607.410:326): avc: denied { read } for pid=4234 comm="syz.0.138" name="ppp" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 42.239627][ T29] audit: type=1400 audit(1723930607.410:327): avc: denied { ioctl } for pid=4234 comm="syz.0.138" path="socket:[6636]" dev="sockfs" ino=6636 ioctlcmd=0x48c8 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 42.304267][ T4228] EXT4-fs (loop1): mount failed [ 42.339165][ T4245] loop0: detected capacity change from 0 to 512 [ 42.356870][ T4245] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 42.386309][ T4246] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 42.709694][ T29] audit: type=1400 audit(1723930607.500:328): avc: denied { ioctl } for pid=4238 comm="syz.3.139" path="socket:[6651]" dev="sockfs" ino=6651 ioctlcmd=0x943d scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 42.735323][ T29] audit: type=1400 audit(1723930607.510:329): avc: denied { read } for pid=4238 comm="syz.3.139" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 42.754428][ T29] audit: type=1400 audit(1723930607.610:330): avc: denied { write } for pid=4238 comm="syz.3.139" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 42.818785][ T4154] hsr_slave_0: entered promiscuous mode [ 42.830093][ T4245] EXT4-fs (loop0): 1 truncate cleaned up [ 42.838778][ T4245] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.852506][ T4154] hsr_slave_1: entered promiscuous mode [ 42.867286][ T4154] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 42.886755][ T4154] Cannot create hsr debugfs directory [ 42.893948][ T4058] 8021q: adding VLAN 0 to HW filter on device team0 [ 42.912324][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.919380][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 42.935253][ T3261] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.959040][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.966102][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 43.141060][ T4154] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.191498][ T4058] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 43.230155][ T4154] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.306585][ T4154] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.409976][ T4154] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.448212][ T4058] veth0_vlan: entered promiscuous mode [ 43.472771][ T4058] veth1_vlan: entered promiscuous mode [ 43.546582][ T4058] veth0_macvtap: entered promiscuous mode [ 43.568310][ T4154] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 43.596618][ T4058] veth1_macvtap: entered promiscuous mode [ 43.618215][ T4154] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 43.627379][ T29] audit: type=1400 audit(1723930608.840:331): avc: denied { write } for pid=4291 comm="syz.3.143" name="sg0" dev="devtmpfs" ino=111 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 43.661632][ T4154] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 43.701321][ T4154] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 43.735893][ T4058] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 43.746362][ T4058] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 43.756165][ T4058] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 43.766630][ T4058] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 43.776437][ T4058] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 43.786896][ T4058] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 43.796716][ T4058] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 43.807143][ T4058] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 43.860349][ T29] audit: type=1400 audit(1723930609.060:332): avc: denied { map } for pid=4294 comm="syz.3.144" path="socket:[7004]" dev="sockfs" ino=7004 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 43.883578][ T29] audit: type=1400 audit(1723930609.060:333): avc: denied { read } for pid=4294 comm="syz.3.144" path="socket:[7004]" dev="sockfs" ino=7004 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 43.928718][ T4058] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 44.036515][ T4306] loop3: detected capacity change from 0 to 1024 [ 44.061157][ T4154] 8021q: adding VLAN 0 to HW filter on device bond0 [ 44.076832][ T4306] ext3: Unknown parameter 'nouser_xattr' [ 44.094094][ T4058] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 44.104717][ T4058] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 44.114534][ T4058] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 44.124950][ T4058] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 44.134760][ T4058] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 44.145223][ T4058] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 44.155106][ T4058] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 44.165541][ T4058] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 44.221557][ T4306] netlink: 312 bytes leftover after parsing attributes in process `syz.3.145'. [ 44.255736][ T4058] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 44.269602][ T4154] 8021q: adding VLAN 0 to HW filter on device team0 [ 44.306488][ T63] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.313621][ T63] bridge0: port 1(bridge_slave_0) entered forwarding state [ 44.341637][ T4321] netlink: 16 bytes leftover after parsing attributes in process `syz.3.146'. [ 44.355184][ T63] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.362263][ T63] bridge0: port 2(bridge_slave_1) entered forwarding state [ 44.407690][ T4058] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.416540][ T4058] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.425296][ T4058] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.433999][ T4058] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.482722][ T4154] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 44.493117][ T4154] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 44.613279][ T4336] netlink: 8 bytes leftover after parsing attributes in process `syz.3.148'. [ 44.747063][ T4154] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 44.766611][ T4355] loop3: detected capacity change from 0 to 512 [ 44.795141][ T4355] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 44.839778][ T4359] loop2: detected capacity change from 0 to 1024 [ 44.872920][ T4355] EXT4-fs (loop3): 1 truncate cleaned up [ 44.892728][ T4359] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.913432][ T4355] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.936955][ T4359] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.003950][ T3919] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.124702][ T4154] veth0_vlan: entered promiscuous mode [ 45.152476][ T4154] veth1_vlan: entered promiscuous mode [ 45.189831][ T4154] veth0_macvtap: entered promiscuous mode [ 45.213984][ T4154] veth1_macvtap: entered promiscuous mode [ 45.244702][ T4154] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 45.255300][ T4154] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.265137][ T4154] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 45.275549][ T4154] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.285357][ T4154] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 45.295802][ T4154] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.305619][ T4154] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 45.316103][ T4154] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.325928][ T4154] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 45.336423][ T4154] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.358252][ T4154] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 45.389386][ T4154] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 45.400024][ T4154] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.409907][ T4154] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 45.420344][ T4154] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.430165][ T4154] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 45.440669][ T4154] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.450535][ T4154] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 45.460985][ T4154] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.470795][ T4154] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 45.481216][ T4154] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.523365][ T4154] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 45.552133][ T4154] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.560921][ T4154] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.569677][ T4154] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.578451][ T4154] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.751761][ T4421] FAULT_INJECTION: forcing a failure. [ 45.751761][ T4421] name failslab, interval 1, probability 0, space 0, times 0 [ 45.764403][ T4421] CPU: 0 UID: 0 PID: 4421 Comm: syz.4.130 Not tainted 6.11.0-rc3-syzkaller-00279-ge5fa841af679 #0 [ 45.774989][ T4421] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 45.785080][ T4421] Call Trace: [ 45.788350][ T4421] [ 45.791284][ T4421] dump_stack_lvl+0xf2/0x150 [ 45.795960][ T4421] dump_stack+0x15/0x20 [ 45.800125][ T4421] should_fail_ex+0x229/0x230 [ 45.804888][ T4421] ? __kvmalloc_node_noprof+0x72/0x170 [ 45.810368][ T4421] should_failslab+0x8f/0xb0 [ 45.814996][ T4421] __kmalloc_node_noprof+0xa8/0x380 [ 45.820265][ T4421] __kvmalloc_node_noprof+0x72/0x170 [ 45.825680][ T4421] io_futex_cache_init+0x2c/0xb0 [ 45.830618][ T4421] io_ring_ctx_alloc+0x57f/0xe10 [ 45.835610][ T4421] io_uring_create+0x1cf/0x920 [ 45.840453][ T4421] __se_sys_io_uring_setup+0x1d2/0x1e0 [ 45.845935][ T4421] __x64_sys_io_uring_setup+0x31/0x40 [ 45.851490][ T4421] x64_sys_call+0x1f7e/0x2d60 [ 45.856169][ T4421] do_syscall_64+0xc9/0x1c0 [ 45.860672][ T4421] ? clear_bhb_loop+0x55/0xb0 [ 45.865354][ T4421] ? clear_bhb_loop+0x55/0xb0 [ 45.870045][ T4421] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 45.875938][ T4421] RIP: 0033:0x7fb678869e79 [ 45.880342][ T4421] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 45.899964][ T4421] RSP: 002b:00007fb6774c5fc8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 45.908379][ T4421] RAX: ffffffffffffffda RBX: 00007fb678a06058 RCX: 00007fb678869e79 [ 45.916453][ T4421] RDX: 0000000020000140 RSI: 0000000020000780 RDI: 0000000000004172 [ 45.924423][ T4421] RBP: 0000000020000780 R08: 0000000000000000 R09: 0000000020000140 [ 45.932388][ T4421] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 45.940356][ T4421] R13: 0000000020000100 R14: 0000000000004172 R15: 0000000020000140 [ 45.948327][ T4421] [ 49.008155][ T4443] loop3: detected capacity change from 0 to 1024 [ 49.048050][ T4441] loop0: detected capacity change from 0 to 2048 [ 49.079959][ T4452] netlink: 8 bytes leftover after parsing attributes in process `syz.4.155'. [ 49.084910][ T4443] EXT4-fs error (device loop3): ext4_ext_check_inode:520: inode #2: comm syz.3.152: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 4(0), depth 0(0) [ 49.099258][ T4454] loop1: detected capacity change from 0 to 2048 [ 49.106881][ T4443] EXT4-fs (loop3): get root inode failed [ 49.117374][ T4443] EXT4-fs (loop3): mount failed [ 49.133098][ T4441] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.142788][ T4449] loop2: detected capacity change from 0 to 2048 [ 49.170074][ T4443] loop3: detected capacity change from 0 to 512 [ 49.185768][ T4441] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.142: bg 0: block 234: padding at end of block bitmap is not set [ 49.195827][ T4449] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.202142][ T4454] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.233376][ T4443] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 49.251618][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 49.251629][ T29] audit: type=1326 audit(1723930614.460:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4459 comm="syz.4.157" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb678869e79 code=0x0 [ 49.289623][ T4449] sit0 speed is unknown, defaulting to 1000 [ 49.297079][ T4441] EXT4-fs (loop0): Remounting filesystem read-only [ 49.306101][ T4443] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 49.325341][ T4443] System zones: 1-12 [ 49.336643][ T4443] EXT4-fs (loop3): 1 truncate cleaned up [ 49.357481][ T29] audit: type=1400 audit(1723930614.530:344): avc: denied { mounton } for pid=4439 comm="syz.0.142" path="/23/file0/file0/file0" dev="loop0" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 49.381202][ T29] audit: type=1400 audit(1723930614.540:345): avc: denied { append } for pid=4453 comm="syz.1.156" path="/35/file1/net_prio.prioidx" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 49.407294][ T3261] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.413361][ T4468] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 49.416794][ T4443] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.455192][ T4469] loop4: detected capacity change from 0 to 1024 [ 49.463572][ T4468] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 32 with error 28 [ 49.475857][ T4468] EXT4-fs (loop1): This should not happen!! Data will be lost [ 49.475857][ T4468] [ 49.485503][ T4468] EXT4-fs (loop1): Total free blocks count 0 [ 49.491540][ T4468] EXT4-fs (loop1): Free/Dirty block details [ 49.497533][ T4468] EXT4-fs (loop1): free_blocks=2415919504 [ 49.503247][ T4468] EXT4-fs (loop1): dirty_blocks=32 [ 49.506496][ T4469] EXT4-fs: quotafile must be on filesystem root [ 49.508363][ T4468] EXT4-fs (loop1): Block reservation details [ 49.520555][ T4468] EXT4-fs (loop1): i_reserved_data_blocks=2 [ 49.537704][ T29] audit: type=1326 audit(1723930614.750:346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4453 comm="syz.1.156" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f36135a9e79 code=0x0 [ 49.581281][ T3919] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.600110][ T4473] loop0: detected capacity change from 0 to 4096 [ 49.606793][ T4468] tmpfs: Bad value for 'size' [ 49.615440][ T4469] netlink: 'syz.4.157': attribute type 1 has an invalid length. [ 49.632778][ T4473] ext2: Unknown parameter 'dont_measure' [ 49.666052][ T4058] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.669128][ T29] audit: type=1400 audit(1723930614.880:347): avc: denied { ioctl } for pid=4477 comm="syz.0.160" path="socket:[5791]" dev="sockfs" ino=5791 ioctlcmd=0x660b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 49.676129][ T4480] loop3: detected capacity change from 0 to 128 [ 49.716431][ T4480] FAT-fs (loop3): bogus number of reserved sectors [ 49.722938][ T4480] FAT-fs (loop3): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 49.732247][ T4480] FAT-fs (loop3): Can't find a valid FAT filesystem [ 49.802167][ T4480] loop3: detected capacity change from 0 to 128 [ 49.814518][ T4480] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 49.828845][ T4480] ext4 filesystem being mounted at /10/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 49.839744][ T4491] netlink: 20 bytes leftover after parsing attributes in process `syz.2.163'. [ 49.925914][ T3262] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.940903][ T64] bridge0: port 3(hsr0) entered disabled state [ 49.947780][ T64] bridge_slave_1: left allmulticast mode [ 49.953645][ T64] bridge_slave_1: left promiscuous mode [ 49.959265][ T64] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.971613][ T64] bridge_slave_0: left allmulticast mode [ 49.977466][ T64] bridge_slave_0: left promiscuous mode [ 49.983243][ T64] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.993721][ T29] audit: type=1400 audit(1723930615.210:348): avc: denied { setattr } for pid=4504 comm="syz.1.166" name="NETLINK" dev="sockfs" ino=7522 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 50.063029][ T4509] netlink: 'syz.1.167': attribute type 1 has an invalid length. [ 50.099407][ T4514] loop1: detected capacity change from 0 to 164 [ 50.106478][ T4514] Unable to read rock-ridge attributes [ 50.112466][ T29] audit: type=1400 audit(1723930615.320:349): avc: denied { mount } for pid=4513 comm="syz.1.169" name="/" dev="loop1" ino=1792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 50.143715][ T4514] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 50.150095][ T4514] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 50.157941][ T29] audit: type=1400 audit(1723930615.360:350): avc: denied { write } for pid=4513 comm="syz.1.169" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 50.177446][ T29] audit: type=1400 audit(1723930615.360:351): avc: denied { ioctl } for pid=4516 comm="syz.0.170" path="socket:[5839]" dev="sockfs" ino=5839 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 50.203836][ T64] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 50.214862][ T64] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 50.224675][ T64] bond0 (unregistering): Released all slaves [ 50.232772][ T4514] hsr_slave_0: left promiscuous mode [ 50.241502][ T4514] hsr_slave_1: left promiscuous mode [ 50.287347][ T4533] netlink: 165 bytes leftover after parsing attributes in process `syz.4.173'. [ 50.317715][ T4535] loop4: detected capacity change from 0 to 512 [ 50.336916][ T29] audit: type=1400 audit(1723930615.550:352): avc: denied { name_connect } for pid=4538 comm="syz.0.176" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 50.339051][ T4539] loop0: detected capacity change from 0 to 512 [ 50.368384][ T4535] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.382534][ T4535] ext4 filesystem being mounted at /6/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 50.403769][ T4154] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.411007][ T4539] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 50.420709][ T4539] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 50.428790][ T4539] System zones: 0-1, 15-15, 18-18, 34-34 [ 50.436816][ T64] hsr_slave_0: left promiscuous mode [ 50.451983][ T4539] EXT4-fs (loop0): orphan cleanup on readonly fs [ 50.459486][ T4539] EXT4-fs warning (device loop0): ext4_enable_quotas:7066: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 50.461048][ T64] hsr_slave_1: left promiscuous mode [ 50.474052][ T4539] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 50.486168][ T4539] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.176: bg 0: block 40: padding at end of block bitmap is not set [ 50.501400][ T64] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 50.508865][ T64] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 50.509179][ T4548] netlink: 'syz.1.178': attribute type 1 has an invalid length. [ 50.525665][ T4539] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 50.534823][ T64] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 50.542219][ T64] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 50.552949][ T64] veth1_macvtap: left promiscuous mode [ 50.558547][ T64] veth0_macvtap: left promiscuous mode [ 50.564148][ T64] veth1_vlan: left promiscuous mode [ 50.569414][ T64] veth0_vlan: left promiscuous mode [ 50.569428][ T4539] EXT4-fs (loop0): 1 truncate cleaned up [ 50.580646][ T4539] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 50.593849][ T4558] loop1: detected capacity change from 0 to 164 [ 50.605432][ T3261] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.673254][ T4561] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=272 sclass=netlink_route_socket pid=4561 comm=syz.0.180 [ 50.732087][ T64] team0 (unregistering): Port device team_slave_0 removed [ 50.794520][ T4545] sit0 speed is unknown, defaulting to 1000 [ 50.805534][ T3919] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 50.843456][ T4573] loop3: detected capacity change from 0 to 128 [ 50.904935][ T4578] 9pnet_fd: Insufficient options for proto=fd [ 50.917614][ T4580] netlink: 165 bytes leftover after parsing attributes in process `syz.3.185'. [ 50.929125][ T4583] netlink: 8 bytes leftover after parsing attributes in process `syz.4.188'. [ 50.929229][ T4578] netlink: 16 bytes leftover after parsing attributes in process `syz.0.184'. [ 50.940596][ T4579] loop1: detected capacity change from 0 to 1024 [ 50.955603][ T4584] FAULT_INJECTION: forcing a failure. [ 50.955603][ T4584] name failslab, interval 1, probability 0, space 0, times 0 [ 50.963423][ T4579] EXT4-fs: Ignoring removed nomblk_io_submit option [ 50.968283][ T4584] CPU: 0 UID: 0 PID: 4584 Comm: syz.2.187 Not tainted 6.11.0-rc3-syzkaller-00279-ge5fa841af679 #0 [ 50.985389][ T4584] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 50.995428][ T4584] Call Trace: [ 50.998719][ T4584] [ 51.001636][ T4584] dump_stack_lvl+0xf2/0x150 [ 51.006312][ T4584] dump_stack+0x15/0x20 [ 51.010461][ T4584] should_fail_ex+0x229/0x230 [ 51.015133][ T4584] ? v9fs_session_init+0x4c/0xda0 [ 51.020280][ T4584] should_failslab+0x8f/0xb0 [ 51.024864][ T4584] __kmalloc_node_track_caller_noprof+0xa6/0x380 [ 51.031182][ T4584] kstrdup+0x3a/0x80 [ 51.035062][ T4584] v9fs_session_init+0x4c/0xda0 [ 51.039970][ T4584] ? __rcu_read_unlock+0x4e/0x70 [ 51.044957][ T4584] ? __rcu_read_unlock+0x4e/0x70 [ 51.049912][ T4584] ? should_fail_ex+0xd7/0x230 [ 51.054668][ T4584] ? v9fs_mount+0x53/0x560 [ 51.059122][ T4584] ? should_failslab+0x8f/0xb0 [ 51.063900][ T4584] v9fs_mount+0x69/0x560 [ 51.068241][ T4584] ? __pfx_v9fs_mount+0x10/0x10 [ 51.073083][ T4584] legacy_get_tree+0x77/0xd0 [ 51.077814][ T4584] vfs_get_tree+0x56/0x1d0 [ 51.082214][ T4584] do_new_mount+0x227/0x690 [ 51.086754][ T4584] path_mount+0x49b/0xb30 [ 51.091075][ T4584] __se_sys_mount+0x27c/0x2d0 [ 51.095796][ T4584] __x64_sys_mount+0x67/0x80 [ 51.100452][ T4584] x64_sys_call+0x203e/0x2d60 [ 51.105180][ T4584] do_syscall_64+0xc9/0x1c0 [ 51.109684][ T4584] ? clear_bhb_loop+0x55/0xb0 [ 51.114496][ T4584] ? clear_bhb_loop+0x55/0xb0 [ 51.119422][ T4584] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.125372][ T4584] RIP: 0033:0x7f2441579e79 [ 51.129785][ T4584] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 51.149492][ T4584] RSP: 002b:00007f24401f7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 51.157892][ T4584] RAX: ffffffffffffffda RBX: 00007f2441715f80 RCX: 00007f2441579e79 [ 51.165848][ T4584] RDX: 00000000200000c0 RSI: 0000000020000080 RDI: 0000000000000000 [ 51.173820][ T4584] RBP: 00007f24401f7090 R08: 0000000020000340 R09: 0000000000000000 [ 51.181774][ T4584] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 51.189763][ T4584] R13: 0000000000000000 R14: 00007f2441715f80 R15: 00007fffb0808338 [ 51.197754][ T4584] [ 51.208105][ T4579] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.225748][ T4579] netlink: 'syz.1.186': attribute type 13 has an invalid length. [ 51.248218][ T4587] 9pnet_fd: p9_fd_create_unix (4587): address too long: ./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 51.251705][ T4587] loop0: detected capacity change from 0 to 512 [ 51.385468][ T4579] bridge0: port 3(gretap0) entered disabled state [ 51.412461][ T4579] gretap0: refused to change device tx_queue_len [ 51.419425][ T4579] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 51.484731][ T3262] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.589187][ T4606] netlink: 12 bytes leftover after parsing attributes in process `syz.2.195'. [ 51.661492][ T4606] loop2: detected capacity change from 0 to 512 [ 51.689916][ T4609] netlink: 20 bytes leftover after parsing attributes in process `syz.4.197'. [ 51.704998][ T4606] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.723864][ T4609] netlink: 20 bytes leftover after parsing attributes in process `syz.4.197'. [ 51.751492][ T4606] ext4 filesystem being mounted at /9/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 51.768350][ T4618] loop0: detected capacity change from 0 to 1764 [ 51.769936][ T4611] loop1: detected capacity change from 0 to 2048 [ 51.781244][ T4618] iso9660: Unknown parameter 'sbse„' [ 51.786671][ T4609] netlink: 20 bytes leftover after parsing attributes in process `syz.4.197'. [ 51.811649][ T4611] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.833281][ T4611] ext4 filesystem being mounted at /43/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 51.846160][ T4058] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.865625][ T4611] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: none. [ 51.914190][ T3262] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.955695][ T4625] loop1: detected capacity change from 0 to 1024 [ 51.995052][ T4625] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.208756][ T3262] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.339904][ T4636] loop1: detected capacity change from 0 to 128 [ 52.348704][ T4635] FAULT_INJECTION: forcing a failure. [ 52.348704][ T4635] name failslab, interval 1, probability 0, space 0, times 0 [ 52.361463][ T4635] CPU: 1 UID: 0 PID: 4635 Comm: syz.3.203 Not tainted 6.11.0-rc3-syzkaller-00279-ge5fa841af679 #0 [ 52.372048][ T4635] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 52.382208][ T4635] Call Trace: [ 52.385556][ T4635] [ 52.388487][ T4635] dump_stack_lvl+0xf2/0x150 [ 52.393140][ T4635] dump_stack+0x15/0x20 [ 52.397419][ T4635] should_fail_ex+0x229/0x230 [ 52.402103][ T4635] ? v9fs_session_init+0x79/0xda0 [ 52.407127][ T4635] should_failslab+0x8f/0xb0 [ 52.410090][ T4640] hsr0: entered promiscuous mode [ 52.411834][ T4635] __kmalloc_node_track_caller_noprof+0xa6/0x380 [ 52.423074][ T4635] kstrdup+0x3a/0x80 [ 52.427021][ T4635] v9fs_session_init+0x79/0xda0 [ 52.431860][ T4635] ? __rcu_read_unlock+0x4e/0x70 [ 52.436833][ T4635] ? __rcu_read_unlock+0x4e/0x70 [ 52.441764][ T4635] ? should_fail_ex+0xd7/0x230 [ 52.446536][ T4635] ? v9fs_mount+0x53/0x560 [ 52.451022][ T4635] ? should_failslab+0x8f/0xb0 [ 52.455835][ T4635] v9fs_mount+0x69/0x560 [ 52.460085][ T4635] ? __pfx_v9fs_mount+0x10/0x10 [ 52.464930][ T4635] legacy_get_tree+0x77/0xd0 [ 52.469583][ T4635] vfs_get_tree+0x56/0x1d0 [ 52.474090][ T4635] do_new_mount+0x227/0x690 [ 52.478602][ T4635] path_mount+0x49b/0xb30 [ 52.482921][ T4635] __se_sys_mount+0x27c/0x2d0 [ 52.487590][ T4635] __x64_sys_mount+0x67/0x80 [ 52.492261][ T4635] x64_sys_call+0x203e/0x2d60 [ 52.496927][ T4635] do_syscall_64+0xc9/0x1c0 [ 52.501454][ T4635] ? clear_bhb_loop+0x55/0xb0 [ 52.506125][ T4635] ? clear_bhb_loop+0x55/0xb0 [ 52.510790][ T4635] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.516701][ T4635] RIP: 0033:0x7f80f6fd9e79 [ 52.521098][ T4635] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 52.540693][ T4635] RSP: 002b:00007f80f5c57038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 52.549088][ T4635] RAX: ffffffffffffffda RBX: 00007f80f7175f80 RCX: 00007f80f6fd9e79 [ 52.557045][ T4635] RDX: 00000000200000c0 RSI: 0000000020000080 RDI: 0000000000000000 [ 52.565020][ T4635] RBP: 00007f80f5c57090 R08: 0000000020000340 R09: 0000000000000000 [ 52.572977][ T4635] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 52.580959][ T4635] R13: 0000000000000000 R14: 00007f80f7175f80 R15: 00007fffc6706c08 [ 52.588921][ T4635] [ 52.659147][ T4649] netlink: 'syz.4.209': attribute type 1 has an invalid length. [ 52.687174][ T4653] loop4: detected capacity change from 0 to 512 [ 52.699628][ T4653] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 52.714029][ T4653] EXT4-fs (loop4): orphan cleanup on readonly fs [ 52.720635][ T4653] EXT4-fs warning (device loop4): ext4_enable_quotas:7066: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 52.760236][ T4666] SELinux: security_context_str_to_sid (‰ñ‹ÅT>Õr£Ä_‘Tߣå*¢¹¬ø û…M­t.ïa‡ò0HD–) failed with errno=-22 [ 52.775553][ T4666] loop3: detected capacity change from 0 to 512 [ 52.789785][ T4653] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 52.794149][ T4666] EXT4-fs error (device loop3): ext4_orphan_get:1391: inode #15: comm syz.3.215: casefold flag without casefold feature [ 52.799665][ T4653] EXT4-fs error (device loop4): ext4_ext_check_inode:520: inode #13: comm syz.4.210: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 52.810612][ T4666] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.215: couldn't read orphan inode 15 (err -117) [ 52.829497][ T4653] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.210: couldn't read orphan inode 13 (err -117) [ 52.851794][ T4666] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.875215][ T4653] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 52.888820][ T3919] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.914304][ T4688] netlink: 'syz.1.220': attribute type 4 has an invalid length. [ 52.930610][ T4653] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 52.936963][ T4692] FAULT_INJECTION: forcing a failure. [ 52.936963][ T4692] name failslab, interval 1, probability 0, space 0, times 0 [ 52.941768][ T4687] netlink: 'syz.1.220': attribute type 4 has an invalid length. [ 52.952471][ T4692] CPU: 1 UID: 0 PID: 4692 Comm: syz.3.218 Not tainted 6.11.0-rc3-syzkaller-00279-ge5fa841af679 #0 [ 52.952493][ T4692] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 52.952502][ T4692] Call Trace: [ 52.952508][ T4692] [ 52.952513][ T4692] dump_stack_lvl+0xf2/0x150 [ 52.960467][ T4653] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 52.970692][ T4692] dump_stack+0x15/0x20 [ 52.970723][ T4692] should_fail_ex+0x229/0x230 [ 53.008290][ T4692] ? p9_client_create+0x57/0xa80 [ 53.013225][ T4692] should_failslab+0x8f/0xb0 [ 53.017808][ T4692] __kmalloc_cache_noprof+0x4b/0x2a0 [ 53.023220][ T4692] p9_client_create+0x57/0xa80 [ 53.027973][ T4692] ? v9fs_session_init+0x79/0xda0 [ 53.032982][ T4692] ? should_failslab+0x8f/0xb0 [ 53.037844][ T4692] ? __kmalloc_node_track_caller_noprof+0x17e/0x380 [ 53.044427][ T4692] v9fs_session_init+0xf9/0xda0 [ 53.049338][ T4692] ? __rcu_read_unlock+0x4e/0x70 [ 53.054308][ T4692] ? __rcu_read_unlock+0x4e/0x70 [ 53.059309][ T4692] ? v9fs_mount+0x53/0x560 [ 53.063711][ T4692] ? should_failslab+0x8f/0xb0 [ 53.068545][ T4692] v9fs_mount+0x69/0x560 [ 53.072795][ T4692] ? __pfx_v9fs_mount+0x10/0x10 [ 53.077699][ T4692] legacy_get_tree+0x77/0xd0 [ 53.082343][ T4692] vfs_get_tree+0x56/0x1d0 [ 53.086775][ T4692] do_new_mount+0x227/0x690 [ 53.091271][ T4692] path_mount+0x49b/0xb30 [ 53.095592][ T4692] __se_sys_mount+0x27c/0x2d0 [ 53.100347][ T4692] __x64_sys_mount+0x67/0x80 [ 53.104932][ T4692] x64_sys_call+0x203e/0x2d60 [ 53.109600][ T4692] do_syscall_64+0xc9/0x1c0 [ 53.114095][ T4692] ? clear_bhb_loop+0x55/0xb0 [ 53.119319][ T4692] ? clear_bhb_loop+0x55/0xb0 [ 53.124061][ T4692] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.129944][ T4692] RIP: 0033:0x7f80f6fd9e79 [ 53.134435][ T4692] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 53.154026][ T4692] RSP: 002b:00007f80f5c57038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 53.162472][ T4692] RAX: ffffffffffffffda RBX: 00007f80f7175f80 RCX: 00007f80f6fd9e79 [ 53.170427][ T4692] RDX: 00000000200000c0 RSI: 0000000020000080 RDI: 0000000000000000 [ 53.178385][ T4692] RBP: 00007f80f5c57090 R08: 0000000020000340 R09: 0000000000000000 [ 53.186392][ T4692] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 53.194381][ T4692] R13: 0000000000000000 R14: 00007f80f7175f80 R15: 00007fffc6706c08 [ 53.202337][ T4692] [ 53.211321][ T4653] EXT4-fs warning (device loop4): ext4_enable_quotas:7066: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 53.227315][ T4699] EXT4-fs error (device loop4): ext4_lookup:1815: inode #2: comm syz.4.210: deleted inode referenced: 12 [ 53.239082][ T4699] EXT4-fs error (device loop4): ext4_lookup:1815: inode #2: comm syz.4.210: deleted inode referenced: 12 [ 53.256290][ T4702] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 53.289506][ T4154] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.369546][ T4730] loop2: detected capacity change from 0 to 164 [ 53.416425][ T4736] FAULT_INJECTION: forcing a failure. [ 53.416425][ T4736] name failslab, interval 1, probability 0, space 0, times 0 [ 53.429116][ T4736] CPU: 1 UID: 0 PID: 4736 Comm: syz.2.234 Not tainted 6.11.0-rc3-syzkaller-00279-ge5fa841af679 #0 [ 53.439727][ T4736] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 53.444977][ T4732] loop1: detected capacity change from 0 to 8192 [ 53.449817][ T4736] Call Trace: [ 53.449825][ T4736] [ 53.462386][ T4732] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 53.472809][ T4736] dump_stack_lvl+0xf2/0x150 [ 53.477473][ T4736] dump_stack+0x15/0x20 [ 53.481671][ T4736] should_fail_ex+0x229/0x230 [ 53.486354][ T4736] ? p9_client_create+0x1a7/0xa80 [ 53.491364][ T4736] should_failslab+0x8f/0xb0 [ 53.495956][ T4736] __kmalloc_node_track_caller_noprof+0xa6/0x380 [ 53.502272][ T4736] ? should_failslab+0x8f/0xb0 [ 53.507026][ T4736] kstrdup+0x3a/0x80 [ 53.510910][ T4736] p9_client_create+0x1a7/0xa80 [ 53.515748][ T4736] v9fs_session_init+0xf9/0xda0 [ 53.520663][ T4736] ? __rcu_read_unlock+0x4e/0x70 [ 53.525597][ T4736] ? v9fs_mount+0x53/0x560 [ 53.530003][ T4736] ? should_failslab+0x8f/0xb0 [ 53.534758][ T4736] v9fs_mount+0x69/0x560 [ 53.539015][ T4736] ? __pfx_v9fs_mount+0x10/0x10 [ 53.543963][ T4736] legacy_get_tree+0x77/0xd0 [ 53.548549][ T4736] vfs_get_tree+0x56/0x1d0 [ 53.553005][ T4736] do_new_mount+0x227/0x690 [ 53.557543][ T4736] path_mount+0x49b/0xb30 [ 53.562010][ T4736] __se_sys_mount+0x27c/0x2d0 [ 53.566679][ T4736] __x64_sys_mount+0x67/0x80 [ 53.571312][ T4736] x64_sys_call+0x203e/0x2d60 [ 53.575976][ T4736] do_syscall_64+0xc9/0x1c0 [ 53.580474][ T4736] ? clear_bhb_loop+0x55/0xb0 [ 53.585141][ T4736] ? clear_bhb_loop+0x55/0xb0 [ 53.589811][ T4736] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.595762][ T4736] RIP: 0033:0x7f2441579e79 [ 53.600198][ T4736] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 53.620204][ T4736] RSP: 002b:00007f24401f7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 53.628599][ T4736] RAX: ffffffffffffffda RBX: 00007f2441715f80 RCX: 00007f2441579e79 [ 53.636553][ T4736] RDX: 00000000200000c0 RSI: 0000000020000080 RDI: 0000000000000000 [ 53.644567][ T4736] RBP: 00007f24401f7090 R08: 0000000020000340 R09: 0000000000000000 [ 53.652522][ T4736] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 53.660497][ T4736] R13: 0000000000000000 R14: 00007f2441715f80 R15: 00007fffb0808338 [ 53.668456][ T4736] [ 53.769156][ T4759] loop4: detected capacity change from 0 to 1024 [ 53.788744][ T4759] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 53.799724][ T4759] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (38281!=20869) [ 53.807638][ T4754] loop2: detected capacity change from 0 to 4096 [ 53.811437][ T4759] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 53.826149][ T4759] EXT4-fs error (device loop4): ext4_ext_check_inode:520: inode #3: comm syz.4.240: pblk 82 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 53.848694][ T4769] loop1: detected capacity change from 0 to 512 [ 53.853809][ T4759] EXT4-fs (loop4): no journal found [ 53.855430][ T4769] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities [ 53.874471][ T4769] netlink: 'syz.1.243': attribute type 15 has an invalid length. [ 53.882231][ T4769] netlink: 'syz.1.243': attribute type 7 has an invalid length. [ 53.939854][ T4778] loop0: detected capacity change from 0 to 128 [ 53.988073][ T4781] FAULT_INJECTION: forcing a failure. [ 53.988073][ T4781] name failslab, interval 1, probability 0, space 0, times 0 [ 53.998303][ T4782] FAULT_INJECTION: forcing a failure. [ 53.998303][ T4782] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 54.000704][ T4781] CPU: 1 UID: 0 PID: 4781 Comm: syz.2.247 Not tainted 6.11.0-rc3-syzkaller-00279-ge5fa841af679 #0 [ 54.024294][ T4781] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 54.034330][ T4781] Call Trace: [ 54.037592][ T4781] [ 54.040508][ T4781] dump_stack_lvl+0xf2/0x150 [ 54.045093][ T4781] dump_stack+0x15/0x20 [ 54.049355][ T4781] should_fail_ex+0x229/0x230 [ 54.054024][ T4781] ? match_strdup+0x37/0x40 [ 54.058593][ T4781] should_failslab+0x8f/0xb0 [ 54.063224][ T4781] __kmalloc_node_track_caller_noprof+0xa6/0x380 [ 54.069603][ T4781] kmemdup_nul+0x30/0x80 [ 54.073879][ T4781] match_strdup+0x37/0x40 [ 54.078249][ T4781] p9_client_create+0x25c/0xa80 [ 54.083087][ T4781] v9fs_session_init+0xf9/0xda0 [ 54.087924][ T4781] ? __rcu_read_unlock+0x4e/0x70 [ 54.092903][ T4781] ? __rcu_read_unlock+0x4e/0x70 [ 54.097933][ T4781] ? v9fs_mount+0x53/0x560 [ 54.102332][ T4781] ? should_failslab+0x8f/0xb0 [ 54.107200][ T4781] v9fs_mount+0x69/0x560 [ 54.111428][ T4781] ? __pfx_v9fs_mount+0x10/0x10 [ 54.116262][ T4781] legacy_get_tree+0x77/0xd0 [ 54.120844][ T4781] vfs_get_tree+0x56/0x1d0 [ 54.125267][ T4781] do_new_mount+0x227/0x690 [ 54.129829][ T4781] path_mount+0x49b/0xb30 [ 54.134150][ T4781] __se_sys_mount+0x27c/0x2d0 [ 54.138906][ T4781] __x64_sys_mount+0x67/0x80 [ 54.143502][ T4781] x64_sys_call+0x203e/0x2d60 [ 54.148224][ T4781] do_syscall_64+0xc9/0x1c0 [ 54.152721][ T4781] ? clear_bhb_loop+0x55/0xb0 [ 54.157420][ T4781] ? clear_bhb_loop+0x55/0xb0 [ 54.162094][ T4781] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 54.168025][ T4781] RIP: 0033:0x7f2441579e79 [ 54.172423][ T4781] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 54.192016][ T4781] RSP: 002b:00007f24401f7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 54.200570][ T4781] RAX: ffffffffffffffda RBX: 00007f2441715f80 RCX: 00007f2441579e79 [ 54.208525][ T4781] RDX: 00000000200000c0 RSI: 0000000020000080 RDI: 0000000000000000 [ 54.216481][ T4781] RBP: 00007f24401f7090 R08: 0000000020000340 R09: 0000000000000000 [ 54.224437][ T4781] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 54.232435][ T4781] R13: 0000000000000000 R14: 00007f2441715f80 R15: 00007fffb0808338 [ 54.240417][ T4781] [ 54.243426][ T4782] CPU: 0 UID: 0 PID: 4782 Comm: syz.4.244 Not tainted 6.11.0-rc3-syzkaller-00279-ge5fa841af679 #0 [ 54.254031][ T4782] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 54.264083][ T4782] Call Trace: [ 54.267361][ T4782] [ 54.270365][ T4782] dump_stack_lvl+0xf2/0x150 [ 54.274966][ T4782] dump_stack+0x15/0x20 [ 54.279159][ T4782] should_fail_ex+0x229/0x230 [ 54.283945][ T4782] should_fail+0xb/0x10 [ 54.288164][ T4782] should_fail_usercopy+0x1a/0x20 [ 54.293196][ T4782] _copy_to_user+0x1e/0xa0 [ 54.297763][ T4782] io_uring_create+0x766/0x920 [ 54.302534][ T4782] __se_sys_io_uring_setup+0x1d2/0x1e0 [ 54.308045][ T4782] __x64_sys_io_uring_setup+0x31/0x40 [ 54.313519][ T4782] x64_sys_call+0x1f7e/0x2d60 [ 54.318236][ T4782] do_syscall_64+0xc9/0x1c0 [ 54.322745][ T4782] ? clear_bhb_loop+0x55/0xb0 [ 54.327415][ T4782] ? clear_bhb_loop+0x55/0xb0 [ 54.332111][ T4782] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 54.337995][ T4782] RIP: 0033:0x7fb678869e79 [ 54.342430][ T4782] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 54.362045][ T4782] RSP: 002b:00007fb6774c5fc8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 54.370441][ T4782] RAX: ffffffffffffffda RBX: 00007fb678a06058 RCX: 00007fb678869e79 [ 54.378449][ T4782] RDX: 0000000020000140 RSI: 0000000020000780 RDI: 0000000000004172 [ 54.386405][ T4782] RBP: 0000000020000780 R08: 0000000000000000 R09: 0000000020000140 [ 54.394370][ T4782] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 54.402330][ T4782] R13: 0000000020000100 R14: 0000000000004172 R15: 0000000020000140 [ 54.410288][ T4782] [ 54.431385][ T4796] __nla_validate_parse: 39 callbacks suppressed [ 54.431397][ T4796] netlink: 165 bytes leftover after parsing attributes in process `syz.0.249'. [ 54.541897][ T4826] FAULT_INJECTION: forcing a failure. [ 54.541897][ T4826] name failslab, interval 1, probability 0, space 0, times 0 [ 54.553124][ T4823] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 54.554522][ T4826] CPU: 1 UID: 0 PID: 4826 Comm: syz.4.258 Not tainted 6.11.0-rc3-syzkaller-00279-ge5fa841af679 #0 [ 54.554545][ T4826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 54.554556][ T4826] Call Trace: [ 54.554562][ T4826] [ 54.554568][ T4826] dump_stack_lvl+0xf2/0x150 [ 54.560697][ T4823] syzkaller0: linktype set to 65535 [ 54.570917][ T4826] dump_stack+0x15/0x20 [ 54.570947][ T4826] should_fail_ex+0x229/0x230 [ 54.570995][ T4826] ? parse_opts+0xba/0x2c0 [ 54.610227][ T4826] should_failslab+0x8f/0xb0 [ 54.614881][ T4826] __kmalloc_node_track_caller_noprof+0xa6/0x380 [ 54.621257][ T4826] kstrdup+0x3a/0x80 [ 54.625262][ T4826] parse_opts+0xba/0x2c0 [ 54.629513][ T4826] ? match_strdup+0x37/0x40 [ 54.634044][ T4826] p9_fd_create+0x46/0x260 [ 54.638500][ T4826] p9_client_create+0x59a/0xa80 [ 54.643356][ T4826] v9fs_session_init+0xf9/0xda0 [ 54.648281][ T4826] ? __rcu_read_unlock+0x4e/0x70 [ 54.653276][ T4826] ? __rcu_read_unlock+0x4e/0x70 [ 54.658282][ T4826] ? v9fs_mount+0x53/0x560 [ 54.662704][ T4826] ? should_failslab+0x8f/0xb0 [ 54.667476][ T4826] v9fs_mount+0x69/0x560 [ 54.671721][ T4826] ? __pfx_v9fs_mount+0x10/0x10 [ 54.676645][ T4826] legacy_get_tree+0x77/0xd0 [ 54.681249][ T4826] vfs_get_tree+0x56/0x1d0 [ 54.685758][ T4826] do_new_mount+0x227/0x690 [ 54.690265][ T4826] path_mount+0x49b/0xb30 [ 54.694646][ T4826] __se_sys_mount+0x27c/0x2d0 [ 54.699339][ T4826] __x64_sys_mount+0x67/0x80 [ 54.703940][ T4826] x64_sys_call+0x203e/0x2d60 [ 54.708632][ T4826] do_syscall_64+0xc9/0x1c0 [ 54.713166][ T4826] ? clear_bhb_loop+0x55/0xb0 [ 54.714032][ T29] kauditd_printk_skb: 110 callbacks suppressed [ 54.714043][ T29] audit: type=1400 audit(1723930619.770:462): avc: denied { remount } for pid=4822 comm="syz.3.257" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 54.717951][ T4826] ? clear_bhb_loop+0x55/0xb0 [ 54.717977][ T4826] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 54.718018][ T4826] RIP: 0033:0x7fb678869e79 [ 54.718030][ T4826] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 54.718047][ T4826] RSP: 002b:00007fb6774e7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 54.718068][ T4826] RAX: ffffffffffffffda RBX: 00007fb678a05f80 RCX: 00007fb678869e79 [ 54.718080][ T4826] RDX: 00000000200000c0 RSI: 0000000020000080 RDI: 0000000000000000 [ 54.718108][ T4826] RBP: 00007fb6774e7090 R08: 0000000020000340 R09: 0000000000000000 [ 54.718119][ T4826] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 54.718129][ T4826] R13: 0000000000000000 R14: 00007fb678a05f80 R15: 00007ffd3a9a0a68 [ 54.718142][ T4826] [ 54.757797][ T4847] loop0: detected capacity change from 0 to 1024 [ 54.846488][ T4847] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.890072][ T29] audit: type=1400 audit(1723930620.100:463): avc: denied { wake_alarm } for pid=4867 comm="syz.1.261" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 54.942602][ T4884] loop4: detected capacity change from 0 to 128 [ 54.977388][ T4887] netlink: 165 bytes leftover after parsing attributes in process `syz.4.265'. [ 54.985826][ T3261] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.015747][ T4895] loop1: detected capacity change from 0 to 164 [ 55.056694][ T4895] rock: corrupted directory entry. extent=41, offset=65536, size=8 [ 55.098796][ T4915] FAULT_INJECTION: forcing a failure. [ 55.098796][ T4915] name failslab, interval 1, probability 0, space 0, times 0 [ 55.111517][ T4915] CPU: 0 UID: 0 PID: 4915 Comm: syz.4.270 Not tainted 6.11.0-rc3-syzkaller-00279-ge5fa841af679 #0 [ 55.122243][ T4915] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 55.132330][ T4915] Call Trace: [ 55.135603][ T4915] [ 55.138538][ T4915] dump_stack_lvl+0xf2/0x150 [ 55.139796][ T4917] FAULT_INJECTION: forcing a failure. [ 55.139796][ T4917] name failslab, interval 1, probability 0, space 0, times 0 [ 55.143133][ T4915] dump_stack+0x15/0x20 [ 55.159837][ T4915] should_fail_ex+0x229/0x230 [ 55.164591][ T4915] ? p9_fd_create+0xc6/0x260 [ 55.169170][ T4915] should_failslab+0x8f/0xb0 [ 55.173850][ T4915] __kmalloc_cache_noprof+0x4b/0x2a0 [ 55.179129][ T4915] p9_fd_create+0xc6/0x260 [ 55.183542][ T4915] p9_client_create+0x59a/0xa80 [ 55.188411][ T4915] v9fs_session_init+0xf9/0xda0 [ 55.193244][ T4915] ? __rcu_read_unlock+0x4e/0x70 [ 55.198166][ T4915] ? __rcu_read_unlock+0x4e/0x70 [ 55.203171][ T4915] ? v9fs_mount+0x53/0x560 [ 55.207747][ T4915] ? should_failslab+0x8f/0xb0 [ 55.212503][ T4915] v9fs_mount+0x69/0x560 [ 55.216805][ T4915] ? __pfx_v9fs_mount+0x10/0x10 [ 55.221643][ T4915] legacy_get_tree+0x77/0xd0 [ 55.226224][ T4915] vfs_get_tree+0x56/0x1d0 [ 55.230698][ T4915] do_new_mount+0x227/0x690 [ 55.235220][ T4915] path_mount+0x49b/0xb30 [ 55.239592][ T4915] __se_sys_mount+0x27c/0x2d0 [ 55.244262][ T4915] __x64_sys_mount+0x67/0x80 [ 55.248844][ T4915] x64_sys_call+0x203e/0x2d60 [ 55.253528][ T4915] do_syscall_64+0xc9/0x1c0 [ 55.258100][ T4915] ? clear_bhb_loop+0x55/0xb0 [ 55.262845][ T4915] ? clear_bhb_loop+0x55/0xb0 [ 55.267515][ T4915] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 55.273466][ T4915] RIP: 0033:0x7fb678869e79 [ 55.277909][ T4915] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 55.297514][ T4915] RSP: 002b:00007fb6774e7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 55.305913][ T4915] RAX: ffffffffffffffda RBX: 00007fb678a05f80 RCX: 00007fb678869e79 [ 55.313871][ T4915] RDX: 00000000200000c0 RSI: 0000000020000080 RDI: 0000000000000000 [ 55.321941][ T4915] RBP: 00007fb6774e7090 R08: 0000000020000340 R09: 0000000000000000 [ 55.329976][ T4915] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 55.337933][ T4915] R13: 0000000000000000 R14: 00007fb678a05f80 R15: 00007ffd3a9a0a68 [ 55.345929][ T4915] [ 55.348931][ T4917] CPU: 1 UID: 0 PID: 4917 Comm: syz.0.264 Not tainted 6.11.0-rc3-syzkaller-00279-ge5fa841af679 #0 [ 55.359534][ T4917] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 55.369623][ T4917] Call Trace: [ 55.372885][ T4917] [ 55.375800][ T4917] dump_stack_lvl+0xf2/0x150 [ 55.380439][ T4917] dump_stack+0x15/0x20 [ 55.384605][ T4917] should_fail_ex+0x229/0x230 [ 55.389344][ T4917] ? alloc_inode+0x6a/0x160 [ 55.393836][ T4917] should_failslab+0x8f/0xb0 [ 55.398464][ T4917] kmem_cache_alloc_lru_noprof+0x51/0x2a0 [ 55.404174][ T4917] ? _raw_spin_unlock+0x26/0x50 [ 55.409009][ T4917] alloc_inode+0x6a/0x160 [ 55.413382][ T4917] new_inode_pseudo+0x15/0x20 [ 55.418210][ T4917] alloc_anon_inode+0x1e/0x170 [ 55.422967][ T4917] __anon_inode_getfile+0xb2/0x260 [ 55.428077][ T4917] anon_inode_create_getfile+0x3a/0x50 [ 55.433551][ T4917] io_uring_create+0x7e7/0x920 [ 55.438359][ T4917] __se_sys_io_uring_setup+0x1d2/0x1e0 [ 55.443814][ T4917] __x64_sys_io_uring_setup+0x31/0x40 [ 55.449179][ T4917] x64_sys_call+0x1f7e/0x2d60 [ 55.453891][ T4917] do_syscall_64+0xc9/0x1c0 [ 55.458386][ T4917] ? clear_bhb_loop+0x55/0xb0 [ 55.463079][ T4917] ? clear_bhb_loop+0x55/0xb0 [ 55.467792][ T4917] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 55.473677][ T4917] RIP: 0033:0x7f275b359e79 [ 55.478103][ T4917] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 55.497767][ T4917] RSP: 002b:00007f2759faffc8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 55.506169][ T4917] RAX: ffffffffffffffda RBX: 00007f275b4f6058 RCX: 00007f275b359e79 [ 55.514201][ T4917] RDX: 0000000020000140 RSI: 0000000020000780 RDI: 0000000000004172 [ 55.522158][ T4917] RBP: 0000000020000780 R08: 0000000000000000 R09: 0000000020000140 [ 55.530114][ T4917] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 55.538070][ T4917] R13: 0000000020000100 R14: 0000000000004172 R15: 0000000020000140 [ 55.546033][ T4917] [ 55.614016][ T4925] loop3: detected capacity change from 0 to 1024 [ 55.623840][ T4925] EXT4-fs: Ignoring removed orlov option [ 55.629516][ T4925] EXT4-fs: Ignoring removed nomblk_io_submit option [ 55.660718][ T29] audit: type=1400 audit(1723930620.870:464): avc: denied { tracepoint } for pid=4931 comm="syz.4.274" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 55.695951][ T4925] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 55.715251][ T29] audit: type=1400 audit(1723930620.930:465): avc: denied { rename } for pid=4924 comm="syz.3.272" name="file2" dev="loop3" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 55.739249][ T4933] netlink: 32 bytes leftover after parsing attributes in process `syz.4.274'. [ 55.745238][ T3919] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.762129][ T4933] batadv0: entered promiscuous mode [ 55.767842][ T4933] macsec1: entered promiscuous mode [ 55.785730][ T4933] batadv0: left promiscuous mode [ 55.879174][ T29] audit: type=1400 audit(1723930621.090:466): avc: denied { setopt } for pid=4956 comm="syz.4.276" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 55.898474][ T29] audit: type=1400 audit(1723930621.090:467): avc: denied { read } for pid=4956 comm="syz.4.276" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 55.924216][ T4945] netlink: 4076 bytes leftover after parsing attributes in process `syz.3.275'. [ 55.936162][ T4957] loop4: detected capacity change from 0 to 128 [ 55.992627][ T4972] netlink: 165 bytes leftover after parsing attributes in process `syz.4.278'. [ 56.070097][ T4985] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_bridge, syncid = 0, id = 0 [ 56.084280][ T29] audit: type=1400 audit(1723930621.290:468): avc: denied { getopt } for pid=4982 comm="syz.4.282" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 56.103524][ T29] audit: type=1400 audit(1723930621.290:469): avc: denied { bind } for pid=4982 comm="syz.4.282" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 56.105980][ T4993] FAULT_INJECTION: forcing a failure. [ 56.105980][ T4993] name failslab, interval 1, probability 0, space 0, times 0 [ 56.122707][ T29] audit: type=1400 audit(1723930621.290:470): avc: denied { listen } for pid=4982 comm="syz.4.282" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 56.122727][ T29] audit: type=1400 audit(1723930621.290:471): avc: denied { write } for pid=4982 comm="syz.4.282" path="socket:[9366]" dev="sockfs" ino=9366 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 56.135388][ T4993] CPU: 0 UID: 0 PID: 4993 Comm: syz.0.281 Not tainted 6.11.0-rc3-syzkaller-00279-ge5fa841af679 #0 [ 56.188207][ T4993] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 56.188218][ T4993] Call Trace: [ 56.188225][ T4993] [ 56.188231][ T4993] dump_stack_lvl+0xf2/0x150 [ 56.188259][ T4993] dump_stack+0x15/0x20 [ 56.188348][ T4993] should_fail_ex+0x229/0x230 [ 56.188372][ T4993] ? p9_client_prepare_req+0xf9/0x870 [ 56.188398][ T4993] should_failslab+0x8f/0xb0 [ 56.188498][ T4993] kmem_cache_alloc_noprof+0x4c/0x290 [ 56.188520][ T4993] p9_client_prepare_req+0xf9/0x870 [ 56.188545][ T4993] ? simple_strtol+0x63/0x70 [ 56.188614][ T4993] ? parse_opts+0x284/0x2c0 [ 56.188639][ T4993] ? kfree+0xd5/0x290 [ 56.188658][ T4993] p9_client_rpc+0xf0/0x710 [ 56.188676][ T4993] ? __pfx_p9_pollwait+0x10/0x10 [ 56.188728][ T4993] ? pipe_poll+0x237/0x260 [ 56.188747][ T4993] ? p9_client_create+0x65f/0xa80 [ 56.188766][ T4993] ? p9_conn_create+0x2fa/0x330 [ 56.188840][ T4993] p9_client_create+0x6d8/0xa80 [ 56.188863][ T4993] v9fs_session_init+0xf9/0xda0 [ 56.188940][ T4993] ? ___slab_alloc+0x2b7/0x980 [ 56.188965][ T4993] ? __rcu_read_unlock+0x4e/0x70 [ 56.188985][ T4993] ? v9fs_mount+0x53/0x560 [ 56.189066][ T4993] ? v9fs_mount+0x53/0x560 [ 56.189086][ T4993] v9fs_mount+0x69/0x560 [ 56.189104][ T4993] ? __pfx_v9fs_mount+0x10/0x10 [ 56.189126][ T4993] legacy_get_tree+0x77/0xd0 [ 56.189151][ T4993] vfs_get_tree+0x56/0x1d0 [ 56.189234][ T4993] do_new_mount+0x227/0x690 [ 56.189334][ T4993] path_mount+0x49b/0xb30 [ 56.189363][ T4993] __se_sys_mount+0x27c/0x2d0 [ 56.189393][ T4993] __x64_sys_mount+0x67/0x80 [ 56.189422][ T4993] x64_sys_call+0x203e/0x2d60 [ 56.189458][ T4993] do_syscall_64+0xc9/0x1c0 [ 56.189484][ T4993] ? clear_bhb_loop+0x55/0xb0 [ 56.189511][ T4993] ? clear_bhb_loop+0x55/0xb0 [ 56.189554][ T4993] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 56.189589][ T4993] RIP: 0033:0x7f275b359e79 [ 56.189603][ T4993] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 56.189699][ T4993] RSP: 002b:00007f2759fd1038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 56.189719][ T4993] RAX: ffffffffffffffda RBX: 00007f275b4f5f80 RCX: 00007f275b359e79 [ 56.189732][ T4993] RDX: 00000000200000c0 RSI: 0000000020000080 RDI: 0000000000000000 [ 56.189743][ T4993] RBP: 00007f2759fd1090 R08: 0000000020000340 R09: 0000000000000000 [ 56.189776][ T4993] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 56.189788][ T4993] R13: 0000000000000000 R14: 00007f275b4f5f80 R15: 00007ffdf2807e88 [ 56.189802][ T4993] [ 56.608261][ T5045] netlink: 96 bytes leftover after parsing attributes in process `syz.0.286'. [ 56.731020][ T5071] loop3: detected capacity change from 0 to 764 [ 56.778400][ T5076] netlink: 165 bytes leftover after parsing attributes in process `syz.1.291'. [ 56.827960][ T5078] loop1: detected capacity change from 0 to 256 [ 56.849867][ T5078] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 56.858521][ T5078] FAT-fs (loop1): Filesystem has been set read-only [ 56.969425][ T5101] loop1: detected capacity change from 0 to 512 [ 56.977312][ T5102] netlink: 4 bytes leftover after parsing attributes in process `syz.3.295'. [ 56.987065][ T5101] ext4: Unknown parameter 'hash' [ 57.002320][ T5104] capability: warning: `syz.0.301' uses 32-bit capabilities (legacy support in use) [ 57.012398][ T5102] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 57.021366][ T5102] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 57.024569][ T5104] loop0: detected capacity change from 0 to 512 [ 57.030066][ T5102] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 57.045332][ T5102] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 57.056271][ T5104] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 57.058824][ T5104] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 57.058891][ T5104] EXT4-fs (loop0): orphan cleanup on readonly fs [ 57.059048][ T5102] vxlan0: entered promiscuous mode [ 57.059371][ T5104] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.301: Invalid block bitmap block 0 in block_group 0 [ 57.075231][ T5110] netlink: 165 bytes leftover after parsing attributes in process `syz.4.303'. [ 57.101912][ T5104] EXT4-fs (loop0): Remounting filesystem read-only [ 57.122930][ T5104] EXT4-fs (loop0): 1 orphan inode deleted [ 57.142495][ T5104] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 57.155298][ T5104] SELinux: (dev loop0, type ext4) getxattr errno 5 [ 57.162370][ T5104] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.180214][ T5120] loop4: detected capacity change from 0 to 1024 [ 57.288395][ T5140] loop2: detected capacity change from 0 to 2048 [ 57.334308][ T5151] netlink: 165 bytes leftover after parsing attributes in process `syz.0.314'. [ 57.426890][ T5161] loop2: detected capacity change from 0 to 1024 [ 57.433620][ T5161] EXT4-fs: Ignoring removed nomblk_io_submit option [ 57.440702][ T5161] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 57.456442][ T5161] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 57.488687][ T5161] netlink: 'syz.2.319': attribute type 1 has an invalid length. [ 57.511090][ T4058] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.716169][ T5229] loop1: detected capacity change from 0 to 512 [ 57.810426][ T5229] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 57.830027][ T5238] loop3: detected capacity change from 0 to 512 [ 57.831990][ T5229] ext4 filesystem being mounted at /68/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 57.847259][ T5238] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 not in group (block 786450)! [ 57.857820][ T5238] EXT4-fs (loop3): group descriptors corrupted! [ 57.890154][ T5238] loop3: detected capacity change from 0 to 256 [ 57.903658][ T5238] vfat: Bad value for 'fmask' [ 57.926098][ T5247] 8021q: VLANs not supported on lo [ 57.989327][ T5255] loop0: detected capacity change from 0 to 512 [ 57.996573][ T5255] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 58.009032][ T5249] loop2: detected capacity change from 0 to 512 [ 58.016459][ T5229] loop1: detected capacity change from 512 to 11 [ 58.037315][ T5258] syz.0.346 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 58.047821][ T5256] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5810: Out of memory [ 58.052753][ T5249] EXT4-fs warning (device loop2): ext4_block_to_path:107: block 3279945729 > max in inode 13 [ 58.078350][ T5256] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #19: comm syz.1.334: mark_inode_dirty error [ 58.093439][ T5249] EXT4-fs warning (device loop2): ext4_block_to_path:107: block 3279945730 > max in inode 13 [ 58.125004][ T5249] EXT4-fs (loop2): 1 truncate cleaned up [ 58.141632][ T5249] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 58.186248][ T5265] loop0: detected capacity change from 0 to 128 [ 58.198880][ T5249] RDS: rds_bind could not find a transport for fc02::, load rds_tcp or rds_rdma? [ 58.222112][ T5265] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 58.243504][ T5256] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5810: Out of memory [ 58.264956][ T5256] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #19: comm syz.1.334: mark_inode_dirty error [ 58.276884][ T4058] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.277403][ T5265] ext4 filesystem being mounted at /70/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 58.389424][ T3261] EXT4-fs error (device loop0): ext4_readdir:220: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 1024 [ 58.398130][ T3421] hid-generic 0000:1000000:0000.0002: unknown main item tag 0x0 [ 58.411116][ T3421] hid-generic 0000:1000000:0000.0002: unknown main item tag 0x0 [ 58.413435][ T5256] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5810: Out of memory [ 58.418839][ T3421] hid-generic 0000:1000000:0000.0002: unknown main item tag 0x0 [ 58.435539][ T3421] hid-generic 0000:1000000:0000.0002: unknown main item tag 0x0 [ 58.443239][ T3421] hid-generic 0000:1000000:0000.0002: unknown main item tag 0x0 [ 58.450896][ T3421] hid-generic 0000:1000000:0000.0002: unknown main item tag 0x0 [ 58.458616][ T3421] hid-generic 0000:1000000:0000.0002: unknown main item tag 0x0 [ 58.466259][ T3421] hid-generic 0000:1000000:0000.0002: unknown main item tag 0x0 [ 58.473911][ T3421] hid-generic 0000:1000000:0000.0002: unknown main item tag 0x0 [ 58.481574][ T3421] hid-generic 0000:1000000:0000.0002: unknown main item tag 0x0 [ 58.489289][ T3421] hid-generic 0000:1000000:0000.0002: unknown main item tag 0x0 [ 58.496972][ T3421] hid-generic 0000:1000000:0000.0002: unknown main item tag 0x0 [ 58.504631][ T3421] hid-generic 0000:1000000:0000.0002: unknown main item tag 0x0 [ 58.512269][ T3421] hid-generic 0000:1000000:0000.0002: unknown main item tag 0x0 [ 58.519919][ T3421] hid-generic 0000:1000000:0000.0002: unknown main item tag 0x0 [ 58.527573][ T3421] hid-generic 0000:1000000:0000.0002: unknown main item tag 0x0 [ 58.536585][ T3421] hid-generic 0000:1000000:0000.0002: unknown main item tag 0x0 [ 58.544714][ T3421] hid-generic 0000:1000000:0000.0002: unknown main item tag 0x0 [ 58.552358][ T3421] hid-generic 0000:1000000:0000.0002: unknown main item tag 0x0 [ 58.560106][ T3421] hid-generic 0000:1000000:0000.0002: unknown main item tag 0x0 [ 58.567765][ T3421] hid-generic 0000:1000000:0000.0002: unknown main item tag 0x0 [ 58.575975][ T5256] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #19: comm syz.1.334: mark_inode_dirty error [ 58.583719][ T5274] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 58.589334][ T3261] EXT4-fs error (device loop0): ext4_readdir:220: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 8192 [ 58.623480][ T5274] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 58.627887][ T3261] EXT4-fs error (device loop0): ext4_empty_dir:3115: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 58.650892][ T3421] hid-generic 0000:1000000:0000.0002: hidraw0: HID v0.00 Device [syz0] on syz1 [ 58.662246][ T3261] EXT4-fs error (device loop0): ext4_readdir:220: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 1024 [ 58.677313][ T3261] EXT4-fs error (device loop0): ext4_readdir:220: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 8192 [ 58.707147][ T3261] EXT4-fs error (device loop0): ext4_empty_dir:3115: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 58.723640][ T5256] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5810: Out of memory [ 58.732992][ T3261] EXT4-fs error (device loop0): ext4_readdir:220: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 1024 [ 58.733344][ T5256] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #19: comm syz.1.334: mark_inode_dirty error [ 58.759307][ T3261] EXT4-fs error (device loop0): ext4_readdir:220: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 8192 [ 58.780164][ T3261] EXT4-fs error (device loop0): ext4_empty_dir:3115: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 58.793202][ T4593] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5810: Out of memory [ 58.813410][ T4593] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #19: comm kworker/u8:7: mark_inode_dirty error [ 58.814353][ T3261] EXT4-fs error (device loop0): ext4_readdir:220: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 1024 [ 58.866744][ T5290] netlink: 'syz.4.356': attribute type 9 has an invalid length. [ 58.877048][ T5290] netlink: 'syz.4.356': attribute type 9 has an invalid length. [ 58.884799][ T5290] netlink: 'syz.4.356': attribute type 9 has an invalid length. [ 58.892651][ T5290] netlink: 'syz.4.356': attribute type 9 has an invalid length. [ 58.900640][ T5290] netlink: 'syz.4.356': attribute type 9 has an invalid length. [ 58.923031][ T4593] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.923354][ T3261] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 58.944965][ T5290] netlink: 'syz.4.356': attribute type 9 has an invalid length. [ 58.952696][ T5290] netlink: 'syz.4.356': attribute type 9 has an invalid length. [ 58.967690][ T5292] loop3: detected capacity change from 0 to 4096 [ 58.973154][ T5290] netlink: 'syz.4.356': attribute type 9 has an invalid length. [ 58.982352][ T5290] netlink: 'syz.4.356': attribute type 9 has an invalid length. [ 58.993185][ T5292] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 59.010423][ T4593] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.048855][ T4593] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.105302][ T5316] loop4: detected capacity change from 0 to 2048 [ 59.112781][ T4593] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.135534][ T5316] loop4: p1 < > p4 [ 59.140039][ T5316] loop4: p4 size 8388608 extends beyond EOD, truncated [ 59.160904][ T5295] sit0 speed is unknown, defaulting to 1000 [ 59.201808][ T4593] bridge_slave_1: left allmulticast mode [ 59.207497][ T4593] bridge_slave_1: left promiscuous mode [ 59.213246][ T4593] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.220825][ T4593] bridge_slave_0: left allmulticast mode [ 59.226489][ T4593] bridge_slave_0: left promiscuous mode [ 59.232077][ T4593] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.263663][ T4447] udevd[4447]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 59.265479][ T4451] udevd[4451]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 59.366580][ T5303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.366720][ T4593] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 59.386205][ T4593] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 59.397771][ T4593] bond0 (unregistering): Released all slaves [ 59.528034][ T5336] loop4: detected capacity change from 0 to 2048 [ 59.540920][ T5336] EXT4-fs (loop4): bad geometry: block count 72057589742961152 exceeds size of device (512 blocks) [ 59.565566][ T4593] hsr_slave_0: left promiscuous mode [ 59.584077][ T4593] hsr_slave_1: left promiscuous mode [ 59.596680][ T5359] loop2: detected capacity change from 0 to 1024 [ 59.603129][ T4593] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 59.610581][ T4593] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 59.619235][ T5359] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 59.622883][ T4593] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 59.629059][ T5359] EXT4-fs (loop2): group descriptors corrupted! [ 59.636428][ T4593] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 59.656300][ T4593] veth1_macvtap: left promiscuous mode [ 59.661930][ T4593] veth0_macvtap: left promiscuous mode [ 59.667560][ T4593] veth1_vlan: left promiscuous mode [ 59.672791][ T4593] veth0_vlan: left promiscuous mode [ 59.725928][ T5367] loop4: detected capacity change from 0 to 512 [ 59.747206][ T5367] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #15: comm syz.4.367: casefold flag without casefold feature [ 59.763435][ T5367] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.367: couldn't read orphan inode 15 (err -117) [ 59.784329][ T29] kauditd_printk_skb: 178 callbacks suppressed [ 59.784341][ T29] audit: type=1400 audit(1723930625.000:648): avc: denied { read write } for pid=5379 comm="syz.2.374" name="rdma_cm" dev="devtmpfs" ino=226 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 59.808039][ T5367] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 59.827596][ T29] audit: type=1400 audit(1723930625.020:649): avc: denied { open } for pid=5379 comm="syz.2.374" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=226 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 59.856220][ T5295] chnl_net:caif_netlink_parms(): no params data found [ 59.886669][ T29] audit: type=1400 audit(1723930625.080:650): avc: denied { search } for pid=2943 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 59.941576][ T5393] FAULT_INJECTION: forcing a failure. [ 59.941576][ T5393] name failslab, interval 1, probability 0, space 0, times 0 [ 59.954261][ T5393] CPU: 1 UID: 0 PID: 5393 Comm: syz.2.375 Not tainted 6.11.0-rc3-syzkaller-00279-ge5fa841af679 #0 [ 59.964991][ T5393] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 59.975047][ T5393] Call Trace: [ 59.978328][ T5393] [ 59.981278][ T5393] dump_stack_lvl+0xf2/0x150 [ 59.985882][ T5393] dump_stack+0x15/0x20 [ 59.990047][ T5393] should_fail_ex+0x229/0x230 [ 59.994732][ T5393] ? p9pdu_readf+0xf53/0x1600 [ 59.999483][ T5393] should_failslab+0x8f/0xb0 [ 60.004110][ T5393] __kmalloc_noprof+0xa5/0x370 [ 60.008878][ T5393] p9pdu_readf+0xf53/0x1600 [ 60.013397][ T5393] ? __pfx_p9_pollwait+0x10/0x10 [ 60.018447][ T5393] ? pipe_poll+0x237/0x260 [ 60.022885][ T5393] ? p9_client_create+0x65f/0xa80 [ 60.027978][ T5393] ? p9_conn_create+0x2fa/0x330 [ 60.032817][ T5393] p9_client_create+0x722/0xa80 [ 60.037707][ T5393] v9fs_session_init+0xf9/0xda0 [ 60.042536][ T5393] ? __rcu_read_unlock+0x4e/0x70 [ 60.047451][ T5393] ? __rcu_read_unlock+0x4e/0x70 [ 60.053053][ T5393] ? v9fs_mount+0x53/0x560 [ 60.057523][ T5393] ? should_failslab+0x8f/0xb0 [ 60.062347][ T5393] v9fs_mount+0x69/0x560 [ 60.066578][ T5393] ? __pfx_v9fs_mount+0x10/0x10 [ 60.071445][ T5393] legacy_get_tree+0x77/0xd0 [ 60.076018][ T5393] vfs_get_tree+0x56/0x1d0 [ 60.080414][ T5393] do_new_mount+0x227/0x690 [ 60.084963][ T5393] path_mount+0x49b/0xb30 [ 60.089357][ T5393] __se_sys_mount+0x27c/0x2d0 [ 60.094040][ T5393] __x64_sys_mount+0x67/0x80 [ 60.098613][ T5393] x64_sys_call+0x203e/0x2d60 [ 60.103280][ T5393] do_syscall_64+0xc9/0x1c0 [ 60.107819][ T5393] ? clear_bhb_loop+0x55/0xb0 [ 60.112479][ T5393] ? clear_bhb_loop+0x55/0xb0 [ 60.117138][ T5393] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 60.123079][ T5393] RIP: 0033:0x7f2441579e79 [ 60.127486][ T5393] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 60.147097][ T5393] RSP: 002b:00007f24401f7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 60.155624][ T5393] RAX: ffffffffffffffda RBX: 00007f2441715f80 RCX: 00007f2441579e79 [ 60.163582][ T5393] RDX: 00000000200000c0 RSI: 0000000020000080 RDI: 0000000000000000 [ 60.171573][ T5393] RBP: 00007f24401f7090 R08: 0000000020000340 R09: 0000000000000000 [ 60.179528][ T5393] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 60.187477][ T5393] R13: 0000000000000000 R14: 00007f2441715f80 R15: 00007fffb0808338 [ 60.195519][ T5393] [ 60.209502][ T5295] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.216605][ T5295] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.225154][ T5295] bridge_slave_0: entered allmulticast mode [ 60.231503][ T5295] bridge_slave_0: entered promiscuous mode [ 60.238307][ T5329] sit0 speed is unknown, defaulting to 1000 [ 60.238495][ T5295] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.251278][ T5295] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.258524][ T5295] bridge_slave_1: entered allmulticast mode [ 60.265195][ T5295] bridge_slave_1: entered promiscuous mode [ 60.271304][ T5407] __nla_validate_parse: 41 callbacks suppressed [ 60.271316][ T5407] netlink: 16 bytes leftover after parsing attributes in process `syz.2.376'. [ 60.303668][ T5295] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.319181][ T5295] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.327503][ T5416] netlink: 216 bytes leftover after parsing attributes in process `syz.2.377'. [ 60.337746][ T4154] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.347407][ T5416] netlink: 8 bytes leftover after parsing attributes in process `syz.2.377'. [ 60.377513][ T5295] team0: Port device team_slave_0 added [ 60.381657][ T5419] loop4: detected capacity change from 0 to 136 [ 60.398486][ T5295] team0: Port device team_slave_1 added [ 60.413682][ T29] audit: type=1326 audit(1723930625.620:651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5415 comm="syz.2.377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2441579e79 code=0x7ffc0000 [ 60.437000][ T29] audit: type=1326 audit(1723930625.620:652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5415 comm="syz.2.377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=229 compat=0 ip=0x7f2441579e79 code=0x7ffc0000 [ 60.460527][ T29] audit: type=1326 audit(1723930625.620:653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5415 comm="syz.2.377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2441579e79 code=0x7ffc0000 [ 60.483926][ T29] audit: type=1326 audit(1723930625.620:654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5415 comm="syz.2.377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2441579e79 code=0x7ffc0000 [ 60.507453][ T29] audit: type=1326 audit(1723930625.670:655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5415 comm="syz.2.377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2441579e79 code=0x7ffc0000 [ 60.530749][ T29] audit: type=1326 audit(1723930625.670:656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5415 comm="syz.2.377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2441579e79 code=0x7ffc0000 [ 60.553979][ T29] audit: type=1326 audit(1723930625.700:657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5415 comm="syz.2.377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f2441579e79 code=0x7ffc0000 [ 60.588205][ T5429] netlink: 165 bytes leftover after parsing attributes in process `syz.2.380'. [ 60.610197][ T5295] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.617229][ T5295] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.643254][ T5295] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.666401][ T5295] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.673431][ T5295] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.699411][ T5295] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.753717][ T5450] FAULT_INJECTION: forcing a failure. [ 60.753717][ T5450] name failslab, interval 1, probability 0, space 0, times 0 [ 60.766398][ T5450] CPU: 0 UID: 0 PID: 5450 Comm: syz.4.384 Not tainted 6.11.0-rc3-syzkaller-00279-ge5fa841af679 #0 [ 60.777026][ T5450] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 60.787055][ T5450] Call Trace: [ 60.790313][ T5450] [ 60.793329][ T5450] dump_stack_lvl+0xf2/0x150 [ 60.797958][ T5450] dump_stack+0x15/0x20 [ 60.802096][ T5450] should_fail_ex+0x229/0x230 [ 60.806833][ T5450] ? __kmem_cache_create+0x171/0x5f0 [ 60.812119][ T5450] should_failslab+0x8f/0xb0 [ 60.816710][ T5450] kmem_cache_alloc_node_noprof+0x51/0x2b0 [ 60.822536][ T5450] __kmem_cache_create+0x171/0x5f0 [ 60.827692][ T5450] ? kmem_cache_alloc_noprof+0x10c/0x290 [ 60.833375][ T5450] kmem_cache_create_usercopy+0x150/0x2c0 [ 60.839119][ T5450] p9_client_create+0x81c/0xa80 [ 60.843955][ T5450] v9fs_session_init+0xf9/0xda0 [ 60.848791][ T5450] ? __schedule+0x5fa/0x950 [ 60.853272][ T5450] ? v9fs_mount+0x53/0x560 [ 60.857667][ T5450] ? should_failslab+0x8f/0xb0 [ 60.862477][ T5450] v9fs_mount+0x69/0x560 [ 60.866719][ T5450] ? __pfx_v9fs_mount+0x10/0x10 [ 60.871548][ T5450] legacy_get_tree+0x77/0xd0 [ 60.876135][ T5450] vfs_get_tree+0x56/0x1d0 [ 60.880604][ T5450] do_new_mount+0x227/0x690 [ 60.885092][ T5450] path_mount+0x49b/0xb30 [ 60.889412][ T5450] __se_sys_mount+0x27c/0x2d0 [ 60.894186][ T5450] __x64_sys_mount+0x67/0x80 [ 60.898814][ T5450] x64_sys_call+0x203e/0x2d60 [ 60.903501][ T5450] do_syscall_64+0xc9/0x1c0 [ 60.908043][ T5450] ? clear_bhb_loop+0x55/0xb0 [ 60.912785][ T5450] ? clear_bhb_loop+0x55/0xb0 [ 60.917522][ T5450] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 60.923418][ T5450] RIP: 0033:0x7fb678869e79 [ 60.927900][ T5450] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 60.947579][ T5450] RSP: 002b:00007fb6774e7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 60.955966][ T5450] RAX: ffffffffffffffda RBX: 00007fb678a05f80 RCX: 00007fb678869e79 [ 60.963961][ T5450] RDX: 00000000200000c0 RSI: 0000000020000080 RDI: 0000000000000000 [ 60.969997][ T5454] netlink: 16 bytes leftover after parsing attributes in process `syz.2.382'. [ 60.971914][ T5450] RBP: 00007fb6774e7090 R08: 0000000020000340 R09: 0000000000000000 [ 60.971929][ T5450] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 60.971939][ T5450] R13: 0000000000000000 R14: 00007fb678a05f80 R15: 00007ffd3a9a0a68 [ 60.971953][ T5450] [ 60.972228][ T5450] kmem_cache_create_usercopy(9p-fcall-cache) failed with error -22 [ 60.984416][ T5329] chnl_net:caif_netlink_parms(): no params data found [ 60.989190][ T5450] CPU: 0 UID: 0 PID: 5450 Comm: syz.4.384 Not tainted 6.11.0-rc3-syzkaller-00279-ge5fa841af679 #0 [ 61.033275][ T5450] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 61.043322][ T5450] Call Trace: [ 61.046588][ T5450] [ 61.049501][ T5450] dump_stack_lvl+0xf2/0x150 [ 61.054090][ T5450] dump_stack+0x15/0x20 [ 61.058248][ T5450] kmem_cache_create_usercopy+0x239/0x2c0 [ 61.063951][ T5450] p9_client_create+0x81c/0xa80 [ 61.068847][ T5450] v9fs_session_init+0xf9/0xda0 [ 61.073705][ T5450] ? __schedule+0x5fa/0x950 [ 61.078198][ T5450] ? v9fs_mount+0x53/0x560 [ 61.082674][ T5450] ? should_failslab+0x8f/0xb0 [ 61.087495][ T5450] v9fs_mount+0x69/0x560 [ 61.091807][ T5450] ? __pfx_v9fs_mount+0x10/0x10 [ 61.096636][ T5450] legacy_get_tree+0x77/0xd0 [ 61.101281][ T5450] vfs_get_tree+0x56/0x1d0 [ 61.105681][ T5450] do_new_mount+0x227/0x690 [ 61.110167][ T5450] path_mount+0x49b/0xb30 [ 61.114519][ T5450] __se_sys_mount+0x27c/0x2d0 [ 61.119256][ T5450] __x64_sys_mount+0x67/0x80 [ 61.123842][ T5450] x64_sys_call+0x203e/0x2d60 [ 61.128537][ T5450] do_syscall_64+0xc9/0x1c0 [ 61.133052][ T5450] ? clear_bhb_loop+0x55/0xb0 [ 61.137733][ T5450] ? clear_bhb_loop+0x55/0xb0 [ 61.142393][ T5450] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 61.148265][ T5450] RIP: 0033:0x7fb678869e79 [ 61.152654][ T5450] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 61.172307][ T5450] RSP: 002b:00007fb6774e7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 61.180770][ T5450] RAX: ffffffffffffffda RBX: 00007fb678a05f80 RCX: 00007fb678869e79 [ 61.188716][ T5450] RDX: 00000000200000c0 RSI: 0000000020000080 RDI: 0000000000000000 [ 61.196662][ T5450] RBP: 00007fb6774e7090 R08: 0000000020000340 R09: 0000000000000000 [ 61.204612][ T5450] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 61.212574][ T5450] R13: 0000000000000000 R14: 00007fb678a05f80 R15: 00007ffd3a9a0a68 [ 61.220581][ T5450] [ 61.231815][ T5295] hsr_slave_0: entered promiscuous mode [ 61.237752][ T5295] hsr_slave_1: entered promiscuous mode [ 61.271372][ T4593] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 61.281663][ T4593] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.295966][ T5457] block device autoloading is deprecated and will be removed. [ 61.310935][ T5457] loop4: detected capacity change from 0 to 128 [ 61.327073][ T5457] vfat: Unknown parameter 'ÿ01777777777777777777777' [ 61.350137][ T4593] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 61.360458][ T4593] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.371423][ T5329] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.378479][ T5329] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.385650][ T5329] bridge_slave_0: entered allmulticast mode [ 61.391932][ T5329] bridge_slave_0: entered promiscuous mode [ 61.398888][ T5329] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.405996][ T5329] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.413358][ T5329] bridge_slave_1: entered allmulticast mode [ 61.419949][ T5329] bridge_slave_1: entered promiscuous mode [ 61.425562][ T5465] loop4: detected capacity change from 0 to 512 [ 61.443783][ T5465] ext4: Unknown parameter 'fsname' [ 61.450249][ T5462] loop2: detected capacity change from 0 to 128 [ 61.461807][ T4593] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 61.472199][ T4593] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.500615][ T5462] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 61.516859][ T5462] ext4 filesystem being mounted at /57/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 61.534528][ T5329] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.549876][ T5462] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:406: inode #2: comm syz.2.386: No space for directory leaf checksum. Please run e2fsck -D. [ 61.565205][ T5462] EXT4-fs error (device loop2): __ext4_find_entry:1652: inode #2: comm syz.2.386: checksumming directory block 0 [ 61.579188][ T5462] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:406: inode #2: comm syz.2.386: No space for directory leaf checksum. Please run e2fsck -D. [ 61.579895][ T4593] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 61.594409][ T5462] EXT4-fs error (device loop2): __ext4_find_entry:1652: inode #2: comm syz.2.386: checksumming directory block 0 [ 61.604671][ T4593] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.631521][ T5462] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:406: inode #2: comm syz.2.386: No space for directory leaf checksum. Please run e2fsck -D. [ 61.646824][ T5462] EXT4-fs error (device loop2): __ext4_find_entry:1652: inode #2: comm syz.2.386: checksumming directory block 0 [ 61.659925][ T5462] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:406: inode #2: comm syz.2.386: No space for directory leaf checksum. Please run e2fsck -D. [ 61.664568][ T5329] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.675163][ T5462] EXT4-fs error (device loop2): __ext4_find_entry:1652: inode #2: comm syz.2.386: checksumming directory block 0 [ 61.703889][ T5485] netlink: 20 bytes leftover after parsing attributes in process `syz.4.388'. [ 61.716787][ T5462] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:406: inode #2: comm syz.2.386: No space for directory leaf checksum. Please run e2fsck -D. [ 61.723144][ T5473] loop4: detected capacity change from 0 to 132 [ 61.732004][ T5462] EXT4-fs error (device loop2): __ext4_find_entry:1652: inode #2: comm syz.2.386: checksumming directory block 0 [ 61.768354][ T5462] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:406: inode #2: comm syz.2.386: No space for directory leaf checksum. Please run e2fsck -D. [ 61.783685][ T5462] EXT4-fs error (device loop2): __ext4_find_entry:1652: inode #2: comm syz.2.386: checksumming directory block 0 [ 61.799339][ T5462] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:406: inode #2: comm syz.2.386: No space for directory leaf checksum. Please run e2fsck -D. [ 61.814609][ T5462] EXT4-fs error (device loop2): __ext4_find_entry:1652: inode #2: comm syz.2.386: checksumming directory block 0 [ 61.827663][ T5462] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:406: inode #2: comm syz.2.386: No space for directory leaf checksum. Please run e2fsck -D. [ 61.842927][ T5462] EXT4-fs error (device loop2): __ext4_find_entry:1652: inode #2: comm syz.2.386: checksumming directory block 0 [ 61.856448][ T5462] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:406: inode #2: comm syz.2.386: No space for directory leaf checksum. Please run e2fsck -D. [ 61.871692][ T5462] EXT4-fs error (device loop2): __ext4_find_entry:1652: inode #2: comm syz.2.386: checksumming directory block 0 [ 61.884098][ T5462] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:406: inode #2: comm syz.2.386: No space for directory leaf checksum. Please run e2fsck -D. [ 61.899372][ T5462] EXT4-fs error (device loop2): __ext4_find_entry:1652: inode #2: comm syz.2.386: checksumming directory block 0 [ 61.926698][ T5329] team0: Port device team_slave_0 added [ 61.937651][ T5329] team0: Port device team_slave_1 added [ 61.989651][ T5329] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.996888][ T5329] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.022867][ T5329] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.035405][ T5329] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.042349][ T5329] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.068374][ T5329] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.079634][ T4593] bridge_slave_1: left allmulticast mode [ 62.085304][ T4593] bridge_slave_1: left promiscuous mode [ 62.090918][ T4593] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.099740][ T4593] bridge_slave_0: left allmulticast mode [ 62.105444][ T4593] bridge_slave_0: left promiscuous mode [ 62.111052][ T4593] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.181561][ T4058] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 62.197035][ T4593] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 62.207763][ T4593] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 62.217980][ T4593] bond0 (unregistering): Released all slaves [ 62.259414][ T5329] hsr_slave_0: entered promiscuous mode [ 62.265499][ T5329] hsr_slave_1: entered promiscuous mode [ 62.271401][ T5329] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.278973][ T5329] Cannot create hsr debugfs directory [ 62.303857][ T5513] loop2: detected capacity change from 0 to 512 [ 62.327846][ T5513] loop2: detected capacity change from 0 to 2048 [ 62.347563][ T5513] EXT4-fs: Ignoring removed nomblk_io_submit option [ 62.376041][ T5513] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.391: bad orphan inode 8 [ 62.406590][ T5513] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 62.425120][ T5295] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 62.438838][ T4593] hsr_slave_0: left promiscuous mode [ 62.445313][ T4593] hsr_slave_1: left promiscuous mode [ 62.450790][ T5509] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.391: bg 0: block 2: invalid block bitmap [ 62.463560][ T4593] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 62.470954][ T4593] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 62.479782][ T4593] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 62.487579][ T4593] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 62.496614][ T4593] veth1_macvtap: left promiscuous mode [ 62.502115][ T4593] veth0_macvtap: left promiscuous mode [ 62.507625][ T4593] veth1_vlan: left promiscuous mode [ 62.512828][ T4593] veth0_vlan: left promiscuous mode [ 62.582732][ T4593] team0 (unregistering): Port device team_slave_1 removed [ 62.592714][ T4593] team0 (unregistering): Port device team_slave_0 removed [ 62.629319][ T5295] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 62.639233][ T5295] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 62.647830][ T5295] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 62.685519][ T5295] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.702294][ T4058] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.717465][ T5295] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.732341][ T28] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.739508][ T28] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.752598][ T1696] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.759759][ T1696] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.811954][ T5549] FAULT_INJECTION: forcing a failure. [ 62.811954][ T5549] name failslab, interval 1, probability 0, space 0, times 0 [ 62.824675][ T5549] CPU: 0 UID: 0 PID: 5549 Comm: syz.2.394 Not tainted 6.11.0-rc3-syzkaller-00279-ge5fa841af679 #0 [ 62.835257][ T5549] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 62.844977][ T5295] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.845367][ T5549] Call Trace: [ 62.845375][ T5549] [ 62.845381][ T5549] dump_stack_lvl+0xf2/0x150 [ 62.862878][ T5549] dump_stack+0x15/0x20 [ 62.867039][ T5549] should_fail_ex+0x229/0x230 [ 62.871725][ T5549] ? __kernfs_new_node+0x6a/0x380 [ 62.876833][ T5549] should_failslab+0x8f/0xb0 [ 62.881458][ T5549] kmem_cache_alloc_noprof+0x4c/0x290 [ 62.886838][ T5549] __kernfs_new_node+0x6a/0x380 [ 62.891774][ T5549] ? _find_next_bit+0xd8/0xe0 [ 62.896447][ T5549] ? pcpu_block_refresh_hint+0x169/0x180 [ 62.902118][ T5549] kernfs_create_dir_ns+0xc8/0x1b0 [ 62.907291][ T5549] sysfs_create_dir_ns+0xd7/0x1e0 [ 62.912324][ T5549] kobject_add_internal+0x49e/0x7a0 [ 62.917534][ T5549] kobject_init_and_add+0x15e/0x210 [ 62.922806][ T5549] ? kernfs_find_ns+0x2b0/0x2e0 [ 62.927665][ T5549] ? up_write+0x30/0xf0 [ 62.931885][ T5549] ? kernfs_remove_by_name_ns+0xc8/0xf0 [ 62.937444][ T5549] sysfs_slab_add+0x7a/0x290 [ 62.942055][ T5549] __kmem_cache_create+0x45e/0x5f0 [ 62.947181][ T5549] ? kmem_cache_alloc_noprof+0x10c/0x290 [ 62.952886][ T5549] kmem_cache_create_usercopy+0x150/0x2c0 [ 62.958610][ T5549] p9_client_create+0x81c/0xa80 [ 62.963453][ T5549] v9fs_session_init+0xf9/0xda0 [ 62.968298][ T5549] ? __rcu_read_unlock+0x4e/0x70 [ 62.973233][ T5549] ? __rcu_read_unlock+0x4e/0x70 [ 62.978161][ T5549] ? v9fs_mount+0x53/0x560 [ 62.982645][ T5549] ? should_failslab+0x8f/0xb0 [ 62.987442][ T5549] v9fs_mount+0x69/0x560 [ 62.991728][ T5549] ? __pfx_v9fs_mount+0x10/0x10 [ 62.996805][ T5549] legacy_get_tree+0x77/0xd0 [ 63.001396][ T5549] vfs_get_tree+0x56/0x1d0 [ 63.005821][ T5549] do_new_mount+0x227/0x690 [ 63.010324][ T5549] path_mount+0x49b/0xb30 [ 63.014654][ T5549] __se_sys_mount+0x27c/0x2d0 [ 63.019382][ T5549] __x64_sys_mount+0x67/0x80 [ 63.023994][ T5549] x64_sys_call+0x203e/0x2d60 [ 63.028687][ T5549] do_syscall_64+0xc9/0x1c0 [ 63.033408][ T5549] ? clear_bhb_loop+0x55/0xb0 [ 63.038565][ T5549] ? clear_bhb_loop+0x55/0xb0 [ 63.043416][ T5549] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 63.049308][ T5549] RIP: 0033:0x7f2441579e79 [ 63.053707][ T5549] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 63.073338][ T5549] RSP: 002b:00007f24401f7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 63.081800][ T5549] RAX: ffffffffffffffda RBX: 00007f2441715f80 RCX: 00007f2441579e79 [ 63.089829][ T5549] RDX: 00000000200000c0 RSI: 0000000020000080 RDI: 0000000000000000 [ 63.097790][ T5549] RBP: 00007f24401f7090 R08: 0000000020000340 R09: 0000000000000000 [ 63.105747][ T5549] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 63.113702][ T5549] R13: 0000000000000000 R14: 00007f2441715f80 R15: 00007fffb0808338 [ 63.121664][ T5549] [ 63.124875][ T5549] kobject: kobject_add_internal failed for 9p-fcall-cache (error: -12 parent: slab) [ 63.134634][ T5549] kmem_cache_create_usercopy(9p-fcall-cache) failed with error -12 [ 63.142522][ T5549] CPU: 0 UID: 0 PID: 5549 Comm: syz.2.394 Not tainted 6.11.0-rc3-syzkaller-00279-ge5fa841af679 #0 [ 63.153106][ T5549] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 63.163177][ T5549] Call Trace: [ 63.166453][ T5549] [ 63.169375][ T5549] dump_stack_lvl+0xf2/0x150 [ 63.174079][ T5549] dump_stack+0x15/0x20 [ 63.178245][ T5549] kmem_cache_create_usercopy+0x239/0x2c0 [ 63.179855][ T5295] veth0_vlan: entered promiscuous mode [ 63.183974][ T5549] p9_client_create+0x81c/0xa80 [ 63.184001][ T5549] v9fs_session_init+0xf9/0xda0 [ 63.193433][ T5256] EXT4-fs error: 70 callbacks suppressed [ 63.193445][ T5256] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5810: Out of memory [ 63.194244][ T5549] ? __rcu_read_unlock+0x4e/0x70 [ 63.202497][ T5232] kmmpd-loop1: attempt to access beyond end of device [ 63.202497][ T5232] loop1: rw=14337, sector=48, nr_sectors = 4 limit=11 [ 63.204662][ T5549] ? __rcu_read_unlock+0x4e/0x70 [ 63.204684][ T5549] ? v9fs_mount+0x53/0x560 [ 63.213615][ T5232] Buffer I/O error on dev loop1, logical block 12, lost sync page write [ 63.233171][ T5256] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #19: comm syz.1.334: mark_inode_dirty error [ 63.236878][ T5549] ? should_failslab+0x8f/0xb0 [ 63.236909][ T5549] v9fs_mount+0x69/0x560 [ 63.251431][ T5232] EXT4-fs error (device loop1): kmmpd:186: comm kmmpd-loop1: Error writing to MMP block [ 63.260698][ T5549] ? __pfx_v9fs_mount+0x10/0x10 [ 63.260724][ T5549] legacy_get_tree+0x77/0xd0 [ 63.273631][ T5295] veth1_vlan: entered promiscuous mode [ 63.279361][ T5549] vfs_get_tree+0x56/0x1d0 [ 63.298753][ T5549] do_new_mount+0x227/0x690 [ 63.303267][ T5549] path_mount+0x49b/0xb30 [ 63.307599][ T5549] __se_sys_mount+0x27c/0x2d0 [ 63.312315][ T5549] __x64_sys_mount+0x67/0x80 [ 63.316947][ T5549] x64_sys_call+0x203e/0x2d60 [ 63.321630][ T5549] do_syscall_64+0xc9/0x1c0 [ 63.325048][ T5295] veth0_macvtap: entered promiscuous mode [ 63.326132][ T5549] ? clear_bhb_loop+0x55/0xb0 [ 63.336340][ T5295] veth1_macvtap: entered promiscuous mode [ 63.336522][ T5549] ? clear_bhb_loop+0x55/0xb0 [ 63.346963][ T5549] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 63.352877][ T5549] RIP: 0033:0x7f2441579e79 [ 63.357289][ T5549] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 63.358762][ T5295] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.376902][ T5549] RSP: 002b:00007f24401f7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 63.376922][ T5549] RAX: ffffffffffffffda RBX: 00007f2441715f80 RCX: 00007f2441579e79 [ 63.376935][ T5549] RDX: 00000000200000c0 RSI: 0000000020000080 RDI: 0000000000000000 [ 63.376946][ T5549] RBP: 00007f24401f7090 R08: 0000000020000340 R09: 0000000000000000 [ 63.376958][ T5549] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 63.376971][ T5549] R13: 0000000000000000 R14: 00007f2441715f80 R15: 00007fffb0808338 [ 63.387378][ T5295] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.387387][ T5295] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.387398][ T5295] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.387406][ T5295] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.395782][ T5549] [ 63.403376][ T5256] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5810: Out of memory [ 63.403799][ T5295] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.422966][ T5256] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #19: comm syz.1.334: mark_inode_dirty error [ 63.506543][ T5295] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.518250][ T5295] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.528841][ T5295] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.538750][ T5295] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.549182][ T5295] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.559044][ T5295] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.569496][ T5295] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.584198][ T5295] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.607763][ T5295] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.616524][ T5295] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.625291][ T5295] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.634080][ T5295] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.693486][ T5256] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5810: Out of memory [ 63.702893][ T5256] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #19: comm syz.1.334: mark_inode_dirty error [ 63.837193][ T5329] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 63.885387][ T5329] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 63.895268][ T63] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5810: Out of memory [ 63.905316][ T63] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #19: comm kworker/u8:4: mark_inode_dirty error [ 63.918067][ T5329] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 63.948078][ T5329] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 63.975548][ T5256] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5810: Out of memory [ 64.028055][ T5329] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.044555][ T5329] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.061618][ T28] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.068717][ T28] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.095078][ T28] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.102147][ T28] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.159899][ T5329] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 64.206849][ T5633] 9pnet_fd: Insufficient options for proto=fd [ 64.233834][ T5632] sit0 speed is unknown, defaulting to 1000 [ 64.244485][ T5639] validate_nla: 25 callbacks suppressed [ 64.244498][ T5639] netlink: 'syz.0.403': attribute type 32 has an invalid length. [ 64.257793][ T5639] netlink: 8 bytes leftover after parsing attributes in process `syz.0.403'. [ 64.269141][ T5639] (unnamed net_device) (uninitialized): Setting coupled_control to off (0) [ 64.309252][ T5639] loop0: detected capacity change from 0 to 1024 [ 64.318511][ T5639] EXT4-fs: Ignoring removed nomblk_io_submit option [ 64.323635][ T5329] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.332382][ T5639] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 64.372983][ T5639] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 64.385008][ T5639] System zones: 0-1, 3-36 [ 64.400757][ T5639] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 64.449248][ T5329] veth0_vlan: entered promiscuous mode [ 64.458703][ T5329] veth1_vlan: entered promiscuous mode [ 64.487345][ T5329] veth0_macvtap: entered promiscuous mode [ 64.494820][ T5329] veth1_macvtap: entered promiscuous mode [ 64.508738][ T5329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.519271][ T5329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.529105][ T5329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.539586][ T5329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.549477][ T5329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.559927][ T5329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.569746][ T5329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.580225][ T5329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.595400][ T5329] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.607557][ T5329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.618100][ T5329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.627908][ T5329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.638388][ T5329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.648240][ T5329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.658679][ T5329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.668571][ T5329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.679105][ T5329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.689371][ T5295] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.691340][ T5329] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.714226][ T5329] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.723010][ T5329] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.731914][ T5329] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.740621][ T5329] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.787424][ T5687] loop0: detected capacity change from 0 to 1024 [ 64.789093][ T5689] loop2: detected capacity change from 0 to 512 [ 64.795320][ T5687] EXT4-fs: Ignoring removed oldalloc option [ 64.827080][ T5687] EXT4-fs (loop0): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 64.837874][ T5689] EXT4-fs (loop2): orphan cleanup on readonly fs [ 64.844433][ T5689] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2240: inode #15: comm syz.2.408: corrupted in-inode xattr: bad e_name length [ 64.848570][ T5687] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 64.871586][ T5689] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.408: couldn't read orphan inode 15 (err -117) [ 64.886136][ T5687] netlink: 48 bytes leftover after parsing attributes in process `syz.0.407'. [ 64.898771][ T5689] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 64.914614][ T5687] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 65.051963][ T5721] loop0: detected capacity change from 0 to 256 [ 65.063927][ T5721] netlink: 4 bytes leftover after parsing attributes in process `syz.0.412'. [ 65.106607][ T5733] netlink: 20 bytes leftover after parsing attributes in process `syz.3.414'. [ 65.119499][ T5735] loop2: detected capacity change from 0 to 512 [ 65.136831][ T5737] vlan2: entered promiscuous mode [ 65.137008][ T5735] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 65.141892][ T5737] erspan0: entered promiscuous mode [ 65.156978][ T5737] erspan0: left promiscuous mode [ 65.169942][ T5735] EXT4-fs (loop2): 1 truncate cleaned up [ 65.190385][ T4058] EXT4-fs unmount: 3 callbacks suppressed [ 65.190437][ T4058] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.205278][ T29] kauditd_printk_skb: 14 callbacks suppressed [ 65.205289][ T29] audit: type=1400 audit(1723930630.410:672): avc: denied { read } for pid=5741 comm="syz.0.418" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 65.234239][ T29] audit: type=1400 audit(1723930630.410:673): avc: denied { open } for pid=5741 comm="syz.0.418" path="/dev/nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 65.269947][ T5747] loop0: detected capacity change from 0 to 256 [ 65.291331][ T29] audit: type=1400 audit(1723930630.500:674): avc: denied { setcurrent } for pid=5746 comm="syz.0.419" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 65.317677][ T5756] loop3: detected capacity change from 0 to 512 [ 65.347525][ T29] audit: type=1400 audit(1723930630.550:675): avc: denied { listen } for pid=5753 comm="syz.3.420" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 65.399193][ T5752] loop2: detected capacity change from 0 to 256 [ 65.508461][ T5788] loop2: detected capacity change from 0 to 512 [ 65.512375][ T5785] __nla_validate_parse: 2 callbacks suppressed [ 65.512387][ T5785] netlink: 68 bytes leftover after parsing attributes in process `syz.3.428'. [ 65.527421][ T5788] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 65.545067][ T5788] EXT4-fs (loop2): 1 truncate cleaned up [ 65.551130][ T5788] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 65.580009][ T4058] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.615230][ T4447] ================================================================== [ 65.623325][ T4447] BUG: KCSAN: data-race in generic_fillattr / inode_set_ctime_current [ 65.624709][ T5794] loop2: detected capacity change from 0 to 1024 [ 65.631472][ T4447] [ 65.631479][ T4447] write to 0xffff888102f1db20 of 4 bytes by task 4451 on cpu 1: [ 65.631495][ T4447] inode_set_ctime_current+0x35/0x50 [ 65.652979][ T4447] shmem_mknod+0x117/0x180 [ 65.657380][ T4447] shmem_create+0x34/0x40 [ 65.661703][ T4447] path_openat+0xdbc/0x1f10 [ 65.666196][ T4447] do_filp_open+0xf7/0x200 [ 65.670604][ T4447] do_sys_openat2+0xab/0x120 [ 65.675183][ T4447] __x64_sys_openat+0xf3/0x120 [ 65.679943][ T4447] x64_sys_call+0x1025/0x2d60 [ 65.684621][ T4447] do_syscall_64+0xc9/0x1c0 [ 65.689120][ T4447] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 65.695004][ T4447] [ 65.697328][ T4447] read to 0xffff888102f1db20 of 4 bytes by task 4447 on cpu 0: [ 65.704859][ T4447] generic_fillattr+0x1dd/0x2f0 [ 65.709696][ T4447] shmem_getattr+0x17b/0x200 [ 65.714276][ T4447] vfs_getattr+0x19b/0x1e0 [ 65.718679][ T4447] vfs_statx+0x134/0x2f0 [ 65.722908][ T4447] vfs_fstatat+0xec/0x110 [ 65.727263][ T4447] __se_sys_newfstatat+0x58/0x260 [ 65.732282][ T4447] __x64_sys_newfstatat+0x55/0x70 [ 65.737296][ T4447] x64_sys_call+0x141f/0x2d60 [ 65.741964][ T4447] do_syscall_64+0xc9/0x1c0 [ 65.746463][ T4447] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 65.752347][ T4447] [ 65.754651][ T4447] value changed: 0x2e82e662 -> 0x317dd6e1 [ 65.760356][ T4447] [ 65.762659][ T4447] Reported by Kernel Concurrency Sanitizer on: [ 65.768790][ T4447] CPU: 0 UID: 0 PID: 4447 Comm: udevd Not tainted 6.11.0-rc3-syzkaller-00279-ge5fa841af679 #0 [ 65.779015][ T4447] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 65.789054][ T4447] ================================================================== [ 65.806819][ T5794] EXT4-fs: Ignoring removed nobh option [ 65.824854][ T5794] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 65.867325][ T4058] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.213368][ T5232] kmmpd-loop1: attempt to access beyond end of device [ 68.213368][ T5232] loop1: rw=14337, sector=48, nr_sectors = 4 limit=11 [ 68.226792][ T5232] Buffer I/O error on dev loop1, logical block 12, lost sync page write [ 68.233369][ T5256] EXT4-fs error: 73 callbacks suppressed [ 68.233381][ T5256] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5810: Out of memory [ 68.249902][ T5256] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #19: comm syz.1.334: mark_inode_dirty error [ 68.363359][ T5256] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5810: Out of memory [ 68.372536][ T5256] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #19: comm syz.1.334: mark_inode_dirty error [ 68.493430][ T5256] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5810: Out of memory [ 68.503374][ T5256] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #19: comm syz.1.334: mark_inode_dirty error [ 68.623687][ T5256] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5810: Out of memory [ 68.632828][ T5256] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #19: comm syz.1.334: mark_inode_dirty error [ 68.763385][ T5256] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5810: Out of memory [ 68.772473][ T5256] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #19: comm syz.1.334: mark_inode_dirty error [ 73.254173][ T5232] kmmpd-loop1: attempt to access beyond end of device [ 73.254173][ T5232] loop1: rw=14337, sector=48, nr_sectors = 4 limit=11 [ 73.254508][ T5256] EXT4-fs error: 80 callbacks suppressed [ 73.254585][ T5256] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5810: Out of memory [ 73.267916][ T5232] Buffer I/O error on dev loop1, logical block 12, lost sync page write [ 73.274394][ T5256] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #19: comm syz.1.334: mark_inode_dirty error [ 73.403751][ T5256] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5810: Out of memory [ 73.412867][ T5256] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #19: comm syz.1.334: mark_inode_dirty error [ 73.533364][ T5256] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5810: Out of memory [ 73.542485][ T5256] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #19: comm syz.1.334: mark_inode_dirty error [ 73.673360][ T5256] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5810: Out of memory [ 73.682591][ T5256] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #19: comm syz.1.334: mark_inode_dirty error [ 73.803386][ T5256] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5810: Out of memory [ 73.812540][ T5256] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #19: comm syz.1.334: mark_inode_dirty error